thincoder 0.12.60 → 0.12.61

package/src/advisor/messages.mjs

@@ -2,108 +2,17 @@
  * advisor/messages.mjs — advisor user-message building (buildAdvisorUserMessage).
  * Split out of advisor.mjs to keep it under the 300-line advisory threshold
  * (.thincoder/advisor.md). System prompts live in advisor.mjs / prompts/.
+ * Project-context discovery/injection lives in project-context.mjs (the D-1 registration,
+ * ENGINEERING-MODE.md §2.26.3); the pre-split surface is re-exported below.
  */
-import { readFileSync, existsSync } from "node:fs"
-import { resolve, join, relative, dirname, sep } from "node:path"
-import { providerSpec } from "../config.mjs"
+import { join, relative, sep } from "node:path"
 import { findReviewRepos, collectRepoSnapshots, collectChangedFiles } from "./repos.mjs"
 import { buildConvergenceBody, buildConvergenceInstructions } from "./convergence.mjs"
 import { loadAdvisorMd, extractConversationBackground, extractAgentResponseTable } from "./history.mjs"
+import { injectProjectGuide, injectDocumentMap, injectProjectStandards, NO_GIT_NOTICE } from "./project-context.mjs"
 
-/** Project guide (AGENTS.md) injection budget — decision 2026-08-08:
- *  NO fixed truncation; long-context models (1M+) get up to 5% of their context
- *  window for the doc map, small windows still get a floor so the map is always
- *  visible. The map is what tells the reviewer WHERE the requirements docs live
- *  (requirement-fit is judged against those docs, not the conversation only). */
-const PROJECT_GUIDE_MIN = 8192 // chars — floor for small-window models
-const PROJECT_GUIDE_FRACTION = 0.05 // 5% of the reviewer model's context window
-
-/**
- * Discover the project root for the review — user decision 2026-08-08:
- * the project root is a SUBDIRECTORY of the working directory, never an
- * ancestor above it. Priority:
- *   1. Walk UP from each review-scope file's directory, bounded by cwd —
- *      the NEAREST AGENTS.md inside the workspace wins. In a monorepo this is
- *      the subproject's own doc map even when cwd itself has an AGENTS.md
- *      (a workspace-level meta map must not shadow the subproject guide).
- *   2. No scope files / nothing found → cwd (single project; the walk's
- *      last step naturally lands on cwd's own AGENTS.md when it exists).
- * @param {string} cwd — the agent's working directory (workspace root)
- * @param {string[]} scopeFiles — cwd-relative review-scope paths (may be empty)
- * @returns {string|null} absolute project root with an AGENTS.md, or null
- */
-function findProjectRoot(cwd, scopeFiles) {
-  // Normalize separators before comparing: input paths may use either
-  // convention (join() → "\\" on Windows; tool args / tests → "/"). Mixed
-  // styles made isInside(cwd + sep) miss legitimately nested paths.
-  const norm = (p) => p.replaceAll("\\", "/")
-  const isInside = (dir) => {
-    const d = norm(dir)
-    const c = norm(cwd)
-    return d === c || d.startsWith(c + "/")
-  }
-  for (const f of scopeFiles) {
-    let dir = dirname(resolve(cwd, f))
-    while (isInside(dir) && dir !== dirname(dir)) {
-      if (existsSync(join(dir, "AGENTS.md"))) return dir
-      dir = dirname(dir)
-    }
-  }
-  // No scope files, or none found in the walk — cwd itself (its AGENTS.md is
-  // checked as the walk's final step for scope files; for empty scopes, check
-  // it explicitly so a bare cwd project still gets its guide).
-  if (existsSync(join(cwd, "AGENTS.md"))) return cwd
-  return null
-}
-
-/**
- * Inject the project guide (AGENTS.md) into the review message. AGENTS.md is the
- * project's doc map — it defines the structure and where requirements/design
- * documents live. The reviewer must see it FIRST: requirement-fit is judged
- * against the documents it points to, with the conversation background as a
- * supplement. Absent AGENTS.md degrades honestly (no pretending there is a map).
- * @param {Object} agent — the parent agent
- * @param {string[]} parts — message parts (mutated)
- * @param {string[]} [scopeFiles] — cwd-relative review-scope paths for project-root discovery
- * @returns {string|null} the discovered project root (abs), or null when no guide
- */
-function injectProjectGuide(agent, parts, scopeFiles = []) {
-  parts.push("## Project Guide (AGENTS.md)")
-  const root = findProjectRoot(agent.cwd, scopeFiles)
-  const path = root ? join(root, "AGENTS.md") : null
-  let text
-  if (!path) {
-    parts.push("(No AGENTS.md found — neither at the working directory root nor in any review-scope subdirectory. Judge the user's requirements from the conversation background, and say so explicitly if the requirements are unclear.)")
-    parts.push("")
-    return null // no guide — requirement-fit falls back to the conversation
-  }
-  try {
-    text = readFileSync(path, "utf8")
-  } catch (e) {
-    if (e.code !== "ENOENT") {
-      // File exists but is unreadable (EACCES etc.) — log, don't masquerade as "not found".
-      console.warn(`[advisor] AGENTS.md unreadable at ${path}: ${e.message}`)
-    }
-    parts.push("(No AGENTS.md found — neither at the working directory root nor in any review-scope subdirectory. Judge the user's requirements from the conversation background, and say so explicitly if the requirements are unclear.)")
-    parts.push("")
-    return null // no guide — requirement-fit falls back to the conversation
-  }
-  // readFileSync succeeded — compute the budget OUTSIDE the try so a spec
-  // lookup failure can never masquerade as "no AGENTS.md".
-  // providerSpec: the project-guide budget follows the provider-level context
-  // override (PROVIDER.md §15 — advisor messages budget is context-based).
-  const ctx = providerSpec(agent.provider).context
-  const cap = Math.max(PROJECT_GUIDE_MIN, Math.floor(ctx * PROJECT_GUIDE_FRACTION))
-  const shown = text.length <= cap
-    ? text
-    : [...text].slice(0, cap).join("") + `\n\n…(truncated at ${cap} chars — read the full file if you need more)` // codepoint-safe slice: no broken surrogate pairs at the boundary
-  parts.push(`<!-- Project root: ${relative(agent.cwd, path).split(sep).join("/")} (inferred from the review scope under ${agent.cwd}) -->`)
-  parts.push("This file defines the project's structure and where its requirements/design documents live. Read the documents it points to — the user's requirements live THERE, not only in the conversation background.")
-  parts.push("")
-  parts.push(shown)
-  parts.push("")
-  return root // guide injected — requirement-fit criteria apply (truthy root)
-}
+// Structural split (not an authority migration): the moved helpers stay reachable here.
+export { findProjectRoot, injectProjectGuide } from "./project-context.mjs"
 
