@fro.bot/systematic 3.17.0 → 3.18.1

package/dist/index.js

@@ -19,7 +19,7 @@ import {
   extractCommandFrontmatter,
   findSkillsInDir,
   discoverSkills
-} from "./index-y33enbkc.js";
+} from "./index-v8y6h7y4.js";
 
 // src/index.ts
 import { createHash as createHash4 } from "crypto";

package/dist/lib/review-artifact-schema.d.ts

@@ -1,10 +1,11 @@
 import { z } from 'zod';
-export declare const REVIEW_ARTIFACT_CUSTOM_MESSAGES: readonly ['severity count must match rejected finding count', 'filtered findings require a validation reason', 'risk-critical dispatches require a non-empty selection surface', 'satisfied risk coverage requires a citing input finding ID', 'unsatisfied risk coverage must not cite an input finding ID', 'passed validation must not include a reason; non-passed validation requires a reason'];
+export declare const REVIEW_ARTIFACT_CUSTOM_MESSAGES: readonly ['severity count must match rejected finding count', 'filtered findings require a validation reason', 'risk-critical dispatches require a non-empty selection surface', 'satisfied risk coverage requires a citing input finding ID', 'unsatisfied risk coverage must not cite an input finding ID', 'passed validation must not include a reason; non-passed validation requires a reason', 'validation_unavailable dispatches must record zero input findings', 'a completed run must not contain validation_unavailable evidence', 'a validation_unavailable persona must not have an input finding', 'every synthesized input finding ID must resolve to an admitted ledger row', 'every provenance submitter must be represented by a cited admitted ledger row', 'satisfied risk coverage must cite an admitted ledger row', 'duplicate admitted input finding IDs are not allowed', 'every cited admitted reviewer must appear in provenance.submitters', 'provenance.submitters must not contain duplicate reviewers', 'provenance.agreement_credit must not contain duplicate reviewers', 'provenance.agreement_credit must not overlap provenance.submitters', 'provenance.agreement_credit requires an eligible returned persona with admitted evidence', 'satisfied risk coverage must cite a validated finding on the lost persona selection surface', 'satisfied risk coverage must cite an admitted ledger row owned by another persona'];
 export declare const DispatchOutcomeSchema: z.ZodEnum<{
     empty: "empty";
     findings: "findings";
     malformed: "malformed";
     never_returned: "never_returned";
+    validation_unavailable: "validation_unavailable";
 }>;
 export declare const DispositionSchema: z.ZodEnum<{
     filtered: "filtered";
@@ -131,6 +132,7 @@ export declare const ReviewArtifactSchema: z.ZodObject<{
             findings: "findings";
             malformed: "malformed";
             never_returned: "never_returned";
+            validation_unavailable: "validation_unavailable";
         }>;
         input_finding_count: z.ZodNumber;
         rejection_reason: z.ZodOptional<z.ZodString>;
@@ -266,4 +268,172 @@ export declare const ReviewArtifactSchema: z.ZodObject<{
     }, z.core.$strict>>;
 }, z.core.$strict>;
 export type ReviewArtifact = z.infer<typeof ReviewArtifactSchema>;
+/** A single finding as returned by a reviewer persona. */
+export declare const SubAgentFindingSchema: z.ZodObject<{
+    title: z.ZodString;
+    severity: z.ZodEnum<{
+        P0: "P0";
+        P1: "P1";
+        P2: "P2";
+        P3: "P3";
+    }>;
+    file: z.ZodString;
+    line: z.ZodNumber;
+    why_it_matters: z.ZodString;
+    autofix_class: z.ZodEnum<{
+        advisory: "advisory";
+        gated_auto: "gated_auto";
+        manual: "manual";
+        safe_auto: "safe_auto";
+    }>;
+    owner: z.ZodEnum<{
+        "downstream-resolver": "downstream-resolver";
+        human: "human";
+        release: "release";
+        "review-fixer": "review-fixer";
+    }>;
+    requires_verification: z.ZodBoolean;
+    suggested_fix: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    confidence: z.ZodNumber;
+    evidence: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        overflow: z.ZodLiteral<true>;
+        excerpt: z.ZodString;
+    }, z.core.$strict>]>>;
+    pre_existing: z.ZodBoolean;
+}, z.core.$strict>;
+/** A finding after the parent adds its disposition; parent-owned. */
+export declare const ParentFindingSchema: z.ZodObject<{
+    title: z.ZodString;
+    severity: z.ZodEnum<{
