@manehorizons/cadence-core 1.1.1

package/dist/coherence/check.js

@@ -0,0 +1,34 @@
+const DO_NOT_RE = /DO NOT\s+(?:edit|change|modify|touch)\s+`?([^\s`\n]+?)(?:`|\.(?:\s|$)|$)/gi;
+export function coherenceCheck(draft, state, projectMd) {
+    const issues = [];
+    const touched = new Set(draft.tasks.flatMap((t) => t.files));
+    for (const d of state.decisions) {
+        for (const f of touched) {
+            if (d.title.includes(f)) {
+                issues.push({
+                    severity: 'warn',
+                    code: 'DECISION_TOUCH',
+                    message: `Draft touches ${f} which is the subject of decision ${d.id}: "${d.title}". Review before approving.`,
+                });
+            }
+        }
+    }
+    const forbidden = new Set();
+    let m;
+    DO_NOT_RE.lastIndex = 0;
+    while ((m = DO_NOT_RE.exec(projectMd)) !== null) {
+        if (m[1])
+            forbidden.add(m[1]);
+    }
+    for (const f of touched) {
+        if (forbidden.has(f)) {
+            issues.push({
+                severity: 'block',
+                code: 'PROJECT_FORBIDDEN',
+                message: `Draft touches ${f} which PROJECT.md marks DO NOT edit.`,
+            });
+        }
+    }
+    return { issues };
+}
+//# sourceMappingURL=check.js.map

package/dist/coherence/check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.js","sourceRoot":"","sources":["../../src/coherence/check.ts"],"names":[],"mappings":"AAYA,MAAM,SAAS,GAAG,4EAA4E,CAAC;AAE/F,MAAM,UAAU,cAAc,CAAC,KAAY,EAAE,KAAmB,EAAE,SAAiB;IACjF,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAE7D,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QAChC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC;oBACV,QAAQ,EAAE,MAAM;oBAChB,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,iBAAiB,CAAC,qCAAqC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,6BAA6B;iBAC/G,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,IAAI,CAAyB,CAAC;IAC9B,SAAS,CAAC,SAAS,GAAG,CAAC,CAAC;IACxB,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAChD,IAAI,CAAC,CAAC,CAAC,CAAC;YAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,iBAAiB,CAAC,sCAAsC;aAClE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,CAAC;AACpB,CAAC"}

package/dist/config/loader.d.ts

@@ -0,0 +1,4 @@
+import { type CadenceConfig } from '@manehorizons/cadence-types';
+export declare function loadConfig(repoRoot: string): Promise<CadenceConfig>;
+export declare function writeConfig(repoRoot: string, config: CadenceConfig): Promise<void>;
+//# sourceMappingURL=loader.d.ts.map

package/dist/config/loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":"AAGA,OAAO,EAAiC,KAAK,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAIhG,wBAAsB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CA0BzE;AAED,wBAAsB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAGxF"}

package/dist/config/loader.js

@@ -0,0 +1,40 @@
+import { readFile } from 'node:fs/promises';
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { CadenceConfigZ, defaultConfig } from '@manehorizons/cadence-types';
+import { ConfigInvalidError } from '../errors.js';
+import { atomicWriteJSON } from '../state/atomic-write.js';
+export async function loadConfig(repoRoot) {
+    const path = join(repoRoot, '.cadence', 'config.json');
+    if (!existsSync(path)) {
+        return defaultConfig;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(await readFile(path, 'utf8'));
+    }
+    catch (err) {
+        throw new ConfigInvalidError(`config.json is not valid JSON: ${err.message}`);
+    }
+    const p = parsed;
+    const merged = { ...defaultConfig };
+    for (const [k, v] of Object.entries(p)) {
+        if (v !== null && typeof v === 'object' && !Array.isArray(v) &&
+            merged[k] !== null && typeof merged[k] === 'object' && !Array.isArray(merged[k])) {
+            merged[k] = { ...merged[k], ...v };
+        }
+        else {
+            merged[k] = v;
+        }
+    }
+    const result = CadenceConfigZ.safeParse(merged);
+    if (!result.success) {
+        throw new ConfigInvalidError(`config.json failed schema validation: ${result.error.message}`);
+    }
+    return result.data;
+}
+export async function writeConfig(repoRoot, config) {
+    CadenceConfigZ.parse(config);
+    await atomicWriteJSON(join(repoRoot, '.cadence', 'config.json'), config);
+}
+//# sourceMappingURL=loader.js.map

