@codacy/verity-cli 0.29.4-experimental.9a4e14c → 0.29.4-experimental.f2e812c

package/bin/verity.js

@@ -10390,11 +10390,11 @@ var MAX_DELTA_BYTES = 194560;
 var MAX_FILES = 40;
 var MAX_FILE_BYTES = 51200;
 var DEBOUNCE_SECONDS = 30;
-var MAX_SPEC_FILES = 10;
-var MAX_SPEC_FILE_BYTES = 10240;
-var MAX_TOTAL_SPEC_BYTES = 30720;
+var MAX_SPEC_FILES = 6;
+var MAX_SPEC_FILE_BYTES = 512e3;
+var MAX_TOTAL_SPEC_BYTES = 512e3;
 var MAX_PLAN_FILES = 3;
-var MAX_PLAN_FILE_BYTES = 10240;
+var MAX_PLAN_FILE_BYTES = 512e3;
 var MAX_INTENT_CHARS = 2e3;
 var SNAPSHOT_DIR = `${VERITY_DIR}/.snapshot`;
 var BASELINE_DIR = `${VERITY_DIR}/.baseline`;
@@ -16570,6 +16570,7 @@ function createRun(opts, globals) {
     opts,
     globals,
     phaseReached: "",
+    phasesCompleted: [],
     skipReason: null,
     turnId: "",
     // The value `resolveReachability` itself returns when every rung declines.
@@ -16600,6 +16601,7 @@ function createRun(opts, globals) {
     urlResult: { ok: false, error: "unresolved" },
     serviceUrl: "",
     token: "",
+    modeDecision: null,
     sessionIdForMemory: "",
     contextFilePaths: [],
     analysisMode: "standard",
@@ -16710,7 +16712,19 @@ function formatRunEvidence(run, startedAt) {
   out += row("turn", `${run.turnId || "(unminted)"}${run.sessionId ? ` \xB7 session ${run.sessionId}` : ""}`);
   out += row("reached", `${run.phaseReached || "(none)"}${run.skipReason ? ` \xB7 SKIPPED: ${run.skipReason}` : ""} \xB7 ${ms}ms`);
   out += row("changed", `${run.changedUniverse.length} from git \xB7 analyzable ${run.analyzable.length} \xB7 reviewable ${run.reviewable.length} \xB7 security ${run.securityFiles.length} \xB7 forReview ${run.allForReview.length}`);
-  out += row("signals", `mode=${run.analysisMode} \xB7 baseline=${run.baseline ? "yes" : "no"} \xB7 authored=${run.turnAuthoredCode ? "yes" : "no"} \xB7 observable=${run.authorshipIsObservable ? "yes" : "no"}` + (run.actionSummary?.transcript_windowed ? ` \xB7 window=${run.actionSummary.transcript_windowed}` : ""));
+  const done = (phase) => run.phasesCompleted.includes(phase);
+  const ifDone = (phase, value) => done(phase) ? value : "?";
+  const md = run.modeDecision;
+  if (md) {
+    const how = md.forced ? "forced by --mode" : `predicted=${md.predicted ?? "none"} \u2192 ${md.resolved}`;
+    out += row("mode", `${md.resolved} \xB7 ${how} \xB7 authored=${md.authored ? "yes" : "no"} \xB7 investigated=${md.investigated ? "yes" : "no"}`);
+  } else {
+    out += row("mode", `? (this run stopped in ${run.phaseReached || "no phase"}, before the mode was decided)`);
+  }
+  out += row("signals", `baseline=${ifDone("bootstrap", run.baseline ? "yes" : "no")} \xB7 authored=${ifDone("intentInputs", run.turnAuthoredCode ? "yes" : "no")} \xB7 observable=${ifDone("intentInputs", run.authorshipIsObservable ? "yes" : "no")}` + (run.actionSummary?.transcript_windowed ? ` \xB7 window=${run.actionSummary.transcript_windowed}` : ""));
+  if (!done("intentInputs")) {
+    out += row("", `(\`?\` = the phase that determines it did not complete \u2014 this run stopped in ${run.phaseReached})`);
+  }
   out += row("sent", `${sent.length} \xB7 ${list(sent)}`);
   if (context.length > 0) out += row("context", `${context.length} \xB7 ${list(context)}`);
   const withheld = run.reviewCoverage.notReviewed;
@@ -16735,6 +16749,46 @@ function formatRunEvidence(run, startedAt) {
       out += row("withheld", "(nothing \u2014 every changed file was reviewed)");
     }
   }
+  const cov = run.foldResult?.coverage;
