@ttfw/envoi 1.0.0

package/dist/lib/reviewer-flow.js

@@ -0,0 +1,138 @@
+/**
+ * Reviewer flow integration for pre-builder risk checks.
+ *
+ * Integrates the reviewer into the tick flow to be called pre-builder when
+ * risk is detected. Handles reviewer decisions and returns appropriate stop
+ * codes or proceeds to builder.
+ */
+import { join } from 'node:path';
+import { readFile } from 'node:fs/promises';
+import { invokeReviewer } from './reviewer.js';
+import { shouldTriggerReviewer } from './risk.js';
+/**
+ * Handles reviewer decision and returns appropriate stop code or null.
+ *
+ * @param decision - Reviewer decision object from parsed output
+ * @returns ReviewerFlowResult with stopCode or null (proceed)
+ */
+export function handleReviewerDecision(decision) {
+    if (decision.decision === 'proceed') {
+        return { stopCode: null };
+    }
+    if (decision.decision === 'force_patch') {
+        return { stopCode: 'STOP_REVIEWER_FORCED_PATCH' };
+    }
+    if (decision.decision === 'ask_question') {
+        if (!decision.question) {
+            // Invalid decision - missing question, default to force_patch
+            return { stopCode: 'STOP_REVIEWER_FORCED_PATCH' };
+        }
+        return {
+            stopCode: 'STOP_REVIEWER_ASK_QUESTION',
+            question: {
+                prompt: decision.question.prompt,
+                choices: decision.question.choices,
+            },
+        };
+    }
+    // Unknown decision - default to force_patch for safety
+    return { stopCode: 'STOP_REVIEWER_FORCED_PATCH' };
+}
+/**
+ * Runs reviewer if needed based on risk flags and configuration.
+ *
+ * This function should be called pre-builder when risk is detected.
+ * It checks if reviewer should be triggered, invokes it if needed, and
+ * handles the decision.
+ *
+ * @param config - Envoi configuration
+ * @param context - Reviewer flow context
+ * @returns Promise resolving to ReviewerFlowResult
+ */
+export async function runReviewerIfNeeded(config, context) {
+    // Reviewer must be configured
+    if (!config.reviewer) {
+        return { stopCode: null };
+    }
+    // Check if reviewer should be triggered
+    if (!shouldTriggerReviewer(config.reviewer, context.riskFlags)) {
+        return { stopCode: null };
+    }
+    // Check authentication
+    const authCheck = await import('./reviewer.js').then((m) => m.checkReviewerAuth());
+    if (!authCheck.authenticated) {
+        // Degrade gracefully - log error but proceed (or default to force_patch if pre-build)
+        return {
+            stopCode: 'STOP_REVIEWER_FORCED_PATCH',
+            reviewerError: `Reviewer authentication failed: ${authCheck.reason || 'unknown reason'}`,
+        };
+    }
+    // Build reviewer prompt
+    const reviewerConfig = config.reviewer;
+    const workspaceDir = config.workspace_dir;
+    const userPromptPath = join(workspaceDir, reviewerConfig.user_prompt_file);
+    const systemPromptPath = join(workspaceDir, reviewerConfig.system_prompt_file);
+    let userPrompt;
+    let systemPrompt;
+    try {
+        userPrompt = await readFile(userPromptPath, 'utf-8');
+        systemPrompt = await readFile(systemPromptPath, 'utf-8');
+    }
+    catch (error) {
+        return {
+            stopCode: 'STOP_REVIEWER_FORCED_PATCH',
+            reviewerError: `Failed to read reviewer prompt files: ${error instanceof Error ? error.message : String(error)}`,
+        };
+    }
+    // Interpolate placeholders in user prompt
+    const replacements = {
+        '{{RISK_FLAGS}}': context.riskFlags.join(', ') || 'none',
+        '{{TASK_JSON}}': context.task ? JSON.stringify(context.task, null, 2) : 'null',
+        '{{LAST_REPORT_MD}}': context.lastReportMd || '',
+        '{{DIFF_PATCH_OR_EMPTY}}': context.diffPatch || '',
+        '{{VERIFY_LOG_EXCERPT_OR_EMPTY}}': context.verifyLogExcerpt || '',
+        '{{TOUCHED_PATHS}}': context.touchedPaths.join('\n') || 'none',
+    };
+    for (const [placeholder, value] of Object.entries(replacements)) {
