@bendyline/gezel 1.0.5 → 1.0.7

package/dist/checks/index.d.ts

@@ -40,6 +40,33 @@ interface CheckResult {
     detail: string;
 }
 
+/**
+ * Existence oracle for cited workspace paths — the shared spine of the
+ * anti-fabrication checks (`citationsResolve`, `securityReport`,
+ * `codebaseReviewReport`).
+ *
+ * `list()` is only a FAST PATH here, never ground truth. The real surface
+ * behind it walks the workspace breadth-first under an entry cap (500 on
+ * the service side) and skips dotfiles, so in any repo bigger than the cap
+ * a truthful citation (`packages/core/src/paths.ts`, `.gitignore`) is
+ * simply absent from the listing. Treating that absence as fabrication
+ * made the gates unsatisfiable by honest citation and pressured models
+ * toward exactly the shallow or invented paths the gates exist to catch
+ * (task gezel/8, 2026-08-23: a 3,843-file repo where only the first 500
+ * entries counted as "real"). A listing miss therefore falls back to a
+ * per-path `read()` probe before any path may be called fabricated.
+ */
+declare function createCitedPathChecker(ws: WorkspaceLike): (cited: string) => Promise<boolean>;
+/**
+ * Strip citation decoration down to a workspace-relative path: backticks,
+ * a `:line` / `#anchor` suffix, leading `./` or `/`, and a `workspace/`
+ * prefix. Case is preserved — the probe read needs the real path on
+ * case-sensitive filesystems; only the listing key lowercases.
+ */
+declare function cleanCitedPath(p: string): string;
+/** Case-insensitive membership key for listing entries and citations alike. */
+declare function citedPathKey(p: string): string;
+
 /**
  * HTML deliverable checks: truncation detection, inline-script
  * extraction, V8 syntax validation, and the two content sniffs the
@@ -325,19 +352,36 @@ interface CitationsResult extends CheckResult {
     unresolved: string[];
     /** Cited URLs (not checked offline unless a corpus allowlist is given). */
     urls: string[];
+    /** Unresolvable cited paths forgiven as task metadata (see `knownPaths`). */
+    forgiven?: string[];
 }
 /**
  * Every source `file` cites must exist. File-path citations are resolved
  * against the workspace listing (tolerant of leading `./`, `/`, and
- * `workspace/`, case-insensitive). URLs cannot be fetched offline, so
+ * `workspace/`, case-insensitive), with a per-path read probe for listing
+ * misses — the listing is capped and dotfile-blind, see
+ * `createCitedPathChecker`. URLs cannot be fetched offline, so
  * they pass unless `corpus` is supplied, in which case every cited path
  * AND URL must be a member of the allowlist. The anti-fabrication gate.
+ *
+ * `knownPaths` are paths the surrounding task itself supplied — invocation
+ * parameters, the step prompt's own path tokens, the artifact working
+ * folder. A cited path matching one of these that does NOT resolve is
+ * FORGIVEN (dropped from the citation set — it counts toward neither the
+ * minimum nor the fabrication verdict): transcribing the run's own
+ * metadata into a packet is bookkeeping, not sourcing. A knownPath that
+ * DOES resolve stays an ordinary resolved citation. Wild-caught: the
+ * powerpoint-deck research step requires sources.md to record the
+ * invocation inputs, and the backticked `tasks/8` / `powerpoint/task-8/
+ * deck.pptx` tokens — directory handles and a future output — read as six
+ * fabricated citations, failing the gate's honest no-research path.
  */
 declare function citationsResolve(ws: WorkspaceLike, file: string, opts?: {
     pattern?: string;
     flags?: string;
     minCitations?: number;
     corpus?: string[];
+    knownPaths?: readonly string[];
 }): Promise<CitationsResult>;
 /** Spec for {@link valuesSubsetOf}. */
 interface ValuesSubsetSpec {
@@ -392,6 +436,25 @@ interface SecurityReportResult extends CheckResult {
 }
 declare function securityReport(ws: WorkspaceLike, reportFile: string, opts?: SecurityReportOptions): Promise<SecurityReportResult>;
 
+interface CodebaseReviewReportOptions {
+    /** Path (in `reports`) to the machine-readable findings JSON. */
+    findings?: string;
+    /** Section headings the report must contain. */
+    requiredSections?: string[];
+    /** Minimum systemic themes required once findings ≥ themeThreshold. */
+    minThemes?: number;
+    /** Findings count at/above which systemic-theme synthesis is required. */
+    themeThreshold?: number;
+    /** Minimum data rows the Scorecard table must carry. */
+    minScorecardRows?: number;
+}
+interface CodebaseReviewReportResult extends CheckResult {
+    findingCount: number;
+    /** Cited files that don't exist in the workspace, for logs/facts. */
+    fabricated: string[];
+}
+declare function codebaseReviewReport(reports: WorkspaceLike, workspace: WorkspaceLike, reportFile: string, opts?: CodebaseReviewReportOptions): Promise<CodebaseReviewReportResult>;
+
 /** ISO yyyy-mm-dd AND a real calendar date (ported from data-wrangle). */
 declare function isRealIsoDate(value: string): boolean;
 /**
@@ -690,4 +753,40 @@ interface PlanStructureResult {
 }
 declare function planStructure(text: string, spec?: PlanStructureSpec): PlanStructureResult;
 
