@codacy/verity-cli 0.28.1-experimental.af3c52d → 0.28.1-experimental.c2dc717

package/bin/verity.js

@@ -10636,14 +10636,14 @@ async function readGlobalCredential(remote) {
       const parsed = parseCredentialLine(line);
       if (parsed && parsed.remote === key) last = parsed.rec;
     }
-    if (last) return last;
+    if (last) return { ...last, keyed: true };
   }
   let plain = null;
   for (const line of lines) {
     const parsed = parseCredentialLine(line);
     if (parsed && parsed.remote === "") plain = parsed.rec;
   }
-  return plain;
+  return plain ? { ...plain, keyed: false } : null;
 }
 async function upsertGlobalCredential(remote, rec) {
   const path = globalCredentialsPath();
@@ -11218,7 +11218,13 @@ async function resolveToken(flagToken) {
   if (rec) {
     return {
       ok: true,
-      data: { token: rec.token, source: "global", userId: rec.userId, email: rec.email }
+      data: {
+        token: rec.token,
+        source: "global",
+        userId: rec.userId,
+        email: rec.email,
+        keyed: rec.keyed
+      }
     };
   }
   const local = await readLegacyLocalCredential();
@@ -11250,6 +11256,16 @@ function reverifyNudge(who) {
   }
   return null;
 }
+function isLegacyPerRepoCredential(auth2) {
+  return auth2.source === "local" || auth2.source === "global" && auth2.keyed === true;
+}
+async function shouldUpgradeOnLogin(auth2) {
+  if (!isLegacyPerRepoCredential(auth2)) return false;
+  if (auth2.userId == null) return true;
+  const bare = await readGlobalCredential("");
+  if (bare?.userId == null) return true;
+  return bare.userId === auth2.userId;
+}
 function authDenialRemedy(error) {
   if (error.startsWith("STALE_VERIFICATION")) {
     return {
@@ -11680,13 +11696,19 @@ function registerLoginCommand(program2) {
       const who = await whoami(existing.data.token, serviceUrl, globals.verbose);
       if (who.ok && who.data.logged_in) {
         const nudge = reverifyNudge(who.data);
-        if (!nudge) {
+        const upgrade = await shouldUpgradeOnLogin(existing.data);
+        if (!nudge && !upgrade) {
           printInfo(`Already logged in as ${who.data.email ?? `user #${who.data.user_id}`}. \u2713`);
           printInfo("  Re-authenticate with: verity login --force");
           return;
         }
-        printWarn(nudge);
-        printInfo("Re-verifying your repository access\u2026");
+        if (nudge) {
+          printWarn(nudge);
+          printInfo("Re-verifying your repository access\u2026");
+        } else {
+          printInfo("You are signed in with a per-repository token (the old format).");
+          printInfo("  Upgrading to a single login that covers every repository you can write to\u2026");
+        }
       } else if (who.ok && who.data.anonymous) {
         printInfo("You have an anonymous token (the gate runs, but nothing is saved). Logging you in\u2026");
       } else if (!who.ok) {
@@ -11737,14 +11759,24 @@ function registerLoginCommand(program2) {
       const rec = await readGlobalCredential(remote);
       if (rec && rec.token !== out.token) {
         const otherBackend = rec.serviceUrl != null && rec.serviceUrl !== out.serviceUrl;
+        const otherIdentity = rec.userId != null && out.userId != null && rec.userId !== out.userId;
         if (otherBackend) {
           printWarn(`  Note: this repository is pinned to a different Verity service (${rec.serviceUrl})`);
           printWarn("  by its own credential line, which takes precedence here \u2014 this login does not");
           printWarn("  change that. To move the repository, remove its line from ~/.verity/credentials.");
+          printWarn('  Until that line is removed, "verity login" here cannot fast-path and will run');
+          printWarn("  the full GitHub flow every time.");
+        } else if (otherIdentity) {
+          printWarn("  Note: this repository uses a different account's credential, which takes");
+          printWarn('  precedence here \u2014 this login leaves it in place, and "verity login" in this');
+          printWarn("  repository will report that account. Remove its line from ~/.verity/credentials");
+          printWarn("  only if you want this repository on the login you just completed.");
         } else {
           const kind = rec.userId != null ? "superseded per-repository" : "anonymous project-specific";
           printWarn(`  Note: this repository has a ${kind} credential that takes`);
           printWarn("  precedence here. Remove its line from ~/.verity/credentials to use your login.");
+          printWarn('  Until then, "verity login" in this repository re-runs the full GitHub flow');
+          printWarn("  every time.");
         }
       }
     }
@@ -13559,6 +13591,65 @@ var import_node_fs10 = require("node:fs");
