@codeledger/cli 0.6.2 → 0.6.4

package/dist/review-intelligence/detectors/runtime-validation.js

@@ -0,0 +1,109 @@
+import { detectTriggers, isTypedRouteTrigger } from '../triggers.js';
+/**
+ * INVARIANT 1 — runtime_validation
+ *
+ * Trigger: typed route body/params/query (e.g. server.post<{ Body: ... }>(...))
+ * Invariant: runtime validation must exist (zod, ajv, Fastify schema)
+ * Severity: P1 (missing runtime validation)
+ */
+export const runtimeValidationDetector = {
+    name: 'runtime_validation',
+    analyze(ctx) {
+        const findings = [];
+        for (const filePath of ctx.files) {
+            const content = ctx.fileContents.get(filePath);
+            if (!content)
+                continue;
+            // Only analyze TypeScript/JavaScript files
+            if (!isAnalyzableFile(filePath))
+                continue;
+            const triggers = detectTriggers(filePath, content);
+            const typedRouteTriggers = triggers.filter(isTypedRouteTrigger);
+            if (typedRouteTriggers.length === 0)
+                continue;
+            // Check if file has runtime validation evidence
+            const hasValidation = checkRuntimeValidation(content, ctx);
+            if (!hasValidation.found) {
+                // Group triggers by proximity to avoid duplicate findings
+                const grouped = groupTriggersByProximity(typedRouteTriggers);
+                for (const group of grouped) {
+                    const firstTrigger = group[0];
+                    const triggerTypes = [...new Set(group.map((t) => t.type))];
+                    const triggerLabel = triggerTypes
+                        .map(formatTriggerType)
+                        .join(', ');
+                    const finding = {
+                        rule_id: 'RI-RV-001',
+                        title: 'Typed route without runtime validation',
+                        severity: 'P1',
+                        category: 'runtime_validation',
+                        file: filePath,
+                        line: firstTrigger.line,
+                        trigger: triggerLabel,
+                        missing_companions: ['Runtime validation (zod, ajv, or Fastify schema)'],
+                        why_it_matters: 'TypeScript generics on route definitions (Body, Params, Querystring) provide compile-time safety only. ' +
+                            'Without runtime validation, malformed input from clients will bypass type checks and may cause unexpected behavior or security issues.',
+                        confidence: 'high',
+                    };
+                    // Attach repo standard if a validation helper was discovered
+                    const validationStandard = ctx.repoStandards.find((s) => s.helper_name.includes('validate') ||
+                        s.helper_name.includes('schema') ||
+                        s.helper_name.includes('parse'));
+                    if (validationStandard) {
+                        finding.repo_standard = validationStandard;
+                    }
+                    findings.push(finding);
+                }
+            }
+        }
+        return findings;
+    },
+};
+function checkRuntimeValidation(content, _ctx) {
+    // Zod: .parse(), .safeParse(), z.object(), z.string(), etc.
+    if (/\bz\.(?:object|string|number|array|enum|union|literal|boolean)\s*\(/.test(content) && /\.(?:parse|safeParse)\s*\(/.test(content)) {
+        return { found: true, type: 'zod' };
+    }
+    // AJV: ajv.compile(), ajv.validate(), validate()
+    if (/\bajv\b/i.test(content) && /\.(?:compile|validate)\s*\(/.test(content)) {
+        return { found: true, type: 'ajv' };
+    }
+    // Fastify schema: schema: { body: ..., params: ..., querystring: ... }
+    if (/schema\s*:\s*\{/.test(content) && /(?:body|params|querystring)\s*:/.test(content)) {
+        return { found: true, type: 'fastify_schema' };
+    }
+    // Generic validation patterns: joi, yup, superstruct, valibot
+    if (/\b(?:joi|yup|superstruct|valibot)\b/i.test(content) && /\.(?:validate|parse|assert)\s*\(/.test(content)) {
+        return { found: true, type: 'generic_validator' };
+    }
+    return { found: false };
+}
+function isAnalyzableFile(filePath) {
+    return /\.(?:ts|tsx|js|jsx|mts|mjs)$/.test(filePath);
+}
+function formatTriggerType(type) {
+    return type.replace(/_/g, ' ');
+}
+/**
+ * Group triggers that are within 10 lines of each other
+ * to avoid duplicate findings for the same route handler.
+ */
+function groupTriggersByProximity(triggers) {
+    if (triggers.length === 0)
+        return [];
+    const sorted = [...triggers].sort((a, b) => a.line - b.line);
+    const groups = [[sorted[0]]];
+    for (let i = 1; i < sorted.length; i++) {
+        const current = sorted[i];
+        const lastGroup = groups[groups.length - 1];
+        const lastInGroup = lastGroup[lastGroup.length - 1];
+        if (current.line - lastInGroup.line <= 10) {
+            lastGroup.push(current);
+        }
+        else {
+            groups.push([current]);
+        }
+    }
+    return groups;
+}
+//# sourceMappingURL=runtime-validation.js.map

