@almightygpt/core 0.2.0

package/dist/context/redact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../src/context/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;CACpB;AA2CD,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAkB3D"}

package/dist/context/redact.js

@@ -0,0 +1,67 @@
+/**
+ * Secret redaction.
+ *
+ * Runs a battery of regex patterns over text and replaces matches with a
+ * `[REDACTED:<kind>:<short-hash>]` placeholder. The hash lets the user
+ * confirm two redactions refer to the same secret (useful for audit) without
+ * leaking the value.
+ *
+ * This is a defense-in-depth measure. The first line of defense is the
+ * `.almightyignore` file which prevents secret-bearing files from being
+ * included in the first place. Redaction catches what slips through.
+ *
+ * Patterns are deliberately conservative — false positives are better than
+ * leaking real secrets. Users can disable redaction via config if needed.
+ */
+import { createHash } from "node:crypto";
+const PATTERNS = [
+    // OpenAI keys
+    { kind: "openai_key", regex: /\bsk-[A-Za-z0-9]{20,}\b/g },
+    // GitHub PATs (classic + fine-grained)
+    { kind: "github_pat", regex: /\bgh[pousr]_[A-Za-z0-9]{20,}\b/g },
+    // Anthropic keys
+    { kind: "anthropic_key", regex: /\bsk-ant-[A-Za-z0-9_-]{20,}\b/g },
+    // Generic AWS access key id
+    { kind: "aws_access_key_id", regex: /\b(AKIA|ASIA)[A-Z0-9]{16}\b/g },
+    // Slack bot token
+    { kind: "slack_token", regex: /\bxox[abp]-[A-Za-z0-9-]{20,}\b/g },
+    // Generic JWT (3 base64url segments)
+    {
+        kind: "jwt",
+        regex: /\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/g,
+    },
+    // PEM private key block
+    {
+        kind: "pem_private_key",
+        regex: /-----BEGIN (?:RSA |EC |OPENSSH |PGP )?PRIVATE KEY-----[\s\S]+?-----END (?:RSA |EC |OPENSSH |PGP )?PRIVATE KEY-----/g,
+    },
+    // Bearer tokens in headers (catches "Authorization: Bearer <token>")
+    {
+        kind: "bearer_token",
+        regex: /\b[Bb]earer\s+[A-Za-z0-9_\-.~+/=]{16,}/g,
+    },
+    // Generic high-entropy key= or password= assignments in code / yaml / env
+    // (catches things like API_KEY="ABCDEFG..." or password: '...')
+    {
+        kind: "assignment_secret",
+        regex: /\b(?:api[_-]?key|secret|password|token|access[_-]?key)\s*[:=]\s*["']?([A-Za-z0-9+/=_\-.]{20,})["']?/gi,
+    },
+];
+export function redactSecrets(text) {
+    const counts = new Map();
+    let out = text;
+    for (const { kind, regex } of PATTERNS) {
+        out = out.replace(regex, (match) => {
+            const hash = shortHash(match);
+            counts.set(kind, (counts.get(kind) ?? 0) + 1);
+            return `[REDACTED:${kind}:${hash}]`;
+        });
+    }
+    const redactions = [...counts.entries()].map(([kind, count]) => ({ kind, count }));
+    const totalCount = redactions.reduce((sum, r) => sum + r.count, 0);
+    return { text: out, redactions, totalCount };
+}
+function shortHash(s) {
+    return createHash("sha256").update(s).digest("hex").slice(0, 8);
+}
+//# sourceMappingURL=redact.js.map

package/dist/context/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/context/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAkBzC,MAAM,QAAQ,GAAc;IAC1B,cAAc;IACd,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,0BAA0B,EAAE;IACzD,uCAAuC;IACvC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,iCAAiC,EAAE;IAChE,iBAAiB;IACjB,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,gCAAgC,EAAE;IAClE,4BAA4B;IAC5B,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,8BAA8B,EAAE;IACpE,kBAAkB;IAClB,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,iCAAiC,EAAE;IACjE,qCAAqC;IACrC;QACE,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,wDAAwD;KAChE;IACD,wBAAwB;IACxB;QACE,IAAI,EAAE,iBAAiB;QACvB,KAAK,EACH,qHAAqH;KACxH;IACD,qEAAqE;IACrE;QACE,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,yCAAyC;KACjD;IACD,0EAA0E;IAC1E,gEAAgE;IAChE;QACE,IAAI,EAAE,mBAAmB;QACzB,KAAK,EACH,uGAAuG;KAC1G;CACF,CAAC;AAEF,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,IAAI,GAAG,GAAG,IAAI,CAAC;IAEf,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,QAAQ,EAAE,CAAC;QACvC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE;YACjC,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAC9B,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9C,OAAO,aAAa,IAAI,IAAI,IAAI,GAAG,CAAC;QACtC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAqB,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAC5D,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CACrC,CAAC;IACF,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAEnE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAClE,CAAC"}

