@fisaabil_/ai-verify 0.1.0

package/README.md

@@ -0,0 +1,81 @@
+# AI Verify
+
+> AI can generate code. AI Verify helps verify it.
+
+Open-source, risk-adaptive verification infrastructure for AI-generated software.
+It analyzes what changed, assesses how risky it is, and runs only the checks
+that fit — then reports a clear `PASSED` / `FAILED` result.
+
+## Requirements
+
+* Node.js `>= 18`
+* Git
+
+No config files. No extra services. Check tools (like `tsc`) are used from the
+target repository itself when available — never downloaded automatically.
+
+## Install (no clone needed)
+
+Once published, pick one — running stays in the terminal:
+
+```bash
+npm install -g ai-verify
+ai-verify /path/to/your/repo
+```
+
+Try without installing:
+
+```bash
+npx ai-verify@latest /path/to/your/repo
+```
+
+Pin it for a team (inside your project):
+
+```bash
+npm install -D ai-verify
+npx ai-verify .
+```
+
+No `sudo`, no config files, no extra services. The `ai-verify` command is
+created automatically on install. If global install reports a permission
+error, that comes from your npm prefix setup — prefer `npx` or point your
+npm prefix at a directory you own.
+
+## Quickstart (from source)
+
+Or during development:
+
+```bash
+npm run dev -- /path/to/your/repo
+```
+
+## What the output means
+
+```text
+Risk: HIGH (72)            # NONE / LOW / MEDIUM / HIGH / CRITICAL + score 0-100
+Factors:                   # why: auth change, no tests, large change, ...
+  +30 Authentication change — ...
+
+Verification (812ms)
+  ✓ Type Check — passed    # ✓ passed, ✗ failed, - skipped, ! error
+  - Type Check — skipped (TypeScript compiler (tsc) is not available ...)
+Findings: 1
+  [HIGH] TS2322: ... (src/app.ts:12)
+Result: PASSED             # FAILED if any check failed or errored
+```
+
+Honesty rules:
+
+* A check that does not apply is `skipped` with a reason — never a failure.
+* A missing tool is `skipped`, never downloaded or installed for you.
+* A crashed tool is `error`, not silently treated as passed.
+
+## Quality checks
+
+```bash
+npm run check   # type check
+npm run test    # tests
+npm run build   # build
+```
+
+See `docs/workflow.md` for the full vision, architecture, and roadmap.

package/dist/analyzer/analyzer.d.ts

@@ -0,0 +1,4 @@
+import type { AnalysisRequest, ChangeSet } from "../core/types/index.js";
+export interface Analyzer {
+    analyze(request: AnalysisRequest): Promise<ChangeSet>;
+}

package/dist/analyzer/analyzer.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=analyzer.js.map

package/dist/analyzer/analyzer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyzer.js","sourceRoot":"","sources":["../../src/analyzer/analyzer.ts"],"names":[],"mappings":""}

package/dist/analyzer/git-analyzer.d.ts

@@ -0,0 +1,15 @@
+import type { AnalysisRequest, ChangeSet } from "../core/types/index.js";
+import type { Analyzer } from "./analyzer.js";
+export declare class GitAnalyzer implements Analyzer {
+    analyze(request: AnalysisRequest): Promise<ChangeSet>;
+    private assertGitRepository;
+    private getGitChanges;
+    private parseNameStatus;
+    private parseNameStatusLine;
+    private getUntrackedFiles;
+    private createFileChange;
+    private getFileStats;
+    private isTrackedFile;
+    private countUntrackedFileLines;
+    private parseStat;
+}

package/dist/analyzer/git-analyzer.js

@@ -0,0 +1,208 @@
+import { execFile } from "node:child_process";
+import path from "node:path";
+import { promisify } from "node:util";
+import { detectLanguage } from "./language.js";
+const execFileAsync = promisify(execFile);
+export class GitAnalyzer {
+    async analyze(request) {
+        const repositoryPath = path.resolve(request.repositoryPath);
+        await this.assertGitRepository(repositoryPath);
+        const changes = await this.getGitChanges(repositoryPath, request.includeUncommittedChanges);
+        const files = [];
+        for (const change of changes) {
+            const fileChange = await this.createFileChange(repositoryPath, change);
+            files.push(fileChange);
+        }
+        return {
+            files,
+            totalAdditions: files.reduce((total, file) => total + file.additions, 0),
+            totalDeletions: files.reduce((total, file) => total + file.deletions, 0),
+        };
+    }
+    async assertGitRepository(repositoryPath) {
+        try {
+            await execFileAsync("git", ["rev-parse", "--is-inside-work-tree"], {
+                cwd: repositoryPath,
+            });
+        }
+        catch {
+            throw new Error(`The target directory is not a Git repository: ${repositoryPath}`);
+        }
+    }
+    async getGitChanges(repositoryPath, includeUncommittedChanges) {
+        const args = includeUncommittedChanges
+            ? ["diff", "HEAD", "--name-status", "-M"]
+            : ["diff", "HEAD~1", "HEAD", "--name-status", "-M"];
+        const { stdout } = await execFileAsync("git", args, {
+            cwd: repositoryPath,
+        });
+        const changes = this.parseNameStatus(stdout);
+        if (!includeUncommittedChanges) {
+            return changes;
+        }
+        const untrackedFiles = await this.getUntrackedFiles(repositoryPath);
+        return [
+            ...changes,
+            ...untrackedFiles.map((filePath) => ({
+                path: filePath,
+                changeType: "added",
+            })),
+        ];
+    }
+    parseNameStatus(output) {
+        if (!output.trim()) {
+            return [];
+        }
+        return output
+            .split("\n")
+            .map((line) => line.trim())
+            .filter(Boolean)
+            .flatMap((line) => this.parseNameStatusLine(line));
+    }
+    parseNameStatusLine(line) {
+        const parts = line.split("\t");
+        if (parts.length < 2) {
+            return [];
+        }
+        const status = parts[0];
+        const firstPath = parts[1];
+        if (!status || !firstPath) {
+            return [];
+        }
+        const statusCode = status[0];
+        switch (statusCode) {
+            case "A":
+                return [
+                    {
+                        path: firstPath,
+                        changeType: "added",
+                    },
+                ];
+            case "M":
+                return [
+                    {
+                        path: firstPath,
+                        changeType: "modified",
+                    },
+                ];
+            case "D":
+                return [
+                    {
+                        path: firstPath,
+                        changeType: "deleted",
+                    },
+                ];
+            case "R": {
+                const newPath = parts[2];
+                if (!newPath) {
+                    return [];
+                }
+                return [
+                    {
+                        path: newPath,
+                        changeType: "renamed",
+                    },
+                ];
+            }
+            default:
+                return [];
+        }
+    }
+    async getUntrackedFiles(repositoryPath) {
+        const { stdout } = await execFileAsync("git", ["ls-files", "--others", "--exclude-standard"], {
+            cwd: repositoryPath,
+        });
+        if (!stdout.trim()) {
+            return [];
+        }
+        return stdout
+            .split("\n")
+            .map((line) => line.trim())
+            .filter(Boolean);
+    }
+    async createFileChange(repositoryPath, change) {
+        const stats = await this.getFileStats(repositoryPath, change);
+        const language = detectLanguage(change.path);
+        const fileChange = {
+            path: change.path,
+            changeType: change.changeType,
+            additions: stats.additions,
+            deletions: stats.deletions,
+            source: "unknown",
+        };
+        if (language !== undefined) {
+            fileChange.language = language;
+        }
+        return fileChange;
+    }
+    async getFileStats(repositoryPath, change) {
+        if (change.changeType === "added") {
+            const isTracked = await this.isTrackedFile(repositoryPath, change.path);
+            if (!isTracked) {
+                return this.countUntrackedFileLines(repositoryPath, change.path);
+            }
+        }
+        try {
+            const { stdout } = await execFileAsync("git", ["diff", "HEAD", "--numstat", "-M", "--", change.path], {
+                cwd: repositoryPath,
+            });
+            const line = stdout
+                .split("\n")
+                .map((value) => value.trim())
+                .find(Boolean);
+            if (!line) {
+                return {
+                    additions: 0,
+                    deletions: 0,
+                };
+            }
+            const parts = line.split("\t");
+            return {
+                additions: this.parseStat(parts[0]),
+                deletions: this.parseStat(parts[1]),
+            };
+        }
+        catch {
+            return {
+                additions: 0,
+                deletions: 0,
+            };
+        }
+    }
+    async isTrackedFile(repositoryPath, filePath) {
+        try {
+            await execFileAsync("git", ["ls-files", "--error-unmatch", "--", filePath], {
+                cwd: repositoryPath,
+            });
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    async countUntrackedFileLines(repositoryPath, filePath) {
+        try {
+            const absolutePath = path.join(repositoryPath, filePath);
+            const { stdout } = await execFileAsync("wc", ["-l", absolutePath]);
+            const lineCount = Number.parseInt(stdout.trim().split(/\s+/)[0] ?? "0", 10);
+            return {
+                additions: Number.isNaN(lineCount) ? 0 : lineCount,
+                deletions: 0,
+            };
+        }
+        catch {
+            return {
+                additions: 0,
+                deletions: 0,
+            };
+        }
+    }
+    parseStat(value) {
+        if (!value || value === "-") {
+            return 0;
+        }
+        const parsed = Number.parseInt(value, 10);
+        return Number.isNaN(parsed) ? 0 : parsed;
+    }
+}
+//# sourceMappingURL=git-analyzer.js.map