package/dist/config/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAsB,MAAM,6BAA6B,CAAC;AAChG,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAE3D,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAAgB;IAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;IACvD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,kBAAkB,CAAC,kCAAmC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,CAAC,GAAG,MAAiC,CAAC;IAC5C,MAAM,MAAM,GAA4B,EAAE,GAAG,aAAa,EAAE,CAAC;IAC7D,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YACxD,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACrF,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,GAAI,MAAM,CAAC,CAAC,CAA6B,EAAE,GAAI,CAA6B,EAAE,CAAC;QAC/F,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,kBAAkB,CAAC,yCAAyC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,QAAgB,EAAE,MAAqB;IACvE,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;AAC3E,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,23 @@
+export type CadenceErrorCode = 'GENERIC' | 'STATE_CORRUPT' | 'CONFIG_INVALID' | 'LOOP_VIOLATION' | 'COHERENCE_FAILED' | 'HOOK_FAILED';
+export declare class CadenceError extends Error {
+    readonly code: CadenceErrorCode;
+    constructor(message: string, code?: CadenceErrorCode);
+}
+export declare class StateCorruptError extends CadenceError {
+    constructor(message: string);
+}
+export declare class ConfigInvalidError extends CadenceError {
+    constructor(message: string);
+}
+export interface LoopViolationOptions {
+    /** Loop position the operation expected. */
+    expected?: string;
+    /** Loop position the state actually had. */
+    actual?: string;
+}
+export declare class LoopViolationError extends CadenceError {
+    readonly expected: string | undefined;
+    readonly actual: string | undefined;
+    constructor(message: string, opts?: LoopViolationOptions);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,gBAAgB,GACxB,SAAS,GACT,eAAe,GACf,gBAAgB,GAChB,gBAAgB,GAChB,kBAAkB,GAClB,aAAa,CAAC;AAElB,qBAAa,YAAa,SAAQ,KAAK;IACrC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;gBACpB,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,gBAA4B;CAKhE;AAED,qBAAa,iBAAkB,SAAQ,YAAY;gBACrC,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,kBAAmB,SAAQ,YAAY;gBACtC,OAAO,EAAE,MAAM;CAI5B;AAED,MAAM,WAAW,oBAAoB;IACnC,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,kBAAmB,SAAQ,YAAY;IAClD,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;gBAExB,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,oBAAyB;CAM7D"}

package/dist/errors.js

@@ -0,0 +1,31 @@
+export class CadenceError extends Error {
+    code;
+    constructor(message, code = 'GENERIC') {
+        super(message);
+        this.name = 'CadenceError';
+        this.code = code;
+    }
+}
+export class StateCorruptError extends CadenceError {
+    constructor(message) {
+        super(message, 'STATE_CORRUPT');
+        this.name = 'StateCorruptError';
+    }
+}
+export class ConfigInvalidError extends CadenceError {
+    constructor(message) {
+        super(message, 'CONFIG_INVALID');
+        this.name = 'ConfigInvalidError';
+    }
+}
+export class LoopViolationError extends CadenceError {
+    expected;
+    actual;
+    constructor(message, opts = {}) {
+        super(message, 'LOOP_VIOLATION');
+        this.name = 'LoopViolationError';
+        this.expected = opts.expected;
+        this.actual = opts.actual;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAQA,MAAM,OAAO,YAAa,SAAQ,KAAK;IAC5B,IAAI,CAAmB;IAChC,YAAY,OAAe,EAAE,OAAyB,SAAS;QAC7D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,MAAM,OAAO,iBAAkB,SAAQ,YAAY;IACjD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,MAAM,OAAO,kBAAmB,SAAQ,YAAY;IAClD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AASD,MAAM,OAAO,kBAAmB,SAAQ,YAAY;IACzC,QAAQ,CAAqB;IAC7B,MAAM,CAAqB;IAEpC,YAAY,OAAe,EAAE,OAA6B,EAAE;QAC1D,KAAK,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC5B,CAAC;CACF"}