+  if (cov) {
+    const delegated = run.foldResult.authored.filter((a) => a.owner === "subagent").length;
+    if (cov.dispatched > 0 || cov.subagentFiles > 0 || cov.subagentSkipped > 0) {
+      out += row("delegated", `${cov.dispatched} dispatched \xB7 ${cov.subagentFiles} agent log(s) read \xB7 ${delegated} path(s) attributed to subagents`);
+    }
+    if (cov.subagentSkipped > 0) {
+      out += row("", `\u26A0 ${cov.subagentSkipped} agent log(s) REFUSED by the byte budget \u2014 the authored set above is PARTIAL`);
+    }
+    if (cov.dispatched > 0 && cov.subagentFiles === 0) {
+      out += row("", `\u26A0 this turn dispatched ${cov.dispatched} agent(s) but no agent log was found \u2014 delegated work is unattributed (has the transcript layout moved?)`);
+    }
+    if (cov.outsideRepo > 0) {
+      out += row("", `${cov.outsideRepo} authored path(s) refused as outside the repo`);
+    }
+  }
+  if (run.foldResult?.tools?.length) {
+    const shown = run.foldResult.tools.slice(0, 6).map((t) => {
+      const outcome = t.failed > 0 ? `${t.failed} failed` : t.last_status === 0 ? "ok" : "?";
+      const where = t.targets.length > 0 ? ` \u2192 ${t.targets.slice(0, 2).join(", ")}` : "";
+      return `${t.runs}\xD7 ${t.name} (${outcome})${where}`;
+    });
+    const more = run.foldResult.tools.length > 6 ? ` \u2026 +${run.foldResult.tools.length - 6} more` : "";
+    out += row("tools", shown.join(" \xB7 ") + more);
+    if (run.foldResult.coverage.toolNamesDropped > 0) {
+      out += row("", `\u26A0 ${run.foldResult.coverage.toolNamesDropped} tool name(s) refused by the cap`);
+    }
+  }
+  if (run.foldResult?.tasks?.length) {
+    const t = run.foldResult.tasks;
+    const done2 = t.filter((x) => x.status === "completed").length;
+    out += row("tasks", `${t.length} \xB7 ${done2} completed \xB7 ` + list(t.slice(0, 4).map((x) => `#${x.id} ${x.name} [${x.status}]`), 4));
+  }
+  if (run.specs?.length) {
+    const readThisSession = new Set(run.actionSummary?.files_read ?? []);
+    const labelled = run.specs.map(
+      (s) => `${s.path}${readThisSession.has(s.path) ? " (read)" : " (positional)"}`
+    );
+    out += row("specs", `${run.specs.length} \xB7 ${list(labelled, 5)}`);
+  }
   if (run.staticResults.findings.length > 0) {
     out += row("static", `${run.staticResults.findings.length} finding(s) from ${run.staticResults.summary.tools_run.join(", ") || "no tools"}`);
   }
@@ -16930,6 +16984,8 @@ function buildSummary(lines) {
           break;
         case "Agent":
         case "Task":
+        case "Workflow":
+        case "SendMessage":
           subagents++;
           break;
         case "WebFetch":
@@ -17184,7 +17240,7 @@ function channelSilence(input) {
 // src/lib/cli-version.ts
 function cliVersion() {
   try {
-    return true ? "0.29.4-experimental.9a4e14c" : "dev";
+    return true ? "0.29.4-experimental.f2e812c" : "dev";
   } catch {
     return "dev";
   }
@@ -17535,18 +17591,26 @@ var SPEC_CANDIDATES = [
   "docs/API.md",
   "spec/ARCHITECTURE.md"
 ];
-function discoverSpecs() {
+var DOC_EXT = /\.(md|mdx|ya?ml|txt|rst|adoc)$/i;
+var UNCONSULTED_FILE_BYTES = 10240;
+var UNCONSULTED_TOTAL_BYTES = 30720;
+function discoverSpecs(consulted = []) {
   const result = [];
   const seen = /* @__PURE__ */ new Set();
   let totalBytes = 0;
-  const addSpec = (specPath) => {
+  const consultedDocs = new Set(
+    consulted.filter((p) => DOC_EXT.test(p) && !p.startsWith("/") && !p.includes(".."))