 /**
  * Build the mechanical review-object declaration block (AGENT-LOOP.md §18.8
@@ -130,7 +39,7 @@ export function buildObjectDeclarationBlock(object = null) {
 }
 
 /**
- * Approval-signal block for design reviews (round 1 and round 2+ — §24 D-24b:
+ * Approval-signal block for design reviews (round 1 and round 2+ — §11.2 D-24b:
  * an async fix-round continuation must be able to re-approve, so the token is
  * injected into EVERY design round; the reviewer echoes it only on a clean pass).
  * §29.1 F2a (2026-09-07): BOTH values are injected — the token AND the designId
@@ -167,6 +76,17 @@ export function buildDesignApprovalBlock(designToken, designId) {
  * @returns {string} the user message
  */
 export function buildAdvisorUserMessage(agent, prior, reviewType, designToken = null, documents = null, paths = null, object = null, designId = null) {
+  const body = buildAdvisorUserMessageInner(agent, prior, reviewType, designToken, documents, paths, object, designId)
+  // B 构建自愈（F12/§14.4 #1）：design + token 且输出不含逐字信号 ⇒ 尾包补齐 Approval Signal。
+  // 覆盖所有出口（含 code 形态分支降级态与 legacy 收敛分支）——既有分支语义零改：已在分支内
+  // 注入过的路径因 `[DESIGN-TOKEN:{token}` 逐字在场而不重复追加（幂等）。
+  if (reviewType !== "design" || !designToken) return body
+  if (body.includes(`[DESIGN-TOKEN:${designToken}`)) return body
+  return `${body}\n\n${buildDesignApprovalBlock(designToken, designId)}`
+}
+
+/** 内层构建（无自愈尾包）——出口、分支与消息形态与拆分前逐字一致。 */
+function buildAdvisorUserMessageInner(agent, prior, reviewType, designToken = null, documents = null, paths = null, object = null, designId = null) {
   // prior = the full prior review output (string) when a convergence round is
   // being built (decision 2026-08-08 — verbatim injection, model understands it).
   // Deterministic: only _advisorRound > 0 with stored output counts.
@@ -194,6 +114,11 @@ export function buildAdvisorUserMessage(agent, prior, reviewType, designToken =
   if (reviewType === "design" && (agent._advisorRound || 0) === 0) {
     const repos = findReviewRepos(agent)
     parts.push("## Design Review")
+    // FR15/P8: no git → change-set context is unavailable. Say it (never silent).
+    if (repos.length === 0) {
+      parts.push(NO_GIT_NOTICE)
+      parts.push("")
+    }
     if (docList.length > 0) {
       // Explicit review scope (engineering mode, FR2): the caller hands over the
       // doc list — the advisor reviews ONLY these. No git-diff change-set
@@ -229,40 +154,24 @@ export function buildAdvisorUserMessage(agent, prior, reviewType, designToken =
       }
     }
 
