@quantiya/codevibe-claude-plugin 1.0.37 → 1.0.38

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (255) hide show
  1. package/.claude-plugin/plugin.json +1 -1
  2. package/bin/codevibe-claude +17 -3
  3. package/dist/server.js +8 -8
  4. package/hooks/stop.sh +30 -10
  5. package/node_modules/@quantiya/codevibe-core/dist/appsync/appsync-client.d.ts +1 -139
  6. package/node_modules/@quantiya/codevibe-core/dist/appsync/queries.d.ts +0 -5
  7. package/node_modules/@quantiya/codevibe-core/dist/auth/auth-telemetry.d.ts +64 -29
  8. package/node_modules/@quantiya/codevibe-core/dist/index.d.ts +0 -4
  9. package/node_modules/@quantiya/codevibe-core/dist/index.js +33 -194
  10. package/node_modules/@quantiya/codevibe-core/dist/keychain/keychain-manager.d.ts +16 -2
  11. package/node_modules/@quantiya/codevibe-core/dist/session/session-rekey.d.ts +40 -0
  12. package/node_modules/@quantiya/codevibe-core/dist/session/session-resume.d.ts +1 -0
  13. package/node_modules/@quantiya/codevibe-core/dist/types/index.d.ts +0 -2
  14. package/node_modules/@quantiya/codevibe-core/dist/types/session.d.ts +0 -16
  15. package/node_modules/@quantiya/codevibe-core/package.json +1 -1
  16. package/node_modules/body-parser/README.md +18 -18
  17. package/node_modules/body-parser/index.js +6 -15
  18. package/node_modules/body-parser/lib/read.js +17 -20
  19. package/node_modules/body-parser/lib/types/json.js +8 -16
  20. package/node_modules/body-parser/lib/types/raw.js +3 -4
  21. package/node_modules/body-parser/lib/types/text.js +3 -4
  22. package/node_modules/body-parser/lib/types/urlencoded.js +8 -8
  23. package/node_modules/body-parser/lib/utils.js +11 -9
  24. package/node_modules/body-parser/package.json +2 -2
  25. package/node_modules/content-disposition/README.md +7 -8
  26. package/node_modules/content-disposition/index.js +118 -40
  27. package/node_modules/content-disposition/package.json +8 -11
  28. package/node_modules/express/Readme.md +39 -29
  29. package/node_modules/express/lib/application.js +1 -1
  30. package/node_modules/express/lib/request.js +5 -6
  31. package/node_modules/express/lib/response.js +14 -0
  32. package/node_modules/express/lib/utils.js +3 -1
  33. package/node_modules/express/package.json +6 -5
  34. package/node_modules/finalhandler/HISTORY.md +6 -0
  35. package/node_modules/finalhandler/README.md +26 -23
  36. package/node_modules/finalhandler/package.json +13 -9
  37. package/node_modules/graphql/execution/execute.d.ts +14 -1
  38. package/node_modules/graphql/execution/execute.js +63 -13
  39. package/node_modules/graphql/execution/execute.mjs +63 -13
  40. package/node_modules/graphql/execution/subscribe.js +1 -0
  41. package/node_modules/graphql/execution/subscribe.mjs +2 -0
  42. package/node_modules/graphql/execution/values.js +4 -4
  43. package/node_modules/graphql/execution/values.mjs +4 -4
  44. package/node_modules/graphql/index.d.ts +1 -0
  45. package/node_modules/graphql/language/ast.d.ts +10 -1
  46. package/node_modules/graphql/language/ast.js +8 -1
  47. package/node_modules/graphql/language/ast.mjs +8 -1
  48. package/node_modules/graphql/language/directiveLocation.d.ts +1 -0
  49. package/node_modules/graphql/language/directiveLocation.js +1 -0
  50. package/node_modules/graphql/language/directiveLocation.mjs +1 -0
  51. package/node_modules/graphql/language/index.d.ts +1 -0
  52. package/node_modules/graphql/language/kinds.d.ts +1 -0
  53. package/node_modules/graphql/language/kinds.js +1 -0
  54. package/node_modules/graphql/language/kinds.mjs +1 -0
  55. package/node_modules/graphql/language/parser.d.ts +14 -0
  56. package/node_modules/graphql/language/parser.js +33 -0
  57. package/node_modules/graphql/language/parser.mjs +33 -0
  58. package/node_modules/graphql/language/predicates.js +3 -1
  59. package/node_modules/graphql/language/predicates.mjs +5 -1
  60. package/node_modules/graphql/language/printer.js +13 -1
  61. package/node_modules/graphql/language/printer.mjs +13 -1
  62. package/node_modules/graphql/package.json +1 -1
  63. package/node_modules/graphql/type/directives.d.ts +9 -1
  64. package/node_modules/graphql/type/directives.js +10 -1
  65. package/node_modules/graphql/type/directives.mjs +10 -1
  66. package/node_modules/graphql/type/introspection.js +24 -1
  67. package/node_modules/graphql/type/introspection.mjs +24 -1
  68. package/node_modules/graphql/utilities/buildASTSchema.js +4 -0
  69. package/node_modules/graphql/utilities/buildASTSchema.mjs +4 -0
  70. package/node_modules/graphql/utilities/buildClientSchema.js +1 -0
  71. package/node_modules/graphql/utilities/buildClientSchema.mjs +1 -0
  72. package/node_modules/graphql/utilities/coerceInputValue.js +2 -2
  73. package/node_modules/graphql/utilities/coerceInputValue.mjs +2 -2
  74. package/node_modules/graphql/utilities/extendSchema.js +58 -3
  75. package/node_modules/graphql/utilities/extendSchema.mjs +58 -3
  76. package/node_modules/graphql/utilities/getIntrospectionQuery.d.ts +16 -0
  77. package/node_modules/graphql/utilities/getIntrospectionQuery.js +31 -38
  78. package/node_modules/graphql/utilities/getIntrospectionQuery.mjs +31 -38
  79. package/node_modules/graphql/utilities/introspectionFromSchema.js +1 -0
  80. package/node_modules/graphql/utilities/introspectionFromSchema.mjs +1 -0
  81. package/node_modules/graphql/utilities/printSchema.js +1 -0
  82. package/node_modules/graphql/utilities/printSchema.mjs +1 -0
  83. package/node_modules/graphql/utilities/valueFromAST.js +12 -2
  84. package/node_modules/graphql/utilities/valueFromAST.mjs +12 -2
  85. package/node_modules/graphql/validation/rules/KnownDirectivesRule.js +4 -0
  86. package/node_modules/graphql/validation/rules/KnownDirectivesRule.mjs +4 -0