+        P0: "P0";
+        P1: "P1";
+        P2: "P2";
+        P3: "P3";
+    }>;
+    file: z.ZodString;
+    line: z.ZodNumber;
+    why_it_matters: z.ZodString;
+    autofix_class: z.ZodEnum<{
+        advisory: "advisory";
+        gated_auto: "gated_auto";
+        manual: "manual";
+        safe_auto: "safe_auto";
+    }>;
+    owner: z.ZodEnum<{
+        "downstream-resolver": "downstream-resolver";
+        human: "human";
+        release: "release";
+        "review-fixer": "review-fixer";
+    }>;
+    requires_verification: z.ZodBoolean;
+    suggested_fix: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    confidence: z.ZodNumber;
+    evidence: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        overflow: z.ZodLiteral<true>;
+        excerpt: z.ZodString;
+    }, z.core.$strict>]>>;
+    pre_existing: z.ZodBoolean;
+    disposition: z.ZodEnum<{
+        filtered: "filtered";
+        merged: "merged";
+        rejected: "rejected";
+        suppressed: "suppressed";
+        surviving: "surviving";
+    }>;
+}, z.core.$strict>;
+/** The raw return contract a reviewer persona must satisfy. */
+export declare const SubAgentReturnSchema: z.ZodObject<{
+    reviewer: z.ZodString;
+    findings: z.ZodArray<z.ZodObject<{
+        title: z.ZodString;
+        severity: z.ZodEnum<{
+            P0: "P0";
+            P1: "P1";
+            P2: "P2";
+            P3: "P3";
+        }>;
+        file: z.ZodString;
+        line: z.ZodNumber;
+        why_it_matters: z.ZodString;
+        autofix_class: z.ZodEnum<{
+            advisory: "advisory";
+            gated_auto: "gated_auto";
+            manual: "manual";
+            safe_auto: "safe_auto";
+        }>;
+        owner: z.ZodEnum<{
+            "downstream-resolver": "downstream-resolver";
+            human: "human";
+            release: "release";
+            "review-fixer": "review-fixer";
+        }>;
+        requires_verification: z.ZodBoolean;
+        suggested_fix: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        confidence: z.ZodNumber;
+        evidence: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+            overflow: z.ZodLiteral<true>;
+            excerpt: z.ZodString;
+        }, z.core.$strict>]>>;
+        pre_existing: z.ZodBoolean;
+    }, z.core.$strict>>;
+    residual_risks: z.ZodArray<z.ZodString>;
+    testing_gaps: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+/** The parent-persisted record contract; adds harness and dispatch outcome. */
+export declare const ParentRecordSchema: z.ZodObject<{
+    reviewer: z.ZodString;
+    harness: z.ZodEnum<{
+        "claude-code": "claude-code";
+        opencode: "opencode";
+        pi: "pi";
+    }>;
+    dispatch_outcome: z.ZodEnum<{
+        empty: "empty";
+        findings: "findings";
+        malformed: "malformed";
+        never_returned: "never_returned";
+        validation_unavailable: "validation_unavailable";
+    }>;
+    findings: z.ZodArray<z.ZodObject<{
+        title: z.ZodString;
+        severity: z.ZodEnum<{
+            P0: "P0";
+            P1: "P1";
+            P2: "P2";
+            P3: "P3";
+        }>;
+        file: z.ZodString;
+        line: z.ZodNumber;
+        why_it_matters: z.ZodString;
+        autofix_class: z.ZodEnum<{
+            advisory: "advisory";
+            gated_auto: "gated_auto";
+            manual: "manual";
+            safe_auto: "safe_auto";
+        }>;
+        owner: z.ZodEnum<{
+            "downstream-resolver": "downstream-resolver";
+            human: "human";
+            release: "release";
+            "review-fixer": "review-fixer";
+        }>;
+        requires_verification: z.ZodBoolean;
+        suggested_fix: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        confidence: z.ZodNumber;
+        evidence: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+            overflow: z.ZodLiteral<true>;
+            excerpt: z.ZodString;
+        }, z.core.$strict>]>>;
+        pre_existing: z.ZodBoolean;
+        disposition: z.ZodEnum<{
+            filtered: "filtered";
+            merged: "merged";
+            rejected: "rejected";
+            suppressed: "suppressed";
+            surviving: "surviving";
+        }>;
+    }, z.core.$strict>>;
+    residual_risks: z.ZodArray<z.ZodString>;
+    testing_gaps: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
 export {};