package/dist/git/status.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Git status safety check.
+ *
+ * Before any agent (or `almightygpt init`) writes a file that already exists,
+ * we check whether the target has uncommitted changes. If it does, refuse to
+ * overwrite — the user has work in progress that we should not silently
+ * destroy.
+ *
+ * This is the same rule the project's own CLAUDE.md enforces for the team,
+ * and it ships in the default Convention Pack rules so every adopter gets
+ * the same protection.
+ */
+export interface GitStatusCheck {
+    /** True if the file is tracked but modified, staged, or is an untracked path. */
+    dirty: boolean;
+    /** True if the target path is not inside a git repository. */
+    notInGitRepo?: boolean;
+    /** Raw git porcelain output if dirty, useful for surfacing context to the user. */
+    porcelain?: string;
+}
+/**
+ * Check whether a path has uncommitted changes in its containing git repo.
+ *
+ * - Returns `{ dirty: false, notInGitRepo: true }` if `repoRoot` is not a git
+ *   working tree. Callers may treat this as "no protection available; proceed".
+ * - Returns `{ dirty: false }` if the path is clean (or does not exist yet).
+ * - Returns `{ dirty: true, porcelain }` if `git status --short` reports
+ *   anything for the path.
+ *
+ * The relative path is normalized to use forward slashes (git's preferred form).
+ */
+export declare function checkGitStatus(repoRoot: string, relativePath: string): Promise<GitStatusCheck>;
+/**
+ * Assert that a path is safe to overwrite. Throws if dirty unless `force` is set.
+ *
+ * Intended call sites:
+ *   - `almightygpt init` when a convention file already exists.
+ *   - Reviewer adapters before writing `docs/<reviewer>-reviews/<topic>.md`.
+ *   - Any future agent that writes Markdown into a tracked path.
+ */
+export declare function assertSafeToWrite(repoRoot: string, relativePath: string, force?: boolean): Promise<void>;
+export declare class GitStatusDirtyError extends Error {
+    readonly path: string;
+    readonly porcelain: string;
+    readonly name = "GitStatusDirtyError";
+    constructor(message: string, path: string, porcelain: string);
+}
+//# sourceMappingURL=status.d.ts.map

package/dist/git/status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../src/git/status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,MAAM,WAAW,cAAc;IAC7B,iFAAiF;IACjF,KAAK,EAAE,OAAO,CAAC;IACf,8DAA8D;IAC9D,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,mFAAmF;IACnF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,cAAc,CAAC,CA8BzB;AAED;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,KAAK,UAAQ,GACZ,OAAO,CAAC,IAAI,CAAC,CAcf;AAED,qBAAa,mBAAoB,SAAQ,KAAK;aAI1B,IAAI,EAAE,MAAM;aACZ,SAAS,EAAE,MAAM;IAJnC,SAAkB,IAAI,yBAAyB;gBAE7C,OAAO,EAAE,MAAM,EACC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM;CAIpC"}

package/dist/git/status.js

@@ -0,0 +1,79 @@
+/**
+ * Git status safety check.
+ *
+ * Before any agent (or `almightygpt init`) writes a file that already exists,
+ * we check whether the target has uncommitted changes. If it does, refuse to
+ * overwrite — the user has work in progress that we should not silently
+ * destroy.
+ *
+ * This is the same rule the project's own CLAUDE.md enforces for the team,
+ * and it ships in the default Convention Pack rules so every adopter gets
+ * the same protection.
+ */
+import { execa } from "execa";
+/**
+ * Check whether a path has uncommitted changes in its containing git repo.
+ *
+ * - Returns `{ dirty: false, notInGitRepo: true }` if `repoRoot` is not a git
+ *   working tree. Callers may treat this as "no protection available; proceed".
+ * - Returns `{ dirty: false }` if the path is clean (or does not exist yet).
+ * - Returns `{ dirty: true, porcelain }` if `git status --short` reports
+ *   anything for the path.
+ *
+ * The relative path is normalized to use forward slashes (git's preferred form).
+ */
+export async function checkGitStatus(repoRoot, relativePath) {
+    const normalized = relativePath.replace(/\\/g, "/");
+    try {
+        const { stdout } = await execa("git", ["status", "--short", "--", normalized], {
+            cwd: repoRoot,
+            reject: false,
+            stripFinalNewline: true,
+        });
+        if (stdout.trim().length === 0) {
+            return { dirty: false };
+        }
+        return { dirty: true, porcelain: stdout };
+    }
+    catch (err) {
+        // execa throws if git is missing. Surface as not-in-repo so callers can
+        // proceed cautiously rather than crash.
+        const msg = err instanceof Error ? err.message : String(err);
+        if (msg.includes("ENOENT")) {
+            return { dirty: false, notInGitRepo: true };
+        }
+        // "not a git repository" returns non-zero but we used reject:false above,
+        // so this branch is rare. Still, treat unknown errors as no-protection.
+        return { dirty: false, notInGitRepo: true };
+    }
+}
+/**
+ * Assert that a path is safe to overwrite. Throws if dirty unless `force` is set.
+ *
+ * Intended call sites:
+ *   - `almightygpt init` when a convention file already exists.
+ *   - Reviewer adapters before writing `docs/<reviewer>-reviews/<topic>.md`.
+ *   - Any future agent that writes Markdown into a tracked path.
+ */
+export async function assertSafeToWrite(repoRoot, relativePath, force = false) {
+    if (force)
+        return;
+    const status = await checkGitStatus(repoRoot, relativePath);
+    if (!status.dirty)
+        return;
+    const lines = (status.porcelain ?? "").split("\n").filter(Boolean);
+    const detail = lines.map((l) => `    ${l}`).join("\n");
+    throw new GitStatusDirtyError(`Refusing to overwrite ${relativePath} — it has uncommitted changes:\n${detail}\n\n` +
+        `Commit or stash the changes, or re-run with --force to override.`, relativePath, status.porcelain ?? "");
+}
+export class GitStatusDirtyError extends Error {
+    path;
+    porcelain;
+    name = "GitStatusDirtyError";
+    constructor(message, path, porcelain) {
+        super(message);
+        this.path = path;
+        this.porcelain = porcelain;
+    }
+}
+//# sourceMappingURL=status.js.map

