@dougharness/codex 1.0.0

package/dist/git.js

@@ -0,0 +1,36 @@
+// Deterministic facts about the change, computed by git rather than asserted by a model.
+import { execFileSync } from "node:child_process";
+function git(args, cwd) {
+    return execFileSync("git", args, { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "pipe"], maxBuffer: 64 * 1024 * 1024 });
+}
+/** `git status --porcelain` lines, sorted, so two snapshots can be compared. Untracked files included. */
+export function statusSnapshot(dir) {
+    return git(["status", "--porcelain", "--untracked-files=all"], dir)
+        .split("\n")
+        .map((l) => l.trimEnd())
+        .filter(Boolean)
+        .sort();
+}
+/**
+ * The commit checked out in dir versus the commit `head` names. The reviewer runs commands in dir,
+ * so they must be the same tree; otherwise every test it runs exercises the wrong code.
+ */
+export function checkedOutMismatch(dir, head) {
+    const actual = git(["rev-parse", "--verify", "HEAD"], dir);
+    const wanted = git(["rev-parse", "--verify", `${head}^{commit}`], dir);
+    if (actual === wanted)
+        return null;
+    return `${head} (${wanted.slice(0, 12)}) is not what is checked out in ${dir} (${actual.slice(0, 12)}); check it out there or point --dir at its worktree`;
+}
+/** Throws with git's own message when a ref does not resolve or dir is not a repository. */
+export function changeFacts(dir, base, head) {
+    const range = `${base}...${head}`;
+    const names = git(["diff", "--name-only", range], dir);
+    const diff = git(["diff", range], dir);
+    return {
+        changedFiles: names.split("\n").map((s) => s.trim()).filter(Boolean),
+        diff,
+        diffBytes: Buffer.byteLength(diff, "utf8"),
+    };
+}
+//# sourceMappingURL=git.js.map

package/dist/git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../src/git.ts"],"names":[],"mappings":"AAAA,yFAAyF;AAEzF,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAQlD,SAAS,GAAG,CAAC,IAAc,EAAE,GAAW;IACtC,OAAO,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;AAC9H,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,OAAO,GAAG,CAAC,CAAC,QAAQ,EAAE,aAAa,EAAE,uBAAuB,CAAC,EAAE,GAAG,CAAC;SAChE,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;SACvB,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,EAAE,CAAC;AACZ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW,EAAE,IAAY;IAC1D,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,IAAI,WAAW,CAAC,EAAE,GAAG,CAAC,CAAC;IACvE,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,GAAG,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,mCAAmC,GAAG,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,sDAAsD,CAAC;AAC7J,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,IAAY,EAAE,IAAY;IACjE,MAAM,KAAK,GAAG,GAAG,IAAI,MAAM,IAAI,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;IACvC,OAAO;QACL,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QACpE,IAAI;QACJ,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC;KAC3C,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,10 @@
+export { runCodexReview, codexArgs, DEFAULT_TIMEOUT_MS, DEFAULT_SANDBOX, REVIEW_MARKER } from "./run.js";
+export { buildPrompt, MAX_EMBEDDED_DIFF_BYTES } from "./prompt.js";
+export { parseEvents, extractJsonObject } from "./parse.js";
+export { changeFacts, statusSnapshot } from "./git.js";
+export { MODEL_REVIEW_SCHEMA, validateModelReview, exitCodeFor, SEVERITIES, VERDICTS, SANDBOXES } from "./schema.js";
+export { checkReviewResult, CONTRACT_RULES, ERROR_KINDS, enforceBlockerEvidence, blockerEvidenceProblem } from "./contract.js";
+export type { RuleId } from "./contract.js";
+export type { ReviewResult, ReviewIssue, ReviewError, CommandRun, ModelReview, Severity, Verdict, Sandbox } from "./schema.js";
+export type { ReviewOptions } from "./run.js";
+export type { PromptInput } from "./prompt.js";

package/dist/index.js

@@ -0,0 +1,7 @@
+export { runCodexReview, codexArgs, DEFAULT_TIMEOUT_MS, DEFAULT_SANDBOX, REVIEW_MARKER } from "./run.js";
+export { buildPrompt, MAX_EMBEDDED_DIFF_BYTES } from "./prompt.js";
+export { parseEvents, extractJsonObject } from "./parse.js";
+export { changeFacts, statusSnapshot } from "./git.js";
+export { MODEL_REVIEW_SCHEMA, validateModelReview, exitCodeFor, SEVERITIES, VERDICTS, SANDBOXES } from "./schema.js";
+export { checkReviewResult, CONTRACT_RULES, ERROR_KINDS, enforceBlockerEvidence, blockerEvidenceProblem } from "./contract.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,kBAAkB,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzG,OAAO,EAAE,WAAW,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACrH,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,WAAW,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC"}