  87. package/node_modules/graphql/validation/rules/UniqueDirectivesPerLocationRule.js +12 -0
  88. package/node_modules/graphql/validation/rules/UniqueDirectivesPerLocationRule.mjs +12 -0
  89. package/node_modules/graphql/validation/rules/ValuesOfCorrectTypeRule.js +5 -11
  90. package/node_modules/graphql/validation/rules/ValuesOfCorrectTypeRule.mjs +5 -11
  91. package/node_modules/graphql/validation/validate.js +12 -0
  92. package/node_modules/graphql/validation/validate.mjs +13 -2
  93. package/node_modules/graphql/version.js +2 -2
  94. package/node_modules/graphql/version.mjs +2 -2
  95. package/node_modules/hasown/CHANGELOG.md +11 -0
  96. package/node_modules/hasown/eslint.config.mjs +6 -0
  97. package/node_modules/hasown/index.d.ts +1 -0
  98. package/node_modules/hasown/package.json +14 -14
  99. package/node_modules/iconv-lite/lib/index.d.ts +114 -26
  100. package/node_modules/iconv-lite/lib/index.js +39 -40
  101. package/node_modules/iconv-lite/package.json +13 -2
  102. package/node_modules/iconv-lite/types/encodings.d.ts +423 -0
  103. package/node_modules/node-abi/abi_registry.json +10 -3
  104. package/node_modules/{semver → node-abi/node_modules/semver}/README.md +19 -4
  105. package/node_modules/{semver → node-abi/node_modules/semver}/bin/semver.js +14 -10
  106. package/node_modules/node-abi/node_modules/semver/functions/truncate.js +48 -0
  107. package/node_modules/{semver → node-abi/node_modules/semver}/index.js +2 -0
  108. package/node_modules/{semver → node-abi/node_modules/semver}/internal/re.js +1 -1
  109. package/node_modules/{semver → node-abi/node_modules/semver}/package.json +3 -3
  110. package/node_modules/{semver → node-abi/node_modules/semver}/range.bnf +5 -4
  111. package/node_modules/node-abi/package.json +1 -1
  112. package/node_modules/path-to-regexp/Readme.md +3 -3
  113. package/node_modules/path-to-regexp/dist/index.d.ts +3 -0
  114. package/node_modules/path-to-regexp/dist/index.js +215 -193
  115. package/node_modules/path-to-regexp/dist/index.js.map +1 -1
  116. package/node_modules/path-to-regexp/package.json +2 -2
  117. package/node_modules/qs/.editorconfig +1 -1
  118. package/node_modules/qs/.github/SECURITY.md +11 -0
  119. package/node_modules/qs/.github/THREAT_MODEL.md +78 -0
  120. package/node_modules/qs/CHANGELOG.md +190 -0
  121. package/node_modules/qs/README.md +29 -4
  122. package/node_modules/qs/dist/qs.js +21 -21
  123. package/node_modules/qs/eslint.config.mjs +56 -0
  124. package/node_modules/qs/lib/parse.js +94 -49
  125. package/node_modules/qs/lib/utils.js +85 -11
  126. package/node_modules/qs/package.json +10 -9
  127. package/node_modules/qs/test/parse.js +391 -13
  128. package/node_modules/qs/test/stringify.js +16 -3
  129. package/node_modules/qs/test/utils.js +173 -3
  130. package/node_modules/send/package.json +11 -8
  131. package/node_modules/serve-static/README.md +23 -23
  132. package/node_modules/serve-static/package.json +6 -3
  133. package/node_modules/side-channel-list/CHANGELOG.md +25 -4
  134. package/node_modules/side-channel-list/index.js +1 -3
  135. package/node_modules/side-channel-list/package.json +8 -8
  136. package/node_modules/side-channel-list/test/index.js +50 -0
  137. package/node_modules/uuid/dist/v35.js +3 -0
  138. package/node_modules/uuid/dist/v6.js +3 -0
  139. package/node_modules/uuid/dist-node/v35.js +3 -0
  140. package/node_modules/uuid/dist-node/v6.js +3 -0
  141. package/node_modules/uuid/package.json +1 -1
  142. package/node_modules/ws/index.js +15 -6
  143. package/node_modules/ws/lib/constants.js +1 -0
  144. package/node_modules/ws/lib/permessage-deflate.js +6 -6
  145. package/node_modules/ws/lib/websocket-server.js +10 -6
  146. package/node_modules/ws/lib/websocket.js +19 -14
  147. package/node_modules/ws/package.json +4 -3
  148. package/node_modules/ws/wrapper.mjs +14 -1
  149. package/package.json +2 -2
  150. package/node_modules/@quantiya/codevibe-core/dist/appsync/__tests__/appsync-client.test.d.ts +0 -1
  151. package/node_modules/@quantiya/codevibe-core/dist/audit-keys/__tests__/audit-keys-parity.test.d.ts +0 -1
  152. package/node_modules/@quantiya/codevibe-core/dist/audit-keys/index.d.ts +0 -41
  153. package/node_modules/@quantiya/codevibe-core/dist/auth/__tests__/auth-telemetry.test.d.ts +0 -1
  154. package/node_modules/@quantiya/codevibe-core/dist/orchestration/__tests__/setup-bootstrap.test.d.ts +0 -1
  155. package/node_modules/@quantiya/codevibe-core/dist/orchestration/__tests__/setup-failure-recourse.test.d.ts +0 -1
  156. package/node_modules/@quantiya/codevibe-core/dist/orchestration/__tests__/setup-save.test.d.ts +0 -1
  157. package/node_modules/@quantiya/codevibe-core/dist/orchestration/__tests__/setup-seat-picker.test.d.ts +0 -1
  158. package/node_modules/@quantiya/codevibe-core/dist/orchestration/__tests__/setup-telemetry.test.d.ts +0 -1
  159. package/node_modules/@quantiya/codevibe-core/dist/orchestration/__tests__/setup-test-agents.test.d.ts +0 -1
  160. package/node_modules/@quantiya/codevibe-core/dist/orchestration/__tests__/setup-types.test.d.ts +0 -1
  161. package/node_modules/@quantiya/codevibe-core/dist/orchestration/__tests__/setup-wizard.test.d.ts +0 -1
  162. package/node_modules/@quantiya/codevibe-core/dist/orchestration/__tests__/v1-options.test.d.ts +0 -1
  163. package/node_modules/@quantiya/codevibe-core/dist/orchestration/detect-agents.d.ts +0 -56
  164. package/node_modules/@quantiya/codevibe-core/dist/orchestration/index.d.ts +0 -3
  165. package/node_modules/@quantiya/codevibe-core/dist/orchestration/orchestration-cli.d.ts +0 -12
  166. package/node_modules/@quantiya/codevibe-core/dist/orchestration/setup-bootstrap.d.ts +0 -146
  167. package/node_modules/@quantiya/codevibe-core/dist/orchestration/setup-failure-recourse.d.ts +0 -23
