@claudexor/orchestrator 1.0.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 joi-lab
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,7 @@
+# @claudexor/orchestrator
+
+Internal package of [Claudexor](https://github.com/razzant/claudexor) — Hub that composes all subsystems and implements the five canonical modes (ask, plan, audit, agent, orchestrate) with their strategy flags (best-of-N race, attempt caps, until-clean, swarm, create).
+
+Published as part of the Claudexor toolchain; it follows the monorepo's
+lockstep version and has no separate semver contract. Use the `claudexor`
+CLI (or `@claudexor/cli`) as the supported entry point.

package/dist/attemptTelemetry.d.ts

@@ -0,0 +1,82 @@
+/**
+ * Attempt-level telemetry: the single owner of tool-error records, web
+ * evidence state, transient-failure observations, and the attempt outcome
+ * truth. Adapters emit typed events; the orchestrator observes them here —
+ * no regex over prose, and a tool error is "recovered" only when the SAME
+ * tool later succeeds against the SAME target.
+ */
+import type { AttemptTelemetryRecord, ExternalContextPolicy, HarnessEvent, TaskContract, ToolKind } from "@claudexor/schema";
+export interface ToolErrorRecord {
+    tool: string;
+    kind: ToolKind;
+    target: string | null;
+    summary: string;
+    toolUseId: string | null;
+    /** True when a later successful result of the SAME tool against the SAME target exists in this attempt (INV-043). */
+    recovered: boolean;
+}
+export type AttemptOutcomeStatus = "success" | "success_with_warnings" | "blocked" | "failed";
+export interface AttemptOutcomeState {
+    deliverablePresent: boolean;
+    gatesPassed: boolean | null;
+    harnessErrored: boolean;
+    webRequiredUnsatisfied: boolean;
+    toolWarningsCount: number;
+    status: AttemptOutcomeStatus;
+}
+export interface WebEvidenceState {
+    required: boolean;
+    mode: ExternalContextPolicy;
+    effectiveMode: ExternalContextPolicy;
+    attempted: boolean;
+    satisfied: boolean;
+    failed: boolean;
+    tool: string | null;
+    target: string | null;
+    errorSummary: string | null;
+}
+export interface AttemptTelemetry {
+    toolErrors: ToolErrorRecord[];
+    /** tool_result events without a status field: never silently treated as ok. */
+    statuslessResults: number;
+    /** Native lines/events the adapter reported as dropped/unrecognized. */
+    droppedEvents: number;
+    web: WebEvidenceState;
+    /** Model identity the harness stream actually reported (route evidence). */
+    observedModel: string | null;
+    /** Adapter-declared transient failures seen during this attempt. */
+    transientFailures: {
+        kind: NonNullable<HarnessEvent["transient"]>["kind"];
+        retryDelayMs: number | null;
+    }[];
+    /** Contract/outcome truth for this attempt, produced by the orchestrator. */
+    outcome: AttemptOutcomeState | null;
+}
+export declare function createAttemptTelemetry(policy: ExternalContextPolicy, webRequired: boolean, effectiveMode?: ExternalContextPolicy): AttemptTelemetry;
+/**
+ * Observe a normalized harness event into the attempt telemetry. Governance is
+ * fully typed: only the `tool` ToolRef on tool_call/tool_result/file_change
+ * events and the run-loop drop counters are consulted — never payload string
+ * matching or tool-name heuristics.
+ */
+export declare function observeAttemptTelemetry(t: AttemptTelemetry, ev: HarnessEvent): void;
+export declare function unrecoveredToolErrors(t: AttemptTelemetry): ToolErrorRecord[];
+export declare function toolWarnings(t: AttemptTelemetry): ToolErrorRecord[];
+export declare function setAttemptOutcome(t: AttemptTelemetry, opts: {
+    deliverablePresent: boolean;
+    gatesPassed: boolean | null;
+    harnessErrored: boolean;
+    webRequiredUnsatisfied: boolean;
+}): void;
+/** Bounded telemetry summary for events/artifacts (full detail lives in telemetry.yaml). */
+export declare function telemetrySummary(t: AttemptTelemetry): Record<string, unknown>;
+export declare function attemptTelemetryRecord(attemptId: string, harnessId: string, t: AttemptTelemetry): AttemptTelemetryRecord;
+export declare function aggregateRunWebEvidence(records: AttemptTelemetryRecord[], contract: TaskContract): AttemptTelemetryRecord["web"];
+/**
+ * Web evidence gating (locked v0.7 semantics):
+ * - web_required && !satisfied  -> blocked, INCLUDING the never-attempted case;
+ * - attempted && failed && !satisfied -> blocked (a later successful web call
+ *   is the verified recovery that clears it).
+ */
+export declare function webUnsatisfied(t: AttemptTelemetry): boolean;
+//# sourceMappingURL=attemptTelemetry.d.ts.map