package/dist/git/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../src/git/status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAW9B;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAgB,EAChB,YAAoB;IAEpB,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAEpD,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAC5B,KAAK,EACL,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,CAAC,EACvC;YACE,GAAG,EAAE,QAAQ;YACb,MAAM,EAAE,KAAK;YACb,iBAAiB,EAAE,IAAI;SACxB,CACF,CAAC;QAEF,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC1B,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAC5C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,wEAAwE;QACxE,wCAAwC;QACxC,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAC9C,CAAC;QACD,0EAA0E;QAC1E,wEAAwE;QACxE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC9C,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAgB,EAChB,YAAoB,EACpB,KAAK,GAAG,KAAK;IAEb,IAAI,KAAK;QAAE,OAAO;IAElB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,CAAC,KAAK;QAAE,OAAO;IAE1B,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,MAAM,IAAI,mBAAmB,CAC3B,yBAAyB,YAAY,mCAAmC,MAAM,MAAM;QAClF,kEAAkE,EACpE,YAAY,EACZ,MAAM,CAAC,SAAS,IAAI,EAAE,CACvB,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAI1B;IACA;IAJA,IAAI,GAAG,qBAAqB,CAAC;IAC/C,YACE,OAAe,EACC,IAAY,EACZ,SAAiB;QAEjC,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,SAAI,GAAJ,IAAI,CAAQ;QACZ,cAAS,GAAT,SAAS,CAAQ;IAGnC,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,33 @@
+/**
+ * @almightygpt/core
+ *
+ * Core orchestrator, adapters, config, runs, and review logic.
+ * MVP 1 status:
+ *   - git/        ✅ task #8
+ *   - templates/  ✅ task #7 installer (used by init, task #6)
+ *   - config/     ✅ task #11 schema + loader
+ *   - adapters/   ✅ task #9 mock + task #10 OpenAI
+ *   - context/    ✅ task #13 manifest + secret redaction
+ *   - runs/       ✅ task #12 dual-artifact folder + run.json
+ *   - review/     ✅ task #11 diff review pipeline (with #12/#13/#14 wiring)
+ *   - budget/     ✅ task #14 BudgetTracker + BudgetExceededError
+ */
+export declare const VERSION = "0.2.0";
+export { checkGitStatus, assertSafeToWrite, GitStatusDirtyError, type GitStatusCheck, } from "./git/status.js";
+export { installTemplate, hasExistingConfig, type InstallOptions, type InstallResult, } from "./templates/install.js";
+export { loadConfig, ConfigError } from "./config/load.js";
+export { ConfigSchema, AgentConfigSchema, AgentRoleSchema, type Config, type AgentConfig, } from "./config/schema.js";
+export { AdapterError, MockAdapter, OpenAIAdapter, ClaudeAdapter, GeminiAdapter, type Adapter, type AdapterInput, type AdapterOutput, type AgentRole, type OpenAIAdapterOptions, type ClaudeAdapterOptions, type GeminiAdapterOptions, } from "./adapters/index.js";
+export { redactSecrets, type RedactionResult, type RedactionMatch } from "./context/redact.js";
+export { buildContextManifest, writeContextManifest, type ContextManifest, type ManifestFile, } from "./context/manifest.js";
+export { createRunFolder, writeRunMetadata, writeRunInput, writeAgentOutput, collectGitContext, type CreatedRunFolder, } from "./runs/folder.js";
+export type { RunMetadata, RunStatus, RunType, AgentMetrics, HumanDecision, DecisionStatus, } from "./runs/types.js";
+export { listRuns, findRunById, findLatestRun, formatDuration, type RunSummary, type ListRunsResult, type ListRunsOptions, } from "./runs/list.js";
+export { recordDecision, type RecordDecisionOptions, type RecordDecisionResult, } from "./runs/decide.js";
+export { runDiffReview, type DiffReviewOptions, type DiffReviewResult, } from "./review/run-diff-review.js";
+export { runWorkerReviewerReview, type WorkerReviewerOptions, type WorkerReviewerResult, } from "./review/run-worker-reviewer.js";
+export { collectGitDiff, type DiffOptions, type DiffResult } from "./review/diff.js";
+export { writeHumanReviewFile, ReviewFileExistsError, type WriteReviewFileOptions, } from "./review/write.js";
+export { BudgetTracker, BudgetExceededError, type BudgetCaps, } from "./review/budget.js";
+export type { ReviewEvent, ReviewEventHandler, AgentRoleInRun, } from "./review/events.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,eAAO,MAAM,OAAO,UAAU,CAAC;AAG/B,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACnB,KAAK,cAAc,GACpB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,KAAK,cAAc,EACnB,KAAK,aAAa,GACnB,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,eAAe,EACf,KAAK,MAAM,EACX,KAAK,WAAW,GACjB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EACL,YAAY,EACZ,WAAW,EACX,aAAa,EACb,aAAa,EACb,aAAa,EACb,KAAK,OAAO,EACZ,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,SAAS,EACd,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,GAC1B,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,aAAa,EAAE,KAAK,eAAe,EAAE,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC/F,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,KAAK,eAAe,EACpB,KAAK,YAAY,GAClB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,gBAAgB,GACtB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,WAAW,EACX,SAAS,EACT,OAAO,EACP,YAAY,EACZ,aAAa,EACb,cAAc,GACf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,QAAQ,EACR,WAAW,EACX,aAAa,EACb,cAAc,EACd,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,eAAe,GACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,cAAc,EACd,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,GAC1B,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,aAAa,EACb,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,GACtB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,uBAAuB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,GAC1B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,KAAK,WAAW,EAAE,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACrF,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,KAAK,sBAAsB,GAC5B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,KAAK,UAAU,GAChB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,WAAW,EACX,kBAAkB,EAClB,cAAc,GACf,MAAM,oBAAoB,CAAC"}