+  );
+  const addSpec = (specPath, relevant = false) => {
     if (result.length >= MAX_SPEC_FILES) return false;
-    if (totalBytes >= MAX_TOTAL_SPEC_BYTES) return false;
+    const totalCap = relevant ? MAX_TOTAL_SPEC_BYTES : UNCONSULTED_TOTAL_BYTES;
+    if (totalBytes >= totalCap) return false;
     if (seen.has(specPath)) return true;
     if (!(0, import_node_fs21.existsSync)(specPath)) return true;
     seen.add(specPath);
-    const remaining = MAX_TOTAL_SPEC_BYTES - totalBytes;
-    const readBytes = Math.min(MAX_SPEC_FILE_BYTES, remaining);
+    const remaining = totalCap - totalBytes;
+    const fileCap = relevant ? MAX_SPEC_FILE_BYTES : UNCONSULTED_FILE_BYTES;
+    const readBytes = Math.min(fileCap, remaining);
     try {
       const buf = Buffer.alloc(readBytes);
       const fd = (0, import_node_fs21.openSync)(specPath, "r");
@@ -17560,6 +17624,9 @@ function discoverSpecs() {
     }
     return true;
   };
+  for (const doc of consultedDocs) {
+    if (!addSpec(doc, true)) break;
+  }
   for (const candidate of SPEC_CANDIDATES) {
     if (!addSpec(candidate)) break;
   }
@@ -17630,7 +17697,7 @@ function discoverPlans() {
 async function intentInputs(run) {
   const { actionSummary, allForReview, assistantResponse, baseline, baselineSessionId } = run;
   const conversation = await readAndClearConversationBuffer(baselineSessionId);
-  const specs = discoverSpecs();
+  const specs = discoverSpecs(actionSummary?.files_read ?? []);
   const plans = discoverPlans();
   const agentAuthoredCodeThisTurn = !!(actionSummary && (actionSummary.files_edited.length > 0 || actionSummary.files_created.length > 0));
   const turnAuthoredCode = agentAuthoredCodeThisTurn || !!baseline && allForReview.some((f) => changedSinceBaseline(f, baseline));
@@ -17853,7 +17920,8 @@ async function mode(run) {
   let analysisMode;
   const sessionAuthoredCode = !!baseline && allForReview.some((f) => changedSinceBaseline(f, baseline));
   const modeOverride = opts.mode;
-  if (modeOverride && ["standard", "plan", "debug", "skip"].includes(modeOverride)) {
+  const forced = !!modeOverride && ["standard", "plan", "debug", "skip"].includes(modeOverride);
+  if (forced) {
     analysisMode = modeOverride;
   } else {
     analysisMode = reconcileAnalysisMode(
@@ -17861,6 +17929,25 @@ async function mode(run) {
       { noFilesChanged, assistantResponse, actionSummary, conversationPrompts, sessionAuthoredCode }
     );
   }
+  const investigated = didAgentInvestigate(actionSummary);
+  run.modeDecision = {
+    predicted: predictedMode ?? null,
+    resolved: analysisMode,
+    authored: turnAuthoredCode,
+    investigated,
+    forced
+  };
+  logEvent("mode_resolved", {
+    predicted: predictedMode ?? null,
+    resolved: analysisMode,
+    forced,
+    authored: turnAuthoredCode,
+    investigated,
+    // The two counters that decide `investigated`, so a false reading is
+    // traceable to the tool that was not recognised.
