@prism-d1/cli 1.1.2 → 1.3.0

package/dist/src/codewatch/results.d.ts

@@ -0,0 +1,210 @@
+export declare const RESULT_SCHEMA_VERSION = 1;
+export declare const RESULTS_DIR = ".prism/results";
+/** Pre-commit ran with no gitleaks on PATH: the commit was allowed but not secret-scanned. */
+export declare const REASON_GITLEAKS_MISSING = "gitleaks-missing";
+export type Severity = 'high' | 'medium' | 'low';
+export type FindingCategory = 'quality' | 'security';
+export interface Finding {
+    severity: Severity;
+    category: FindingCategory;
+    /** Rule that fired: a gitleaks RuleID, or the review rule the reviewer named. */
+    rule: string;
+    file: string;
+    line: number | null;
+    message: string;
+    /** security-review / security-pentest: the Security Agent risk level (CRITICAL ... UNKNOWN), finding title, CWE and id. */
+    risk_level?: string;
+    title?: string;
+    cwe?: string | null;
+    finding_id?: string;
+    /** security-review only: the path exactly as the service reported it (file is repo-relative). */
+    raw_file?: string;
+    /** security-threat-model only: the threat's id, STRIDE categories, mitigation and every evidence path (repo-relative). */
+    threat_id?: string;
+    stride?: string[];
+    recommendation?: string;
+    evidence?: string[];
+    /** security-pentest only: the agent's confidence (HIGH | MEDIUM | LOW | FALSE_POSITIVE). */
+    confidence?: string;
+}
+/**
+ * `secrets` = gitleaks; `review` = the reviewer (kiro-cli / Claude Code);
+ * `security-review` = an AWS Security Agent code review job;
+ * `security-threat-model` = an AWS Security Agent threat model job;
+ * `security-pentest` = an AWS Security Agent penetration test job.
+ */
+export type ResultKind = 'secrets' | 'review' | 'security-review' | 'security-threat-model' | 'security-pentest';
+/** security-threat-model only: the job behind the result. */
+export interface ThreatModelInfo {
+    job_id: string;
+    threat_model_id: string;
+    agent_space_id: string;
+    region: string;
+    account?: string;
+    job_status: string;
+    /** Threats per severity (CRITICAL ... INFO). */
+    counts: Record<string, number>;
+    /** Threats per STRIDE category. */
+    stride_counts: Record<string, number>;
+    /** Repo paths of the scope docs, as read from the commit. */
+    scope_docs: string[];
+    /** The agent's system overview, in full; null until the job completes. */
+    system_overview: string | null;
+    service_created_at?: string | null;
+    service_updated_at?: string | null;
+}
+/** security-review only: the job behind the result. */
+export interface SecurityReviewInfo {
+    job_id: string;
+    code_review_id: string;
+    agent_space_id: string;
+    region: string;
+    /** The AWS account the job ran in, so `security findings` only completes its own account's pending records. */
+    account?: string;
+    /** diff: the branch diff base...tip. full: the whole repo at tip. unknown: fetched later by `security findings`. */
+    scope: 'diff' | 'full' | 'unknown';
+    /**
+     * The commit the code review's source asset (repo/<slug>/latest.zip) held
+     * when the job started: the code a diff job reads around the patch. null
+     * when unknown (a job `security findings` fetched with no pending record).
+     */
+    context_commit?: string | null;
+    job_status: string;
+    /** Findings per Security Agent risk level. */
+    counts: Record<string, number>;
+    /** The service's job timestamps, and updatedAt - createdAt (queue plus run time), when it reported them. */
+    service_created_at?: string | null;
+    service_updated_at?: string | null;
+    service_duration_s?: number | null;
+    /** Our wall time from starting the job to seeing it finish (code-review only; includes polling). */
+    wall_s?: number | null;
+}
+/**
+ * security-pentest only: the penetration-test job behind the result, and the
+ * temporary environment it ran against. Mirrors SecurityReviewInfo; a pentest
+ * finding has no file/line, carries a `confidence`, and the environment handle
+ * is what `security pentest --cleanup` tears down.
+ */
+export interface PentestInfo {
+    job_id: string;
+    pentest_id: string;
+    agent_space_id: string;
+    /** True when this run created a dedicated agent space (teardown deletes it); false when it reused a shared one. */
+    agent_space_dedicated: boolean;
+    region: string;
+    /** The AWS account the job ran in, so findings only completes its own account's pending records. */
+    account?: string;
+    /** The verified target domain the pentest ran against (app.<zone>). */
+    target_host: string;
+    job_status: string;
+    /** Findings per Security Agent risk level, after dropping FALSE_POSITIVE confidence (unless --include-false-positives). */
+    counts: Record<string, number>;
+    /** First paragraph of the job's `overview` text, when the service reported one. */
+    overview?: string | null;
+    /** The CloudFormation stack and run slug of the temporary environment, for --cleanup. */
+    stack?: string | null;
+    slug?: string | null;
