@claudexor/review 1.0.0

package/dist/revalidate.js

@@ -0,0 +1,95 @@
+import { isAbsolute, relative, resolve } from "node:path";
+function hasEvidence(f) {
+    return (f.evidence.files.length > 0 ||
+        f.evidence.diff_hunks.length > 0 ||
+        f.evidence.commands.length > 0 ||
+        f.evidence.logs.length > 0);
+}
+function isSameOrInside(parent, target) {
+    const rel = relative(resolve(parent), resolve(target));
+    const firstPart = rel.split(/[\\/]+/)[0];
+    return rel === "" || (!!rel && firstPart !== ".." && !isAbsolute(rel));
+}
+function hasTraversalSegment(pathValue) {
+    return pathValue.split(/[\\/]+/).some((part) => part === "..");
+}
+function isSafeRelativeEvidencePath(pathValue, options) {
+    if (!pathValue || hasTraversalSegment(pathValue))
+        return false;
+    if (isAbsolute(pathValue))
+        return false;
+    const roots = [options.candidateRoot, options.evidenceDir].filter((value) => typeof value === "string" && value.length > 0);
+    if (roots.length === 0)
+        return true;
+    return roots.some((root) => isSameOrInside(root, resolve(root, pathValue)));
+}
+function validateEvidence(evidence, options) {
+    let invalidPathCount = 0;
+    const files = evidence.files.filter((file) => {
+        const ok = isSafeRelativeEvidencePath(file.path, options);
+        if (!ok)
+            invalidPathCount++;
+        return ok;
+    });
+    const logs = evidence.logs.filter((log) => {
+        const ok = isSafeRelativeEvidencePath(log.path, options);
+        if (!ok)
+            invalidPathCount++;
+        return ok;
+    });
+    return {
+        evidence: {
+            files,
+            logs,
+            diff_hunks: evidence.diff_hunks,
+            commands: evidence.commands,
+        },
+        invalidPathCount,
+    };
+}
+/**
+ * Deterministic revalidation (no LLM): enforces the evidence invariants that
+ * always hold — no evidence -> cannot block; out-of-scope/insufficient pass
+ * through; a NEEDS_HUMAN escalation stays a blocking human gate.
+ */
+export function deterministicDecision(f, options = {}) {
+    if (["fixed", "rebutted", "accepted_risk", "duplicate"].includes(f.status)) {
+        return { status: f.status };
+    }
+    if (f.severity === "OUT_OF_SCOPE")
+        return { status: "out_of_scope" };
+    if (f.severity === "INSUFFICIENT_EVIDENCE")
+        return { status: "insufficient_evidence" };
+    // A reviewer escalation to a human BLOCKS until a human decides — it must
+    // never silently downgrade to a non-blocking accepted risk.
+    if (f.severity === "NEEDS_HUMAN")
+        return { status: "accepted", note: "human decision required" };
+    if (f.severity === "BLOCK" || f.severity === "FIX_FIRST") {
+        const validated = validateEvidence(f.evidence, options);
+        const candidate = { ...f, evidence: validated.evidence };
+        if (!hasEvidence(candidate)) {
+            return {
+                status: "insufficient_evidence",
+                note: validated.invalidPathCount > 0
+                    ? "invalid evidence paths -> cannot block"
+                    : "no evidence -> cannot block",
+            };
+        }
+    }
+    return { status: "accepted" };
+}
+/**
+ * Revalidate every finding deterministically. Each finding's status is recorded;
+ * the evidence-free BLOCK/FIX_FIRST invariant is applied so a reviewer cannot
+ * leave an evidence-free finding in a blocking state.
+ */
+export async function revalidateFindings(findings, options = {}) {
+    const out = [];
+    for (const f of findings) {
+        const validated = validateEvidence(f.evidence, options);
+        const d = deterministicDecision(f, options);
+        out.push({ ...f, evidence: validated.evidence, status: d.status, revalidation_note: d.note });
+    }
+    return out;
+}
+//# sourceMappingURL=revalidate.js.map