package/dist/review-intelligence/detectors/runtime-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-validation.js","sourceRoot":"","sources":["../../../src/review-intelligence/detectors/runtime-validation.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAErE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAsB;IAC1D,IAAI,EAAE,oBAAoB;IAE1B,OAAO,CAAC,GAAoB;QAC1B,MAAM,QAAQ,GAAoB,EAAE,CAAC;QAErC,KAAK,MAAM,QAAQ,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC/C,IAAI,CAAC,OAAO;gBAAE,SAAS;YAEvB,2CAA2C;YAC3C,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAE1C,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,kBAAkB,GAAG,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;YAEhE,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAE9C,gDAAgD;YAChD,MAAM,aAAa,GAAG,sBAAsB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAE3D,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;gBACzB,0DAA0D;gBAC1D,MAAM,OAAO,GAAG,wBAAwB,CAAC,kBAAkB,CAAC,CAAC;gBAE7D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;oBAC5B,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;oBAC/B,MAAM,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAC5D,MAAM,YAAY,GAAG,YAAY;yBAC9B,GAAG,CAAC,iBAAiB,CAAC;yBACtB,IAAI,CAAC,IAAI,CAAC,CAAC;oBAEd,MAAM,OAAO,GAAkB;wBAC7B,OAAO,EAAE,WAAW;wBACpB,KAAK,EAAE,wCAAwC;wBAC/C,QAAQ,EAAE,IAAI;wBACd,QAAQ,EAAE,oBAAoB;wBAC9B,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,YAAY,CAAC,IAAI;wBACvB,OAAO,EAAE,YAAY;wBACrB,kBAAkB,EAAE,CAAC,kDAAkD,CAAC;wBACxE,cAAc,EACZ,yGAAyG;4BACzG,wIAAwI;wBAC1I,UAAU,EAAE,MAAM;qBACnB,CAAC;oBAEF,6DAA6D;oBAC7D,MAAM,kBAAkB,GAAG,GAAG,CAAC,aAAa,CAAC,IAAI,CAC/C,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC;wBAClC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC;wBAChC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAClC,CAAC;oBACF,IAAI,kBAAkB,EAAE,CAAC;wBACvB,OAAO,CAAC,aAAa,GAAG,kBAAkB,CAAC;oBAC7C,CAAC;oBAED,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC;AAOF,SAAS,sBAAsB,CAC7B,OAAe,EACf,IAAqB;IAErB,4DAA4D;IAC5D,IAAI,qEAAqE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACtI,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACtC,CAAC;IAED,iDAAiD;IACjD,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5E,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACtC,CAAC;IAED,uEAAuE;IACvE,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,iCAAiC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACvF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;IACjD,CAAC;IAED,8DAA8D;IAC9D,IAAI,sCAAsC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7G,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;IACpD,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,OAAO,8BAA8B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,SAAS,wBAAwB,CAC/B,QAAmF;IAEnF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAErC,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAqC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;IAEhE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;QAC7C,MAAM,WAAW,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;QAErD,IAAI,OAAO,CAAC,IAAI,GAAG,WAAW,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;YAC1C,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/review-intelligence/index.d.ts

@@ -0,0 +1,17 @@
+import type { ReviewIntelligenceResult, ReviewIntelligenceOptions, ReviewIntelligencePolicy } from './types.js';
+export type { ReviewIntelligenceResult, ReviewIntelligenceOptions, ReviewIntelligencePolicy, ReviewFinding, } from './types.js';
+export { getAvailableInvariantNames } from './invariants.js';
+export { formatHumanOutput, formatJsonOutput, formatDebugOutput, formatVerifySummaryLine } from './output.js';
+/** Default policy when no review_intelligence config is present */
+export declare const DEFAULT_REVIEW_INTELLIGENCE_POLICY: ReviewIntelligencePolicy;
+/**
+ * Run the Review Intelligence engine.
+ *
+ * Pipeline:
+ *   1. Load file contents for changed/relevant files
+ *   2. Discover repo standards (helpers, wrappers)
+ *   3. Run enabled invariant detectors
+ *   4. Sort and summarize findings
+ */
+export declare function runReviewIntelligence(options: ReviewIntelligenceOptions): ReviewIntelligenceResult;
+//# sourceMappingURL=index.d.ts.map

package/dist/review-intelligence/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/review-intelligence/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,wBAAwB,EACxB,yBAAyB,EACzB,wBAAwB,EAGzB,MAAM,YAAY,CAAC;AAMpB,YAAY,EACV,wBAAwB,EACxB,yBAAyB,EACzB,wBAAwB,EACxB,aAAa,GACd,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAE9G,mEAAmE;AACnE,eAAO,MAAM,kCAAkC,EAAE,wBAQhD,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,yBAAyB,GACjC,wBAAwB,CAyE1B"}