+    /** When the environment is set to auto-expire (the prism:expires-at tag), ISO. */
+    expires_at?: string | null;
+    /** The agent ENIs' security group id: teardown waits for its ENIs to drain before destroying the stack. */
+    agent_security_group_id?: string | null;
+    /** The app container's log group, for debugging hints. */
+    app_log_group?: string | null;
+    /** The PRIVATE_VPC target domain this run created; teardown deletes it. */
+    target_domain_id?: string | null;
+    /** Set when the last teardown left the stack up (destroy failed twice); --cleanup retries it. */
+    teardown_failed?: {
+        at: string;
+        reason: string;
+    } | null;
+    service_created_at?: string | null;
+    service_updated_at?: string | null;
+    service_duration_s?: number | null;
+    wall_s?: number | null;
+}
+export type ResultHook = 'pre-commit' | 'pre-push' | 'ci' | 'manual';
+/**
+ * ok        ran, nothing found
+ * findings  ran, found something
+ * error     could not produce a verdict (tool missing, crashed, unparseable output)
+ * skipped   did not run: no changes to review, or the hook was bypassed (`--no-verify`)
+ * pending   security-review / security-pentest: the job was started and has no
+ *           verdict yet. finished_at equals started_at until the record is
+ *           completed in place.
+ */
+export type ResultStatus = 'ok' | 'findings' | 'error' | 'skipped' | 'pending';
+export interface PrismResult {
+    schema_version: typeof RESULT_SCHEMA_VERSION;
+    kind: ResultKind;
+    hook: ResultHook;
+    status: ResultStatus;
+    /** Tool that produced the verdict: 'gitleaks', 'kiro', 'claude', or 'none'. */
+    tool: string;
+    tool_version: string | null;
+    /** Model the reviewer reported, or the one requested if it reported none. null when unknown. */
+    model: string | null;
+    /** Commit reviewed. null for pre-commit, where the commit does not exist yet. */
+    commit: string | null;
+    /**
+     * Tree object of the change. For pre-commit this is the staged tree, which
+     * equals the tree of the commit that follows -- how a later pre-push links a
+     * pushed commit back to its secret scan, and so detects `--no-verify`.
+     */
+    tree: string | null;
+    branch: string | null;
+    upstream: string | null;
+    /** Base commit of the reviewed range (pre-push). */
+    base: string | null;
+    started_at: string;
+    finished_at: string;
+    findings: Finding[];
+    summary: string | null;
+    score: number | null;
+    /**
+     * Why the run errored or was skipped. Free text, except these codes, which
+     * consumers (the dashboard, CI) match on exactly: see REASON_*.
+     */
+    reason: string | null;
+    /** Present on kind security-review. */
+    security?: SecurityReviewInfo;
+    /** Present on kind security-threat-model. */
+    threat_model?: ThreatModelInfo;
+    /** Present on kind security-pentest. */
+    pentest?: PentestInfo;
+}
+export type ResultInit = Omit<PrismResult, 'schema_version' | 'tool_version' | 'model' | 'commit' | 'tree' | 'branch' | 'upstream' | 'base' | 'summary' | 'score' | 'reason' | 'findings'> & Partial<Pick<PrismResult, 'tool_version' | 'model' | 'commit' | 'tree' | 'branch' | 'upstream' | 'base' | 'summary' | 'score' | 'reason' | 'findings'>>;
+export declare function makeResult(init: ResultInit): PrismResult;
+/** `20261104T202000123Z` -- sortable, colon-free. */
+export declare function compactTimestamp(iso: string): string;
+/**
+ * `<commit12>-<time>-<hook>-<kind>.json`, or `tree-<tree12>-...` when there is
+ * no commit yet (pre-commit).
+ */
+export declare function resultFileName(r: PrismResult): string;
+/**
+ * Writes a result atomically (temp file + rename), so a dashboard reading the
+ * directory never sees a half-written file. Returns the absolute path.
+ */
+/**
+ * Makes sure `.prism/results/` is ignored in this clone. Under the global
+ * hooks a repo may never have had codewatch installed, so it has no .gitignore
+ * entry; `.git/info/exclude` is local to the clone and keeps the working tree
+ * clean without touching any tracked file. Outside a git repo it does nothing.
+ */
+export declare function ensureResultsExcluded(repoRoot: string): boolean;
+/**
+ * `id` (a ResultEntry id) rewrites that existing file in place instead of
+ * naming a new one: how a pending security-review record is completed.
+ */
+export declare function writeResult(repoRoot: string, r: PrismResult, id?: string): string;
+export interface ResultEntry {
+    /** File name without `.json`: the result's stable id (used by report links). */
+    id: string;
+    result: PrismResult;
+}
+/** Every parseable result with its id. Ids come from the directory listing, never from input. */
+export declare function readResultEntries(repoRoot: string): ResultEntry[];
+/** Reads every parseable result file. Unparseable files are ignored, not fatal. */
+export declare function readResults(repoRoot: string): PrismResult[];
+export declare function countBySeverity(findings: Finding[]): Record<Severity, number>;
+//# sourceMappingURL=results.d.ts.map

