refactorai-cli 0.4.12__tar.gz → 0.4.14__tar.gz

{refactorai_cli-0.4.12 → refactorai_cli-0.4.14}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: refactorai-cli
-Version: 0.4.12
+Version: 0.4.14
 Summary: Local-first CLI for the refactor platform
 Requires-Python: >=3.11
 Description-Content-Type: text/markdown
@@ -8,7 +8,7 @@ Requires-Dist: typer>=0.12.0
 Requires-Dist: httpx>=0.27.0
 Requires-Dist: rich>=13.7.0
 Requires-Dist: PyYAML>=6.0.1
-Requires-Dist: refactorai-core>=3.2.7
+Requires-Dist: refactorai-core>=3.2.8
 
 # refactorai-cli
 

{refactorai_cli-0.4.12 → refactorai_cli-0.4.14}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "refactorai-cli"
-version = "0.4.12"
+version = "0.4.14"
 description = "Local-first CLI for the refactor platform"
 readme = "README.md"
 requires-python = ">=3.11"
@@ -12,7 +12,7 @@ dependencies = [
   "httpx>=0.27.0",
   "rich>=13.7.0",
   "PyYAML>=6.0.1",
-  "refactorai-core>=3.2.7",
+  "refactorai-core>=3.2.8",
 ]
 
 [project.scripts]

{refactorai_cli-0.4.12 → refactorai_cli-0.4.14}/refactorai_cli/__init__.py

@@ -5,4 +5,4 @@ the shared `refactor_core` pipeline from a project folder while staying
 authenticated to the hosted platform via a developer key.
 """
 
-__version__ = "0.4.12"
+__version__ = "0.4.14"

{refactorai_cli-0.4.12 → refactorai_cli-0.4.14}/refactorai_cli/commands/run_cmds.py

@@ -651,6 +651,26 @@ def _is_cloud_mode(constitution) -> bool:
     return bool(_cloud_execution_mode(constitution))
 
 
+def _documents_digest(documents: list | None) -> str:
+    """Stable digest of the exact documents sent to the platform.
+
+    Folds each document's path + content so a commit-scoped review keys on the
+    code it actually reviews. Without this, two commits share the same
+    idempotency key (same account/stage/constitution/target) and the server
+    replays the FIRST commit's findings for the second commit -- re-suggesting
+    changes that were already applied/merged (docs/41 `R28`).
+    """
+    hasher = hashlib.sha256()
+    for doc in sorted(documents or [], key=lambda d: str((d or {}).get("path", ""))):
+        if not isinstance(doc, dict):
+            continue
+        hasher.update(str(doc.get("path", "")).encode("utf-8"))
+        hasher.update(b"\x00")
+        hasher.update(str(doc.get("content", "")).encode("utf-8"))
+        hasher.update(b"\x1f")
+    return hasher.hexdigest()
+
+
 def _stable_idempotency_key(
     *,
     account_id: str,
@@ -659,15 +679,29 @@ def _stable_idempotency_key(
     target: str,
     max_alerts: int,
     execution_mode: str,
+    scope_digest: str = "",
 ) -> str:
     """Deterministic idempotency key so retries replay instead of re-charging (C10).
 
-    The key MUST change when inputs change (target/constitution/stage/mode) so
-    distinct runs are not incorrectly deduplicated, and MUST be stable across
+    The key MUST change when inputs change (target/constitution/stage/mode/scope)
+    so distinct runs are not incorrectly deduplicated, and MUST be stable across
     retries of the same logical run so managed quota is not double-charged.
+
+    ``scope_digest`` folds the actual reviewed documents into the key so a
+    commit-scoped review of a different commit (or of changed code) produces a
+    distinct key and a fresh server run, instead of replaying an earlier commit's
+    cached findings.
     """
     seed = "|".join(
-        [account_id, execution_mode, stage, constitution_hash, str(target), str(int(max_alerts))]
+        [
+            account_id,
+            execution_mode,
+            stage,
+            constitution_hash,
+            str(target),
+            str(int(max_alerts)),
+            scope_digest,
+        ]
     )
     return hashlib.sha256(seed.encode("utf-8")).hexdigest()
 
@@ -707,6 +741,10 @@ def _cloud_inference(
 
     execution_mode = _cloud_execution_mode(constitution) or "cloud_managed"
     auth_ctx = ensure_authenticated(project_root)
+    # Digest the exact documents so the idempotency key keys on the reviewed
+    # code, not just account/stage/target. (The backend independently recomputes
+    # a documents hash for its own replay guard, so this need not be sent.)
+    documents_hash = _documents_digest(documents)
     payload = {
         "stage": stage,
         "execution_mode": execution_mode,
@@ -728,6 +766,7 @@ def _cloud_inference(
         target=target,
         max_alerts=max_alerts,
         execution_mode=execution_mode,
+        scope_digest=documents_hash,
     )
     try:
         response = httpx.post(

{refactorai_cli-0.4.12 → refactorai_cli-0.4.14}/refactorai_cli.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: refactorai-cli
-Version: 0.4.12
+Version: 0.4.14
 Summary: Local-first CLI for the refactor platform
 Requires-Python: >=3.11
 Description-Content-Type: text/markdown
@@ -8,7 +8,7 @@ Requires-Dist: typer>=0.12.0
 Requires-Dist: httpx>=0.27.0
 Requires-Dist: rich>=13.7.0
 Requires-Dist: PyYAML>=6.0.1
-Requires-Dist: refactorai-core>=3.2.7
+Requires-Dist: refactorai-core>=3.2.8
 
 # refactorai-cli
 

{refactorai_cli-0.4.12 → refactorai_cli-0.4.14}/refactorai_cli.egg-info/requires.txt

@@ -2,4 +2,4 @@ typer>=0.12.0
 httpx>=0.27.0
 rich>=13.7.0
 PyYAML>=6.0.1
-refactorai-core>=3.2.7
+refactorai-core>=3.2.8