package/dist/attemptTelemetry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attemptTelemetry.d.ts","sourceRoot":"","sources":["../src/attemptTelemetry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAG7H,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,qHAAqH;IACrH,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,uBAAuB,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE9F,MAAM,WAAW,mBAAmB;IAClC,kBAAkB,EAAE,OAAO,CAAC;IAC5B,WAAW,EAAE,OAAO,GAAG,IAAI,CAAC;IAC5B,cAAc,EAAE,OAAO,CAAC;IACxB,sBAAsB,EAAE,OAAO,CAAC;IAChC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,oBAAoB,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,EAAE,qBAAqB,CAAC;IAC5B,aAAa,EAAE,qBAAqB,CAAC;IACrC,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,+EAA+E;IAC/E,iBAAiB,EAAE,MAAM,CAAC;IAC1B,wEAAwE;IACxE,aAAa,EAAE,MAAM,CAAC;IACtB,GAAG,EAAE,gBAAgB,CAAC;IACtB,4EAA4E;IAC5E,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,oEAAoE;IACpE,iBAAiB,EAAE;QACjB,IAAI,EAAE,WAAW,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACrD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7B,EAAE,CAAC;IACJ,6EAA6E;IAC7E,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAAC;CACrC;AAED,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,qBAAqB,EAC7B,WAAW,EAAE,OAAO,EACpB,aAAa,GAAE,qBAA8B,GAC5C,gBAAgB,CAoBlB;AAMD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,gBAAgB,EAAE,EAAE,EAAE,YAAY,GAAG,IAAI,CAoGnF;AAID,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,gBAAgB,GAAG,eAAe,EAAE,CAE5E;AAED,wBAAgB,YAAY,CAAC,CAAC,EAAE,gBAAgB,GAAG,eAAe,EAAE,CAQnE;AAED,wBAAgB,iBAAiB,CAC/B,CAAC,EAAE,gBAAgB,EACnB,IAAI,EAAE;IACJ,kBAAkB,EAAE,OAAO,CAAC;IAC5B,WAAW,EAAE,OAAO,GAAG,IAAI,CAAC;IAC5B,cAAc,EAAE,OAAO,CAAC;IACxB,sBAAsB,EAAE,OAAO,CAAC;CACjC,GACA,IAAI,CAkBN;AAWD,4FAA4F;AAC5F,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAuC7E;AAED,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,CAAC,EAAE,gBAAgB,GAClB,sBAAsB,CA0CxB;AAED,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,sBAAsB,EAAE,EACjC,QAAQ,EAAE,YAAY,GACrB,sBAAsB,CAAC,KAAK,CAAC,CAoB/B;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAI3D"}