package/dist/review-intelligence/index.js

@@ -0,0 +1,90 @@
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { getEnabledDetectors, getAvailableInvariantNames } from './invariants.js';
+import { discoverRepoStandards } from './standards-discovery.js';
+import { sortFindings, determineStatus } from './severity.js';
+import { detectTriggers } from './triggers.js';
+export { getAvailableInvariantNames } from './invariants.js';
+export { formatHumanOutput, formatJsonOutput, formatDebugOutput, formatVerifySummaryLine } from './output.js';
+/** Default policy when no review_intelligence config is present */
+export const DEFAULT_REVIEW_INTELLIGENCE_POLICY = {
+    enabled: true,
+    severity_threshold: 'P1',
+    invariants: {
+        runtime_validation: { enabled: true },
+        outbound_io: { enabled: true },
+        platform_helpers: { enabled: true },
+    },
+};
+/**
+ * Run the Review Intelligence engine.
+ *
+ * Pipeline:
+ *   1. Load file contents for changed/relevant files
+ *   2. Discover repo standards (helpers, wrappers)
+ *   3. Run enabled invariant detectors
+ *   4. Sort and summarize findings
+ */
+export function runReviewIntelligence(options) {
+    const startTime = Date.now();
+    // Validate invariant filter
+    if (options.invariant) {
+        const available = getAvailableInvariantNames();
+        if (!available.includes(options.invariant)) {
+            throw new Error(`Unknown invariant "${options.invariant}". Available: ${available.join(', ')}`);
+        }
+    }
+    // Load file contents
+    const fileContents = new Map();
+    for (const filePath of options.files) {
+        const fullPath = join(options.cwd, filePath);
+        try {
+            fileContents.set(filePath, readFileSync(fullPath, 'utf-8'));
+        }
+        catch {
+            // Skip files that can't be read (deleted, binary, etc.)
+        }
+    }
+    // Discover repo standards
+    const repoStandards = discoverRepoStandards(options.cwd, options.files);
+    // Build detector context
+    const ctx = {
+        cwd: options.cwd,
+        files: options.files,
+        fileContents,
+        repoStandards,
+        explain: options.explain,
+    };
+    // Run enabled detectors
+    const detectors = getEnabledDetectors(options.policy, options.invariant);
+    const allFindings = [];
+    for (const detector of detectors) {
+        const findings = detector.analyze(ctx);
+        allFindings.push(...findings);
+    }
+    // Sort findings by severity, then file
+    const sortedFindings = sortFindings(allFindings);
+    // Count triggers (for debug output)
+    let triggerCount = 0;
+    for (const [, content] of fileContents) {
+        triggerCount += detectTriggers('', content).length;
+    }
+    // Build summary
+    const summary = {
+        p0: sortedFindings.filter((f) => f.severity === 'P0').length,
+        p1: sortedFindings.filter((f) => f.severity === 'P1').length,
+        p2: sortedFindings.filter((f) => f.severity === 'P2').length,
+        p3: sortedFindings.filter((f) => f.severity === 'P3').length,
+        total: sortedFindings.length,
+    };
+    const status = determineStatus(sortedFindings, options.policy.severity_threshold);
+    const duration = Date.now() - startTime;
+    return {
+        findings: sortedFindings,
+        repo_standards: repoStandards,
+        summary,
+        status,
+        duration_ms: duration,
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/review-intelligence/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/review-intelligence/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAQjC,OAAO,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAClF,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAS/C,OAAO,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAE9G,mEAAmE;AACnE,MAAM,CAAC,MAAM,kCAAkC,GAA6B;IAC1E,OAAO,EAAE,IAAI;IACb,kBAAkB,EAAE,IAAI;IACxB,UAAU,EAAE;QACV,kBAAkB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;QACrC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;QAC9B,gBAAgB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;KACpC;CACF,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAkC;IAElC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,4BAA4B;IAC5B,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,MAAM,SAAS,GAAG,0BAA0B,EAAE,CAAC;QAC/C,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,sBAAsB,OAAO,CAAC,SAAS,iBAAiB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC/E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,qBAAqB;IACrB,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC/C,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC;YACH,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,wDAAwD;QAC1D,CAAC;IACH,CAAC;IAED,0BAA0B;IAC1B,MAAM,aAAa,GAAG,qBAAqB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAExE,yBAAyB;IACzB,MAAM,GAAG,GAAoB;QAC3B,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,YAAY;QACZ,aAAa;QACb,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC;IAEF,wBAAwB;IACxB,MAAM,SAAS,GAAG,mBAAmB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACzE,MAAM,WAAW,GAAoB,EAAE,CAAC;IAExC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACvC,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED,uCAAuC;IACvC,MAAM,cAAc,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IAEjD,oCAAoC;IACpC,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,KAAK,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,YAAY,EAAE,CAAC;QACvC,YAAY,IAAI,cAAc,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC;IACrD,CAAC;IAED,gBAAgB;IAChB,MAAM,OAAO,GAAG;QACd,EAAE,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,MAAM;QAC5D,EAAE,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,MAAM;QAC5D,EAAE,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,MAAM;QAC5D,EAAE,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,MAAM;QAC5D,KAAK,EAAE,cAAc,CAAC,MAAM;KAC7B,CAAC;IAEF,MAAM,MAAM,GAAG,eAAe,CAAC,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAClF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAExC,OAAO;QACL,QAAQ,EAAE,cAAc;QACxB,cAAc,EAAE,aAAa;QAC7B,OAAO;QACP,MAAM;QACN,WAAW,EAAE,QAAQ;KACtB,CAAC;AACJ,CAAC"}