package/dist/src/codewatch/results.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"results.d.ts","sourceRoot":"","sources":["../../../src/codewatch/results.ts"],"names":[],"mappings":"AAgBA,eAAO,MAAM,qBAAqB,IAAI,CAAC;AACvC,eAAO,MAAM,WAAW,mBAAmB,CAAC;AAE5C,8FAA8F;AAC9F,eAAO,MAAM,uBAAuB,qBAAqB,CAAC;AAE1D,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AACjD,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,UAAU,CAAC;AAErD,MAAM,WAAW,OAAO;IACtB,QAAQ,EAAE,QAAQ,CAAC;IACnB,QAAQ,EAAE,eAAe,CAAC;IAC1B,iFAAiF;IACjF,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,2HAA2H;IAC3H,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iGAAiG;IACjG,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0HAA0H;IAC1H,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,4FAA4F;IAC5F,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,QAAQ,GAAG,iBAAiB,GAAG,uBAAuB,GAAG,kBAAkB,CAAC;AAEjH,6DAA6D;AAC7D,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,mCAAmC;IACnC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,6DAA6D;IAC7D,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,0EAA0E;IAC1E,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,uDAAuD;AACvD,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,+GAA+G;IAC/G,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oHAAoH;IACpH,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACnC;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,8CAA8C;IAC9C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,4GAA4G;IAC5G,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,oGAAoG;IACpG,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,mHAAmH;IACnH,qBAAqB,EAAE,OAAO,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,oGAAoG;IACpG,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uEAAuE;IACvE,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,2HAA2H;IAC3H,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,mFAAmF;IACnF,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,yFAAyF;IACzF,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,kFAAkF;IAClF,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,2GAA2G;IAC3G,uBAAuB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,0DAA0D;IAC1D,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,2EAA2E;IAC3E,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,iGAAiG;IACjG,eAAe,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACxD,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AACD,MAAM,MAAM,UAAU,GAAG,YAAY,GAAG,UAAU,GAAG,IAAI,GAAG,QAAQ,CAAC;AACrE;;;;;;;;GAQG;AACH,MAAM,MAAM,YAAY,GAAG,IAAI,GAAG,UAAU,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC;AAE/E,MAAM,WAAW,WAAW;IAC1B,cAAc,EAAE,OAAO,qBAAqB,CAAC;IAC7C,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,YAAY,CAAC;IACrB,+EAA+E;IAC/E,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,gGAAgG;IAChG,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,iFAAiF;IACjF,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB;;;;OAIG;IACH,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,oDAAoD;IACpD,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB;;;OAGG;IACH,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,uCAAuC;IACvC,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B,6CAA6C;IAC7C,YAAY,CAAC,EAAE,eAAe,CAAC;IAC/B,wCAAwC;IACxC,OAAO,CAAC,EAAE,WAAW,CAAC;CACvB;AAED,MAAM,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,gBAAgB,GAAG,cAAc,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,CAAC,GACtL,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC;AAE5J,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,WAAW,CAgBxD;AAOD,qDAAqD;AACrD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,WAAW,GAAG,MAAM,CAGrD;AAED;;;GAGG;AACH;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAS/D;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAYjF;AAED,MAAM,WAAW,WAAW;IAC1B,gFAAgF;IAChF,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,iGAAiG;AACjG,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,EAAE,CAgBjE;AAED,mFAAmF;AACnF,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,EAAE,CAE3D;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAI7E"}