package/dist/index.js

@@ -0,0 +1,38 @@
+/**
+ * @almightygpt/core
+ *
+ * Core orchestrator, adapters, config, runs, and review logic.
+ * MVP 1 status:
+ *   - git/        ✅ task #8
+ *   - templates/  ✅ task #7 installer (used by init, task #6)
+ *   - config/     ✅ task #11 schema + loader
+ *   - adapters/   ✅ task #9 mock + task #10 OpenAI
+ *   - context/    ✅ task #13 manifest + secret redaction
+ *   - runs/       ✅ task #12 dual-artifact folder + run.json
+ *   - review/     ✅ task #11 diff review pipeline (with #12/#13/#14 wiring)
+ *   - budget/     ✅ task #14 BudgetTracker + BudgetExceededError
+ */
+export const VERSION = "0.2.0";
+// Git safety primitives
+export { checkGitStatus, assertSafeToWrite, GitStatusDirtyError, } from "./git/status.js";
+// Template installer
+export { installTemplate, hasExistingConfig, } from "./templates/install.js";
+// Config
+export { loadConfig, ConfigError } from "./config/load.js";
+export { ConfigSchema, AgentConfigSchema, AgentRoleSchema, } from "./config/schema.js";
+// Adapters
+export { AdapterError, MockAdapter, OpenAIAdapter, ClaudeAdapter, GeminiAdapter, } from "./adapters/index.js";
+// Context / redaction
+export { redactSecrets } from "./context/redact.js";
+export { buildContextManifest, writeContextManifest, } from "./context/manifest.js";
+// Runs
+export { createRunFolder, writeRunMetadata, writeRunInput, writeAgentOutput, collectGitContext, } from "./runs/folder.js";
+export { listRuns, findRunById, findLatestRun, formatDuration, } from "./runs/list.js";
+export { recordDecision, } from "./runs/decide.js";
+// Review pipeline
+export { runDiffReview, } from "./review/run-diff-review.js";
+export { runWorkerReviewerReview, } from "./review/run-worker-reviewer.js";
+export { collectGitDiff } from "./review/diff.js";
+export { writeHumanReviewFile, ReviewFileExistsError, } from "./review/write.js";
+export { BudgetTracker, BudgetExceededError, } from "./review/budget.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC;AAE/B,wBAAwB;AACxB,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,mBAAmB,GAEpB,MAAM,iBAAiB,CAAC;AAEzB,qBAAqB;AACrB,OAAO,EACL,eAAe,EACf,iBAAiB,GAGlB,MAAM,wBAAwB,CAAC;AAEhC,SAAS;AACT,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,eAAe,GAGhB,MAAM,oBAAoB,CAAC;AAE5B,WAAW;AACX,OAAO,EACL,YAAY,EACZ,WAAW,EACX,aAAa,EACb,aAAa,EACb,aAAa,GAQd,MAAM,qBAAqB,CAAC;AAE7B,sBAAsB;AACtB,OAAO,EAAE,aAAa,EAA6C,MAAM,qBAAqB,CAAC;AAC/F,OAAO,EACL,oBAAoB,EACpB,oBAAoB,GAGrB,MAAM,uBAAuB,CAAC;AAE/B,OAAO;AACP,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,iBAAiB,GAElB,MAAM,kBAAkB,CAAC;AAS1B,OAAO,EACL,QAAQ,EACR,WAAW,EACX,aAAa,EACb,cAAc,GAIf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,cAAc,GAGf,MAAM,kBAAkB,CAAC;AAE1B,kBAAkB;AAClB,OAAO,EACL,aAAa,GAGd,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,uBAAuB,GAGxB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,cAAc,EAAqC,MAAM,kBAAkB,CAAC;AACrF,OAAO,EACL,oBAAoB,EACpB,qBAAqB,GAEtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,aAAa,EACb,mBAAmB,GAEpB,MAAM,oBAAoB,CAAC"}