-export { type CellType, type CheckResult, type CitationsResult, type CsvShapeResult, type CsvShapeSpec, type EntitiesResult, type EntitySpec, type ExplainableSniff, type GroundingFact, type GroundingResult, IMG_EXT, type ImageRefsReport, type InlineScript, type JsonPathEqualsResult, type JsonScalar, type JudgeVerdict, MIN_INLINE_JS_BYTES, MIN_JUDGE_EVIDENCE_SUBSTRING, type MarkdownHeadingsMatchResult, type ParsedTable, type PlanRow, type PlanStructureResult, type PlanStructureSpec, type ReadingLevelResult, type RecordFieldSpec, type RecordSchemaResult, type RecordSchemaSpec, type ScriptValidation, type SecurityReportOptions, type SecurityReportResult, type TableShapeResult, type TableShapeSpec, type UnsupportedClaimPattern, type UnsupportedClaimViolation, type UnsupportedClaimsResult, type ValuesSubsetResult, type ValuesSubsetSpec, type WordBandResult, type WorkspaceLike, buildJudgePrompt, citationsResolve, containsPattern, countDistinctMatches, cssMinBytes, csvShape, dataTableSniff, detectTypeScriptOnlySyntax, detectUnclosedScript, esmImports, explainSniff, extractInlineScripts, fileCountByExt, fileMinBytes, fileMinLines, findImageRefs, grepMatches, htmlCompleteSniff, htmlGameSniff, imageRefsResolve, inlineJsBytes, isRealIsoDate, jsonPathEquals, jsonValid, markdownHeadingsMatch, namedEntitiesConsistent, normalizeDigitGroups, notContainsPattern, parseCsv, parseJudgeVerdict, parseMarkdownTable, planStructure, readingLevel, recordSchema, requireOrderedSections, resolveRelative, securityReport, standaloneJsParses, tableShape, totalMinBytes, unsupportedClaims, validateJudgeEvidence, validateScriptSyntax, valueGrounding, valuesSubsetOf, wordBand, wrapperReturnHint };
+interface CorpusCoverageShardInput {
+    path: string;
+    content: string;
+}
+interface CorpusCoverageLedger {
+    pullRequest?: number;
+    reviewedFiles: string[];
+    reviewedRecords: string[];
+    sources: Array<{
+        batchNumber: number;
+        shard: string;
+    }>;
+    complete: boolean;
+}
+interface CorpusCoverageMergeResult extends CheckResult {
+    ledger?: CorpusCoverageLedger;
+    content?: string;
+    expectedBatches: number;
+    mergedBatches: number;
+    missingBatches: number[];
+}
+/**
+ * Deterministically merge bounded corpus-coverage shards.
+ *
+ * The published batch manifest is the authority. Every accepted shard must
+ * name exactly one batch and reproduce that batch's path and record arrays in
+ * order; a parent cannot manufacture full-run coverage by copying paths that
+ * no child shard reported. Missing shards may be merged for an in-progress
+ * ledger, but malformed or out-of-scope shards always fail closed.
+ */
+declare function mergeCorpusCoverageShards(batchesContent: string, shards: readonly CorpusCoverageShardInput[], opts?: {
+    pullRequest?: number;
+    requireComplete?: boolean;
+    batchesFile?: string;
+}): CorpusCoverageMergeResult;
+
+export { type CellType, type CheckResult, type CitationsResult, type CodebaseReviewReportOptions, type CodebaseReviewReportResult, type CorpusCoverageLedger, type CorpusCoverageMergeResult, type CorpusCoverageShardInput, type CsvShapeResult, type CsvShapeSpec, type EntitiesResult, type EntitySpec, type ExplainableSniff, type GroundingFact, type GroundingResult, IMG_EXT, type ImageRefsReport, type InlineScript, type JsonPathEqualsResult, type JsonScalar, type JudgeVerdict, MIN_INLINE_JS_BYTES, MIN_JUDGE_EVIDENCE_SUBSTRING, type MarkdownHeadingsMatchResult, type ParsedTable, type PlanRow, type PlanStructureResult, type PlanStructureSpec, type ReadingLevelResult, type RecordFieldSpec, type RecordSchemaResult, type RecordSchemaSpec, type ScriptValidation, type SecurityReportOptions, type SecurityReportResult, type TableShapeResult, type TableShapeSpec, type UnsupportedClaimPattern, type UnsupportedClaimViolation, type UnsupportedClaimsResult, type ValuesSubsetResult, type ValuesSubsetSpec, type WordBandResult, type WorkspaceLike, buildJudgePrompt, citationsResolve, citedPathKey, cleanCitedPath, codebaseReviewReport, containsPattern, countDistinctMatches, createCitedPathChecker, cssMinBytes, csvShape, dataTableSniff, detectTypeScriptOnlySyntax, detectUnclosedScript, esmImports, explainSniff, extractInlineScripts, fileCountByExt, fileMinBytes, fileMinLines, findImageRefs, grepMatches, htmlCompleteSniff, htmlGameSniff, imageRefsResolve, inlineJsBytes, isRealIsoDate, jsonPathEquals, jsonValid, markdownHeadingsMatch, mergeCorpusCoverageShards, namedEntitiesConsistent, normalizeDigitGroups, notContainsPattern, parseCsv, parseJudgeVerdict, parseMarkdownTable, planStructure, readingLevel, recordSchema, requireOrderedSections, resolveRelative, securityReport, standaloneJsParses, tableShape, totalMinBytes, unsupportedClaims, validateJudgeEvidence, validateScriptSyntax, valueGrounding, valuesSubsetOf, wordBand, wrapperReturnHint };