@cruxy/cli 1.11.1 → 1.11.3

package/dist/verification/types.js

@@ -0,0 +1,26 @@
+/**
+ * The verification record (P2 verification): what ran, and how it exited.
+ *
+ * The loop's only completion criterion is "the model emitted no tool calls"
+ * (`agent/loop.ts`). Nothing checks that tests ran, a build passed, or a diff
+ * was reviewed, and the system prompt's instruction to verify is exactly that:
+ * an instruction. This module makes the absence VISIBLE without making the
+ * presence MANDATORY — C.13 shipped voluntary verification and delegated the
+ * iteration to the ordinary loop, and that decision stands. Three reasons it
+ * is not reversed here:
+ *
+ *  - `run_tests`' failing-run breaker latches for the turn after
+ *    `test.maxIterations` runs, so a turn that MUST end green could never end.
+ *  - A project with no test command has no defensible verdict: the coded
+ *    not-found error already tells the model to ask the user, not to guess.
+ *  - Enforcement changes the one-shot exit contract — "completed but
+ *    unverified" would be a new stop kind, and CI reads that exit code today.
+ *
+ * So this is EVIDENCE: a record of each run that actually executed, keyed to
+ * the turn it ran in, read back by the surfaces a user checks afterwards. What
+ * it never does is INFER. `passed` is the exit code and nothing else; nothing
+ * here decides that a command was "a build" or "the tests" from its text. The
+ * record says what ran and how it exited; the reader judges.
+ */
+/** Most failure names kept per record — an index, not a transcript. */
+export const MAX_FAILURE_NAMES = 5;

package/dist/verification/view.js

@@ -0,0 +1,87 @@
+import { formatDuration } from "../render/test-view.js";
+/**
+ * Rendering the verification record — the shared formatter behind every
+ * surface that reads it, so the one-shot summary, `/status`, the resume
+ * notice and the PR body all describe a run the same way.
+ *
+ * The honesty rules are `verification/types`'s, carried through rather than
+ * re-derived: the exit code is the fact, the tool and command are named as
+ * they ran, and nothing here calls a run "the build" or "the tests" from its
+ * text. A non-zero exit is shown as that exit — never as "1 test failed"
+ * unless a parser actually counted one.
+ */
+/** `run_tests pnpm test → exit 0 (4.2s)`, coloured by exit. */
+export function describeRun(rec, t) {
+    const exit = rec.exitCode === null ? "no exit code" : `exit ${rec.exitCode}`;
+    const verdict = rec.passed ? t.muted(exit) : t.danger(exit);
+    const counts = countClause(rec);
+    return (`${t.muted(rec.tool)} ${rec.command} ${t.glyph.arrow} ${verdict}` +
+        (counts ? ` ${t.danger(counts)}` : "") +
+        ` ${t.muted(`(${formatDuration(rec.durationMs)})`)}`);
+}
+/** "3 of 128 failed" / "3 failures" / "" — only what a parser actually counted. */
+function countClause(rec) {
+    if (rec.passed)
+        return "";
+    if (rec.total !== undefined && rec.failureCount > 0)
+        return `${rec.failureCount} of ${rec.total} failed`;
+    if (rec.failureCount > 0)
+        return `${rec.failureCount} failure${rec.failureCount === 1 ? "" : "s"}`;
+    return "";
+}
+/**
+ * The one-shot summary's block (the CI reader). Printed next to the exit code
+ * CI already trusts, for BOTH a completed run and one that gave up, so the
+ * line that says "completed" is never read on its own.
+ *
+ * "none ran this turn" is a sentence, not an omitted row: the whole point of
+ * the record is that the absence of verification is visible.
+ */
+export function verificationTurnLines(turn, t) {
+    const lines = [];
+    const key = t.strong("verification");
+    if (turn.verifications.length === 0) {
+        lines.push(`${key} ${t.warning("none ran this turn")}`);
+    }
+    else {
+        turn.verifications.forEach((rec, i) => {
+            lines.push(`${i === 0 ? key : " ".repeat(12)} ${describeRun(rec, t)}`);
+        });
+    }
+    turn.externalChanges.forEach((change, i) => {
+        lines.push(`${i === 0 ? t.strong("refused") : " ".repeat(7)} ${t.warning(`${change.path} ${change.what} — nothing was written`)}`);
+    });
+    return lines;
+}
+/**
+ * The `## Verification` section for a PR body, from the runs a session
+ * recorded — newest first, with their timestamps, so a run from before the
+ * last edit is dated rather than presented as current. Returns `null` when
+ * nothing ran: a missing section is the honest shape for missing evidence.
+ *
+ * `from` names where the runs were read from when it is NOT the live session
+ * — `cruxy pr` runs outside any session and reads the project's latest log —
+ * so the header never says "this session" about a session that has ended.
+ */
+export function verificationMarkdown(runs, opts = {}) {
+    if (runs.length === 0)
+        return null;
+    const shown = [...runs].reverse().slice(0, opts.limit ?? MARKDOWN_LIMIT);
+    const items = shown.map((rec) => {
+        const exit = rec.exitCode === null ? "no exit code" : `exit ${rec.exitCode}`;
+        const counts = countClause(rec);
+        return (`- \`${rec.command}\` — ${exit}${counts ? ` (${counts})` : ""}, ` +
+            `${formatDuration(rec.durationMs)}, via ${rec.tool} at ${rec.at}`);
+    });
+    const omitted = runs.length - shown.length;
+    return [
+        `Runs recorded by cruxy ${opts.from ?? "this session"}, newest first (exit codes as observed; nothing inferred):`,
+        "",
+        ...items,
+        ...(omitted > 0
+            ? ["", `…and ${omitted} earlier run${omitted === 1 ? "" : "s"}.`]
+            : []),
+    ].join("\n");
+}
+/** Most runs listed in a PR body. */
+export const MARKDOWN_LIMIT = 8;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cruxy/cli",
-  "version": "1.11.1",
+  "version": "1.11.3",
   "description": "an agentic coding CLI",
   "type": "module",
   "bin": {
@@ -32,8 +32,9 @@
     "commander": "^12.1.0",
     "fastembed": "^2.1.0",
     "picocolors": "^1.1.1",
+    "tar": "^7.5.22",
     "tinyglobby": "^0.2.10",
-    "undici": "^6.21.0",
+    "undici": "^6.28.1",
     "zod": "^3.23.8",
     "zod-to-json-schema": "^3.23.5",
     "@cruxy/sdk": "0.8.0"