sdd-mcp-server 5.3.0 → 5.5.0

package/dist/application/services/JevReviewCheck.js

@@ -0,0 +1,120 @@
+import { createHash } from 'node:crypto';
+import { buildExcerpts } from './JevCodeExcerpts.js';
+import { buildPrincipleQuestions, buildSecurityQuestions, QUESTION_SET_VERSION } from './JevQuestionCatalog.js';
+import { flagSecurity, violatedPrinciples } from './JevReport.js';
+import { skippedResult } from './JevResults.js';
+import { fitState } from './JevSpecState.js';
+import { redactThenClip } from './JevRedaction.js';
+const TEXT_LIMIT = 1000;
+function clip(value, limit, counts) {
+    const result = redactThenClip(value, limit);
+    counts.n += result.count;
+    return result.text;
+}
+const sha256 = (value) => createHash('sha256').update(value).digest('hex');
+/** Hash of the findings or units the caller supplied, in caller order. */
+export function inputHash(request) {
+    return sha256(JSON.stringify((request.check === 'principles' ? request.units : request.findings) ?? []));
+}
+/**
+ * B1 security triage and B2 principle adherence. Runs in the parent only, after the audit or
+ * review returned, and judges findings and units that already exist; it never adds any.
+ */
+export class JevReviewCheck {
+    exchange;
+    constructor(exchange) {
+        this.exchange = exchange;
+    }
+    /**
+     * The caller supplies how to build the manifest, so a working-tree review and a range review share
+     * this path, and git is not touched at all when there is nothing to judge.
+     */
+    async run(request, context, manifestOf) {
+        const security = request.check === 'security';
+        const inputs = (security ? request.findings : request.units) ?? [];
+        if (inputs.length === 0)
+            return skippedResult(request.check, 'not-ready');
+        const manifest = await manifestOf();
+        if (manifest.status === 'invalid-base-ref')
+            return skippedResult(request.check, 'invalid-base-ref');
+        if (manifest.status === 'empty')
+            return skippedResult(request.check, 'no-changes');
+        const excerpts = await buildExcerpts(request.projectRoot, inputs.map(({ id, path, line }) => ({ id, path, line })));
+        const excerptOf = new Map(excerpts.items.map((entry) => [entry.id, entry]));
+        const counts = { n: 0 };
+        const items = security
+            ? inputs.map((entry) => this.findingItem(entry, excerptOf.get(entry.id), counts))
+            : inputs.map((entry) => this.unitItem(entry, excerptOf.get(entry.id), counts));
+        const fit = fitState(security ? 'security' : 'principles', items, undefined);
+        if (fit.keptIds.length === 0)
+            return skippedResult(request.check, 'not-ready');
+        const kept = inputs.filter(({ id }) => fit.keptIds.includes(id));
+        const plan = {
+            check: request.check,
+            kind: security ? 'security' : 'principles',
+            binding: {
+                questionSetVersion: QUESTION_SET_VERSION,
+                inputSha256: inputHash(request),
+                ...(manifest.status === 'ok' && { diffSha256: manifest.diffSha256 }),
+                ...(manifest.status === 'ok' && manifest.range),
+            },
+            unbound: manifest.status !== 'ok',
+            baseCommit: manifest.status === 'ok' ? manifest.baseCommit : undefined,
+            state: fit.state,
+            questions: security ? buildSecurityQuestions(fit.keptIds) : buildPrincipleQuestions(fit.keptIds),
+            omittedIds: fit.omittedIds,
+            truncated: fit.truncated,
+            redactions: excerpts.redactions + fit.redactions + counts.n,
+            droppedFindingIds: excerpts.droppedFindingIds,
+            interpret: (answers) => {
+                const located = kept.map(({ id, path, line }) => ({ id, location: `${path}:${line}` }));
+                const locationOf = new Map(located.map(({ id, location }) => [id, location]));
+                const excerptHash = (id) => excerptOf.get(id)?.excerptSha256 ?? null;
+                if (security) {
+                    const { flagged, items: triaged } = flagSecurity(answers, kept.map(({ id, severity }) => ({ id, modelSeverity: severity })));
+                    return {
+                        flagged,
+                        details: triaged.map((item) => ({
+                            id: item.id,
+                            flagged: flagged.includes(item.id),
+                            location: locationOf.get(item.id),
+                            note: `JEV ${item.jevSeverity} vs model ${item.modelSeverity}${item.disagreement ? ' (disagreement)' : ''}; ${item.classification}`,
+                        })),
+                        items: triaged.map((item) => ({
+                            id: item.id,
+                            location: locationOf.get(item.id),
+                            excerptSha256: excerptHash(item.id),