package/dist/analyzer/git-analyzer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-analyzer.js","sourceRoot":"","sources":["../../src/analyzer/git-analyzer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAStC,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAa1C,MAAM,OAAO,WAAW;IACtB,KAAK,CAAC,OAAO,CAAC,OAAwB;QACpC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAE5D,MAAM,IAAI,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC;QAE/C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CACtC,cAAc,EACd,OAAO,CAAC,yBAAyB,CAClC,CAAC;QAEF,MAAM,KAAK,GAAiB,EAAE,CAAC;QAE/B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAC5C,cAAc,EACd,MAAM,CACP,CAAC;YAEF,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzB,CAAC;QAED,OAAO;YACL,KAAK;YACL,cAAc,EAAE,KAAK,CAAC,MAAM,CAC1B,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,SAAS,EACvC,CAAC,CACF;YACD,cAAc,EAAE,KAAK,CAAC,MAAM,CAC1B,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,SAAS,EACvC,CAAC,CACF;SACF,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,cAAsB;QAEtB,IAAI,CAAC;YACH,MAAM,aAAa,CACjB,KAAK,EACL,CAAC,WAAW,EAAE,uBAAuB,CAAC,EACtC;gBACE,GAAG,EAAE,cAAc;aACpB,CACF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CACb,iDAAiD,cAAc,EAAE,CAClE,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,cAAsB,EACtB,yBAAkC;QAElC,MAAM,IAAI,GAAG,yBAAyB;YACpC,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC;YACzC,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;QAEtD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE;YAClD,GAAG,EAAE,cAAc;SACpB,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAE7C,IAAI,CAAC,yBAAyB,EAAE,CAAC;YAC/B,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC;QAEpE,OAAO;YACL,GAAG,OAAO;YACV,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBACnC,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,OAAgB;aAC7B,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;IAEO,eAAe,CAAC,MAAc;QACpC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YACnB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,MAAM;aACV,KAAK,CAAC,IAAI,CAAC;aACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1B,MAAM,CAAC,OAAO,CAAC;aACf,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;IACvD,CAAC;IAEO,mBAAmB,CAAC,IAAY;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAE/B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAE3B,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAE7B,QAAQ,UAAU,EAAE,CAAC;YACnB,KAAK,GAAG;gBACN,OAAO;oBACL;wBACE,IAAI,EAAE,SAAS;wBACf,UAAU,EAAE,OAAO;qBACpB;iBACF,CAAC;YAEJ,KAAK,GAAG;gBACN,OAAO;oBACL;wBACE,IAAI,EAAE,SAAS;wBACf,UAAU,EAAE,UAAU;qBACvB;iBACF,CAAC;YAEJ,KAAK,GAAG;gBACN,OAAO;oBACL;wBACE,IAAI,EAAE,SAAS;wBACf,UAAU,EAAE,SAAS;qBACtB;iBACF,CAAC;YAEJ,KAAK,GAAG,EAAE,CAAC;gBACT,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAEzB,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,EAAE,CAAC;gBACZ,CAAC;gBAED,OAAO;oBACL;wBACE,IAAI,EAAE,OAAO;wBACb,UAAU,EAAE,SAAS;qBACtB;iBACF,CAAC;YACJ,CAAC;YAED;gBACE,OAAO,EAAE,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,cAAsB;QAEtB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CACpC,KAAK,EACL,CAAC,UAAU,EAAE,UAAU,EAAE,oBAAoB,CAAC,EAC9C;YACE,GAAG,EAAE,cAAc;SACpB,CACF,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YACnB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,MAAM;aACV,KAAK,CAAC,IAAI,CAAC;aACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1B,MAAM,CAAC,OAAO,CAAC,CAAC;IACrB,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,cAAsB,EACtB,MAAiB;QAEjB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CACnC,cAAc,EACd,MAAM,CACP,CAAC;QAEF,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAE7C,MAAM,UAAU,GAAe;YAC7B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM,EAAE,SAAS;SAClB,CAAC;QAEF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,UAAU,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACjC,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,KAAK,CAAC,YAAY,CACxB,cAAsB,EACtB,MAAiB;QAKjB,IAAI,MAAM,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;YAClC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CACxC,cAAc,EACd,MAAM,CAAC,IAAI,CACZ,CAAC;YAEF,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,uBAAuB,CACjC,cAAc,EACd,MAAM,CAAC,IAAI,CACZ,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CACpC,KAAK,EACL,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EACtD;gBACE,GAAG,EAAE,cAAc;aACpB,CACF,CAAC;YAEF,MAAM,IAAI,GAAG,MAAM;iBAChB,KAAK,CAAC,IAAI,CAAC;iBACX,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;iBAC5B,IAAI,CAAC,OAAO,CAAC,CAAC;YAEjB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO;oBACL,SAAS,EAAE,CAAC;oBACZ,SAAS,EAAE,CAAC;iBACb,CAAC;YACJ,CAAC;YAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAE/B,OAAO;gBACL,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACnC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;aACpC,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,SAAS,EAAE,CAAC;gBACZ,SAAS,EAAE,CAAC;aACb,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,cAAsB,EACtB,QAAgB;QAEhB,IAAI,CAAC;YACH,MAAM,aAAa,CACjB,KAAK,EACL,CAAC,UAAU,EAAE,iBAAiB,EAAE,IAAI,EAAE,QAAQ,CAAC,EAC/C;gBACE,GAAG,EAAE,cAAc;aACpB,CACF,CAAC;YAEF,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,uBAAuB,CACnC,cAAsB,EACtB,QAAgB;QAKhB,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;YAEzD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CACpC,IAAI,EACJ,CAAC,IAAI,EAAE,YAAY,CAAC,CACrB,CAAC;YAEF,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAC/B,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EACpC,EAAE,CACH,CAAC;YAEF,OAAO;gBACL,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;gBAClD,SAAS,EAAE,CAAC;aACb,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,SAAS,EAAE,CAAC;gBACZ,SAAS,EAAE,CAAC;aACb,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,KAAyB;QACzC,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YAC5B,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAE1C,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC3C,CAAC;CACF"}