+        userPrompt = userPrompt.replace(new RegExp(placeholder.replace(/[{}]/g, '\\$&'), 'g'), value);
+    }
+    // Invoke reviewer
+    const invocationConfig = {
+        command: reviewerConfig.command,
+        model: reviewerConfig.model,
+        maxTurns: reviewerConfig.max_turns,
+        timeout: config.runner.max_tick_seconds * 1000, // Convert to milliseconds
+    };
+    const reviewerContext = {
+        prompt: userPrompt,
+        systemPrompt: systemPromptPath,
+    };
+    const invocationResult = await invokeReviewer(invocationConfig, reviewerContext);
+    if (!invocationResult.success) {
+        // Reviewer invocation failed - degrade gracefully
+        return {
+            stopCode: 'STOP_REVIEWER_FORCED_PATCH',
+            reviewerError: invocationResult.error,
+        };
+    }
+    // Parse and validate reviewer output
+    let decision;
+    try {
+        // The result should match reviewer_result.schema.json structure
+        const parsed = invocationResult.result;
+        if (!parsed.decision ||
+            !['proceed', 'force_patch', 'ask_question'].includes(parsed.decision)) {
+            throw new Error(`Invalid decision: ${parsed.decision}`);
+        }
+        decision = parsed;
+    }
+    catch (error) {
+        return {
+            stopCode: 'STOP_REVIEWER_FORCED_PATCH',
+            reviewerError: `Failed to parse reviewer decision: ${error instanceof Error ? error.message : String(error)}`,
+        };
+    }
+    // Handle the decision
+    return handleReviewerDecision(decision);
+}
+//# sourceMappingURL=reviewer-flow.js.map

package/dist/lib/reviewer-flow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewer-flow.js","sourceRoot":"","sources":["../../src/lib/reviewer-flow.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAK5C,OAAO,EAAE,cAAc,EAAuB,MAAM,eAAe,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAoB,MAAM,WAAW,CAAC;AA+CpE;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAMtC;IACC,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACpC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IAED,IAAI,QAAQ,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;QACxC,OAAO,EAAE,QAAQ,EAAE,4BAA4B,EAAE,CAAC;IACpD,CAAC;IAED,IAAI,QAAQ,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;QACzC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACvB,8DAA8D;YAC9D,OAAO,EAAE,QAAQ,EAAE,4BAA4B,EAAE,CAAC;QACpD,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,4BAA4B;YACtC,QAAQ,EAAE;gBACR,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM;gBAChC,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO;aACnC;SACF,CAAC;IACJ,CAAC;IAED,uDAAuD;IACvD,OAAO,EAAE,QAAQ,EAAE,4BAA4B,EAAE,CAAC;AACpD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAmB,EACnB,OAA4B;IAE5B,8BAA8B;IAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IAED,wCAAwC;IACxC,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IAED,uBAAuB;IACvB,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACnF,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC;QAC7B,sFAAsF;QACtF,OAAO;YACL,QAAQ,EAAE,4BAA4B;YACtC,aAAa,EAAE,mCAAmC,SAAS,CAAC,MAAM,IAAI,gBAAgB,EAAE;SACzF,CAAC;IACJ,CAAC;IAED,wBAAwB;IACxB,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC;IACvC,MAAM,YAAY,GAAG,MAAM,CAAC,aAAa,CAAC;IAC1C,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,gBAAgB,CAAC,CAAC;IAC3E,MAAM,gBAAgB,GAAG,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,kBAAkB,CAAC,CAAC;IAE/E,IAAI,UAAkB,CAAC;IACvB,IAAI,YAAoB,CAAC;IAEzB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QACrD,YAAY,GAAG,MAAM,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,QAAQ,EAAE,4BAA4B;YACtC,aAAa,EAAE,yCAAyC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;SACjH,CAAC;IACJ,CAAC;IAED,0CAA0C;IAC1C,MAAM,YAAY,GAA2B;QAC3C,gBAAgB,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM;QACxD,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM;QAC9E,oBAAoB,EAAE,OAAO,CAAC,YAAY,IAAI,EAAE;QAChD,yBAAyB,EAAE,OAAO,CAAC,SAAS,IAAI,EAAE;QAClD,iCAAiC,EAAE,OAAO,CAAC,gBAAgB,IAAI,EAAE;QACjE,mBAAmB,EAAE,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM;KAC/D,CAAC;IAEF,KAAK,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QAChE,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;IAChG,CAAC;IAED,kBAAkB;IAClB,MAAM,gBAAgB,GAAG;QACvB,OAAO,EAAE,cAAc,CAAC,OAAO;QAC/B,KAAK,EAAE,cAAc,CAAC,KAAK;QAC3B,QAAQ,EAAE,cAAc,CAAC,SAAS;QAClC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB,GAAG,IAAI,EAAE,0BAA0B;KAC3E,CAAC;IAEF,MAAM,eAAe,GAAG;QACtB,MAAM,EAAE,UAAU;QAClB,YAAY,EAAE,gBAAgB;KAC/B,CAAC;IAEF,MAAM,gBAAgB,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC;IAEjF,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;QAC9B,kDAAkD;QAClD,OAAO;YACL,QAAQ,EAAE,4BAA4B;YACtC,aAAa,EAAE,gBAAgB,CAAC,KAAK;SACtC,CAAC;IACJ,CAAC;IAED,qCAAqC;IACrC,IAAI,QAMH,CAAC;IAEF,IAAI,CAAC;QACH,gEAAgE;QAChE,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAM/B,CAAC;QAEF,IACE,CAAC,MAAM,CAAC,QAAQ;YAChB,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EACrE,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,qBAAqB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1D,CAAC;QAED,QAAQ,GAAG,MAAM,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,QAAQ,EAAE,4BAA4B;YACtC,aAAa,EAAE,sCAAsC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;SAC9G,CAAC;IACJ,CAAC;IAED,sBAAsB;IACtB,OAAO,sBAAsB,CAAC,QAAQ,CAAC,CAAC;AAC1C,CAAC"}

package/dist/lib/reviewer.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Codex CLI wrapper for invoking reviewer with proper flags.
+ *
+ * Provides functions to invoke the reviewer, parse responses, and check authentication.
+ */
+import type { ReviewerInvocationConfig, ReviewerContext, ReviewerInvocationResult } from '../types/reviewer.js';
+/**
+ * Checks if reviewer authentication is configured.
+ *
+ * Checks for CODEX_API_KEY environment variable presence as a best-effort
+ * authentication check (V1 implementation).
+ *
+ * @returns Object with authentication status
+ */
+export declare function checkReviewerAuth(): {
+    authenticated: boolean;
+    reason?: string;
+};
+/**
+ * Parses the JSON response from Codex CLI and extracts the result.
+ *
+ * Handles two formats:
+ * 1. Wrapper format: { result: 'JSON string', ... } - parses the .result field as JSON
+ * 2. Direct JSON format: { ... } - uses the parsed JSON directly
+ *
+ * @param stdout - Standard output from CLI process
+ * @returns Parsed result object
+ * @throws {Error} If JSON parsing fails
+ */
+export declare function parseReviewerOutput(stdout: string): object;
+/**
+ * Invokes Codex CLI reviewer with the given configuration and context.
+ *
+ * @param config - Codex CLI reviewer configuration
+ * @param context - Reviewer context including prompt and optional system prompt
+ * @returns Promise resolving to ReviewerInvocationResult (success or error)
+ *
+ * @example
+ * ```typescript
+ * const result = await invokeReviewer(config, {
+ *   prompt: 'Review this code...',
+ *   systemPrompt: '/path/to/system.txt'
+ * });
+ *
+ * if (result.success) {
+ *   console.log('Review result:', result.result);
+ * } else {
+ *   console.error('Review failed:', result.error);
+ * }
+ * ```
+ */
+export declare function invokeReviewer(config: ReviewerInvocationConfig, context: ReviewerContext): Promise<ReviewerInvocationResult>;
+//# sourceMappingURL=reviewer.d.ts.map

package/dist/lib/reviewer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewer.d.ts","sourceRoot":"","sources":["../../src/lib/reviewer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,wBAAwB,EAAE,eAAe,EAAE,wBAAwB,EAAiC,MAAM,sBAAsB,CAAC;AAE/I;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,IAAI;IAAE,aAAa,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAe/E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CA8B1D;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,wBAAwB,EAChC,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,wBAAwB,CAAC,CAyHnC"}

package/dist/lib/reviewer.js

@@ -0,0 +1,199 @@
+/**
+ * Codex CLI wrapper for invoking reviewer with proper flags.