package/dist/parse.d.ts

@@ -0,0 +1,21 @@
+import type { CommandRun } from "./schema.js";
+export interface ParsedEvents {
+    commandsRun: CommandRun[];
+    /** Text of the last agent_message item, or null if none completed. */
+    finalMessage: string | null;
+    usage: {
+        inputTokens: number;
+        outputTokens: number;
+    } | null;
+    /** Lines that were not valid JSON (codex prints some diagnostics to stdout). */
+    unparsedLines: number;
+    threadId: string | null;
+    /** Messages from `error` and `turn.failed` events. Codex reports API errors here, not on stderr. */
+    errors: string[];
+}
+export declare function parseEvents(jsonl: string): ParsedEvents;
+/**
+ * Extracts a JSON object from a model message. Accepts bare JSON, a ```json fence, or
+ * JSON with leading/trailing prose. Returns null when nothing parses.
+ */
+export declare function extractJsonObject(text: string): unknown | null;

package/dist/parse.js

@@ -0,0 +1,115 @@
+// Parses the JSONL event stream from `codex exec --json`.
+// Evidence comes from events, not from the model's prose: a command "ran" only if a
+// command_execution item completed, and its exit code is whatever Codex observed.
+const TAIL_CHARS = 600;
+export function parseEvents(jsonl) {
+    const commands = new Map();
+    let order = 0;
+    const seq = new Map();
+    let finalMessage = null;
+    let usage = null;
+    let unparsedLines = 0;
+    let threadId = null;
+    const errors = [];
+    for (const rawLine of jsonl.split("\n")) {
+        const line = rawLine.trim();
+        if (!line)
+            continue;
+        let ev;
+        try {
+            ev = JSON.parse(line);
+        }
+        catch {
+            unparsedLines++;
+            continue;
+        }
+        if (!ev || typeof ev !== "object")
+            continue;
+        if (ev.type === "thread.started" && typeof ev.thread_id === "string")
+            threadId = ev.thread_id;
+        if (ev.type === "error" && typeof ev.message === "string")
+            errors.push(ev.message);
+        if (ev.type === "turn.failed" && ev.error && typeof ev.error.message === "string" && !errors.includes(ev.error.message))
+            errors.push(ev.error.message);
+        if (ev.type === "turn.completed" && ev.usage && typeof ev.usage === "object") {
+            usage = { inputTokens: Number(ev.usage.input_tokens) || 0, outputTokens: Number(ev.usage.output_tokens) || 0 };
+        }
+        const item = ev.item;
+        if (!item || typeof item !== "object")
+            continue;
+        if (item.type === "command_execution" && (ev.type === "item.completed" || ev.type === "item.started")) {
+            const c = item;
+            const key = typeof c.id === "string" ? c.id : `anon-${order}`;
+            if (!seq.has(key))
+                seq.set(key, order++);
+            const completed = ev.type === "item.completed";
+            const exitCode = completed && typeof c.exit_code === "number" ? c.exit_code : null;
+            const out = typeof c.aggregated_output === "string" ? c.aggregated_output : "";
+            commands.set(key, {
+                command: typeof c.command === "string" ? c.command : "",
+                exitCode,
+                ok: exitCode === 0,
+                outputTail: out.length > TAIL_CHARS ? out.slice(-TAIL_CHARS) : out || undefined,
+            });
+        }
+        if (item.type === "agent_message" && ev.type === "item.completed" && typeof item.text === "string") {
+            finalMessage = item.text;
+        }
+    }
+    const commandsRun = [...commands.entries()].sort((a, b) => (seq.get(a[0]) ?? 0) - (seq.get(b[0]) ?? 0)).map(([, c]) => c);
+    return { commandsRun, finalMessage, usage, unparsedLines, threadId, errors };
+}
+/**
+ * Extracts a JSON object from a model message. Accepts bare JSON, a ```json fence, or
+ * JSON with leading/trailing prose. Returns null when nothing parses.
+ */
+export function extractJsonObject(text) {
+    const trimmed = text.trim();
+    const direct = tryParse(trimmed);
+    if (direct !== undefined)
+        return direct;
+    const fence = /```(?:json)?\s*\n([\s\S]*?)\n\s*```/m.exec(trimmed);
+    if (fence) {
+        const fenced = tryParse(fence[1].trim());
+        if (fenced !== undefined)
+            return fenced;
+    }
+    // Last resort: the outermost {...} span. Scan for a balanced object so trailing prose does not break it.
+    const start = trimmed.indexOf("{");
+    if (start < 0)
+        return null;
+    let depth = 0;
+    let inString = false;
+    for (let i = start; i < trimmed.length; i++) {
+        const ch = trimmed[i];
+        if (inString) {
+            if (ch === "\\")
+                i++;
+            else if (ch === '"')
+                inString = false;
+            continue;
+        }
+        if (ch === '"')
+            inString = true;
+        else if (ch === "{")
+            depth++;
+        else if (ch === "}") {
+            depth--;
+            if (depth === 0) {
+                const candidate = tryParse(trimmed.slice(start, i + 1));
+                return candidate === undefined ? null : candidate;
+            }
+        }
+    }
+    return null;
+}
+function tryParse(s) {
+    try {
+        const v = JSON.parse(s);
+        return v && typeof v === "object" && !Array.isArray(v) ? v : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=parse.js.map