package/dist/analyzer/language.d.ts

@@ -0,0 +1 @@
+export declare function detectLanguage(filePath: string): string | undefined;

package/dist/analyzer/language.js

@@ -0,0 +1,23 @@
+import path from "node:path";
+const LANGUAGE_MAP = {
+    ".ts": "typescript",
+    ".tsx": "typescript",
+    ".js": "javascript",
+    ".jsx": "javascript",
+    ".py": "python",
+    ".go": "go",
+    ".rs": "rust",
+    ".java": "java",
+    ".php": "php",
+    ".rb": "ruby",
+    ".cs": "csharp",
+    ".cpp": "cpp",
+    ".c": "c",
+    ".swift": "swift",
+    ".kt": "kotlin",
+};
+export function detectLanguage(filePath) {
+    const extension = path.extname(filePath).toLowerCase();
+    return LANGUAGE_MAP[extension];
+}
+//# sourceMappingURL=language.js.map

package/dist/analyzer/language.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"language.js","sourceRoot":"","sources":["../../src/analyzer/language.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,YAAY,GAA2B;IAC3C,KAAK,EAAE,YAAY;IACnB,MAAM,EAAE,YAAY;IACpB,KAAK,EAAE,YAAY;IACnB,MAAM,EAAE,YAAY;IACpB,KAAK,EAAE,QAAQ;IACf,KAAK,EAAE,IAAI;IACX,KAAK,EAAE,MAAM;IACb,OAAO,EAAE,MAAM;IACf,MAAM,EAAE,KAAK;IACb,KAAK,EAAE,MAAM;IACb,KAAK,EAAE,QAAQ;IACf,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,GAAG;IACT,QAAQ,EAAE,OAAO;IACjB,KAAK,EAAE,QAAQ;CAChB,CAAC;AAEF,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACvD,OAAO,YAAY,CAAC,SAAS,CAAC,CAAC;AACjC,CAAC"}

package/dist/cli/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export declare function run(repositoryPath: string): Promise<number>;

package/dist/cli/index.js

@@ -0,0 +1,38 @@
+#!/usr/bin/env node
+import path from "node:path";
+import { CoreOrchestrator } from "../core/orchestrator.js";
+import { GitAnalyzer } from "../analyzer/git-analyzer.js";
+import { RiskEngineV01 } from "../risk/risk-engine.js";
+import { selectVerifiers } from "../verifier/index.js";
+import { hasFailed, printBanner, printChangeReport, printRiskReport, printVerificationReport, } from "./report.js";
+import { getVersion } from "./version.js";
+export async function run(repositoryPath) {
+    const request = {
+        repositoryPath: path.resolve(repositoryPath),
+        includeUncommittedChanges: true,
+    };
+    const analyzer = new GitAnalyzer();
+    const riskEngine = new RiskEngineV01();
+    const core = new CoreOrchestrator(analyzer, riskEngine, selectVerifiers);
+    const { changeSet, risk, verification } = await core.run(request);
+    printBanner(getVersion());
+    printChangeReport(changeSet);
+    printRiskReport(risk);
+    printVerificationReport(verification);
+    return hasFailed(verification) ? 1 : 0;
+}
+async function main() {
+    const repositoryPath = process.argv[2] ?? ".";
+    process.exitCode = await run(repositoryPath);
+}
+main().catch((error) => {
+    console.error("AI Verify failed.");
+    if (error instanceof Error) {
+        console.error(error.message);
+    }
+    else {
+        console.error(error);
+    }
+    process.exitCode = 1;
+});
+//# sourceMappingURL=index.js.map

package/dist/cli/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AAEA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EACL,SAAS,EACT,WAAW,EACX,iBAAiB,EACjB,eAAe,EACf,uBAAuB,GACxB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,cAAsB;IAC9C,MAAM,OAAO,GAAG;QACd,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC;QAC5C,yBAAyB,EAAE,IAAI;KAChC,CAAC;IAEF,MAAM,QAAQ,GAAG,IAAI,WAAW,EAAE,CAAC;IACnC,MAAM,UAAU,GAAG,IAAI,aAAa,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,gBAAgB,CAAC,QAAQ,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;IAEzE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAElE,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC;IAC1B,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC7B,eAAe,CAAC,IAAI,CAAC,CAAC;IACtB,uBAAuB,CAAC,YAAY,CAAC,CAAC;IAEtC,OAAO,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;IAC9C,OAAO,CAAC,QAAQ,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,CAAC;AAC/C,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAEnC,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAED,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/cli/report.d.ts