+    subagents: actionSummary?.subagents ?? null,
+    files_read: actionSummary?.files_read.length ?? null
+  });
   if (analysisMode === "skip") {
     await passAndExit(
       run,
@@ -18126,6 +18213,18 @@ function commandShape(cmd) {
   return out.join(" ").slice(0, COMMAND_HEAD_CHARS);
 }
 var COMMAND_HEAD_CHARS = 80;
+var MAX_TOOL_NAMES = 64;
+var MAX_TOOL_TARGETS = 3;
+var MAX_TASKS = 64;
+var TASK_NAME_CHARS = 120;
+function toolTarget(name, input) {
+  if (name === "Bash") return null;
+  for (const key of ["file_path", "notebook_path", "path", "filePath"]) {
+    const v = input[key];
+    if (typeof v === "string" && v) return v.slice(0, 120);
+  }
+  return null;
+}
 var rootCandidateCache = /* @__PURE__ */ new Map();
 function candidateRoots(repoRoot2) {
   const cached2 = rootCandidateCache.get(repoRoot2);
@@ -18154,17 +18253,30 @@ function toRepoRelative(path, repoRoot2) {
   }
   return p.replace(/^\/+/, "");
 }
+function isInsideRepo(path, repoRoot2) {
+  const p = path.replace(/\\/g, "/");
+  if (!isAbsolutePath(p)) return true;
+  if (!repoRoot2) return true;
+  return candidateRoots(repoRoot2).some((root) => p === root || p.startsWith(root + "/"));
+}
+function isAbsolutePath(p) {
+  return p.startsWith("/") || /^[A-Za-z]:\//.test(p);
+}
 function fold(transcriptPath, opts = {}) {
   const result = {
     authored: [],
     unobserved: [],
     commands: [],
+    tools: [],
+    tasks: [],
     unknownTypes: [],
     coverage: {
       recordCounts: {},
       totalRecords: 0,
       malformed: 0,
       subagentFiles: 0,
+      outsideRepo: 0,
+      toolNamesDropped: 0,
       dispatched: 0,
       userMessages: 0,
       subagentSkipped: 0,
@@ -18175,6 +18287,10 @@ function fold(transcriptPath, opts = {}) {
   const byPath = /* @__PURE__ */ new Map();
   const commandStats = /* @__PURE__ */ new Map();
   const pendingByToolUse = /* @__PURE__ */ new Map();
+  const toolStats = /* @__PURE__ */ new Map();
+  const pendingToolName = /* @__PURE__ */ new Map();
+  const taskById = /* @__PURE__ */ new Map();
+  const pendingTaskName = /* @__PURE__ */ new Map();
   const unknown = /* @__PURE__ */ new Set();
   const ingest = (raw, owner) => {
     for (const line of raw.split("\n")) {
@@ -18194,7 +18310,7 @@ function fold(transcriptPath, opts = {}) {
         result.coverage.compactions++;
       }
       if (type === "user" && hasUserText(record)) result.coverage.userMessages++;
-      collectFromRecord(record, owner, byPath, commandStats, pendingByToolUse, opts.repoRoot, result.coverage);
+      collectFromRecord(record, owner, byPath, commandStats, pendingByToolUse, toolStats, pendingToolName, taskById, pendingTaskName, opts.repoRoot, result.coverage);
     }
   };
   try {
@@ -18205,7 +18321,11 @@ function fold(transcriptPath, opts = {}) {
     return result;
   }
   try {
-    const sidecarDir = (0, import_node_path18.join)((0, import_node_path18.dirname)(transcriptPath), "subagents");
+    const sidecarDir = (0, import_node_path18.join)(
+      (0, import_node_path18.dirname)(transcriptPath),
+      (0, import_node_path18.basename)(transcriptPath).replace(/\.jsonl$/, ""),
+      "subagents"
+    );
     if ((0, import_node_fs23.existsSync)(sidecarDir)) {
       const maxFiles = opts.maxSidecars ?? 200;
       const maxBytes = opts.maxSidecarBytes ?? 16 * 1024 * 1024;
@@ -18248,6 +18368,14 @@ function fold(transcriptPath, opts = {}) {
   result.authored = [...byPath.values()].sort((a, b) => a.p.localeCompare(b.p));
   result.unknownTypes = [...unknown].sort();
   result.commands = [...commandStats.entries()].map(([cls, s]) => ({ class: cls, ...s })).sort((a, b) => a.class.localeCompare(b.class));
+  result.tools = [...toolStats.entries()].map(([name, s]) => ({
+    name,
+    runs: s.runs,
+    failed: s.failed,
+    last_status: s.last_status,
+    targets: [...s.targets].map((t) => toRepoRelative(t, opts.repoRoot)).sort()
+  })).sort((a, b) => b.runs - a.runs || a.name.localeCompare(b.name));
+  result.tasks = [...taskById.entries()].map(([id, t]) => ({ id, name: t.name, status: t.status })).sort((a, b) => (Number(a.id) || 0) - (Number(b.id) || 0));
   const authoredPaths = new Set(result.authored.map((a) => a.p));