package/dist/review/budget.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Budget tracking and enforcement for review runs.
+ *
+ * Two checks:
+ *   - Pre-flight: estimate cost from prompt size + max output tokens, abort
+ *     if estimate already exceeds maxCostPerRunUsd.
+ *   - Post-call: aggregate actual cost across all adapter calls in the run,
+ *     abort if cap is breached.
+ *
+ * Estimates use the same PRICING_USD_PER_1M table as the OpenAI adapter.
+ * For non-OpenAI providers we fall back to a conservative default.
+ */
+export declare class BudgetExceededError extends Error {
+    readonly stage: "pre-flight" | "post-call";
+    readonly capUsd: number;
+    readonly actualUsd: number;
+    readonly name = "BudgetExceededError";
+    constructor(message: string, stage: "pre-flight" | "post-call", capUsd: number, actualUsd: number);
+}
+export interface BudgetCaps {
+    maxCostPerRunUsd: number;
+    maxTokensPerRun: number;
+}
+export declare class BudgetTracker {
+    private readonly caps;
+    private totalCostUsd;
+    private totalTokens;
+    constructor(caps: BudgetCaps);
+    /** Conservative pre-flight check before calling an adapter. */
+    preflightCheck(opts: {
+        model: string;
+        estimatedTokensIn: number;
+        maxOutputTokens: number;
+    }): void;
+    /** Record actual usage after a successful adapter call; trip the cap if exceeded. */
+    record(opts: {
+        tokensIn: number;
+        tokensOut: number;
+        costUsd: number;
+    }): void;
+    get totals(): {
+        costUsd: number;
+        tokens: number;
+    };
+}
+//# sourceMappingURL=budget.d.ts.map

package/dist/review/budget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget.d.ts","sourceRoot":"","sources":["../../src/review/budget.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAoBH,qBAAa,mBAAoB,SAAQ,KAAK;aAI1B,KAAK,EAAE,YAAY,GAAG,WAAW;aACjC,MAAM,EAAE,MAAM;aACd,SAAS,EAAE,MAAM;IALnC,SAAkB,IAAI,yBAAyB;gBAE7C,OAAO,EAAE,MAAM,EACC,KAAK,EAAE,YAAY,GAAG,WAAW,EACjC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM;CAIpC;AAED,MAAM,WAAW,UAAU;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,qBAAa,aAAa;IAIZ,OAAO,CAAC,QAAQ,CAAC,IAAI;IAHjC,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,WAAW,CAAK;gBAEK,IAAI,EAAE,UAAU;IAE7C,+DAA+D;IAC/D,cAAc,CAAC,IAAI,EAAE;QACnB,KAAK,EAAE,MAAM,CAAC;QACd,iBAAiB,EAAE,MAAM,CAAC;QAC1B,eAAe,EAAE,MAAM,CAAC;KACzB,GAAG,IAAI;IAmBR,qFAAqF;IACrF,MAAM,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAuB5E,IAAI,MAAM,IAAI;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAEhD;CACF"}

