@webpieces/pr-gate 0.4.705 → 0.4.707

package/src/scripts/workflow/review-report.js.map

@@ -1 +1 @@
-{"version":3,"file":"review-report.js","sourceRoot":"","sources":["../../../../../../../packages/tooling/pr-gate/src/scripts/workflow/review-report.ts"],"names":[],"mappings":";;;;AAAA,yCAA2D;AAC3D,0DAAiI;AACjI,yDAAqD;AAErD,MAAM,GAAG,GAAG,0DAA0D,CAAC;AAEvE;;;;;;;;;;;;GAYG;AACH,MAAa,eAAe;IACxB,WAAW,CAAS;IACpB,OAAO,CAAS;IAEhB,YAAY,WAAmB,EAAE,OAAe;QAC5C,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IAC3B,CAAC;CACJ;AARD,0CAQC;AAED;;;;GAIG;AACH,MAAa,iBAAiB;IAC1B,QAAQ,CAAS;IACjB,WAAW,CAAS;IACpB,UAAU,CAAS,CAAa,6DAA6D;IAC7F,YAAY,CAAS,CAAW,iDAAiD;IACjF,eAAe,CAAS,CAAQ,yEAAyE;IACzG,QAAQ,CAAsB,CAAE,gDAAgD;IAChF,YAAY,CAAW,CAAS,0DAA0D;IAC1F,SAAS,CAAqB,CAAE,wDAAwD;IACxF,OAAO,CAAoB,CAAK,6EAA6E;IAC7G;;;;OAIG;IACH,YAAY,CAAU;IAEtB,YAAY,QAAgB,EAAE,WAAmB,EAAE,UAAkB;QACjE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC;QACtB,IAAI,CAAC,eAAe,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;QACnB,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;QACpB,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;IAC9B,CAAC;CACJ;AA7BD,8CA6BC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AAEI,IAAM,YAAY,GAAlB,MAAM,YAAY;IAEA;IACA;IAFrB,YACqB,eAAgC,EAChC,oBAAiD;QADjD,oBAAe,GAAf,eAAe,CAAiB;QAChC,yBAAoB,GAApB,oBAAoB,CAA6B;IACnE,CAAC;IAEJ,MAAM,CAAC,KAAwB;QAC3B,OAAO,IAAI,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG;cACtC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;cACvB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED;;;;;;;;;;OAUG;IACK,MAAM,CAAC,KAAwB;QACnC,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,mDAAmD,CAAC;QACpG,IAAI,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,uDAAuD,CAAC;QACzG,OAAO,yBAAyB,CAAC;IACrC,CAAC;IAED;;;;OAIG;IACK,WAAW,CAAC,KAAwB;QACxC,IAAI,KAAK,CAAC,eAAe,KAAK,CAAC;YAAE,OAAO,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC9F,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,+FAA+F;QAC/F,gGAAgG;QAChG,yFAAyF;QACzF,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,+EAA+E,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC7H,CAAC;QACD,gGAAgG;QAChG,kGAAkG;QAClG,2CAA2C;QAC3C,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,YAAY;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC3D,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAClF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAClC,OAAO,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC1C,CAAC;IAED;;;;OAIG;IACK,YAAY,CAAC,KAAwB;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,YAAY,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAC3D,OAAO;YACH,EAAE;YACF,SAAS,OAAO,CAAC,MAAM,4EAA4E;YACnG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAmB,EAAU,EAAE,CAAC,UAAU,CAAC,CAAC,QAAQ,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACxF,oFAAoF;SACvF,CAAC;IACN,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACK,QAAQ,CAAC,KAAwB;QACrC,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;YACtE,CAAC,CAAC,+FAA+F;YACjG,CAAC,CAAC,wEAAwE,CAAC;QAC/E,OAAO,QAAQ,GAAG,IAAI,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;IACtD,CAAC;IAED;;;;;OAKG;IACK,iBAAiB;QACrB,OAAO,CACH,mGAAmG;YACnG,qGAAqG;YACrG,kGAAkG;YAClG,iGAAiG,CACpG,CAAC;IACN,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACK,SAAS,CAAC,KAAwB;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC5C,kGAAkG;QAClG,qGAAqG;QACrG,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACnF,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrF,OAAO,IAAI,GAAG,GAAG;cACX,YAAY,IAAI,kDAAkD,GAAG,GAAG,GAAG,IAAI;cAC/E,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAChG,CAAC;IAEO,eAAe,CAAC,UAAkB,EAAE,IAAY;QACpD,OAAO,CACH,QAAQ,IAAI,6FAA6F;YACzG,8FAA8F;YAC9F,kGAAkG;YAClG,oGAAoG;YACpG,6FAA6F;YAC7F,IAAA,mCAAoB,EAAC,UAAU,CAAC,GAAG,MAAM,CAC5C,CAAC;IACN,CAAC;IAED;;;;;;;;;OASG;IACK,SAAS,CAAC,KAAwB,EAAE,IAAiC,EAAE,IAAY;QACvF,MAAM,KAAK,GAAa;YACpB,QAAQ,IAAI,kDAAkD,IAAI,CAAC,MAAM,oCAAoC;YAC7G,+FAA+F;YAC/F,gGAAgG;YAChG,EAAE;SACL,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QAChD,KAAK,MAAM,CAAC,IAAI,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QAClE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACK,SAAS,CAAC,KAAwB,EAAE,SAAsC,EAAE,IAAY;QAC5F,MAAM,KAAK,GAAa;YACpB,QAAQ,IAAI,YAAY,SAAS,CAAC,MAAM,wEAAwE;YAChH,wEAAwE;YACxE,EAAE;YACF,2FAA2F;YAC3F,+FAA+F;YAC/F,gEAAgE;YAChE,EAAE;YACF,+FAA+F;YAC/F,4EAA4E;YAC5E,6EAA6E;YAC7E,EAAE;YACF,gGAAgG;YAChG,uEAAuE;YACvE,EAAE;SACL,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;QACrD,KAAK,MAAM,CAAC,IAAI,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QACvE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,sGAAsG;IACtG,qGAAqG;IACrG,qGAAqG;IAC7F,cAAc,CAAC,KAAwB,EAAE,KAAkC;QAC/E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAmB,EAAU,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;QAC/E,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAkB,EAAW,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;QAC/F,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACvB,OAAO;YACH,YAAY,CAAC,sEAAsE;YACnF,iGAAiG;YACjG,EAAE;SACL,CAAC;IACN,CAAC;IAEO,UAAU,CAAC,UAAkB,EAAE,YAAqB;QACxD,mGAAmG;QACnG,sGAAsG;QACtG,qBAAqB;QACrB,MAAM,YAAY,GAAG,YAAY;YAC7B,CAAC,CAAC,0DAA0D;YAC5D,CAAC,CAAC,uBAAuB,CAAC;QAC9B,OAAO,CACH,QAAQ,UAAU,WAAW,YAAY,oCAAoC;YAC7E,sGAAsG,CACzG,CAAC;IACN,CAAC;IAED,sGAAsG;IACtG,yGAAyG;IACjG,aAAa,CAAC,KAAwB;QAC1C,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAoB,EAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACxF,OAAO,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAmB,EAAW,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IACrG,CAAC;IAED,8CAA8C;IACtC,YAAY,CAAC,KAAwB;QACzC,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAmB,EAAW,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC1F,CAAC;IAED,mGAAmG;IAC3F,YAAY,CAAC,KAAwB;QACzC,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAmB,EAAW,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC3F,CAAC;IAED,qGAAqG;IAC7F,aAAa,CAAC,KAAwB;QAC1C,OAAO,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAC9D,CAAC;IAED,wGAAwG;IACxG,gGAAgG;IAChG,oDAAoD;IAC5C,cAAc,CAAC,KAAwB;QAC3C,OAAO,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IACvE,CAAC;IAED;;;;;;;;;OASG;IACK,aAAa,CAAC,KAAwB,EAAE,CAAmB;QAC/D,MAAM,gBAAgB,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC1G,OAAO;YACH,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YACxB,wBAAwB,CAAC,CAAC,QAAQ,EAAE;YACpC,+EAA+E;YAC/E,wBAAwB,gBAAgB,EAAE;YAC1C,EAAE;SACL,CAAC;IACN,CAAC;IAED,mGAAmG;IACnG,uFAAuF;IAC/E,MAAM,CAAC,KAAwB,EAAE,CAAmB;QACxD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAkB,EAAW,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,WAAW,CAAC,CAAC;QACrG,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,OAAO,CAAC,CAAC,QAAQ,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAChF,OAAO;YACH,OAAO,CAAC,CAAC,QAAQ,sFAAsF;YACvG,SAAS,OAAO,CAAC,OAAO,EAAE;YAC1B,iGAAiG;YACjG,8BAA8B;SACjC,CAAC;IACN,CAAC;IAED;;;;;;OAMG;IACK,OAAO,CAAC,CAAmB;QAC/B,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,OAAO,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC;QAC9C,OAAO,CAAC,0BAA0B,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,sGAAsG;IACtG,+FAA+F;IACvF,GAAG,CAAC,CAAmB;QAC3B,IAAI,CAAC,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,iEAAiE,CAAC,CAAC,OAAO,CAAC,MAAM,UAAU,CAAC;QACvG,CAAC;QACD,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,oBAAoB,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAS,EAAU,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACtH,CAAC;CACJ,CAAA;AArUY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,sBAAU,EAAC,8BAAkB,CAAC,SAAS,CAAC;6CAGC,kCAAe;QACV,0CAA2B;GAH7D,YAAY,CAqUxB","sourcesContent":["import { injectable, bindingScopeValues } from 'inversify';\nimport { reviewJsonSchemaHint, RequiredChecklist, ReviewerBriefing, ReviewerInstructionsService } from '@webpieces/rules-config';\nimport { ChecklistNotice } from './checklist-notice';\n\nconst SEP = '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\\n';\n\n/**\n * One reviewer that ALREADY ANSWERED on this branch and refused, with the refusal rendered by\n * `ReviewJsonService.refusalError` — the ONE wording, shared with `wp-finish-upsert-pr`. Data-only.\n *\n * Stage ② carries these because it had the same defect finish did: a refused checklist has no passing\n * verdict, so it is \"owed\", so it got an ordinary spawn block identical to a reviewer that never ran. An\n * agent obeys that block, the reviewer re-reads unchanged code, refuses again — the loop, one stage earlier.\n *\n * The message is rendered by the COMMAND rather than in here for one reason: stage ② must not archive\n * anything. `refusalError` called with no archive path says \"fix it, then re-run; or set an override in\n * review-<id>.json\", which is only true while that file is still live — and at stage ② it is. Retiring a\n * verdict is finish's act, on the refusal it is actually acting on.\n */\nexport class RefusedReviewer {\n    checklistId: string;\n    message: string;\n\n    constructor(checklistId: string, message: string) {\n        this.checklistId = checklistId;\n        this.message = message;\n    }\n}\n\n/**\n * Everything the closing block of `wp-review-upsert-pr` needs. Data-only, and a class rather than an\n * object literal per CLAUDE.md. The three identifying paths are constructor args; the rest are optional\n * facts about the scan that default to \"nothing\", so a repo with no checklists constructs it in one line.\n */\nexport class ReviewReportInput {\n    repoRoot: string;\n    featureName: string;\n    reviewPath: string;             // the branch's review.json — the file the AI must write next\n    definedCount: number;           // how many checklists pr-gate.checklists defines\n    applicableCount: number;        // how many of them apply to THIS diff (0 ⇒ the notice, not spawn blocks)\n    reviewed: RequiredChecklist[];  // already have a passing verdict on this branch\n    formatErrors: string[];         // verdict files that exist but cannot be read as verdicts\n    briefings: ReviewerBriefing[];  // one per applicable checklist, already written to disk\n    refused: RefusedReviewer[];     // of the owed ones, those that already ran and said no (see RefusedReviewer)\n    /**\n     * `--no-optional` was passed: the human has already said to submit without the optional reviews, so the\n     * block that offers them is replaced by a one-line statement that they were skipped. It never suppresses\n     * a REQUIRED reviewer, and it is not a gate — nothing about what blocks the PR changes.\n     */\n    skipOptional: boolean;\n\n    constructor(repoRoot: string, featureName: string, reviewPath: string) {\n        this.repoRoot = repoRoot;\n        this.featureName = featureName;\n        this.reviewPath = reviewPath;\n        this.definedCount = 0;\n        this.applicableCount = 0;\n        this.reviewed = [];\n        this.formatErrors = [];\n        this.briefings = [];\n        this.refused = [];\n        this.skipOptional = false;\n    }\n}\n\n/**\n * Renders the closing block of `wp-review-upsert-pr` — the checklist verdict, then EXACTLY ONE \"what to do\n * next\".