 var import_node_crypto5 = require("node:crypto");
 var import_node_path11 = require("node:path");
 
+// src/lib/skip-detection.ts
+function isBareAckPrompt(prompt) {
+  if (typeof prompt !== "string") return false;
+  const trimmed = prompt.trim();
+  if (trimmed.length === 0) return false;
+  if (trimmed.length > 20) return false;
+  const bareAckPattern = /^(\d{1,2}|y|n|yes|no|yep|nope|ok(ay)?|sure|skip|cancel|stop|done|noted|got\s+it|sounds\s+good|thanks|thank\s+you|thx)[.!?]*$/i;
+  return bareAckPattern.test(trimmed);
+}
+function isContinuationPrompt(prompt) {
+  if (typeof prompt !== "string") return false;
+  const trimmed = prompt.trim();
+  if (trimmed.length === 0) return false;
+  if (trimmed.length > 24) return false;
+  const continuation = /^(let['’]?s\s+(go|do\s+it|start|continue)|go|go\s+ahead|go\s+on|proceed|continue|carry\s+on|keep\s+going|do\s+it|make\s+it\s+so|next|start|begin|ship\s+it|yes\s+please|please\s+continue|perfect|great|nice|excellent|agreed)[.!]*$/i;
+  return continuation.test(trimmed) || isBareAckPrompt(trimmed);
+}
+function resolveGoalPrompt(prompts) {
+  if (prompts.length === 0) return null;
+  const latest = prompts[prompts.length - 1];
+  if (!isContinuationPrompt(latest.prompt)) return { entry: latest, turnsBack: 0 };
+  for (let i = prompts.length - 2; i >= 0; i--) {
+    if (!isContinuationPrompt(prompts[i].prompt)) {
+      return { entry: prompts[i], turnsBack: prompts.length - 1 - i };
+    }
+  }
+  return { entry: latest, turnsBack: 0 };
+}
+function isReflectionQuestion(response) {
+  if (!response || typeof response !== "string") return false;
+  const markers = [
+    /reflection\s+for\s+future\s+agents/i,
+    /what(?:'s|\s+is)\s+one\s+thing\s+you\s+learned/i,
+    /say\s+['"]?skip['"]?\s+to\s+skip/i,
+    /quick\s+reflection\s+question/i,
+    // Post-flip (VRT-21): the agent drafts the reflection itself and, when
+    // interactive, asks the user to confirm/correct before recording. That
+    // turn authors no code either, so it's still a reflection turn.
+    /reflection\s+draft/i,
+    /confirm,?\s+correct,?\s+or\s+add/i
+  ];
+  return markers.some((m) => m.test(response));
+}
+function isMetaTaskLabel(label2) {
+  if (label2 === null || label2 === void 0) return false;
+  if (typeof label2 !== "string") return false;
+  const trimmed = label2.trim();
+  if (trimmed.length === 0) return true;
+  const metaPatterns = [
+    /^verity\s+[\w-]+\s+response$/i,
+    // "Verity reflect response"
+    /^simple user response$/i,
+    /^verity\s+command$/i,
+    // "Verity command"
+    /^user\s+(question|reply|response|ack)$/i
+  ];
+  return metaPatterns.some((p) => p.test(trimmed));
+}
+
 // src/lib/dossier.ts
 var import_node_fs9 = require("node:fs");
 var import_node_crypto4 = require("node:crypto");
@@ -13928,6 +14019,12 @@ function reduce(state, events, now) {
       }
       case "verdict": {
         state.meta.last_verdict_seq = ev.seq;
+        state.meta.channel = {
+          emittedLast: ev.emitted === true,
+          // Reset by ANY movement, so the counter measures a standstill rather
+          // than session length.
+          consecutiveIdle: ev.idle === false ? 0 : (state.meta.channel?.consecutiveIdle ?? 0) + 1
+        };
         state.meta.last_adjudication = ev.intent_verdict ? { verdict: ev.intent_verdict, score: ev.intent_score ?? null, at: ev.at, decision: ev.decision } : void 0;
         if (ev.intent_sig) {
           state.meta.intent_repeat = state.meta.intent_repeat && state.meta.intent_repeat.sig === ev.intent_sig ? { sig: ev.intent_sig, consecutive: state.meta.intent_repeat.consecutive + 1 } : { sig: ev.intent_sig, consecutive: 1 };
@@ -14295,6 +14392,10 @@ function projectMemory(state, opts) {
       ...active.delivered && { delivered: active.delivered }
     };
   }
+  if (opts.capture) {
+    const missed = Math.max(0, opts.capture.seen - opts.capture.captured);
+    p.capture = { seen: opts.capture.seen, captured: opts.capture.captured, missed };
+  }
   if (state.meta.last_adjudication) {
     const a = state.meta.last_adjudication;
     p.last_adjudication = { verdict: a.verdict, score: a.score, at: a.at };
@@ -14541,7 +14642,8 @@ function recall(d, input) {
     continuity,
     spoken: reanchored.spoken,
     refused: reanchored.dropped.length,
-    lastVerdictSeq
+    lastVerdictSeq,
+    ...input.capture && { capture: input.capture }
   });
   return {
     state: effective,
@@ -14652,7 +14754,19 @@ function sessionDossier(token, sessionId) {
   const d = openDossier(identity);
   return d ? { d, identity } : null;
 }
+function hasActiveGoal(d) {
+  try {
+    if (!(0, import_node_fs10.existsSync)(d.eventsPath)) return false;
+    return (0, import_node_fs10.readFileSync)(d.eventsPath, "utf8").includes('"k":"goal"');
+  } catch {
+    return false;
+  }
+}