package/dist/review/budget.js

@@ -0,0 +1,83 @@
+/**
+ * Budget tracking and enforcement for review runs.
+ *
+ * Two checks:
+ *   - Pre-flight: estimate cost from prompt size + max output tokens, abort
+ *     if estimate already exceeds maxCostPerRunUsd.
+ *   - Post-call: aggregate actual cost across all adapter calls in the run,
+ *     abort if cap is breached.
+ *
+ * Estimates use the same PRICING_USD_PER_1M table as the OpenAI adapter.
+ * For non-OpenAI providers we fall back to a conservative default.
+ */
+const DEFAULT_INPUT_USD_PER_1M = 3.0;
+const DEFAULT_OUTPUT_USD_PER_1M = 15.0;
+const KNOWN_PRICING = {
+    "gpt-4o": { input: 2.5, output: 10.0 },
+    "gpt-4o-mini": { input: 0.15, output: 0.6 },
+    "gpt-4-turbo": { input: 10.0, output: 30.0 },
+    "gpt-3.5-turbo": { input: 0.5, output: 1.5 },
+    "claude-3-5-sonnet": { input: 3.0, output: 15.0 },
+    "claude-3-5-haiku": { input: 0.8, output: 4.0 },
+    "claude-3-opus": { input: 15.0, output: 75.0 },
+    "gemini-2.5-pro": { input: 1.25, output: 10.0 },
+    "gemini-2.5-flash": { input: 0.3, output: 2.5 },
+    "gemini-2.0-flash": { input: 0.1, output: 0.4 },
+    "gemini-1.5-pro": { input: 1.25, output: 5.0 },
+    "gemini-1.5-flash": { input: 0.075, output: 0.3 },
+};
+export class BudgetExceededError extends Error {
+    stage;
+    capUsd;
+    actualUsd;
+    name = "BudgetExceededError";
+    constructor(message, stage, capUsd, actualUsd) {
+        super(message);
+        this.stage = stage;
+        this.capUsd = capUsd;
+        this.actualUsd = actualUsd;
+    }
+}
+export class BudgetTracker {
+    caps;
+    totalCostUsd = 0;
+    totalTokens = 0;
+    constructor(caps) {
+        this.caps = caps;
+    }
+    /** Conservative pre-flight check before calling an adapter. */
+    preflightCheck(opts) {
+        const rates = lookupPricing(opts.model);
+        const estimatedCost = (opts.estimatedTokensIn / 1_000_000) * rates.input +
+            (opts.maxOutputTokens / 1_000_000) * rates.output;
+        const projected = this.totalCostUsd + estimatedCost;
+        if (projected > this.caps.maxCostPerRunUsd) {
+            throw new BudgetExceededError(`Pre-flight cost estimate $${projected.toFixed(4)} exceeds budget cap ` +
+                `$${this.caps.maxCostPerRunUsd.toFixed(4)}. Lower max_output_tokens, ` +
+                `shrink the diff, or raise budget.maxCostPerRunUsd in .almightygpt/config.yaml.`, "pre-flight", this.caps.maxCostPerRunUsd, projected);
+        }
+    }
+    /** Record actual usage after a successful adapter call; trip the cap if exceeded. */
+    record(opts) {
+        this.totalCostUsd += opts.costUsd;
+        this.totalTokens += opts.tokensIn + opts.tokensOut;
+        if (this.totalCostUsd > this.caps.maxCostPerRunUsd) {
+            throw new BudgetExceededError(`Run cost $${this.totalCostUsd.toFixed(4)} exceeded cap ` +
+                `$${this.caps.maxCostPerRunUsd.toFixed(4)} after adapter call.`, "post-call", this.caps.maxCostPerRunUsd, this.totalCostUsd);
+        }
+        if (this.totalTokens > this.caps.maxTokensPerRun) {
+            throw new BudgetExceededError(`Run tokens ${this.totalTokens} exceeded cap ${this.caps.maxTokensPerRun}.`, "post-call", this.caps.maxTokensPerRun, this.totalTokens);
+        }
+    }
+    get totals() {
+        return { costUsd: this.totalCostUsd, tokens: this.totalTokens };
+    }
+}
+function lookupPricing(model) {
+    const key = Object.keys(KNOWN_PRICING).find((k) => model.toLowerCase().startsWith(k));
+    if (!key) {
+        return { input: DEFAULT_INPUT_USD_PER_1M, output: DEFAULT_OUTPUT_USD_PER_1M };
+    }
+    return KNOWN_PRICING[key];
+}
+//# sourceMappingURL=budget.js.map