package/dist/parse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse.js","sourceRoot":"","sources":["../src/parse.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,oFAAoF;AACpF,kFAAkF;AAyBlF,MAAM,UAAU,GAAG,GAAG,CAAC;AAEvB,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC/C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,IAAI,KAAK,GAA0B,IAAI,CAAC;IACxC,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,IAAI,EAAO,CAAC;QACZ,IAAI,CAAC;YACH,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,aAAa,EAAE,CAAC;YAChB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ;YAAE,SAAS;QAC5C,IAAI,EAAE,CAAC,IAAI,KAAK,gBAAgB,IAAI,OAAO,EAAE,CAAC,SAAS,KAAK,QAAQ;YAAE,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC;QAC9F,IAAI,EAAE,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,EAAE,CAAC,OAAO,KAAK,QAAQ;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;QACnF,IAAI,EAAE,CAAC,IAAI,KAAK,aAAa,IAAI,EAAE,CAAC,KAAK,IAAI,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvJ,IAAI,EAAE,CAAC,IAAI,KAAK,gBAAgB,IAAI,EAAE,CAAC,KAAK,IAAI,OAAO,EAAE,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC7E,KAAK,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACjH,CAAC;QACD,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC;QACrB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,SAAS;QAChD,IAAI,IAAI,CAAC,IAAI,KAAK,mBAAmB,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,gBAAgB,IAAI,EAAE,CAAC,IAAI,KAAK,cAAc,CAAC,EAAE,CAAC;YACtG,MAAM,CAAC,GAAG,IAAmB,CAAC;YAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,EAAE,CAAC;YAC9D,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;YACzC,MAAM,SAAS,GAAG,EAAE,CAAC,IAAI,KAAK,gBAAgB,CAAC;YAC/C,MAAM,QAAQ,GAAG,SAAS,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;YACnF,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE;gBAChB,OAAO,EAAE,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;gBACvD,QAAQ;gBACR,EAAE,EAAE,QAAQ,KAAK,CAAC;gBAClB,UAAU,EAAE,GAAG,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,SAAS;aAChF,CAAC,CAAC;QACL,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,IAAI,EAAE,CAAC,IAAI,KAAK,gBAAgB,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnG,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1H,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AAC/E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACxC,MAAM,KAAK,GAAG,sCAAsC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnE,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACzC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;IAC1C,CAAC;IACD,yGAAyG;IACzG,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,EAAE,KAAK,IAAI;gBAAE,CAAC,EAAE,CAAC;iBAChB,IAAI,EAAE,KAAK,GAAG;gBAAE,QAAQ,GAAG,KAAK,CAAC;YACtC,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG;YAAE,QAAQ,GAAG,IAAI,CAAC;aAC3B,IAAI,EAAE,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aACxB,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACpB,KAAK,EAAE,CAAC;YACR,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAChB,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBACxD,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS;IACzB,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACxB,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/prompt.d.ts

@@ -0,0 +1,14 @@
+export interface PromptInput {
+    spec: string;
+    base: string;
+    head: string;
+    changedFiles: string[];
+    /** Full unified diff base...head, or null if it was too large to embed. */
+    diff: string | null;
+    /** Bytes of the diff when it was not embedded. */
+    diffBytes?: number;
+    /** Commands the reviewer is encouraged to run (the task's verify command, the project's test command). */
+    verifyCommands?: string[];
+}
+export declare const MAX_EMBEDDED_DIFF_BYTES = 60000;
+export declare function buildPrompt(input: PromptInput): string;