package/dist/src/codewatch/results.js

@@ -0,0 +1,127 @@
+/**
+ * Codewatch result schema and writer (local git-hook gate runs).
+ *
+ * Every local gate run (the pre-commit secret scan, the pre-push review, and a
+ * detected skip of either) is written as one JSON file under `.prism/results/`.
+ * The schema lives here, not in the hook code, so `prism-cli dashboard` and CI
+ * can read the same files without re-deriving the shape.
+ *
+ * Results are local developer evidence, never committed: the installer adds
+ * `.prism/results/` to .gitignore.
+ */
+import { mkdirSync, readdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import { appendFileSync, existsSync as fileExists } from 'node:fs';
+import { run } from '../utils/exec.js';
+export const RESULT_SCHEMA_VERSION = 1;
+export const RESULTS_DIR = '.prism/results';
+/** Pre-commit ran with no gitleaks on PATH: the commit was allowed but not secret-scanned. */
+export const REASON_GITLEAKS_MISSING = 'gitleaks-missing';
+export function makeResult(init) {
+    return {
+        schema_version: RESULT_SCHEMA_VERSION,
+        tool_version: null,
+        model: null,
+        commit: null,
+        tree: null,
+        branch: null,
+        upstream: null,
+        base: null,
+        summary: null,
+        score: null,
+        reason: null,
+        findings: [],
+        ...init,
+    };
+}
+/** Keeps only characters safe in a file name, so no value can escape the results dir. */
+function safePart(s) {
+    return s.replace(/[^A-Za-z0-9_-]/g, '').slice(0, 40) || 'x';
+}
+/** `20261104T202000123Z` -- sortable, colon-free. */
+export function compactTimestamp(iso) {
+    return iso.replace(/[-:]/g, '').replace('.', '');
+}
+/**
+ * `<commit12>-<time>-<hook>-<kind>.json`, or `tree-<tree12>-...` when there is
+ * no commit yet (pre-commit).
+ */
+export function resultFileName(r) {
+    const id = r.commit ? safePart(r.commit.slice(0, 12)) : r.tree ? `tree-${safePart(r.tree.slice(0, 12))}` : 'nocommit';
+    return `${id}-${compactTimestamp(r.started_at)}-${safePart(r.hook)}-${safePart(r.kind)}.json`;
+}
+/**
+ * Writes a result atomically (temp file + rename), so a dashboard reading the
+ * directory never sees a half-written file. Returns the absolute path.
+ */
+/**
+ * Makes sure `.prism/results/` is ignored in this clone. Under the global
+ * hooks a repo may never have had codewatch installed, so it has no .gitignore
+ * entry; `.git/info/exclude` is local to the clone and keeps the working tree
+ * clean without touching any tracked file. Outside a git repo it does nothing.
+ */
+export function ensureResultsExcluded(repoRoot) {
+    const probe = run('git', ['-C', repoRoot, 'check-ignore', '-q', `${RESULTS_DIR}/probe.json`]);
+    if (probe.ok)
+        return false;
+    const p = run('git', ['-C', repoRoot, 'rev-parse', '--path-format=absolute', '--git-path', 'info/exclude']);
+    if (!p.ok || !p.stdout)
+        return false;
+    mkdirSync(dirname(p.stdout), { recursive: true });
+    const prefix = fileExists(p.stdout) && !readFileSync(p.stdout, 'utf8').endsWith('\n') ? '\n' : '';
+    appendFileSync(p.stdout, `${prefix}# prism-cli codewatch results (local)\n/${RESULTS_DIR}/\n`);
+    return true;
+}
+/**
+ * `id` (a ResultEntry id) rewrites that existing file in place instead of
+ * naming a new one: how a pending security-review record is completed.
+ */
+export function writeResult(repoRoot, r, id) {
+    if (id !== undefined && !/^[A-Za-z0-9_-]{1,200}$/.test(id))
+        throw new Error(`invalid result id: ${id}`);
+    const dir = resolve(repoRoot, RESULTS_DIR);
+    if (!fileExists(dir)) {
+        try {
+            ensureResultsExcluded(repoRoot);
+        }
+        catch { /* never fail a write over this */ }
+    }
+    mkdirSync(dir, { recursive: true });
+    const dest = join(dir, id !== undefined ? `${id}.json` : resultFileName(r));
+    const tmp = `${dest}.${process.pid}.tmp`;
+    writeFileSync(tmp, JSON.stringify(r, null, 2) + '\n', { mode: 0o600 });
+    renameSync(tmp, dest);
+    return dest;
+}
+/** Every parseable result with its id. Ids come from the directory listing, never from input. */
+export function readResultEntries(repoRoot) {
+    const dir = resolve(repoRoot, RESULTS_DIR);
+    let files;
+    try {
+        files = readdirSync(dir).filter((f) => f.endsWith('.json'));
+    }
+    catch {
+        return [];
+    }
+    const out = [];
+    for (const f of files) {
+        try {
+            const r = JSON.parse(readFileSync(join(dir, f), 'utf8'));
+            if (r && r.schema_version === RESULT_SCHEMA_VERSION)
+                out.push({ id: f.slice(0, -'.json'.length), result: r });
+        }
+        catch { /* skip */ }
+    }
+    return out;
+}
+/** Reads every parseable result file. Unparseable files are ignored, not fatal. */
+export function readResults(repoRoot) {
+    return readResultEntries(repoRoot).map((e) => e.result);
+}
+export function countBySeverity(findings) {
+    const c = { high: 0, medium: 0, low: 0 };
+    for (const f of findings)
+        c[f.severity]++;
+    return c;
+}
+//# sourceMappingURL=results.js.map

package/dist/src/codewatch/results.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"results.js","sourceRoot":"","sources":["../../../src/codewatch/results.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC1F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,UAAU,IAAI,UAAU,EAAE,MAAM,SAAS,CAAC;AACnE,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAEvC,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AACvC,MAAM,CAAC,MAAM,WAAW,GAAG,gBAAgB,CAAC;AAE5C,8FAA8F;AAC9F,MAAM,CAAC,MAAM,uBAAuB,GAAG,kBAAkB,CAAC;AAmL1D,MAAM,UAAU,UAAU,CAAC,IAAgB;IACzC,OAAO;QACL,cAAc,EAAE,qBAAqB;QACrC,YAAY,EAAE,IAAI;QAClB,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,IAAI;QACZ,IAAI,EAAE,IAAI;QACV,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,EAAE;QACZ,GAAG,IAAI;KACR,CAAC;AACJ,CAAC;AAED,yFAAyF;AACzF,SAAS,QAAQ,CAAC,CAAS;IACzB,OAAO,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;AAC9D,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,CAAc;IAC3C,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;IACtH,OAAO,GAAG,EAAE,IAAI,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;AAChG,CAAC;AAED;;;GAGG;AACH;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,WAAW,aAAa,CAAC,CAAC,CAAC;IAC9F,IAAI,KAAK,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wBAAwB,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC;IAC5G,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACrC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAClG,cAAc,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,MAAM,2CAA2C,WAAW,KAAK,CAAC,CAAC;IAC/F,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,QAAgB,EAAE,CAAc,EAAE,EAAW;IACvE,IAAI,EAAE,KAAK,SAAS,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAC;IACxG,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC;YAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,kCAAkC,CAAC,CAAC;IACvF,CAAC;IACD,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACzC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACtB,OAAO,IAAI,CAAC;AACd,CAAC;AAQD,iGAAiG;AACjG,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC3C,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;YACzD,IAAI,CAAC,IAAI,CAAC,CAAC,cAAc,KAAK,qBAAqB;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QAChH,CAAC;QAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,OAAO,iBAAiB,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAmB;IACjD,MAAM,CAAC,GAA6B,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IACnE,KAAK,MAAM,CAAC,IAAI,QAAQ;QAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC1C,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/src/codewatch/reviewers/claude.d.ts