package/dist/review/budget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget.js","sourceRoot":"","sources":["../../src/review/budget.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,wBAAwB,GAAG,GAAG,CAAC;AACrC,MAAM,yBAAyB,GAAG,IAAI,CAAC;AAEvC,MAAM,aAAa,GAAsD;IACvE,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE;IACtC,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE;IAC3C,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IAC5C,eAAe,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE;IAC5C,mBAAmB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE;IACjD,kBAAkB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE;IAC/C,eAAe,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IAC9C,gBAAgB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IAC/C,kBAAkB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE;IAC/C,kBAAkB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE;IAC/C,gBAAgB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE;IAC9C,kBAAkB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE;CAClD,CAAC;AAEF,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAI1B;IACA;IACA;IALA,IAAI,GAAG,qBAAqB,CAAC;IAC/C,YACE,OAAe,EACC,KAAiC,EACjC,MAAc,EACd,SAAiB;QAEjC,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,UAAK,GAAL,KAAK,CAA4B;QACjC,WAAM,GAAN,MAAM,CAAQ;QACd,cAAS,GAAT,SAAS,CAAQ;IAGnC,CAAC;CACF;AAOD,MAAM,OAAO,aAAa;IAIK;IAHrB,YAAY,GAAG,CAAC,CAAC;IACjB,WAAW,GAAG,CAAC,CAAC;IAExB,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD,+DAA+D;IAC/D,cAAc,CAAC,IAId;QACC,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,aAAa,GACjB,CAAC,IAAI,CAAC,iBAAiB,GAAG,SAAS,CAAC,GAAG,KAAK,CAAC,KAAK;YAClD,CAAC,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;QACpD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,GAAG,aAAa,CAAC;QAEpD,IAAI,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3C,MAAM,IAAI,mBAAmB,CAC3B,6BAA6B,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB;gBACrE,IAAI,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,6BAA6B;gBACtE,gFAAgF,EAClF,YAAY,EACZ,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAC1B,SAAS,CACV,CAAC;QACJ,CAAC;IACH,CAAC;IAED,qFAAqF;IACrF,MAAM,CAAC,IAA8D;QACnE,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,OAAO,CAAC;QAClC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC;QAEnD,IAAI,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACnD,MAAM,IAAI,mBAAmB,CAC3B,aAAa,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB;gBACvD,IAAI,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,EACjE,WAAW,EACX,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAC1B,IAAI,CAAC,YAAY,CAClB,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YACjD,MAAM,IAAI,mBAAmB,CAC3B,cAAc,IAAI,CAAC,WAAW,iBAAiB,IAAI,CAAC,IAAI,CAAC,eAAe,GAAG,EAC3E,WAAW,EACX,IAAI,CAAC,IAAI,CAAC,eAAe,EACzB,IAAI,CAAC,WAAW,CACjB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,MAAM;QACR,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;IAClE,CAAC;CACF;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAChD,KAAK,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAClC,CAAC;IACF,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,KAAK,EAAE,wBAAwB,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IAChF,CAAC;IACD,OAAO,aAAa,CAAC,GAAG,CAAE,CAAC;AAC7B,CAAC"}

package/dist/review/diff.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Collect a git diff for review.
+ *
+ * Default: uncommitted working tree changes (staged + unstaged).
+ * Optional range: e.g. "HEAD~1..HEAD" to review the last commit.
+ */
+export interface DiffResult {
+    diff: string;
+    /** Files touched in the diff (relative paths). */
+    files: string[];
+    /** True if the working tree had no changes and no range was supplied. */
+    empty: boolean;
+}
+export interface DiffOptions {
+    /** Optional git range like "HEAD~3..HEAD". If omitted, uncommitted changes. */
+    range?: string;
+    /** Hard cap on diff size to avoid blowing the context window. Default 200 KB. */
+    maxBytes?: number;
+}
+export declare function collectGitDiff(repoRoot: string, opts?: DiffOptions): Promise<DiffResult>;
+//# sourceMappingURL=diff.d.ts.map

package/dist/review/diff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.d.ts","sourceRoot":"","sources":["../../src/review/diff.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,kDAAkD;IAClD,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,yEAAyE;IACzE,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,+EAA+E;IAC/E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAsB,cAAc,CAClC,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE,WAAgB,GACrB,OAAO,CAAC,UAAU,CAAC,CAqCrB"}

package/dist/review/diff.js

@@ -0,0 +1,55 @@
+/**
+ * Collect a git diff for review.
+ *
+ * Default: uncommitted working tree changes (staged + unstaged).
+ * Optional range: e.g. "HEAD~1..HEAD" to review the last commit.
+ */
+import { execa } from "execa";
+export async function collectGitDiff(repoRoot, opts = {}) {
+    const maxBytes = opts.maxBytes ?? 200_000;
+    const args = ["diff", "--no-color"];
+    if (opts.range) {
+        args.push(opts.range);
+    }
+    else {
+        // Include staged + unstaged + untracked-vs-HEAD.
+        args.push("HEAD");
+    }
+    const { stdout, exitCode } = await execa("git", args, {
+        cwd: repoRoot,
+        reject: false,
+        stripFinalNewline: false,
+        maxBuffer: maxBytes * 2,
+    });
+    // exitCode is 0 on success, 1 on dirty diff in some git modes; treat both as ok.
+    if (exitCode !== 0 && exitCode !== 1) {
+        throw new Error(`git diff failed with exit ${exitCode}. Args: ${args.join(" ")}`);
+    }
+    const truncated = stdout.length > maxBytes
+        ? stdout.slice(0, maxBytes) +
+            `\n\n[…truncated — diff exceeded ${maxBytes} bytes]\n`
+        : stdout;
+    const files = await collectFilesInDiff(repoRoot, opts.range);
+    return {
+        diff: truncated,
+        files,
+        empty: truncated.trim().length === 0,
+    };
+}
+async function collectFilesInDiff(repoRoot, range) {
+    const args = ["diff", "--name-only"];
+    if (range)
+        args.push(range);
+    else
+        args.push("HEAD");
+    const { stdout } = await execa("git", args, {
+        cwd: repoRoot,
+        reject: false,
+        stripFinalNewline: true,
+    });
+    return stdout
+        .split("\n")
+        .map((s) => s.trim())
+        .filter(Boolean);
+}
+//# sourceMappingURL=diff.js.map

