@open-cr-agent/cloud-contract 0.0.0-stage → 0.5.0

package/fixtures/redaction-vectors.json

@@ -0,0 +1,68 @@
+{
+  "about": "The redaction pass of @open-cr-agent/cloud-contract (packages/cloud-contract/src/redact.ts in Open-CR-Agent), which the ocra CLI and ocra Cloud both run. Each `redact` entry is a line whose `secret` must not survive; each `keep` line must come back unchanged. ocra Cloud tests its generated copy of this file.",
+  "redact": [
+    { "line": "const key = \"AKIAABCDEFGHIJKLMNOP\";", "secret": "AKIAABCDEFGHIJKLMNOP" },
+    { "line": "token: ghp_abcdefghijklmnopqrstuvwxyz0123", "secret": "ghp_abcdefghijklmnop" },
+    {
+      "line": "ANTHROPIC=sk-ant-api03-abcdefghijklmnopqrstuvwxyz",
+      "secret": "sk-ant-api03-abcdef"
+    },
+    { "line": "or = 'sk-or-v1-0123456789abcdef0123456789abcdef'", "secret": "sk-or-v1-0123456789" },
+    { "line": "maps = AIzaSyA-1234567890abcdefghijklmnopqrstu", "secret": "AIzaSyA-1234567890" },
+    {
+      "line": "-----BEGIN RSA PRIVATE KEY-----\nMIIEow\n-----END RSA PRIVATE KEY-----",
+      "secret": "MIIEow"
+    },
+    {
+      "line": "const k = \"Zq3Xk9LmP2vR7tYb4NcW8sJh1Df6Ga5Ue0Oi\";",
+      "secret": "Zq3Xk9LmP2vR7tYb4NcW8sJh1Df6Ga5Ue0Oi"
+    },
+    {
+      "line": "aws_secret = wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY",
+      "secret": "wJalrXUtnFEMI/K7MDENG"
+    },
+    {
+      "line": "AWS_SECRET_ACCESS_KEY=wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY",
+      "secret": "bPxRfiCYEXAMPLEKEY"
+    },
+    {
+      "line": "api_key = \"4f2a9c1e7b3d8a6f0e5c2b9d7a1f3e8c6b0d4a2f9e7c5b3a1d8f6e4c2a0b9d7e\"",
+      "secret": "4f2a9c1e7b3d8a6f0e5c2b9d"
+    },
+    {
+      "line": "key 9b8f7e6d5c4b3a291807f6e5d4c3b2a1",
+      "secret": "9b8f7e6d5c4b3a291807f6e5d4c3b2a1"
+    },
+    {
+      "line": "DATABASE_URL=postgres://admin:S3cr3tPass@db.internal:5432/app",
+      "secret": "S3cr3tPass"
+    },
+    { "line": "redis://:hunter2hunter2@cache:6379", "secret": "hunter2hunter2" },
+    {
+      "line": "fetch(\"https://hooks.slack.com/services/T0AAAA/B0BBBB/XXXXXXXXXXXXXXXX\")",
+      "secret": "T0AAAA/B0BBBB"
+    },
+    {
+      "line": "url: https://discord.com/api/webhooks/123456789012345678/abcDEF_ghi-JKL",
+      "secret": "abcDEF_ghi-JKL"
+    },
+    { "line": "password = \"hunter2hunter2\"", "secret": "hunter2hunter2" },
+    { "line": "\"apiKey\": \"live_51HxYz\",", "secret": "live_51HxYz" },
+    { "line": "DB_PASSWORD: 'correct horse battery'", "secret": "correct horse battery" },
+    { "line": "client_secret='abc123def'", "secret": "abc123def" }
+  ],
+  "keep": [
+    "const total = items.reduce((n, i) => n + i.price, 0);",
+    "import { ReviewSettings } from \"./components/settings/ReviewSettingsPage\";",
+    "packages/cli/src/review/cloud-findings.ts",
+    "function getElementByIdAndQuerySelectorAllNodes() {}",
+    "useEffectWithDependencyArrayAndCleanup2(x);",
+    "const password = readPasswordFromEnv();",
+    "if (token === undefined) return;",
+    "see https://github.com/jma49/Open-CR-Agent/blob/main/docs/manual/en/cli.mdx",
+    "const ALPHABET = \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdef\";",
+    "// https://github.com/jma49/open-cr-agent/blob/main/docs/adr/0028-findings.md",
+    "import { x } from '../../packages/core/src/pipeline/output-schema.ts';",
+    "export async function fetchAccountMemoryForRepository(repoHash: string) {}"
+  ]
+}