-    // Engineering mode: inject project methodology (resolved from the
-    // DISCOVERED project root — in a monorepo that is the subproject, not cwd)
+    // Engineering mode: the project's DECLARED standards document
+    // (advisor.standardsDoc) — undeclared degrades visibly (PO-2).
     if (agent.config?.agent?.engineering) {
-      try {
-        const mpath = resolve(guideRoot ?? agent.cwd, "METHODOLOGY.md")
-        const methodology = readFileSync(mpath, "utf8")
-        parts.push("## Project Methodology")
-        parts.push("Evaluate the design against this methodology:")
-        parts.push(methodology)
-        parts.push("")
-      } catch { /* file doesn't exist — skip */ }
+      injectProjectStandards(agent, parts, guideRoot)
     }
 
-    // Document map (docs/design/README.md) — inject when the discovered
-    // project root has one: the reviewer checks document ownership against it
-    // (a change for an existing section must amend that section's document,
-    // not spawn a new file for it). Absent map → skip (nothing to check against).
-    try {
-      const mapPath = resolve(guideRoot ?? agent.cwd, "docs", "design", "README.md")
-      if (existsSync(mapPath)) {
-        parts.push("## Document Map")
-        parts.push("The document map below registers which document files exist per section. Use it for the Document ownership criterion: a change for an existing section must amend that section's document, not create a new file.")
-        parts.push(readFileSync(mapPath, "utf8"))
-        parts.push("")
-      }
-    } catch { /* file doesn't exist or is unreadable — skip */ }
+    // Document map: declared path wins, the built-in fallback probe (docs/README.md
+    // → docs/design/README.md) stays; neither → explicit degradation sentence
+    // (never the old silent skip).
+    injectDocumentMap(agent, parts, guideRoot ?? agent.cwd)
 
     parts.push("## Instructions")
     if (docList.length > 0) {
-      parts.push("1. Read every document in the Documents to Review list in full — review ONLY those files. Read METHODOLOGY.md to understand the project's standards.")
+      parts.push("1. Read every document in the Documents to Review list in full — review ONLY those files.")
     } else {
-      parts.push("1. Read the design document fully. Read METHODOLOGY.md to understand the project's standards.")
+      parts.push("1. Read the design document fully.")
     }
-    parts.push("2. Review against: completeness (all requirements covered?), feasibility (can this be built?), methodology compliance (does it follow the project's METHODOLOGY.md?), clarity (specific enough?), acceptance criteria (verifiable?), scope (appropriate?).")
+    parts.push("2. Review against: completeness (all requirements covered?), feasibility (can this be built?), methodology compliance (does it follow the project's standards as provided?), clarity (specific enough?), acceptance criteria (verifiable?), scope (appropriate?).")
     parts.push("3. If the ## Project Guide (AGENTS.md) section above is present, also check requirement fit: does the design match what the requirements documents it points to actually ask for?")
     parts.push("4. Do NOT run git diff or look for code changes — there are none at this stage.")
     parts.push("5. If you find issues, produce your review table with the format: | # | Category | Severity | Issue | Suggestion |. If the design passes, no table is needed.")
@@ -338,17 +247,10 @@ export function buildAdvisorUserMessage(agent, prior, reviewType, designToken =
   }
   parts.push("")
 
