@open-agent-toolkit/cli 0.1.45 → 0.1.48

package/dist/commands/gate/review-verdict.d.ts

@@ -3,6 +3,8 @@ export interface ReviewGateVerdict {
     reviewType: 'code' | 'artifact' | 'unknown';
     scope: string | null;
     invocation: string | null;
+    project: string | null;
+    gateInvocation?: ReviewArtifactGateInvocation;
     counts: {
         critical: number;
         important: number;
@@ -12,11 +14,25 @@ export interface ReviewGateVerdict {
     blocking: boolean;
     normalization?: {
         insertedSeverities: Severity[];
+        persisted: boolean;
     };
 }
+export interface ReviewArtifactGateInvocation {
+    runId: string | null;
+    targetId: string | null;
+    runtime: string | null;
+    model: string | null;
+    reasoningEffort: string | null;
+    source: string | null;
+}
 export type Severity = keyof ReviewGateVerdict['counts'];
+export interface ReviewGateArtifactSnapshot {
+    readonly content: string;
+    readonly signature: string;
+}
 export interface ParseReviewGateVerdictOptions {
     normalizeMissingEmptySeveritySections?: boolean;
+    artifactSnapshot?: ReviewGateArtifactSnapshot;
 }
 export declare function severityDisplayName(severity: Severity): string;
 export declare function parseReviewGateVerdict(artifactPath: string, options?: ParseReviewGateVerdictOptions): Promise<ReviewGateVerdict>;

package/dist/commands/gate/review-verdict.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"review-verdict.d.ts","sourceRoot":"","sources":["../../../src/commands/gate/review-verdict.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC5C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE;QACN,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IACF,QAAQ,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE;QACd,kBAAkB,EAAE,QAAQ,EAAE,CAAC;KAChC,CAAC;CACH;AAED,MAAM,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAC;AAEzD,MAAM,WAAW,6BAA6B;IAC5C,qCAAqC,CAAC,EAAE,OAAO,CAAC;CACjD;AAqID,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAE9D;AAqRD,wBAAsB,sBAAsB,CAC1C,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,6BAAkC,GAC1C,OAAO,CAAC,iBAAiB,CAAC,CAsD5B"}
+{"version":3,"file":"review-verdict.d.ts","sourceRoot":"","sources":["../../../src/commands/gate/review-verdict.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC5C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,cAAc,CAAC,EAAE,4BAA4B,CAAC;IAC9C,MAAM,EAAE;QACN,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IACF,QAAQ,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE;QACd,kBAAkB,EAAE,QAAQ,EAAE,CAAC;QAC/B,SAAS,EAAE,OAAO,CAAC;KACpB,CAAC;CACH;AAED,MAAM,WAAW,4BAA4B;IAC3C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAC;AAEzD,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,6BAA6B;IAC5C,qCAAqC,CAAC,EAAE,OAAO,CAAC;IAChD,gBAAgB,CAAC,EAAE,0BAA0B,CAAC;CAC/C;AA6LD,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAE9D;AAgSD,wBAAsB,sBAAsB,CAC1C,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,6BAAkC,GAC1C,OAAO,CAAC,iBAAiB,CAAC,CAiF5B"}