package/dist/review-intelligence/invariants.d.ts

@@ -0,0 +1,10 @@
+import type { InvariantDetector, ReviewIntelligencePolicy } from './types.js';
+/**
+ * Get enabled detectors based on policy configuration and optional filter.
+ */
+export declare function getEnabledDetectors(policy: ReviewIntelligencePolicy, invariantFilter?: string): InvariantDetector[];
+/**
+ * Get all available detector names (for --invariant flag validation).
+ */
+export declare function getAvailableInvariantNames(): string[];
+//# sourceMappingURL=invariants.d.ts.map

package/dist/review-intelligence/invariants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invariants.d.ts","sourceRoot":"","sources":["../../src/review-intelligence/invariants.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAY9E;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,wBAAwB,EAChC,eAAe,CAAC,EAAE,MAAM,GACvB,iBAAiB,EAAE,CAWrB;AAED;;GAEG;AACH,wBAAgB,0BAA0B,IAAI,MAAM,EAAE,CAErD"}

package/dist/review-intelligence/invariants.js

@@ -0,0 +1,29 @@
+import { runtimeValidationDetector } from './detectors/runtime-validation.js';
+import { outboundIODetector } from './detectors/outbound-io.js';
+import { platformHelpersDetector } from './detectors/platform-helpers.js';
+/** Registry of all invariant detector modules */
+const ALL_DETECTORS = [
+    runtimeValidationDetector,
+    outboundIODetector,
+    platformHelpersDetector,
+];
+/**
+ * Get enabled detectors based on policy configuration and optional filter.
+ */
+export function getEnabledDetectors(policy, invariantFilter) {
+    let detectors = ALL_DETECTORS.filter((d) => {
+        const config = policy.invariants[d.name];
+        return config?.enabled !== false;
+    });
+    if (invariantFilter) {
+        detectors = detectors.filter((d) => d.name === invariantFilter);
+    }
+    return detectors;
+}
+/**
+ * Get all available detector names (for --invariant flag validation).
+ */
+export function getAvailableInvariantNames() {
+    return ALL_DETECTORS.map((d) => d.name);
+}
+//# sourceMappingURL=invariants.js.map

package/dist/review-intelligence/invariants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invariants.js","sourceRoot":"","sources":["../../src/review-intelligence/invariants.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAE1E,iDAAiD;AACjD,MAAM,aAAa,GAAwB;IACzC,yBAAyB;IACzB,kBAAkB;IAClB,uBAAuB;CACxB,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAAgC,EAChC,eAAwB;IAExB,IAAI,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACzC,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,MAAM,EAAE,OAAO,KAAK,KAAK,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,IAAI,eAAe,EAAE,CAAC;QACpB,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC;IAClE,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC"}

package/dist/review-intelligence/output.d.ts

@@ -0,0 +1,25 @@
+import type { ReviewIntelligenceResult } from './types.js';
+import type { ReviewSeverity } from './types.js';
+/**
+ * Format review intelligence results for human-readable console output.
+ */
+export declare function formatHumanOutput(result: ReviewIntelligenceResult, options: {
+    explain: boolean;
+    severityThreshold: ReviewSeverity;
+}): string;
+/**
+ * Format review intelligence results as JSON for machine consumption.
+ */
+export declare function formatJsonOutput(result: ReviewIntelligenceResult): string;
+/**
+ * Format debug output showing trigger detection internals.
+ */
+export declare function formatDebugOutput(result: ReviewIntelligenceResult, _detectorInfo: {
+    filesAnalyzed: number;
+    triggersFound: number;
+}): string;
+/**
+ * Format a compact summary line for the verify output.
+ */
+export declare function formatVerifySummaryLine(result: ReviewIntelligenceResult): string;
+//# sourceMappingURL=output.d.ts.map

package/dist/review-intelligence/output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../src/review-intelligence/output.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAA+B,MAAM,YAAY,CAAC;AAGxF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,wBAAwB,EAChC,OAAO,EAAE;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,iBAAiB,EAAE,cAAc,CAAA;CAAE,GAC/D,MAAM,CA6DR;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,wBAAwB,GAC/B,MAAM,CAER;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,wBAAwB,EAChC,aAAa,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAC9D,MAAM,CAsBR;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,wBAAwB,GAAG,MAAM,CAYhF"}