+                            modelSeverity: item.modelSeverity,
+                            jevSeverity: item.jevSeverity,
+                            disagreement: item.disagreement,
+                            classification: item.classification,
+                        })),
+                    };
+                }
+                const violations = violatedPrinciples(answers, located);
+                return {
+                    flagged: [...new Set(violations.map(({ unitId }) => unitId))],
+                    details: violations.map(({ unitId, principle, location }) => ({ id: unitId, flagged: true, principle, location })),
+                    items: located.map(({ id, location }) => ({ id, location, excerptSha256: excerptHash(id) })),
+                };
+            },
+        };
+        return this.exchange.run(plan, context);
+    }
+    findingItem(entry, excerpt, counts) {
+        return {
+            id: entry.id,
+            location: `${entry.path}:${entry.line}`,
+            title: clip(entry.title, 300, counts),
+            severity: entry.severity,
+            description: clip(entry.description, TEXT_LIMIT, counts),
+            preconditions: clip(entry.preconditions, TEXT_LIMIT, counts),
+            remediation: clip(entry.remediation, TEXT_LIMIT, counts),
+            excerpt: excerpt?.excerpt ?? null,
+        };
+    }
+    unitItem(entry, excerpt, counts) {
+        return { id: entry.id, location: `${entry.path}:${entry.line}`, summary: clip(entry.summary, 500, counts), excerpt: excerpt?.excerpt ?? null };
+    }
+}
+//# sourceMappingURL=JevReviewCheck.js.map

package/dist/application/services/JevReviewCheck.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"JevReviewCheck.js","sourceRoot":"","sources":["../../../src/application/services/JevReviewCheck.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,aAAa,EAAsB,MAAM,sBAAsB,CAAC;AAEzE,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAChH,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD,MAAM,UAAU,GAAG,IAAI,CAAC;AACxB,SAAS,IAAI,CAAC,KAAyB,EAAE,KAAa,EAAE,MAAqB;IAC3E,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC5C,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC;IACzB,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AACD,MAAM,MAAM,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAE3F,0EAA0E;AAC1E,MAAM,UAAU,SAAS,CAAC,OAAwB;IAChD,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AAC3G,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,cAAc;IACI;IAA7B,YAA6B,QAAqB;QAArB,aAAQ,GAAR,QAAQ,CAAa;IAAG,CAAC;IAEtD;;;OAGG;IACH,KAAK,CAAC,GAAG,CAAC,OAAwB,EAAE,OAAwB,EAAE,UAAwC;QACpG,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,KAAK,UAAU,CAAC;QAC9C,MAAM,MAAM,GAAkD,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAClH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC1E,MAAM,QAAQ,GAAG,MAAM,UAAU,EAAE,CAAC;QACpC,IAAI,QAAQ,CAAC,MAAM,KAAK,kBAAkB;YAAE,OAAO,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;QACpG,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO;YAAE,OAAO,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QAEnF,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACpH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,QAAQ;YACpB,CAAC,CAAE,MAA4B,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;YACxG,CAAC,CAAE,MAAyB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACrG,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QAC7E,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAE/E,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QACjE,MAAM,IAAI,GAAiB;YACzB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY;YAC1C,OAAO,EAAE;gBACP,kBAAkB,EAAE,oBAAoB;gBACxC,WAAW,EAAE,SAAS,CAAC,OAAO,CAAC;gBAC/B,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,IAAI,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;gBACpE,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC;aAChD;YACD,OAAO,EAAE,QAAQ,CAAC,MAAM,KAAK,IAAI;YACjC,UAAU,EAAE,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;YACtE,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,GAAG,CAAC,OAAO,CAAC;YAChG,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,UAAU,EAAE,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC,CAAC;YAC3D,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;YAC7C,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE;gBACrB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;gBACxF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAC9E,MAAM,WAAW,GAAG,CAAC,EAAU,EAAiB,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,aAAa,IAAI,IAAI,CAAC;gBAC5F,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,YAAY,CAC9C,OAAO,EACN,IAA0B,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC,CACzF,CAAC;oBACF,OAAO;wBACL,OAAO;wBACP,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;4BAC9B,EAAE,EAAE,IAAI,CAAC,EAAE;4BACX,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;4BAClC,QAAQ,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