@@ -0,0 +1,9 @@
+import { type ReviewerAdapter } from './types.js';
+/**
+ * Claude Code headless review (`claude -p --output-format json`).
+ *
+ * The rules and the diff go in the prompt on stdin (no argv length limit, no
+ * file outside the working dir to grant access to). Needs no kiro-cli.
+ */
+export declare const claudeAdapter: ReviewerAdapter;
+//# sourceMappingURL=claude.d.ts.map

package/dist/src/codewatch/reviewers/claude.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude.d.ts","sourceRoot":"","sources":["../../../../src/codewatch/reviewers/claude.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuD,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AAMvG;;;;;GAKG;AACH,eAAO,MAAM,aAAa,EAAE,eAiC3B,CAAC"}

package/dist/src/codewatch/reviewers/claude.js

@@ -0,0 +1,48 @@
+import { extractReviewJson, normalizeReview, OUTPUT_CONTRACT } from './types.js';
+/** Read-only tools: the reviewer may look at surrounding code, never change it or run anything. */
+const ALLOWED_TOOLS = ['Read', 'Grep', 'Glob'];
+const DISALLOWED_TOOLS = ['Bash', 'Edit', 'Write', 'NotebookEdit', 'WebFetch', 'WebSearch', 'Task'];
+/**
+ * Claude Code headless review (`claude -p --output-format json`).
+ *
+ * The rules and the diff go in the prompt on stdin (no argv length limit, no
+ * file outside the working dir to grant access to). Needs no kiro-cli.
+ */
+export const claudeAdapter = {
+    id: 'claude',
+    binary: 'claude',
+    displayName: 'Claude Code',
+    invocation(req) {
+        const args = [
+            '-p',
+            '--output-format', 'json',
+            '--allowed-tools', ALLOWED_TOOLS.join(','),
+            '--disallowed-tools', DISALLOWED_TOOLS.join(','),
+        ];
+        if (req.model)
+            args.push('--model', req.model);
+        const input = 'You are a code reviewer. Review ONLY the changes in the diff below, for code quality and security, ' +
+            'against these rules. You may read files in the repository for context but must not modify anything.\n\n' +
+            `<rules>\n${req.rulesText}\n</rules>\n\n<diff>\n${req.diff}\n</diff>\n\n${OUTPUT_CONTRACT}`;
+        return { args, input };
+    },
+    parse(stdout) {
+        // Envelope: {"type":"result","is_error":false,"result":"<text>","modelUsage":{"<model>":{...}},...}
+        let env;
+        try {
+            env = JSON.parse(stdout.trim());
+        }
+        catch {
+            throw new Error('Claude Code output is not JSON (expected --output-format json)');
+        }
+        if (env?.is_error)
+            throw new Error(`Claude Code reported an error: ${String(env.result ?? env.subtype ?? 'unknown').slice(0, 300)}`);
+        if (typeof env?.result !== 'string')
+            throw new Error('Claude Code JSON has no "result" text');
+        const models = env.modelUsage && typeof env.modelUsage === 'object' ? Object.keys(env.modelUsage) : [];
+        // modelUsage can list a small helper model too; the one with the most output tokens did the review.
+        models.sort((a, b) => (env.modelUsage[b]?.outputTokens ?? 0) - (env.modelUsage[a]?.outputTokens ?? 0));
+        return normalizeReview(extractReviewJson(env.result), models[0] ?? null);
+    },
+};
+//# sourceMappingURL=claude.js.map

package/dist/src/codewatch/reviewers/claude.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude.js","sourceRoot":"","sources":["../../../../src/codewatch/reviewers/claude.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,eAAe,EAAwB,MAAM,YAAY,CAAC;AAEvG,mGAAmG;AACnG,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAC/C,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;AAEpG;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAAoB;IAC5C,EAAE,EAAE,QAAQ;IACZ,MAAM,EAAE,QAAQ;IAChB,WAAW,EAAE,aAAa;IAC1B,UAAU,CAAC,GAAG;QACZ,MAAM,IAAI,GAAG;YACX,IAAI;YACJ,iBAAiB,EAAE,MAAM;YACzB,iBAAiB,EAAE,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;YAC1C,oBAAoB,EAAE,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;SACjD,CAAC;QACF,IAAI,GAAG,CAAC,KAAK;YAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,KAAK,GACT,qGAAqG;YACrG,yGAAyG;YACzG,YAAY,GAAG,CAAC,SAAS,yBAAyB,GAAG,CAAC,IAAI,gBAAgB,eAAe,EAAE,CAAC;QAC9F,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACzB,CAAC;IACD,KAAK,CAAC,MAAM;QACV,oGAAoG;QACpG,IAAI,GAAQ,CAAC;QACb,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,GAAG,EAAE,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACrI,IAAI,OAAO,GAAG,EAAE,MAAM,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC9F,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvG,oGAAoG;QACpG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC;QACvG,OAAO,eAAe,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IAC3E,CAAC;CACF,CAAC"}