package/dist/review-intelligence/output.js

@@ -0,0 +1,116 @@
+import { generateRepairGuidance, formatRepoStandardRecommendations } from './repair-guidance.js';
+import { filterBySeverity } from './severity.js';
+/**
+ * Format review intelligence results for human-readable console output.
+ */
+export function formatHumanOutput(result, options) {
+    const lines = [];
+    const visibleFindings = filterBySeverity(result.findings, options.severityThreshold);
+    // Header section
+    lines.push('');
+    lines.push('Review Intelligence');
+    lines.push('───────────────────');
+    lines.push(`  Status:   ${result.status}`);
+    lines.push(`  Findings: ${result.summary.total} total (P0:${result.summary.p0} P1:${result.summary.p1} P2:${result.summary.p2} P3:${result.summary.p3})`);
+    if (visibleFindings.length === 0) {
+        lines.push('  No findings at current severity threshold.');
+        lines.push('');
+        return lines.join('\n');
+    }
+    // Top Findings
+    lines.push('');
+    lines.push('  Top Findings');
+    lines.push('  ────────────');
+    for (const finding of visibleFindings) {
+        lines.push('');
+        lines.push(`  [${finding.severity}] ${finding.title}`);
+        lines.push(`      File: ${finding.file}:${finding.line}`);
+        lines.push(`      Trigger: ${finding.trigger}`);
+        if (finding.missing_companions.length > 0) {
+            lines.push(`      Missing: ${finding.missing_companions.join('; ')}`);
+        }
+        if (options.explain) {
+            lines.push(`      Why: ${finding.why_it_matters}`);
+            if (finding.repo_standard) {
+                lines.push(`      Repo standard: ${finding.repo_standard.helper_name} (${finding.repo_standard.usage_count} uses)`);
+                if (finding.repo_standard.example_paths.length > 0) {
+                    lines.push(`      Example: ${finding.repo_standard.example_paths[0]}`);
+                }
+            }
+            const guidance = generateRepairGuidance(finding);
+            if (guidance) {
+                lines.push('      Fix:');
+                for (const guidanceLine of guidance.split('\n')) {
+                    lines.push(`        ${guidanceLine}`);
+                }
+            }
+        }
+    }
+    // Repo standard recommendations (if any findings reference them)
+    const referencedStandards = getReferencedStandards(visibleFindings);
+    if (referencedStandards.length > 0 && options.explain) {
+        lines.push('');
+        lines.push('  ' + formatRepoStandardRecommendations(referencedStandards).split('\n').join('\n  '));
+    }
+    lines.push('');
+    return lines.join('\n');
+}
+/**
+ * Format review intelligence results as JSON for machine consumption.
+ */
+export function formatJsonOutput(result) {
+    return JSON.stringify(result, null, 2);
+}
+/**
+ * Format debug output showing trigger detection internals.
+ */
+export function formatDebugOutput(result, _detectorInfo) {
+    const lines = [];
+    lines.push('');
+    lines.push('Review Intelligence — Debug');
+    lines.push('──────────────────────────');
+    lines.push(`  Files analyzed: ${_detectorInfo.filesAnalyzed}`);
+    lines.push(`  Triggers found: ${_detectorInfo.triggersFound}`);
+    lines.push(`  Findings generated: ${result.summary.total}`);
+    lines.push(`  Repo standards discovered: ${result.repo_standards.length}`);
+    lines.push(`  Duration: ${result.duration_ms}ms`);
+    if (result.repo_standards.length > 0) {
+        lines.push('');
+        lines.push('  Discovered Standards:');
+        for (const std of result.repo_standards) {
+            lines.push(`    ${std.helper_name} — ${std.usage_count} uses — ${std.example_paths.join(', ')}`);
+        }
+    }
+    lines.push('');
+    return lines.join('\n');
+}
+/**
+ * Format a compact summary line for the verify output.
+ */
+export function formatVerifySummaryLine(result) {
+    if (result.summary.total === 0) {
+        return 'Review Intelligence: PASS (no architectural findings)';
+    }
+    const parts = [];
+    if (result.summary.p0 > 0)
+        parts.push(`${result.summary.p0} P0`);
+    if (result.summary.p1 > 0)
+        parts.push(`${result.summary.p1} P1`);
+    if (result.summary.p2 > 0)
+        parts.push(`${result.summary.p2} P2`);
+    if (result.summary.p3 > 0)
+        parts.push(`${result.summary.p3} P3`);
+    return `Review Intelligence: ${result.status} (${parts.join(', ')})`;
+}
+function getReferencedStandards(findings) {
+    const seen = new Set();
+    const standards = [];
+    for (const finding of findings) {
+        if (finding.repo_standard && !seen.has(finding.repo_standard.helper_name)) {
+            seen.add(finding.repo_standard.helper_name);
+            standards.push(finding.repo_standard);
+        }
+    }
+    return standards;
+}
+//# sourceMappingURL=output.js.map