+ *
+ * Provides functions to invoke the reviewer, parse responses, and check authentication.
+ */
+import { spawn } from 'node:child_process';
+/**
+ * Checks if reviewer authentication is configured.
+ *
+ * Checks for CODEX_API_KEY environment variable presence as a best-effort
+ * authentication check (V1 implementation).
+ *
+ * @returns Object with authentication status
+ */
+export function checkReviewerAuth() {
+    const apiKey = process.env.CODEX_API_KEY;
+    if (!apiKey) {
+        return {
+            authenticated: false,
+            reason: 'CODEX_API_KEY environment variable not set',
+        };
+    }
+    if (apiKey.trim().length === 0) {
+        return {
+            authenticated: false,
+            reason: 'CODEX_API_KEY environment variable is empty',
+        };
+    }
+    return { authenticated: true };
+}
+/**
+ * Parses the JSON response from Codex CLI and extracts the result.
+ *
+ * Handles two formats:
+ * 1. Wrapper format: { result: 'JSON string', ... } - parses the .result field as JSON
+ * 2. Direct JSON format: { ... } - uses the parsed JSON directly
+ *
+ * @param stdout - Standard output from CLI process
+ * @returns Parsed result object
+ * @throws {Error} If JSON parsing fails
+ */
+export function parseReviewerOutput(stdout) {
+    let parsed;
+    try {
+        parsed = JSON.parse(stdout);
+    }
+    catch (error) {
+        throw new Error(`Failed to parse JSON response: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    if (typeof parsed !== 'object' || parsed === null) {
+        throw new Error('Parsed response is not an object');
+    }
+    const obj = parsed;
+    // Check if it's a wrapper format with .result field
+    if (typeof obj.result === 'string') {
+        try {
+            // Parse the nested JSON string
+            const nestedParsed = JSON.parse(obj.result);
+            if (typeof nestedParsed === 'object' && nestedParsed !== null) {
+                return nestedParsed;
+            }
+            // If nested parse didn't yield an object, fall through to return wrapper
+        }
+        catch {
+            // If parsing .result fails, fall through to return wrapper
+        }
+    }
+    // Return direct JSON or wrapper object
+    return parsed;
+}
+/**
+ * Invokes Codex CLI reviewer with the given configuration and context.