;4BACjC,IAAI,EAAE,OAAO,IAAI,CAAC,WAAW,aAAa,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,cAAc,EAAE;yBACpI,CAAC,CAAC;wBACH,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;4BAC5B,EAAE,EAAE,IAAI,CAAC,EAAE;4BACX,QAAQ,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;4BACjC,aAAa,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;4BACnC,aAAa,EAAE,IAAI,CAAC,aAAa;4BACjC,WAAW,EAAE,IAAI,CAAC,WAAW;4BAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;4BAC/B,cAAc,EAAE,IAAI,CAAC,cAAc;yBACpC,CAAC,CAAC;qBACJ,CAAC;gBACJ,CAAC;gBACD,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACxD,OAAO;oBACL,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;oBAC7D,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;oBAClH,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;iBAC7F,CAAC;YACJ,CAAC;SACF,CAAC;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IAEO,WAAW,CAAC,KAAsB,EAAE,OAAkC,EAAE,MAAqB;QACnG,OAAO;YACL,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,QAAQ,EAAE,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE;YACvC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC;YACrC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC;YACxD,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,UAAU,EAAE,MAAM,CAAC;YAC5D,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC;YACxD,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,IAAI;SAClC,CAAC;IACJ,CAAC;IAEO,QAAQ,CAAC,KAAmB,EAAE,OAAkC,EAAE,MAAqB;QAC7F,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,IAAI,EAAE,CAAC;IACjJ,CAAC;CAEF"}

package/dist/application/services/JevSettings.d.ts

@@ -0,0 +1,18 @@
+import type { FileSystemPort } from '../../domain/ports.js';
+export declare const DEFAULT_JEV_TIMEOUT_MS = 5000;
+export interface JevSettings {
+    readonly enabled: boolean;
+    readonly hasKey: boolean;
+    readonly allowCode: boolean;
+    readonly timeoutMs: number;
+    /** The only accessor for the key; used solely at the HTTP call site. */
+    apiKey(): string | undefined;
+}
+type Env = Readonly<Record<string, string | undefined>>;
+export declare function resolveJevSettings(env: Env, projectSetting: boolean | undefined): JevSettings;
+/**
+ * Reads `.spec/sdd-config.json` once, read-only. Any problem means "no project setting".
+ * With a port, only `exists`, `stat`, and `readFile` are used, so callers can observe the reads.
+ */
+export declare function readProjectJevSetting(projectRoot: string, fileSystem?: FileSystemPort): Promise<boolean | undefined>;
+export {};

package/dist/application/services/JevSettings.js

@@ -0,0 +1,72 @@
+import { readFile, stat } from 'node:fs/promises';
+import path from 'node:path';
+export const DEFAULT_JEV_TIMEOUT_MS = 5000;
+const MIN_TIMEOUT_MS = 1000;
+const MAX_TIMEOUT_MS = 15000;
+const MAX_KEY_LENGTH = 512;
+const MAX_CONFIG_BYTES = 16 * 1024;
+const TRUTHY = new Set(['1', 'true', 'yes', 'on']);
+function isTruthy(value) {
+    return value !== undefined && TRUTHY.has(value.trim().toLowerCase());
+}
+function resolveEnabled(env, projectSetting) {
+    const raw = env.SDD_JEV_ENABLED?.trim().toLowerCase();
+    if (raw === undefined || raw === '')
+        return projectSetting === true;
+    // Falsy and unrecognized values both disable JEV, even when the project setting is true.
+    return TRUTHY.has(raw);
+}
+function resolveKey(env) {
+    const key = env.SDD_JEV_API_KEY?.trim();
+    if (!key || key.length > MAX_KEY_LENGTH)
+        return undefined;
+    return /^[\x21-\x7E]+$/.test(key) ? key : undefined;
+}
+function resolveTimeout(env) {
+    const raw = env.SDD_JEV_TIMEOUT_MS?.trim();
+    if (raw === undefined || !/^\d+$/.test(raw))
+        return DEFAULT_JEV_TIMEOUT_MS;
+    return Math.min(MAX_TIMEOUT_MS, Math.max(MIN_TIMEOUT_MS, Number(raw)));
+}
+export function resolveJevSettings(env, projectSetting) {
+    const key = resolveKey(env);
+    const settings = {
+        enabled: resolveEnabled(env, projectSetting),
+        hasKey: key !== undefined,
+        allowCode: isTruthy(env.SDD_JEV_ALLOW_CODE),
+        timeoutMs: resolveTimeout(env),
+    };
+    // Non-enumerable accessor keeps the key out of JSON.stringify, spreads, and logs.
+    Object.defineProperty(settings, 'apiKey', { value: () => key, enumerable: false });
+    Object.defineProperty(settings, 'toString', { value: () => '[JevSettings]', enumerable: false });
+    return settings;
+}
+function enabledFlag(parsed) {
+    if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed))
+        return undefined;
+    const jev = parsed.jev;
+    if (typeof jev !== 'object' || jev === null || Array.isArray(jev))
+        return undefined;
+    const enabled = jev.enabled;
+    return typeof enabled === 'boolean' ? enabled : undefined;
+}
+/**
+ * Reads `.spec/sdd-config.json` once, read-only. Any problem means "no project setting".
+ * With a port, only `exists`, `stat`, and `readFile` are used, so callers can observe the reads.