package/dist/review-intelligence/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../../src/review-intelligence/output.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,iCAAiC,EAAE,MAAM,sBAAsB,CAAC;AACjG,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAGjD;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAgC,EAChC,OAAgE;IAEhE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,eAAe,GAAG,gBAAgB,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAErF,iBAAiB;IACjB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAClC,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAClC,KAAK,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3C,KAAK,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,OAAO,CAAC,KAAK,cAAc,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;IAE1J,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;QAC3D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,eAAe;IACf,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC7B,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAE7B,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACvD,KAAK,CAAC,IAAI,CAAC,eAAe,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1D,KAAK,CAAC,IAAI,CAAC,kBAAkB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAEhD,IAAI,OAAO,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,kBAAkB,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,KAAK,CAAC,IAAI,CAAC,cAAc,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;YAEnD,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;gBAC1B,KAAK,CAAC,IAAI,CAAC,wBAAwB,OAAO,CAAC,aAAa,CAAC,WAAW,KAAK,OAAO,CAAC,aAAa,CAAC,WAAW,QAAQ,CAAC,CAAC;gBACpH,IAAI,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACnD,KAAK,CAAC,IAAI,CAAC,kBAAkB,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACzE,CAAC;YACH,CAAC;YAED,MAAM,QAAQ,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;YACjD,IAAI,QAAQ,EAAE,CAAC;gBACb,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBACzB,KAAK,MAAM,YAAY,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBAChD,KAAK,CAAC,IAAI,CAAC,WAAW,YAAY,EAAE,CAAC,CAAC;gBACxC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,iEAAiE;IACjE,MAAM,mBAAmB,GAAG,sBAAsB,CAAC,eAAe,CAAC,CAAC;IACpE,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACtD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC,mBAAmB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACrG,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAgC;IAEhC,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACzC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAgC,EAChC,aAA+D;IAE/D,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC1C,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IACzC,KAAK,CAAC,IAAI,CAAC,qBAAqB,aAAa,CAAC,aAAa,EAAE,CAAC,CAAC;IAC/D,KAAK,CAAC,IAAI,CAAC,qBAAqB,aAAa,CAAC,aAAa,EAAE,CAAC,CAAC;IAC/D,KAAK,CAAC,IAAI,CAAC,yBAAyB,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5D,KAAK,CAAC,IAAI,CAAC,gCAAgC,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3E,KAAK,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC;IAElD,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACtC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YACxC,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,WAAW,MAAM,GAAG,CAAC,WAAW,WAAW,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnG,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAgC;IACtE,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,uDAAuD,CAAC;IACjE,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IACjE,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IACjE,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IACjE,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IAEjE,OAAO,wBAAwB,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;AACvE,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAyB;IACvD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,SAAS,GAAmB,EAAE,CAAC;IAErC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC;YAC1E,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;YAC5C,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/review-intelligence/repair-guidance.d.ts

@@ -0,0 +1,11 @@
+import type { ReviewFinding, RepoStandard } from './types.js';
+/**
+ * Generate repair guidance for a finding.
+ * Provides actionable recommendations that AI agents can apply.
+ */
+export declare function generateRepairGuidance(finding: ReviewFinding): string;
+/**
+ * Format all repo standards as a recommendation section.
+ */
+export declare function formatRepoStandardRecommendations(standards: RepoStandard[]): string;
+//# sourceMappingURL=repair-guidance.d.ts.map

package/dist/review-intelligence/repair-guidance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repair-guidance.d.ts","sourceRoot":"","sources":["../../src/review-intelligence/repair-guidance.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE9D;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAuErE;AAED;;GAEG;AACH,wBAAgB,iCAAiC,CAC/C,SAAS,EAAE,YAAY,EAAE,GACxB,MAAM,CAgBR"}

package/dist/review-intelligence/repair-guidance.js

@@ -0,0 +1,91 @@
+/**
+ * Generate repair guidance for a finding.
+ * Provides actionable recommendations that AI agents can apply.
+ */
+export function generateRepairGuidance(finding) {
+    const lines = [];
+    switch (finding.rule_id) {
+        case 'RI-RV-001':
+            lines.push('Add runtime validation for route input:');
+            lines.push('');
+            if (finding.repo_standard) {
+                lines.push(`  Recommended: Use ${finding.repo_standard.helper_name}`);
+                if (finding.repo_standard.example_paths.length > 0) {
+                    lines.push(`  Example: See ${finding.repo_standard.example_paths[0]}`);
+                }
+            }
+            else {
+                lines.push('  Option 1: Add Fastify schema validation:');
+                lines.push('    schema: { body: Type.Object({ ... }) }');
+                lines.push('');
+                lines.push('  Option 2: Add zod parsing in the handler:');
+                lines.push('    const parsed = MySchema.safeParse(request.body);');
+                lines.push('    if (!parsed.success) return reply.status(400).send(parsed.error);');
+            }
+            break;
+        case 'RI-OI-001':
+            lines.push('Add a timeout to this outbound call:');
+            lines.push('');
+            if (finding.repo_standard) {
+                lines.push(`  Recommended: Use ${finding.repo_standard.helper_name} instead of raw fetch/axios`);
+                if (finding.repo_standard.example_paths.length > 0) {
+                    lines.push(`  Example: See ${finding.repo_standard.example_paths[0]}`);
+                }
+            }
+            else {
+                lines.push('  Option 1: AbortController with timeout:');
+                lines.push('    const controller = new AbortController();');
+                lines.push('    const timeout = setTimeout(() => controller.abort(), 5000);');
+                lines.push('    try { await fetch(url, { signal: controller.signal }); }');
+                lines.push('    finally { clearTimeout(timeout); }');
+                lines.push('');
+                lines.push('  Option 2: axios timeout:');
+                lines.push('    await axios.get(url, { timeout: 5000 });');
+            }
+            break;
+        case 'RI-OI-002':
+            if (finding.repo_standard) {
+                lines.push(`Replace raw call with ${finding.repo_standard.helper_name}:`);
+                lines.push('');
+                lines.push(`  import { ${finding.repo_standard.helper_name} } from '...';`);
+                if (finding.repo_standard.example_paths.length > 0) {
+                    lines.push(`  Example usage: See ${finding.repo_standard.example_paths[0]}`);
+                }
+            }
+            break;
+        case 'RI-PH-001':
+        case 'RI-PH-002':
+        case 'RI-PH-003':
+            if (finding.repo_standard) {
+                lines.push(`Use ${finding.repo_standard.helper_name} instead:`);
+                lines.push('');
+                lines.push(`  import { ${finding.repo_standard.helper_name} } from '...';`);
+                if (finding.repo_standard.example_paths.length > 0) {
+                    lines.push(`  See: ${finding.repo_standard.example_paths[0]}`);
+                }
+            }
+            break;
+        default:
+            lines.push('Review the finding and apply the recommended fix.');
+    }
+    return lines.join('\n');
+}
+/**
+ * Format all repo standards as a recommendation section.
+ */
+export function formatRepoStandardRecommendations(standards) {
+    if (standards.length === 0)
+        return '';
+    const lines = [];
+    lines.push('Suggested Repo Patterns');
+    lines.push('───────────────────────');
+    for (const standard of standards) {
+        lines.push(`  ${standard.helper_name} (${standard.usage_count} uses)`);
+        lines.push(`    ${standard.recommendation}`);
+        if (standard.example_paths.length > 0) {
+            lines.push(`    Defined in: ${standard.example_paths.join(', ')}`);
+        }
+    }
+    return lines.join('\n');
+}
+//# sourceMappingURL=repair-guidance.js.map