@@ -0,0 +1,6 @@
+import type { ChangeSet, RiskAssessment, VerificationResult } from "../core/types/index.js";
+export declare function printBanner(version: string): void;
+export declare function hasFailed(result: VerificationResult): boolean;
+export declare function printChangeReport(changeSet: ChangeSet): void;
+export declare function printRiskReport(risk: RiskAssessment): void;
+export declare function printVerificationReport(result: VerificationResult): void;

package/dist/cli/report.js

@@ -0,0 +1,65 @@
+export function printBanner(version) {
+    console.log("");
+    console.log(`AI Verify v${version} — AI can generate code. AI Verify helps verify it.`);
+    console.log("------------------------------");
+}
+export function hasFailed(result) {
+    return result.checks.some((check) => check.status === "failed" || check.status === "error");
+}
+export function printChangeReport(changeSet) {
+    console.log(`Files changed : ${changeSet.files.length}`);
+    console.log(`Additions     : +${changeSet.totalAdditions}`);
+    console.log(`Deletions     : -${changeSet.totalDeletions}`);
+    console.log("");
+    if (changeSet.files.length === 0) {
+        console.log("No changes detected.");
+        return;
+    }
+    console.log("Changes:");
+    for (const file of changeSet.files) {
+        const language = file.language ?? "unknown";
+        console.log(`  ${file.changeType.padEnd(8)} ${file.path} (${language}) +${file.additions}/-${file.deletions}`);
+    }
+}
+export function printRiskReport(risk) {
+    console.log("");
+    console.log(`Risk: ${risk.level.toUpperCase()} (${risk.score})`);
+    if (risk.factors.length === 0) {
+        console.log("No risk factors.");
+        return;
+    }
+    console.log("Factors:");
+    for (const factor of risk.factors) {
+        console.log(`  +${factor.score} ${factor.name} — ${factor.reason}`);
+    }
+}
+const CHECK_ICONS = {
+    passed: "✓",
+    failed: "✗",
+    skipped: "-",
+    error: "!",
+};
+export function printVerificationReport(result) {
+    console.log("");
+    console.log(`Verification (${result.durationMs}ms)`);
+    if (result.checks.length === 0) {
+        console.log("No applicable verifiers for these changes.");
+    }
+    for (const check of result.checks) {
+        const icon = CHECK_ICONS[check.status] ?? "?";
+        const detail = check.findings.length > 0 ? `, ${check.findings.length} finding(s)` : "";
+        const reason = check.reason !== undefined && check.findings.length === 0
+            ? ` (${check.reason})`
+            : "";
+        console.log(`  ${icon} ${check.name} — ${check.status}${detail}${reason}`);
+    }
+    console.log(`Findings: ${result.findings.length}`);
+    for (const finding of result.findings.slice(0, 20)) {
+        const location = finding.file !== undefined
+            ? ` (${finding.file}${finding.line !== undefined ? `:${finding.line}` : ""})`
+            : "";
+        console.log(`  [${finding.severity.toUpperCase()}] ${finding.title}${location}`);
+    }
+    console.log(`Result: ${hasFailed(result) ? "FAILED" : "PASSED"}`);
+}
+//# sourceMappingURL=report.js.map

package/dist/cli/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../../src/cli/report.ts"],"names":[],"mappings":"AAMA,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,cAAc,OAAO,qDAAqD,CAAC,CAAC;IACxF,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAA0B;IAClD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CACvB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,CACjE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,SAAoB;IACpD,OAAO,CAAC,GAAG,CAAC,mBAAmB,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,oBAAoB,SAAS,CAAC,cAAc,EAAE,CAAC,CAAC;IAC5D,OAAO,CAAC,GAAG,CAAC,oBAAoB,SAAS,CAAC,cAAc,EAAE,CAAC,CAAC;IAC5D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACpC,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAExB,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC;QAE5C,OAAO,CAAC,GAAG,CACT,KAAK,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,MAAM,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,EAAE,CAClG,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAoB;IAClD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;IAEjE,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAChC,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAExB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACtE,CAAC;AACH,CAAC;AAED,MAAM,WAAW,GAA2B;IAC1C,MAAM,EAAE,GAAG;IACX,MAAM,EAAE,GAAG;IACX,OAAO,EAAE,GAAG;IACZ,KAAK,EAAE,GAAG;CACX,CAAC;AAEF,MAAM,UAAU,uBAAuB,CAAC,MAA0B;IAChE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,UAAU,KAAK,CAAC,CAAC;IAErD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;QAC9C,MAAM,MAAM,GACV,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,MAAM,MAAM,GACV,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YACvD,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM,GAAG;YACtB,CAAC,CAAC,EAAE,CAAC;QAET,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAEnD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QACnD,MAAM,QAAQ,GACZ,OAAO,CAAC,IAAI,KAAK,SAAS;YACxB,CAAC,CAAC,KAAK,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG;YAC7E,CAAC,CAAC,EAAE,CAAC;QAET,OAAO,CAAC,GAAG,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,KAAK,GAAG,QAAQ,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,WAAW,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;AACpE,CAAC"}

package/dist/cli/version.d.ts

@@ -0,0 +1 @@
+export declare function getVersion(): string;

package/dist/cli/version.js

@@ -0,0 +1,12 @@
+import { createRequire } from "node:module";
+export function getVersion() {
+    try {
+        const require = createRequire(import.meta.url);
+        const pkg = require("../../package.json");
+        return typeof pkg.version === "string" ? pkg.version : "unknown";
+    }
+    catch {
+        return "unknown";
+    }
+}
+//# sourceMappingURL=version.js.map

package/dist/cli/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/cli/version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,UAAU,UAAU;IACxB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,oBAAoB,CAA0B,CAAC;QAEnE,OAAO,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/core/orchestrator.d.ts

@@ -0,0 +1,17 @@
+import type { AnalysisRequest, ChangeSet, RiskAssessment, VerificationResult } from "./types/index.js";
+import type { Analyzer } from "../analyzer/analyzer.js";
+import type { RiskEngine } from "../risk/risk-engine.js";
+import type { Verifier } from "../verifier/verifier.js";
+export interface AnalysisOutput {
+    changeSet: ChangeSet;
+    risk: RiskAssessment;
+    verification: VerificationResult;
+}
+export declare class CoreOrchestrator {
+    private readonly analyzer;
+    private readonly riskEngine;
+    private readonly selectVerifiers;
+    constructor(analyzer: Analyzer, riskEngine: RiskEngine, selectVerifiers: (changeSet: ChangeSet) => Verifier[]);
+    analyze(request: AnalysisRequest): Promise<ChangeSet>;
+    run(request: AnalysisRequest): Promise<AnalysisOutput>;
+}

package/dist/core/orchestrator.js

@@ -0,0 +1,21 @@
+import { VerificationEngine } from "../verifier/engine.js";
+export class CoreOrchestrator {
+    analyzer;
+    riskEngine;
+    selectVerifiers;
+    constructor(analyzer, riskEngine, selectVerifiers) {
+        this.analyzer = analyzer;
+        this.riskEngine = riskEngine;
+        this.selectVerifiers = selectVerifiers;
+    }
+    async analyze(request) {
+        return this.analyzer.analyze(request);
+    }
+    async run(request) {
+        const changeSet = await this.analyze(request);
+        const risk = this.riskEngine.assess(changeSet);
+        const verification = await new VerificationEngine(this.selectVerifiers(changeSet)).run({ repositoryPath: request.repositoryPath, changeSet }, risk);
+        return { changeSet, risk, verification };
+    }
+}
+//# sourceMappingURL=orchestrator.js.map

package/dist/core/orchestrator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestrator.js","sourceRoot":"","sources":["../../src/core/orchestrator.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAS3D,MAAM,OAAO,gBAAgB;IAER,QAAQ;IACR,UAAU;IACV,eAAe;IAHlC,YACmB,QAAkB,EAClB,UAAsB,EACtB,eAAqD;wBAFrD,QAAQ;0BACR,UAAU;+BACV,eAAe;IAC/B,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,OAAwB;QACpC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAAwB;QAChC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,YAAY,GAAG,MAAM,IAAI,kBAAkB,CAC/C,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAChC,CAAC,GAAG,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,SAAS,EAAE,EAAE,IAAI,CAAC,CAAC;QAEnE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAC3C,CAAC;CACF"}