+ */
+export async function readProjectJevSetting(projectRoot, fileSystem) {
+    const configPath = path.join(path.resolve(projectRoot), '.spec', 'sdd-config.json');
+    try {
+        if (fileSystem && !(await fileSystem.exists(configPath)))
+            return undefined;
+        const info = await (fileSystem ? fileSystem.stat(configPath) : stat(configPath));
+        if (!info.isFile() || (info.size ?? 0) > MAX_CONFIG_BYTES)
+            return undefined;
+        const content = fileSystem ? await fileSystem.readFile(configPath) : await readFile(configPath, 'utf8');
+        return content.length > MAX_CONFIG_BYTES ? undefined : enabledFlag(JSON.parse(content));
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=JevSettings.js.map

package/dist/application/services/JevSettings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"JevSettings.js","sourceRoot":"","sources":["../../../src/application/services/JevSettings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAC3C,MAAM,cAAc,GAAG,IAAI,CAAC;AAC5B,MAAM,cAAc,GAAG,KAAK,CAAC;AAC7B,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,CAAC;AACnC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;AAanD,SAAS,QAAQ,CAAC,KAAyB;IACzC,OAAO,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,cAAc,CAAC,GAAQ,EAAE,cAAmC;IACnE,MAAM,GAAG,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,cAAc,KAAK,IAAI,CAAC;IACpE,yFAAyF;IACzF,OAAO,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,UAAU,CAAC,GAAQ;IAC1B,MAAM,GAAG,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;IACxC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,cAAc;QAAE,OAAO,SAAS,CAAC;IAC1D,OAAO,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAED,SAAS,cAAc,CAAC,GAAQ;IAC9B,MAAM,GAAG,GAAG,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,sBAAsB,CAAC;IAC3E,OAAO,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAQ,EAAE,cAAmC;IAC9E,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,QAAQ,GAAG;QACf,OAAO,EAAE,cAAc,CAAC,GAAG,EAAE,cAAc,CAAC;QAC5C,MAAM,EAAE,GAAG,KAAK,SAAS;QACzB,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAC3C,SAAS,EAAE,cAAc,CAAC,GAAG,CAAC;KAC/B,CAAC;IACF,kFAAkF;IAClF,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;IACnF,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,eAAe,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;IACjG,OAAO,QAAuB,CAAC;AACjC,CAAC;AAED,SAAS,WAAW,CAAC,MAAe;IAClC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7F,MAAM,GAAG,GAAI,MAAkC,CAAC,GAAG,CAAC;IACpD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACpF,MAAM,OAAO,GAAI,GAA+B,CAAC,OAAO,CAAC;IACzD,OAAO,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5D,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,WAAmB,EAAE,UAA2B;IAC1F,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACpF,IAAI,CAAC;QACH,IAAI,UAAU,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QAC3E,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QACjF,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,gBAAgB;YAAE,OAAO,SAAS,CAAC;QAC5E,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACxG,OAAO,OAAO,CAAC,MAAM,GAAG,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/application/services/JevSidecarStore.d.ts

@@ -0,0 +1,68 @@
+import type { FileSystemPort, LoggerPort } from '../../domain/ports.js';
+import type { JevAnswer, JevMeta } from './JevResponseValidator.js';
+export type SidecarKind = 'requirements' | 'design' | 'testcases' | 'red' | 'security' | 'principles';
+export interface SidecarBinding {
+    questionSetVersion: number;
+    revision?: number;
+    artifactSha256?: string;
+    caseListSha256?: string;
+    evidenceSha256?: string;
+    diffSha256?: string;
+    inputSha256?: string;
+    /** Committed-range reviews only: the merge base of the caller's base ref and HEAD. */
+    rangeBaseCommit?: string;
+    /** Committed-range reviews only: HEAD when the review ran. */
+    headCommit?: string;
+}
+export interface SidecarItem {
+    id: string;
+    location?: string;
+    excerptSha256?: string | null;
+    modelSeverity?: string;
+    jevSeverity?: string;
+    disagreement?: boolean;
+    classification?: string;
+}
+export interface JevSidecar {
+    schema: 1;
+    kind: SidecarKind;
+    createdAt: string;
+    binding: SidecarBinding;
+    status: 'answered' | 'unavailable';
+    reason?: string;
+    source: 'jev' | 'local';
+    answers?: Record<string, JevAnswer>;
+    meta?: JevMeta;
+    baseCommit?: string | null;
+    truncated: boolean;
+    omittedIds: string[];
+    droppedFindingIds: string[];
+    redactions: number;
+    items?: SidecarItem[];
+}
+export interface WriteResult {
+    persisted: boolean;
+    /** Project-relative POSIX path of the written sidecar. */
+    path?: string;
+}
+export declare class JevSidecarStore {
+    private readonly fileSystem;
+    private readonly logger;
+    constructor(fileSystem: FileSystemPort, logger: LoggerPort);
+    fileNameFor(kind: SidecarKind, binding: SidecarBinding, taskNumber?: string): string;
+    /** Project-relative POSIX path a sidecar for this binding is (or would be) stored at. */
+    relativePath(featureName: string | undefined, kind: SidecarKind, binding: SidecarBinding, taskNumber?: string): string;
+    write(projectRoot: string, featureName: string | undefined, sidecar: JevSidecar, taskNumber?: string): Promise<WriteResult>;
+    readMatching(projectRoot: string, featureName: string | undefined, kind: SidecarKind, binding: SidecarBinding, taskNumber?: string): Promise<JevSidecar | undefined>;
+    /**
+     * Looks a working-tree review sidecar up by the full diff hash; used by the read-only commit
+     * lookup. Only a sidecar of the current question-set version and without a range binding can
+     * describe exactly the staged change.