-  // Engineering mode: inject project methodology so advisor knows the rules
-  // (resolved from the DISCOVERED project root — subproject in a monorepo)
+  // Engineering mode: project standards (declaration-only, same helper as the
+  // design path) — undeclared degrades visibly (PO-2).
   if (agent.config?.agent?.engineering) {
-    try {
-      const mpath = resolve(guideRoot ?? agent.cwd, "METHODOLOGY.md")
-      const methodology = readFileSync(mpath, "utf8")
-      parts.push("## Project Methodology (Engineering Mode)")
-      parts.push("The project follows this methodology. Evaluate the changes against it:")
-      parts.push(methodology)
-      parts.push("")
-    } catch { /* file doesn't exist — skip */ }
+    injectProjectStandards(agent, parts, guideRoot)
   }
 
   // Instructions — round-aware: re-reviews skip convention discovery entirely.

package/src/advisor/project-context.mjs

@@ -0,0 +1,194 @@
+/**
+ * advisor/project-context.mjs — project-context discovery and injection for review
+ * messages (Project Guide, document map, project standards, change-set context).
+ *
+ * Split out of messages.mjs (the split registered as D-1 in ENGINEERING-MODE.md
+ * §2.26.3, trigger "thicken again" — met by this batch). messages.mjs keeps its
+ * pre-split surface via re-export; this module is consumed by it only.
+ *
+ * Portability contract (PORTABILITY FR10/FR11 · PO-1/PO-2 · P8): every discovery
+ * step here is either satisfied or DEGRADED VISIBLY. The old code probed a fixed
+ * `docs/README.md` and a fixed `METHODOLOGY.md` and skipped injection silently when
+ * absent — in a project with a different layout the reviewer still scored the
+ * dimension it could no longer check (silent failure, the worst class: invisible
+ * and unfixable by the user). Missing pieces now say so, and the reviewer is told
+ * to state the limitation in its findings. Projects can point at their own files
+ * through `.thincoder/conventions.json` (advisor.docMap / advisor.standardsDoc).
+ */
+import { readFileSync, existsSync } from "node:fs"
+import { resolve, join, relative, dirname, sep } from "node:path"
+import { providerSpec } from "../config.mjs"
+import { loadConventions } from "../conventions.mjs"
+
+/** Project guide (AGENTS.md) injection budget — decision 2026-08-08:
+ *  NO fixed truncation; long-context models (1M+) get up to 5% of their context
+ *  window for the doc map, small windows still get a floor so the map is always
+ *  visible. The map is what tells the reviewer WHERE the requirements docs live
+ *  (requirement-fit is judged against those docs, not the conversation only). */
+const PROJECT_GUIDE_MIN = 8192 // chars — floor for small-window models
+const PROJECT_GUIDE_FRACTION = 0.05 // 5% of the reviewer model's context window
+
+/** Absent-AGENTS.md notice (guide is optional: the conversation carries intent). */
+export const NO_GUIDE_NOTICE = "(No AGENTS.md found — neither at the working directory root nor in any review-scope subdirectory. Judge the user's requirements from the conversation background, and say so explicitly if the requirements are unclear.)"
+
+/** Explicit degradation sentences (PORTABILITY design §4.4 — verbatim). */
+export const NO_DOC_MAP_NOTICE = "(No document map found under the project root, and none is declared — the Document ownership criterion is degraded: check placement against the Project Guide where present, and state the limitation in your findings.)"
+export const NO_STANDARDS_NOTICE = "(No project standards document was declared — judge methodology compliance from the Project Guide (when present) and the review criteria above; state the limitation in your findings.)"