package/dist/gates/approve.d.ts

@@ -0,0 +1,20 @@
+import type { Prompter } from '../verify/prompter.js';
+import type { DraftGateImpl } from './draft-types.js';
+/**
+ * Phase 24.1 — manual approve gate prompt walker. Accepts y/yes/n/no
+ * (case-insensitive); 3 retries before refuse. Mirrors the 3-retry pattern
+ * from `verify/interactive.ts` askVerdict. Re-exported from `draft.ts` for the
+ * `ask-approve-verdict` suite.
+ */
+export declare function askApproveVerdict(prompter: Prompter): Promise<'yes' | 'no'>;
+/**
+ * Manual approve gate (Phase 24.1). Extracted from draft.ts (Phase 39.7).
+ * Fires when `'approve'` is in the effective gate set and `--no-approve`
+ * (`opts.approve === false`) was not passed. Builds the prompter via the port
+ * (a non-TTY throw → refuse with the `manual-approve: …` line), runs the verdict
+ * walker, refuses on `no`. Coherence blockers + soft cap already refused in the
+ * router before this gate, so the prompt only appears for otherwise-passable
+ * approvals.
+ */
+export declare const runApproveGate: DraftGateImpl;
+//# sourceMappingURL=approve.d.ts.map

package/dist/gates/approve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approve.d.ts","sourceRoot":"","sources":["../../src/gates/approve.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAGtD;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,QAAQ,GACjB,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAWvB;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc,EAAE,aAyB5B,CAAC"}

package/dist/gates/approve.js

@@ -0,0 +1,55 @@
+/**
+ * Phase 24.1 — manual approve gate prompt walker. Accepts y/yes/n/no
+ * (case-insensitive); 3 retries before refuse. Mirrors the 3-retry pattern
+ * from `verify/interactive.ts` askVerdict. Re-exported from `draft.ts` for the
+ * `ask-approve-verdict` suite.
+ */
+export async function askApproveVerdict(prompter) {
+    for (let attempt = 1; attempt <= 3; attempt++) {
+        const question = attempt === 1
+            ? 'Approve and enter BUILD? [y/n]: '
+            : `Please answer y or n (attempt ${attempt}/3): `;
+        const raw = (await prompter.ask(question)).trim().toLowerCase();
+        if (raw === 'y' || raw === 'yes')
+            return 'yes';
+        if (raw === 'n' || raw === 'no')
+            return 'no';
+    }
+    return 'no';
+}
+/**
+ * Manual approve gate (Phase 24.1). Extracted from draft.ts (Phase 39.7).
+ * Fires when `'approve'` is in the effective gate set and `--no-approve`
+ * (`opts.approve === false`) was not passed. Builds the prompter via the port
+ * (a non-TTY throw → refuse with the `manual-approve: …` line), runs the verdict
+ * walker, refuses on `no`. Coherence blockers + soft cap already refused in the
+ * router before this gate, so the prompt only appears for otherwise-passable
+ * approvals.
+ */
+export const runApproveGate = async (ctx) => {
+    if (!ctx.gateSet.gates.includes('approve') || ctx.opts.approve === false) {
+        return { outcome: 'pass' };
+    }
+    let prompter;
+    try {
+        prompter = ctx.prompter.create();
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        ctx.io.err(`manual-approve: ${msg} Pass --no-approve to bypass the manual approve gate.\n`);
+        return { outcome: 'refuse' };
+    }
+    let verdict;
+    try {
+        verdict = await askApproveVerdict(prompter);
+    }
+    finally {
+        await prompter.close?.();
+    }
+    if (verdict === 'no') {
+        ctx.io.err('draft approve refused: user declined manual approve gate.\n');
+        return { outcome: 'refuse' };
+    }
+    return { outcome: 'pass' };
+};
+//# sourceMappingURL=approve.js.map