 function recordGoal(d, prompt, source = "prompt") {
+  if (source === "prompt" && isContinuationPrompt(prompt) && hasActiveGoal(d)) {
+    appendEvent(d, { k: "goal_continue", text: prompt.slice(0, 64) });
+    return;
+  }
   const text = prompt.slice(0, MAX_GOAL_CHARS);
   appendEvent(d, {
     k: "goal",
@@ -14755,6 +14869,11 @@ function recordVerdict(d, v) {
       line_sha: at !== void 0 ? lineSha(at) : null
     });
   }
+  const foldedNow = foldDossier(d);
+  const sig = intentSignature(v.intent, {
+    goalSeq: foldedNow.goal.find((g) => g.status === "active")?.seq ?? 0,
+    idle: v.idle !== false
+  });
   appendEvent(d, {
     k: "verdict",
     run_id: v.runId,
@@ -14762,15 +14881,19 @@ function recordVerdict(d, v) {
     watermark_sha: v.watermarkSha,
     branch: v.branch,
     decision: v.decision,
-    ...intentSignature(v.intent) && { intent_sig: intentSignature(v.intent) },
+    ...sig && { intent_sig: sig },
+    emitted: v.emitted === true,
+    idle: v.idle !== false,
     ...v.intent?.verdict && { intent_verdict: v.intent.verdict },
     ...typeof v.intent?.score === "number" && { intent_score: v.intent.score }
   });
 }
-function intentSignature(intent) {
+function intentSignature(intent, ctx) {
   if (!intent?.verdict) return null;
   if (intent.verdict !== "misaligned" && intent.verdict !== "partial") return null;
-  return `${intent.verdict}:${lineSha(intent.gaps?.[0] ?? "")}`;
+  const goal = ctx ? `g${ctx.goalSeq}` : "g?";
+  const moved = ctx?.idle === false ? "active" : "idle";
+  return `${intent.verdict}:${goal}:${moved}`;
 }
 function toRegister(severity) {
   switch (severity) {
@@ -14807,7 +14930,9 @@ function recallMemory(d, identity, opts) {
     const state = foldDossier(d);
     const watermark = state.meta.watermark?.sha ?? null;
     const watermarkPaths = (state.authored ?? []).map((a) => a.path);
+    const captureCmp = typeof opts.userMessagesSeen === "number" ? { seen: opts.userMessagesSeen, captured: state.meta.goal_chain } : void 0;
     const r = recall(d, {
+      ...captureCmp && { capture: captureCmp },
       identity,
       currentSessionKey: opts.currentSessionKey,
       branchNow: getCurrentBranch(),
@@ -15064,6 +15189,8 @@ function collectCodeDelta(files, opts) {
   let totalSize = 0;
   let truncationReason = null;
   const droppedPaths = [];
+  const excluded = [];
+  const exclude = (path, reason) => excluded.push({ path, reason, stage: "collectCodeDelta", kind: "capacity" });
   for (const filepath of sorted) {
     if (result.length >= maxFiles) {
       truncationReason ??= "max_files";
@@ -15071,14 +15198,21 @@ function collectCodeDelta(files, opts) {
       continue;
     }
     const resolved = resolveFile(filepath);
-    if (!resolved) continue;
+    if (!resolved) {
+      exclude(filepath, "path-not-resolvable");
+      continue;
+    }
     let size;
     try {
       size = (0, import_node_fs11.statSync)(resolved).size;
     } catch {
+      exclude(filepath, "not-stattable");
+      continue;
+    }
+    if (size > maxFileBytes) {
+      exclude(filepath, `over-file-size-limit-${maxFileBytes}b`);
       continue;
     }
-    if (size > maxFileBytes) continue;
     if (totalSize + size > maxTotalBytes) {
       truncationReason ??= "max_total_bytes";
       const idx = sorted.indexOf(filepath);
@@ -15089,6 +15223,7 @@ function collectCodeDelta(files, opts) {
     try {
       content = (0, import_node_fs11.readFileSync)(resolved, "utf-8");
     } catch {
+      exclude(filepath, "not-readable");
       continue;
     }
     totalSize += size;
@@ -15102,10 +15237,14 @@ function collectCodeDelta(files, opts) {
     (sum, f) => sum + f.content.split("\n").length,
     0
   );
+  for (const path of droppedPaths) {
+    exclude(path, truncationReason === "max_files" ? "max-files-cap" : "max-total-bytes-cap");
+  }
   return {
     files: result,
     total_lines: totalLines,
     total_files: result.length,
+    excluded,
     ...truncationReason && {
       truncated: {
         reason: truncationReason,
@@ -16557,7 +16696,7 @@ function resolveTaskContext(opts) {
 // src/lib/cli-version.ts
 function cliVersion() {
   try {
-    return true ? "0.28.1-experimental.af3c52d" : "dev";
+    return true ? "0.28.1-experimental.c2dc717" : "dev";
   } catch {
     return "dev";
   }
@@ -16782,6 +16921,16 @@ var KNOWN_RECORD_TYPES = /* @__PURE__ */ new Set([
   "subagent"
 ]);
 var EDIT_TOOLS = /* @__PURE__ */ new Set(["Edit", "Write", "NotebookEdit", "MultiEdit"]);
+var DISPATCH_TOOLS = /* @__PURE__ */ new Set(["Task", "Workflow"]);
+function hasUserText(record) {
+  const message = record.message;
+  const content = message?.content ?? record.content;
+  if (typeof content === "string") return content.trim().length > 0;
+  if (!Array.isArray(content)) return false;