+export const NO_GIT_NOTICE = "(No git repository detected — change-set context is unavailable; read the review-scope files directly.)"
+
+/**
+ * Discover the project root for the review — user decision 2026-08-08:
+ * the project root is a SUBDIRECTORY of the working directory, never an
+ * ancestor above it. Priority:
+ *   1. Walk UP from each review-scope file's directory, bounded by cwd —
+ *      the NEAREST AGENTS.md inside the workspace wins. In a monorepo this is
+ *      the subproject's own doc map even when cwd itself has an AGENTS.md
+ *      (a workspace-level meta map must not shadow the subproject guide).
+ *   2. No scope files / nothing found → cwd (single project; the walk's
+ *      last step naturally lands on cwd's own AGENTS.md when it exists).
+ * @param {string} cwd — the agent's working directory (workspace root)
+ * @param {string[]} scopeFiles — cwd-relative review-scope paths (may be empty)
+ * @returns {string|null} absolute project root with an AGENTS.md, or null
+ */
+export function findProjectRoot(cwd, scopeFiles) {
+  // Normalize separators before comparing: input paths may use either
+  // convention (join() → "\\" on Windows; tool args / tests → "/"). Mixed
+  // styles made isInside(cwd + sep) miss legitimately nested paths.
+  const norm = (p) => p.replaceAll("\\", "/")
+  const isInside = (dir) => {
+    const d = norm(dir)
+    const c = norm(cwd)
+    return d === c || d.startsWith(c + "/")
+  }
+  for (const f of scopeFiles) {
+    let dir = dirname(resolve(cwd, f))
+    while (isInside(dir) && dir !== dirname(dir)) {
+      if (existsSync(join(dir, "AGENTS.md"))) return dir
+      dir = dirname(dir)
+    }
+  }
+  // No scope files, or none found in the walk — cwd itself (its AGENTS.md is
+  // checked as the walk's final step for scope files; for empty scopes, check
+  // it explicitly so a bare cwd project still gets its guide).
+  if (existsSync(join(cwd, "AGENTS.md"))) return cwd
+  return null
+}
+
+/**
+ * Inject the project guide (AGENTS.md) into the review message. AGENTS.md is the
+ * project's doc map — it defines the structure and where requirements/design
+ * documents live. The reviewer must see it FIRST: requirement-fit is judged
+ * against the documents it points to, with the conversation background as a
+ * supplement. Absent AGENTS.md degrades honestly (no pretending there is a map).
+ * @param {Object} agent — the parent agent
+ * @param {string[]} parts — message parts (mutated)
+ * @param {string[]} [scopeFiles] — cwd-relative review-scope paths for project-root discovery
+ * @returns {string|null} the discovered project root (abs), or null when no guide
+ */
+export function injectProjectGuide(agent, parts, scopeFiles = []) {
+  parts.push("## Project Guide (AGENTS.md)")
+  const root = findProjectRoot(agent.cwd, scopeFiles)
+  const path = root ? join(root, "AGENTS.md") : null
+  let text
+  if (!path) {
+    parts.push(NO_GUIDE_NOTICE)
+    parts.push("")
+    return null // no guide — requirement-fit falls back to the conversation
+  }
+  try {
+    text = readFileSync(path, "utf8")
+  } catch (e) {
+    if (e.code !== "ENOENT") {
+      // File exists but is unreadable (EACCES etc.) — log, don't masquerade as "not found".
+      console.warn(`[advisor] AGENTS.md unreadable at ${path}: ${e.message}`)
+    }
+    parts.push(NO_GUIDE_NOTICE)
+    parts.push("")
+    return null // no guide — requirement-fit falls back to the conversation
+  }
+  // readFileSync succeeded — compute the budget OUTSIDE the try so a spec
+  // lookup failure can never masquerade as "no AGENTS.md".
+  // providerSpec: the project-guide budget follows the provider-level context
+  // override (PROVIDER.md §15 — advisor messages budget is context-based).