package/dist/revalidate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revalidate.js","sourceRoot":"","sources":["../src/revalidate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAkB1D,SAAS,WAAW,CAAC,CAAgB;IACnC,OAAO,CACL,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAC3B,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;QAChC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QAC9B,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,MAAc,EAAE,MAAc;IACpD,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,SAAS,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,mBAAmB,CAAC,SAAiB;IAC5C,OAAO,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,0BAA0B,CAAC,SAAiB,EAAE,OAA0B;IAC/E,IAAI,CAAC,SAAS,IAAI,mBAAmB,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/D,IAAI,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,MAAM,CAC/D,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAC1E,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,gBAAgB,CACvB,QAAyB,EACzB,OAA0B;IAE1B,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QAC3C,MAAM,EAAE,GAAG,0BAA0B,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1D,IAAI,CAAC,EAAE;YAAE,gBAAgB,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;QACxC,MAAM,EAAE,GAAG,0BAA0B,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACzD,IAAI,CAAC,EAAE;YAAE,gBAAgB,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;IACH,OAAO;QACL,QAAQ,EAAE;YACR,KAAK;YACL,IAAI;YACJ,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;SAC5B;QACD,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,CAAgB,EAChB,UAA6B,EAAE;IAE/B,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IAC9B,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,KAAK,cAAc;QAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACrE,IAAI,CAAC,CAAC,QAAQ,KAAK,uBAAuB;QAAE,OAAO,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IACvF,0EAA0E;IAC1E,4DAA4D;IAC5D,IAAI,CAAC,CAAC,QAAQ,KAAK,aAAa;QAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC;IACjG,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;QACzD,MAAM,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACxD,MAAM,SAAS,GAAG,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC;QACzD,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5B,OAAO;gBACL,MAAM,EAAE,uBAAuB;gBAC/B,IAAI,EACF,SAAS,CAAC,gBAAgB,GAAG,CAAC;oBAC5B,CAAC,CAAC,wCAAwC;oBAC1C,CAAC,CAAC,6BAA6B;aACpC,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AAChC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAAyB,EACzB,UAA6B,EAAE;IAE/B,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACxD,MAAM,CAAC,GAAG,qBAAqB,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/reviewEngine.d.ts