package/dist/prompt.js

@@ -0,0 +1,62 @@
+// Builds the refutation-oriented review prompt. Pure; no I/O.
+// The diff is embedded when small so the reviewer starts from evidence, not from a description of it.
+export const MAX_EMBEDDED_DIFF_BYTES = 60_000;
+export function buildPrompt(input) {
+    const lines = [];
+    lines.push("You are an adversarial code reviewer. Your job is to REFUTE the claim that this change correctly and completely implements the spec below.");
+    lines.push("You did not write this code and you have no stake in it passing. Assume it is wrong until the evidence says otherwise.");
+    lines.push("Run tests, type checks, scripts, and git commands freely, but never edit, create, or delete files in the repository and never commit, checkout, or reset. Put scratch scripts in the system temp directory. The working tree is compared before and after your run; any change voids your review.");
+    lines.push("");
+    lines.push("## Spec the change claims to implement");
+    lines.push("");
+    lines.push(input.spec.trim());
+    lines.push("");
+    lines.push("## Change under review");
+    lines.push("");
+    lines.push(`Base ref: ${input.base}`);
+    lines.push(`Head ref: ${input.head}`);
+    lines.push(`Changed files (from git diff --name-only ${input.base}...${input.head}):`);
+    if (input.changedFiles.length === 0)
+        lines.push("  (none: the diff is empty)");
+    for (const f of input.changedFiles)
+        lines.push(`  - ${f}`);
+    lines.push("");
+    if (input.diff !== null) {
+        lines.push("Unified diff:");
+        lines.push("");
+        lines.push("```diff");
+        lines.push(input.diff.replace(/```/g, "` ` `"));
+        lines.push("```");
+    }
+    else {
+        lines.push(`The diff is ${input.diffBytes ?? "?"} bytes, too large to embed. Read it with: git diff ${input.base}...${input.head}`);
+    }
+    lines.push("");
+    lines.push("## How to review");
+    lines.push("");
+    lines.push("1. For each requirement in the spec, find the line in the diff that satisfies it or record that nothing does.");
+    lines.push("2. Try to break it: run the tests, then write and run a quick script or test invocation that exercises an edge the spec implies (empty input, boundary values, unicode, errors). A requirement with no failing-before test is unverified, not verified.");
+    lines.push("3. Look for changes the spec did not ask for: extra files, renamed symbols, weakened or skipped tests, changed defaults, formatting churn.");
+    lines.push("4. Check for the classic false pass: tests that assert nothing, `skip`/`only`, a command that succeeded because it ran zero tests.");
+    if (input.verifyCommands && input.verifyCommands.length) {
+        lines.push(`5. Run these commands and treat a non-zero exit as a blocker: ${input.verifyCommands.map((c) => `\`${c}\``).join(", ")}`);
+    }
+    lines.push("");
+    lines.push("## What counts as a blocker");
+    lines.push("");
+    lines.push("A blocker must demonstrate either a failure of a spec sentence or acceptance criterion, which you quote, or a violation of a repository invariant: safety, security, data integrity, public compatibility, or required verification (a verify or acceptance command that exits non-zero). It must be caused by this diff, on a supported or reasonably foreseeable input, and carry a reproduction: a command you ran (an entry in commandsRun) whose exit code or quoted output shows the failure; a finding from static inspection alone, with no command that demonstrates it, is major at most. A test-coverage gap against the spec (a requirement without a test, an assertion missing) is major and never a blocker: the reviewer owns spec compliance, so say so in the issue. An input the spec names as unsupported, or a pathological input no supported caller produces, is at most minor. This is not a downgrade of destructive behavior: a change that deletes, overwrites, or corrupts data the spec did not name is a blocker under data integrity even when no spec sentence forbids it. A `fail` verdict requires at least one `blocker` issue: an issue that is only `major` or `minor` is reported with a `pass` verdict, and a review whose findings are all advisory passes with notes.");
+    lines.push("");
+    lines.push("## Verdict rules");
+    lines.push("");
+    lines.push("- `fail` only when at least one issue is a `blocker`: a requirement unmet, a test or verify command failing, or behavior the spec did not ask for, that meets the blocker gate above with a demonstrated failure. An issue that is only `major` or `minor` — a coverage gap, a style nit, a pathological input — is reported with a `pass` verdict, and a review whose findings are all advisory passes with notes.");
+    lines.push("- `pass` only if you tried to break it and could not: every command listed under \"Run these commands\" exited 0, and no command you cite as evidence shows a failure this change caused.");
+    lines.push("- A probe of your own that could not run for a reason unrelated to the change (a missing tool, a wrong path, a sandbox limit) is not a failure of the change: name it in the summary with its exit code and leave the verdict alone.");
+    lines.push("- `inconclusive` only when a command listed under \"Run these commands\" itself could not run (missing dependencies, sandbox limits), or when there were none and you could not run the code at all. Say what you could not run.");
+    lines.push("- Severity: `blocker` = a defect that meets the gate above, citing the commandsRun entry that shows it; `major` = a correctness risk or a spec requirement without a demonstrated failure (static inspection, a missing test, a coverage gap); `minor` = advisory, including unsupported or pathological inputs.");
+    lines.push("- Every issue names a file and, when possible, the command or observation that demonstrates it in `evidence`. Do not report issues you did not confirm. In `evidence`, quote the command string exactly as it appears in commandsRun, or quote a line of its output verbatim (16 characters or more); a prose description of what a probe did cites nothing, and the adapter downgrades such a blocker to major.");
+    lines.push("- Do not pad. No issues and a `pass` verdict is a valid, good answer when the evidence supports it.");
+    lines.push("");
+    lines.push("Your final message must be only the JSON object described by the output schema: { verdict, summary, issues[] }.");
+    return lines.join("\n");
+}
+//# sourceMappingURL=prompt.js.map