package/dist/attemptTelemetry.js

@@ -0,0 +1,283 @@
+import { redactSecrets } from "@claudexor/util";
+export function createAttemptTelemetry(policy, webRequired, effectiveMode = policy) {
+    return {
+        toolErrors: [],
+        statuslessResults: 0,
+        droppedEvents: 0,
+        web: {
+            required: webRequired,
+            mode: policy,
+            effectiveMode,
+            attempted: false,
+            satisfied: false,
+            failed: false,
+            tool: null,
+            target: null,
+            errorSummary: null,
+        },
+        observedModel: null,
+        transientFailures: [],
+        outcome: null,
+    };
+}
+/**
+ * Observe a normalized harness event into the attempt telemetry. Governance is
+ * fully typed: only the `tool` ToolRef on tool_call/tool_result/file_change
+ * events and the run-loop drop counters are consulted — never payload string
+ * matching or tool-name heuristics.
+ */
+export function observeAttemptTelemetry(t, ev) {
+    // Route evidence: remember the model identity the stream itself disclosed.
+    if (ev.observed_model && !t.observedModel)
+        t.observedModel = ev.observed_model;
+    if (ev.transient) {
+        t.transientFailures.push({
+            kind: ev.transient.kind,
+            retryDelayMs: ev.transient.retry_delay_ms ?? null,
+        });
+    }
+    if (ev.type === "completed") {
+        const dropped = Number(ev.payload?.["dropped_unparsed_lines"] ?? 0) +
+            Number(ev.payload?.["dropped_unrecognized_events"] ?? 0);
+        if (Number.isFinite(dropped) && dropped > 0)
+            t.droppedEvents += dropped;
+        return;
+    }
+    const tool = ev.tool;
+    if (!tool)
+        return;
+    if (ev.type === "tool_call" || ev.type === "file_change") {
+        if (tool.kind === "web") {
+            t.web.attempted = true;
+            t.web.tool = tool.name;
+            t.web.target = tool.target ?? t.web.target;
+        }
+        return;
+    }
+    if (ev.type !== "tool_result")
+        return;
+    if (tool.status === undefined) {
+        // A result without a status must never silently count as ok.
+        t.statuslessResults += 1;
+        return;
+    }
+    if (tool.status === "cancelled" || tool.status === "denied") {
+        if (tool.kind === "web") {
+            t.web.attempted = true;
+            t.web.tool = tool.name;
+            t.web.target = tool.target ?? t.web.target;
+        }
+        return;
+    }
+    if (tool.status === "error") {
+        t.toolErrors.push({
+            tool: tool.name,
+            kind: tool.kind,
+            target: tool.target ?? null,
+            summary: redactSecrets(tool.error_summary ?? tool.content_summary ?? "tool result marked error").slice(0, 1000),
+            toolUseId: tool.use_id ?? null,
+            recovered: false,
+        });
+        if (tool.kind === "web") {
+            t.web.failed = true;
+            t.web.attempted = true;
+            t.web.tool = tool.name;
+            t.web.target = tool.target ?? t.web.target;
+            t.web.errorSummary = redactSecrets(tool.error_summary ?? "web tool result marked error").slice(0, 1000);
+        }
+        return;
+    }
+    // status === "ok": a later success of the SAME tool against the SAME target
+    // is the verified recovery for that call's earlier errors within this
+    // attempt (keying fix: `bash echo done` must NOT launder an earlier
+    // `bash npm test` failure — the name alone proved nothing).
+    for (const err of t.toolErrors) {
+        // INV-043: recovery must be attributable to the failed operation — same
+        // tool, same KIND, same target (a non-web tool sharing a name with a web
+        // tool must not clear its web error).
+        if (!err.recovered && err.tool === tool.name && err.kind === tool.kind && err.target === (tool.target ?? null)) {
+            err.recovered = true;
+        }
+    }
+    if (tool.kind === "web") {
+        t.web.attempted = true;
+        // DECIDED SEMANTICS (round-19/20 reviews): the web-evidence gate asks
+        // "was web evidence OBTAINED", so ANY successful web call satisfies it —
+        // reformulating a failed query and succeeding on the new one is
+        // legitimate alternative-route recovery, not laundering (blocking it
+        // would false-block the most common web workflow). What must NOT vanish
+        // is the DISCLOSURE: `failed` clears only when the success matches the
+        // failed call's target (INV-043 keying), so telemetry.yaml keeps the
+        // unrecovered failure + errorSummary visible even on satisfied runs.
+        t.web.satisfied = true;
+        // Derived rollup, single source of truth: the tool+target-keyed
+        // toolErrors store (the recovery loop above already marked matching
+        // errors recovered). Multiple failed targets stay disclosed until EACH
+        // recovers; a missing target never wildcards (exact null==null match).
+        t.web.failed = t.toolErrors.some((e) => e.kind === "web" && !e.recovered);
+        // Keep the summary in lockstep with the rollup: point at a live
+        // unrecovered failure, or clear once everything recovered.
+        t.web.errorSummary = t.web.failed
+            ? (t.toolErrors.find((e) => e.kind === "web" && !e.recovered)?.summary ?? t.web.errorSummary)
+            : null;
+        t.web.tool = tool.name;
+        t.web.target = tool.target ?? t.web.target;
+    }
+}
+const TELEMETRY_TOOL_ERRORS_MAX = 20;
+export function unrecoveredToolErrors(t) {
+    return t.toolErrors.filter((e) => !e.recovered);
+}
+export function toolWarnings(t) {
+    // Non-web tool errors are warnings once the attempt produced its contracted
+    // deliverable. Unrecovered WEB errors count as warnings too WHEN the
+    // evidence gate is satisfied by an alternative route (INV-043: the failure
+    // stays attributable and disclosed; a green claim becomes