package/dist/gates/approve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approve.js","sourceRoot":"","sources":["../../src/gates/approve.ts"],"names":[],"mappings":"AAIA;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAkB;IAElB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;QAC9C,MAAM,QAAQ,GACZ,OAAO,KAAK,CAAC;YACX,CAAC,CAAC,kCAAkC;YACpC,CAAC,CAAC,iCAAiC,OAAO,OAAO,CAAC;QACtD,MAAM,GAAG,GAAG,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAChE,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,KAAK;YAAE,OAAO,KAAK,CAAC;QAC/C,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;IAC/C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAkB,KAAK,EAAE,GAAG,EAAuB,EAAE;IAC9E,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QACzE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAC7B,CAAC;IACD,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,GAAG,CAAC,EAAE,CAAC,GAAG,CACR,mBAAmB,GAAG,yDAAyD,CAChF,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC/B,CAAC;IACD,IAAI,OAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;YAAS,CAAC;QACT,MAAM,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;IAC3B,CAAC;IACD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;QAC1E,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC/B,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC7B,CAAC,CAAC"}

package/dist/gates/build-context.d.ts

@@ -0,0 +1,17 @@
+import type { CadenceConfig, CadenceState, Draft, GateSet } from '@manehorizons/cadence-types';
+import type { BuildGateContext, BuildGateOpts } from './build-types.js';
+/**
+ * Build the `BuildGateContext` the per-task-verify gate consumes (Phase 39.7).
+ * The build command router owns construction; the gate reaches git/verifier/
+ * notifier only through the ports built here.
+ */
+export declare function buildBuildContext(args: {
+    cwd: string;
+    state: CadenceState;
+    draft: Draft;
+    config: CadenceConfig | null;
+    gateSet: GateSet;
+    taskId: string;
+    opts: BuildGateOpts;
+}): BuildGateContext;
+//# sourceMappingURL=build-context.d.ts.map

package/dist/gates/build-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-context.d.ts","sourceRoot":"","sources":["../../src/gates/build-context.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAEV,aAAa,EACb,YAAY,EACZ,KAAK,EACL,OAAO,EACR,MAAM,6BAA6B,CAAC;AAGrC,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAExE;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,YAAY,CAAC;IACpB,KAAK,EAAE,KAAK,CAAC;IACb,MAAM,EAAE,aAAa,GAAG,IAAI,CAAC;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,aAAa,CAAC;CACrB,GAAG,gBAAgB,CAenB"}

package/dist/gates/build-context.js

@@ -0,0 +1,81 @@
+import { execSync } from 'node:child_process';
+import { selectNotifier } from '../notify/factory.js';
+import { selectPerTaskVerifier } from '../verify/per-task-factory.js';
+/**
+ * Build the `BuildGateContext` the per-task-verify gate consumes (Phase 39.7).
+ * The build command router owns construction; the gate reaches git/verifier/
+ * notifier only through the ports built here.
+ */
+export function buildBuildContext(args) {
+    const { cwd, state, draft, config, gateSet, taskId, opts } = args;
+    return {
+        cwd,
+        state,
+        draft,
+        config,
+        gateSet,
+        taskId,
+        opts,
+        diff: (files) => collectDiff(cwd, files),
+        verifiers: { perTask: selectPerTaskVerifier(config) },
+        emit: { perTaskFail: (info) => emitPerTaskFail(config, info) },
+        io: { err: (s) => process.stderr.write(s) },
+    };
+}
+/**
+ * `git diff HEAD -- <files>` via execSync. Empty string when the repo isn't a
+ * git workdir, when there's no diff, or on error — the mock verifier reads an
+ * empty diff as `'concerns'`, the right conservative default for non-git.
+ */
+function collectDiff(cwd, files) {
+    if (files.length === 0)
+        return '';
+    try {
+        const args = ['diff', '--no-color', 'HEAD', '--', ...files];
+        return execSync(`git ${args.map(shellQuote).join(' ')}`, {
+            cwd,
+            encoding: 'utf8',
+            stdio: ['ignore', 'pipe', 'ignore'],
+            maxBuffer: 16 * 1024 * 1024,
+        });
+    }
+    catch {
+        return '';
+    }
+}
+function shellQuote(arg) {
+    if (/^[A-Za-z0-9._/=:@+-]+$/.test(arg))
+        return arg;
+    return `"${arg.replace(/(["\\$`])/g, '\\$1')}"`;
+}
+/**
+ * Emit a `per-task-fail` anomaly. Mirrors the Phase 24.2 inline emitter:
+ * returns early on a null config (degraded path), dispatches unconditionally
+ * otherwise (the notifier transport drops it on opted-out profiles), and turns
+ * a transport failure into one stderr warning rather than throwing.
+ */
+async function emitPerTaskFail(config, info) {
+    if (!config)
+        return;
+    const notifier = selectNotifier(config);
+    const event = {
+        type: 'per-task-fail',
+        severity: 'error',
+        message: `per-task-verify ${info.bypassed ? 'bypassed' : 'refused'} for ${info.taskId}: ${info.reason}`,
+        context: {
+            taskId: info.taskId,
+            provider: info.provider,
+            reason: info.reason,
+            bypassed: info.bypassed,
+        },
+        ts: new Date().toISOString(),
+    };
+    try {
+        await notifier.notify([event]);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        process.stderr.write(`cadence-notify: ${notifier.name} transport failed — ${msg} (continuing)\n`);
+    }
+}
+//# sourceMappingURL=build-context.js.map