package/dist/review/diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.js","sourceRoot":"","sources":["../../src/review/diff.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAiB9B,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAgB,EAChB,OAAoB,EAAE;IAEtB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC;IAC1C,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;SAAM,CAAC;QACN,iDAAiD;QACjD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE;QACpD,GAAG,EAAE,QAAQ;QACb,MAAM,EAAE,KAAK;QACb,iBAAiB,EAAE,KAAK;QACxB,SAAS,EAAE,QAAQ,GAAG,CAAC;KACxB,CAAC,CAAC;IAEH,iFAAiF;IACjF,IAAI,QAAQ,KAAK,CAAC,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,6BAA6B,QAAQ,WAAW,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CACjE,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GACb,MAAM,CAAC,MAAM,GAAG,QAAQ;QACtB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC;YACzB,mCAAmC,QAAQ,WAAW;QACxD,CAAC,CAAC,MAAM,CAAC;IAEb,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAE7D,OAAO;QACL,IAAI,EAAE,SAAS;QACf,KAAK;QACL,KAAK,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;KACrC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,QAAgB,EAChB,KAAc;IAEd,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACrC,IAAI,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;QACvB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEvB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE;QAC1C,GAAG,EAAE,QAAQ;QACb,MAAM,EAAE,KAAK;QACb,iBAAiB,EAAE,IAAI;KACxB,CAAC,CAAC;IAEH,OAAO,MAAM;SACV,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC"}

package/dist/review/events.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Review run event stream.
+ *
+ * Emitted by review pipelines via an optional `onEvent` callback. The CLI
+ * uses these events to drive both human progress output and the structured
+ * --json stream that future VS Code / dashboard surfaces will consume.
+ *
+ * Each event is a discriminated union — the `type` field is the
+ * discriminator. Tooling should be tolerant of unknown event types so we
+ * can add new ones without breaking existing consumers.
+ */
+export type AgentRoleInRun = "worker" | "reviewer" | "judge";
+export type ReviewEvent = RunStartedEvent | AgentStartedEvent | AgentCompletedEvent | RedactionCompleteEvent | ReviewWrittenEvent | RunCompletedEvent | RunFailedEvent;
+export interface RunStartedEvent {
+    type: "run_started";
+    runId: string;
+    runType: string;
+    topic: string;
+    reviewsDir: string;
+    runFolder: string;
+}
+export interface AgentStartedEvent {
+    type: "agent_started";
+    role: AgentRoleInRun;
+    agent: string;
+    provider: string;
+}
+export interface AgentCompletedEvent {
+    type: "agent_completed";
+    role: AgentRoleInRun;
+    agent: string;
+    provider: string;
+    model: string;
+    outputPath: string;
+    tokensIn: number;
+    tokensOut: number;
+    costUsd: number;
+    latencyMs: number;
+}
+export interface RedactionCompleteEvent {
+    type: "redaction_complete";
+    totalCount: number;
+    byKind: {
+        kind: string;
+        count: number;
+    }[];
+}
+export interface ReviewWrittenEvent {
+    type: "review_written";
+    reviewPath: string;
+    bytes: number;
+    shallowWarning?: string;
+}
+export interface RunCompletedEvent {
+    type: "run_completed";
+    runId: string;
+    reviewPath: string;
+    runFolder: string;
+    totals: {
+        tokensIn: number;
+        tokensOut: number;
+        costUsd: number;
+        latencyMs: number;
+    };
+}
+export interface RunFailedEvent {
+    type: "run_failed";
+    runId: string;
+    error: {
+        name: string;
+        message: string;
+    };
+}
+/** Callback signature for receiving the event stream. */
+export type ReviewEventHandler = (event: ReviewEvent) => void;
+//# sourceMappingURL=events.d.ts.map

package/dist/review/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/review/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,UAAU,GAAG,OAAO,CAAC;AAE7D,MAAM,MAAM,WAAW,GACnB,eAAe,GACf,iBAAiB,GACjB,mBAAmB,GACnB,sBAAsB,GACtB,kBAAkB,GAClB,iBAAiB,GACjB,cAAc,CAAC;AAEnB,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,aAAa,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,eAAe,CAAC;IACtB,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,iBAAiB,CAAC;IACxB,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,oBAAoB,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC3C;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,gBAAgB,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,eAAe,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE;QACN,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,YAAY,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1C;AAED,yDAAyD;AACzD,MAAM,MAAM,kBAAkB,GAAG,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC"}

package/dist/review/events.js

@@ -0,0 +1,13 @@
+/**
+ * Review run event stream.
+ *
+ * Emitted by review pipelines via an optional `onEvent` callback. The CLI
+ * uses these events to drive both human progress output and the structured
+ * --json stream that future VS Code / dashboard surfaces will consume.
+ *
+ * Each event is a discriminated union — the `type` field is the
+ * discriminator. Tooling should be tolerant of unknown event types so we
+ * can add new ones without breaking existing consumers.
+ */
+export {};
+//# sourceMappingURL=events.js.map

package/dist/review/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../src/review/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG"}