+    // success_with_warnings, never a silent clean success). Unsatisfied web
+    // errors flow through the hard gate (webUnsatisfied) instead.
+    return unrecoveredToolErrors(t).filter((e) => e.kind !== "web" || t.web.satisfied);
+}
+export function setAttemptOutcome(t, opts) {
+    const warnings = toolWarnings(t).length;
+    const contractFailed = !opts.deliverablePresent || opts.gatesPassed === false;
+    const status = opts.webRequiredUnsatisfied
+        ? "blocked"
+        : opts.harnessErrored || contractFailed
+            ? "failed"
+            : warnings > 0
+                ? "success_with_warnings"
+                : "success";
+    t.outcome = {
+        deliverablePresent: opts.deliverablePresent,
+        gatesPassed: opts.gatesPassed,
+        harnessErrored: opts.harnessErrored,
+        webRequiredUnsatisfied: opts.webRequiredUnsatisfied,
+        toolWarningsCount: warnings,
+        status,
+    };
+}
+function webStatus(t) {
+    if (t.web.satisfied)
+        return "satisfied";
+    if (t.web.failed)
+        return "failed";
+    if (t.web.attempted)
+        return "attempted";
+    return t.web.required ? "unverified" : "none";
+}
+/** Bounded telemetry summary for events/artifacts (full detail lives in telemetry.yaml). */
+export function telemetrySummary(t) {
+    const unrecovered = unrecoveredToolErrors(t);
+    const warnings = toolWarnings(t);
+    return {
+        web_evidence: {
+            required: t.web.required,
+            mode: t.web.mode,
+            effective_mode: t.web.effectiveMode,
+            attempted: t.web.attempted,
+            satisfied: t.web.satisfied,
+            status: webStatus(t),
+            tool: t.web.tool,
+            target: t.web.target,
+            error_summary: t.web.errorSummary,
+        },
+        tool_errors_total: t.toolErrors.length,
+        unrecovered_tool_errors: unrecovered.length,
+        tool_errors: unrecovered
+            .slice(-5)
+            .map((e) => ({ tool: e.tool, kind: e.kind, target: e.target, summary: e.summary })),
+        tool_warnings_count: warnings.length,
+        ...(warnings.length
+            ? {
+                tool_warnings: warnings
+                    .slice(-5)
+                    .map((e) => ({ tool: e.tool, kind: e.kind, target: e.target, summary: e.summary })),
+            }
+            : {}),
+        ...(t.outcome ? { outcome: t.outcome } : {}),
+        ...(t.transientFailures.length > 0
+            ? {
+                transient_failures: t.transientFailures
+                    .slice(-5)
+                    .map((e) => ({ kind: e.kind, retry_delay_ms: e.retryDelayMs })),
+            }
+            : {}),
+        ...(t.droppedEvents > 0 ? { dropped_events: t.droppedEvents } : {}),
+        ...(t.statuslessResults > 0 ? { statusless_tool_results: t.statuslessResults } : {}),
+    };
+}
+export function attemptTelemetryRecord(attemptId, harnessId, t) {
+    const errors = t.toolErrors.slice(-TELEMETRY_TOOL_ERRORS_MAX);
+    const warnings = toolWarnings(t);
+    return {
+        attempt_id: attemptId,
+        harness_id: harnessId,
+        observed_model: t.observedModel,
+        web: {
+            required: t.web.required,
+            policy: t.web.mode,
+            effective_mode: t.web.effectiveMode,
+            attempted: t.web.attempted,
+            satisfied: t.web.satisfied,
+            status: webStatus(t),
+            tool: t.web.tool,
+            target: t.web.target,
+            error_summary: t.web.errorSummary,
+        },
+        tool_errors: errors.map((e) => ({
+            tool: e.tool,
+            kind: e.kind,
+            target: e.target,
+            summary: e.summary,
+            recovered: e.recovered,
+            tool_use_id: e.toolUseId,
+        })),
+        tool_errors_total: t.toolErrors.length,
+        unrecovered_tool_errors: unrecoveredToolErrors(t).length,
+        statusless_tool_results: t.statuslessResults,
+        dropped_events: t.droppedEvents,
+        transient_failures: t.transientFailures
+            .slice(-TELEMETRY_TOOL_ERRORS_MAX)
+            .map((e) => ({ kind: e.kind, retry_delay_ms: e.retryDelayMs })),
+        outcome: {
+            deliverable_present: t.outcome?.deliverablePresent ?? false,
+            gates_passed: t.outcome?.gatesPassed ?? null,
+            harness_errored: t.outcome?.harnessErrored ?? false,
+            web_required_unsatisfied: t.outcome?.webRequiredUnsatisfied ?? false,
+            tool_warnings_count: t.outcome?.toolWarningsCount ?? warnings.length,
+            status: t.outcome?.status ?? (warnings.length > 0 ? "success_with_warnings" : "success"),
+        },
+    };
+}
+export function aggregateRunWebEvidence(records, contract) {
+    const satisfied = records.find((r) => r.web.satisfied);
+    if (satisfied)
+        return satisfied.web;
+    const severityRank = { none: 0, attempted: 1, unverified: 2, failed: 3, satisfied: 4 };
+    const worst = [...records].sort((a, b) => (severityRank[b.web.status] ?? 0) - (severityRank[a.web.status] ?? 0))[0];
+    return (worst?.web ?? {
+        required: contract.external_context.web_required,
+        policy: contract.external_context.policy,
+        effective_mode: contract.external_context.effective_mode,
+        attempted: false,
+        satisfied: false,
+        status: contract.external_context.web_required ? "unverified" : "none",
+        tool: null,
+        target: null,
+        error_summary: null,
+    });
+}
+/**
+ * Web evidence gating (locked v0.7 semantics):
+ * - web_required && !satisfied  -> blocked, INCLUDING the never-attempted case;
+ * - attempted && failed && !satisfied -> blocked (a later successful web call
+ *   is the verified recovery that clears it).
+ */
+export function webUnsatisfied(t) {
+    if (t.web.satisfied)
+        return false;
+    if (t.web.required)
+        return true;
+    return t.web.attempted && t.web.failed;
+}
+//# sourceMappingURL=attemptTelemetry.js.map