package/dist/gates/build-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-context.js","sourceRoot":"","sources":["../../src/gates/build-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAQ9C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAGtE;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAQjC;IACC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IAClE,OAAO;QACL,GAAG;QACH,KAAK;QACL,KAAK;QACL,MAAM;QACN,OAAO;QACP,MAAM;QACN,IAAI;QACJ,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC;QACxC,SAAS,EAAE,EAAE,OAAO,EAAE,qBAAqB,CAAC,MAAM,CAAC,EAAE;QACrD,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE;QAC9D,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;KAC5C,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,GAAW,EAAE,KAAe;IAC/C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC;QAC5D,OAAO,QAAQ,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE;YACvD,GAAG;YACH,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;YACnC,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;SAC5B,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IACnD,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC;AAClD,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,eAAe,CAC5B,MAA4B,EAC5B,IAA6E;IAE7E,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,KAAK,GAAiB;QAC1B,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE,mBAAmB,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,QAAQ,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE;QACvG,OAAO,EAAE;YACP,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB;QACD,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC7B,CAAC;IACF,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,mBAAmB,QAAQ,CAAC,IAAI,uBAAuB,GAAG,iBAAiB,CAC5E,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/gates/build-test-must-pass.d.ts

@@ -0,0 +1,12 @@
+import type { GateImpl } from './types.js';
+/**
+ * Build/test-must-pass gate (DESIGN.md §4.1 always-fire). Wired for real in
+ * Phase 39.2: runs `config.verification.testCommand` via the injected runner
+ * port and refuses on a non-zero exit, unless --allow-failing-build / --force.
+ * When no testCommand is configured (`ran:false`), the gate cannot enforce and
+ * passes *silently* — like any other gate that passes, it adds no output, so a
+ * settle on an unconfigured repo stays bit-identical (AC-7). The subprocess is
+ * reached only through `ctx.runner` — the gate never imports child_process.
+ */
+export declare const runBuildTestGate: GateImpl;
+//# sourceMappingURL=build-test-must-pass.d.ts.map

package/dist/gates/build-test-must-pass.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-test-must-pass.d.ts","sourceRoot":"","sources":["../../src/gates/build-test-must-pass.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAc,MAAM,YAAY,CAAC;AAEvD;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,EAAE,QAc9B,CAAC"}

package/dist/gates/build-test-must-pass.js

@@ -0,0 +1,23 @@
+/**
+ * Build/test-must-pass gate (DESIGN.md §4.1 always-fire). Wired for real in
+ * Phase 39.2: runs `config.verification.testCommand` via the injected runner
+ * port and refuses on a non-zero exit, unless --allow-failing-build / --force.
+ * When no testCommand is configured (`ran:false`), the gate cannot enforce and
+ * passes *silently* — like any other gate that passes, it adds no output, so a
+ * settle on an unconfigured repo stays bit-identical (AC-7). The subprocess is
+ * reached only through `ctx.runner` — the gate never imports child_process.
+ */
+export const runBuildTestGate = async (ctx) => {
+    const res = await ctx.runner.test();
+    if (!res.ran) {
+        return { outcome: 'pass' };
+    }
+    if (!res.ok && !ctx.opts.allowFailingBuild && !ctx.opts.force) {
+        ctx.io.err(`build-test-must-pass: ${res.command} exited ${res.exitCode}\n`);
+        ctx.io.err('settle run refused: the test suite must pass before settle. ' +
+            'Pass --allow-failing-build to bypass, or --force to settle anyway.\n');
+        return { outcome: 'refuse' };
+    }
+    return { outcome: 'pass' };
+};
+//# sourceMappingURL=build-test-must-pass.js.map