+     */
+    findByDiff(projectRoot: string, featureName: string | undefined, kind: 'security' | 'principles', diffSha256: string, questionSetVersion: number): Promise<JevSidecar | undefined>;
+    /** Names of review sidecars of one kind in a location; empty on any problem. */
+    listReviewSidecars(projectRoot: string, featureName: string | undefined, kind: 'security' | 'principles'): Promise<string[]>;
+    private readAnswered;
+    private reviewDir;
+    private contain;
+}

package/dist/application/services/JevSidecarStore.js

@@ -0,0 +1,201 @@
+import path from 'node:path';
+import { SpecPathResolver, validateFeatureName } from './SpecPathResolver.js';
+const MAX_SIDECAR_BYTES = 1_048_576;
+const HASH_PREFIX = 12;
+const KINDS = new Set(['requirements', 'design', 'testcases', 'red', 'security', 'principles']);
+/** Reasons that must leave no filesystem trace at all. */
+const TRACELESS_REASONS = new Set(['disabled', 'no-key']);
+const BINDING_KEYS = [
+    'questionSetVersion', 'revision', 'artifactSha256', 'caseListSha256', 'evidenceSha256', 'diffSha256', 'inputSha256',
+    'rangeBaseCommit', 'headCommit',
+];
+const isRecord = (value) => typeof value === 'object' && value !== null && !Array.isArray(value);
+const isStringArray = (value) => Array.isArray(value) && value.every((entry) => typeof entry === 'string');
+function pickBinding(binding) {
+    const picked = {};
+    for (const key of BINDING_KEYS)
+        if (binding[key] !== undefined)
+            picked[key] = binding[key];
+    return picked;
+}
+function pickAnswer(answer) {
+    if (answer.type === 'choice')
+        return { type: 'choice', choice: answer.choice };
+    if (answer.type === 'score')
+        return { type: 'score', raw: answer.raw, index: answer.index };
+    return { type: 'noul', noul: answer.noul };
+}
+function pickItem(item) {
+    return {
+        id: item.id, location: item.location, excerptSha256: item.excerptSha256, modelSeverity: item.modelSeverity,
+        jevSeverity: item.jevSeverity, disagreement: item.disagreement, classification: item.classification,
+    };
+}
+/** Whitelist serialization: unknown fields (a key, a request body, excerpt text) can never be written. */
+function toStored(sidecar) {
+    return {
+        schema: 1,
+        kind: sidecar.kind,
+        createdAt: sidecar.createdAt,
+        binding: pickBinding(sidecar.binding),
+        status: sidecar.status,
+        reason: sidecar.reason,
+        source: sidecar.source,
+        answers: sidecar.answers && Object.fromEntries(Object.entries(sidecar.answers).map(([id, answer]) => [id, pickAnswer(answer)])),
+        meta: sidecar.meta && Object.fromEntries(Object.entries(sidecar.meta).filter(([, value]) => value === null || ['string', 'number', 'boolean'].includes(typeof value))),
+        baseCommit: sidecar.baseCommit,
+        truncated: sidecar.truncated,
+        omittedIds: [...sidecar.omittedIds],
+        droppedFindingIds: [...sidecar.droppedFindingIds],
+        redactions: sidecar.redactions,
+        items: sidecar.items?.map(pickItem),
+    };
+}
+function isAnswer(value) {
+    if (!isRecord(value))
+        return false;
+    if (value.type === 'choice')
+        return typeof value.choice === 'string';
+    if (value.type === 'score')
+        return typeof value.raw === 'number' && Number.isFinite(value.raw) && Number.isInteger(value.index);
+    return value.type === 'noul' && typeof value.noul === 'number';
+}
+function hasValidHeader(value) {
+    return value.schema === 1
+        && typeof value.kind === 'string' && KINDS.has(value.kind)
+        && typeof value.createdAt === 'string'
+        && isRecord(value.binding) && typeof value.binding.questionSetVersion === 'number'
+        && (value.status === 'answered' || value.status === 'unavailable')
+        && (value.source === 'jev' || value.source === 'local');
+}
+function hasValidBody(value) {
+    return typeof value.truncated === 'boolean'