  168. package/node_modules/@quantiya/codevibe-core/dist/orchestration/setup-save.d.ts +0 -47
  169. package/node_modules/@quantiya/codevibe-core/dist/orchestration/setup-seat-picker.d.ts +0 -72
  170. package/node_modules/@quantiya/codevibe-core/dist/orchestration/setup-telemetry.d.ts +0 -54
  171. package/node_modules/@quantiya/codevibe-core/dist/orchestration/setup-test-agents.d.ts +0 -108
  172. package/node_modules/@quantiya/codevibe-core/dist/orchestration/setup-types.d.ts +0 -140
  173. package/node_modules/@quantiya/codevibe-core/dist/orchestration/setup-wizard.d.ts +0 -57
  174. package/node_modules/@quantiya/codevibe-core/dist/orchestration/v1-options.d.ts +0 -108
  175. package/node_modules/@quantiya/codevibe-core/dist/reviewer/__tests__/integration.test.d.ts +0 -1
  176. package/node_modules/@quantiya/codevibe-core/dist/reviewer/__tests__/mocks.test.d.ts +0 -1
  177. package/node_modules/@quantiya/codevibe-core/dist/reviewer/__tests__/output-parser.test.d.ts +0 -1
  178. package/node_modules/@quantiya/codevibe-core/dist/reviewer/__tests__/registry.test.d.ts +0 -1
  179. package/node_modules/@quantiya/codevibe-core/dist/reviewer/__tests__/subprocess.test.d.ts +0 -1
  180. package/node_modules/@quantiya/codevibe-core/dist/reviewer/index.d.ts +0 -15
  181. package/node_modules/@quantiya/codevibe-core/dist/reviewer/mocks.d.ts +0 -80
  182. package/node_modules/@quantiya/codevibe-core/dist/reviewer/output-parser.d.ts +0 -95
  183. package/node_modules/@quantiya/codevibe-core/dist/reviewer/provider.d.ts +0 -153
  184. package/node_modules/@quantiya/codevibe-core/dist/reviewer/providers/__tests__/claude-live-smoke.test.d.ts +0 -1
  185. package/node_modules/@quantiya/codevibe-core/dist/reviewer/providers/__tests__/claude.test.d.ts +0 -1
  186. package/node_modules/@quantiya/codevibe-core/dist/reviewer/providers/__tests__/codex-live-smoke.test.d.ts +0 -1
  187. package/node_modules/@quantiya/codevibe-core/dist/reviewer/providers/__tests__/codex.test.d.ts +0 -1
  188. package/node_modules/@quantiya/codevibe-core/dist/reviewer/providers/__tests__/gemini-live-smoke.test.d.ts +0 -1
  189. package/node_modules/@quantiya/codevibe-core/dist/reviewer/providers/__tests__/gemini.test.d.ts +0 -1
  190. package/node_modules/@quantiya/codevibe-core/dist/reviewer/providers/claude.d.ts +0 -59
  191. package/node_modules/@quantiya/codevibe-core/dist/reviewer/providers/codex.d.ts +0 -67
  192. package/node_modules/@quantiya/codevibe-core/dist/reviewer/providers/common.d.ts +0 -25
  193. package/node_modules/@quantiya/codevibe-core/dist/reviewer/providers/gemini.d.ts +0 -108
  194. package/node_modules/@quantiya/codevibe-core/dist/reviewer/registry.d.ts +0 -87
  195. package/node_modules/@quantiya/codevibe-core/dist/reviewer/subprocess.d.ts +0 -117
  196. package/node_modules/@quantiya/codevibe-core/dist/reviewer/types.d.ts +0 -101
  197. package/node_modules/@quantiya/codevibe-core/dist/types/orchestration.d.ts +0 -57
  198. package/node_modules/@quantiya/codevibe-core/dist/types/reviewer.d.ts +0 -67
  199. package/node_modules/content-disposition/HISTORY.md +0 -72
  200. package/node_modules/express/History.md +0 -3858
  201. package/node_modules/hasown/.eslintrc +0 -5
  202. package/node_modules/iconv-lite/Changelog.md +0 -236
  203. package/node_modules/qs/.eslintrc +0 -39
  204. package/node_modules/send/HISTORY.md +0 -580
  205. package/node_modules/serve-static/HISTORY.md +0 -516
  206. /package/node_modules/{semver → node-abi/node_modules/semver}/LICENSE +0 -0
  207. /package/node_modules/{semver → node-abi/node_modules/semver}/classes/comparator.js +0 -0
  208. /package/node_modules/{semver → node-abi/node_modules/semver}/classes/index.js +0 -0
  209. /package/node_modules/{semver → node-abi/node_modules/semver}/classes/range.js +0 -0
  210. /package/node_modules/{semver → node-abi/node_modules/semver}/classes/semver.js +0 -0
  211. /package/node_modules/{semver → node-abi/node_modules/semver}/functions/clean.js +0 -0
  212. /package/node_modules/{semver → node-abi/node_modules/semver}/functions/cmp.js +0 -0
  213. /package/node_modules/{semver → node-abi/node_modules/semver}/functions/coerce.js +0 -0
  214. /package/node_modules/{semver → node-abi/node_modules/semver}/functions/compare-build.js +0 -0
  215. /package/node_modules/{semver → node-abi/node_modules/semver}/functions/compare-loose.js +0 -0
  216. /package/node_modules/{semver → node-abi/node_modules/semver}/functions/compare.js +0 -0
  217. /package/node_modules/{semver → node-abi/node_modules/semver}/functions/diff.js +0 -0
  218. /package/node_modules/{semver → node-abi/node_modules/semver}/functions/eq.js +0 -0
  219. /package/node_modules/{semver → node-abi/node_modules/semver}/functions/gt.js +0 -0
  220. /package/node_modules/{semver → node-abi/node_modules/semver}/functions/gte.js +0 -0
  221. /package/node_modules/{semver → node-abi/node_modules/semver}/functions/inc.js +0 -0
  222. /package/node_modules/{semver → node-abi/node_modules/semver}/functions/lt.js +0 -0
  223. /package/node_modules/{semver → node-abi/node_modules/semver}/functions/lte.js +0 -0
  224. /package/node_modules/{semver → node-abi/node_modules/semver}/functions/major.js +0 -0
  225. /package/node_modules/{semver → node-abi/node_modules/semver}/functions/minor.js +0 -0
  226. /package/node_modules/{semver → node-abi/node_modules/semver}/functions/neq.js +0 -0
  227. /package/node_modules/{semver → node-abi/node_modules/semver}/functions/parse.js +0 -0
  228. /package/node_modules/{semver → node-abi/node_modules/semver}/functions/patch.js +0 -0
  229. /package/node_modules/{semver → node-abi/node_modules/semver}/functions/prerelease.js +0 -0
  230. /package/node_modules/{semver → node-abi/node_modules/semver}/functions/rcompare.js +0 -0
  231. /package/node_modules/{semver → node-abi/node_modules/semver}/functions/rsort.js +0 -0
