@kyo-so/cli 0.4.1 → 0.5.0

package/dist/config/schema.d.ts

@@ -106,6 +106,12 @@ export declare const kyosoConfigSchema: z.ZodObject<{
         }>;
         timeoutMs: z.ZodNumber;
     }, z.core.$strip>;
+    verification: z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        maxFindings: z.ZodDefault<z.ZodNumber>;
+        timeoutMs: z.ZodDefault<z.ZodNumber>;
+        allowDemotion: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>;
     audit: z.ZodObject<{
         enabled: z.ZodBoolean;
         format: z.ZodLiteral<"jsonl">;

package/dist/core/constants.d.ts

@@ -4,4 +4,4 @@ export declare const DEFAULT_MAX_DIFF_BYTES = 300000;
 export declare const RAW_OUTPUT_MAX_CHARS = 16384;
 export declare const TRACE_DIR = ".kyoso/traces";
 export declare const KYOSO_CHILD_AGENT = "KYOSO_CHILD_AGENT";
-export declare const KYOSO_VERSION = "0.4.1";
+export declare const KYOSO_VERSION = "0.5.0";

package/dist/core/types.d.ts

@@ -48,8 +48,14 @@ export type KyosoFinding = {
         lineEnd?: number;
     }>;
     sourceAgents: Array<AgentName | "judge" | "kyoso_policy">;
+    crossValidation?: "corroborated" | "single_source";
     confidence: "high" | "medium" | "low";
     cisaMapping?: CisaDimension[];
+    verification?: {
+        status: "confirmed" | "refuted" | "uncertain" | "not_verified";
+        verifier?: AgentName;
+        note?: string;
+    };
 };
 export type CisaSecureByDesignResult = {
     customerSecurityOutcomes: GateStatus;
@@ -59,7 +65,7 @@ export type CisaSecureByDesignResult = {
     notes: string[];
 };
 export type AgentName = "codex" | "claude";
-export type AgentRole = "implementation_reviewer" | "architecture_security_reviewer" | "combined_reviewer";
+export type AgentRole = "implementation_reviewer" | "architecture_security_reviewer" | "combined_reviewer" | "finding_verifier";
 export type ReviewMode = "multi_agent" | "single_agent";
 export type NormalizedAgentOpinion = {
     agent: AgentName;
@@ -84,6 +90,18 @@ export type NormalizedAgentOpinion = {
     openQuestions: string[];
     cisaSecureByDesign?: Partial<CisaSecureByDesignResult>;
 };
+export type CrossModelAnalysis = {
+    blindSpots: string[];
+    contradictions: Array<{
+        topic: string;
+        detail: string;
+    }>;
+    partialCoverage: Array<{
+        findingId?: string;
+        note: string;
+    }>;
+    provider: string;
+};
 export type AgentRunInput = {
     traceId: string;
     agent: AgentName;
@@ -113,6 +131,7 @@ export type KyosoResult = {
     degraded: boolean;
     agentsUsed: AgentName[];
     reviewMode: ReviewMode;
+    verificationMode?: "cross_agent" | "skipped_single_agent";
     summaryMarkdown: string;
     findings: KyosoFinding[];
     cisaSecureByDesign?: CisaSecureByDesignResult;
@@ -124,6 +143,7 @@ export type KyosoResult = {
         }>;
         judgeComment: string;
     }>;
+    crossModelAnalysis?: CrossModelAnalysis;
     testsToAdd: string[];
     residualRisks: string[];
     agentOpinions: Array<{

package/dist/core/verification.d.ts

@@ -0,0 +1,24 @@
+import type { AgentName, KyosoFinding } from "./types.js";
+export type VerificationVerdict = {
+    findingId: string;
+    verdict: "confirmed" | "refuted" | "uncertain";
+    reasoning: string;
+    evidence: string;
+};
+export type VerificationTarget = {
+    finding: KyosoFinding;
+    verifier: AgentName;
+};
+export type VerificationSelection = {
+    selected: VerificationTarget[];
+    overflow: VerificationTarget[];
+};
+export declare function selectVerificationTargets(findings: KyosoFinding[], maxFindings: number): VerificationSelection;
+export declare function groupVerificationTargetsByVerifier(targets: VerificationTarget[]): Array<{
+    verifier: AgentName;
+    findings: KyosoFinding[];
+}>;
+export declare function markVerificationOverflow(targets: VerificationTarget[]): void;
+export declare function parseVerificationVerdicts(rawText: string | undefined): VerificationVerdict[] | undefined;
+export declare function applyVerificationVerdicts(targets: VerificationTarget[], verifier: AgentName, verdicts: VerificationVerdict[] | undefined): Record<"confirmed" | "refuted" | "uncertain", number>;
+export declare function countVerificationStatuses(findings: KyosoFinding[]): Record<"confirmed" | "refuted" | "uncertain" | "not_verified", number>;