package/dist/gates/build-test-must-pass.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-test-must-pass.js","sourceRoot":"","sources":["../../src/gates/build-test-must-pass.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAa,KAAK,EAAE,GAAG,EAAuB,EAAE;IAC3E,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAC7B,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9D,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,yBAAyB,GAAG,CAAC,OAAO,WAAW,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC;QAC5E,GAAG,CAAC,EAAE,CAAC,GAAG,CACR,8DAA8D;YAC5D,sEAAsE,CACzE,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC/B,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC7B,CAAC,CAAC"}

package/dist/gates/build-types.d.ts

@@ -0,0 +1,54 @@
+import type { CadenceConfig, CadenceState, Draft, GateSet } from '@manehorizons/cadence-types';
+import type { PerTaskInput, PerTaskResult } from '../verify/per-task.js';
+import type { PerTaskVerifyRecord } from '../build/record.js';
+import type { GateResult, IoPort } from './types.js';
+/**
+ * Build-surface gate contract (Phase 39.7). For the per-task-verify gate that
+ * fires at `build task` time on DONE outcomes. Reuses the shared `GateResult`
+ * shape parameterized with `BuildProducts` so the gate can hand its
+ * `PerTaskVerifyRecord` back to the router (which threads it into
+ * `recordTaskOutcome`). The build command router owns context construction.
+ */
+/** The product a build gate contributes back to the router. */
+export interface BuildProducts {
+    perTaskRecord?: PerTaskVerifyRecord;
+}
+/** The subset of `build task` flags the build gates read. */
+export interface BuildGateOpts {
+    readonly allowPerTaskFailure?: boolean;
+}
+/** Per-task verifier port (Phase 39.7); lazily `selectPerTaskVerifier`. */
+export interface BuildVerifierPorts {
+    readonly perTask: {
+        verify(input: PerTaskInput): Promise<PerTaskResult>;
+    };
+}
+/** Notification collaborator for the build gates. */
+export interface BuildEmitPort {
+    /** per-task-fail anomaly (Phase 24.2). Dispatched UNCONDITIONALLY (the
+     *  notifier transport drops it on opted-out profiles — see the original
+     *  build.ts note); not under the anomaly-notify guard. */
+    perTaskFail(info: {
+        taskId: string;
+        provider: string;
+        reason: string;
+        bypassed: boolean;
+    }): Promise<void>;
+}
+/** Everything a build gate may read. Built once by the build router. Readonly. */
+export interface BuildGateContext {
+    readonly cwd: string;
+    readonly state: CadenceState;
+    readonly draft: Draft;
+    readonly config: CadenceConfig | null;
+    readonly gateSet: GateSet;
+    readonly taskId: string;
+    readonly opts: BuildGateOpts;
+    /** `git diff --no-color HEAD -- <files>`; empty string on any error / no git. */
+    diff(files: string[]): string;
+    readonly verifiers: BuildVerifierPorts;
+    readonly emit: BuildEmitPort;
+    readonly io: IoPort;
+}
+export type BuildGateImpl = (ctx: BuildGateContext) => Promise<GateResult<BuildProducts>>;
+//# sourceMappingURL=build-types.d.ts.map

package/dist/gates/build-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-types.d.ts","sourceRoot":"","sources":["../../src/gates/build-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EACb,YAAY,EACZ,KAAK,EACL,OAAO,EACR,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACzE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAErD;;;;;;GAMG;AAEH,+DAA+D;AAC/D,MAAM,WAAW,aAAa;IAC5B,aAAa,CAAC,EAAE,mBAAmB,CAAC;CACrC;AAED,6DAA6D;AAC7D,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;CACxC;AAED,2EAA2E;AAC3E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE;QAAE,MAAM,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;KAAE,CAAC;CAC3E;AAED,qDAAqD;AACrD,MAAM,WAAW,aAAa;IAC5B;;8DAE0D;IAC1D,WAAW,CAAC,IAAI,EAAE;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,OAAO,CAAC;KACnB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnB;AAED,kFAAkF;AAClF,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,iFAAiF;IACjF,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC;IACvC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,aAAa,GAAG,CAC1B,GAAG,EAAE,gBAAgB,KAClB,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC"}