package/dist/lib/review-return-validator.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Bounded, no-write structural validator for a single raw `ce:review` persona
+ * return read from stdin.
+ *
+ * The runner is deliberately synchronous to match `runLegacyCli`'s shape and to
+ * avoid a temp-file or async stdin dance. Behavior is injectable (argv, fd,
+ * TTY, chunk reader, sinks) so tests can exercise real code paths without
+ * mutating global state.
+ */
+export declare const VALIDATE_REVIEW_RETURN_USAGE = "Usage: systematic validate-review-return";
+/** Input cap in bytes. Reads stop at {@link MAX_REVIEW_RETURN_BYTES} plus one. */
+export declare const MAX_REVIEW_RETURN_BYTES: number;
+/** Maximum number of projected issue lines emitted before the summary. */
+export declare const MAX_PROJECTED_ISSUE_LINES = 8;
+export declare const REVIEW_RETURN_VALID_MESSAGE = "Review return is valid";
+export declare const REVIEW_RETURN_EMPTY_MESSAGE = "Review return is empty";
+export declare const REVIEW_RETURN_INVALID_UTF8_MESSAGE = "Review return is not valid UTF-8";
+export declare const REVIEW_RETURN_MALFORMED_JSON_MESSAGE = "Review return is not valid JSON";
+export declare const REVIEW_RETURN_OVERSIZED_MESSAGE = "Review return exceeds the 1 MiB input limit";
+export declare const REVIEW_RETURN_READ_FAILED_MESSAGE = "Review return could not be read from stdin";
+export declare const REVIEW_RETURN_TTY_MESSAGE = "validate-review-return reads one JSON document from stdin; interactive input is not supported";
+/** One bounded, payload-safe projected validation issue. */
+export interface ReviewReturnIssue {
+    readonly path: string;
+    readonly code: string;
+}
+export type ReviewReturnValidation = {
+    readonly ok: true;
+} | {
+    readonly ok: false;
+    /** Full issue count, even when {@link ReviewReturnValidation.issues} is capped. */
+    readonly total: number;
+    readonly issues: readonly ReviewReturnIssue[];
+};
+/**
+ * Pure value-validation seam. Projects only safe Zod path segments and issue
+ * codes; never issue messages, unrecognized key names, or payload values.
+ */
+export declare function validateReviewReturnValue(value: unknown): ReviewReturnValidation;
+export declare function formatReviewReturnValidationFailure(total: number): string;
+export type ReadChunk = (fd: number, buffer: Buffer, offset: number, length: number, position: number | null) => number;
+export interface ReviewReturnValidatorOptions {
+    readonly argv: readonly string[];
+    readonly fd?: number;
+    readonly isTTY?: boolean;
+    readonly readChunk?: ReadChunk;
+    readonly outputSink?: (message: string) => void;
+    readonly errorSink?: (message: string) => void;
+}
+/**
+ * Validate exactly one raw persona return from stdin.
+ *
+ * Exit statuses:
+ * - 0: a schema-valid `SubAgentReturnSchema` document.
+ * - 1: the returned input was empty, oversized, invalid UTF-8, malformed JSON,
+ *   carried trailing data, or failed the schema.
+ * - 2: the check did not run (usage, TTY, or stdin read failure).
+ */
+export declare function runReviewReturnValidator(options: ReviewReturnValidatorOptions): number;