package/dist/core/types/analysis.d.ts

@@ -0,0 +1,6 @@
+import type { ChangeSet } from "./change.js";
+export interface AnalysisRequest {
+    repositoryPath: string;
+    changeSet?: ChangeSet;
+    includeUncommittedChanges: boolean;
+}

package/dist/core/types/analysis.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=analysis.js.map

package/dist/core/types/analysis.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analysis.js","sourceRoot":"","sources":["../../../src/core/types/analysis.ts"],"names":[],"mappings":""}

package/dist/core/types/change.d.ts

@@ -0,0 +1,15 @@
+export type ChangeType = "added" | "modified" | "deleted" | "renamed";
+export type ChangeSource = "human" | "ai" | "mixed" | "unknown";
+export interface FileChange {
+    path: string;
+    changeType: ChangeType;
+    additions: number;
+    deletions: number;
+    source: ChangeSource;
+    language?: string;
+}
+export interface ChangeSet {
+    files: FileChange[];
+    totalAdditions: number;
+    totalDeletions: number;
+}

package/dist/core/types/change.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=change.js.map

package/dist/core/types/change.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"change.js","sourceRoot":"","sources":["../../../src/core/types/change.ts"],"names":[],"mappings":""}

package/dist/core/types/finding.d.ts

@@ -0,0 +1,15 @@
+export type Severity = "info" | "low" | "medium" | "high" | "critical";
+export type FindingCategory = "security" | "quality" | "reliability" | "dependency" | "configuration" | "test" | "unknown";
+export type FindingSource = "typecheck" | "lint" | "test" | "sast" | "dependency" | "secret" | "llm" | "unknown";
+export interface Finding {
+    id: string;
+    title: string;
+    description: string;
+    severity: Severity;
+    category: FindingCategory;
+    source: FindingSource;
+    file?: string;
+    line?: number;
+    ruleId?: string;
+    remediation?: string;
+}

package/dist/core/types/finding.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=finding.js.map

package/dist/core/types/finding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding.js","sourceRoot":"","sources":["../../../src/core/types/finding.ts"],"names":[],"mappings":""}

package/dist/core/types/index.d.ts

@@ -0,0 +1,5 @@
+export type { AnalysisRequest, } from "./analysis.js";
+export type { ChangeType, ChangeSource, FileChange, ChangeSet, } from "./change.js";
+export type { Severity, FindingCategory, FindingSource, Finding, } from "./finding.js";
+export type { RiskLevel, RiskFactor, RiskAssessment, } from "./risk.js";
+export type { VerificationStatus, VerificationCheck, VerificationResult, } from "./verification.js";

package/dist/core/types/index.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.js.map

package/dist/core/types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/types/index.ts"],"names":[],"mappings":""}

package/dist/core/types/risk.d.ts

@@ -0,0 +1,11 @@
+export type RiskLevel = "none" | "low" | "medium" | "high" | "critical";
+export interface RiskFactor {
+    name: string;
+    score: number;
+    reason: string;
+}
+export interface RiskAssessment {
+    score: number;
+    level: RiskLevel;
+    factors: RiskFactor[];
+}

package/dist/core/types/risk.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=risk.js.map

package/dist/core/types/risk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk.js","sourceRoot":"","sources":["../../../src/core/types/risk.ts"],"names":[],"mappings":""}

package/dist/core/types/verification.d.ts

@@ -0,0 +1,17 @@
+import type { Finding } from "./finding.js";
+import type { RiskAssessment } from "./risk.js";
+export type VerificationStatus = "passed" | "failed" | "skipped" | "error";
+export interface VerificationCheck {
+    id: string;
+    name: string;
+    status: VerificationStatus;
+    durationMs: number;
+    findings: Finding[];
+    reason?: string;
+}
+export interface VerificationResult {
+    checks: VerificationCheck[];
+    findings: Finding[];
+    risk: RiskAssessment;
+    durationMs: number;
+}

package/dist/core/types/verification.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=verification.js.map

package/dist/core/types/verification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification.js","sourceRoot":"","sources":["../../../src/core/types/verification.ts"],"names":[],"mappings":""}

package/dist/risk/index.d.ts

@@ -0,0 +1,4 @@
+export { RiskEngineV01 } from "./risk-engine.js";
+export type { RiskEngine } from "./risk-engine.js";
+export { scoreToLevel } from "./levels.js";
+export { collectRiskFactors } from "./rules.js";

package/dist/risk/index.js

@@ -0,0 +1,4 @@
+export { RiskEngineV01 } from "./risk-engine.js";
+export { scoreToLevel } from "./levels.js";
+export { collectRiskFactors } from "./rules.js";
+//# sourceMappingURL=index.js.map

package/dist/risk/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/risk/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC"}

package/dist/risk/levels.d.ts

@@ -0,0 +1,2 @@
+import type { RiskLevel } from "../core/types/index.js";
+export declare function scoreToLevel(score: number): RiskLevel;

package/dist/risk/levels.js

@@ -0,0 +1,16 @@
+export function scoreToLevel(score) {
+    if (score <= 0) {
+        return "none";
+    }
+    if (score < 30) {
+        return "low";
+    }
+    if (score < 60) {
+        return "medium";
+    }
+    if (score < 90) {
+        return "high";
+    }
+    return "critical";
+}
+//# sourceMappingURL=levels.js.map

package/dist/risk/levels.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"levels.js","sourceRoot":"","sources":["../../src/risk/levels.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACf,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,KAAK,GAAG,EAAE,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,KAAK,GAAG,EAAE,EAAE,CAAC;QACf,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,KAAK,GAAG,EAAE,EAAE,CAAC;QACf,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/risk/risk-engine.d.ts

@@ -0,0 +1,7 @@
+import type { ChangeSet, RiskAssessment } from "../core/types/index.js";
+export interface RiskEngine {
+    assess(changeSet: ChangeSet): RiskAssessment;
+}
+export declare class RiskEngineV01 implements RiskEngine {
+    assess(changeSet: ChangeSet): RiskAssessment;
+}

package/dist/risk/risk-engine.js

@@ -0,0 +1,15 @@
+import { scoreToLevel } from "./levels.js";
+import { collectRiskFactors } from "./rules.js";
+export class RiskEngineV01 {
+    assess(changeSet) {
+        const factors = collectRiskFactors(changeSet);
+        const raw = factors.reduce((total, factor) => total + factor.score, 0);
+        const score = Math.min(100, Math.max(0, raw));
+        return {
+            score,
+            level: scoreToLevel(score),
+            factors,
+        };
+    }
+}
+//# sourceMappingURL=risk-engine.js.map