package/dist/prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.js","sourceRoot":"","sources":["../src/prompt.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,sGAAsG;AAetG,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAE9C,MAAM,UAAU,WAAW,CAAC,KAAkB;IAC5C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,4IAA4I,CAAC,CAAC;IACzJ,KAAK,CAAC,IAAI,CAAC,wHAAwH,CAAC,CAAC;IACrI,KAAK,CAAC,IAAI,CAAC,mSAAmS,CAAC,CAAC;IAChT,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IACrD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACrC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,aAAa,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACtC,KAAK,CAAC,IAAI,CAAC,aAAa,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACtC,KAAK,CAAC,IAAI,CAAC,4CAA4C,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC;IACvF,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC/E,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,YAAY;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC3D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAChD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,eAAe,KAAK,CAAC,SAAS,IAAI,GAAG,sDAAsD,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACtI,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,+GAA+G,CAAC,CAAC;IAC5H,KAAK,CAAC,IAAI,CAAC,yPAAyP,CAAC,CAAC;IACtQ,KAAK,CAAC,IAAI,CAAC,4IAA4I,CAAC,CAAC;IACzJ,KAAK,CAAC,IAAI,CAAC,oIAAoI,CAAC,CAAC;IACjJ,IAAI,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,iEAAiE,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxI,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC1C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,gvCAAgvC,CAAC,CAAC;IAC7vC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,qZAAqZ,CAAC,CAAC;IACla,KAAK,CAAC,IAAI,CAAC,2LAA2L,CAAC,CAAC;IACxM,KAAK,CAAC,IAAI,CAAC,sOAAsO,CAAC,CAAC;IACnP,KAAK,CAAC,IAAI,CAAC,kOAAkO,CAAC,CAAC;IAC/O,KAAK,CAAC,IAAI,CAAC,kTAAkT,CAAC,CAAC;IAC/T,KAAK,CAAC,IAAI,CAAC,kZAAkZ,CAAC,CAAC;IAC/Z,KAAK,CAAC,IAAI,CAAC,qGAAqG,CAAC,CAAC;IAClH,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,iHAAiH,CAAC,CAAC;IAC9H,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/run.d.ts

@@ -0,0 +1,65 @@
+import type { ReviewResult, CommandRun, Sandbox, ReasoningEffort } from "./schema.js";
+export interface ReviewOptions {
+    spec: string;
+    base: string;
+    /** Repository or worktree directory. Codex runs read-only inside it. */
+    dir: string;
+    head?: string;
+    model?: string;
+    timeoutMs?: number;
+    verifyCommands?: string[];
+    /** Executable name or path. Default "codex". Tests point this at a fake. */
+    codexBin?: string;
+    /** Keep the user's MCP servers from ~/.codex/config.toml. Default false: a reviewer needs none and they cost startup time. */
+    keepMcpServers?: boolean;
+    /** Extra `-c key=value` overrides passed through to codex. */
+    configOverrides?: string[];
+    /**
+     * Codex sandbox. Default "workspace-write": test runners need scratch files (Vitest bundles its config next to it,
+     * which fails with EPERM under "read-only"). Codex keeps .git read-only in both modes, and the adapter compares
+     * `git status` before and after: any change to the working tree makes the result "inconclusive" with kind
+     * "worktree-modified". Pass "read-only" for projects whose checks never write.
+     */
+    sandbox?: Sandbox;
+    /**
+     * Whether to pass `-c sandbox_workspace_write.network_access=true`, which lets a verify command bind a
+     * localhost port under the workspace-write sandbox. An explicit true/false wins; undefined applies the
+     * default rule in {@link resolveNetworkAccess}. Codex ignores the override under "read-only".
+     */
+    networkAccess?: boolean;
+    /** Reasoning effort override, passed as `-c model_reasoning_effort=<level>`. Default: whatever the model normally uses. */
+    effort?: ReasoningEffort;
+}
+export declare const DEFAULT_TIMEOUT_MS: number;
+export declare const DEFAULT_SANDBOX: Sandbox;
+/** Environment variable the adapter sets on every codex it spawns, so a check that suite spawns can detect nesting and skip. */
+export declare const REVIEW_MARKER = "DOUG_CODEX_REVIEW";
+/** The `-c` override that lets a verify command bind a localhost port under the workspace-write sandbox. */
+export declare const NETWORK_ACCESS_OVERRIDE = "sandbox_workspace_write.network_access=true";
+/**
+ * Whether codexArgs should pass NETWORK_ACCESS_OVERRIDE: false whenever the effective sandbox is not
+ * "workspace-write" (Codex ignores the override under read-only, so it is never passed); otherwise an
+ * explicit `networkAccess` boolean wins; otherwise on when at least one verify command is given.
+ */
+export declare function resolveNetworkAccess(opts: {
+    sandbox?: Sandbox;
+    verifyCommands?: string[];
+    networkAccess?: boolean;
+}): boolean;
+/** The `-c` override for a reasoning-effort level, e.g. `model_reasoning_effort=low`. */
+export declare function reasoningEffortOverride(level: ReasoningEffort): string;
+/** The argv for `codex exec`, exposed so tests can assert the sandbox and schema are always present. */
+export declare function codexArgs(opts: {
+    schemaFile: string;
+    lastMessageFile: string;
+    dir: string;
+    model?: string;
+    keepMcpServers?: boolean;
+    configOverrides?: string[];
+    sandbox?: Sandbox;
+    networkAccess?: boolean;
+    effort?: ReasoningEffort;
+}): string[];
+export declare function runCodexReview(opts: ReviewOptions): Promise<ReviewResult>;
+/** Convenience for callers that only want the CommandRun list from a raw event log. */
+export declare function commandsFromEvents(jsonl: string): CommandRun[];