package/dist/commands/gate/review-verdict.js

@@ -1,3 +1,4 @@
+import { createHash } from 'node:crypto';
 import { readFile, writeFile } from 'node:fs/promises';
 import { getFrontmatterBlock } from '../shared/frontmatter.js';
 import YAML from 'yaml';
@@ -13,12 +14,50 @@ const FRONTMATTER_COUNT_KEYS = {
     medium: ['oat_review_medium_count', 'medium'],
     minor: ['oat_review_minor_count', 'minor'],
 };
+function artifactContentSignature(content) {
+    return createHash('sha256').update(content).digest('hex');
+}
+async function assertArtifactContentCurrent(artifactPath, expectedContent) {
+    let currentContent;
+    try {
+        currentContent = await readFile(artifactPath, 'utf8');
+    }
+    catch (error) {
+        const detail = error instanceof Error ? error.message : String(error);
+        throw new Error(`Unable to verify review artifact snapshot at ${artifactPath}: ${detail}`, { cause: error });
+    }
+    if (artifactContentSignature(currentContent) !==
+        artifactContentSignature(expectedContent)) {
+        throw new Error(`Review artifact at ${artifactPath} changed after gate correlation; rerun the gate so correlation and verdict evaluation use one immutable snapshot.`);
+    }
+}
 function normalizeReviewType(value) {
     return value === 'code' || value === 'artifact' ? value : 'unknown';
 }
 function stringOrNull(value) {
     return typeof value === 'string' && value.trim() ? value.trim() : null;
 }
+function readGateInvocation(frontmatter) {
+    const keys = [
+        'oat_gate_run_id',
+        'oat_gate_target',
+        'oat_gate_runtime',
+        'oat_invocation_model',
+        'oat_invocation_reasoning_effort',
+        'oat_invocation_source',
+    ];
+    if (!keys.some((key) => key in frontmatter)) {
+        return undefined;
+    }
+    return {
+        runId: stringOrNull(frontmatter['oat_gate_run_id']),
+        targetId: stringOrNull(frontmatter['oat_gate_target']),
+        runtime: stringOrNull(frontmatter['oat_gate_runtime']),
+        model: stringOrNull(frontmatter['oat_invocation_model']),
+        reasoningEffort: stringOrNull(frontmatter['oat_invocation_reasoning_effort']),
+        source: stringOrNull(frontmatter['oat_invocation_source']),
+    };
+}
 function parseCountValue(value) {
     const numberValue = typeof value === 'number'
         ? value
@@ -244,7 +283,7 @@ function insertMissingSeveritySection(content, severity) {
     const needsTrailingBlank = suffix.length > 0 ? '\n' : '';
     return `${content.slice(0, insertionPoint)}${insertion}${needsTrailingBlank}${suffix}`;
 }
-async function normalizeMissingEmptySeveritySections(artifactPath, content, counts) {
+async function normalizeMissingEmptySeveritySections(artifactPath, content, counts, persist) {
     if (!findFindingsSection(content)) {
         throw new Error(`Review artifact at ${artifactPath} does not contain a ## Findings section, so missing severity headings cannot be safely normalized.`);
     }
@@ -257,10 +296,16 @@ async function normalizeMissingEmptySeveritySections(artifactPath, content, coun
         normalizedContent = insertMissingSeveritySection(normalizedContent, severity);
         insertedSeverities.push(severity);
     }
-    if (insertedSeverities.length > 0) {
+    if (insertedSeverities.length > 0 && persist) {
+        await assertArtifactContentCurrent(artifactPath, content);
         await writeFile(artifactPath, normalizedContent, 'utf8');
+        await assertArtifactContentCurrent(artifactPath, normalizedContent);
     }
-    return { content: normalizedContent, insertedSeverities };
+    return {
+        content: normalizedContent,
+        insertedSeverities,
+        persisted: insertedSeverities.length > 0 && persist,
+    };
 }
 function resolveCounts(content, frontmatter) {
     const frontmatterCounts = readFrontmatterCounts(frontmatter);
@@ -275,12 +320,21 @@ function resolveCounts(content, frontmatter) {
 }
 export async function parseReviewGateVerdict(artifactPath, options = {}) {
     let content;
-    try {
-        content = await readFile(artifactPath, 'utf8');
+    if (options.artifactSnapshot) {
+        content = options.artifactSnapshot.content;
+        if (artifactContentSignature(content) !== options.artifactSnapshot.signature) {
+            throw new Error(`Review artifact snapshot signature at ${artifactPath} does not match its content.`);
+        }
+        await assertArtifactContentCurrent(artifactPath, content);
     }
-    catch (error) {
-        const detail = error instanceof Error ? error.message : String(error);
-        throw new Error(`Unable to read review artifact at ${artifactPath}: ${detail}`, { cause: error });
+    else {
+        try {
+            content = await readFile(artifactPath, 'utf8');
+        }
+        catch (error) {
+            const detail = error instanceof Error ? error.message : String(error);
+            throw new Error(`Unable to read review artifact at ${artifactPath}: ${detail}`, { cause: error });
+        }
     }
     const frontmatterBlock = getFrontmatterBlock(content);
     const frontmatter = frontmatterBlock
@@ -288,10 +342,12 @@ export async function parseReviewGateVerdict(artifactPath, options = {}) {
         : {};
     let counts = resolveCounts(content, frontmatter);
     let insertedSeverities = [];
+    let normalizationPersisted = false;
     if (counts && options.normalizeMissingEmptySeveritySections) {
-        const normalized = await normalizeMissingEmptySeveritySections(artifactPath, content, counts);
+        const normalized = await normalizeMissingEmptySeveritySections(artifactPath, content, counts, !options.artifactSnapshot);
         content = normalized.content;
         insertedSeverities = normalized.insertedSeverities;
+        normalizationPersisted = normalized.persisted;
     }
     if (!counts) {
         counts = parseFindingsSectionCounts(content, artifactPath);
@@ -299,17 +355,24 @@ export async function parseReviewGateVerdict(artifactPath, options = {}) {
     if (!counts) {
         throw new Error(`Review artifact at ${artifactPath} does not contain recognizable review findings or explicit verdict counts.`);
     }
+    const gateInvocation = readGateInvocation(frontmatter);
+    if (options.artifactSnapshot) {
+        await assertArtifactContentCurrent(artifactPath, options.artifactSnapshot.content);
+    }
     return {
         artifactPath,
         reviewType: normalizeReviewType(frontmatter['oat_review_type']),
         scope: stringOrNull(frontmatter['oat_review_scope']),
         invocation: stringOrNull(frontmatter['oat_review_invocation']),
+        project: stringOrNull(frontmatter['oat_project']),
+        ...(gateInvocation ? { gateInvocation } : {}),
         counts,
         blocking: hasBlockingFindings(counts),
         ...(insertedSeverities.length > 0
             ? {
                 normalization: {
                     insertedSeverities,
+                    persisted: normalizationPersisted,
                 },
             }
             : {}),