+  return content.some(
+    (b) => b?.type === "text" && typeof b.text === "string" && b.text.trim().length > 0
+  );
+}
 var COMMAND_CLASSES = [
   [/\b(npm|yarn|pnpm|bun)\s+(run\s+)?test\b|\bvitest\b|\bjest\b|\bpytest\b|\bgo test\b/, "test"],
   [/\b(npm|yarn|pnpm|bun)\s+(run\s+)?build\b|\btsc\b|\bwebpack\b|\bcargo build\b/, "build"],
@@ -16908,6 +17057,8 @@ function fold(transcriptPath, opts = {}) {
       totalRecords: 0,
       malformed: 0,
       subagentFiles: 0,
+      dispatched: 0,
+      userMessages: 0,
       subagentSkipped: 0,
       compactions: 0,
       complete: false
@@ -16934,7 +17085,8 @@ function fold(transcriptPath, opts = {}) {
       if (type === "system" && record.subtype === "compact_boundary") {
         result.coverage.compactions++;
       }
-      collectFromRecord(record, owner, byPath, commandStats, pendingByToolUse, opts.repoRoot);
+      if (type === "user" && hasUserText(record)) result.coverage.userMessages++;
+      collectFromRecord(record, owner, byPath, commandStats, pendingByToolUse, opts.repoRoot, result.coverage);
     }
   };
   try {
@@ -17006,7 +17158,7 @@ function classifyUnobserved(path) {
   if (/\.(png|jpg|jpeg|gif|pdf|zip|woff2?|ico|mp4)$/i.test(path)) return "binary";
   return "no_edit_record";
 }
-function collectFromRecord(record, owner, byPath, commandStats, pendingByToolUse, repoRoot2) {
+function collectFromRecord(record, owner, byPath, commandStats, pendingByToolUse, repoRoot2, tally) {
   const message = record.message;
   const content = message?.content ?? record.content;
   const blocks = Array.isArray(content) ? content : content && typeof content === "object" ? [content] : [];
@@ -17028,6 +17180,9 @@ function collectFromRecord(record, owner, byPath, commandStats, pendingByToolUse
           byPath.set(path, entry);
         }
       }
+      if (DISPATCH_TOOLS.has(name) && tally) {
+        tally.dispatched += 1;
+      }
       if (name === "Bash") {
         const cmd = typeof input.command === "string" ? input.command : "";
         if (cmd) {
@@ -17086,6 +17241,86 @@ function checkConservation(changedFiles, result, repoRoot2) {
   };
 }
 
+// src/lib/verdict.ts
+function reconcileCoverage(changed, coverage) {
+  const changedSet = new Set(changed);
+  const reviewed = coverage.reviewed.filter((p) => changedSet.has(p));
+  const claimed = /* @__PURE__ */ new Set([...reviewed, ...coverage.notReviewed.map((n) => n.path)]);
+  const unaccounted = [...changedSet].filter((p) => !claimed.has(p)).sort();
+  const notReviewed = [
+    ...coverage.notReviewed.filter((n) => changedSet.has(n.path)),
+    ...unaccounted.map((path) => ({
+      path,
+      reason: "unaccounted",
+      // Named so the eventual bug report writes itself: some stage removed this
+      // path and did not say so.
+      stage: "unknown-stage",
+      // An undeclared drop is CAPACITY by default. A stage that cannot be
+      // bothered to say why it dropped a file does not get the benefit of the
+      // doubt — that default is what makes forgetting expensive.
+      kind: "capacity"
+    }))
+  ];
+  return {
+    coverage: { reviewed: [...new Set(reviewed)].sort(), notReviewed },
+    unaccounted,
+    balances: unaccounted.length === 0
+  };
+}
+function resolveVerdict(proposed, coverage) {
+  if (proposed === "FAIL") return "FAIL";
+  const blocking = coverage.notReviewed.filter((n) => (n.kind ?? "capacity") !== "policy");
+  if (blocking.length === 0) return proposed;
+  return "WARN";
+}
+function describeCoverage(coverage, maxPaths = 5) {
+  const relevant = coverage.notReviewed.filter((n) => (n.kind ?? "capacity") !== "policy");
+  if (relevant.length === 0) return null;
+  const byReason = /* @__PURE__ */ new Map();
+  for (const n of relevant) {
+    const key = `${n.reason}`;
+    const list = byReason.get(key) ?? [];
+    list.push(n.path);
+    byReason.set(key, list);
+  }
+  const lines = [];
+  for (const [reason, paths] of [...byReason.entries()].sort()) {
+    const shown = paths.slice(0, maxPaths).join(", ");
+    const more = paths.length > maxPaths ? ` (+${paths.length - maxPaths} more)` : "";
+    lines.push(`  ${paths.length} not reviewed \u2014 ${reason}: ${shown}${more}`);
+  }
+  return `NOT A CLEAN REVIEW. ${relevant.length} changed file(s) never reached the reviewer, so this verdict does not cover them:
+${lines.join("\n")}
+Treat those files as UNCHECKED, not as approved.`;
+}
+function openBlockingElsewhere(statements, reviewedNow, lineShaAt) {
+  const reviewed = new Set(reviewedNow);
+  const out = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const s of statements) {
+    if (s.outcome !== "open") continue;
+    if (s.register !== "BLOCK") continue;
+    if (s.carried) continue;
+    if (reviewed.has(s.file)) continue;
+    if (!s.line_sha) continue;