package/dist/risk/risk-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk-engine.js","sourceRoot":"","sources":["../../src/risk/risk-engine.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAMhD,MAAM,OAAO,aAAa;IACxB,MAAM,CAAC,SAAoB;QACzB,MAAM,OAAO,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;QAE9C,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAE9C,OAAO;YACL,KAAK;YACL,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC;YAC1B,OAAO;SACR,CAAC;IACJ,CAAC;CACF"}

package/dist/risk/rules.d.ts

@@ -0,0 +1,2 @@
+import type { ChangeSet, RiskFactor } from "../core/types/index.js";
+export declare function collectRiskFactors(changeSet: ChangeSet): RiskFactor[];

package/dist/risk/rules.js

@@ -0,0 +1,137 @@
+const PATH_RULES = [
+    {
+        name: "Authentication change",
+        score: 30,
+        reason: "Touches authentication or authorization logic",
+        patterns: [
+            /auth/i,
+            /login|logout/i,
+            /session/i,
+            /password/i,
+            /oauth/i,
+            /\bjwt\b/i,
+            /\btoken\b/i,
+            /\bmfa\b/i,
+            /permission|\brole\b|\bacl\b|identity/i,
+        ],
+    },
+    {
+        name: "Payment change",
+        score: 30,
+        reason: "Touches payment or billing logic",
+        patterns: [
+            /payment|billing|checkout|stripe|invoice|transaction|subscription|payout|refund/i,
+        ],
+    },
+    {
+        name: "Secrets touched",
+        score: 30,
+        reason: "Touches secrets or credentials",
+        patterns: [
+            /secret|credential/i,
+            /\.pem$|\.key$/i,
+            /private[_-]?key/i,
+            /vault/i,
+            /(^|\/)\.env(\.|$)/i,
+        ],
+    },
+    {
+        name: "Database change",
+        score: 25,
+        reason: "Touches database schema, migration, or query logic",
+        patterns: [
+            /migrat|prisma|\.sql$/i,
+            /database|\/db\/|^db\//i,
+            /repository|seed/i,
+        ],
+    },
+    {
+        name: "Security-sensitive file",
+        score: 20,
+        reason: "Touches security-sensitive code",
+        patterns: [/crypto|cipher|\bhash\b|cert|\btls\b|\bssl\b|security|sanitiz|xss|csrf|inject/i],
+    },
+    {
+        name: "Configuration / infra change",
+        score: 15,
+        reason: "Touches configuration or infrastructure",
+        patterns: [
+            /dockerfile|docker-compose/i,
+            /\.github\/workflows/i,
+            /terraform|\.tf$/i,
+            /k8s|kubernetes|nginx/i,
+            /^infra\/|^config\//i,
+        ],
+    },
+];
+const TEST_PATH = /__tests__|[/]tests?[/]|\.test\.|\.spec\.|_test\.go$|test_.*\.py$/i;
+function isTestFile(filePath) {
+    return TEST_PATH.test(filePath);
+}
+function isCodeFile(language) {
+    return language !== undefined;
+}
+function collectPathFactors(changeSet) {
+    const factors = [];
+    for (const rule of PATH_RULES) {
+        const matched = changeSet.files
+            .map((file) => file.path)
+            .filter((filePath) => rule.patterns.some((pattern) => pattern.test(filePath)));
+        if (matched.length === 0) {
+            continue;
+        }
+        factors.push({
+            name: rule.name,
+            score: rule.score,
+            reason: `${rule.reason}: ${matched.slice(0, 5).join(", ")}`,
+        });
+    }
+    return factors;
+}
+function collectTestFactor(changeSet) {
+    const codeChanged = changeSet.files.some((file) => isCodeFile(file.language));
+    if (!codeChanged) {
+        return [];
+    }
+    const testChanged = changeSet.files.some((file) => isTestFile(file.path));
+    if (testChanged) {
+        return [];
+    }
+    return [
+        {
+            name: "No related tests",
+            score: 12,
+            reason: "Code changed without accompanying test changes",
+        },
+    ];
+}
+function collectSizeFactor(changeSet) {
+    const total = changeSet.totalAdditions + changeSet.totalDeletions;
+    if (total > 500) {
+        return [
+            {
+                name: "Large change",
+                score: 10,
+                reason: `Change spans ${total} lines`,
+            },
+        ];
+    }
+    if (total > 200) {
+        return [
+            {
+                name: "Medium-large change",
+                score: 5,
+                reason: `Change spans ${total} lines`,
+            },
+        ];
+    }
+    return [];
+}
+export function collectRiskFactors(changeSet) {
+    return [
+        ...collectPathFactors(changeSet),
+        ...collectTestFactor(changeSet),
+        ...collectSizeFactor(changeSet),
+    ];
+}
+//# sourceMappingURL=rules.js.map

package/dist/risk/rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../../src/risk/rules.ts"],"names":[],"mappings":"AASA,MAAM,UAAU,GAAe;IAC7B;QACE,IAAI,EAAE,uBAAuB;QAC7B,KAAK,EAAE,EAAE;QACT,MAAM,EAAE,+CAA+C;QACvD,QAAQ,EAAE;YACR,OAAO;YACP,eAAe;YACf,UAAU;YACV,WAAW;YACX,QAAQ;YACR,UAAU;YACV,YAAY;YACZ,UAAU;YACV,uCAAuC;SACxC;KACF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,EAAE;QACT,MAAM,EAAE,kCAAkC;QAC1C,QAAQ,EAAE;YACR,iFAAiF;SAClF;KACF;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,KAAK,EAAE,EAAE;QACT,MAAM,EAAE,gCAAgC;QACxC,QAAQ,EAAE;YACR,oBAAoB;YACpB,gBAAgB;YAChB,kBAAkB;YAClB,QAAQ;YACR,oBAAoB;SACrB;KACF;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,KAAK,EAAE,EAAE;QACT,MAAM,EAAE,oDAAoD;QAC5D,QAAQ,EAAE;YACR,uBAAuB;YACvB,wBAAwB;YACxB,kBAAkB;SACnB;KACF;IACD;QACE,IAAI,EAAE,yBAAyB;QAC/B,KAAK,EAAE,EAAE;QACT,MAAM,EAAE,iCAAiC;QACzC,QAAQ,EAAE,CAAC,+EAA+E,CAAC;KAC5F;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,KAAK,EAAE,EAAE;QACT,MAAM,EAAE,yCAAyC;QACjD,QAAQ,EAAE;YACR,4BAA4B;YAC5B,sBAAsB;YACtB,kBAAkB;YAClB,uBAAuB;YACvB,qBAAqB;SACtB;KACF;CACF,CAAC;AAEF,MAAM,SAAS,GAAG,mEAAmE,CAAC;AAEtF,SAAS,UAAU,CAAC,QAAgB;IAClC,OAAO,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,UAAU,CAAC,QAA4B;IAC9C,OAAO,QAAQ,KAAK,SAAS,CAAC;AAChC,CAAC;AAED,SAAS,kBAAkB,CAAC,SAAoB;IAC9C,MAAM,OAAO,GAAiB,EAAE,CAAC;IAEjC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK;aAC5B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;aACxB,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CACnB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CACxD,CAAC;QAEJ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,SAAS;QACX,CAAC;QAED,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC5D,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAoB;IAC7C,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAChD,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAC1B,CAAC;IAEF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAChD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CACtB,CAAC;IAEF,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO;QACL;YACE,IAAI,EAAE,kBAAkB;YACxB,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,gDAAgD;SACzD;KACF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAoB;IAC7C,MAAM,KAAK,GAAG,SAAS,CAAC,cAAc,GAAG,SAAS,CAAC,cAAc,CAAC;IAElE,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;QAChB,OAAO;YACL;gBACE,IAAI,EAAE,cAAc;gBACpB,KAAK,EAAE,EAAE;gBACT,MAAM,EAAE,gBAAgB,KAAK,QAAQ;aACtC;SACF,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;QAChB,OAAO;YACL;gBACE,IAAI,EAAE,qBAAqB;gBAC3B,KAAK,EAAE,CAAC;gBACR,MAAM,EAAE,gBAAgB,KAAK,QAAQ;aACtC;SACF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,SAAoB;IACrD,OAAO;QACL,GAAG,kBAAkB,CAAC,SAAS,CAAC;QAChC,GAAG,iBAAiB,CAAC,SAAS,CAAC;QAC/B,GAAG,iBAAiB,CAAC,SAAS,CAAC;KAChC,CAAC;AACJ,CAAC"}