+        && typeof value.redactions === 'number'
+        && isStringArray(value.omittedIds)
+        && isStringArray(value.droppedFindingIds)
+        && (value.answers === undefined || (isRecord(value.answers) && Object.values(value.answers).every(isAnswer)));
+}
+function isSidecar(value) {
+    return isRecord(value) && hasValidHeader(value) && hasValidBody(value);
+}
+function sameBinding(stored, current) {
+    return BINDING_KEYS.every((key) => stored[key] === current[key]);
+}
+export class JevSidecarStore {
+    fileSystem;
+    logger;
+    constructor(fileSystem, logger) {
+        this.fileSystem = fileSystem;
+        this.logger = logger;
+    }
+    fileNameFor(kind, binding, taskNumber) {
+        if (kind === 'red') {
+            const task = (taskNumber ?? '').replace(/[^0-9.]/g, '') || 'task';
+            return `jev-red-${task}-${(binding.evidenceSha256 ?? '').slice(0, HASH_PREFIX)}.json`;
+        }
+        if (kind === 'security' || kind === 'principles') {
+            const range = binding.rangeBaseCommit === undefined ? '' : 'range-';
+            return `jev-review-${kind}-${range}${(binding.diffSha256 ?? '').slice(0, HASH_PREFIX)}.json`;
+        }
+        return `jev-${kind}-r${binding.revision ?? 0}.json`;
+    }
+    /** Project-relative POSIX path a sidecar for this binding is (or would be) stored at. */
+    relativePath(featureName, kind, binding, taskNumber) {
+        const dir = featureName === undefined ? '.spec/reviews' : `.spec/specs/${featureName}/review`;
+        return `${dir}/${this.fileNameFor(kind, binding, taskNumber)}`;
+    }
+    async write(projectRoot, featureName, sidecar, taskNumber) {
+        if (sidecar.status === 'unavailable' && sidecar.reason !== undefined && TRACELESS_REASONS.has(sidecar.reason)) {
+            return { persisted: false };
+        }
+        try {
+            const root = path.resolve(projectRoot);
+            const dir = this.reviewDir(root, featureName);
+            if (featureName !== undefined && !(await this.fileSystem.exists(path.join(root, '.spec', 'specs', featureName)))) {
+                return { persisted: false };
+            }
+            await this.contain(root, dir);
+            const fileName = this.fileNameFor(sidecar.kind, sidecar.binding, taskNumber);
+            const file = path.join(dir, fileName);
+            const content = `${JSON.stringify(toStored(sidecar), null, 2)}\n`;
+            if (Buffer.byteLength(content, 'utf8') > MAX_SIDECAR_BYTES)
+                return { persisted: false };
+            if (sidecar.status === 'unavailable' && (await this.readAnswered(projectRoot, featureName, sidecar.kind, fileName))) {
+                return { persisted: false };
+            }
+            await this.fileSystem.mkdir(dir);
+            await this.contain(root, dir);
+            await this.contain(root, file);
+            if (this.fileSystem.writeFileAtomic)
+                await this.fileSystem.writeFileAtomic(file, content);
+            else
+                await this.fileSystem.writeFile(file, content);
+            return { persisted: true, path: path.relative(root, file).split(path.sep).join('/') };
+        }
+        catch (error) {
+            this.logger.warn('JEV sidecar not persisted', { kind: sidecar.kind, errorName: error instanceof Error ? error.name : 'Error' });
+            return { persisted: false };
+        }
+    }
+    async readMatching(projectRoot, featureName, kind, binding, taskNumber) {
+        const parsed = await this.readAnswered(projectRoot, featureName, kind, this.fileNameFor(kind, binding, taskNumber));
+        return parsed && sameBinding(parsed.binding, binding) ? parsed : undefined;
+    }
+    /**
+     * Looks a working-tree review sidecar up by the full diff hash; used by the read-only commit
+     * lookup. Only a sidecar of the current question-set version and without a range binding can
+     * describe exactly the staged change.