+ *
+ * @param config - Codex CLI reviewer configuration
+ * @param context - Reviewer context including prompt and optional system prompt
+ * @returns Promise resolving to ReviewerInvocationResult (success or error)
+ *
+ * @example
+ * ```typescript
+ * const result = await invokeReviewer(config, {
+ *   prompt: 'Review this code...',
+ *   systemPrompt: '/path/to/system.txt'
+ * });
+ *
+ * if (result.success) {
+ *   console.log('Review result:', result.result);
+ * } else {
+ *   console.error('Review failed:', result.error);
+ * }
+ * ```
+ */
+export async function invokeReviewer(config, context) {
+    const startTime = Date.now();
+    // Build CLI arguments
+    const args = [
+        '-p', // prompt mode (non-interactive)
+        '--model',
+        config.model,
+        '--max-turns',
+        config.maxTurns.toString(),
+    ];
+    // Add optional system-prompt flag
+    if (context.systemPrompt) {
+        args.push('--system-prompt', context.systemPrompt);
+    }
+    // Add the prompt as the last argument
+    args.push(context.prompt);
+    return new Promise((resolve) => {
+        let stdout = '';
+        let stderr = '';
+        let timeoutId = null;
+        // Spawn the process (shell: false for security)
+        const child = spawn(config.command, args, {
+            stdio: ['pipe', 'pipe', 'pipe'],
+            shell: false,
+        });
+        // Set up timeout
+        if (config.timeout > 0) {
+            timeoutId = setTimeout(() => {
+                child.kill('SIGTERM');
+                const durationMs = Date.now() - startTime;
+                resolve({
+                    success: false,
+                    error: `Codex CLI invocation timed out after ${config.timeout}ms`,
+                    exitCode: 124, // Standard timeout exit code
+                    stderr,
+                    durationMs,
+                });
+            }, config.timeout);
+        }
+        // Capture stdout
+        child.stdout?.on('data', (data) => {
+            stdout += data.toString();
+        });
+        // Capture stderr
+        child.stderr?.on('data', (data) => {
+            stderr += data.toString();
+        });
+        // Handle process completion
+        child.on('close', (code) => {
+            if (timeoutId) {
+                clearTimeout(timeoutId);
+            }
+            const durationMs = Date.now() - startTime;
+            const exitCode = code ?? 0;
+            // If process was killed by timeout, error was already handled
+            if (code === null && timeoutId) {
+                return;
+            }
+            // Try to parse the output
+            try {
+                const parsed = parseReviewerOutput(stdout);
+                // Basic validation: ensure it's an object
+                // Full schema validation will be added in WP-072 when reviewer_result.schema.json exists
+                if (typeof parsed !== 'object' || parsed === null) {
+                    resolve({
+                        success: false,
+                        error: 'Reviewer output is not a valid object',
+                        exitCode,
+                        stderr,
+                        durationMs,
+                    });
+                    return;
+                }
+                resolve({
+                    success: true,
+                    result: parsed,
+                    raw: JSON.parse(stdout), // Keep original wrapper if present
+                    exitCode,
+                    durationMs,
+                });
+            }
+            catch (error) {
+                resolve({
+                    success: false,
+                    error: `Failed to parse reviewer output: ${error instanceof Error ? error.message : String(error)}`,
+                    exitCode,
+                    stderr,
+                    durationMs,
+                });
+            }
+        });
+        // Handle process errors
+        child.on('error', (error) => {
+            if (timeoutId) {
+                clearTimeout(timeoutId);
+            }
+            const durationMs = Date.now() - startTime;
+            resolve({
+                success: false,
+                error: `Failed to spawn Codex CLI process: ${error.message}`,
+                exitCode: 1,
+                stderr,
+                durationMs,
+            });
+        });
+    });
+}
+//# sourceMappingURL=reviewer.js.map

package/dist/lib/reviewer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewer.js","sourceRoot":"","sources":["../../src/lib/reviewer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,KAAK,EAAgB,MAAM,oBAAoB,CAAC;AAGzD;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IACzC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,aAAa,EAAE,KAAK;YACpB,MAAM,EAAE,4CAA4C;SACrD,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO;YACL,aAAa,EAAE,KAAK;YACpB,MAAM,EAAE,6CAA6C;SACtD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;AACjC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9G,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,GAAG,GAAG,MAAiC,CAAC;IAE9C,oDAAoD;IACpD,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,+BAA+B;YAC/B,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC5C,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;gBAC9D,OAAO,YAAY,CAAC;YACtB,CAAC;YACD,yEAAyE;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,2DAA2D;QAC7D,CAAC;IACH,CAAC;IAED,uCAAuC;IACvC,OAAO,MAAgB,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAgC,EAChC,OAAwB;IAExB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,sBAAsB;IACtB,MAAM,IAAI,GAAa;QACrB,IAAI,EAAE,gCAAgC;QACtC,SAAS;QACT,MAAM,CAAC,KAAK;QACZ,aAAa;QACb,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE;KAC3B,CAAC;IAEF,kCAAkC;IAClC,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IACrD,CAAC;IAED,sCAAsC;IACtC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAE1B,OAAO,IAAI,OAAO,CAA2B,CAAC,OAAO,EAAE,EAAE;QACvD,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,SAAS,GAA0B,IAAI,CAAC;QAE5C,gDAAgD;QAChD,MAAM,KAAK,GAAiB,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE;YACtD,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;QAEH,iBAAiB;QACjB,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YACvB,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC1B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBAC1C,OAAO,CAAC;oBACN,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,wCAAwC,MAAM,CAAC,OAAO,IAAI;oBACjE,QAAQ,EAAE,GAAG,EAAE,6BAA6B;oBAC5C,MAAM;oBACN,UAAU;iBACX,CAAC,CAAC;YACL,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACrB,CAAC;QAED,iBAAiB;QACjB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACxC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,iBAAiB;QACjB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACxC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,4BAA4B;QAC5B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAmB,EAAE,EAAE;YACxC,IAAI,SAAS,EAAE,CAAC;gBACd,YAAY,CAAC,SAAS,CAAC,CAAC;YAC1B,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAC1C,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,CAAC;YAE3B,8DAA8D;YAC9D,IAAI,IAAI,KAAK,IAAI,IAAI,SAAS,EAAE,CAAC;gBAC/B,OAAO;YACT,CAAC;YAED,0BAA0B;YAC1B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;gBAE3C,0CAA0C;gBAC1C,yFAAyF;gBACzF,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;oBAClD,OAAO,CAAC;wBACN,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,uCAAuC;wBAC9C,QAAQ;wBACR,MAAM;wBACN,UAAU;qBACX,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBAED,OAAO,CAAC;oBACN,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,MAAM;oBACd,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,mCAAmC;oBAC5D,QAAQ;oBACR,UAAU;iBACX,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC;oBACN,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,oCAAoC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;oBACnG,QAAQ;oBACR,MAAM;oBACN,UAAU;iBACX,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,wBAAwB;QACxB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE;YACjC,IAAI,SAAS,EAAE,CAAC;gBACd,YAAY,CAAC,SAAS,CAAC,CAAC;YAC1B,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAC1C,OAAO,CAAC;gBACN,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,sCAAsC,KAAK,CAAC,OAAO,EAAE;gBAC5D,QAAQ,EAAE,CAAC;gBACX,MAAM;gBACN,UAAU;aACX,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/risk.d.ts

@@ -0,0 +1,127 @@
+/**
+ * Risk scoring and reviewer trigger logic.
+ *
+ * Determines when the reviewer should be invoked based on deterministic
+ * risk signals: high-risk file paths, diff fraction thresholds, repeated
+ * stops, verification failures, and budget warnings.
+ */
+import type { DiffAnalysis } from './diff.js';
+import type { ReviewerConfig, ReviewerTriggerConfig } from '../types/config.js';
+import type { TaskScope, DiffLimits } from '../types/task.js';
+import type { RiskFlags } from '../types/reviewer.js';
+/**
+ * Stop history entry representing a single stop event.
+ */
+export interface StopHistoryEntry {
+    /** Tick number when the stop occurred */
+    tick: number;
+    /** Verdict of the stop (should be 'stop') */
+    verdict: 'stop';
+}
+/**
+ * Checks if any paths match high-risk glob patterns.
+ *
+ * Uses micromatch to check paths against high_risk_globs patterns.
+ *
+ * @param paths - Array of file paths to check
+ * @param highRiskGlobs - Array of glob patterns for high-risk files
+ * @returns Array of paths that match high-risk patterns
+ *
+ * @example
+ * const riskyPaths = checkHighRiskGlobs(
+ *   ['src/auth.ts', 'src/utils.ts'],
+ *   ['src/auth*.ts', 'src/*secret*']
+ * );
+ */
+export declare function checkHighRiskGlobs(paths: string[], highRiskGlobs: string[]): string[];
+/**
+ * Checks if diff fraction exceeds threshold.
+ *
+ * Calculates files_touched/max_files_touched or lines_changed/max_lines_changed
+ * and checks if either fraction >= threshold.
+ *
+ * @param analysis - Diff analysis result
+ * @param limits - Diff limits from task
+ * @param threshold - Fraction threshold (0.0 to 1.0)
+ * @returns True if diff fraction >= threshold
+ *
+ * @example
+ * const analysis = { files_touched: 8, lines_changed: 300, ... };
+ * const limits = { max_files_touched: 10, max_lines_changed: 400 };
+ * const nearCap = checkDiffFraction(analysis, limits, 0.8);
+ */
+export declare function checkDiffFraction(analysis: DiffAnalysis, limits: DiffLimits, threshold: number): boolean;
+/**
+ * Checks if there are repeated stops within a time window.