package/dist/gates/build-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=build-types.js.map

package/dist/gates/build-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-types.js","sourceRoot":"","sources":["../../src/gates/build-types.ts"],"names":[],"mappings":""}

package/dist/gates/code-review.d.ts

@@ -0,0 +1,20 @@
+import type { Finding } from '@manehorizons/cadence-types';
+import type { GateImpl } from './types.js';
+/** HIGH-only finding flattener. The convergence boolean + sidecar findingsCount
+ *  are HIGH-only (Phase 37.1 spec) — a conscious divergence from the 35.1
+ *  source which counts total findings. Moved from settle.ts verbatim. */
+export declare function collectHighFindings(findings: Record<string, Finding[]>): Array<{
+    file: string;
+    line?: number;
+    message: string;
+}>;
+/**
+ * Code-review verifier gate (Phase 24.3) + bounded convergence (Phase 37.1).
+ * Extracted from settle.ts verbatim (Phase 39.4). Fires on membership
+ * ('code-review'). Runs the reviewer over the touched-file diff; "no HIGH
+ * finding" is the convergence pass. Advances the CODE-REVIEW.json sidecar via
+ * nextConvergence and branches bypass / reloop / escalate. Reaches git, the
+ * reviewer, the notifier, and the sidecar only through ctx ports.
+ */
+export declare const runCodeReviewGate: GateImpl;
+//# sourceMappingURL=code-review.d.ts.map

package/dist/gates/code-review.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-review.d.ts","sourceRoot":"","sources":["../../src/gates/code-review.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AAE3D,OAAO,KAAK,EAAE,QAAQ,EAAc,MAAM,YAAY,CAAC;AAEvD;;yEAEyE;AACzE,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,GAClC,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAazD;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB,EAAE,QA8H/B,CAAC"}