package/dist/commands/project/dispatch-ceiling/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/commands/project/dispatch-ceiling/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,sBAAsB,CAAC;AAO9B,OAAO,EAML,KAAK,uBAAuB,EAU7B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,KAAK,cAAc,EAEpB,MAAM,iBAAiB,CAAC;AAazB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA8BpC,UAAU,2BAA2B;IACnC,mBAAmB,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,cAAc,CAAC;IAChE,kBAAkB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,sBAAsB,EAAE,CACtB,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,EACrB,GAAG,EAAE,MAAM,CAAC,UAAU,KACnB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7B,oBAAoB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC7E,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/C,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC;CAC/B;AAs+CD,wBAAgB,mCAAmC,CACjD,SAAS,GAAE,OAAO,CAAC,2BAA2B,CAAM,GACnD,OAAO,CAyDT"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/commands/project/dispatch-ceiling/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,sBAAsB,CAAC;AAY9B,OAAO,EAUL,KAAK,uBAAuB,EAY7B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,KAAK,cAAc,EAEpB,MAAM,iBAAiB,CAAC;AAezB,OAAO,EAAE,OAAO,EAAU,MAAM,WAAW,CAAC;AAiC5C,UAAU,2BAA2B;IACnC,mBAAmB,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,cAAc,CAAC;IAChE,kBAAkB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,sBAAsB,EAAE,CACtB,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,EACrB,GAAG,EAAE,MAAM,CAAC,UAAU,KACnB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7B,oBAAoB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC7E,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/C,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC;CAC/B;AA+0ED,wBAAgB,mCAAmC,CACjD,SAAS,GAAE,OAAO,CAAC,2BAA2B,CAAM,GACnD,OAAO,CAwFT"}