@codacy/verity-cli 0.27.2-experimental.5fb996a → 0.27.2-experimental.76115e4

package/bin/verity.js

@@ -14180,24 +14180,6 @@ function resolveTaskContext(opts) {
   return { number: linked.issue, title: issue.title, goal, via: linked.via };
 }
 
-// src/lib/run-mode.ts
-function parseAutonomousEnv(raw) {
-  if (raw === void 0) return void 0;
-  const v = raw.trim().toLowerCase();
-  if (v === "") return void 0;
-  if (v === "0" || v === "false" || v === "off" || v === "no") return false;
-  return true;
-}
-function resolveRunMode(inputs = {}) {
-  if (inputs.autonomousFlag === true) return "autonomous";
-  if (inputs.autonomousFlag === false) return "interactive";
-  const env = inputs.env ?? process.env;
-  const envDecision = parseAutonomousEnv(env.VERITY_AUTONOMOUS);
-  if (envDecision !== void 0) return envDecision ? "autonomous" : "interactive";
-  const isTTY = inputs.isTTY ?? Boolean(process.stdin?.isTTY);
-  return isTTY ? "interactive" : "autonomous";
-}
-
 // src/lib/offline.ts
 var import_node_fs14 = require("node:fs");
 var import_node_crypto7 = require("node:crypto");
@@ -14409,6 +14391,24 @@ function detectAnalysisMode(noFilesChanged, assistantResponse, conversationPromp
   }
   return "standard";
 }
+var FILE_MUTATE_RE = /(?:^|[\s|&;(`])(?:sed\s+-i|perl\s+-i|awk\b|tee\b|dd\b|cp\b|mv\b|ln\b|install\b|touch\b|patch\b|git\s+(?:apply|am)\b|cargo\s+build|go\s+generate|make\b|--write\b|--fix\b|--in-place\b)|>>?(?![&>])/i;
+var GIT_PLUMBING_RE = /^\s*git\s+(?:merge|rebase|stash|cherry-pick|revert|pull|fetch|checkout|switch|reset|restore|clean)\b/i;
+var READ_ONLY_RE = /^\s*(?:git\s+(?:status|diff|log|show|branch|remote|config|rev-parse|ls-files|blame|describe)|ls|cat|head|tail|less|grep|rg|find|pwd|echo|printf|wc|which|type|tree|stat|file|env|printenv|date|whoami)\b/i;
+var CHAIN_RE = /&&|\|\||;|\$\(|\x60/;
+function hasNonEditAuthorship(actionSummary, sessionAuthoredCode) {
+  if (!actionSummary) return sessionAuthoredCode;
+  if ((actionSummary.subagents ?? 0) > 0) return true;
+  if (Object.keys(actionSummary.tool_counts ?? {}).some((t) => t.startsWith("mcp__"))) return true;
+  const commands = actionSummary.commands ?? [];
+  if (commands.some((c) => FILE_MUTATE_RE.test(c))) return true;
+  if (sessionAuthoredCode) {
+    const allSafe = commands.length > 0 && commands.every(
+      (c) => !CHAIN_RE.test(c) && (GIT_PLUMBING_RE.test(c) || READ_ONLY_RE.test(c))
+    );
+    if (!allSafe) return true;
+  }
+  return false;
+}
 function scopeToAuthored(files, actionSummary) {
   if (!actionSummary) return { files, signal: "no-transcript" };
   const touched = [...actionSummary.files_edited ?? [], ...actionSummary.files_created ?? []];
@@ -14617,6 +14617,7 @@ function buildSummary(lines) {
           searches++;
           break;
         case "Agent":
+        case "Task":
           subagents++;
           break;
         case "WebFetch":
@@ -15225,7 +15226,7 @@ async function runAnalyze(opts, globals) {
       contentHash = hashResult.hash;
       if (analysisMode !== "plan") {
         const scoped = scopeToAuthored(allForReview, actionSummary);
-        if (scoped.signal === "none-authored" && (actionSummary?.subagents ?? 0) === 0) {
+        if (scoped.signal === "none-authored" && !hasNonEditAuthorship(actionSummary, sessionAuthoredCode)) {
           passAndExit("No agent-authored code this turn \u2014 working-tree changes were not authored by this session");
         }
         const baseForReview = scoped.signal === "authored" && scoped.files.length > 0 ? scoped.files : allForReview;
@@ -15359,7 +15360,8 @@ async function runAnalyze(opts, globals) {
     requestBody.snapshot_diffs = snapshotResult.diffs;
   }
   const noHumanPrompt = (conversation?.prompts?.length ?? 0) === 0;
-  const w4Task = noHumanPrompt && resolveRunMode() === "autonomous" ? resolveTaskContext() : null;
+  const explicitlyAutonomous = /^(1|true|yes|on)$/i.test(process.env.VERITY_AUTONOMOUS ?? "") || !!process.env.CI || !!process.env.GITHUB_ACTIONS;
+  const w4Task = noHumanPrompt && explicitlyAutonomous ? resolveTaskContext() : null;
   const hasIntent = (conversation?.prompts?.length ?? 0) > 0 || specs.length > 0 || plans.length > 0 || !!assistantResponse || !!w4Task;
   if (hasIntent) {
     const intentContext = {};
@@ -16992,6 +16994,24 @@ function registerResetCommand(program2) {
   });
 }
 
+// src/lib/run-mode.ts
+function parseAutonomousEnv(raw) {
+  if (raw === void 0) return void 0;
+  const v = raw.trim().toLowerCase();
+  if (v === "") return void 0;
+  if (v === "0" || v === "false" || v === "off" || v === "no") return false;
+  return true;
+}
+function resolveRunMode(inputs = {}) {
+  if (inputs.autonomousFlag === true) return "autonomous";
+  if (inputs.autonomousFlag === false) return "interactive";
+  const env = inputs.env ?? process.env;
+  const envDecision = parseAutonomousEnv(env.VERITY_AUTONOMOUS);
+  if (envDecision !== void 0) return envDecision ? "autonomous" : "interactive";
+  const isTTY = inputs.isTTY ?? Boolean(process.stdin?.isTTY);
+  return isTTY ? "interactive" : "autonomous";
+}
+
 // src/commands/reflect.ts
 function registerReflectCommand(program2) {
   program2.command("reflect").description("Capture learnings \u2014 auto-extract or submit a human reflection").option("--user-input <text>", "The reflection to record (the agent-drafted or user-confirmed text)").option("--kind <kind>", "Node kind (decision, gotcha, pattern, security, quality, intent, domain, integration)", "gotcha").option("--task-id <id>", "Task to reflect on (defaults to current task)").option("--autonomous", "Record the drafted reflection without a confirm step (auto-detected from TTY / VERITY_AUTONOMOUS when omitted)").action(async (opts) => {
@@ -17353,7 +17373,7 @@ function registerTelemetryCommands(program2) {
 }
 
 // src/cli.ts
-program.name("verity").description("CLI for Verity quality gate service").version("0.27.2-experimental.5fb996a").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr");
+program.name("verity").description("CLI for Verity quality gate service").version("0.27.2-experimental.76115e4").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr");
 registerAuthCommands(program);
 registerLoginCommand(program);
 registerHooksCommands(program);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codacy/verity-cli",
-  "version": "0.27.2-experimental.5fb996a",
+  "version": "0.27.2-experimental.76115e4",
   "description": "CLI for Verity quality gate service",
   "homepage": "https://verity.md",
   "repository": {