package/dist/src/codewatch/reviewers/index.d.ts

@@ -0,0 +1,39 @@
+import { type ParsedReview, type ReviewerAdapter, type ReviewerId, type ReviewRequest } from './types.js';
+export * from './types.js';
+export declare const ADAPTERS: Record<ReviewerId, ReviewerAdapter>;
+export { findOnPath, toolVersion } from '../../utils/tool-check.js';
+/** Reviewer tools present on PATH, in REVIEWER_IDS order. */
+export declare function detectReviewers(pathEnv?: string | undefined): ReviewerId[];
+export interface ReviewerChoice {
+    /** The reviewer to run, or null when none is available. */
+    id: ReviewerId | null;
+    /** Where the choice came from. */
+    source: 'git-config' | 'prism-config' | 'detected' | 'fallback' | 'none';
+    /** Set when the configured reviewer was not available and another was used. */
+    note: string | null;
+}
+/**
+ * Precedence: `git config prism.reviewer` (per-clone developer override), then
+ * `.prism/config.json` eval.reviewer (team default), then whatever is on PATH.
+ *
+ * If the chosen tool is not installed, another installed one is used and the
+ * substitution is noted, so a Claude Code user on a team that defaults to kiro
+ * still gets a review without installing kiro-cli.
+ */
+export declare function resolveReviewer(opts: {
+    gitConfigValue: string | null;
+    prismConfigValue: string | null | undefined;
+    available: ReviewerId[];
+}): ReviewerChoice;
+export interface ReviewRun {
+    ok: boolean;
+    review: ParsedReview | null;
+    error: string | null;
+    rawStdout: string;
+}
+/**
+ * Runs one adapter and parses its output. Never throws: a missing binary, a
+ * timeout, a non-zero exit and unparseable output all come back as ok:false.
+ */
+export declare function runReview(adapter: ReviewerAdapter, req: ReviewRequest, timeoutMs: number, binaryPath?: string): ReviewRun;
+//# sourceMappingURL=index.d.ts.map

package/dist/src/codewatch/reviewers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/codewatch/reviewers/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAA8B,KAAK,YAAY,EAAE,KAAK,eAAe,EAAE,KAAK,UAAU,EAAE,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAEtI,cAAc,YAAY,CAAC;AAE3B,eAAO,MAAM,QAAQ,EAAE,MAAM,CAAC,UAAU,EAAE,eAAe,CAGxD,CAAC;AAEF,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAEpE,6DAA6D;AAC7D,wBAAgB,eAAe,CAAC,OAAO,GAAE,MAAM,GAAG,SAA4B,GAAG,UAAU,EAAE,CAE5F;AAED,MAAM,WAAW,cAAc;IAC7B,2DAA2D;IAC3D,EAAE,EAAE,UAAU,GAAG,IAAI,CAAC;IACtB,kCAAkC;IAClC,MAAM,EAAE,YAAY,GAAG,cAAc,GAAG,UAAU,GAAG,UAAU,GAAG,MAAM,CAAC;IACzE,+EAA+E;IAC/E,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAC5C,SAAS,EAAE,UAAU,EAAE,CAAC;CACzB,GAAG,cAAc,CAuBjB;AAKD,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,YAAY,GAAG,IAAI,CAAC;IAC5B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAgCzH"}