  232. /package/node_modules/{semver → node-abi/node_modules/semver}/functions/satisfies.js +0 -0
  233. /package/node_modules/{semver → node-abi/node_modules/semver}/functions/sort.js +0 -0
  234. /package/node_modules/{semver → node-abi/node_modules/semver}/functions/valid.js +0 -0
  235. /package/node_modules/{semver → node-abi/node_modules/semver}/internal/constants.js +0 -0
  236. /package/node_modules/{semver → node-abi/node_modules/semver}/internal/debug.js +0 -0
  237. /package/node_modules/{semver → node-abi/node_modules/semver}/internal/identifiers.js +0 -0
  238. /package/node_modules/{semver → node-abi/node_modules/semver}/internal/lrucache.js +0 -0
  239. /package/node_modules/{semver → node-abi/node_modules/semver}/internal/parse-options.js +0 -0
  240. /package/node_modules/{semver → node-abi/node_modules/semver}/preload.js +0 -0
  241. /package/node_modules/{semver → node-abi/node_modules/semver}/ranges/gtr.js +0 -0
  242. /package/node_modules/{semver → node-abi/node_modules/semver}/ranges/intersects.js +0 -0
  243. /package/node_modules/{semver → node-abi/node_modules/semver}/ranges/ltr.js +0 -0
  244. /package/node_modules/{semver → node-abi/node_modules/semver}/ranges/max-satisfying.js +0 -0
  245. /package/node_modules/{semver → node-abi/node_modules/semver}/ranges/min-satisfying.js +0 -0
  246. /package/node_modules/{semver → node-abi/node_modules/semver}/ranges/min-version.js +0 -0
  247. /package/node_modules/{semver → node-abi/node_modules/semver}/ranges/outside.js +0 -0
  248. /package/node_modules/{semver → node-abi/node_modules/semver}/ranges/simplify.js +0 -0
  249. /package/node_modules/{semver → node-abi/node_modules/semver}/ranges/subset.js +0 -0
  250. /package/node_modules/{semver → node-abi/node_modules/semver}/ranges/to-comparators.js +0 -0
  251. /package/node_modules/{semver → node-abi/node_modules/semver}/ranges/valid.js +0 -0
  252. /package/node_modules/{strip-json-comments → rc/node_modules/strip-json-comments}/index.js +0 -0
  253. /package/node_modules/{strip-json-comments → rc/node_modules/strip-json-comments}/license +0 -0
  254. /package/node_modules/{strip-json-comments → rc/node_modules/strip-json-comments}/package.json +0 -0
  255. /package/node_modules/{strip-json-comments → rc/node_modules/strip-json-comments}/readme.md +0 -0
@@ -1,95 +0,0 @@
1
- import type { VerdictKind } from './types.js';
2
- /**
3
- * Successfully parsed reviewer reply. The engine's fan-out layer lifts
4
- * these fields into a `ReviewerVerdict` alongside telemetry (agent, tokens,
5
- * latency, model) supplied by the subprocess layer.
6
- */
7
- export interface ParsedVerdict {
8
- /** The verdict the reviewer returned. */
9
- kind: VerdictKind;
10
- /**
11
- * Free-form reasoning text (joined with blank-line paragraph separators
12
- * preserved). Never empty by the time we reach here — reviewers that
13
- * return only a verdict line fail parsing via `reasoning_missing`.
14
- */
15
- reasoning: string;
16
- /**
17
- * Ordered list of specific changes. Always non-empty when
18
- * `kind === 'REVISE'`; always empty otherwise (enforced by the parser
19
- * via `revise_missing_changes` / `suggested_changes_require_revise`).
20
- */
21
- suggested_changes: string[];
22
- }
23
- /**
24
- * Why a reviewer's reply failed the locked-format check. Discriminated
25
- * union; the subprocess layer maps any of these into `ReviewerError` with
26
- * `kind: 'parse_failure'` and the raw output attached.
27
- *
28
- * Mirrors Rust's `VerdictParseError` enum 1:1.
29
- */
30
- export type VerdictParseError = {
31
- /** The entire reply was whitespace or empty. A reviewer that wrote
32
- * nothing has effectively timed out. */
33
- kind: 'empty_output';
34
- } | {
35
- /**
36
- * The first non-blank line did not start with one of the four
37
- * verdict keywords (case-insensitive). Includes any leading markdown
38
- * formatting, quotation, or `VERDICT:` prefix that makes the line
39
- * diverge from the locked contract.
40
- *
41
- * Also fired when a non-blank, non-indented line of prose appears
42
- * after the bullet section starts (the format reserves post-bullet
43
- * lines for blank lines or indented continuations only).
44
- */
45
- kind: 'invalid_verdict';
46
- /** The offending line, trimmed but otherwise verbatim. */
47
- found: string;
48
- } | {
49
- /** Verdict was parsed but no reasoning followed. The locked contract
50
- * requires reasoning text so the audit record and user-facing
51
- * disagreement UI have something to show; a bare APPROVE / REJECT
52
- * line is a parse failure. */
53
- kind: 'reasoning_missing';
54
- } | {
55
- /** Verdict was REVISE but no bulleted suggested-changes list followed.
56
- * Design-locked: REVISE requires at least one concrete change. */
57
- kind: 'revise_missing_changes';
58
- } | {
59
- /** A non-REVISE verdict was followed by a bulleted list, which the
60
- * locked contract reserves for REVISE only. */
61
- kind: 'suggested_changes_require_revise';
62
- /** The non-REVISE verdict that erroneously had bullets. */
63
- found: VerdictKind;
64
- };
65
- /**
66
- * Class wrapper around a `VerdictParseError` so callers can `throw`/`catch`
67
- * structured errors via JS idioms. `.detail` carries the discriminated
68
- * union; `Error.message` is a human-readable formatting.
69
- */
70
- export declare class VerdictParseErrorClass extends Error {
71
- readonly detail: VerdictParseError;
72
- constructor(detail: VerdictParseError);
73
- }
74
- /**
75
- * Result type for `parseVerdictOutput`. Discriminated by `ok`. Mirrors
76
- * Rust's `Result<ParsedVerdict, VerdictParseError>` without forcing TS
77
- * callers to `try/catch` — most call sites want to inspect failure types
78
- * directly to feed the audit log.