+    if (lineShaAt(s.file, s.line) !== s.line_sha) continue;
+    const key = `${s.file}::${s.pattern_id}`;
+    if (seen.has(key)) continue;
+    seen.add(key);
+    out.push({ file: s.file, line: s.line, pattern_id: s.pattern_id });
+  }
+  return out;
+}
+function describeOpenElsewhere(open) {
+  if (open.length === 0) return null;
+  const lines = open.slice(0, 5).map((o) => `  ${o.file}:${o.line} [${o.pattern_id}]`);
+  const more = open.length > 5 ? `
+  (+${open.length - 5} more)` : "";
+  return `STILL OPEN ELSEWHERE. ${open.length} blocking finding(s) Verity raised earlier are still present in files this run did not review:
+${lines.join("\n")}${more}
+This verdict covers the current change only. The tree is not clean.`;
+}
+
 // src/lib/channel.ts
 var MAX_AGENT_CONTEXT_CHARS = 1500;
 var MAX_AGENT_ITEMS = 5;
@@ -17164,6 +17399,47 @@ function buildHookOutput(gateDecision, systemMessage, agentContext) {
     } : {}
   };
 }
+var IDLE_EPISODE_CAP = 3;
+function channelSilence(input) {
+  const movedSomething = input.newUserPrompt || input.newAuthorship;
+  if (movedSomething) return null;
+  if (input.consecutiveIdle >= IDLE_EPISODE_CAP) return "idle-episode-cap";
+  if (input.emittedLast) return "caused-by-our-own-emission";
+  return null;
+}
+
+// src/lib/emit.ts
+var YELLOW2 = "\x1B[33m";
+var NC2 = "\x1B[0m";
+function emitVerdict(input) {
+  const exit = input.exit ?? ((code) => process.exit(code));
+  const { coverage, unaccounted } = reconcileCoverage(input.changed, input.coverage);
+  let verdict = resolveVerdict(input.proposed, coverage);
+  const openElsewhere = input.openElsewhere ?? [];
+  if (verdict === "PASS" && openElsewhere.length > 0) verdict = "WARN";
+  const note = [describeCoverage(coverage), describeOpenElsewhere(openElsewhere)].filter(Boolean).join("\n\n") || null;
+  if (unaccounted.length > 0) {
+    process.stderr.write(
+      `${YELLOW2}Verity: ${unaccounted.length} changed file(s) could not be attributed to any review stage \u2014 counted as unreviewed.${NC2}
+`
+    );
+  }
+  if (verdict === "FAIL") {
+    input.renderBlocking?.();
+    if (input.agentContext) {
+      process.stderr.write(`
+${input.agentContext}
+`);
+    }
+    if (note && !input.silenced) process.stderr.write(`
+${YELLOW2}${note}${NC2}
+`);
+    return exit(2);
+  }
+  const agentBlock = input.silenced ? null : [input.agentContext, note].filter(Boolean).join("\n\n") || null;
+  printJsonCompact(buildHookOutput(verdict, input.userSummary, agentBlock));
+  return exit(0);
+}
 
 // src/lib/cache-cleanup.ts
 var import_node_fs21 = require("node:fs");
@@ -17344,46 +17620,6 @@ function shouldWarmRetryAnalyze(result) {
   return false;
 }
 
-// src/lib/skip-detection.ts
-function isBareAckPrompt(prompt) {
-  if (typeof prompt !== "string") return false;
-  const trimmed = prompt.trim();
-  if (trimmed.length === 0) return false;
-  if (trimmed.length > 20) return false;
-  const bareAckPattern = /^(\d{1,2}|y|n|yes|no|yep|nope|ok(ay)?|sure|skip|cancel|stop|done|noted|got\s+it|sounds\s+good|thanks|thank\s+you|thx)[.!?]*$/i;
-  return bareAckPattern.test(trimmed);
-}
-function isReflectionQuestion(response) {
-  if (!response || typeof response !== "string") return false;
-  const markers = [
-    /reflection\s+for\s+future\s+agents/i,
-    /what(?:'s|\s+is)\s+one\s+thing\s+you\s+learned/i,
-    /say\s+['"]?skip['"]?\s+to\s+skip/i,
-    /quick\s+reflection\s+question/i,
-    // Post-flip (VRT-21): the agent drafts the reflection itself and, when
-    // interactive, asks the user to confirm/correct before recording. That
-    // turn authors no code either, so it's still a reflection turn.
-    /reflection\s+draft/i,
-    /confirm,?\s+correct,?\s+or\s+add/i
-  ];
-  return markers.some((m) => m.test(response));
-}
-function isMetaTaskLabel(label2) {
-  if (label2 === null || label2 === void 0) return false;
-  if (typeof label2 !== "string") return false;
-  const trimmed = label2.trim();
-  if (trimmed.length === 0) return true;
-  const metaPatterns = [
-    /^verity\s+[\w-]+\s+response$/i,
-    // "Verity reflect response"
-    /^simple user response$/i,
-    /^verity\s+command$/i,
-    // "Verity command"
-    /^user\s+(question|reply|response|ack)$/i
-  ];
-  return metaPatterns.some((p) => p.test(trimmed));
-}
-
 // src/lib/transcript.ts
 var import_node_fs22 = require("node:fs");
 var MAX_READ_BYTES = 256 * 1024;
@@ -17547,6 +17783,13 @@ function buildSummary(lines) {
     files_read: capArray(filesRead, MAX_FILES_LIST),
     files_edited: capArray(filesEdited, MAX_FILES_LIST),
     files_created: capArray(filesCreated, MAX_CREATED_LIST),
+    // The complement of the two caps that affect SCOPE. `files_read` is excluded
+    // deliberately: reading a file is not authoring it, so a capped read list
+    // narrows nothing.