package/dist/verifier/engine.d.ts

@@ -0,0 +1,7 @@
+import type { RiskAssessment, VerificationResult } from "../core/types/index.js";
+import type { Verifier, VerifierContext } from "./verifier.js";
+export declare class VerificationEngine {
+    private readonly verifiers;
+    constructor(verifiers: Verifier[]);
+    run(context: VerifierContext, risk: RiskAssessment): Promise<VerificationResult>;
+}

package/dist/verifier/engine.js

@@ -0,0 +1,20 @@
+export class VerificationEngine {
+    verifiers;
+    constructor(verifiers) {
+        this.verifiers = verifiers;
+    }
+    async run(context, risk) {
+        const start = Date.now();
+        const checks = [];
+        for (const verifier of this.verifiers) {
+            checks.push(await verifier.run(context));
+        }
+        return {
+            checks,
+            findings: checks.flatMap((check) => check.findings),
+            risk,
+            durationMs: Date.now() - start,
+        };
+    }
+}
+//# sourceMappingURL=engine.js.map

package/dist/verifier/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../src/verifier/engine.ts"],"names":[],"mappings":"AAIA,MAAM,OAAO,kBAAkB;IACA,SAAS;IAAtC,YAA6B,SAAqB;yBAArB,SAAS;IAAe,CAAC;IAEtD,KAAK,CAAC,GAAG,CACP,OAAwB,EACxB,IAAoB;QAEpB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,MAAM,MAAM,GAAG,EAAE,CAAC;QAClB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO;YACL,MAAM;YACN,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;YACnD,IAAI;YACJ,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;SAC/B,CAAC;IACJ,CAAC;CACF"}

package/dist/verifier/index.d.ts

@@ -0,0 +1,4 @@
+export { VerificationEngine } from "./engine.js";
+export { TypeCheckVerifier } from "./typecheck.js";
+export { selectVerifiers } from "./select.js";
+export type { Verifier, VerifierContext } from "./verifier.js";

package/dist/verifier/index.js

@@ -0,0 +1,4 @@
+export { VerificationEngine } from "./engine.js";
+export { TypeCheckVerifier } from "./typecheck.js";
+export { selectVerifiers } from "./select.js";
+//# sourceMappingURL=index.js.map

package/dist/verifier/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/verifier/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC"}

package/dist/verifier/select.d.ts

@@ -0,0 +1,3 @@
+import type { ChangeSet } from "../core/types/index.js";
+import type { Verifier } from "./verifier.js";
+export declare function selectVerifiers(changeSet: ChangeSet): Verifier[];

package/dist/verifier/select.js

@@ -0,0 +1,10 @@
+import { TypeCheckVerifier, isTypeScriptFile } from "./typecheck.js";
+export function selectVerifiers(changeSet) {
+    const verifiers = [];
+    const touchesTypeScript = changeSet.files.some((file) => isTypeScriptFile(file.path, file.language));
+    if (touchesTypeScript) {
+        verifiers.push(new TypeCheckVerifier());
+    }
+    return verifiers;
+}
+//# sourceMappingURL=select.js.map

package/dist/verifier/select.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"select.js","sourceRoot":"","sources":["../../src/verifier/select.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAGrE,MAAM,UAAU,eAAe,CAAC,SAAoB;IAClD,MAAM,SAAS,GAAe,EAAE,CAAC;IAEjC,MAAM,iBAAiB,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACtD,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAC3C,CAAC;IAEF,IAAI,iBAAiB,EAAE,CAAC;QACtB,SAAS,CAAC,IAAI,CAAC,IAAI,iBAAiB,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/verifier/typecheck.d.ts

@@ -0,0 +1,8 @@
+import type { VerificationCheck } from "../core/types/index.js";
+import type { Verifier, VerifierContext } from "./verifier.js";
+export declare function isTypeScriptFile(filePath: string, language: string | undefined): boolean;
+export declare class TypeCheckVerifier implements Verifier {
+    readonly id = "typecheck";
+    readonly name = "Type Check";
+    run(context: VerifierContext): Promise<VerificationCheck>;
+}