\n *\n * Extracted from the command so it can be asserted on as a rendered string, because the ordering IS the\n * contract. The bug it was extracted to fix: the zero-checklist notice ended with \"Carry on and run: pnpm\n * wp-finish-upsert-pr\", and the block printed directly beneath it said to write review.json first and\n * finish afterwards. Two next-steps, in the wrong order, and an agent that follows instructions literally —\n * which is the entire reason this command prints them — took the first one and opened a PR with no review.\n * That is precisely the failure the three-stage flow exists to prevent (reported on PR #519).\n *\n * The invariants, enforced by review-report.spec.ts:\n *   1. `wp-finish-upsert-pr` is named as a thing to run EXACTLY ONCE in the whole block.\n *   2. The review.json instruction comes BEFORE it — and BEFORE the spawn blocks (see nextSteps).\n *   3. With zero checklists the all-clear precedes any configuration guidance.\n *   4. REQUIRED reviewers are spawned unasked; OPTIONAL ones are only ever OFFERED, in one batched\n *      question. The two never share a step, because one instruction says \"do it\" and the other says\n *      \"ask first\", and an agent reading a merged list will act on the stronger of the two.\n *\n * Pure string building, no I/O. `@injectable(bindingScopeValues.Singleton)` so it is injected by type.\n */\n@injectable(bindingScopeValues.Singleton)\nexport class ReviewReport {\n    constructor(\n        private readonly checklistNotice: ChecklistNotice,\n        private readonly reviewerInstructions: ReviewerInstructionsService,\n    ) {}\n\n    render(input: ReviewReportInput): string {\n        return '\\n' + SEP + this.header(input) + SEP\n            + this.scanVerdict(input)\n            + this.nextSteps(input);\n    }\n\n    /**\n     * Name what this block is actually about. A repo with reviewers owed is being told to SPAWN; a repo with\n     * none is not, and promising subagents it does not have is the same kind of noise as explaining checklist\n     * configuration to a repo that configured none. Keyed on what is actually ACTIONABLE rather than on the\n     * applicable count: every applicable checklist already having a verdict means nothing to spawn, and so\n     * does a branch whose only outstanding reviews are optional ones the human already waved off.\n     *\n     * \"spawn\" and \"ask about\" are separate headings because they are separate obligations. A branch owing\n     * only optional reviews has nothing the AI may do unilaterally, and a heading that says SPAWN is the\n     * single line most likely to make it do exactly that.\n     */\n    private header(input: ReviewReportInput): string {\n        if (this.requiredOwed(input).length > 0) return '② Review, spawn subagent reviewers, then finish\\n';\n        if (this.offerableOwed(input).length > 0) return '② Review, offer the optional reviewers, then finish\\n';\n        return '② Review, then finish\\n';\n    }\n\n    /**\n     * What the SCAN found: either \"nothing applies here\" or the already-reviewed / unreadable-verdict lines.\n     * Verdicts, not instructions — every instruction lives in nextSteps() below, so no line up here can be\n     * mistaken for the next action.\n     */\n    private scanVerdict(input: ReviewReportInput): string {\n        if (input.applicableCount === 0) return '\\n' + this.checklistNotice.build(input.definedCount);\n        const lines: string[] = [];\n        // The prohibition rides on the REUSE line itself, not only in the all-clear below, because the\n        // all-clear is not printed when anything is still owed — and \"some reviewers are reused, others\n        // must be spawned\" is exactly the shape in which an agent re-spawns the reused ones too.\n        for (const r of input.reviewed) {\n            lines.push(`  ✓ ${r.subagent} — already reviewed on this branch; verdict STANDS, do NOT re-spawn (review-${r.id}.json)`);\n        }\n        // A verdict file that EXISTS but is unreadable as a verdict is called out here. Without it this\n        // reports the checklist as simply owed, and the AI re-runs a reviewer that already ran instead of\n        // correcting the file sitting right there.\n        for (const e of input.formatErrors) lines.push(`  ⛔ ${e}`);\n        lines.push(...this.skippedLines(input));\n        if (this.actionableOwed(input).length === 0) lines.push('', this.allClear(input));\n        if (lines.length === 0) return '';\n        return '\\n' + lines.join('\\n') + '\\n';\n    }\n\n    /**\n     * `--no-optional`, stated as a VERDICT rather than left silent. Named individually, not just counted: the\n     * whole reason the human is allowed to skip these is that they know this diff, and the only way they can\n     * catch \"wait, not THAT one\" is to see which ones went unreviewed.\n     */\n    private skippedLines(input: ReviewReportInput): string[] {\n        const skipped = this.optionalOwed(input);\n        if (!input.skipOptional || skipped.length === 0) return [];\n        return [\n            '',\n            `  ⏭️  ${skipped.length} OPTIONAL checklist(s) matched this diff and were SKIPPED (--no-optional):`,\n            ...skipped.map((b: ReviewerBriefing): string => `       ${b.subagent} — ${this.why(b)}`),\n            '      Not blocking. Drop the flag and re-run this command to offer them after all.',\n        ];\n    }\n\n    /**\n     * The all-clear, then the RULE that makes it actionable.\n     *\n     * \"nothing to spawn\" on its own is a description of the current state, and an agent that has just been\n     * told a state — rather than a rule — treats re-spawning as a judgement call it is entitled to make. It\n     * then makes it, reasoning (correctly, on the facts) that the carried-forward verdicts judged an earlier\n     * tree. Reviews here are once per branch BY CONSTRUCTION: a passing review-<id>.json satisfies its\n     * checklist for the branch's whole life, and `wp-finish-upsert-pr` never archives one the way it archives\n     * review.json. So the reuse is deliberate — it is what keeps post-PR iteration from re-paying for every\n     * matched reviewer — and the output has to say so, because the alternative reading is the expensive one.\n     *\n     * The overwrite warning is not decoration. A re-spawned reviewer writes to the SAME verdict path, so a\n     * gratuitous re-run does not merely cost a subagent — it destroys the verdict that was already banked.\n     *\n     * It must NOT claim everything was reviewed when optional reviews were skipped — that is the one sentence\n     * that would turn a deliberate skip into a false record of a review that happened.\n     */\n    private allClear(input: ReviewReportInput): string {\n        const headline = input.skipOptional && this.optionalOwed(input).length > 0\n            ? '✅ Nothing left to spawn — every REQUIRED checklist is reviewed (optional ones skipped above).'\n            : '✅ Every checklist that applies is already reviewed — nothing to spawn.';\n        return headline + '\\n' + this.oncePerBranchRule();\n    }\n\n    /**\n     * The once-per-branch rule, stated as a prohibition rather than left to be inferred from a ✅.\n     *\n     * Printed whenever verdicts are being reused — which is every iteration of a PR after the first, i.e. the\n     * majority of stage-② runs on any branch that gets review feedback.\n     */\n    private oncePerBranchRule(): string {\n        return (\n            '   Reviews here are ONCE PER BRANCH: a passing verdict carries forward to every later iteration\\n' +\n            '   of this PR, deliberately, so post-PR edits cost no reviewer tokens. Do NOT re-spawn a reviewer\\n' +\n            '   listed above to \"re-check\" the newer code — it burns a full subagent run AND overwrites the\\n' +\n            '   verdict file it already wrote. The only reviewers you may spawn are ones a STEP below names.'\n        );\n    }\n\n    /**\n     * The ONE instruction block, and the last thing the stage prints. Numbered rather than prose-linked\n     * (\"Then… Finally…\") so that skipping step 1 is visibly skipping a step, and worded so no earlier line\n     * can be mistaken for the real next action.\n     *\n     * review.json is STEP 1 and the spawn blocks are STEP 2 — that ORDER is the contract, not a preference.\n     * This block used to print the spawn blocks first and then say to write review.json \"WHILE any reviewer\n     * subagents above are still running\", which does not merely permit spawning first, it instructs it.\n     * Harmless for a reviewer that only reads the diff; wrong for one that judges the PR's stated INTENT —\n     * its title, summary or risk level — because review.json is the only place that intent lives. Such a\n     * reviewer either finds no file (a false RED and a wasted reviewer run) or, on a second run of this\n     * stage on the same branch, finds the PREVIOUS run's file and validates a title that no longer exists —\n     * a false GREEN, with nothing in the output saying which of the two happened. A consuming repo had to\n     * write itself a rule telling its agents to DISOBEY this block to work around it.\n     *\n     * What the old ordering bought was overlap on a single local file write, not a subagent round-trip.\n     *\n     * The schema hint is rendered by ReviewJsonService — the single renderer — so the shape printed here\n     * can never drift from the shape `wp-finish-upsert-pr` validates.\n     */\n    private nextSteps(input: ReviewReportInput): string {\n        const required = this.requiredOwed(input);\n        const offerable = this.offerableOwed(input);\n        // Numbered by what is actually PRINTED, so the numbers a reader sees are 1..n with no gaps: write\n        // review.json, then a spawn step only if anything must run, then an offer step only if anything may.\n        let step = 1;\n        const write = this.writeReviewStep(input.reviewPath, step++);\n        const spawn = required.length === 0 ? '' : this.spawnStep(input, required, step++);\n        const offer = offerable.length === 0 ? '' : this.offerStep(input, offerable, step++);\n        return '\\n' + SEP\n            + `▶ NEXT — ${step} steps, in this order. Step 1 is NOT optional:\\n` + SEP + '\\n'\n            + write + spawn + offer + this.finishStep(step, required.length + offerable.length > 0);\n    }\n\n    private writeReviewStep(reviewPath: string, step: number): string {\n        return (\n            `STEP ${step} — review your own changes, then write the review file. Write it FIRST — BEFORE you spawn\\n` +\n            '         anything below. finish REFUSES without it, and a reviewer subagent may READ it: a\\n' +\n            '         checklist that judges the PR title, summary or risk level reads exactly this file, so\\n' +\n            '         writing it afterwards races that reviewer into seeing nothing — or, on a re-run of this\\n' +\n            '         stage, into judging the PREVIOUS run\\'s review of code that has since changed.