+  const ctx = providerSpec(agent.provider).context
+  const cap = Math.max(PROJECT_GUIDE_MIN, Math.floor(ctx * PROJECT_GUIDE_FRACTION))
+  const shown = text.length <= cap
+    ? text
+    : [...text].slice(0, cap).join("") + `\n\n…(truncated at ${cap} chars — read the full file if you need more)` // codepoint-safe slice: no broken surrogate pairs at the boundary
+  parts.push(`<!-- Project root: ${relative(agent.cwd, path).split(sep).join("/")} (inferred from the review scope under ${agent.cwd}) -->`)
+  parts.push("This file defines the project's structure and where its requirements/design documents live. Read the documents it points to — the user's requirements live THERE, not only in the conversation background.")
+  parts.push("")
+  parts.push(shown)
+  parts.push("")
+  return root // guide injected — requirement-fit criteria apply (truthy root)
+}
+
+/**
+ * Inject the project document map (PO-1). Resolution: the DECLARED path
+ * (`advisor.docMap`, project-root-relative) wins; the built-in probe
+ * (`docs/README.md` → `docs/design/README.md`) stays as a fallback for projects
+ * laid out that way. Neither usable → an explicit degradation sentence — never a
+ * silent skip: the reviewer must know the Document-ownership criterion is unchecked.
+ * @returns {string|null} the injected map path, or null when degraded
+ */
+export function injectDocumentMap(agent, parts, root) {
+  const base = root ?? agent.cwd
+  const conv = loadConventions(agent.cwd)
+  let mapPath = null
+  if (conv.advisor.docMap) {
+    const declared = resolve(base, conv.advisor.docMap)
+    if (existsSync(declared)) mapPath = declared
+  } else {
+    mapPath = [resolve(base, "docs", "README.md"), resolve(base, "docs", "design", "README.md")]
+      .find((p) => existsSync(p)) ?? null
+  }
+  parts.push("## Document Map")
+  let text = null
+  if (mapPath) {
+    try {
+      text = readFileSync(mapPath, "utf8")
+    } catch (e) {
+      console.warn(`[advisor] document map unreadable at ${mapPath}: ${e.message}`)
+    }
+  }
+  if (text === null) {
+    parts.push(NO_DOC_MAP_NOTICE) // degraded — visible by contract
+    parts.push("")
+    return null
+  }
+  parts.push("The document map below registers which document files exist per section. Use it for the Document ownership criterion: a change for an existing section must amend that section's document, not create a new file.")
+  parts.push(text)
+  parts.push("")
+  return mapPath
+}
+
+/**
+ * Inject the project standards document (PO-2). DECLARATION ONLY
+ * (`advisor.standardsDoc`, project-root-relative): the old hardcoded
+ * `METHODOLOGY.md` probe injected a file most projects do not have — and its
+ * absence was silent. Undeclared (or unreadable) → explicit degradation sentence.
+ * @returns {string|null} the injected standards path, or null when degraded
+ */
+export function injectProjectStandards(agent, parts, root) {
+  const base = root ?? agent.cwd
+  const conv = loadConventions(agent.cwd)
+  const declared = conv.advisor.standardsDoc ? resolve(base, conv.advisor.standardsDoc) : null
+  parts.push("## Project Standards")
+  let text = null
+  if (declared && existsSync(declared)) {
+    try {
+      text = readFileSync(declared, "utf8")
+    } catch (e) {
+      console.warn(`[advisor] project standards unreadable at ${declared}: ${e.message}`)
+    }
+  }
+  if (text === null) {
+    parts.push(NO_STANDARDS_NOTICE) // degraded — visible by contract
+    parts.push("")
+    return null
+  }
+  parts.push("The project declares these standards for this review. Judge the design/changes against them:")
+  parts.push(text)
+  parts.push("")
+  return declared
+}