79
- */
80
- export type ParseResult = {
81
- ok: true;
82
- verdict: ParsedVerdict;
83
- } | {
84
- ok: false;
85
- error: VerdictParseError;
86
- };
87
- /**
88
- * Parse a reviewer reply. Strict: any deviation from the locked format
89
- * returns `{ ok: false, error: ... }` which the subprocess layer routes to
90
- * a parse-failure `ReviewerError`.
91
- *
92
- * Mirrors Rust's `parse_verdict_output` byte-for-byte. Test coverage
93
- * matches the Rust unit-test set verbatim.
94
- */
95
- export declare function parseVerdictOutput(raw: string): ParseResult;
@@ -1,153 +0,0 @@
1
- import type { AgentKind, ReviewerRole, ReviewerVerdict } from './types.js';
2
- /**
3
- * Spec for spawning one reviewer at one gate. Constructed by the engine
4
- * from `ReviewerAgentSpec` (from `PolicySnapshot`) + the context bundle for
5
- * the gate.
6
- *
7
- * # Identity
8
- *
9
- * Per the 2026-04-23 seat/role pivot, the spec's primary identity is
10
- * `seat_id` — position in the review panel — NOT `agent`. `agent` may
11
- * repeat across seats within a single gate (single-vendor case: two Claude
12
- * seats with different roles). Downstream consensus + verdict validation
13
- * dedup on `seat_id`, never on `agent`. Providers echo `seat_id` + `role`
14
- * back on the returned `ReviewerVerdict` so the audit trail can attribute
15
- * verdicts by lens rather than by agent kind.
16
- */
17
- export interface ReviewerSpec {
18
- /**
19
- * Position in the review panel, 0-indexed. For an N-seat policy this is
20
- * in `0..N`. The primary identity key for this reviewer across the
21
- * engine, audit log, and FFI — providers MUST echo this value back on
22
- * the produced `ReviewerVerdict.seat_id`.
23
- */
24
- seat_id: number;
25
- /**
26
- * The lens this seat reviews through — Architecture / Correctness /
27
- * Security for code; Accuracy / Clarity / Completeness for docs;
28
- * composites for mixed. Drives the role-specific prompt prefix and is
29
- * echoed back on the verdict for audit attribution. Unique within a
30
- * policy (a duplicate role defeats the orthogonality purpose).
31
- */
32
- role: ReviewerRole;
33
- /**
34
- * Which agent to spawn. MAY repeat across seats when roles differ — the
35
- * single-vendor case the 2026-04-23 pivot enables.
36
- */
37
- agent: AgentKind;
38
- /**
39
- * Tool names the reviewer is allowed to invoke. Typically
40
- * `["Read", "Grep", "Glob"]` per the read-only reviewer invariant. Shape
41
- * is agent-agnostic here; each provider enforces the sandbox in its own
42
- * way:
43
- * - Claude: `--allowed-tools Read,Grep,Glob` CLI flag.
44
- * - Gemini: `--approval-mode plan` (Gemini's first-class read-only mode).
45
- * The `tool_allowlist` is intentionally unused by the Gemini provider;
46
- * plan mode is the sandbox contract. 2.0.x task #62 tracks adding
47
- * `--policy <tempfile>` as defense-in-depth.
48
- * - Codex: `--sandbox read-only --skip-git-repo-check` flags + per-spawn
49
- * ephemeral output file.
50
- */
51
- tool_allowlist: string[];
52
- /**
53
- * Pre-rendered reviewer prompt. Engine renders per artifact type
54
- * (code / docs / mixed) with a role-specific prefix prepended before
55
- * calling `evaluate`.
56
- */
57
- prompt_template: string;
58
- /**
59
- * Wall-clock timeout for one reviewer's verdict. After this elapses the
60
- * provider should throw `ReviewerError` with `kind: 'timeout'` and
61
- * cancel the underlying process.
62
- */
63
- timeout_ms: number;
64
- /**
65
- * Optional per-reviewer model preference. `null` defers to the agent's
66
- * CLI default.
67
- */
68
- model_hint: string | null;
69
- }
70
- /**
71
- * Typed error thrown by `ReviewerProvider.evaluate`. Discriminated union
72
- * matching Rust's `#[serde(tag = "kind", rename_all = "snake_case")]` enum.
73
- *
74
- * The engine's consensus path treats any thrown error as equivalent to a
75
- * `VerdictKind::Escalate` for routing (so safety-defaults-to-escalation
76
- * holds), but the distinct variants matter for the audit log and the
77
- * user-facing error message.
78
- */
79
- export type ReviewerError = {
80
- /** Reviewer exceeded its `timeout_ms` budget. */
81
- kind: 'timeout';
82
- /** Which agent timed out (carried so the audit entry can attribute
83
- * cost / reliability back to the specific agent). */
84
- agent: AgentKind;
85
- /** Wall-clock ms elapsed before timeout fired. */
86
- elapsed_ms: number;
87
- } | {
88
- /** Reviewer process could not be launched (CLI missing, spawn syscall
89
- * failed, etc.). */
90
- kind: 'spawn_failed';
91
- agent: AgentKind;
92
- /** Human-readable cause. */
93
- reason: string;
94
- } | {
95
- /** Reviewer returned but its output couldn't be parsed into a valid
96
- * verdict. Raw output is preserved for the audit log. */
97
- kind: 'parse_failure';
98
- agent: AgentKind;
99
- /** Raw output (truncated to a reasonable length by the caller if
100
- * needed). */
101
- raw_output: string;
102
- } | {
103
- /** Reviewer was cancelled by the engine before completing (e.g.,
104
- * user abort, a sibling reviewer already hard-rejected). No
105
- * per-agent attribution because cancellation can fire on any
106
- * reviewer in flight. */
107
- kind: 'cancelled';
108
- } | {
109
- /** A reviewer's task panicked or was aborted before returning a
110
- * verdict. Mirror of the Rust `InternalJoinFailure` variant. The
111
- * variant deliberately has no `agent` field — attributing a panic
112
- * to a specific agent would be a telemetry lie. */
113
- kind: 'internal_join_failure';
114
- reason: string;
115
- };
116
- /**
117
- * Class wrapper around a `ReviewerError` so callers can `throw` typed
118
- * errors and `try { ... } catch (e) { if (e instanceof ReviewerErrorClass) {
119
- * /* type-narrow on e.detail.kind *\/ } }` from JS-idiom code paths.
