@codacy/verity-cli 0.29.4-experimental.5cc6a16 → 0.29.4-experimental.5fcba03

package/bin/verity.js

@@ -16749,6 +16749,22 @@ function formatRunEvidence(run, startedAt) {
       out += row("withheld", "(nothing \u2014 every changed file was reviewed)");
     }
   }
+  const cov = run.foldResult?.coverage;
+  if (cov) {
+    const delegated = run.foldResult.authored.filter((a) => a.owner === "subagent").length;
+    if (cov.dispatched > 0 || cov.subagentFiles > 0 || cov.subagentSkipped > 0) {
+      out += row("delegated", `${cov.dispatched} dispatched \xB7 ${cov.subagentFiles} agent log(s) read \xB7 ${delegated} path(s) attributed to subagents`);
+    }
+    if (cov.subagentSkipped > 0) {
+      out += row("", `\u26A0 ${cov.subagentSkipped} agent log(s) REFUSED by the byte budget \u2014 the authored set above is PARTIAL`);
+    }
+    if (cov.dispatched > 0 && cov.subagentFiles === 0) {
+      out += row("", `\u26A0 this turn dispatched ${cov.dispatched} agent(s) but no agent log was found \u2014 delegated work is unattributed (has the transcript layout moved?)`);
+    }
+    if (cov.outsideRepo > 0) {
+      out += row("", `${cov.outsideRepo} authored path(s) refused as outside the repo`);
+    }
+  }
   if (run.staticResults.findings.length > 0) {
     out += row("static", `${run.staticResults.findings.length} finding(s) from ${run.staticResults.summary.tools_run.join(", ") || "no tools"}`);
   }
@@ -17200,7 +17216,7 @@ function channelSilence(input) {
 // src/lib/cli-version.ts
 function cliVersion() {
   try {
-    return true ? "0.29.4-experimental.5cc6a16" : "dev";
+    return true ? "0.29.4-experimental.5fcba03" : "dev";
   } catch {
     return "dev";
   }
@@ -18190,6 +18206,12 @@ function toRepoRelative(path, repoRoot2) {
   }
   return p.replace(/^\/+/, "");
 }
+function isInsideRepo(path, repoRoot2) {
+  const p = path.replace(/\\/g, "/");
+  if (!p.startsWith("/")) return true;
+  if (!repoRoot2) return true;
+  return candidateRoots(repoRoot2).some((root) => p === root || p.startsWith(root + "/"));
+}
 function fold(transcriptPath, opts = {}) {
   const result = {
     authored: [],
@@ -18201,6 +18223,7 @@ function fold(transcriptPath, opts = {}) {
       totalRecords: 0,
       malformed: 0,
       subagentFiles: 0,
+      outsideRepo: 0,
       dispatched: 0,
       userMessages: 0,
       subagentSkipped: 0,
@@ -18241,7 +18264,11 @@ function fold(transcriptPath, opts = {}) {
     return result;
   }
   try {
-    const sidecarDir = (0, import_node_path18.join)((0, import_node_path18.dirname)(transcriptPath), "subagents");
+    const sidecarDir = (0, import_node_path18.join)(
+      (0, import_node_path18.dirname)(transcriptPath),
+      (0, import_node_path18.basename)(transcriptPath).replace(/\.jsonl$/, ""),
+      "subagents"
+    );
     if ((0, import_node_fs23.existsSync)(sidecarDir)) {
       const maxFiles = opts.maxSidecars ?? 200;
       const maxBytes = opts.maxSidecarBytes ?? 16 * 1024 * 1024;
@@ -18313,6 +18340,10 @@ function collectFromRecord(record, owner, byPath, commandStats, pendingByToolUse
       const input = block.input ?? {};
       if (EDIT_TOOLS.has(name)) {
         const rawPath = typeof input.notebook_path === "string" ? input.notebook_path : typeof input.file_path === "string" ? input.file_path : null;
+        if (rawPath && !isInsideRepo(rawPath, repoRoot2)) {
+          if (tally) tally.outsideRepo += 1;
+          continue;
+        }
         const path = rawPath ? toRepoRelative(rawPath, repoRoot2) : null;
         if (path) {
           const entry = byPath.get(path) ?? { p: path, h: 0, a: 0, d: 0, owner };
@@ -21965,8 +21996,8 @@ function registerTelemetryCommands(program2) {
 }
 
 // src/cli.ts
-program.name("verity").description("CLI for Verity quality gate service").version("0.29.4-experimental.5cc6a16").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async (_thisCommand, actionCommand) => {
-  installStderrLog(actionCommand.name(), process.argv.slice(2), "0.29.4-experimental.5cc6a16");
+program.name("verity").description("CLI for Verity quality gate service").version("0.29.4-experimental.5fcba03").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async (_thisCommand, actionCommand) => {
+  installStderrLog(actionCommand.name(), process.argv.slice(2), "0.29.4-experimental.5fcba03");
   setUserNamedServiceUrl(program.opts().serviceUrl);
   try {
     await foldLegacyLocalCredential();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codacy/verity-cli",
-  "version": "0.29.4-experimental.5cc6a16",
+  "version": "0.29.4-experimental.5fcba03",
   "description": "CLI for Verity quality gate service",
   "license": "SEE LICENSE IN LICENSE",
   "homepage": "https://verity.md",