package/dist/review-intelligence/repair-guidance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repair-guidance.js","sourceRoot":"","sources":["../../src/review-intelligence/repair-guidance.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAsB;IAC3D,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,QAAQ,OAAO,CAAC,OAAO,EAAE,CAAC;QACxB,KAAK,WAAW;YACd,KAAK,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;YACtD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;gBAC1B,KAAK,CAAC,IAAI,CAAC,sBAAsB,OAAO,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC;gBACtE,IAAI,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACnD,KAAK,CAAC,IAAI,CAAC,kBAAkB,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACzE,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;gBACzD,KAAK,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;gBACzD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACf,KAAK,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;gBAC1D,KAAK,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;gBACnE,KAAK,CAAC,IAAI,CAAC,uEAAuE,CAAC,CAAC;YACtF,CAAC;YACD,MAAM;QAER,KAAK,WAAW;YACd,KAAK,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;YACnD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;gBAC1B,KAAK,CAAC,IAAI,CAAC,sBAAsB,OAAO,CAAC,aAAa,CAAC,WAAW,6BAA6B,CAAC,CAAC;gBACjG,IAAI,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACnD,KAAK,CAAC,IAAI,CAAC,kBAAkB,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACzE,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;gBACxD,KAAK,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;gBAC5D,KAAK,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;gBAC9E,KAAK,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;gBAC3E,KAAK,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;gBACrD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACf,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;gBACzC,KAAK,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;YAC7D,CAAC;YACD,MAAM;QAER,KAAK,WAAW;YACd,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;gBAC1B,KAAK,CAAC,IAAI,CAAC,yBAAyB,OAAO,CAAC,aAAa,CAAC,WAAW,GAAG,CAAC,CAAC;gBAC1E,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACf,KAAK,CAAC,IAAI,CAAC,cAAc,OAAO,CAAC,aAAa,CAAC,WAAW,gBAAgB,CAAC,CAAC;gBAC5E,IAAI,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACnD,KAAK,CAAC,IAAI,CAAC,wBAAwB,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC/E,CAAC;YACH,CAAC;YACD,MAAM;QAER,KAAK,WAAW,CAAC;QACjB,KAAK,WAAW,CAAC;QACjB,KAAK,WAAW;YACd,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;gBAC1B,KAAK,CAAC,IAAI,CAAC,OAAO,OAAO,CAAC,aAAa,CAAC,WAAW,WAAW,CAAC,CAAC;gBAChE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACf,KAAK,CAAC,IAAI,CAAC,cAAc,OAAO,CAAC,aAAa,CAAC,WAAW,gBAAgB,CAAC,CAAC;gBAC5E,IAAI,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACnD,KAAK,CAAC,IAAI,CAAC,UAAU,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACjE,CAAC;YACH,CAAC;YACD,MAAM;QAER;YACE,KAAK,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;IACpE,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iCAAiC,CAC/C,SAAyB;IAEzB,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEtC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACtC,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAEtC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,QAAQ,CAAC,CAAC;QACvE,KAAK,CAAC,IAAI,CAAC,OAAO,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC;QAC7C,IAAI,QAAQ,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,mBAAmB,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/review-intelligence/severity.d.ts