\\n\\n' +\n            reviewJsonSchemaHint(reviewPath) + '\\n\\n'\n        );\n    }\n\n    /**\n     * The REQUIRED reviewers — one copy-paste block each, and nothing at all when none is owed. The prompt is\n     * deliberately a POINTER and nothing else: the generated instructions file is the contract, so anything\n     * restated here is a second copy that can go stale — which is exactly how a removed `success` field\n     * outlived its own removal in print.\n     *\n     * These are spawned WITHOUT asking. They are the checklists the repo declared `required: true`, which is\n     * the repo saying the decision was already made; putting them to the human again would re-open a question\n     * the config exists to settle.\n     */\n    private spawnStep(input: ReviewReportInput, owed: readonly ReviewerBriefing[], step: number): string {\n        const lines: string[] = [\n            `STEP ${step} — only once that file is written, spawn these ${owed.length} REQUIRED reviewer subagent(s) — a`,\n            '         SEPARATE one each. They block the PR, so do NOT ask whether to run them. You may NOT',\n            '         review your own work, and you may NOT write a reviewer\\'s verdict file on its behalf.',\n            '',\n        ];\n        lines.push(...this.refusedWarning(input, owed));\n        for (const b of owed) lines.push(...this.oneSpawnBlock(input, b));\n        lines.push('');\n        return lines.join('\\n');\n    }\n\n    /**\n     * STEP n — the OPTIONAL reviewers: listed, never spawned unasked.\n     *\n     * This is the whole point of `required: false`. A one-line bug fix in a repo whose checklists key on a\n     * glob as broad as every TypeScript file otherwise pays for a dozen subagent reviews, and the only party\n     * who can judge whether this particular diff is worth them is the human looking at it.\n     *\n     * ONE batched multi-select question, explicitly. Asked one at a time, a human answering \"no\" nine times\n     * is being worn down rather than consulted, and by the third question the cheap thing is to say yes to\n     * everything — which is the state this feature exists to leave. The \"None\" option has to be spelled out\n     * too: an agent that offers a list without an explicit way to decline it has not really offered a choice.\n     *\n     * The blocking consequence is stated because it is the one non-obvious part of the contract: `required`\n     * governs whether a reviewer must RUN, not whether its answer counts. Choosing to run one and then\n     * shrugging off a red verdict would make the whole exercise theater.\n     */\n    private offerStep(input: ReviewReportInput, offerable: readonly ReviewerBriefing[], step: number): string {\n        const lines: string[] = [\n            `STEP ${step} — these ${offerable.length} OPTIONAL review checklist(s) matched this diff. They do NOT block the`,\n            '         PR, and you may NOT decide for the human whether to run them.',\n            '',\n            '         ASK THE HUMAN, in ONE multi-select question listing all of them plus an explicit',\n            '         \"None — required only\" choice. Do not ask one question per reviewer. Then spawn ONLY',\n            '         what they picked, the same way as any other reviewer.',\n            '',\n            '         If they pick none, that is a complete answer: go straight to the final step. If they',\n            '         told you up front to submit without reviews, re-run this stage as',\n            '         `pnpm wp-review-upsert-pr --no-optional` and this step disappears.',\n            '',\n            '         NOTE: whichever ones you DO run, their verdicts count in full — a red verdict from an',\n            '         optional reviewer blocks the PR exactly like a required one.',\n            '',\n        ];\n        lines.push(...this.refusedWarning(input, offerable));\n        for (const b of offerable) lines.push(...this.oneSpawnBlock(input, b));\n        lines.push('');\n        return lines.join('\\n');\n    }\n\n    // Said up front, not only beside the block: an agent that has decided to spawn everything listed here\n    // needs to know BEFORE it starts that one of these entries is not a spawn-shaped task. Scoped to the\n    // group being printed — a refusal among the REQUIRED reviewers is not a caveat on the optional list.\n    private refusedWarning(input: ReviewReportInput, group: readonly ReviewerBriefing[]): string[] {\n        const ids = new Set(group.map((b: ReviewerBriefing): string => b.checklistId));\n        const n = input.refused.filter((r: RefusedReviewer): boolean => ids.has(r.checklistId)).length;\n        if (n === 0) return [];\n        return [\n            `         ${n} of them already ANSWERED and refused (marked ⛔ below). Do not spawn`,\n            '         those against unchanged code — fix what they found first; the fix is the prerequisite.',\n            '',\n        ];\n    }\n\n    private finishStep(stepNumber: number, anyReviewers: boolean): string {\n        // \"every reviewer you ran\" rather than \"every reviewer above\": with an optional list the human may\n        // legitimately have run none of them, and a precondition naming reviewers that were declined reads as\n        // an unmeetable one.\n        const precondition = anyReviewers\n            ? 'once every reviewer you ran has written its verdict file'\n            : 'once that file exists';\n        return (\n            `STEP ${stepNumber} — only ${precondition}, run:  pnpm wp-finish-upsert-pr\\n` +\n            '         (The build gate is already green for this commit — finish reuses it unless HEAD moves.)\\n\\n'\n        );\n    }\n\n    // The briefings with no passing verdict yet — the ONE definition of \"owed\", shared by the header, the\n    // scan verdict and the step numbering, so they cannot disagree about whether there is anything to spawn.\n    private owedReviewers(input: ReviewReportInput): ReviewerBriefing[] {\n        const reviewedIds = new Set(input.reviewed.map((r: RequiredChecklist): string => r.id));\n        return input.briefings.filter((b: ReviewerBriefing): boolean => !reviewedIds.has(b.checklistId));\n    }\n\n    // Owed AND blocking — spawned without asking.\n    private requiredOwed(input: ReviewReportInput): ReviewerBriefing[] {\n        return this.owedReviewers(input).filter((b: ReviewerBriefing): boolean => b.required);\n    }\n\n    // Owed and optional. Still listed under `--no-optional` (as a skip verdict), just never as a step.\n    private optionalOwed(input: ReviewReportInput): ReviewerBriefing[] {\n        return this.owedReviewers(input).filter((b: ReviewerBriefing): boolean => !b.required);\n    }\n\n    // The optional ones the human is actually to be ASKED about — none, once they have already answered.\n    private offerableOwed(input: ReviewReportInput): ReviewerBriefing[] {\n        return input.skipOptional ? [] : this.optionalOwed(input);\n    }\n\n    // Everything the AI still has to act on. Distinct from `owedReviewers`: a skipped optional checklist is\n    // owed a verdict it will never get, and treating it as pending work is what would print a spawn\n    // instruction for a review the human just declined.\n    private actionableOwed(input: ReviewReportInput): ReviewerBriefing[] {\n        return [...this.requiredOwed(input), ...this.offerableOwed(input)];\n    }\n\n    /**\n     * One reviewer's block. A reviewer that already REFUSED gets the SAME spawn coordinates but a different\n     * lead-in, because the action before spawning is different: its own words are printed, and the spawn is\n     * explicitly conditioned on having fixed the finding first.\n     *\n     * It keeps its spawn block rather than being dropped from the list, because the reviewer genuinely does\n     * still owe a fresh verdict — dropping it would leave nothing anywhere saying how to get one. What must\n     * not happen is a bare \"spawn this\" that reads identically to a reviewer that never ran, which is the\n     * loop this exists to break.\n     */\n    private oneSpawnBlock(input: ReviewReportInput, b: ReviewerBriefing): string[] {\n        const instructionsFile = this.reviewerInstructions.pathFor(input.repoRoot, input.featureName, b.subagent);\n        return [\n            ...this.leadIn(input, b),\n            `      subagent_type: ${b.subagent}`,\n            '      prompt:        Read your instructions file FIRST and follow it exactly:',\n            `                     ${instructionsFile}`,\n            '',\n        ];\n    }\n\n    // The lines above the spawn coordinates: normally just why this reviewer is in scope; for one that\n    // already refused, its verdict verbatim plus the order the two actions must happen in.\n    private leadIn(input: ReviewReportInput, b: ReviewerBriefing): string[] {\n        const refusal = input.refused.find((r: RefusedReviewer): boolean => r.checklistId === b.checklistId);\n        if (!refusal) return [`  ▶ ${b.subagent} — ${this.why(b)}`, ...this.docLine(b)];\n        return [\n            `  ⛔ ${b.subagent} — ALREADY REVIEWED THIS BRANCH AND REFUSED. It will refuse again on unchanged code.`,\n            `      ${refusal.message}`,\n            '      FIX THE FINDING FIRST (or record a human-authored override). ONLY THEN spawn it again, to',\n            '      write a fresh verdict:',\n        ];\n    }\n\n    /**\n     * The checklist's guidance doc, for OPTIONAL reviewers only.\n     *\n     * \"4 file(s) matched\" plus a broad glob does not tell a human what the review would actually look AT,\n     * and they are being asked to decide exactly that. Omitted for required reviewers: there is no decision\n     * to inform there — the reviewer runs either way, and the doc is already in its instructions file.\n     */\n    private docLine(b: ReviewerBriefing): string[] {\n        if (b.required || b.docPath === '') return [];\n        return [`      reviews against: ${b.docPath}`];\n    }\n\n    // Why this one is in scope. A patternless checklist is NOT \"matched\" — it always runs, over the whole\n    // diff, and saying so is what tells a repo its checklist is firing on docs-only PRs by design.\n    private why(b: ReviewerBriefing): string {\n        if (b.matchedPatterns.length === 0) {\n            return `ALWAYS RUNS (no \"patterns\" configured), whole diff in scope — ${b.myFiles.length} file(s)`;\n        }\n        return `${b.myFiles.length} file(s) matched ${b.matchedPatterns.map((p: string): string => `\"${p}\"`).join(', ')}`;\n    }\n}\n"]}