package/dist/attemptTelemetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attemptTelemetry.js","sourceRoot":"","sources":["../src/attemptTelemetry.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAqDhD,MAAM,UAAU,sBAAsB,CACpC,MAA6B,EAC7B,WAAoB,EACpB,gBAAuC,MAAM;IAE7C,OAAO;QACL,UAAU,EAAE,EAAE;QACd,iBAAiB,EAAE,CAAC;QACpB,aAAa,EAAE,CAAC;QAChB,GAAG,EAAE;YACH,QAAQ,EAAE,WAAW;YACrB,IAAI,EAAE,MAAM;YACZ,aAAa;YACb,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,IAAI;YACZ,YAAY,EAAE,IAAI;SACnB;QACD,aAAa,EAAE,IAAI;QACnB,iBAAiB,EAAE,EAAE;QACrB,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC;AAMD;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,CAAmB,EAAE,EAAgB;IAC3E,2EAA2E;IAC3E,IAAI,EAAE,CAAC,cAAc,IAAI,CAAC,CAAC,CAAC,aAAa;QAAE,CAAC,CAAC,aAAa,GAAG,EAAE,CAAC,cAAc,CAAC;IAC/E,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;QACjB,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC;YACvB,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI;YACvB,YAAY,EAAE,EAAE,CAAC,SAAS,CAAC,cAAc,IAAI,IAAI;SAClD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,EAAE,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC5B,MAAM,OAAO,GACX,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;YACnD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3D,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC;YAAE,CAAC,CAAC,aAAa,IAAI,OAAO,CAAC;QACxE,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC;IACrB,IAAI,CAAC,IAAI;QAAE,OAAO;IAElB,IAAI,EAAE,CAAC,IAAI,KAAK,WAAW,IAAI,EAAE,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACzD,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACxB,CAAC,CAAC,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC;YACvB,CAAC,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;QAC7C,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,EAAE,CAAC,IAAI,KAAK,aAAa;QAAE,OAAO;IACtC,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9B,6DAA6D;QAC7D,CAAC,CAAC,iBAAiB,IAAI,CAAC,CAAC;QACzB,OAAO;IACT,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC5D,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACxB,CAAC,CAAC,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC;YACvB,CAAC,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;QAC7C,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC5B,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;YAChB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI;YAC3B,OAAO,EAAE,aAAa,CACpB,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,eAAe,IAAI,0BAA0B,CACzE,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;YAChB,SAAS,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI;YAC9B,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACxB,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC;YACpB,CAAC,CAAC,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC;YACvB,CAAC,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;YAC3C,CAAC,CAAC,GAAG,CAAC,YAAY,GAAG,aAAa,CAChC,IAAI,CAAC,aAAa,IAAI,8BAA8B,CACrD,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACnB,CAAC;QACD,OAAO;IACT,CAAC;IACD,4EAA4E;IAC5E,sEAAsE;IACtE,oEAAoE;IACpE,4DAA4D;IAC5D,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QAC/B,wEAAwE;QACxE,yEAAyE;QACzE,sCAAsC;QACtC,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,EAAE,CAAC;YAC/G,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC;QACvB,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACxB,CAAC,CAAC,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC;QACvB,sEAAsE;QACtE,yEAAyE;QACzE,gEAAgE;QAChE,qEAAqE;QACrE,wEAAwE;QACxE,uEAAuE;QACvE,qEAAqE;QACrE,qEAAqE;QACrE,CAAC,CAAC,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC;QACvB,gEAAgE;QAChE,oEAAoE;QACpE,uEAAuE;QACvE,uEAAuE;QACvE,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC1E,gEAAgE;QAChE,2DAA2D;QAC3D,CAAC,CAAC,GAAG,CAAC,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM;YAC/B,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;YAC7F,CAAC,CAAC,IAAI,CAAC;QACT,CAAC,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAErC,MAAM,UAAU,qBAAqB,CAAC,CAAmB;IACvD,OAAO,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,CAAmB;IAC9C,4EAA4E;IAC5E,qEAAqE;IACrE,2EAA2E;IAC3E,0DAA0D;IAC1D,wEAAwE;IACxE,8DAA8D;IAC9D,OAAO,qBAAqB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,CAAmB,EACnB,IAKC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACxC,MAAM,cAAc,GAAG,CAAC,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC;IAC9E,MAAM,MAAM,GAAyB,IAAI,CAAC,sBAAsB;QAC9D,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,IAAI,CAAC,cAAc,IAAI,cAAc;YACrC,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,QAAQ,GAAG,CAAC;gBACZ,CAAC,CAAC,uBAAuB;gBACzB,CAAC,CAAC,SAAS,CAAC;IAClB,CAAC,CAAC,OAAO,GAAG;QACV,