+     */
+    async findByDiff(projectRoot, featureName, kind, diffSha256, questionSetVersion) {
+        const parsed = await this.readAnswered(projectRoot, featureName, kind, this.fileNameFor(kind, { questionSetVersion, diffSha256 }));
+        const bound = parsed?.binding;
+        const matches = bound?.diffSha256 === diffSha256
+            && bound.questionSetVersion === questionSetVersion
+            && bound.rangeBaseCommit === undefined
+            && bound.headCommit === undefined;
+        return matches ? parsed : undefined;
+    }
+    /** Names of review sidecars of one kind in a location; empty on any problem. */
+    async listReviewSidecars(projectRoot, featureName, kind) {
+        try {
+            const root = path.resolve(projectRoot);
+            const dir = this.reviewDir(root, featureName);
+            await this.contain(root, dir);
+            if (!(await this.fileSystem.exists(dir)))
+                return [];
+            return (await this.fileSystem.readdir(dir)).filter((name) => name.startsWith(`jev-review-${kind}-`) && name.endsWith('.json'));
+        }
+        catch {
+            return [];
+        }
+    }
+    async readAnswered(projectRoot, featureName, kind, fileName) {
+        try {
+            const root = path.resolve(projectRoot);
+            const dir = this.reviewDir(root, featureName);
+            const file = path.join(dir, fileName);
+            await this.contain(root, dir);
+            await this.contain(root, file);
+            if (!(await this.fileSystem.exists(file)))
+                return undefined;
+            const info = await this.fileSystem.stat(file);
+            if (!info.isFile() || (info.size ?? 0) > MAX_SIDECAR_BYTES)
+                return undefined;
+            const parsed = JSON.parse(await this.fileSystem.readFile(file));
+            return isSidecar(parsed) && parsed.kind === kind && parsed.status === 'answered' ? parsed : undefined;
+        }
+        catch {
+            return undefined;
+        }
+    }
+    reviewDir(root, featureName) {
+        if (featureName === undefined)
+            return path.join(root, '.spec', 'reviews');
+        validateFeatureName(featureName);
+        return path.join(root, '.spec', 'specs', featureName, 'review');
+    }
+    async contain(root, target) {
+        await new SpecPathResolver(this.fileSystem).assertContained(path.join(root, '.spec'), target);
+    }
+}
+//# sourceMappingURL=JevSidecarStore.js.map

package/dist/application/services/JevSidecarStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"JevSidecarStore.js","sourceRoot":"","sources":["../../../src/application/services/JevSidecarStore.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAoD9E,MAAM,iBAAiB,GAAG,SAAS,CAAC;AACpC,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,KAAK,GAAwB,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;AACrH,0DAA0D;AAC1D,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC/E,MAAM,YAAY,GAAG;IACnB,oBAAoB,EAAE,UAAU,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,YAAY,EAAE,aAAa;IACnH,iBAAiB,EAAE,YAAY;CACvB,CAAC;AAEX,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CACpE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACvE,MAAM,aAAa,GAAG,CAAC,KAAc,EAAqB,EAAE,CAC1D,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;AAE5E,SAAS,WAAW,CAAC,OAAuB;IAC1C,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,YAAY;QAAE,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3F,OAAO,MAAmC,CAAC;AAC7C,CAAC;AAED,SAAS,UAAU,CAAC,MAAiB;IACnC,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IAC/E,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IAC5F,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,QAAQ,CAAC,IAAiB;IACjC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa;QAC1G,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc;KACpG,CAAC;AACJ,CAAC;AAED,0GAA0G;AAC1G,SAAS,QAAQ,CAAC,OAAmB;IACnC,OAAO;QACL,MAAM,EAAE,CAAC;QACT,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC;QACrC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC/H,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC;QACtK,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,UAAU,EAAE,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC;QACnC,iBAAiB,EAAE,CAAC,GAAG,OAAO,CAAC,iBAAiB,CAAC;QACjD,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC;KACpC,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC;IACrE,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAChI,OAAO,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;AACjE,CAAC;AAED,SAAS,cAAc,CAAC,KAA8B;IACpD,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;WACpB,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;WACvD,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;WACnC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,CAAC,OAAO,CAAC,kBAAkB,KAAK,QAAQ;WAC/E,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa,CAAC;WAC/D,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,YAAY,CAAC,KAA8B;IAClD,OAAO,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS;WACtC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;WACpC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC;WAC/B,aAAa,CAAC,KAAK,CAAC,iBAAiB,CAAC;WACtC,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAClH,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,cAAc,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,WAAW,CAAC,MAAsB,EAAE,OAAuB;IAClE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,OAAO,eAAe;IAEP;IACA;IAFnB,YACmB,UAA0B,EAC1B,MAAkB;QADlB,eAAU,GAAV,UAAU,CAAgB;QAC1B,WAAM,GAAN,MAAM,CAAY;IAClC,CAAC;IAEJ,WAAW,CAAC,IAAiB,EAAE,OAAuB,EAAE,UAAmB;QACzE,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC;YAClE,OAAO,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC;QACxF,CAAC;QACD,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;YACjD,MAAM,KAAK,GAAG,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;YACpE,OAAO,cAAc,IAAI,IAAI,KAAK,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC;QAC/F,CAAC;QACD,OAAO,OAAO,IAAI,KAAK,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC;IACtD,CAAC;IAED,yFAAyF;IACzF,YAAY,CAAC,WAA+B,EAAE,IAAiB,EAAE,OAAuB,EAAE,UAAmB;QAC3G,MAAM,GAAG,GAAG,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe,WAAW,SAAS,CAAC;QAC9F,OAAO,GAAG,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,KAAK,CACT,WAAmB,EACnB,WAA+B,EAC/B,OAAmB,EACnB,UAAmB;QAEnB,IAAI,OAAO,CAAC,MAAM,KAAK,aAAa,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9G,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YACvC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;YAC9C,IAAI,WAAW,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjH,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YAC9B,CAAC;YACD,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YAC7E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACtC,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;YAClE,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,iBAAiB;gBAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YACxF,IAAI,OAAO,CAAC,MAAM,KAAK,aAAa,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;gBACpH,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YAC9B,CAAC;YACD,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC9B,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC/B,IAAI,IAAI,CAAC,UAAU,CAAC,eAAe;gBAAE,MAAM,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;;gBACrF,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACpD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACxF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAChI,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,WAAmB,EACnB,WAA+B,EAC/B,IAAiB,EACjB,OAAuB,EACvB,UAAmB;QAEnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;QACpH,OAAO,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU,CACd,WAAmB,EACnB,WAA+B,EAC/B,IAA+B,EAC/B,UAAkB,EAClB,kBAA0B;QAE1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,kBAAkB,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QACnI,MAAM,KAAK,GAAG,MAAM,EAAE,OAAO,CAAC;QAC9B,MAAM,OAAO,GAAG,KAAK,EAAE,UAAU,KAAK,UAAU;eAC3C,KAAK,CAAC,kBAAkB,KAAK,kBAAkB;eAC/C,KAAK,CAAC,eAAe,KAAK,SAAS;eACnC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC;QACpC,OAAO,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACtC,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,kBAAkB,CAAC,WAAmB,EAAE,WAA+B,EAAE,IAA+B;QAC5G,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YACvC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;YAC9C,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC9B,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAAE,OAAO,EAAE,CAAC;YACpD,OAAO,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QACjI,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY,CACxB,WAAmB,EACnB,WAA+B,EAC/B,IAAiB,EACjB,QAAgB;QAEhB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YACvC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;YAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACtC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC9B,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC/B,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAAE,OAAO,SAAS,CAAC;YAC5D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,iBAAiB;gBAAE,OAAO,SAAS,CAAC;YAC7E,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YACzE,OAAO,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACxG,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,IAAY,EAAE,WAA+B;QAC7D,IAAI,WAAW,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QAC1E,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAClE,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,MAAc;QAChD,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IAChG,CAAC;CACF"}

package/dist/application/services/JevSpecState.d.ts

@@ -0,0 +1,38 @@
+import type { JevQuestionSet } from './JevResponseValidator.js';
+import type { AdvisorySnapshot } from './WorkflowEngineService.js';
+/** Serialized `state` cap for spec-text requests. */
+export declare const MAX_STATE_BYTES = 32768;
+export interface ExchangeState {
+    kind: string;
+    items: Array<Record<string, unknown>>;
+    context?: Record<string, unknown>;
+}
+export interface FittedState {
+    state: ExchangeState;
+    keptIds: string[];
+    omittedIds: string[];
+    truncated: boolean;
+    redactions: number;
+}
+export interface BuiltExchange {
+    state: ExchangeState;
+    questions: JevQuestionSet;
+    /** Ids the answers are interpreted against, in document order. */
+    itemIds: string[];
+    /** Second id group (NFRs for the design check). */
+    secondaryIds: string[];
+    omittedIds: string[];
+    truncated: boolean;
+    redactions: number;
+}
+/** Redacts every item, then keeps whole items in order until the next one would exceed the cap. */
+export declare function fitState(kind: string, items: ReadonlyArray<Record<string, unknown> & {
+    id: string;
+}>, context: Record<string, unknown> | undefined, maxBytes?: number): FittedState;
+export declare function buildRequirementsExchange(snapshot: AdvisorySnapshot): BuiltExchange | undefined;
+/** RED evidence is the whole state: command, summary, test name, and the task's acceptance criteria. No source code. */
+export declare function buildRedExchange(taskNumber: string, testName: string, evidence: {
+    command: string;
+    summary: string;
+}, acceptanceCriteria: string): BuiltExchange | undefined;
+export declare function buildDesignExchange(snapshot: AdvisorySnapshot): BuiltExchange | undefined;