+    capped_out: [
+      ...cappedOut(filesEdited, MAX_FILES_LIST),
+      ...cappedOut(filesCreated, MAX_CREATED_LIST)
+    ],
     searches,
     commands,
     subagents,
@@ -17597,6 +17840,9 @@ function sanitizeCommand(rawCmd) {
 function capArray(set, max) {
   return Array.from(set).slice(0, max);
 }
+function cappedOut(set, max) {
+  return Array.from(set).slice(max);
+}
 
 // src/lib/run-mode.ts
 function parseAutonomousEnv(raw) {
@@ -18006,12 +18252,45 @@ function agentContextFor(response, intentRepeat = 0) {
   });
 }
 var beaconCtx = null;
-async function passAndExit(reason, skip) {
+async function passAndExit(reason, skip, kindOverride) {
   const sent = await sendSkipBeacon(beaconCtx, skip);
   logEvent("skip", { reason: skip, beacon: sent });
-  printJsonCompact({ gate_decision: "PASS", systemMessage: `Verity: ${reason}` });
+  const POLICY_SKIPS = /* @__PURE__ */ new Set([
+    "no-analyzable-files",
+    "verity-command",
+    "bare-acknowledgment",
+    "reflection-prompt",
+    "skip-mode",
+    "zero-increment",
+    "debounce",
+    "no-delta-since-last-review"
+  ]);
+  const skipKind = kindOverride ?? (POLICY_SKIPS.has(skip) ? "policy" : "capacity");
+  const changed = skipCoverageChanged;
+  const { coverage, unaccounted } = reconcileCoverage(changed, {
+    reviewed: [],
+    notReviewed: changed.map((path) => ({ path, reason: skip, stage: "pre-flight", kind: skipKind }))
+  });
+  const verdict = resolveVerdict("PASS", coverage);
+  const note = describeCoverage(coverage);
+  if (unaccounted.length > 0) {
+    logEvent("coverage_unaccounted", { where: "passAndExit", skip, count: unaccounted.length });
+  }
+  const AGENT_SILENT_SKIPS = /* @__PURE__ */ new Set(["iteration-cap"]);
+  const agentNote = AGENT_SILENT_SKIPS.has(skip) ? null : note;
+  printJsonCompact(
+    buildHookOutput(
+      verdict,
+      `Verity: ${reason}`,
+      // The agent's ONLY input is additionalContext. Sixteen of the nineteen
+      // terminating paths wrote `systemMessage` — the human's field — and told
+      // the agent nothing at all.
+      agentNote
+    )
+  );
   process.exit(0);
 }
+var skipCoverageChanged = [];
 var EMPTY_STATIC = {
   tool: "@codacy/analysis-cli",
   findings: [],
@@ -18026,7 +18305,7 @@ function runLocalStatic(analyzable, securityFiles, baseline, skipStatic) {
 }
 function localOnlyAndExit(staticResults) {
   printJsonCompact({
-    gate_decision: "PASS",
+    gate_decision: "WARN",
     systemMessage: "Verity: not authenticated \u2014 ran a local static-only check (no deep review, no upload). Run `verity init` to authenticate and enable the full quality gate.",
     unauthenticated: true,
     static_results: staticResults
@@ -18086,6 +18365,7 @@ async function runAnalyze(opts, globals) {
     });
   }
   const { files: allChanged, hasRecentCommitFiles } = getChangedFiles();
+  skipCoverageChanged = allChanged;
   const analyzable = filterAnalyzable(allChanged);
   const reviewable = filterReviewable(allChanged);
   const securityFiles = filterSecurity(allChanged);
@@ -18161,7 +18441,8 @@ async function runAnalyze(opts, globals) {
   let codeDelta = {
     files: [],
     total_lines: 0,
-    total_files: 0
+    total_files: 0,
+    excluded: []
   };
   let snapshotResult = { has_snapshots: false, diffs: [] };
   let contentHash = null;
@@ -18226,7 +18507,11 @@ async function runAnalyze(opts, globals) {
           if (assistantResponse) {
             analysisMode = "plan";
           } else {
-            await passAndExit("No files within size limits to analyze", "size-limit");
+            await passAndExit(
+              "No files within size limits to analyze",
+              "size-limit",
+              codeDelta.excluded.length > 0 ? "capacity" : "policy"
+            );
           }
         }
       }
@@ -18400,7 +18685,10 @@ async function runAnalyze(opts, globals) {
       priorState.capabilities
     );
     memory = recallMemory(memorySession.d, memorySession.identity, {
-      currentSessionKey: memorySession.identity.sessionKey
+      currentSessionKey: memorySession.identity.sessionKey,
+      // The independent witness. Only meaningful when a transcript was folded —
+      // otherwise it stays undefined and capture coverage reads as UNKNOWN.