@@ -0,0 +1,85 @@
+import { type HarnessAdapter } from "@claudexor/core";
+import type { AuthPreference, EffortHint, ProviderFamily, ReviewFinding, RouteProof } from "@claudexor/schema";
+import { FallbackReason } from "@claudexor/schema";
+export interface ReviewerSpec {
+    adapter: HarnessAdapter;
+    providerFamily: ProviderFamily;
+    requestedModel?: string | null;
+    requestedEffort?: EffortHint | null;
+    authPreference?: AuthPreference | null;
+}
+export interface ReviewCandidateInput {
+    /** Anonymized label (e.g. "Candidate A") — never reveal which model produced it. */
+    candidateLabel: string;
+    diff: string;
+    evidenceDir: string;
+    /** Persistent local artifact directory for raw reviewer telemetry. Defaults under evidenceDir for tests. */
+    artifactsDir?: string;
+    cwd: string;
+    reviewers: ReviewerSpec[];
+    reviewerTimeoutMs?: number;
+    transientRetryPolicy?: TransientRetryPolicy;
+    /** Child-env composition for the reviewer harnesses (defaults to mirror_native).
+     * Reviewer runs are paid harness children too, so they must honor the configured
+     * env isolation (clean) the same way candidate runs do. */
+    envInheritance?: "mirror_native" | "clean";
+    /** Scoped harness HOME/config-dir env (HOME, CODEX_HOME, CLAUDE_CONFIG_DIR, …)
+     * for the reviewer children, so a reviewer's native state (codex session
+     * rollouts, claude config) is contained in a per-review scoped home instead of
+     * the operator's real ~/.codex / ~/.claude (CLAUDEXOR_BIBLE §6). The codex
+     * route-proof transcript is read from this same CODEX_HOME, so route proof still
+     * verifies. Adapters seed auth into these dirs. */
+    env?: Record<string, string>;
+    signal?: AbortSignal;
+    onReviewerEvent?: (event: ReviewerProgressEvent) => void;
+}
+export interface ReviewCandidateResult {
+    findings: ReviewFinding[];
+    routeProofs: RouteProof[];
+    reviewerRequests: {
+        harness_id: string;
+        provider_family: ProviderFamily;
+        requested_model: string | null;
+        requested_effort: string | null;
+    }[];
+    /** True only when >=2 distinct provider families returned parseable JSON. Not a route-proof claim. */
+    crossFamilyHealthy: boolean;
+    healthyProviders: ProviderFamily[];
+    /** True only when >=2 distinct provider families have verified route proofs. */
+    crossFamilyVerified: boolean;
+    distinctProviders: ProviderFamily[];
+    /** Observed reviewer panel spend (budget truth: reviewers are paid work). */
+    reviewSpendUsd: number;
+    reviewSpendEstimated: boolean;
+}
+export interface TransientRetryPolicy {
+    maxRetries: number;
+    initialDelayMs: number;
+    maxDelayMs: number;
+}
+export interface ReviewerProgressEvent {
+    type: "reviewer.started" | "reviewer.first_event" | "reviewer.auth_switched" | "reviewer.completed" | "reviewer.timed_out" | "reviewer.failed";
+    harness_id: string;
+    provider_family: ProviderFamily;
+    requested_model: string | null;
+    requested_effort: EffortHint | null;
+    observed_model?: string | null;
+    observed_source?: RouteProof["observed"]["evidence_source"];
+    route_proof_status?: RouteProof["status"];
+    from_auth_mode?: string;
+    to_auth_mode?: string;
+    reason?: FallbackReason;
+    artifact_dir: string;
+    at: string;
+    duration_ms?: number;
+    message?: string;
+}
+/**
+ * Cross-family review of one anonymized candidate. Each reviewer runs its review
+ * intent and emits JSON findings; we attach route proofs and verify the
+ * reviewers span >= 2 distinct provider families.
+ */
+export declare function reviewCandidate(input: ReviewCandidateInput): Promise<ReviewCandidateResult>;
+/** Test-only alias for the preserve-set extractor. */
+export declare function __testExtractDiffTouchedPaths(diff: string): Set<string>;
+//# sourceMappingURL=reviewEngine.d.ts.map

package/dist/reviewEngine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewEngine.d.ts","sourceRoot":"","sources":["../src/reviewEngine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgC,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEpF,OAAO,KAAK,EACV,cAAc,EACd,UAAU,EAEV,cAAc,EACd,aAAa,EACb,UAAU,EACX,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,cAAc,EAGf,MAAM,mBAAmB,CAAC;AAyB3B,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,cAAc,CAAC;IACxB,cAAc,EAAE,cAAc,CAAC;IAC/B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,eAAe,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IACpC,cAAc,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;CACxC;AAED,MAAM,WAAW,oBAAoB;IACnC,oFAAoF;IACpF,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,4GAA4G;IAC5G,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,YAAY,EAAE,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C;;+DAE2D;IAC3D,cAAc,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC;IAC3C;;;;;uDAKmD;IACnD,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE,qBAAqB,KAAK,IAAI,CAAC;CAC1D;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,gBAAgB,EAAE;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,eAAe,EAAE,cAAc,CAAC;QAChC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;QAC/B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;KACjC,EAAE,CAAC;IACJ,sGAAsG;IACtG,kBAAkB,EAAE,OAAO,CAAC;IAC5B,gBAAgB,EAAE,cAAc,EAAE,CAAC;IACnC,gFAAgF;IAChF,mBAAmB,EAAE,OAAO,CAAC;IAC7B,iBAAiB,EAAE,cAAc,EAAE,CAAC;IACpC,6EAA6E;IAC7E,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AAGD,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;CACpB;AAOD,MAAM,WAAW,qBAAqB;IACpC,IAAI,EACA,kBAAkB,GAClB,sBAAsB,GACtB,wBAAwB,GACxB,oBAAoB,GACpB,oBAAoB,GACpB,iBAAiB,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,cAAc,CAAC;IAChC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,gBAAgB,EAAE,UAAU,GAAG,IAAI,CAAC;IACpC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,eAAe,CAAC,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC5D,kBAAkB,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC1C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAqDD;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAyWjG;AAqnBD,sDAAsD;AACtD,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAEvE"}