package/dist/gates/code-review.js

@@ -0,0 +1,137 @@
+import { nextConvergence } from '../verify/converge.js';
+/** HIGH-only finding flattener. The convergence boolean + sidecar findingsCount
+ *  are HIGH-only (Phase 37.1 spec) — a conscious divergence from the 35.1
+ *  source which counts total findings. Moved from settle.ts verbatim. */
+export function collectHighFindings(findings) {
+    const out = [];
+    for (const [file, list] of Object.entries(findings)) {
+        for (const f of list) {
+            if (f.severity !== 'high')
+                continue;
+            out.push({
+                file,
+                ...(f.line !== undefined ? { line: f.line } : {}),
+                message: f.message,
+            });
+        }
+    }
+    return out;
+}
+/**
+ * Code-review verifier gate (Phase 24.3) + bounded convergence (Phase 37.1).
+ * Extracted from settle.ts verbatim (Phase 39.4). Fires on membership
+ * ('code-review'). Runs the reviewer over the touched-file diff; "no HIGH
+ * finding" is the convergence pass. Advances the CODE-REVIEW.json sidecar via
+ * nextConvergence and branches bypass / reloop / escalate. Reaches git, the
+ * reviewer, the notifier, and the sidecar only through ctx ports.
+ */
+export const runCodeReviewGate = async (ctx) => {
+    const touched = [...ctx.touchedFiles];
+    const diff = ctx.diff();
+    try {
+        const result = await ctx.verifiers.codeReview.verify({ files: touched, diff });
+        const codeReviewFindings = result.findings;
+        const highs = collectHighFindings(result.findings);
+        const pass = highs.length === 0;
+        const { attemptsSoFar, history } = await ctx.codeReviewSidecar.read();
+        const maxAttempts = ctx.config?.convergence?.maxAttempts ?? 3;
+        const nv = nextConvergence(pass, attemptsSoFar, maxAttempts);
+        const now = new Date().toISOString();
+        // Phase 24.3 contract preserved (NOT narrowed): --force OR
+        // --allow-code-review-failure bypasses ANY failing code-review.
+        const bypassed = !pass && (ctx.opts.allowCodeReviewFailure === true || ctx.opts.force === true);
+        history.push({
+            at: now,
+            pass,
+            findingsCount: highs.length,
+            provider: result.provider,
+            ...(result.model ? { model: result.model } : {}),
+            verdict: nv.verdict,
+            ...(bypassed ? { bypassed: true } : {}),
+        });
+        await ctx.codeReviewSidecar.write(JSON.stringify({
+            draftId: ctx.state.activeDraft,
+            converged: pass,
+            attempts: nv.verdict === 'pass' ? attemptsSoFar : nv.attempt,
+            maxAttempts,
+            history,
+            pass,
+            provider: result.provider,
+            ...(result.model ? { model: result.model } : {}),
+            findings: highs.length,
+            at: now,
+        }, null, 2) + '\n');
+        if (!pass) {
+            for (const h of highs) {
+                ctx.io.err(`code-review: ${h.file}${h.line !== undefined ? `:${h.line}` : ''} high — ${h.message}\n`);
+            }
+            if (bypassed) {
+                const flag = ctx.opts.force === true ? '--force' : '--allow-code-review-failure';
+                ctx.io.err(`code-review: ${flag} set; proceeding past ${highs.length} HIGH finding(s).\n`);
+                if (ctx.gateSet.gates.includes('anomaly-notify')) {
+                    await ctx.emit.codeReviewHigh(result.findings, {
+                        provider: result.provider,
+                        bypassed: true,
+                    });
+                }
+                if (nv.verdict === 'escalate') {
+                    await ctx.emit.codeReviewUnconverged({
+                        draftId: ctx.state.activeDraft,
+                        attempts: nv.attempt,
+                        maxAttempts,
+                        findings: highs.length,
+                        provider: result.provider,
+                        ...(result.model ? { model: result.model } : {}),
+                        bypassed: true,
+                    });
+                }
+                // fall through → SUMMARY.codeReview recorded downstream.
+            }
+            else if (nv.verdict === 'reloop') {
+                if (ctx.gateSet.gates.includes('anomaly-notify')) {
+                    await ctx.emit.codeReviewHigh(result.findings, {
+                        provider: result.provider,
+                        bypassed: false,
+                    });
+                }
+                ctx.io.err(`code-review: attempt ${nv.attempt}/${maxAttempts} did not pass — ` +
+                    'fix the flagged code and re-run `cadence settle run`, ' +
+                    'or pass --allow-code-review-failure to proceed anyway.\n');
+                return { outcome: 'refuse', summaryPatch: { codeReview: codeReviewFindings } };
+            }
+            else {
+                // nv.verdict === 'escalate', no bypass flag → hard refuse.
+                if (ctx.gateSet.gates.includes('anomaly-notify')) {
+                    await ctx.emit.codeReviewHigh(result.findings, {
+                        provider: result.provider,
+                        bypassed: false,
+                    });
+                }
+                await ctx.emit.codeReviewUnconverged({
+                    draftId: ctx.state.activeDraft,
+                    attempts: nv.attempt,
+                    maxAttempts,
+                    findings: highs.length,
+                    provider: result.provider,
+                    ...(result.model ? { model: result.model } : {}),
+                });
+                ctx.io.err('settle run refused: code-review did NOT converge after ' +
+                    `${maxAttempts} attempts — a human decision is required. ` +
+                    'Fix the flagged code, or pass --allow-code-review-failure ' +
+                    'to proceed anyway.\n');
+                return { outcome: 'refuse', summaryPatch: { codeReview: codeReviewFindings } };
+            }
+        }
+        // pass (converged) OR bypass fall-through → record findings, proceed.
+        return { outcome: 'pass', summaryPatch: { codeReview: codeReviewFindings } };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        ctx.io.err(`code-review: verifier failed — ${message}. Pass --allow-code-review-failure to continue.\n`);
+        if (ctx.opts.allowCodeReviewFailure !== true && ctx.opts.force !== true) {
+            return { outcome: 'refuse' };
+        }
+        return { outcome: 'pass' };
+    }
+};
+//# sourceMappingURL=code-review.js.map