+{"version":3,"file":"review-report.js","sourceRoot":"","sources":["../../../../../../../packages/tooling/pr-gate/src/scripts/workflow/review-report.ts"],"names":[],"mappings":";;;;AAAA,yCAA2D;AAC3D,0DAAiI;AACjI,yDAAqD;AAErD,MAAM,GAAG,GAAG,0DAA0D,CAAC;AAEvE;;;;;;;;;;;;GAYG;AACH,MAAa,eAAe;IACxB,WAAW,CAAS;IACpB,OAAO,CAAS;IAEhB,YAAY,WAAmB,EAAE,OAAe;QAC5C,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IAC3B,CAAC;CACJ;AARD,0CAQC;AAED;;;;GAIG;AACH,MAAa,iBAAiB;IAC1B,QAAQ,CAAS;IACjB,WAAW,CAAS;IACpB,UAAU,CAAS,CAAa,6DAA6D;IAC7F,YAAY,CAAS,CAAW,iDAAiD;IACjF,eAAe,CAAS,CAAQ,yEAAyE;IACzG,QAAQ,CAAsB,CAAE,gDAAgD;IAChF,YAAY,CAAW,CAAS,0DAA0D;IAC1F,SAAS,CAAqB,CAAE,wDAAwD;IACxF,OAAO,CAAoB,CAAK,6EAA6E;IAC7G;;;;OAIG;IACH,YAAY,CAAU;IAEtB,YAAY,QAAgB,EAAE,WAAmB,EAAE,UAAkB;QACjE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC;QACtB,IAAI,CAAC,eAAe,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;QACnB,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;QACpB,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;IAC9B,CAAC;CACJ;AA7BD,8CA6BC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AAEI,IAAM,YAAY,GAAlB,MAAM,YAAY;IAEA;IACA;IAFrB,YACqB,eAAgC,EAChC,oBAAiD;QADjD,oBAAe,GAAf,eAAe,CAAiB;QAChC,yBAAoB,GAApB,oBAAoB,CAA6B;IACnE,CAAC;IAEJ,MAAM,CAAC,KAAwB;QAC3B,OAAO,IAAI,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG;cACtC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;cACvB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED;;;;;;;;;;OAUG;IACK,MAAM,CAAC,KAAwB;QACnC,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,mDAAmD,CAAC;QACpG,IAAI,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,uDAAuD,CAAC;QACzG,OAAO,yBAAyB,CAAC;IACrC,CAAC;IAED;;;;OAIG;IACK,WAAW,CAAC,KAAwB;QACxC,IAAI,KAAK,CAAC,eAAe,KAAK,CAAC;YAAE,OAAO,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC9F,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,+FAA+F;QAC/F,gGAAgG;QAChG,yFAAyF;QACzF,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,+EAA+E,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC7H,CAAC;QACD,gGAAgG;QAChG,kGAAkG;QAClG,2CAA2C;QAC3C,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,YAAY;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC3D,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAClF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAClC,OAAO,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC1C,CAAC;IAED;;;;OAIG;IACK,YAAY,CAAC,KAAwB;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,YAAY,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAC3D,OAAO;YACH,EAAE;YACF,SAAS,OAAO,CAAC,MAAM,4EAA4E;YACnG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAmB,EAAU,EAAE,CAAC,UAAU,CAAC,CAAC,QAAQ,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACxF,oFAAoF;SACvF,CAAC;IACN,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACK,QAAQ,CAAC,KAAwB;QACrC,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;YACtE,CAAC,CAAC,+FAA+F;YACjG,CAAC,CAAC,wEAAwE,CAAC;QAC/E,OAAO,QAAQ,GAAG,IAAI,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;IACtD,CAAC;IAED;;;;;OAKG;IACK,iBAAiB;QACrB,OAAO,CACH,mGAAmG;YACnG,qGAAqG;YACrG,kGAAkG;YAClG,iGAAiG,CACpG,CAAC;IACN,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACK,SAAS,CAAC,KAAwB;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC5C,kGAAkG;QAClG,qGAAqG;QACrG,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACnF,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrF,OAAO,IAAI,GAAG,GAAG;cACX,YAAY,IAAI,kDAAkD,GAAG,GAAG,GAAG,IAAI;cAC/E,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAChG,CAAC;IAEO,eAAe,CAAC,UAAkB,EAAE,IAAY;QACpD,OAAO,CACH,QAAQ,IAAI,6FAA6F;YACzG,8FAA8F;YAC9F,kGAAkG;YAClG,oGAAoG;YACpG,6FAA6F;YAC7F,IAAA,mCAAoB,EAAC,UAAU,CAAC,GAAG,MAAM,CAC5C,CAAC;IACN,CAAC;IAED;;;;;;;;;OASG;IACK,SAAS,CAAC,KAAwB,EAAE,IAAiC,EAAE,IAAY;QACvF,MAAM,KAAK,GAAa;YACpB,QAAQ,IAAI,kDAAkD,IAAI,CAAC,MAAM,oCAAoC;YAC7G,+FAA+F;YAC/F,gGAAgG;YAChG,EAAE;SACL,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QAChD,KAAK,MAAM,CAAC,IAAI,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QAClE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACK,SAAS,CAAC,KAAwB,EAAE,SAAsC,EAAE,IAAY;QAC5F,MAAM,KAAK,GAAa;YACpB,QAAQ,IAAI,YAAY,SAAS,CAAC,MAAM,wEAAwE;YAChH,wEAAwE;YACxE,EAAE;YACF,2FAA2F;YAC3F,+FAA+F;YAC/F,gEAAgE;YAChE,EAAE;YACF,+FAA+F;YAC/F,4EAA4E;YAC5E,6EAA6E;YAC7E,EAAE;YACF,gGAAgG;YAChG,uEAAuE;YACvE,EAAE;SACL,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;QACrD,KAAK,MAAM,CAAC,IAAI,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QACvE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,sGAAsG;IACtG,qGAAqG;IACrG,qGAAqG;IAC7F,cAAc,CAAC,KAAwB,EAAE,KAAkC;QAC/E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAmB,EAAU,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;QAC/E,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAkB,EAAW,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;QAC/F,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACvB,OAAO;YACH,YAAY,CAAC,sEAAsE;YACnF,iGAAiG;YACjG,EAAE;SACL,CAAC;IACN,CAAC;IAEO,UAAU,CAAC,UAAkB,EAAE,YAAqB;QACxD,mGAAmG;QACnG,sGAAsG;QACtG,qBAAqB;QACrB,MAAM,YAAY,GAAG,YAAY;YAC7B,CAAC,CAAC,0DAA0D;YAC5D,CAAC,CAAC,uBAAuB,CAAC;QAC9B,OAAO,CACH,QAAQ,UAAU,WAAW,YAAY,oCAAoC;YAC7E,sGAAsG,CACzG,CAAC;IACN,CAAC;IAED,sGAAsG;IACtG,yGAAyG;IACjG,aAAa,CAAC,KAAwB;QAC1C,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAoB,EAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACxF,OAAO,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAmB,EAAW,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IACrG,CAAC;IAED,8CAA8C;IACtC,YAAY,CAAC,KAAwB;QACzC,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAmB,EAAW,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC1F,CAAC;IAED,mGAAmG;IAC3F,YAAY,CAAC,KAAwB;QACzC,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAmB,EAAW,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC3F,CAAC;IAED,qGAAqG;IAC7F,aAAa,CAAC,KAAwB;QAC1C,OAAO,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAC9D,CAAC;IAED,wGAAwG;IACxG,gGAAgG;IAChG,oDAAoD;IAC5C,cAAc,CAAC,KAAwB;QAC3C,OAAO,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IACvE,CAAC;IAED;;;;;;;;;OASG;IACK,aAAa,CAAC,KAAwB,EAAE,CAAmB;QAC/D,MAAM,gBAAgB,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC1G,OAAO;YACH,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YACxB,wBAAwB,CAAC,CAAC,QAAQ,EAAE;YACpC,+EAA+E;YAC/E,wBAAwB,gBAAgB,EAAE;YAC1C,EAAE;SACL,CAAC;IACN,CAAC;IAED,mGAAmG;IACnG,uFAAuF;IAC/E,MAAM,CAAC,KAAwB,EAAE,CAAmB;QACxD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAkB,EAAW,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,WAAW,CAAC,CAAC;QACrG,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,OAAO,CAAC,CAAC,QAAQ,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAChF,OAAO;YACH,OAAO,CAAC,CAAC,QAAQ,sFAAsF;YACvG,SAAS,OAAO,CAAC,OAAO,EAAE;YAC1B,iGAAiG;YACjG,8BAA8B;SACjC,CAAC;IACN,CAAC;IAED;;;;;;OAMG;IACK,OAAO,CAAC,CAAmB;QAC/B,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,OAAO,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC;QAC9C,OAAO,CAAC,0BAA0B,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,sGAAsG;IACtG,+FAA+F;IACvF,GAAG,CAAC,CAAmB;QAC3B,IAAI,CAAC,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,iEAAiE,CAAC,CAAC,OAAO,CAAC,MAAM,UAAU,CAAC;QACvG,CAAC;QACD,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,oBAAoB,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAS,EAAU,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACtH,CAAC;CACJ,CAAA;AArUY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,sBAAU,EAAC,8BAAkB,CAAC,SAAS,CAAC;6CAGC,kCAAe;QACV,0CAA2B;GAH7D,YAAY,CAqUxB","sourcesContent":["import { injectable, bindingScopeValues } from 'inversify';\nimport { reviewJsonSchemaHint, RequiredChecklist, ReviewerBriefing, ReviewerInstructionsService } from '@webpieces/rules-config';\nimport { ChecklistNotice } from './checklist-notice';\n\nconst SEP = '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\\n';\n\n/**\n * One reviewer that ALREADY ANSWERED on this branch and refused, with the refusal rendered by\n * `ReviewJsonService.refusalError` — the ONE wording, shared with `wp-finish-upsert-pr`. Data-only.\n *\n * Stage ② carries these because it had the same defect finish did: a refused checklist has no passing\n * verdict, so it is \"owed\", so it got an ordinary spawn block identical to a reviewer that never ran. An\n * agent obeys that block, the reviewer re-reads unchanged code, refuses again — the loop, one stage earlier.\n *\n * The message is rendered by the COMMAND rather than in here for one reason: stage ② must not archive\n * anything. `refusalError` called with no archive path points the reader at the LIVE review-<id>.json,\n * which is only correct while that file is still there — and at stage ② it is. Retiring a verdict is\n * finish's act, on the refusal it is actually acting on.\n */\nexport class RefusedReviewer {\n    checklistId: string;\n    message: string;\n\n    constructor(checklistId: string, message: string) {\n        this.checklistId = checklistId;\n        this.message = message;\n    }\n}\n\n/**\n * Everything the closing block of `wp-review-upsert-pr` needs. Data-only, and a class rather than an\n * object literal per CLAUDE.md. The three identifying paths are constructor args; the rest are optional\n * facts about the scan that default to \"nothing\", so a repo with no checklists constructs it in one line.\n */\nexport class ReviewReportInput {\n    repoRoot: string;\n    featureName: string;\n    reviewPath: string;             // the branch's review.json — the file the AI must write next\n    definedCount: number;           // how many checklists pr-gate.checklists defines\n    applicableCount: number;        // how many of them apply to THIS diff (0 ⇒ the notice, not spawn blocks)\n    reviewed: RequiredChecklist[];  // already have a passing verdict on this branch\n    formatErrors: string[];         // verdict files that exist but cannot be read as verdicts\n    briefings: ReviewerBriefing[];  // one per applicable checklist, already written to disk\n    refused: RefusedReviewer[];     // of the owed ones, those that already ran and said no (see RefusedReviewer)\n    /**\n     * `--no-optional` was passed: the human has already said to submit without the optional reviews, so the\n     * block that offers them is replaced by a one-line statement that they were skipped. It never suppresses\n     * a REQUIRED reviewer, and it is not a gate — nothing about what blocks the PR changes.\n     */\n    skipOptional: boolean;\n\n    constructor(repoRoot: string, featureName: string, reviewPath: string) {\n        this.repoRoot = repoRoot;\n        this.featureName = featureName;\n        this.reviewPath = reviewPath;\n        this.definedCount = 0;\n        this.applicableCount = 0;\n        this.reviewed = [];\n        this.formatErrors = [];\n        this.briefings = [];\n        this.refused = [];\n        this.skipOptional = false;\n    }\n}\n\n/**\n * Renders the closing block of `wp-review-upsert-pr` — the checklist verdict, then EXACTLY ONE \"what to do\n * next\".