+ *
+ * Counts STOP verdicts in stop_history within the specified window
+ * and checks if count >= maxStops.
+ *
+ * @param stopHistory - Array of stop history entries
+ * @param window - Time window in ticks
+ * @param maxStops - Maximum number of stops allowed in window
+ * @param currentTick - Current tick number
+ * @returns True if repeated stops detected
+ *
+ * @example
+ * const history = [
+ *   { tick: 5, verdict: 'stop' },
+ *   { tick: 8, verdict: 'stop' },
+ *   { tick: 12, verdict: 'stop' }
+ * ];
+ * const repeated = checkRepeatedStops(history, 10, 2, 12);
+ */
+export declare function checkRepeatedStops(stopHistory: StopHistoryEntry[], window: number, maxStops: number, currentTick: number): boolean;
+/**
+ * Computes risk flags based on various risk signals.
+ *
+ * Returns an array of risk flag strings indicating which risk conditions
+ * have been triggered.
+ *
+ * @param params - Parameters for risk computation
+ * @param params.analysis - Diff analysis result
+ * @param params.limits - Diff limits from task
+ * @param params.scope - Task scope configuration
+ * @param params.trigger - Reviewer trigger configuration
+ * @param params.stopHistory - Array of stop history entries
+ * @param params.currentTick - Current tick number
+ * @param params.verifyFailed - Whether verification failed
+ * @param params.budgetWarning - Whether budget warning threshold reached
+ * @returns Array of risk flag strings
+ *
+ * @example
+ * const flags = computeRiskFlags({
+ *   analysis,
+ *   limits,
+ *   scope,
+ *   trigger,
+ *   stopHistory: [],
+ *   currentTick: 10,
+ *   verifyFailed: false,
+ *   budgetWarning: false
+ * });
+ */
+export declare function computeRiskFlags(params: {
+    analysis: DiffAnalysis;
+    limits: DiffLimits;
+    scope: TaskScope;
+    trigger: ReviewerTriggerConfig;
+    stopHistory: StopHistoryEntry[];
+    currentTick: number;
+    verifyFailed: boolean;
+    budgetWarning: boolean;
+}): RiskFlags[];
+/**
+ * Determines if reviewer should be triggered based on risk flags and config.
+ *
+ * Returns true if reviewer is enabled and any trigger condition is met.
+ *
+ * @param config - Reviewer configuration
+ * @param riskFlags - Array of risk flags from computeRiskFlags
+ * @returns True if reviewer should be triggered
+ *
+ * @example
+ * const shouldTrigger = shouldTriggerReviewer(config, ['high_risk_path', 'diff_near_cap']);
+ */
+export declare function shouldTriggerReviewer(config: ReviewerConfig, riskFlags: RiskFlags[]): boolean;
+//# sourceMappingURL=risk.d.ts.map

package/dist/lib/risk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk.d.ts","sourceRoot":"","sources":["../../src/lib/risk.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,KAAK,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEtD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,EAAE,EACf,aAAa,EAAE,MAAM,EAAE,GACtB,MAAM,EAAE,CAOV;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,YAAY,EACtB,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,MAAM,GAChB,OAAO,CAiBT;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,gBAAgB,EAAE,EAC/B,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,GAClB,OAAO,CAYT;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE;IACvC,QAAQ,EAAE,YAAY,CAAC;IACvB,MAAM,EAAE,UAAU,CAAC;IACnB,KAAK,EAAE,SAAS,CAAC;IACjB,OAAO,EAAE,qBAAqB,CAAC;IAC/B,WAAW,EAAE,gBAAgB,EAAE,CAAC;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,EAAE,OAAO,CAAC;CACxB,GAAG,SAAS,EAAE,CAsFd;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,cAAc,EACtB,SAAS,EAAE,SAAS,EAAE,GACrB,OAAO,CAQT"}