120
- *
121
- * The `.detail` property carries the discriminated union; `Error.message`
122
- * is a human-readable formatting matching Rust's `#[error(...)]` strings.
123
- */
124
- export declare class ReviewerErrorClass extends Error {
125
- /** The structured error detail. Use `.kind` to narrow. */
126
- readonly detail: ReviewerError;
127
- constructor(detail: ReviewerError);
128
- }
129
- /**
130
- * Engine's contract with reviewer implementations.
131
- *
132
- * **Engine owns lifecycle:** implementations must spawn, await verdict,
133
- * enforce timeout, cancel, and capture logs internally. The engine calls
134
- * `evaluate` and awaits — it never holds a handle that could outlive the
135
- * call.
136
- *
137
- * Errors are thrown as `ReviewerErrorClass` instances; callers narrow via
138
- * the `.detail.kind` discriminator.
139
- */
140
- export interface ReviewerProvider {
141
- /**
142
- * Spawn one reviewer per the spec, collect its verdict, enforce timeout.
143
- *
144
- * @param spec - the reviewer to spawn (seat_id + role + agent + prompt + timeout)
145
- * @param gateId - the `ReviewGate` UUID this verdict attaches to. Stored
146
- * on the returned `ReviewerVerdict.gate_id`.
147
- * @returns the parsed `ReviewerVerdict` on success.
148
- * @throws `ReviewerErrorClass` on timeout, spawn failure, parse failure,
149
- * cancellation, or internal join failure. Use `e.detail.kind` to
150
- * narrow.
151
- */
152
- evaluate(spec: ReviewerSpec, gateId: string): Promise<ReviewerVerdict>;
153
- }
@@ -1,59 +0,0 @@
1
- import { type ReviewerProvider, type ReviewerSpec } from '../provider.js';
2
- import { type SubprocessOutcome } from '../subprocess.js';
3
- import type { ReviewerVerdict } from '../types.js';
4
- /**
5
- * Built command shape — split out so tests can inspect args / env without
6
- * spawning a process. `runReviewer` consumes this shape directly.
7
- */
8
- export interface BuiltCommand {
9
- command: string;
10
- args: string[];
11
- env: NodeJS.ProcessEnv;
12
- }
13
- /** Construction options. */
14
- export interface ClaudeReviewerProviderOptions {
15
- /** Override the `claude` executable path. Production callers pass nothing
16
- * (PATH lookup); integration tests can stub Claude with a shell-script
17
- * fixture. */
18
- executable?: string;
19
- }
20
- /**
21
- * Real Claude Code reviewer provider. Wraps the `claude` CLI.
22
- *
23
- * Construct with `new ClaudeReviewerProvider()` for the standard `claude`
24
- * binary, or `new ClaudeReviewerProvider({ executable: '/opt/bin/mock-claude' })`
25
- * for tests that point at a fixture CLI on a controlled PATH.
26
- */
27
- export declare class ClaudeReviewerProvider implements ReviewerProvider {
28
- private readonly executable;
29
- constructor(opts?: ClaudeReviewerProviderOptions);
30
- evaluate(spec: ReviewerSpec, gateId: string): Promise<ReviewerVerdict>;
31
- }
32
- /**
33
- * Construct the Claude CLI invocation. Split out from `evaluate` so unit
34
- * tests can assert on the built arg list + env without actually spawning a
35
- * process.
36
- *
37
- * Locked flag set:
38
- * - `--print` — non-interactive mode; emit the response and exit, rather
39
- * than waiting for further turns. Required so the subprocess actually
40
- * terminates on its own.
41
- * - `--allowed-tools <CSV>` — design-locked sandbox. `ReviewerSpec.tool_allowlist`
42
- * is populated from the engine's policy; the provider trusts the spec
43
- * rather than hard-coding the list.
44
- * - `--model <hint>` — optional; omitted when `spec.model_hint` is `null`,
45
- * deferring to Claude's default.
46
- *
47
- * # QUORUM_REVIEWER_SUBPROCESS env var
48
- *
49
- * Set unconditionally to `'1'` in the child's environment. See module docs
50
- * for the rationale and why `--bare` was rejected as the primary defense.
51
- */
52
- export declare function buildCommand(executable: string, spec: ReviewerSpec): BuiltCommand;
53
- /**
54
- * Map the raw subprocess outcome into a `ReviewerVerdict` or throw a
55
- * structured `ReviewerErrorClass`. Exit code is checked first — a crashed
56
- * CLI that happened to print something valid on stdout should still be
57
- * treated as a spawn failure, not a silently-accepted verdict.
58
- */
59
- export declare function buildVerdict(spec: ReviewerSpec, gateId: string, outcome: SubprocessOutcome): ReviewerVerdict;
@@ -1,67 +0,0 @@
1
- import { type ReviewerProvider, type ReviewerSpec } from '../provider.js';
2
- import { type SubprocessOutcome } from '../subprocess.js';
3
- import type { ReviewerVerdict } from '../types.js';
4
- import type { BuiltCommand } from './claude.js';
5
- /** Construction options. */
6
- export interface CodexReviewerProviderOptions {
7
- /** Override the `codex` executable path. Production callers pass nothing
8
- * (PATH lookup); integration tests can stub Codex with a shell-script
9
- * fixture. */
10
- executable?: string;
11
- }
12
- /**
13
- * Real Codex CLI reviewer provider. Wraps the `codex exec` subcommand.
14
- */
15
- export declare class CodexReviewerProvider implements ReviewerProvider {
16
- private readonly executable;
17
- constructor(opts?: CodexReviewerProviderOptions);
18
- evaluate(spec: ReviewerSpec, gateId: string): Promise<ReviewerVerdict>;
19
- }
20
- /**
21
- * Construct the Codex CLI invocation. Split out from `evaluate` so unit
22
- * tests can assert on the built arg list without actually spawning a
23
- * process.
24
- *
25
- * Locked flag set:
26
- * - `exec` — the non-interactive subcommand (the interactive default
27
- * would block forever waiting for user input).
28
- * - `--sandbox read-only` — design-locked read-only sandbox.
29
- * - `--skip-git-repo-check` — reviewer subprocesses must run in any cwd,
30
- * not just git working trees.
31
- * - `--color never` — strip ANSI escapes from any incidental stdout
32
- * output (the JSONL stream is not affected, but logs and error
33
- * messages are).
34
- * - `--json` — emit JSONL events to stdout for token-count parsing.
35
- * - `--ephemeral` — do NOT write a session JSONL under
36
- * `~/.codex/sessions/`.
37
- * - `--output-last-message <path>` — write the model's final agent
38
- * message verbatim to `path`.