\n *\n * Extracted from the command so it can be asserted on as a rendered string, because the ordering IS the\n * contract. The bug it was extracted to fix: the zero-checklist notice ended with \"Carry on and run: pnpm\n * wp-finish-upsert-pr\", and the block printed directly beneath it said to write review.json first and\n * finish afterwards. Two next-steps, in the wrong order, and an agent that follows instructions literally —\n * which is the entire reason this command prints them — took the first one and opened a PR with no review.\n * That is precisely the failure the three-stage flow exists to prevent (reported on PR #519).\n *\n * The invariants, enforced by review-report.spec.ts:\n *   1. `wp-finish-upsert-pr` is named as a thing to run EXACTLY ONCE in the whole block.\n *   2. The review.json instruction comes BEFORE it — and BEFORE the spawn blocks (see nextSteps).\n *   3. With zero checklists the all-clear precedes any configuration guidance.\n *   4. REQUIRED reviewers are spawned unasked; OPTIONAL ones are only ever OFFERED, in one batched\n *      question. The two never share a step, because one instruction says \"do it\" and the other says\n *      \"ask first\", and an agent reading a merged list will act on the stronger of the two.\n *\n * Pure string building, no I/O. `@injectable(bindingScopeValues.Singleton)` so it is injected by type.\n */\n@injectable(bindingScopeValues.Singleton)\nexport class ReviewReport {\n    constructor(\n        private readonly checklistNotice: ChecklistNotice,\n        private readonly reviewerInstructions: ReviewerInstructionsService,\n    ) {}\n\n    render(input: ReviewReportInput): string {\n        return '\\n' + SEP + this.header(input) + SEP\n            + this.scanVerdict(input)\n            + this.nextSteps(input);\n    }\n\n    /**\n     * Name what this block is actually about. A repo with reviewers owed is being told to SPAWN; a repo with\n     * none is not, and promising subagents it does not have is the same kind of noise as explaining checklist\n     * configuration to a repo that configured none. Keyed on what is actually ACTIONABLE rather than on the\n     * applicable count: every applicable checklist already having a verdict means nothing to spawn, and so\n     * does a branch whose only outstanding reviews are optional ones the human already waved off.\n     *\n     * \"spawn\" and \"ask about\" are separate headings because they are separate obligations. A branch owing\n     * only optional reviews has nothing the AI may do unilaterally, and a heading that says SPAWN is the\n     * single line most likely to make it do exactly that.\n     */\n    private header(input: ReviewReportInput): string {\n        if (this.requiredOwed(input).length > 0) return '② Review, spawn subagent reviewers, then finish\\n';\n        if (this.offerableOwed(input).length > 0) return '② Review, offer the optional reviewers, then finish\\n';\n        return '② Review, then finish\\n';\n    }\n\n    /**\n     * What the SCAN found: either \"nothing applies here\" or the already-reviewed / unreadable-verdict lines.\n     * Verdicts, not instructions — every instruction lives in nextSteps() below, so no line up here can be\n     * mistaken for the next action.\n     */\n    private scanVerdict(input: ReviewReportInput): string {\n        if (input.applicableCount === 0) return '\\n' + this.checklistNotice.build(input.definedCount);\n        const lines: string[] = [];\n        // The prohibition rides on the REUSE line itself, not only in the all-clear below, because the\n        // all-clear is not printed when anything is still owed — and \"some reviewers are reused, others\n        // must be spawned\" is exactly the shape in which an agent re-spawns the reused ones too.\n        for (const r of input.reviewed) {\n            lines.push(`  ✓ ${r.subagent} — already reviewed on this branch; verdict STANDS, do NOT re-spawn (review-${r.id}.json)`);\n        }\n        // A verdict file that EXISTS but is unreadable as a verdict is called out here. Without it this\n        // reports the checklist as simply owed, and the AI re-runs a reviewer that already ran instead of\n        // correcting the file sitting right there.\n        for (const e of input.formatErrors) lines.push(`  ⛔ ${e}`);\n        lines.push(...this.skippedLines(input));\n        if (this.actionableOwed(input).length === 0) lines.push('', this.allClear(input));\n        if (lines.length === 0) return '';\n        return '\\n' + lines.join('\\n') + '\\n';\n    }\n\n    /**\n     * `--no-optional`, stated as a VERDICT rather than left silent. Named individually, not just counted: the\n     * whole reason the human is allowed to skip these is that they know this diff, and the only way they can\n     * catch \"wait, not THAT one\" is to see which ones went unreviewed.\n     */\n    private skippedLines(input: ReviewReportInput): string[] {\n        const skipped = this.optionalOwed(input);\n        if (!input.skipOptional || skipped.length === 0) return [];\n        return [\n            '',\n            `  ⏭️  ${skipped.length} OPTIONAL checklist(s) matched this diff and were SKIPPED (--no-optional):`,\n            ...skipped.map((b: ReviewerBriefing): string => `       ${b.subagent} — ${this.why(b)}`),\n            '      Not blocking. Drop the flag and re-run this command to offer them after all.',\n        ];\n    }\n\n    /**\n     * The all-clear, then the RULE that makes it actionable.\n     *\n     * \"nothing to spawn\" on its own is a description of the current state, and an agent that has just been\n     * told a state — rather than a rule — treats re-spawning as a judgement call it is entitled to make. It\n     * then makes it, reasoning (correctly, on the facts) that the carried-forward verdicts judged an earlier\n     * tree. Reviews here are once per branch BY CONSTRUCTION: a passing review-<id>.json satisfies its\n     * checklist for the branch's whole life, and `wp-finish-upsert-pr` never archives one the way it archives\n     * review.json. So the reuse is deliberate — it is what keeps post-PR iteration from re-paying for every\n     * matched reviewer — and the output has to say so, because the alternative reading is the expensive one.\n     *\n     * The overwrite warning is not decoration. A re-spawned reviewer writes to the SAME verdict path, so a\n     * gratuitous re-run does not merely cost a subagent — it destroys the verdict that was already banked.\n     *\n     * It must NOT claim everything was reviewed when optional reviews were skipped — that is the one sentence\n     * that would turn a deliberate skip into a false record of a review that happened.\n     */\n    private allClear(input: ReviewReportInput): string {\n        const headline = input.skipOptional && this.optionalOwed(input).length > 0\n            ? '✅ Nothing left to spawn — every REQUIRED checklist is reviewed (optional ones skipped above).'\n            : '✅ Every checklist that applies is already reviewed — nothing to spawn.';\n        return headline + '\\n' + this.oncePerBranchRule();\n    }\n\n    /**\n     * The once-per-branch rule, stated as a prohibition rather than left to be inferred from a ✅.\n     *\n     * Printed whenever verdicts are being reused — which is every iteration of a PR after the first, i.e. the\n     * majority of stage-② runs on any branch that gets review feedback.\n     */\n    private oncePerBranchRule(): string {\n        return (\n            '   Reviews here are ONCE PER BRANCH: a passing verdict carries forward to every later iteration\\n' +\n            '   of this PR, deliberately, so post-PR edits cost no reviewer tokens. Do NOT re-spawn a reviewer\\n' +\n            '   listed above to \"re-check\" the newer code — it burns a full subagent run AND overwrites the\\n' +\n            '   verdict file it already wrote. The only reviewers you may spawn are ones a STEP below names.'\n        );\n    }\n\n    /**\n     * The ONE instruction block, and the last thing the stage prints. Numbered rather than prose-linked\n     * (\"Then… Finally…\") so that skipping step 1 is visibly skipping a step, and worded so no earlier line\n     * can be mistaken for the real next action.\n     *\n     * review.json is STEP 1 and the spawn blocks are STEP 2 — that ORDER is the contract, not a preference.\n     * This block used to print the spawn blocks first and then say to write review.json \"WHILE any reviewer\n     * subagents above are still running\", which does not merely permit spawning first, it instructs it.\n     * Harmless for a reviewer that only reads the diff; wrong for one that judges the PR's stated INTENT —\n     * its title, summary or risk level — because review.json is the only place that intent lives. Such a\n     * reviewer either finds no file (a false RED and a wasted reviewer run) or, on a second run of this\n     * stage on the same branch, finds the PREVIOUS run's file and validates a title that no longer exists —\n     * a false GREEN, with nothing in the output saying which of the two happened. A consuming repo had to\n     * write itself a rule telling its agents to DISOBEY this block to work around it.\n     *\n     * What the old ordering bought was overlap on a single local file write, not a subagent round-trip.\n     *\n     * The schema hint is rendered by ReviewJsonService — the single renderer — so the shape printed here\n     * can never drift from the shape `wp-finish-upsert-pr` validates.\n     */\n    private nextSteps(input: ReviewReportInput): string {\n        const required = this.requiredOwed(input);\n        const offerable = this.offerableOwed(input);\n        // Numbered by what is actually PRINTED, so the numbers a reader sees are 1..n with no gaps: write\n        // review.json, then a spawn step only if anything must run, then an offer step only if anything may.\n        let step = 1;\n        const write = this.writeReviewStep(input.reviewPath, step++);\n        const spawn = required.length === 0 ? '' : this.spawnStep(input, required, step++);\n        const offer = offerable.length === 0 ? '' : this.offerStep(input, offerable, step++);\n        return '\\n' + SEP\n            + `▶ NEXT — ${step} steps, in this order. Step 1 is NOT optional:\\n` + SEP + '\\n'\n            + write + spawn + offer + this.finishStep(step, required.length + offerable.length > 0);\n    }\n\n    private writeReviewStep(reviewPath: string, step: number): string {\n        return (\n            `STEP ${step} — review your own changes, then write the review file. Write it FIRST — BEFORE you spawn\\n` +\n            '         anything below. finish REFUSES without it, and a reviewer subagent may READ it: a\\n' +\n            '         checklist that judges the PR title, summary or risk level reads exactly this file, so\\n' +\n            '         writing it afterwards races that reviewer into seeing nothing — or, on a re-run of this\\n' +\n            '         stage, into judging the PREVIOUS run\\'s review of code that has since changed.