   for (const raw of opts.changedFiles ?? []) {
     const p = toRepoRelative(raw, opts.repoRoot);
@@ -18266,7 +18394,7 @@ function classifyUnobserved(path) {
   if (/\.(png|jpg|jpeg|gif|pdf|zip|woff2?|ico|mp4)$/i.test(path)) return "binary";
   return "no_edit_record";
 }
-function collectFromRecord(record, owner, byPath, commandStats, pendingByToolUse, repoRoot2, tally) {
+function collectFromRecord(record, owner, byPath, commandStats, pendingByToolUse, toolStats, pendingToolName, taskById, pendingTaskName, repoRoot2, tally) {
   const message = record.message;
   const content = message?.content ?? record.content;
   const blocks = Array.isArray(content) ? content : content && typeof content === "object" ? [content] : [];
@@ -18275,8 +18403,38 @@ function collectFromRecord(record, owner, byPath, commandStats, pendingByToolUse
     if (blockType === "tool_use") {
       const name = String(block.name ?? "");
       const input = block.input ?? {};
+      if (name && toolStats.size < MAX_TOOL_NAMES) {
+        const prev = toolStats.get(name) ?? { runs: 0, failed: 0, last_status: null, targets: /* @__PURE__ */ new Set() };
+        prev.targets = prev.targets ?? /* @__PURE__ */ new Set();
+        if (prev.targets.size < MAX_TOOL_TARGETS) {
+          const target = toolTarget(name, input);
+          if (target) prev.targets.add(target);
+        }
+        toolStats.set(name, { runs: prev.runs + 1, failed: prev.failed, last_status: null, targets: prev.targets });
+        const toolId = typeof block.id === "string" ? block.id : null;
+        if (toolId) pendingToolName.set(toolId, name);
+      } else if (name && tally) {
+        tally.toolNamesDropped += 1;
+      }
+      if (name === "TaskCreate") {
+        const subject = typeof input.subject === "string" ? input.subject : "";
+        const taskId = typeof block.id === "string" ? block.id : null;
+        if (subject && taskId) pendingTaskName.set(taskId, subject.slice(0, TASK_NAME_CHARS));
+      }
+      if (name === "TaskUpdate") {
+        const id = typeof input.taskId === "string" ? input.taskId : "";
+        const status = typeof input.status === "string" ? input.status : "";
+        if (id && status) {
+          const entry = taskById.get(id);
+          taskById.set(id, { name: entry?.name ?? `#${id}`, status });
+        }
+      }
       if (EDIT_TOOLS.has(name)) {
         const rawPath = typeof input.notebook_path === "string" ? input.notebook_path : typeof input.file_path === "string" ? input.file_path : null;
+        if (rawPath && !isInsideRepo(rawPath, repoRoot2)) {
+          if (tally) tally.outsideRepo += 1;
+          continue;
+        }
         const path = rawPath ? toRepoRelative(rawPath, repoRoot2) : null;
         if (path) {
           const entry = byPath.get(path) ?? { p: path, h: 0, a: 0, d: 0, owner };
@@ -18310,6 +18468,31 @@ function collectFromRecord(record, owner, byPath, commandStats, pendingByToolUse
     }
     if (blockType === "tool_result") {
       const id = typeof block.tool_use_id === "string" ? block.tool_use_id : null;
+      const taskName = id ? pendingTaskName.get(id) : void 0;
+      if (taskName) {
+        pendingTaskName.delete(id);
+        const body = typeof block.content === "string" ? block.content : "";
+        const created = /Task #(\d+)/.exec(body);
+        if (created && taskById.size < MAX_TASKS) {
+          taskById.set(created[1], { name: taskName, status: taskById.get(created[1])?.status ?? "created" });
+        }
+      }
+      const toolName = id ? pendingToolName.get(id) : void 0;
+      if (toolName) {
+        pendingToolName.delete(id);
+        const prevTool = toolStats.get(toolName);
+        if (prevTool) {
+          const failed = block.is_error === true;
+          toolStats.set(toolName, {
+            runs: prevTool.runs,
+            failed: prevTool.failed + (failed ? 1 : 0),
+            last_status: block.is_error === true ? 1 : block.is_error === false ? 0 : null,
+            // Carried, not rebuilt: the targets were collected on the `tool_use`
+            // side and dropping them here would empty the ledger on every result.
