fix(cli): ESM-compatible child_process import + execSync injection in git-staged.ts

[Copilot]

import child_process from "node:child_process" is invalid in Node ESM — node:child_process has no default export, throwing at runtime in a "type": "module" package.

Changes

• Named import: import { execSync } from "node:child_process" replaces the broken default import
• Dependency injection: getStagedFiles now accepts an optional exec: ExecFn = execSync parameter; all existing callers with no arguments are unaffected
• Test cleanup: removed require() cache mutation in favor of passing a mock exec directly — getStagedFiles(mockExec)
• Path sanitization fix: extracted escapePath() helper that escapes backslashes before double-quotes (previously only quotes were escaped, leaving paths with backslashes vulnerable to shell interpretation)

// Before — invalid ESM default import
import child_process from "node:child_process";
child_process.execSync(cmd, { encoding: "utf8" });

// After — named import + injectable exec
import { execSync } from "node:child_process";
export function getStagedFiles(exec: ExecFn = execSync): StagedFile[] { … }

// Test — no more require() cache mutation
const files = getStagedFiles((cmd) => mockOutputs[cmd] ?? "");

---

📍 Connect Copilot coding agent with Jira, Azure Boards or Linear to delegate work to Copilot in one click without leaving your project management tool.

[Copilot]

Pull request overview

This PR updates the CLI traceability “git-staged” utilities to be more testable and ESM-compatible by injecting the git execution function instead of relying on mutating the child_process module cache.

Changes:

• Switch git-staged.ts from a default child_process import to a named execSync import and allow dependency injection of the exec function.
• Add escapePath() and use it when building git diff / git show commands.
• Update the Bun test to pass a mock exec function into getStagedFiles().

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

File	Description
packages/cli/src/traceability/git-staged.ts	Refactors git command execution to accept an injected exec function and updates path escaping/quoting.
packages/cli/tests/traceability/traceability.test.ts	Updates staged-files test to use exec injection instead of mutating the module cache.

---

You can also share your feedback on Copilot code review. Take the survey.