+      ...foldResult && { userMessagesSeen: foldResult.coverage.userMessages }
     });
     if (memory && !memory.provenanceHolds) {
       process.stderr.write("Verity: working-memory provenance check failed \u2014 recall suppressed.\n");
@@ -18539,7 +18827,12 @@ async function runAnalyze(opts, globals) {
     const intentContext = {};
     if (conversation && conversation.prompts.length > 0) {
       const latest = conversation.prompts[conversation.prompts.length - 1];
-      intentContext.user_prompt = latest.prompt;
+      const goalPrompt = resolveGoalPrompt(conversation.prompts) ?? { entry: latest, turnsBack: 0 };
+      intentContext.user_prompt = goalPrompt.entry.prompt;
+      if (goalPrompt.turnsBack > 0) {
+        intentContext.continuation_prompt = latest.prompt;
+        logEvent("goal_walked_back", { turns_back: goalPrompt.turnsBack });
+      }
       intentContext.session_id = latest.session_id || void 0;
       intentContext.prompt_captured_at = latest.captured_at || void 0;
       if (conversation.prompts.length > 1) {
@@ -18631,8 +18924,114 @@ async function runAnalyze(opts, globals) {
   const response = result.data;
   const decision = response.gate_decision ?? "(unrecognised)";
   const sentPaths = codeDelta.files.map((f) => f.path);
+  let openElsewhere = [];
+  if (memorySession) {
+    try {
+      const st = foldDossier(memorySession.d);
+      openElsewhere = openBlockingElsewhere(st.statements, sentPaths, (file, line) => {
+        try {
+          const src = (0, import_node_fs24.readFileSync)((0, import_node_path20.join)(repoRoot(), file), "utf8").split("\n");
+          const at = src[line - 1];
+          return at === void 0 ? null : lineSha(at);
+        } catch {
+          return null;
+        }
+      });
+    } catch {
+    }
+  }
+  const reviewCoverage = {
+    reviewed: sentPaths,
+    // Declared drops from the stages that DO report themselves today. The other
+    // stages surface via `unaccounted`, which is the tripwire, not the design.
+    notReviewed: [
+      // Every exit from the collection loop, each named. Six reasons where there
+      // used to be two recorded and four silent — the silent ones including the
+      // per-file size cap, which could drop a whole source file without leaving a
+      // trace anywhere in the payload or the run row.
+      ...codeDelta.excluded,
+      // The server-side 300-line middle-out truncation. It only bites on the
+      // full-file branch (a first analysis, before snapshots exist) because
+      // analyze normally sends diffs — but on that branch the reviewer sees the
+      // first and last 100 lines and nothing between, and until now said so to
+      // nobody. CAPACITY: a partial look is not a look.
+      ...(response.metadata?.truncated_files ?? []).map((path) => ({
+        path,
+        reason: "file-middle-truncated-300-lines",
+        stage: "prompt-builder",
+        kind: "capacity"
+      })),
+      // The 20-entry edit cap. CAPACITY, and the sharpest of the lot: it narrows
+      // what is REVIEWED, not merely what is summarised — a session editing 25
+      // files had five silently excluded from the reviewed set.
+      ...(actionSummary?.capped_out ?? []).map((path) => ({
+        path,
+        reason: "edit-list-cap-20",
+        stage: "extractActionSummary",
+        kind: "capacity"
+      })),
+      // ⚠ BASELINE SCOPING — the biggest source of false NOT A CLEAN REVIEW.
+      //
+      // The universe is `allChanged`, git's whole dirty tree. The reviewed set is
+      // scoped to what THIS SESSION authored (the VRT-26 contamination cure), so
+      // every pre-existing dirty file is in the universe, absent from `reviewed`,
+      // and — until now — declared by nobody. It fell through to `unaccounted`,
+      // became capacity, and produced "NOT A CLEAN REVIEW: admin.js" over a file
+      // that was never this session's to review.
+      //
+      // Measured 2026-08-04: three consecutive runs over an untouched tree gave
+      // three different answers — .claude/settings.json, then admin.js, then six
+      // files — because each run took a different path and each path had a
+      // different idea of the universe. POLICY: not this session's work is not a
+      // coverage gap, it is the cure working.
+      ...allChanged.filter((p) => !sentPaths.includes(p) && !codeDelta.excluded.some((e) => e.path === p)).filter((p) => analyzable.includes(p) || reviewable.includes(p) || securityFiles.includes(p)).map((path) => ({
+        path,
+        reason: "not-authored-this-session",
+        stage: "baseline-scoping",
+        kind: "policy"
+      })),
+      // The extension allowlist, and it is POLICY rather than capacity: a changed
+      // README was never going to be reviewed, and treating that as a coverage
+      // gap would downgrade nearly every PASS to WARN until WARN meant nothing.
+      // Recorded so the ledger balances and so "what did Verity ignore entirely"
+      // is answerable — but it never touches the verdict.
+      ...allChanged.filter((p) => !analyzable.includes(p) && !reviewable.includes(p) && !securityFiles.includes(p)).map((path) => ({
+        path,
+        reason: "not-a-reviewed-file-type",
+        stage: "extension-allowlist",
+        kind: "policy"
+      }))
+    ]
+  };
   const watermarkHash = sentPaths.length > 0 ? computeContentHash(sentPaths) : contentHash;
   const watermarkIsPartial = !!codeDelta.truncated;
+  let silenced = null;
+  let turnIsIdleForChannel = true;
+  if (memorySession) {
+    try {
+      const st = foldDossier(memorySession.d);
+      turnIsIdleForChannel = st.authored_all.every((a) => a.hash_now === a.hash_at_last_verdict);
+      silenced = channelSilence({
+        // The BUFFER, not intentContext.user_prompt: the latter falls back to a
+        // linked issue (VRT-53 W4) when no human spoke, and a fallback goal is
+        // not a user utterance. Treating it as one would keep the loop alive on
+        // exactly the autonomous cohort.