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;QAC3C,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;QACnD,iBAAiB,EAAE,QAAQ;QAC3B,MAAM;KACP,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAChB,CAAmB;IAEnB,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS;QAAE,OAAO,WAAW,CAAC;IACxC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC;IAClC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS;QAAE,OAAO,WAAW,CAAC;IACxC,OAAO,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC;AAChD,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,gBAAgB,CAAC,CAAmB;IAClD,MAAM,WAAW,GAAG,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;IACjC,OAAO;QACL,YAAY,EAAE;YACZ,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ;YACxB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI;YAChB,cAAc,EAAE,CAAC,CAAC,GAAG,CAAC,aAAa;YACnC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS;YAC1B,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS;YAC1B,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;YACpB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI;YAChB,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM;YACpB,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY;SAClC;QACD,iBAAiB,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM;QACtC,uBAAuB,EAAE,WAAW,CAAC,MAAM;QAC3C,WAAW,EAAE,WAAW;aACrB,KAAK,CAAC,CAAC,CAAC,CAAC;aACT,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACrF,mBAAmB,EAAE,QAAQ,CAAC,MAAM;QACpC,GAAG,CAAC,QAAQ,CAAC,MAAM;YACjB,CAAC,CAAC;gBACE,aAAa,EAAE,QAAQ;qBACpB,KAAK,CAAC,CAAC,CAAC,CAAC;qBACT,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;aACtF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC;YAChC,CAAC,CAAC;gBACE,kBAAkB,EAAE,CAAC,CAAC,iBAAiB;qBACpC,KAAK,CAAC,CAAC,CAAC,CAAC;qBACT,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;aAClE;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,CAAC,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,uBAAuB,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,SAAiB,EACjB,SAAiB,EACjB,CAAmB;IAEnB,MAAM,MAAM,GAAG,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,yBAAyB,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;IACjC,OAAO;QACL,UAAU,EAAE,SAAS;QACrB,UAAU,EAAE,SAAS;QACrB,cAAc,EAAE,CAAC,CAAC,aAAa;QAC/B,GAAG,EAAE;YACH,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ;YACxB,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI;YAClB,cAAc,EAAE,CAAC,CAAC,GAAG,CAAC,aAAa;YACnC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS;YAC1B,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS;YAC1B,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;YACpB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI;YAChB,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM;YACpB,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY;SAClC;QACD,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,WAAW,EAAE,CAAC,CAAC,SAAS;SACzB,CAAC,CAAC;QACH,iBAAiB,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM;QACtC,uBAAuB,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC,MAAM;QACxD,uBAAuB,EAAE,CAAC,CAAC,iBAAiB;QAC5C,cAAc,EAAE,CAAC,CAAC,aAAa;QAC/B,kBAAkB,EAAE,CAAC,CAAC,iBAAiB;aACpC,KAAK,CAAC,CAAC,yBAAyB,CAAC;aACjC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;QACjE,OAAO,EAAE;YACP,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,kBAAkB,IAAI,KAAK;YAC3D,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,WAAW,IAAI,IAAI;YAC5C,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,cAAc,IAAI,KAAK;YACnD,wBAAwB,EAAE,CAAC,CAAC,OAAO,EAAE,sBAAsB,IAAI,KAAK;YACpE,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,iBAAiB,IAAI,QAAQ,CAAC,MAAM;YACpE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;SACzF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,OAAiC,EACjC,QAAsB;IAEtB,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACvD,IAAI,SAAS;QAAE,OAAO,SAAS,CAAC,GAAG,CAAC;IACpC,MAAM,YAAY,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAW,CAAC;IAChG,MAAM,KAAK,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAC7B,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAChF,CAAC,CAAC,CAAC,CAAC;IACL,OAAO,CACL,KAAK,EAAE,GAAG,IAAI;QACZ,QAAQ,EAAE,QAAQ,CAAC,gBAAgB,CAAC,YAAY;QAChD,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,MAAM;QACxC,cAAc,EAAE,QAAQ,CAAC,gBAAgB,CAAC,cAAc;QACxD,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,KAAK;QAChB,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAE,YAAsB,CAAC,CAAC,CAAE,MAAgB;QAC5F,IAAI,EAAE,IAAI;QACV,MAAM,EAAE,IAAI;QACZ,aAAa,EAAE,IAAI;KACpB,CACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,CAAmB;IAChD,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAClC,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;AACzC,CAAC"}