39
- * - `--model <hint>` — optional; omitted when `spec.model_hint` is `null`.
40
- * - `-` (final arg) — read prompt from stdin.
41
- */
42
- export declare function buildCommand(executable: string, spec: ReviewerSpec, lastMessagePath: string): BuiltCommand;
43
- /**
44
- * Map the raw subprocess outcome + the file Codex wrote into a
45
- * `ReviewerVerdict` or throw a structured `ReviewerErrorClass`. See
46
- * `claude.ts::buildVerdict` for the shared safety rule (non-zero exit
47
- * overrides any parseable stdout / file).
48
- */
49
- export declare function buildVerdict(spec: ReviewerSpec, gateId: string, outcome: SubprocessOutcome, lastMessage: string): ReviewerVerdict;
50
- /**
51
- * Sum `usage.input_tokens + usage.output_tokens` across every
52
- * `turn.completed` JSONL event in `stdout`. Returns `null` when no
53
- * `turn.completed` event reported any token count, so dashboards can
54
- * distinguish "no data" from a real zero.
55
- *
56
- * Lenient: malformed JSONL lines are silently skipped (Codex's stream is
57
- * designed to be append-only, so partial flushes during timeout could
58
- * leave a final truncated line).
59
- */
60
- export declare function sumCodexTokens(stdout: string): number | null;
61
- /**
62
- * Generate a unique-per-spawn path for `--output-last-message`. Lives in
63
- * the OS temp dir; we own its lifecycle (create on codex's side, read +
64
- * delete on ours). Per-process pid + UUID is enough — no race risk across
65
- * concurrent reviewers in the same engine run.
66
- */
67
- export declare function makeLastMessagePath(): string;
@@ -1,25 +0,0 @@
1
- import type { AgentKind } from '../types.js';
2
- import type { ReviewerError } from '../provider.js';
3
- import type { SubprocessError } from '../subprocess.js';
4
- /**
5
- * Map a subprocess-layer error into a `ReviewerError` for the given agent.
6
- * Mirrors Rust's `providers::claude::map_subprocess_error` byte-for-byte:
7
- *
8
- * - `spawn_failed` → `ReviewerError::SpawnFailed { agent, reason }`
9
- * - `timeout` → `ReviewerError::Timeout { agent, elapsed_ms }`
10
- * - `io` → `ReviewerError::SpawnFailed { agent, reason: "io error: <msg>" }`
11
- * (deliberate; an IO failure during spawn is a spawn failure from the
12
- * audit log's perspective — the reviewer never produced a verdict)
13
- * - `cancelled` → `ReviewerError` cancelled (no agent attribution; the
14
- * Rust enum omits the agent field on Cancelled because cancellation
15
- * can fire on any reviewer in flight)
16
- *
17
- * The Rust source's `map_subprocess_error` handles only three variants
18
- * (`SpawnFailed`, `Timeout`, `Io`) because the Rust subprocess layer
19
- * doesn't have a Cancelled variant — engine-driven cancellation in Rust
20
- * is handled at a higher layer via `tokio::select!` against the abort
21
- * future, never surfacing as a `SubprocessError`. The TS port carries
22
- * cancellation in the subprocess layer (via `AbortSignal`), so we
23
- * include it here.
24
- */
25
- export declare function mapSubprocessError(agent: AgentKind, err: SubprocessError): ReviewerError;
@@ -1,108 +0,0 @@
1
- import { type ReviewerProvider, type ReviewerSpec } from '../provider.js';
2
- import { type SubprocessOutcome } from '../subprocess.js';
3
- import type { ReviewerVerdict } from '../types.js';
4
- import type { BuiltCommand } from './claude.js';
5
- /** Construction options. */
6
- export interface GeminiReviewerProviderOptions {
7
- /** Override the `gemini` executable path. Production callers pass nothing
8
- * (PATH lookup); integration tests can stub Gemini with a shell-script
9
- * fixture. */
10
- executable?: string;
11
- }
12
- /**
13
- * JSON envelope shape emitted by `gemini --output-format json`. We only care
14
- * about `response`; the other fields (`session_id`, `stats`) are consumed by
15
- * the JSON deserializer but not surfaced on `ReviewerVerdict` directly.
16
- *
17
- * Tolerates missing or extra top-level keys for cross-version compatibility.
18
- */
19
- export interface GeminiEnvelope {
20
- response: string;
21
- /** Gemini 0.38.2 emits this; older versions may not. */
22
- session_id?: string;
23
- stats?: GeminiStats;
24
- }
25
- export interface GeminiStats {
26
- /** Map of model name → per-model stats. Token usage MUST be summed across
27
- * every entry (R2 "telemetry timebomb" lesson — picking an arbitrary one
28
- * via `Object.values()[0]` would under-report when Gemini reports
29
- * auxiliary models). */
30
- models?: Record<string, GeminiModelStats>;
31
- }
32
- export interface GeminiModelStats {
33
- tokens?: {
34
- /** Prompt + response tokens combined. Populated by Gemini's
35
- * `stats.models.<name>.tokens.total`; used for cost telemetry. */
36
- total?: number;
37
- };
38
- }
39
- /**
40
- * Real Gemini CLI reviewer provider. Wraps the `gemini` binary.
41
- */
42
- export declare class GeminiReviewerProvider implements ReviewerProvider {
43
- private readonly executable;
44
- constructor(opts?: GeminiReviewerProviderOptions);
45
- evaluate(spec: ReviewerSpec, gateId: string): Promise<ReviewerVerdict>;
46
- }
47
- /**
48
- * Construct the Gemini CLI invocation. Split out from `evaluate` so unit
49
- * tests can assert on the built arg list + env without actually spawning a
50
- * process.
51
- *
52
- * Locked flag set:
53
- * - `-p ''` — non-interactive mode, empty inline prompt so the full prompt
54
- * is read from stdin (consistent with Claude path).
55
- * - `--approval-mode plan` — read-only sandbox.
56
- * - `--output-format json` — structured reply envelope that survives
57
- * user-hook stdout pollution.
58
- * - `--model <hint>` — optional; omitted when `spec.model_hint` is `null`.
59
- *
60
- * `spec.tool_allowlist` is **intentionally unused** for Gemini. Plan mode
61
- * is the design-locked sandbox; mapping the Claude-style allowlist to
62
- * Gemini's (deprecated) `--allowed-tools` flag would hit the known
63
- * non-interactive bugs flagged in the module docs.
64
- *
65
- * # QUORUM_REVIEWER_SUBPROCESS env var
66
- *
67
- * Set unconditionally to `'1'` in the child's environment. The user's
68
- * Gemini plugin checks this at the top of `hooks/common.sh` and
69
- * short-circuits every hook — without this gate, reviewer spawns would
70
- * each create a new backend session and mark the user's primary Gemini
71
- * session INACTIVE (empirically observed 2026-04-21 during Phase 2c.2
72
- * local testing).