+        newUserPrompt: (conversation?.prompts?.length ?? 0) > 0,
+        newAuthorship: !turnIsIdleForChannel,
+        emittedLast: st.meta.channel?.emittedLast === true,
+        consecutiveIdle: st.meta.channel?.consecutiveIdle ?? 0
+      });
+    } catch {
+      silenced = null;
+    }
+  }
+  if (silenced) {
+    logEvent("channel_silenced", {
+      reason: silenced,
+      run_id: response.run_id ?? turnId,
+      decision
+    });
+  }
   let intentRepeatCount = 0;
   if (memorySession) {
     try {
@@ -18648,7 +19047,15 @@ async function runAnalyze(opts, globals) {
           title: f.title,
           severity: f.severity
         })) ?? [],
-        intent: response.intent_alignment ?? null
+        intent: response.intent_alignment ?? null,
+        // The same signal F1 introduced: bytes differing from the hash frozen at
+        // the last verdict. A turn that moved nothing is the only kind that can
+        // accumulate a repeat.
+        idle: turnIsIdleForChannel,
+        // What next turn reads as `emittedLast`. A suppressed turn did not
+        // speak, so it cannot be the cause of the turn after it — which is what
+        // keeps this from becoming a permanent gag.
+        emitted: !silenced
       });
       intentRepeatCount = Math.max(0, (foldDossier(memorySession.d).meta.intent_repeat?.consecutive ?? 1) - 1);
     } catch {
@@ -18827,7 +19234,19 @@ ${YELLOW}${loginNudge.trim()}${NC}
       if (grantNudge) process.stderr.write(`
 ${YELLOW}${grantNudge.trim()}${NC}
 `);
-      process.exit(2);
+      emitVerdict({
+        proposed: "FAIL",
+        changed: skipCoverageChanged,
+        coverage: reviewCoverage,
+        userSummary: "",
+        // Subject to the SAME cycle cut as PASS/WARN. Suppressing here is safe:
+        // the findings themselves are rendered above by the blocking renderer,
+        // so what the cut removes is the repeated commentary, never the defect.
+        agentContext: silenced ? null : agentContextFor(response, intentRepeatCount),
+        // The coverage note is silenced with it — half a channel is still a channel.
+        silenced: !!silenced,
+        openElsewhere
+      });
       break;
     }
     case "PASS": {
@@ -18839,10 +19258,16 @@ ${YELLOW}${grantNudge.trim()}${NC}
       if (viewUrl) userSummary += ` Report: ${viewUrl}`;
       if (autoSeedNotice) userSummary = `${autoSeedNotice} ${userSummary}`;
       userSummary += loginNudge + grantNudge;
-      printJsonCompact(
-        buildHookOutput("PASS", userSummary, agentContextFor(response, intentRepeatCount))
-      );
-      process.exit(0);
+      emitVerdict({
+        proposed: "PASS",
+        changed: skipCoverageChanged,
+        coverage: reviewCoverage,
+        userSummary,
+        agentContext: silenced ? null : agentContextFor(response, intentRepeatCount),
+        // The coverage note is silenced with it — half a channel is still a channel.
+        silenced: !!silenced,
+        openElsewhere
+      });
       break;
     }
     case "WARN": {
@@ -18853,10 +19278,16 @@ ${YELLOW}${grantNudge.trim()}${NC}
       if (viewUrl) userSummary += ` Report: ${viewUrl}`;
       if (autoSeedNotice) userSummary = `${autoSeedNotice} ${userSummary}`;
       userSummary += loginNudge + grantNudge;
-      printJsonCompact(
-        buildHookOutput("WARN", userSummary, agentContextFor(response, intentRepeatCount))
-      );
-      process.exit(0);
+      emitVerdict({
+        proposed: "WARN",
+        changed: skipCoverageChanged,
+        coverage: reviewCoverage,
+        userSummary,
+        agentContext: silenced ? null : agentContextFor(response, intentRepeatCount),
+        // The coverage note is silenced with it — half a channel is still a channel.
+        silenced: !!silenced,
+        openElsewhere
+      });
       break;
     }
     default: {
@@ -18969,8 +19400,8 @@ async function runReview(opts, globals) {
     for (const p of specPaths) {
       if (!(0, import_node_fs26.existsSync)(p)) continue;
       try {
-        const { readFileSync: readFileSync15 } = await import("node:fs");
-        const content = readFileSync15(p, "utf-8");
+        const { readFileSync: readFileSync16 } = await import("node:fs");
+        const content = readFileSync16(p, "utf-8");
         specs.push({ path: p, content: content.slice(0, 10240) });
       } catch {
       }
@@ -20656,7 +21087,7 @@ function registerTelemetryCommands(program2) {
 }
 
 // src/cli.ts
-program.name("verity").description("CLI for Verity quality gate service").version("0.28.1-experimental.af3c52d").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async () => {
+program.name("verity").description("CLI for Verity quality gate service").version("0.28.1-experimental.c2dc717").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async () => {
   try {
     await foldLegacyLocalCredential();
   } catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codacy/verity-cli",
-  "version": "0.28.1-experimental.af3c52d",
+  "version": "0.28.1-experimental.c2dc717",
   "description": "CLI for Verity quality gate service",
   "homepage": "https://verity.md",
   "bugs": {