package/dist/diffReview.d.ts

@@ -0,0 +1,32 @@
+import type { AuthPreference, ProviderFamily, ReviewFinding } from "@claudexor/schema";
+import { type ReviewerSpec, type reviewCandidate } from "@claudexor/review";
+export interface DiffReviewInput {
+    repoRoot: string;
+    diff: string;
+    userIntent?: string;
+    tests?: string;
+    decidedTradeoffs?: string;
+    authPreference?: AuthPreference;
+    signal?: AbortSignal;
+    onReviewerEvent?: (event: {
+        type: string;
+        [k: string]: unknown;
+    }) => void;
+}
+export interface DiffReviewResult {
+    findings: ReviewFinding[];
+    crossFamilyHealthy: boolean;
+    crossFamilyVerified: boolean;
+    distinctProviders: ProviderFamily[];
+    routeProofs: unknown[];
+    reviewSpendUsd: number;
+    artifactsDir: string;
+}
+export interface DiffReviewDeps {
+    resolveReviewers: (repoRoot: string, authPreference?: AuthPreference) => Promise<ReviewerSpec[]>;
+    reviewScoped: (input: Omit<Parameters<typeof reviewCandidate>[0], "env">) => ReturnType<typeof reviewCandidate>;
+    execRootOf: (repoRoot: string) => string;
+    envInheritance: (repoRoot: string) => "mirror_native" | "clean";
+}
+export declare function runDiffReview(input: DiffReviewInput, deps: DiffReviewDeps): Promise<DiffReviewResult>;
+//# sourceMappingURL=diffReview.d.ts.map

package/dist/diffReview.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diffReview.d.ts","sourceRoot":"","sources":["../src/diffReview.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvF,OAAO,EAAsB,KAAK,YAAY,EAAE,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAIhG,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC;CAC3E;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,iBAAiB,EAAE,cAAc,EAAE,CAAC;IACpC,WAAW,EAAE,OAAO,EAAE,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,gBAAgB,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,cAAc,KAAK,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IACjG,YAAY,EAAE,CACZ,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,KACtD,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC;IACxC,UAAU,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC;IACzC,cAAc,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,eAAe,GAAG,OAAO,CAAC;CACjE;AAED,wBAAsB,aAAa,CAAC,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAuD3G"}

package/dist/diffReview.js

@@ -0,0 +1,69 @@
+/**
+ * Scoped DIFF review: review a caller-supplied diff (e.g. a staged
+ * commit) with the resolved reviewer panel — the same reviewCandidate
+ * machinery race candidates use, no run/envelope. The engine owns reviewer
+ * resolution, evidence packaging, revalidation, and typed results; the CLI
+ * verb stays a thin surface.
+ */
+import { join } from "node:path";
+import { HarnessUnavailableError } from "@claudexor/core";
+import { revalidateFindings } from "@claudexor/review";
+import { writeEvidencePacket } from "@claudexor/context";
+import { containsSecretLikeToken, redactSecrets } from "@claudexor/util";
+export async function runDiffReview(input, deps) {
+    if (!input.diff.trim()) {
+        throw new Error("reviewDiff: the diff is empty — nothing to review");
+    }
+    // INV-062: raw secrets must never become review artifacts. The fence lives
+    // HERE so every caller (CLI verb, commit gate, future surfaces) is covered
+    // before any evidence write or reviewer call — and it covers EVERY
+    // artifact-bound string, not just the diff.
+    for (const [label, text] of [
+        ["diff", input.diff],
+        ["userIntent", input.userIntent],
+        ["tests", input.tests],
+        ["decidedTradeoffs", input.decidedTradeoffs],
+    ]) {
+        if (typeof text === "string" && containsSecretLikeToken(text)) {
+            throw new Error(`reviewDiff: ${label} contains a secret-like token; refusing review (remove the secret first)`);
+        }
+    }
+    const reviewers = await deps.resolveReviewers(input.repoRoot, input.authPreference);
+    if (reviewers.length === 0) {
+        throw new HarnessUnavailableError("no eligible reviewers (doctor-OK, review-capable) are available");
+    }
+    const stamp = new Date().toISOString().replace(/[:.]/g, "-");
+    const baseDir = join(deps.execRootOf(input.repoRoot), ".claudexor", "reviews", `diff-${stamp}`);
+    const evidenceDir = join(baseDir, "evidence");
+    writeEvidencePacket(evidenceDir, {
+        userIntent: redactSecrets(input.userIntent ?? "Review this staged diff for defects before commit."),
+        diff: input.diff,
+        tests: input.tests ?? "(no test evidence supplied)",
+        decidedTradeoffs: input.decidedTradeoffs,
+    });
+    const result = await deps.reviewScoped({
+        candidateLabel: "Staged diff",
+        diff: input.diff,
+        evidenceDir,
+        artifactsDir: join(baseDir, "reviewers"),
+        cwd: input.repoRoot,
+        reviewers,
+        envInheritance: deps.envInheritance(input.repoRoot),
+        signal: input.signal,
+        onReviewerEvent: input.onReviewerEvent ? (event) => input.onReviewerEvent?.({ ...event }) : undefined,
+    });
+    const findings = await revalidateFindings(result.findings, {
+        candidateRoot: input.repoRoot,
+        evidenceDir,
+    });
+    return {
+        findings,
+        crossFamilyHealthy: result.crossFamilyHealthy,
+        crossFamilyVerified: result.crossFamilyVerified,
+        distinctProviders: result.distinctProviders,
+        routeProofs: result.routeProofs,
+        reviewSpendUsd: result.reviewSpendUsd,
+        artifactsDir: join(baseDir, "reviewers"),
+    };
+}
+//# sourceMappingURL=diffReview.js.map