package/dist/src/codewatch/reviewers/index.js

@@ -0,0 +1,97 @@
+import { spawnSync } from 'node:child_process';
+import { findOnPath } from '../../utils/tool-check.js';
+import { claudeAdapter } from './claude.js';
+import { kiroAdapter } from './kiro.js';
+import { isReviewerId, REVIEWER_IDS } from './types.js';
+export * from './types.js';
+export const ADAPTERS = {
+    kiro: kiroAdapter,
+    claude: claudeAdapter,
+};
+export { findOnPath, toolVersion } from '../../utils/tool-check.js';
+/** Reviewer tools present on PATH, in REVIEWER_IDS order. */
+export function detectReviewers(pathEnv = process.env.PATH) {
+    return REVIEWER_IDS.filter((id) => findOnPath(ADAPTERS[id].binary, pathEnv) !== null);
+}
+/**
+ * Precedence: `git config prism.reviewer` (per-clone developer override), then
+ * `.prism/config.json` eval.reviewer (team default), then whatever is on PATH.
+ *
+ * If the chosen tool is not installed, another installed one is used and the
+ * substitution is noted, so a Claude Code user on a team that defaults to kiro
+ * still gets a review without installing kiro-cli.
+ */
+export function resolveReviewer(opts) {
+    const { gitConfigValue, prismConfigValue, available } = opts;
+    let wanted = null;
+    let source = 'detected';
+    let note = null;
+    if (gitConfigValue) {
+        if (isReviewerId(gitConfigValue)) {
+            wanted = gitConfigValue;
+            source = 'git-config';
+        }
+        else
+            note = `ignored git config prism.reviewer="${gitConfigValue}" (expected ${REVIEWER_IDS.join(' or ')})`;
+    }
+    if (!wanted && prismConfigValue) {
+        if (isReviewerId(prismConfigValue)) {
+            wanted = prismConfigValue;
+            source = 'prism-config';
+        }
+        else
+            note = `ignored eval.reviewer="${prismConfigValue}" in .prism/config.json`;
+    }
+    if (wanted && available.includes(wanted))
+        return { id: wanted, source, note };
+    if (available.length === 0) {
+        return { id: null, source: 'none', note: wanted ? `${ADAPTERS[wanted].binary} is not on PATH` : 'neither kiro-cli nor claude is on PATH' };
+    }
+    if (wanted) {
+        return { id: available[0], source: 'fallback', note: `${ADAPTERS[wanted].binary} is not on PATH; used ${ADAPTERS[available[0]].binary} instead` };
+    }
+    return { id: available[0], source: 'detected', note };
+}
+/** Git sets these for hooks; a reviewer that shells out to git must not inherit them. */
+const GIT_HOOK_ENV = ['GIT_DIR', 'GIT_INDEX_FILE', 'GIT_WORK_TREE', 'GIT_PREFIX', 'GIT_OBJECT_DIRECTORY', 'GIT_ALTERNATE_OBJECT_DIRECTORIES'];
+/**
+ * Runs one adapter and parses its output. Never throws: a missing binary, a
+ * timeout, a non-zero exit and unparseable output all come back as ok:false.
+ */
+export function runReview(adapter, req, timeoutMs, binaryPath) {
+    const env = { ...process.env };
+    for (const k of GIT_HOOK_ENV)
+        delete env[k];
+    let inv;
+    try {
+        inv = adapter.invocation(req);
+    }
+    catch (e) {
+        return { ok: false, review: null, error: `could not build invocation: ${e.message}`, rawStdout: '' };
+    }
+    const res = spawnSync(binaryPath || adapter.binary, inv.args, {
+        cwd: req.repoRoot,
+        input: inv.input ?? '',
+        encoding: 'utf8',
+        env,
+        timeout: timeoutMs,
+        maxBuffer: 32 * 1024 * 1024,
+        stdio: ['pipe', 'pipe', 'pipe'],
+    });
+    const stdout = res.stdout || '';
+    if (res.error) {
+        const msg = res.error.code === 'ETIMEDOUT'
+            ? `${adapter.binary} timed out after ${Math.round(timeoutMs / 1000)}s`
+            : `${adapter.binary} failed to start: ${res.error.message}`;
+        return { ok: false, review: null, error: msg, rawStdout: stdout };
+    }
+    try {
+        const review = adapter.parse(stdout);
+        return { ok: true, review, error: null, rawStdout: stdout };
+    }
+    catch (e) {
+        const exit = res.status !== 0 ? ` (exit ${res.status}${res.stderr ? `: ${res.stderr.trim().slice(0, 200)}` : ''})` : '';
+        return { ok: false, review: null, error: `${e.message}${exit}`, rawStdout: stdout };
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/src/codewatch/reviewers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/codewatch/reviewers/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAgF,MAAM,YAAY,CAAC;AAEtI,cAAc,YAAY,CAAC;AAE3B,MAAM,CAAC,MAAM,QAAQ,GAAwC;IAC3D,IAAI,EAAE,WAAW;IACjB,MAAM,EAAE,aAAa;CACtB,CAAC;AAEF,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAEpE,6DAA6D;AAC7D,MAAM,UAAU,eAAe,CAAC,UAA8B,OAAO,CAAC,GAAG,CAAC,IAAI;IAC5E,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC;AACxF,CAAC;AAWD;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,IAI/B;IACC,MAAM,EAAE,cAAc,EAAE,gBAAgB,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAC7D,IAAI,MAAM,GAAsB,IAAI,CAAC;IACrC,IAAI,MAAM,GAA6B,UAAU,CAAC;IAClD,IAAI,IAAI,GAAkB,IAAI,CAAC;IAE/B,IAAI,cAAc,EAAE,CAAC;QACnB,IAAI,YAAY,CAAC,cAAc,CAAC,EAAE,CAAC;YAAC,MAAM,GAAG,cAAc,CAAC;YAAC,MAAM,GAAG,YAAY,CAAC;QAAC,CAAC;;YAChF,IAAI,GAAG,sCAAsC,cAAc,eAAe,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;IAC9G,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,gBAAgB,EAAE,CAAC;QAChC,IAAI,YAAY,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAAC,MAAM,GAAG,gBAAgB,CAAC;YAAC,MAAM,GAAG,cAAc,CAAC;QAAC,CAAC;;YACtF,IAAI,GAAG,0BAA0B,gBAAgB,yBAAyB,CAAC;IAClF,CAAC;IAED,IAAI,MAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC9E,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,iBAAiB,CAAC,CAAC,CAAC,wCAAwC,EAAE,CAAC;IAC7I,CAAC;IACD,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,yBAAyB,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,UAAU,EAAE,CAAC;IACpJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AACxD,CAAC;AAED,yFAAyF;AACzF,MAAM,YAAY,GAAG,CAAC,SAAS,EAAE,gBAAgB,EAAE,eAAe,EAAE,YAAY,EAAE,sBAAsB,EAAE,kCAAkC,CAAC,CAAC;AAS9I;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,OAAwB,EAAE,GAAkB,EAAE,SAAiB,EAAE,UAAmB;IAC5G,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,YAAY;QAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5C,IAAI,GAAG,CAAC;IACR,IAAI,CAAC;QACH,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,+BAA+B,CAAC,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IACvG,CAAC;IACD,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE;QAC5D,GAAG,EAAE,GAAG,CAAC,QAAQ;QACjB,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE;QACtB,QAAQ,EAAE,MAAM;QAChB,GAAG;QACH,OAAO,EAAE,SAAS;QAClB,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;QAC3B,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;KAChC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;IAChC,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QACd,MAAM,GAAG,GAAI,GAAG,CAAC,KAA+B,CAAC,IAAI,KAAK,WAAW;YACnE,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,oBAAoB,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG;YACtE,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,qBAAqB,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC9D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACrC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAC9D,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACxH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IACtF,CAAC;AACH,CAAC"}