\\n\\n' +\n            reviewJsonSchemaHint(reviewPath) + '\\n\\n'\n        );\n    }\n\n    /**\n     * The REQUIRED reviewers — one copy-paste block each, and nothing at all when none is owed. The prompt is\n     * deliberately a POINTER and nothing else: the generated instructions file is the contract, so anything\n     * restated here is a second copy that can go stale — which is exactly how a removed `success` field\n     * outlived its own removal in print.\n     *\n     * These are spawned WITHOUT asking. They are the checklists the repo declared `required: true`, which is\n     * the repo saying the decision was already made; putting them to the human again would re-open a question\n     * the config exists to settle.\n     */\n    private spawnStep(input: ReviewReportInput, owed: readonly ReviewerBriefing[], step: number): string {\n        const lines: string[] = [\n            `STEP ${step} — only once that file is written, spawn these ${owed.length} REQUIRED reviewer subagent(s) — a`,\n            '         SEPARATE one each. They block the PR, so do NOT ask whether to run them. You may NOT',\n            '         review your own work, and you may NOT write a reviewer\\'s verdict file on its behalf.',\n            '',\n        ];\n        lines.push(...this.refusedWarning(input, owed));\n        for (const b of owed) lines.push(...this.oneSpawnBlock(input, b));\n        lines.push('');\n        return lines.join('\\n');\n    }\n\n    /**\n     * STEP n — the OPTIONAL reviewers: listed, never spawned unasked.\n     *\n     * This is the whole point of `required: false`. A one-line bug fix in a repo whose checklists key on a\n     * glob as broad as every TypeScript file otherwise pays for a dozen subagent reviews, and the only party\n     * who can judge whether this particular diff is worth them is the human looking at it.\n     *\n     * ONE batched multi-select question, explicitly. Asked one at a time, a human answering \"no\" nine times\n     * is being worn down rather than consulted, and by the third question the cheap thing is to say yes to\n     * everything — which is the state this feature exists to leave. The \"None\" option has to be spelled out\n     * too: an agent that offers a list without an explicit way to decline it has not really offered a choice.\n     *\n     * The blocking consequence is stated because it is the one non-obvious part of the contract: `required`\n     * governs whether a reviewer must RUN, not whether its answer counts. Choosing to run one and then\n     * shrugging off a red verdict would make the whole exercise theater.\n     */\n    private offerStep(input: ReviewReportInput, offerable: readonly ReviewerBriefing[], step: number): string {\n        const lines: string[] = [\n            `STEP ${step} — these ${offerable.length} OPTIONAL review checklist(s) matched this diff. They do NOT block the`,\n            '         PR, and you may NOT decide for the human whether to run them.',\n            '',\n            '         ASK THE HUMAN, in ONE multi-select question listing all of them plus an explicit',\n            '         \"None — required only\" choice. Do not ask one question per reviewer. Then spawn ONLY',\n            '         what they picked, the same way as any other reviewer.',\n            '',\n            '         If they pick none, that is a complete answer: go straight to the final step. If they',\n            '         told you up front to submit without reviews, re-run this stage as',\n            '         `pnpm wp-review-upsert-pr --no-optional` and this step disappears.',\n            '',\n            '         NOTE: whichever ones you DO run, their verdicts count in full — a red verdict from an',\n            '         optional reviewer blocks the PR exactly like a required one.',\n            '',\n        ];\n        lines.push(...this.refusedWarning(input, offerable));\n        for (const b of offerable) lines.push(...this.oneSpawnBlock(input, b));\n        lines.push('');\n        return lines.join('\\n');\n    }\n\n    // Said up front, not only beside the block: an agent that has decided to spawn everything listed here\n    // needs to know BEFORE it starts that one of these entries is not a spawn-shaped task. Scoped to the\n    // group being printed — a refusal among the REQUIRED reviewers is not a caveat on the optional list.\n    private refusedWarning(input: ReviewReportInput, group: readonly ReviewerBriefing[]): string[] {\n        const ids = new Set(group.map((b: ReviewerBriefing): string => b.checklistId));\n        const n = input.refused.filter((r: RefusedReviewer): boolean => ids.has(r.checklistId)).length;\n        if (n === 0) return [];\n        return [\n            `         ${n} of them already ANSWERED and refused (marked ⛔ below). Do not spawn`,\n            '         those against unchanged code — fix what they found first; the fix is the prerequisite.',\n            '',\n        ];\n    }\n\n    private finishStep(stepNumber: number, anyReviewers: boolean): string {\n        // \"every reviewer you ran\" rather than \"every reviewer above\": with an optional list the human may\n        // legitimately have run none of them, and a precondition naming reviewers that were declined reads as\n        // an unmeetable one.\n        const precondition = anyReviewers\n            ? 'once every reviewer you ran has written its verdict file'\n            : 'once that file exists';\n        return (\n            `STEP ${stepNumber} — only ${precondition}, run:  pnpm wp-finish-upsert-pr\\n` +\n            '         (The build gate is already green for this commit — finish reuses it unless HEAD moves.)\\n\\n'\n        );\n    }\n\n    // The briefings with no passing verdict yet — the ONE definition of \"owed\", shared by the header, the\n    // scan verdict and the step numbering, so they cannot disagree about whether there is anything to spawn.\n    private owedReviewers(input: ReviewReportInput): ReviewerBriefing[] {\n        const reviewedIds = new Set(input.reviewed.map((r: RequiredChecklist): string => r.id));\n        return input.briefings.filter((b: ReviewerBriefing): boolean => !reviewedIds.has(b.checklistId));\n    }\n\n    // Owed AND blocking — spawned without asking.\n    private requiredOwed(input: ReviewReportInput): ReviewerBriefing[] {\n        return this.owedReviewers(input).filter((b: ReviewerBriefing): boolean => b.required);\n    }\n\n    // Owed and optional. Still listed under `--no-optional` (as a skip verdict), just never as a step.\n    private optionalOwed(input: ReviewReportInput): ReviewerBriefing[] {\n        return this.owedReviewers(input).filter((b: ReviewerBriefing): boolean => !b.required);\n    }\n\n    // The optional ones the human is actually to be ASKED about — none, once they have already answered.\n    private offerableOwed(input: ReviewReportInput): ReviewerBriefing[] {\n        return input.skipOptional ? [] : this.optionalOwed(input);\n    }\n\n    // Everything the AI still has to act on. Distinct from `owedReviewers`: a skipped optional checklist is\n    // owed a verdict it will never get, and treating it as pending work is what would print a spawn\n    // instruction for a review the human just declined.\n    private actionableOwed(input: ReviewReportInput): ReviewerBriefing[] {\n        return [...this.requiredOwed(input), ...this.offerableOwed(input)];\n    }\n\n    /**\n     * One reviewer's block. A reviewer that already REFUSED gets the SAME spawn coordinates but a different\n     * lead-in, because the action before spawning is different: its own words are printed, and the spawn is\n     * explicitly conditioned on having fixed the finding first.\n     *\n     * It keeps its spawn block rather than being dropped from the list, because the reviewer genuinely does\n     * still owe a fresh verdict — dropping it would leave nothing anywhere saying how to get one. What must\n     * not happen is a bare \"spawn this\" that reads identically to a reviewer that never ran, which is the\n     * loop this exists to break.\n     */\n    private oneSpawnBlock(input: ReviewReportInput, b: ReviewerBriefing): string[] {\n        const instructionsFile = this.reviewerInstructions.pathFor(input.repoRoot, input.featureName, b.subagent);\n        return [\n            ...this.leadIn(input, b),\n            `      subagent_type: ${b.subagent}`,\n            '      prompt:        Read your instructions file FIRST and follow it exactly:',\n            `                     ${instructionsFile}`,\n            '',\n        ];\n    }\n\n    // The lines above the spawn coordinates: normally just why this reviewer is in scope; for one that\n    // already refused, its verdict verbatim plus the order the two actions must happen in.\n    private leadIn(input: ReviewReportInput, b: ReviewerBriefing): string[] {\n        const refusal = input.refused.find((r: RefusedReviewer): boolean => r.checklistId === b.checklistId);\n        if (!refusal) return [`  ▶ ${b.subagent} — ${this.why(b)}`, ...this.docLine(b)];\n        return [\n            `  ⛔ ${b.subagent} — ALREADY REVIEWED THIS BRANCH AND REFUSED. It will refuse again on unchanged code.`,\n            `      ${refusal.message}`,\n            '      FIX THE FINDING FIRST (or record a human-authored override). ONLY THEN spawn it again, to',\n            '      write a fresh verdict:',\n        ];\n    }\n\n    /**\n     * The checklist's guidance doc, for OPTIONAL reviewers only.\n     *\n     * \"4 file(s) matched\" plus a broad glob does not tell a human what the review would actually look AT,\n     * and they are being asked to decide exactly that. Omitted for required reviewers: there is no decision\n     * to inform there — the reviewer runs either way, and the doc is already in its instructions file.\n     */\n    private docLine(b: ReviewerBriefing): string[] {\n        if (b.required || b.docPath === '') return [];\n        return [`      reviews against: ${b.docPath}`];\n    }\n\n    // Why this one is in scope. A patternless checklist is NOT \"matched\" — it always runs, over the whole\n    // diff, and saying so is what tells a repo its checklist is firing on docs-only PRs by design.\n    private why(b: ReviewerBriefing): string {\n        if (b.matchedPatterns.length === 0) {\n            return `ALWAYS RUNS (no \"patterns\" configured), whole diff in scope — ${b.myFiles.length} file(s)`;\n        }\n        return `${b.myFiles.length} file(s) matched ${b.matchedPatterns.map((p: string): string => `\"${p}\"`).join(', ')}`;\n    }\n}\n"]}

package/src/scripts/workflow/reviewer-verdict-gate.js

@@ -46,7 +46,7 @@ let ReviewerVerdictGate = class ReviewerVerdictGate {
         // The split is computed from the verdicts the SCAN already loaded, never from a second read of disk:
         // a re-read here could disagree with the set that produced `outstanding`, and a checklist that is
         // "outstanding" per one read and "clear" per another belongs to neither section of the message.