package/dist/diffReview.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diffReview.js","sourceRoot":"","sources":["../src/diffReview.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAA2C,MAAM,mBAAmB,CAAC;AAChG,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAgCzE,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAsB,EAAE,IAAoB;IAC9E,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,2EAA2E;IAC3E,2EAA2E;IAC3E,mEAAmE;IACnE,4CAA4C;IAC5C,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI;QAC1B,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC;QACpB,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC;QAChC,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC;QACtB,CAAC,kBAAkB,EAAE,KAAK,CAAC,gBAAgB,CAAC;KACpC,EAAE,CAAC;QACX,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CAAC,eAAe,KAAK,0EAA0E,CAAC,CAAC;QAClH,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IACpF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,uBAAuB,CAAC,iEAAiE,CAAC,CAAC;IACvG,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,KAAK,EAAE,CAAC,CAAC;IAChG,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC9C,mBAAmB,CAAC,WAAW,EAAE;QAC/B,UAAU,EAAE,aAAa,CAAC,KAAK,CAAC,UAAU,IAAI,oDAAoD,CAAC;QACnG,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,6BAA6B;QACnD,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;KACzC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC;QACrC,cAAc,EAAE,aAAa;QAC7B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW;QACX,YAAY,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC;QACxC,GAAG,EAAE,KAAK,CAAC,QAAQ;QACnB,SAAS;QACT,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC;QACnD,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,eAAe,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;KACtG,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,QAAQ,EAAE;QACzD,aAAa,EAAE,KAAK,CAAC,QAAQ;QAC7B,WAAW;KACZ,CAAC,CAAC;IACH,OAAO;QACL,QAAQ;QACR,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,YAAY,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC;KACzC,CAAC;AACJ,CAAC"}

package/dist/finalVerifier.d.ts

@@ -0,0 +1,25 @@
+import { FinalVerifyRecord } from "@claudexor/schema";
+import { type GateSpec } from "@claudexor/review";
+interface VerifiableWinner {
+    baseSha?: string;
+    diff: string;
+}
+interface VerifyEventLog {
+    emit(type: "gate.completed", payload: Record<string, unknown>): unknown;
+}
+/** FAIL-CLOSED verdict (INV-115): an attempted verify that did not PROVE
+ * applied_cleanly (false OR null/errored) or whose gates failed blocks the
+ * run. One owner — race and convergence consume the same rule. */
+export declare function finalVerifyBlocks(finalVerify: FinalVerifyRecord | null): boolean;
+/** The persisted decision must AGREE with a blocked terminal: status/outcome
+ * blocked, human_review recommendation, and an evidence fact naming the cause.
+ * One owner for the race and convergence decision writes. */
+export declare function blockedDecisionOverride(evidenceFacts: string[], finalVerify: FinalVerifyRecord | null): {
+    status: "blocked";
+    outcome: "blocked";
+    apply_recommendation: "human_review";
+    evidence_facts: string[];
+};
+export declare function finalVerifyPatch(execRoot: string, winner: VerifiableWinner, specs: GateSpec[], log: VerifyEventLog): Promise<FinalVerifyRecord>;
+export {};
+//# sourceMappingURL=finalVerifier.d.ts.map

package/dist/finalVerifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finalVerifier.d.ts","sourceRoot":"","sources":["../src/finalVerifier.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,KAAK,QAAQ,EAAyB,MAAM,mBAAmB,CAAC;AAIzE,UAAU,gBAAgB;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,UAAU,cAAc;IACtB,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;CACzE;AAED;;kEAEkE;AAClE,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,iBAAiB,GAAG,IAAI,GAAG,OAAO,CAMhF;AAED;;6DAE6D;AAC7D,wBAAgB,uBAAuB,CACrC,aAAa,EAAE,MAAM,EAAE,EACvB,WAAW,EAAE,iBAAiB,GAAG,IAAI,GACpC;IACD,MAAM,EAAE,SAAS,CAAC;IAClB,OAAO,EAAE,SAAS,CAAC;IACnB,oBAAoB,EAAE,cAAc,CAAC;IACrC,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B,CAYA;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,gBAAgB,EACxB,KAAK,EAAE,QAAQ,EAAE,EACjB,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,iBAAiB,CAAC,CAgE5B"}