package/dist/src/codewatch/reviewers/kiro.d.ts

@@ -0,0 +1,14 @@
+import { type ReviewerAdapter } from './types.js';
+/**
+ * kiro-cli headless review.
+ *
+ * Same shape as the CI gate (prism-eval-gate.yml): a short argv prompt that
+ * points kiro at files on disk, because kiro-cli has had a bug putting long
+ * stdin into HTTP headers. The rule set is passed as context by path -- kiro
+ * reads it with fs_read before reviewing.
+ *
+ * Only fs_read is trusted (`--trust-tools=fs_read`), so in --no-interactive
+ * mode any write or shell tool call is refused rather than run.
+ */
+export declare const kiroAdapter: ReviewerAdapter;
+//# sourceMappingURL=kiro.d.ts.map

package/dist/src/codewatch/reviewers/kiro.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kiro.d.ts","sourceRoot":"","sources":["../../../../src/codewatch/reviewers/kiro.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkE,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AAElH;;;;;;;;;;GAUG;AACH,eAAO,MAAM,WAAW,EAAE,eAmBzB,CAAC"}

package/dist/src/codewatch/reviewers/kiro.js

@@ -0,0 +1,32 @@
+import { extractReviewJson, normalizeReview, OUTPUT_CONTRACT, stripAnsi } from './types.js';
+/**
+ * kiro-cli headless review.
+ *
+ * Same shape as the CI gate (prism-eval-gate.yml): a short argv prompt that
+ * points kiro at files on disk, because kiro-cli has had a bug putting long
+ * stdin into HTTP headers. The rule set is passed as context by path -- kiro
+ * reads it with fs_read before reviewing.
+ *
+ * Only fs_read is trusted (`--trust-tools=fs_read`), so in --no-interactive
+ * mode any write or shell tool call is refused rather than run.
+ */
+export const kiroAdapter = {
+    id: 'kiro',
+    binary: 'kiro-cli',
+    displayName: 'kiro-cli',
+    invocation(req) {
+        const prompt = `You are a code reviewer. First read the review rules in ${req.rulesPath} and follow them. ` +
+            `Then read the diff at ${req.diffPath} and review only the changes it introduces, for code quality and security. ` +
+            OUTPUT_CONTRACT;
+        return {
+            args: ['chat', '--no-interactive', '--trust-tools=fs_read', '--model', req.model || 'auto', prompt],
+        };
+    },
+    parse(stdout) {
+        const text = stripAnsi(stdout);
+        // kiro-cli prints no machine-readable model; leave it to the caller's
+        // requested model.
+        return normalizeReview(extractReviewJson(text), null);
+    },
+};
+//# sourceMappingURL=kiro.js.map

package/dist/src/codewatch/reviewers/kiro.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kiro.js","sourceRoot":"","sources":["../../../../src/codewatch/reviewers/kiro.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,eAAe,EAAE,SAAS,EAAwB,MAAM,YAAY,CAAC;AAElH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,WAAW,GAAoB;IAC1C,EAAE,EAAE,MAAM;IACV,MAAM,EAAE,UAAU;IAClB,WAAW,EAAE,UAAU;IACvB,UAAU,CAAC,GAAG;QACZ,MAAM,MAAM,GACV,2DAA2D,GAAG,CAAC,SAAS,oBAAoB;YAC5F,yBAAyB,GAAG,CAAC,QAAQ,6EAA6E;YAClH,eAAe,CAAC;QAClB,OAAO;YACL,IAAI,EAAE,CAAC,MAAM,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,SAAS,EAAE,GAAG,CAAC,KAAK,IAAI,MAAM,EAAE,MAAM,CAAC;SACpG,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,MAAM;QACV,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAC/B,sEAAsE;QACtE,mBAAmB;QACnB,OAAO,eAAe,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IACxD,CAAC;CACF,CAAC"}