-        const refused = this.reviewJsonService.refusedChecklists(scan.outstanding, scan.results);
+        const refused = this.reviewJsonService.refusedChecklists(scan.outstanding, scan.results, scan.authorized);
         const refusedIds = new Set(refused.map((r) => r.id));
         const neverRan = scan.outstanding.filter((r) => !refusedIds.has(r.id));
         // Rendered BEFORE the throw and, per checklist, with the verdict resolved before its file is moved —
@@ -137,7 +137,7 @@ let ReviewerVerdictGate = class ReviewerVerdictGate {
      * which the un-archived wording of `refusalError` describes correctly).
      */
     retireAndReport(scan, req) {
-        const verdict = this.reviewJsonService.resolveVerdict(req, scan.results);
+        const verdict = this.reviewJsonService.resolveVerdict(req, scan.results, scan.authorized);
         return this.reviewJsonService.refusalError(req, verdict, this.archiveOrWarn(scan.reviewPath, req.id));
     }
     // The archive path, or '' when there was nothing to move or the move failed (see retireAndReport).

package/src/scripts/workflow/reviewer-verdict-gate.js.map

@@ -1 +1 @@
-{"version":3,"file":"reviewer-verdict-gate.js","sourceRoot":"","sources":["../../../../../../../packages/tooling/pr-gate/src/scripts/workflow/reviewer-verdict-gate.ts"],"names":[],"mappings":";;;;AAAA,0DAEiC;AACjC,yCAA2D;AAG3D;;;;;;;;;;;;;;;;;;;;GAoBG;AAEI,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAEP;IACA;IAFrB,YACqB,iBAAoC,EACpC,YAA0C;QAD1C,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,iBAAY,GAAZ,YAAY,CAA8B;IAC5D,CAAC;IAEJ;;;;;;;OAOG;IACH,sBAAsB,CAAC,IAAmB;QACtC,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC1C,qGAAqG;QACrG,kGAAkG;QAClG,gGAAgG;QAChG,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACzF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAoB,EAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAChF,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAoB,EAAW,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACnG,qGAAqG;QACrG,kGAAkG;QAClG,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,GAAsB,EAAU,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QAClG,MAAM,IAAI,4BAAa,CACnB,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC;cACpC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;cAC5B,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;cAC7B,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC;cACpC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CACpC,CAAC;IACN,CAAC;IAED;;;;;OAKG;IACK,QAAQ,CAAC,IAAmB,EAAE,OAAqC,EAAE,QAAsC;QAC/G,MAAM,KAAK,GAAG;YACV,aAAa,IAAI,CAAC,WAAW,CAAC,MAAM,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,+DAA+D;SACnI,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,OAAO,OAAO,CAAC,MAAM,+DAA+D,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACvI,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,OAAO,QAAQ,CAAC,MAAM,iDAAiD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC3H,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;IAC9D,CAAC;IAED;;;;;;;;OAQG;IACK,WAAW,CAAC,IAAmB;QACnC,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAChD,OAAO,sBAAsB,IAAI,CAAC,cAAc,CAAC,MAAM,wCAAwC;cACzF,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,qCAAqC;cACpF,6DAA6D,CAAC;IACxE,CAAC;IAED,yGAAyG;IACzG,wGAAwG;IACxG,yCAAyC;IACjC,iBAAiB,CAAC,IAAmB;QACzC,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAC9C,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,mDAAmD;cAC/E,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAS,EAAU,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;IACvF,CAAC;IAED;;;OAGG;IACK,cAAc,CAAC,QAA2B;QAC9C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACrC,OAAO,kGAAkG;cACnG,yGAAyG;cACzG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAS,EAAU,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IAChF,CAAC;IAED;;;;OAIG;IACK,eAAe,CAAC,IAAmB,EAAE,QAAsC;QAC/E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACrC,OAAO,0FAA0F;cAC3F,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IACrF,CAAC;IAED;;;;;;;;;;;;OAYG;IACK,eAAe,CAAC,IAAmB,EAAE,GAAsB;QAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1G,CAAC;IAED,mGAAmG;IAC3F,aAAa,CAAC,UAAkB,EAAE,WAAmB;QACzD,yHAAyH;QACzH,8DAA8D;QAC9D,IAAI,CAAC;YACD,OAAO,IAAI,CAAC,iBAAiB,CAAC,sBAAsB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAClF,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,sBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAChB,iDAAiD,WAAW,sCAAsC;kBAChG,oBAAoB,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;YAC7C,OAAO,EAAE,CAAC;QACd,CAAC;IACL,CAAC;IAED,yGAAyG;IACzG,0GAA0G;IAC1G,2BAA2B;IACnB,MAAM,CAAC,UAAmB;QAC9B,IAAI,UAAU,EAAE,CAAC;YACb,OAAO,mGAAmG;kBACpG,2FAA2F,CAAC;QACtG,CAAC;QACD,OAAO,yCAAyC;cAC1C,0GAA0G;cAC1G,oDAAoD,CAAC;IAC/D,CAAC;CACJ,CAAA;AAjJY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,sBAAU,EAAC,8BAAkB,CAAC,SAAS,CAAC;6CAGG,gCAAiB;QACtB,2CAA4B;GAHtD,mBAAmB,CAiJ/B","sourcesContent":["import {\n    ChecklistInstructionsService, InformAiError, RequiredChecklist, ReviewJsonService, toError,\n} from '@webpieces/rules-config';\nimport { injectable, bindingScopeValues } from 'inversify';\nimport { ChecklistScan } from './checklist-scanner';\n\n/**\n * The gate `wp-finish-upsert-pr` runs before it parses review.json: REFUSE the PR while any applicable\n * checklist is not clear, and say — per checklist — which of three different things went wrong.\n *\n * It is its own class, not a private method on the command, for two reasons. It is the one piece of finish\n * that both MUTATES the branch (it retires red verdicts) and produces the text an AI acts on, so it is the\n * piece most worth asserting on directly; and the command it came out of is already the largest file in this\n * package, against a hard `@webpieces/max-file-lines` limit.\n *\n * THE BUG THIS EXISTS TO FIX. The message used to be one bucket and one imperative — \"You MUST run these N\n * reviewer subagent(s)\" — for three unrelated states. Handed to an agent, the literal, obedient response for\n * a checklist that had ALREADY REFUSED was to spawn the reviewer again; it re-read the same unchanged code,\n * refused again, and the loop cost a full subagent run per pass while the reviewer's actual finding was\n * never printed at all. Three states, three actions, in this order:\n *\n *   1. UNREADABLE (`scan.formatErrors`) -> fix four characters of JSON. Not a reviewer problem.\n *   2. REFUSED (CK_FAIL)                -> fix the finding (or get a HUMAN override). Not a missing step.\n *   3. NEVER RAN (the rest)             -> spawn the subagent. The ONLY case where that is the right move.\n *\n * `@injectable(bindingScopeValues.Singleton)` so it is injected by type and drawn in the DI design.\n */\n@injectable(bindingScopeValues.Singleton)\nexport class ReviewerVerdictGate {\n    constructor(\n        private readonly reviewJsonService: ReviewJsonService,\n        private readonly instructions: ChecklistInstructionsService,\n    ) {}\n\n    /**\n     * Refuse the PR while ANY applicable checklist still owes a passing verdict — naming exactly what each\n     * one needs. No-op for a repo with no applicable checklists.\n     *\n     * SIDE EFFECT, deliberately: every REFUSED checklist's verdict file is RETIRED to review-<id>.json.old on\n     * the way out (see {@link retireAndReport}). Only red verdicts are ever moved — a green, yellow or\n     * overridden one is reused across finish attempts and retiring it would force a needless subagent re-run.\n     */\n    assertEveryReviewerRan(scan: ChecklistScan): void {\n        if (scan.outstanding.length === 0) return;\n        // The split is computed from the verdicts the SCAN already loaded, never from a second read of disk:\n        // a re-read here could disagree with the set that produced `outstanding`, and a checklist that is\n        // \"outstanding\" per one read and \"clear\" per another belongs to neither section of the message.\n        const refused = this.reviewJsonService.refusedChecklists(scan.outstanding, scan.results);\n        const refusedIds = new Set(refused.map((r: RequiredChecklist): string => r.id));\n        const neverRan = scan.outstanding.filter((r: RequiredChecklist): boolean => !refusedIds.has(r.id));\n        // Rendered BEFORE the throw and, per checklist, with the verdict resolved before its file is moved —\n        // the message quotes the reviewer's own words, so losing them to the move would defeat the point.\n        const refusals = refused.map((req: RequiredChecklist): string => this.retireAndReport(scan, req));\n        throw new InformAiError(\n            this.headline(scan, refused, neverRan)\n            + this.unreadableSection(scan)\n            + this.refusedSection(refusals)\n            + this.neverRanSection(scan, neverRan)\n            + this.footer(refused.length > 0),\n        );\n    }\n\n    /**\n     * Say plainly how many REFUSED and how many never ran.\n     *\n     * The old headline said all of them \"have no passing verdict yet\", which is technically true of a refusal\n     * and reads as though nobody had looked. It is the sentence that framed a decision as an omission.\n     */\n    private headline(scan: ChecklistScan, refused: readonly RequiredChecklist[], neverRan: readonly RequiredChecklist[]): string {\n        const lines = [\n            `⛔ NO PR — ${scan.outstanding.length} of ${scan.applicable.length} review checklist(s) that apply to this branch are not clear:`,\n        ];\n        if (refused.length > 0) {\n            lines.push(`  • ${refused.length} REFUSED — a reviewer ran, judged this change, and said no: ${this.instructions.names(refused)}`);\n        }\n        if (neverRan.length > 0) {\n            lines.push(`  • ${neverRan.length} never ran — no verdict has been written yet: ${this.instructions.names(neverRan)}`);\n        }\n        return lines.join('\\n') + this.skippedNote(scan) + '\\n\\n';\n    }\n\n    /**\n     * The optional checklists nobody ran, stated OUT LOUD on the refusal.\n     *\n     * They are not why the PR is being refused and this block says so — but a message that lists only what\n     * blocked reads as \"everything else was reviewed\", and here that is false: those reviews were declined,\n     * not passed. The one moment a human is looking at the review state is the moment to be honest about\n     * which reviews did not happen, and it is also the prompt an AI needs to offer them again if the human\n     * has changed their mind now that something else came back red.\n     */\n    private skippedNote(scan: ChecklistScan): string {\n        if (scan.optionalNotRun.length === 0) return '';\n        return `\\n  (Not blocking: ${scan.optionalNotRun.length} OPTIONAL checklist(s) were not run — `\n            + `${this.instructions.names(scan.optionalNotRun)}. They do not have to run; re-run\\n`\n            + '   pnpm wp-review-upsert-pr if you now want to offer them.)';\n    }\n\n    // Unreadable verdict files come FIRST. A reviewer that wrote its verdict in the removed `success` format\n    // is otherwise indistinguishable from one that never ran, and the AI would go re-run a subagent instead\n    // of correcting four characters of JSON.