package/src/advisor/repos.mjs

@@ -4,6 +4,7 @@
  */
 import { execFileSync } from "node:child_process"
 import { dirname, basename, resolve } from "node:path"
+import { loadConventions, isCodePath } from "../conventions.mjs"
 
 const GIT_TIMEOUT = 5_000
 const MAX_EMBEDDED_DIFF = 50_000
@@ -97,32 +98,10 @@ export function collectChangedFiles(repos, cwd) {
   return files
 }
 
-const DOC_FILE = /(?:^|[/\\])(?:LICENSE|NOTICE|CHANGELOG|AUTHORS)(?:\.\w+)?$|\.(?:md|markdown|mdx|txt|rst|adoc)$/i
-
-/** Temporary/scratch files that must NOT count as code mutations: tmp-* named
- *  scratch scripts (tmp-c1.mjs, tmp-check.mjs…) and .tmp/.temp extensions.
- *  The advisor/verify guards skip these — a throwaway diagnostic script is not
- *  a code change, and writing one must not push the agent into a review loop.
- *  NOTE: matches the tmp-* basename at ANY directory depth, not just root —
- *  intentional: _touchedFiles stores absolute paths, so the pattern must work
- *  for "D:/proj/tmp-check.mjs" as well as a bare "tmp-check.mjs". */
-const TEMP_FILE = /(?:^|[/\\])tmp-[^/\\]+$|\.(?:tmp|temp)$/i
-
-/** True when a path matches the doc/license pattern by extension or name.
- *  NOTE: this is extension-based only — it does NOT exclude src/ paths.
- *  Callers must separately check the src/ prefix for product-code semantics
- *  (e.g. src/prompts/*.md IS product code despite matching DOC_FILE).
- *  See isDocOnlyChange for the combined check. */
-export function isDocFile(p) {
-  return DOC_FILE.test(p ?? "")
-}
-
-/** True when a path is a throwaway temp file (tmp-* name or .tmp/.temp ext).
- *  Excluded from code-mutation detection so scratch scripts don't trigger
- *  advisor/verify guards. */
-export function isTempFile(p) {
-  return TEMP_FILE.test(p ?? "")
-}
+// Path classification (code / doc / temp) lives in ../conventions.mjs — the single
+// authority shared by every gate and guard (PORTABILITY FR12 / PO-10). This module
+// consumes it: `isDocFile` / `isTempFile` were retired here (no re-export — a second
+// import path would recreate the drift the authority exists to remove).
 
 /**
  * True when this run mutated at least one CODE file. Shared single source of
@@ -132,24 +111,22 @@ export function isTempFile(p) {
  * files (tmp-*, .tmp, .temp) are excluded too — a throwaway diagnostic script
  * is not a code change. Mutations without a known path (tools outside
  * FILE_MUTATORS) are treated as code — cannot tell, so guard conservatively.
- * Product-code semantics: anything under src/ (incl. src/prompts/*.md) is code;
- * anything else that isn't a doc or temp file is code.
- * NOTE: _touchedFiles stores ABSOLUTE paths (join(cwd, p)), so the src/ check
- * matches a path component (works for "src/..." and "D:\...\src\..." alike),
- * not a bare ^src prefix — the literal ^src[\\/] form would be dead code here.
+ * Classification semantics (incl. "a declared code segment wins over temp/doc")
+ * live in conventions.mjs; _touchedFiles stores ABSOLUTE paths, which the
+ * segment matcher handles at any depth.
  */
-export function hasCodeMutations({ _touchedFiles, _mutatedThisRun }) {
+export function hasCodeMutations({ _touchedFiles, _mutatedThisRun, cwd }) {
   const files = _touchedFiles ?? []
   if (files.length === 0) return _mutatedThisRun
-  // src/ is unconditional — anything under src/ is code regardless of its name
-  // (incl. src/tmp-*.mjs). Temp/doc exclusions apply only outside src/.
-  return files.some((p) => /(?:^|[\\/])src[\\/]/.test(p) || (!isTempFile(p) && !isDocFile(p)))
+  const conv = loadConventions(cwd)
+  return files.some((p) => isCodePath(p, conv))
 }
 
 /** True when all changed files across repos are documentation (md/txt/LICENSE etc.).
- *  Anything under src/ (incl. src/prompts/*.md) counts as product code —
- *  isProductCode semantics, consistent with the design gate. */
+ *  Anything inside a code segment (incl. src/prompts/*.md) counts as product code —
+ *  the same authority the design gate uses. Paths here are repo-relative. */
 export function isDocOnlyChange(repos, cwd) {
+  const conv = loadConventions(cwd)
   const targets = repos.length > 0 ? repos : [cwd]
   let sawChanges = false
   for (const repo of targets) {
@@ -164,9 +141,9 @@ export function isDocOnlyChange(repos, cwd) {
     for (const line of status.split("\n")) {
       // porcelain: "XY path" or "XY old -> new" (rename)
       const filePath = line.slice(3).split(" -> ").pop().replace(/^"|"$/g, "")
-      // src/ is unconditional product code (even src/tmp-*.mjs) — check before the temp skip
-      if (/^src[\\/]/.test(filePath) || !DOC_FILE.test(filePath)) return false
-      if (isTempFile(filePath)) continue
+      // Code (a declared code segment is unconditional, even for tmp-*.mjs) →
+      // not a doc-only change; docs and temp scratch files fall through.
+      if (isCodePath(filePath, conv)) return false
     }
   }
   return sawChanges