package/dist/run.js

@@ -0,0 +1,195 @@
+// Runs `codex exec` read-only against a worktree and turns its event stream into a ReviewResult.
+// Every failure mode yields verdict "inconclusive" with a typed error; nothing here ever reports a pass
+// it did not observe.
+import { spawn } from "node:child_process";
+import { mkdtempSync, writeFileSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join, resolve } from "node:path";
+import { buildPrompt, MAX_EMBEDDED_DIFF_BYTES } from "./prompt.js";
+import { parseEvents, extractJsonObject } from "./parse.js";
+import { changeFacts, statusSnapshot, checkedOutMismatch } from "./git.js";
+import { MODEL_REVIEW_SCHEMA, validateModelReview } from "./schema.js";
+import { enforceBlockerEvidence } from "./contract.js";
+export const DEFAULT_TIMEOUT_MS = 15 * 60 * 1000;
+export const DEFAULT_SANDBOX = "workspace-write";
+/** Environment variable the adapter sets on every codex it spawns, so a check that suite spawns can detect nesting and skip. */
+export const REVIEW_MARKER = "DOUG_CODEX_REVIEW";
+/** The `-c` override that lets a verify command bind a localhost port under the workspace-write sandbox. */
+export const NETWORK_ACCESS_OVERRIDE = "sandbox_workspace_write.network_access=true";
+/**
+ * Whether codexArgs should pass NETWORK_ACCESS_OVERRIDE: false whenever the effective sandbox is not
+ * "workspace-write" (Codex ignores the override under read-only, so it is never passed); otherwise an
+ * explicit `networkAccess` boolean wins; otherwise on when at least one verify command is given.
+ */
+export function resolveNetworkAccess(opts) {
+    const sandbox = opts.sandbox || DEFAULT_SANDBOX;
+    if (sandbox !== "workspace-write")
+        return false;
+    if (typeof opts.networkAccess === "boolean")
+        return opts.networkAccess;
+    return (opts.verifyCommands || []).length > 0;
+}
+/** The `-c` override for a reasoning-effort level, e.g. `model_reasoning_effort=low`. */
+export function reasoningEffortOverride(level) {
+    return `model_reasoning_effort=${level}`;
+}
+/** The argv for `codex exec`, exposed so tests can assert the sandbox and schema are always present. */
+export function codexArgs(opts) {
+    const args = ["exec", "--json", "--ephemeral", "--sandbox", opts.sandbox || DEFAULT_SANDBOX, "--skip-git-repo-check", "--color", "never", "-C", opts.dir, "--output-schema", opts.schemaFile, "-o", opts.lastMessageFile];
+    if (opts.model)
+        args.push("-m", opts.model);
+    if (!opts.keepMcpServers)
+        args.push("-c", "mcp_servers={}");
+    // Pushed before the caller's configOverrides, so an explicit caller override for the same key comes later.
+    // That a later -c wins for a repeated key in codex is assumed, unverified against codex-cli 0.155.1.
+    if (opts.networkAccess)
+        args.push("-c", NETWORK_ACCESS_OVERRIDE);
+    if (opts.effort)
+        args.push("-c", reasoningEffortOverride(opts.effort));
+    for (const o of opts.configOverrides || [])
+        args.push("-c", o);
+    args.push("-"); // prompt on stdin: no argv length limit, no shell quoting
+    return args;
+}
+export async function runCodexReview(opts) {
+    const started = Date.now();
+    const dir = resolve(opts.dir);
+    const head = opts.head || "HEAD";
+    const inherited = !!process.env[REVIEW_MARKER];
+    const base = {
+        base: opts.base,
+        head,
+        dir,
+        reviewer: "codex",
+        model: opts.model || null,
+        sandbox: opts.sandbox || DEFAULT_SANDBOX,
+        marker: { name: REVIEW_MARKER, passed: false, inherited },
+    };
+    const fail = (error, extra = {}) => ({
+        ...base,
+        verdict: "inconclusive",
+        summary: error.message,
+        issues: [],
+        commandsRun: [],
+        changedFiles: [],
+        error,
+        codexExitCode: null,
+        usage: null,
+        ...extra,
+        durationMs: Date.now() - started,
+    });
+    let facts;
+    let before;
+    let mismatch;
+    try {
+        facts = changeFacts(dir, opts.base, head);
+        mismatch = checkedOutMismatch(dir, head);
+        before = statusSnapshot(dir);
+    }
+    catch (e) {
+        const msg = String(e && e.stderr ? e.stderr : e && e.message ? e.message : e).trim();
+        return fail({ kind: "git", message: `git diff ${opts.base}...${head} failed in ${dir}: ${msg}` });
+    }
+    if (mismatch)
+        return fail({ kind: "git", message: mismatch }, { changedFiles: facts.changedFiles });
+    const prompt = buildPrompt({
+        spec: opts.spec,
+        base: opts.base,
+        head,
+        changedFiles: facts.changedFiles,
+        diff: facts.diffBytes <= MAX_EMBEDDED_DIFF_BYTES ? facts.diff : null,
+        diffBytes: facts.diffBytes,
+        verifyCommands: opts.verifyCommands,
+    });
+    const tmp = mkdtempSync(join(tmpdir(), "codex-review-"));
+    const schemaFile = join(tmp, "schema.json");
