@kyo-so/cli 0.4.1 → 0.6.0

package/dist/cli/doctor.d.ts

@@ -3,6 +3,7 @@ export declare function runDoctor(options: {
     configPath?: string;
     ignoreConfig?: boolean;
     trustConfig?: boolean;
+    allowUnknownConfig?: boolean;
     promptForTrust?: boolean;
     trustStorePath?: string;
     env?: NodeJS.ProcessEnv;

package/dist/config/loadConfig.d.ts

@@ -5,18 +5,26 @@ export type LoadConfigOptions = {
     configPath?: string;
     ignoreConfig?: boolean;
     trustConfig?: boolean;
+    allowUnknownConfig?: boolean;
     promptForTrust?: boolean;
     trustStorePath?: string;
+    env?: NodeJS.ProcessEnv;
     trustPrompt?: (config: {
         configPath: string;
         configHash: string;
     }) => Promise<boolean>;
 };
+export type LoadedConfigSource = {
+    path: string;
+    layer: "global_toml" | "project_toml" | "project_ts";
+};
 export type LoadedConfig = {
     config: KyosoConfig;
     configPath?: string;
     configHash?: string;
     configTrustStatus: ConfigTrustStatus;
+    sources: LoadedConfigSource[];
     warnings: string[];
 };
 export declare function loadConfig(options?: LoadConfigOptions): Promise<LoadedConfig>;
+export declare function resolveGlobalTomlConfigPath(env?: NodeJS.ProcessEnv): string;

package/dist/config/projectScope.d.ts

@@ -0,0 +1,15 @@
+type ProjectScopeOptions = {
+    projectPath: string;
+    globalConfigPath: string;
+};
+type Violation = {
+    path: string;
+    reason?: string;
+};
+export declare function mergeProjectTomlConfig(baseConfig: unknown, projectConfig: unknown, options: ProjectScopeOptions): unknown;
+export declare function collectProjectScopeViolations(config: unknown): Violation[];
+export declare function flattenLeaves(value: unknown, path?: string[]): Array<{
+    path: string[];
+    value: unknown;
+}>;
+export {};

package/dist/config/schema.d.ts

@@ -106,6 +106,12 @@ export declare const kyosoConfigSchema: z.ZodObject<{
         }>;
         timeoutMs: z.ZodNumber;
     }, z.core.$strip>;
+    verification: z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        maxFindings: z.ZodDefault<z.ZodNumber>;
+        timeoutMs: z.ZodDefault<z.ZodNumber>;
+        allowDemotion: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>;
     audit: z.ZodObject<{
         enabled: z.ZodBoolean;
         format: z.ZodLiteral<"jsonl">;
@@ -114,6 +120,9 @@ export declare const kyosoConfigSchema: z.ZodObject<{
         includeFileContents: z.ZodBoolean;
     }, z.core.$strip>;
 }, z.core.$strip>;
+export declare const kyosoConfigKnownLeafPaths: string[];
+export declare const kyosoConfigRecordPrefixes: string[];
+export declare const kyosoConfigSecuritySensitivePrefixes: string[];
 export type KyosoConfig = z.infer<typeof kyosoConfigSchema>;
 export type KyosoConfigInput = PartialDeep<KyosoConfig>;
 export {};

package/dist/config/tomlConfigLoader.d.ts

@@ -0,0 +1 @@
+export declare function loadTomlConfigFile(configPath: string): Promise<unknown>;

package/dist/core/constants.d.ts

@@ -4,4 +4,4 @@ export declare const DEFAULT_MAX_DIFF_BYTES = 300000;
 export declare const RAW_OUTPUT_MAX_CHARS = 16384;
 export declare const TRACE_DIR = ".kyoso/traces";
 export declare const KYOSO_CHILD_AGENT = "KYOSO_CHILD_AGENT";
-export declare const KYOSO_VERSION = "0.4.1";
+export declare const KYOSO_VERSION = "0.6.0";

package/dist/core/types.d.ts

@@ -48,8 +48,14 @@ export type KyosoFinding = {
         lineEnd?: number;
     }>;
     sourceAgents: Array<AgentName | "judge" | "kyoso_policy">;
+    crossValidation?: "corroborated" | "single_source";
     confidence: "high" | "medium" | "low";
     cisaMapping?: CisaDimension[];
+    verification?: {
+        status: "confirmed" | "refuted" | "uncertain" | "not_verified";
+        verifier?: AgentName;
+        note?: string;
+    };
 };
 export type CisaSecureByDesignResult = {
     customerSecurityOutcomes: GateStatus;
@@ -59,7 +65,7 @@ export type CisaSecureByDesignResult = {
     notes: string[];
 };
 export type AgentName = "codex" | "claude";
-export type AgentRole = "implementation_reviewer" | "architecture_security_reviewer" | "combined_reviewer";
+export type AgentRole = "implementation_reviewer" | "architecture_security_reviewer" | "combined_reviewer" | "finding_verifier";
 export type ReviewMode = "multi_agent" | "single_agent";
 export type NormalizedAgentOpinion = {
     agent: AgentName;
@@ -84,6 +90,18 @@ export type NormalizedAgentOpinion = {
     openQuestions: string[];
     cisaSecureByDesign?: Partial<CisaSecureByDesignResult>;
 };
+export type CrossModelAnalysis = {
+    blindSpots: string[];
+    contradictions: Array<{
+        topic: string;
+        detail: string;
+    }>;
+    partialCoverage: Array<{
+        findingId?: string;
+        note: string;
+    }>;
+    provider: string;
+};
 export type AgentRunInput = {
     traceId: string;
     agent: AgentName;
@@ -113,6 +131,7 @@ export type KyosoResult = {
     degraded: boolean;
     agentsUsed: AgentName[];
     reviewMode: ReviewMode;
+    verificationMode?: "cross_agent" | "skipped_single_agent";
     summaryMarkdown: string;
     findings: KyosoFinding[];
     cisaSecureByDesign?: CisaSecureByDesignResult;
@@ -124,6 +143,7 @@ export type KyosoResult = {
         }>;
         judgeComment: string;
     }>;
+    crossModelAnalysis?: CrossModelAnalysis;
     testsToAdd: string[];
     residualRisks: string[];
     agentOpinions: Array<{

package/dist/core/verification.d.ts

@@ -0,0 +1,24 @@
+import type { AgentName, KyosoFinding } from "./types.js";
+export type VerificationVerdict = {
+    findingId: string;
+    verdict: "confirmed" | "refuted" | "uncertain";
+    reasoning: string;
+    evidence: string;
+};
+export type VerificationTarget = {
+    finding: KyosoFinding;
+    verifier: AgentName;
+};
+export type VerificationSelection = {
+    selected: VerificationTarget[];
+    overflow: VerificationTarget[];
+};
+export declare function selectVerificationTargets(findings: KyosoFinding[], maxFindings: number): VerificationSelection;
+export declare function groupVerificationTargetsByVerifier(targets: VerificationTarget[]): Array<{
+    verifier: AgentName;
+    findings: KyosoFinding[];
+}>;
+export declare function markVerificationOverflow(targets: VerificationTarget[]): void;
+export declare function parseVerificationVerdicts(rawText: string | undefined): VerificationVerdict[] | undefined;
+export declare function applyVerificationVerdicts(targets: VerificationTarget[], verifier: AgentName, verdicts: VerificationVerdict[] | undefined): Record<"confirmed" | "refuted" | "uncertain", number>;
+export declare function countVerificationStatuses(findings: KyosoFinding[]): Record<"confirmed" | "refuted" | "uncertain" | "not_verified", number>;