+            targets: prevTool.targets
+          });
+        }
+      }
       const cls = id ? pendingByToolUse.get(id) : void 0;
       if (!cls) continue;
       pendingByToolUse.delete(id);
@@ -18529,6 +18712,10 @@ function gatherContextFiles(contextPaths, deltaFiles) {
   for (const filePath of contextPaths) {
     if (result.length >= MAX_CONTEXT_FILES) break;
     if (deltaPaths.has(filePath)) continue;
+    if (isVerityOwnedPath(filePath)) {
+      logEvent("context_file_skipped", { path: filePath, reason: "verity_owned" });
+      continue;
+    }
     try {
       const content = (0, import_node_fs25.readFileSync)(filePath, "utf8");
       const bytes = Buffer.byteLength(content);
@@ -19299,6 +19486,8 @@ async function buildRequest(run) {
         authored_since_verdict: memorySession ? foldDossier(memorySession.d).authored_all.filter((a) => a.hash_now !== a.hash_at_last_verdict).map((a) => a.path) : [],
         unobserved: foldResult?.unobserved ?? [],
         commands: foldResult?.commands ?? [],
+        tools: foldResult?.tools ?? [],
+        tasks: foldResult?.tasks ?? [],
         unknown_types: foldResult?.unknownTypes ?? [],
         coverage: foldResult?.coverage ?? { recordCounts: {}, totalRecords: 0, malformed: 0, subagentFiles: 0, subagentSkipped: 0, complete: false },
         // INV-19, computed client-side and sent so a conservation failure is
@@ -20123,10 +20312,12 @@ async function runAnalyze(opts, globals) {
     run.phaseReached = name;
     if (!tracing()) {
       await phase(run);
+      run.phasesCompleted.push(name);
       continue;
     }
     const started = Date.now();
     await phase(run);
+    run.phasesCompleted.push(name);
     process.stderr.write(`verity\xB7phase ${name} ${Date.now() - started}ms
 `);
   }
@@ -21923,8 +22114,8 @@ function registerTelemetryCommands(program2) {
 }
 
 // src/cli.ts
-program.name("verity").description("CLI for Verity quality gate service").version("0.29.4-experimental.9a4e14c").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async (_thisCommand, actionCommand) => {
-  installStderrLog(actionCommand.name(), process.argv.slice(2), "0.29.4-experimental.9a4e14c");
+program.name("verity").description("CLI for Verity quality gate service").version("0.29.4-experimental.f2e812c").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async (_thisCommand, actionCommand) => {
+  installStderrLog(actionCommand.name(), process.argv.slice(2), "0.29.4-experimental.f2e812c");
   setUserNamedServiceUrl(program.opts().serviceUrl);
   try {
     await foldLegacyLocalCredential();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codacy/verity-cli",
-  "version": "0.29.4-experimental.9a4e14c",
+  "version": "0.29.4-experimental.f2e812c",
   "description": "CLI for Verity quality gate service",
   "license": "SEE LICENSE IN LICENSE",
   "homepage": "https://verity.md",