+    const lastMessageFile = join(tmp, "last.txt");
+    writeFileSync(schemaFile, JSON.stringify(MODEL_REVIEW_SCHEMA));
+    const networkAccess = resolveNetworkAccess({ sandbox: opts.sandbox, verifyCommands: opts.verifyCommands, networkAccess: opts.networkAccess });
+    const args = codexArgs({ schemaFile, lastMessageFile, dir, model: opts.model, keepMcpServers: opts.keepMcpServers, configOverrides: opts.configOverrides, sandbox: opts.sandbox, networkAccess, effort: opts.effort });
+    const timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    const spawned = await spawnCollect(opts.codexBin || "codex", args, prompt, dir, timeoutMs);
+    rmSync(tmp, { recursive: true, force: true });
+    const parsed = parseEvents(spawned.stdout);
+    const withEvidence = { commandsRun: parsed.commandsRun, changedFiles: facts.changedFiles, usage: parsed.usage, codexExitCode: spawned.exitCode, marker: { name: REVIEW_MARKER, passed: true, inherited } };
+    if (spawned.notFound)
+        return fail({ kind: "codex-not-found", message: `${opts.codexBin || "codex"} is not installed or not on PATH` }, { changedFiles: facts.changedFiles, marker: { name: REVIEW_MARKER, passed: true, inherited } });
+    // A reviewer that changed what it reviewed has no verdict worth reading, whatever it says.
+    let after = [];
+    try {
+        after = statusSnapshot(dir);
+    }
+    catch {
+        after = before;
+    }
+    const changes = [...after.filter((l) => !before.includes(l)).map((l) => `+ ${l}`), ...before.filter((l) => !after.includes(l)).map((l) => `- ${l}`)];
+    if (changes.length) {
+        return fail({ kind: "worktree-modified", message: `the reviewer changed the working tree in ${dir}: ${changes.join("; ")}`, changes }, withEvidence);
+    }
+    if (spawned.timedOut)
+        return fail({ kind: "timeout", message: `codex exec exceeded ${timeoutMs} ms and was killed` }, withEvidence);
+    if (spawned.exitCode !== 0) {
+        // Codex reports API errors as JSONL `error` events on stdout; stderr is usually empty.
+        const detail = parsed.errors.length ? parsed.errors.join("\n") : spawned.stderr;
+        return fail({ kind: "codex-failed", message: `codex exec exited ${spawned.exitCode}${parsed.errors.length ? `: ${parsed.errors[0].slice(0, 300)}` : ""}`, stderrTail: detail.slice(-2000) }, withEvidence);
+    }
+    if (parsed.finalMessage === null)
+        return fail({ kind: "no-final-message", message: "codex produced no final agent message" }, withEvidence);
+    const obj = extractJsonObject(parsed.finalMessage);
+    if (obj === null)
+        return fail({ kind: "unparseable", message: "final message is not JSON", raw: parsed.finalMessage.slice(0, 4000) }, withEvidence);
+    const validated = validateModelReview(obj);
+    if ("error" in validated)
+        return fail({ kind: "unparseable", message: validated.error, raw: parsed.finalMessage.slice(0, 4000) }, withEvidence);
+    // R12 is enforced here, on the runtime's own commandsRun, never the model's claims: an evidence-free
+    // blocker is downgraded to major rather than trusted or silently dropped (docs/worker-contract.md rule 8).
+    return enforceBlockerEvidence({
+        ...base,
+        ...validated.review,
+        commandsRun: parsed.commandsRun,
+        changedFiles: facts.changedFiles,
+        error: null,
+        codexExitCode: spawned.exitCode,
+        usage: parsed.usage,
+        durationMs: Date.now() - started,
+        marker: { name: REVIEW_MARKER, passed: true, inherited },
+    });
+}
+function spawnCollect(bin, args, stdin, cwd, timeoutMs) {
+    return new Promise((res) => {
+        let stdout = "";
+        let stderr = "";
+        let notFound = false;
+        let timedOut = false;
+        let settled = false;
+        const child = spawn(bin, args, { cwd, stdio: ["pipe", "pipe", "pipe"], env: { ...process.env, NO_COLOR: "1", [REVIEW_MARKER]: "1" } });
+        const timer = setTimeout(() => {
+            timedOut = true;
+            child.kill("SIGKILL");
+        }, timeoutMs);
+        const finish = (exitCode) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            res({ stdout, stderr, exitCode, notFound, timedOut });
+        };
+        child.stdout.setEncoding("utf8").on("data", (d) => (stdout += d));
+        child.stderr.setEncoding("utf8").on("data", (d) => (stderr += d));
+        child.on("error", (err) => {
+            if (err.code === "ENOENT")
+                notFound = true;
+            else
+                stderr += String(err.message);
+            finish(null);
+        });
+        child.on("close", (code) => finish(code));
+        child.stdin.on("error", () => { });
+        child.stdin.end(stdin);
+    });
+}
+/** Convenience for callers that only want the CommandRun list from a raw event log. */
+export function commandsFromEvents(jsonl) {
+    return parseEvents(jsonl).commandsRun;
+}
+//# sourceMappingURL=run.js.map