package/fixtures/upload.json

@@ -0,0 +1,108 @@
+{
+  "about": "POST /api/reviews as the ocra CLI sends it, made by uploadOf() and sharedFindings() from a sample report (packages/cli/src/cloud/contract.test.ts; OCRA_UPDATE_FIXTURES=1 rewrites it). ocra Cloud must keep every field.",
+  "runId": "run-2026-10-04-a1b2",
+  "repoHash": "8d969eef6ecad3c29a3a629280e686cf0c3f5d5a86aff3ca12020c923adc6c92",
+  "source": "github",
+  "tier": "full",
+  "verdict": "significant_concerns",
+  "complete": false,
+  "findings": {
+    "critical": 1,
+    "warning": 1,
+    "suggestion": 1
+  },
+  "files": {
+    "reviewed": 2,
+    "notReviewed": 1
+  },
+  "tasks": {
+    "completed": 2,
+    "failed": 1
+  },
+  "usage": {
+    "inputTokens": 1200,
+    "outputTokens": 340,
+    "costUsd": 0.4375
+  },
+  "durationMs": 61234,
+  "ocraVersion": "0.0.0",
+  "reviewers": {
+    "logic": {
+      "tasks": 2,
+      "failedTasks": 1,
+      "findings": {
+        "critical": 0,
+        "warning": 1,
+        "suggestion": 0
+      },
+      "costUsd": 0.1875,
+      "fixed": 1,
+      "dismissed": 0
+    },
+    "security": {
+      "tasks": 1,
+      "failedTasks": 0,
+      "findings": {
+        "critical": 1,
+        "warning": 0,
+        "suggestion": 1
+      },
+      "costUsd": 0.25,
+      "fixed": 0,
+      "dismissed": 1
+    }
+  },
+  "verification": {
+    "confirmed": 1,
+    "uncertain": 1,
+    "unchecked": 1
+  },
+  "outcomes": {
+    "fixed": 1,
+    "dismissed": 1
+  },
+  "findingList": [
+    {
+      "fingerprint": "0123456789abcdef",
+      "reviewer": "security",
+      "severity": "critical",
+      "category": "security",
+      "verification": "confirmed",
+      "file": "src/db.ts",
+      "lineStart": 10,
+      "lineEnd": 12,
+      "title": "SQL built from input",
+      "body": "The id reaches the query unescaped.",
+      "suggestion": null,
+      "code": "const q = 'SELECT * FROM t WHERE id = ' + id;"
+    },
+    {
+      "fingerprint": "fedcba9876543210",
+      "reviewer": "logic",
+      "severity": "warning",
+      "category": "correctness",
+      "verification": "uncertain",
+      "file": "src/retry.ts",
+      "lineStart": null,
+      "lineEnd": null,
+      "title": "Retry without a limit",
+      "body": "A failing call is retried forever.",
+      "suggestion": "Stop after three attempts.",
+      "code": "while (true) await attempt();"
+    },
+    {
+      "fingerprint": "1111222233334444",
+      "reviewer": "security",
+      "severity": "suggestion",
+      "category": "security",
+      "verification": "unchecked",
+      "file": "src/db.ts",
+      "lineStart": 10,
+      "lineEnd": 12,
+      "title": "SQL built from input",
+      "body": "The id reaches the query unescaped.",
+      "suggestion": null,
+      "code": "const q = 'SELECT * FROM t WHERE id = ' + id;"
+    }
+  ]
+}

package/package.json

@@ -1,6 +1,43 @@
 {
   "name": "@open-cr-agent/cloud-contract",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.5.0",
+  "description": "The wire contract between Open-CR-Agent and ocra Cloud: Zod schemas, limits, vocabularies, the redaction pass and its test vectors",
+  "keywords": [
+    "code-review",
+    "zod",
+    "schema"
+  ],
+  "license": "Apache-2.0",
+  "homepage": "https://ocracloud.com",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/jma49/Open-CR-Agent.git",
+    "directory": "packages/cloud-contract"
+  },
+  "bugs": "https://github.com/jma49/Open-CR-Agent/issues",
+  "engines": {
+    "node": ">=22.19"
+  },
+  "type": "module",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "@open-cr-agent/source": "./src/index.ts",
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./fixtures/*": "./fixtures/*",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "fixtures",
+    "!dist/**/*.map"
+  ],
+  "dependencies": {
+    "zod": "^4.6.5"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}