73
- */
74
- export declare function buildCommand(executable: string, spec: ReviewerSpec): BuiltCommand;
75
- /**
76
- * Map the raw subprocess outcome into a `ReviewerVerdict` or throw a
77
- * structured `ReviewerErrorClass`. See `claude.ts::buildVerdict` for the
78
- * shared safety rule (non-zero exit overrides any parseable stdout).
79
- */
80
- export declare function buildVerdict(spec: ReviewerSpec, gateId: string, outcome: SubprocessOutcome): ReviewerVerdict;
81
- /**
82
- * Parse the FIRST complete JSON object in `stdout`, discarding any trailing
83
- * bytes. User-level hooks (e.g., CodeVibe's own Gemini plugin hooks
84
- * installed in `~/.gemini/settings.json`) append log lines to stdout AFTER
85
- * the model's reply envelope. This walks the text byte-by-byte tracking
86
- * brace depth + string escapes to find where the first JSON object ends,
87
- * then `JSON.parse` that slice — the equivalent of Rust's
88
- * `serde_json::Deserializer::into_iter().next()` for our purposes.
89
- *
90
- * Returns `null` if stdout contains no valid JSON value at all, the
91
- * extracted slice fails strict JSON parsing, OR the parsed value isn't a
92
- * shape-conformant `GeminiEnvelope` (i.e. missing or non-string
93
- * `response`). The caller routes any of these to ParseFailure with raw
94
- * stdout — matching Rust's serde-deserialization-failure path.
95
- *
96
- * # Why runtime shape validation
97
- *
98
- * Rust's `serde_json::Deserializer` rejects `{}` or `{"response":123}`
99
- * during deserialization because `GeminiEnvelope { response: String, ... }`
100
- * makes the field required at the type-system layer. TypeScript's
101
- * `JSON.parse(slice) as GeminiEnvelope` is a compile-time-only assertion
102
- * with no runtime check, so we reproduce serde's behavior with an
103
- * explicit `validateGeminiEnvelope` step. Without this, a syntactically-
104
- * valid-but-shape-bad envelope would land an `undefined.replace()`
105
- * TypeError up the call stack instead of a structured ParseFailure
106
- * (R1 finding on Phase 2f.1.b round 1).
107
- */
108
- export declare function parseFirstJsonEnvelope(stdout: string): GeminiEnvelope | null;
@@ -1,87 +0,0 @@
1
- import { type ReviewerProvider, type ReviewerSpec } from './provider.js';
2
- import type { AgentKind, ReviewerVerdict } from './types.js';
3
- /**
4
- * Per-agent reviewer dispatch.
5
- *
6
- * Build with the fluent `with()` builder for the common production
7
- * case (register all known agents up front), or the mutating
8
- * `register()` helper when the set is determined at runtime.
9
- * `providerFor` exposes the underlying provider for callers (e.g.,
10
- * test harnesses) that need direct access without going through the
11
- * `evaluate` method.
12
- *
13
- * `ReviewerRegistry` itself implements `ReviewerProvider` so it
14
- * slots into anything that takes a single provider — including
15
- * another `ReviewerRegistry`. (Compose-of-compose works for free.)
16
- */
17
- export declare class ReviewerRegistry implements ReviewerProvider {
18
- private readonly providers;
19
- /**
20
- * Builder-style register: returns `this` with `agent` mapped to
21
- * `provider`. Intended for the production "register all three at
22
- * startup" pattern:
23
- *
24
- * ```ts
25
- * const registry = new ReviewerRegistry()
26
- * .with('claude', new ClaudeReviewerProvider())
27
- * .with('gemini', new GeminiReviewerProvider())
28
- * .with('codex', new CodexReviewerProvider());
29
- * ```
30
- *
31
- * Re-registering the same agent overwrites the previous provider —
32
- * useful for tests that swap in a fixture provider after construction.
33
- */
34
- with(agent: AgentKind, provider: ReviewerProvider): this;
35
- /**
36
- * Mutating register. Equivalent to `with()` but returns void; use
37
- * when chaining isn't readable (e.g., conditional registration in
38
- * a loop).
39
- */
40
- register(agent: AgentKind, provider: ReviewerProvider): void;
41
- /**
42
- * Lookup the provider for `agent`. Returns `undefined` if no
43
- * provider is registered. Callers should prefer using the
44
- * `evaluate` method on the registry itself, which handles the
45
- * missing-provider case as a typed `ReviewerError`. This method
46
- * is exposed for test harnesses that need direct provider access
47
- * (e.g., to call provider methods that aren't part of the
48
- * interface).
49
- */
50
- providerFor(agent: AgentKind): ReviewerProvider | undefined;
51
- /**
52
- * Returns the set of agents that have registered providers, in
53
- * insertion order. Useful for callers that want to log the
54
- * configured registry shape or for a future startup-time validator
55
- * that checks the policy snapshot's reviewer_agents are all covered.
56
- */
57
- registeredAgents(): AgentKind[];
58
- /**
59
- * Dispatch by `spec.agent` to the registered provider. If no
60
- * provider is registered for that agent, throw
61
- * `ReviewerErrorClass` with `kind: 'spawn_failed'` so the engine's
62
- * existing escalation path handles it. The `reason` field includes
63
- * the agent name so audit can identify the misconfiguration.
64
- */
65
- evaluate(spec: ReviewerSpec, gateId: string): Promise<ReviewerVerdict>;
66
- }
67
- /**
68
- * Production factory: build a registry pre-populated with all three
69
- * subprocess providers (Claude, Gemini, Codex) using the standard
70
- * binaries from PATH. Equivalent of Rust's
71
- * `withSubprocessProviders()` napi factory.
72
- *
73
- * Plugins call this once at startup and hand the registry to the
74
- * engine fan-out path. Inert registrations cost nothing — no
75
- * subprocess fires until the policy actually references that agent.
76
- *
77
- * For tests / dev environments that need to override binary paths,
78
- * construct the providers manually:
79
- *
80
- * ```ts
81
- * const registry = new ReviewerRegistry()
82
- * .with('claude', new ClaudeReviewerProvider({ executable: '/opt/bin/claude' }))
83
- * .with('gemini', new GeminiReviewerProvider({ executable: '/opt/bin/gemini' }))
84
- * .with('codex', new CodexReviewerProvider({ executable: '/opt/bin/codex' }));
85
- * ```
86
- */
87
- export declare function createSubprocessReviewerRegistry(): ReviewerRegistry;