package/dist/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../src/run.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,wGAAwG;AACxG,sBAAsB;AAEtB,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAkCvD,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACjD,MAAM,CAAC,MAAM,eAAe,GAAY,iBAAiB,CAAC;AAE1D,gIAAgI;AAChI,MAAM,CAAC,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAEjD,4GAA4G;AAC5G,MAAM,CAAC,MAAM,uBAAuB,GAAG,6CAA6C,CAAC;AAErF;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAA+E;IAClH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,eAAe,CAAC;IAChD,IAAI,OAAO,KAAK,iBAAiB;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,OAAO,IAAI,CAAC,aAAa,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC;IACvE,OAAO,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAChD,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,uBAAuB,CAAC,KAAsB;IAC5D,OAAO,0BAA0B,KAAK,EAAE,CAAC;AAC3C,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,SAAS,CAAC,IAUzB;IACC,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,IAAI,CAAC,OAAO,IAAI,eAAe,EAAE,uBAAuB,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,iBAAiB,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAC1N,IAAI,IAAI,CAAC,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,CAAC,cAAc;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC5D,2GAA2G;IAC3G,qGAAqG;IACrG,IAAI,IAAI,CAAC,aAAa;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;IACjE,IAAI,IAAI,CAAC,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACvE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,eAAe,IAAI,EAAE;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/D,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,0DAA0D;IAC1E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAmB;IACtD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC;IACjC,MAAM,SAAS,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC/C,MAAM,IAAI,GAA+I;QACvJ,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI;QACJ,GAAG;QACH,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI;QACzB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,eAAe;QACxC,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE;KAC1D,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,KAAkB,EAAE,QAA+B,EAAE,EAAgB,EAAE,CAAC,CAAC;QACrF,GAAG,IAAI;QACP,OAAO,EAAE,cAAc;QACvB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,EAAE;QACV,WAAW,EAAE,EAAE;QACf,YAAY,EAAE,EAAE;QAChB,KAAK;QACL,aAAa,EAAE,IAAI;QACnB,KAAK,EAAE,IAAI;QACX,GAAG,KAAK;QACR,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;KACjC,CAAC,CAAC;IAEH,IAAI,KAAK,CAAC;IACV,IAAI,MAAgB,CAAC;IACrB,IAAI,QAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1C,QAAQ,GAAG,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACzC,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACrF,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,IAAI,CAAC,IAAI,MAAM,IAAI,cAAc,GAAG,KAAK,GAAG,EAAE,EAAE,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;IAEpG,MAAM,MAAM,GAAG,WAAW,CAAC;QACzB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI;QACJ,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,IAAI,EAAE,KAAK,CAAC,SAAS,IAAI,uBAAuB,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QACpE,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,cAAc,EAAE,IAAI,CAAC,cAAc;KACpC,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAC5C,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC9C,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAC/D,MAAM,aAAa,GAAG,oBAAoB,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;IAC9I,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,UAAU,EAAE,eAAe,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACvN,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAEvD,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,QAAQ,IAAI,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;IAC3F,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,YAAY,GAA0B,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC;IAElO,IAAI,OAAO,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,kCAAkC,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAEvO,2FAA2F;IAC3F,IAAI,KAAK,GAAa,EAAE,CAAC;IACzB,IAAI,CAAC;QACH,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,MAAM,CAAC;IACjB,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IACrJ,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,4CAA4C,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC;IACvJ,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,uBAAuB,SAAS,oBAAoB,EAAE,EAAE,YAAY,CAAC,CAAC;IACpI,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC3B,uFAAuF;QACvF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QAChF,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,qBAAqB,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;IAC7M,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,uCAAuC,EAAE,EAAE,YAAY,CAAC,CAAC;IAC5I,MAAM,GAAG,GAAG,iBAAiB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACnD,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,2BAA2B,EAAE,GAAG,EAAE,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;IACpJ,MAAM,SAAS,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,OAAO,IAAI,SAAS;QAAE,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;IAEhJ,qGAAqG;IACrG,2GAA2G;IAC3G,OAAO,sBAAsB,CAAC;QAC5B,GAAG,IAAI;QACP,GAAG,SAAS,CAAC,MAAM;QACnB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,KAAK,EAAE,IAAI;QACX,aAAa,EAAE,OAAO,CAAC,QAAQ;QAC/B,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;QAChC,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE;KACzD,CAAC,CAAC;AACL,CAAC;AAUD,SAAS,YAAY,CAAC,GAAW,EAAE,IAAc,EAAE,KAAa,EAAE,GAAW,EAAE,SAAiB;IAC9F,OAAO,IAAI,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QACzB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACvI,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,QAAQ,GAAG,IAAI,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,MAAM,MAAM,GAAG,CAAC,QAAuB,EAAE,EAAE;YACzC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,GAAG,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QACxD,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1E,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1E,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;YAC/C,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;gBAAE,QAAQ,GAAG,IAAI,CAAC;;gBACtC,MAAM,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,CAAC;QACf,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1C,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAClC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC;AACxC,CAAC"}