@@ -0,0 +1,10 @@
+import type { ReviewSeverity, ReviewFinding } from './types.js';
+/** Check if a severity meets or exceeds the threshold */
+export declare function meetsSeverityThreshold(severity: ReviewSeverity, threshold: ReviewSeverity): boolean;
+/** Filter findings by severity threshold */
+export declare function filterBySeverity(findings: ReviewFinding[], threshold: ReviewSeverity): ReviewFinding[];
+/** Sort findings by severity (most severe first), then by file and line */
+export declare function sortFindings(findings: ReviewFinding[]): ReviewFinding[];
+/** Determine overall status from findings */
+export declare function determineStatus(findings: ReviewFinding[], threshold: ReviewSeverity): 'PASS' | 'WARN' | 'FAIL';
+//# sourceMappingURL=severity.d.ts.map

package/dist/review-intelligence/severity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"severity.d.ts","sourceRoot":"","sources":["../../src/review-intelligence/severity.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAUhE,yDAAyD;AACzD,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,cAAc,EACxB,SAAS,EAAE,cAAc,GACxB,OAAO,CAET;AAED,4CAA4C;AAC5C,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,aAAa,EAAE,EACzB,SAAS,EAAE,cAAc,GACxB,aAAa,EAAE,CAEjB;AAED,2EAA2E;AAC3E,wBAAgB,YAAY,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,aAAa,EAAE,CAQvE;AAED,6CAA6C;AAC7C,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,aAAa,EAAE,EACzB,SAAS,EAAE,cAAc,GACxB,MAAM,GAAG,MAAM,GAAG,MAAM,CAQ1B"}

package/dist/review-intelligence/severity.js

@@ -0,0 +1,36 @@
+/** Numeric rank for severity comparison (lower = more severe) */
+const SEVERITY_RANK = {
+    P0: 0,
+    P1: 1,
+    P2: 2,
+    P3: 3,
+};
+/** Check if a severity meets or exceeds the threshold */
+export function meetsSeverityThreshold(severity, threshold) {
+    return SEVERITY_RANK[severity] <= SEVERITY_RANK[threshold];
+}
+/** Filter findings by severity threshold */
+export function filterBySeverity(findings, threshold) {
+    return findings.filter((f) => meetsSeverityThreshold(f.severity, threshold));
+}
+/** Sort findings by severity (most severe first), then by file and line */
+export function sortFindings(findings) {
+    return [...findings].sort((a, b) => {
+        const sevCmp = SEVERITY_RANK[a.severity] - SEVERITY_RANK[b.severity];
+        if (sevCmp !== 0)
+            return sevCmp;
+        const fileCmp = a.file.localeCompare(b.file);
+        if (fileCmp !== 0)
+            return fileCmp;
+        return a.line - b.line;
+    });
+}
+/** Determine overall status from findings */
+export function determineStatus(findings, threshold) {
+    const thresholdFindings = filterBySeverity(findings, threshold);
+    if (thresholdFindings.length === 0)
+        return 'PASS';
+    const hasP0orP1 = thresholdFindings.some((f) => f.severity === 'P0' || f.severity === 'P1');
+    return hasP0orP1 ? 'FAIL' : 'WARN';
+}
+//# sourceMappingURL=severity.js.map

package/dist/review-intelligence/severity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"severity.js","sourceRoot":"","sources":["../../src/review-intelligence/severity.ts"],"names":[],"mappings":"AAEA,iEAAiE;AACjE,MAAM,aAAa,GAAmC;IACpD,EAAE,EAAE,CAAC;IACL,EAAE,EAAE,CAAC;IACL,EAAE,EAAE,CAAC;IACL,EAAE,EAAE,CAAC;CACN,CAAC;AAEF,yDAAyD;AACzD,MAAM,UAAU,sBAAsB,CACpC,QAAwB,EACxB,SAAyB;IAEzB,OAAO,aAAa,CAAC,QAAQ,CAAC,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC;AAC7D,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,gBAAgB,CAC9B,QAAyB,EACzB,SAAyB;IAEzB,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,YAAY,CAAC,QAAyB;IACpD,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACjC,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACrE,IAAI,MAAM,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC;QAChC,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,OAAO,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC;QAClC,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,eAAe,CAC7B,QAAyB,EACzB,SAAyB;IAEzB,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAChE,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAElD,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CACtC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,CAClD,CAAC;IACF,OAAO,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;AACrC,CAAC"}

package/dist/review-intelligence/standards-discovery.d.ts

@@ -0,0 +1,12 @@
+import type { RepoStandard } from './types.js';
+/**
+ * Discover repository-standard helpers, wrappers, and patterns
+ * by analyzing import frequency and repeated usage patterns.
+ *
+ * Uses lightweight heuristics:
+ *   - import frequency analysis
+ *   - repeated wrapper/helper name detection
+ *   - callsite clustering in utility/helper directories
+ */
+export declare function discoverRepoStandards(cwd: string, changedFiles: string[]): RepoStandard[];
+//# sourceMappingURL=standards-discovery.d.ts.map

package/dist/review-intelligence/standards-discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"standards-discovery.d.ts","sourceRoot":"","sources":["../../src/review-intelligence/standards-discovery.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAQ/C;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,EAAE,GACrB,YAAY,EAAE,CAmChB"}