package/dist/verifier/typecheck.js

@@ -0,0 +1,114 @@
+import { execFile } from "node:child_process";
+import { stat } from "node:fs/promises";
+import { promisify } from "node:util";
+const execFileAsync = promisify(execFile);
+const TSC_ERROR_LINE = /^(.+?)\((\d+),(\d+)\):\s+error\s+(TS\d+):\s+(.*)$/;
+export function isTypeScriptFile(filePath, language) {
+    if (language === "typescript") {
+        return true;
+    }
+    return /\.(ts|tsx|mts|cts)$/i.test(filePath);
+}
+function parseFinding(line, index) {
+    const match = TSC_ERROR_LINE.exec(line.trim());
+    if (!match) {
+        return undefined;
+    }
+    const [, filePath, lineStr, , code, message] = match;
+    if (!filePath || !lineStr || !code || !message) {
+        return undefined;
+    }
+    const parsedLine = Number.parseInt(lineStr, 10);
+    const finding = {
+        id: `typecheck-${index + 1}`,
+        title: `${code}: ${message}`,
+        description: `TypeScript error ${code} in ${filePath}`,
+        severity: "high",
+        category: "reliability",
+        source: "typecheck",
+        file: filePath,
+        ruleId: code,
+    };
+    if (!Number.isNaN(parsedLine)) {
+        finding.line = parsedLine;
+    }
+    return finding;
+}
+async function isAccessibleDirectory(path) {
+    try {
+        return (await stat(path)).isDirectory();
+    }
+    catch {
+        return false;
+    }
+}
+async function isTscAvailable(repositoryPath) {
+    try {
+        await execFileAsync("npx", ["--no-install", "tsc", "--version"], {
+            cwd: repositoryPath,
+            timeout: 60_000,
+        });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export class TypeCheckVerifier {
+    id = "typecheck";
+    name = "Type Check";
+    async run(context) {
+        const start = Date.now();
+        const finish = (status, findings = [], reason) => {
+            if (reason === undefined) {
+                return {
+                    id: this.id,
+                    name: this.name,
+                    status,
+                    durationMs: Date.now() - start,
+                    findings,
+                };
+            }
+            return {
+                id: this.id,
+                name: this.name,
+                status,
+                durationMs: Date.now() - start,
+                findings,
+                reason,
+            };
+        };
+        const touchesTypeScript = context.changeSet.files.some((file) => isTypeScriptFile(file.path, file.language));
+        if (!touchesTypeScript) {
+            return finish("skipped", [], "No TypeScript files changed.");
+        }
+        if (!(await isAccessibleDirectory(context.repositoryPath))) {
+            return finish("error", [], `Cannot access repository path: ${context.repositoryPath}`);
+        }
+        if (!(await isTscAvailable(context.repositoryPath))) {
+            return finish("skipped", [], "TypeScript compiler (tsc) is not available in this repository.");
+        }
+        try {
+            await execFileAsync("npx", ["--no-install", "tsc", "--noEmit"], {
+                cwd: context.repositoryPath,
+                timeout: 120_000,
+            });
+            return finish("passed");
+        }
+        catch (error) {
+            if (error !== null &&
+                typeof error === "object" &&
+                "stdout" in error &&
+                typeof error.stdout === "string" &&
+                error.stdout.trim() !== "") {
+                const findings = error.stdout
+                    .split("\n")
+                    .map((line, index) => parseFinding(line, index))
+                    .filter((finding) => finding !== undefined);
+                return finish("failed", findings);
+            }
+            return finish("error", [], "Type check execution failed before producing output.");
+        }
+    }
+}
+//# sourceMappingURL=typecheck.js.map

package/dist/verifier/typecheck.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"typecheck.js","sourceRoot":"","sources":["../../src/verifier/typecheck.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAMtC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,cAAc,GAAG,mDAAmD,CAAC;AAE3E,MAAM,UAAU,gBAAgB,CAC9B,QAAgB,EAChB,QAA4B;IAE5B,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,sBAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,KAAa;IAC/C,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAE/C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,AAAD,EAAG,IAAI,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC;IAErD,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAEhD,MAAM,OAAO,GAAY;QACvB,EAAE,EAAE,aAAa,KAAK,GAAG,CAAC,EAAE;QAC5B,KAAK,EAAE,GAAG,IAAI,KAAK,OAAO,EAAE;QAC5B,WAAW,EAAE,oBAAoB,IAAI,OAAO,QAAQ,EAAE;QACtD,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,WAAW;QACnB,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,IAAI;KACb,CAAC;IAEF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,IAAI,GAAG,UAAU,CAAC;IAC5B,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,IAAY;IAC/C,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,cAAsB;IAClD,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,cAAc,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE;YAC/D,GAAG,EAAE,cAAc;YACnB,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,OAAO,iBAAiB;IACnB,EAAE,GAAG,WAAW,CAAC;IACjB,IAAI,GAAG,YAAY,CAAC;IAE7B,KAAK,CAAC,GAAG,CAAC,OAAwB;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,CACb,MAAmC,EACnC,QAAQ,GAAc,EAAE,EACxB,MAAe,EACI,EAAE;YACrB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO;oBACL,EAAE,EAAE,IAAI,CAAC,EAAE;oBACX,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,MAAM;oBACN,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;oBAC9B,QAAQ;iBACT,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM;gBACN,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;gBAC9B,QAAQ;gBACR,MAAM;aACP,CAAC;QACJ,CAAC,CAAC;QAEF,MAAM,iBAAiB,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAC9D,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAC3C,CAAC;QAEF,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,OAAO,MAAM,CAAC,SAAS,EAAE,EAAE,EAAE,8BAA8B,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,CAAC,CAAC,MAAM,qBAAqB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;YAC3D,OAAO,MAAM,CACX,OAAO,EACP,EAAE,EACF,kCAAkC,OAAO,CAAC,cAAc,EAAE,CAC3D,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;YACpD,OAAO,MAAM,CACX,SAAS,EACT,EAAE,EACF,gEAAgE,CACjE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,cAAc,EAAE,KAAK,EAAE,UAAU,CAAC,EAAE;gBAC9D,GAAG,EAAE,OAAO,CAAC,cAAc;gBAC3B,OAAO,EAAE,OAAO;aACjB,CAAC,CAAC;YAEH,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IACE,KAAK,KAAK,IAAI;gBACd,OAAO,KAAK,KAAK,QAAQ;gBACzB,QAAQ,IAAI,KAAK;gBACjB,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;gBAChC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAC1B,CAAC;gBACD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM;qBAC1B,KAAK,CAAC,IAAI,CAAC;qBACX,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;qBAC/C,MAAM,CAAC,CAAC,OAAO,EAAsB,EAAE,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC;gBAElE,OAAO,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACpC,CAAC;YAED,OAAO,MAAM,CACX,OAAO,EACP,EAAE,EACF,sDAAsD,CACvD,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/verifier/verifier.d.ts

@@ -0,0 +1,10 @@
+import type { ChangeSet, VerificationCheck } from "../core/types/index.js";
+export interface VerifierContext {
+    repositoryPath: string;
+    changeSet: ChangeSet;
+}
+export interface Verifier {
+    readonly id: string;
+    readonly name: string;
+    run(context: VerifierContext): Promise<VerificationCheck>;
+}

package/dist/verifier/verifier.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=verifier.js.map

package/dist/verifier/verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifier.js","sourceRoot":"","sources":["../../src/verifier/verifier.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,43 @@
+{
+  "name": "@fisaabil_/ai-verify",
+  "version": "0.1.0",
+  "description": "Open-source, risk-adaptive verification infrastructure for AI-generated software",
+  "main": "./dist/cli/index.js",
+  "files": [
+    "dist/",
+    "README.md"
+  ],
+  "scripts": {
+    "test": "vitest run",
+    "check": "tsc --noEmit",
+    "build": "tsc",
+    "dev": "tsx src/cli/index.ts",
+    "start": "node dist/cli/index.js",
+    "prepublishOnly": "npm run check && npm run test && npm run build"
+  },
+  "keywords": [
+    "ai",
+    "verification",
+    "code-review",
+    "static-analysis",
+    "devtools",
+    "cli"
+  ],
+  "author": "Muhammad Fisabilillah",
+  "license": "ISC",
+  "type": "module",
+  "engines": {
+    "node": ">=18"
+  },
+  "bin": {
+    "ai-verify": "dist/cli/index.js"
+  },
+  "devDependencies": {
+    "@types/node": "^26.4.1",
+    "eslint": "^10.10.0",
+    "prettier": "^3.9.6",
+    "tsx": "^4.23.13",
+    "typescript": "^7.0.2",
+    "vitest": "^5.0.0"
+  }
+}