\n    private unreadableSection(scan: ChecklistScan): string {\n        if (scan.formatErrors.length === 0) return '';\n        return `${scan.formatErrors.length} verdict file(s) are in an UNREADABLE format:\\n\\n`\n            + scan.formatErrors.map((e: string): string => `  • ${e}`).join('\\n') + '\\n\\n';\n    }\n\n    /**\n     * The refusals — SECOND, above anything that says to spawn a subagent, because a spawn instruction is the\n     * one line an agent acts on first, and acting on it here IS the loop.\n     */\n    private refusedSection(refusals: readonly string[]): string {\n        if (refusals.length === 0) return '';\n        return '⛔ REFUSED — these reviewers ALREADY ANSWERED. Re-spawning one against unchanged code only buys\\n'\n            + '   the same answer: fix what it found (or get a HUMAN to authorize an override), THEN review again.\\n\\n'\n            + refusals.map((r: string): string => `  • ${r}`).join('\\n\\n') + '\\n\\n';\n    }\n\n    /**\n     * The reviewers that genuinely never ran — LAST, and listing ONLY these. When there are none this block\n     * is absent entirely, which is the whole point: the \"You MUST run these N reviewer subagent(s)\"\n     * imperative must not appear at all on a run whose only problem is a refusal.\n     */\n    private neverRanSection(scan: ChecklistScan, neverRan: readonly RequiredChecklist[]): string {\n        if (neverRan.length === 0) return '';\n        return '❓ NO VERDICT YET — nothing has been written for these, so they must actually be run:\\n\\n'\n            + `${this.instructions.render(neverRan, scan.reviewPath, scan.context)}\\n\\n`;\n    }\n\n    /**\n     * Retire ONE refused checklist's verdict and render the refusal that reports it.\n     *\n     * ORDER IS LOAD-BEARING. The verdict is resolved from the already-loaded results, so the finding is in\n     * hand before the file moves; the move then happens; and only then is the message rendered, because it\n     * names the archive path and must not claim a move that did not happen.\n     *\n     * The move is NON-FATAL. A finish that died after retiring a verdict would leave the AI with a red\n     * verdict gone from the live path and no message saying where it went or why the PR was refused — a\n     * silent gap, and the worst possible outcome for a feature whose entire purpose is a durable record. So a\n     * failed move warns and the refusal is reported without an archive path (the file is then still live,\n     * which the un-archived wording of `refusalError` describes correctly).\n     */\n    private retireAndReport(scan: ChecklistScan, req: RequiredChecklist): string {\n        const verdict = this.reviewJsonService.resolveVerdict(req, scan.results);\n        return this.reviewJsonService.refusalError(req, verdict, this.archiveOrWarn(scan.reviewPath, req.id));\n    }\n\n    // The archive path, or '' when there was nothing to move or the move failed (see retireAndReport).\n    private archiveOrWarn(reviewPath: string, checklistId: string): string {\n        // webpieces-disable no-unmanaged-exceptions -- chokepoint: a failed archive must never swallow the refusal it belongs to\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            return this.reviewJsonService.archiveChecklistResult(reviewPath, checklistId);\n        } catch (err: unknown) {\n            const error = toError(err);\n            process.stderr.write(\n                `⚠️  Could not retire the refused verdict for \"${checklistId}\" (non-fatal — the refusal is still `\n                + `reported below): ${error.message}\\n`);\n            return '';\n        }\n    }\n\n    // Re-running stage 2 is normally optional. It stops being optional after a refusal, because the only way\n    // past one is to CHANGE the code — which is exactly the condition that makes the extracted diff and every\n    // reviewer briefing stale.\n    private footer(anyRefused: boolean): string {\n        if (anyRefused) {\n            return 'Then re-run: pnpm wp-review-upsert-pr (the code changed, so the extracted diff and the reviewer\\n'\n                + 'briefings are stale), re-run the reviewer(s) above, and finally: pnpm wp-finish-upsert-pr';\n        }\n        return 'Then re-run: pnpm wp-finish-upsert-pr\\n'\n            + '(Each reviewer\\'s generated instructions file is already written — re-running pnpm wp-review-upsert-pr\\n'\n            + ' is only needed if the code changed since it ran.)';\n    }\n}\n"]}
+{"version":3,"file":"reviewer-verdict-gate.js","sourceRoot":"","sources":["../../../../../../../packages/tooling/pr-gate/src/scripts/workflow/reviewer-verdict-gate.ts"],"names":[],"mappings":";;;;AAAA,0DAEiC;AACjC,yCAA2D;AAG3D;;;;;;;;;;;;;;;;;;;;GAoBG;AAEI,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAEP;IACA;IAFrB,YACqB,iBAAoC,EACpC,YAA0C;QAD1C,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,iBAAY,GAAZ,YAAY,CAA8B;IAC5D,CAAC;IAEJ;;;;;;;OAOG;IACH,sBAAsB,CAAC,IAAmB;QACtC,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC1C,qGAAqG;QACrG,kGAAkG;QAClG,gGAAgG;QAChG,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1G,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAoB,EAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAChF,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAoB,EAAW,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACnG,qGAAqG;QACrG,kGAAkG;QAClG,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,GAAsB,EAAU,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QAClG,MAAM,IAAI,4BAAa,CACnB,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC;cACpC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;cAC5B,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;cAC7B,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC;cACpC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CACpC,CAAC;IACN,CAAC;IAED;;;;;OAKG;IACK,QAAQ,CAAC,IAAmB,EAAE,OAAqC,EAAE,QAAsC;QAC/G,MAAM,KAAK,GAAG;YACV,aAAa,IAAI,CAAC,WAAW,CAAC,MAAM,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,+DAA+D;SACnI,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,OAAO,OAAO,CAAC,MAAM,+DAA+D,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACvI,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,OAAO,QAAQ,CAAC,MAAM,iDAAiD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC3H,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;IAC9D,CAAC;IAED;;;;;;;;OAQG;IACK,WAAW,CAAC,IAAmB;QACnC,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAChD,OAAO,sBAAsB,IAAI,CAAC,cAAc,CAAC,MAAM,wCAAwC;cACzF,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,qCAAqC;cACpF,6DAA6D,CAAC;IACxE,CAAC;IAED,yGAAyG;IACzG,wGAAwG;IACxG,yCAAyC;IACjC,iBAAiB,CAAC,IAAmB;QACzC,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAC9C,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,mDAAmD;cAC/E,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAS,EAAU,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;IACvF,CAAC;IAED;;;OAGG;IACK,cAAc,CAAC,QAA2B;QAC9C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACrC,OAAO,kGAAkG;cACnG,yGAAyG;cACzG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAS,EAAU,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IAChF,CAAC;IAED;;;;OAIG;IACK,eAAe,CAAC,IAAmB,EAAE,QAAsC;QAC/E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACrC,OAAO,0FAA0F;cAC3F,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IACrF,CAAC;IAED;;;;;;;;;;;;OAYG;IACK,eAAe,CAAC,IAAmB,EAAE,GAAsB;QAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1F,OAAO,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1G,CAAC;IAED,mGAAmG;IAC3F,aAAa,CAAC,UAAkB,EAAE,WAAmB;QACzD,yHAAyH;QACzH,8DAA8D;QAC9D,IAAI,CAAC;YACD,OAAO,IAAI,CAAC,iBAAiB,CAAC,sBAAsB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAClF,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,sBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAChB,iDAAiD,WAAW,sCAAsC;kBAChG,oBAAoB,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;YAC7C,OAAO,EAAE,CAAC;QACd,CAAC;IACL,CAAC;IAED,yGAAyG;IACzG,0GAA0G;IAC1G,2BAA2B;IACnB,MAAM,CAAC,UAAmB;QAC9B,IAAI,UAAU,EAAE,CAAC;YACb,OAAO,mGAAmG;kBACpG,2FAA2F,CAAC;QACtG,CAAC;QACD,OAAO,yCAAyC;cAC1C,0GAA0G;cAC1G,oDAAoD,CAAC;IAC/D,CAAC;CACJ,CAAA;AAjJY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,sBAAU,EAAC,8BAAkB,CAAC,SAAS,CAAC;6CAGG,gCAAiB;QACtB,2CAA4B;GAHtD,mBAAmB,CAiJ/B","sourcesContent":["import {\n    ChecklistInstructionsService, InformAiError, RequiredChecklist, ReviewJsonService, toError,\n} from '@webpieces/rules-config';\nimport { injectable, bindingScopeValues } from 'inversify';\nimport { ChecklistScan } from './checklist-scanner';\n\n/**\n * The gate `wp-finish-upsert-pr` runs before it parses review.json: REFUSE the PR while any applicable\n * checklist is not clear, and say — per checklist — which of three different things went wrong.\n *\n * It is its own class, not a private method on the command, for two reasons. It is the one piece of finish\n * that both MUTATES the branch (it retires red verdicts) and produces the text an AI acts on, so it is the\n * piece most worth asserting on directly; and the command it came out of is already the largest file in this\n * package, against a hard `@webpieces/max-file-lines` limit.\n *\n * THE BUG THIS EXISTS TO FIX. The message used to be one bucket and one imperative — \"You MUST run these N\n * reviewer subagent(s)\" — for three unrelated states. Handed to an agent, the literal, obedient response for\n * a checklist that had ALREADY REFUSED was to spawn the reviewer again; it re-read the same unchanged code,\n * refused again, and the loop cost a full subagent run per pass while the reviewer's actual finding was\n * never printed at all. Three states, three actions, in this order:\n *\n *   1. UNREADABLE (`scan.formatErrors`) -> fix four characters of JSON. Not a reviewer problem.\n *   2. REFUSED (CK_FAIL)                -> fix the finding (or get a HUMAN override). Not a missing step.\n *   3. NEVER RAN (the rest)             -> spawn the subagent. The ONLY case where that is the right move.\n *\n * `@injectable(bindingScopeValues.Singleton)` so it is injected by type and drawn in the DI design.\n */\n@injectable(bindingScopeValues.Singleton)\nexport class ReviewerVerdictGate {\n    constructor(\n        private readonly reviewJsonService: ReviewJsonService,\n        private readonly instructions: ChecklistInstructionsService,\n    ) {}\n\n    /**\n     * Refuse the PR while ANY applicable checklist still owes a passing verdict — naming exactly what each\n     * one needs. No-op for a repo with no applicable checklists.\n     *\n     * SIDE EFFECT, deliberately: every REFUSED checklist's verdict file is RETIRED to review-<id>.json.old on\n     * the way out (see {@link retireAndReport}). Only red verdicts are ever moved — a green, yellow or\n     * overridden one is reused across finish attempts and retiring it would force a needless subagent re-run.\n     */\n    assertEveryReviewerRan(scan: ChecklistScan): void {\n        if (scan.outstanding.length === 0) return;\n        // The split is computed from the verdicts the SCAN already loaded, never from a second read of disk:\n        // a re-read here could disagree with the set that produced `outstanding`, and a checklist that is\n        // \"outstanding\" per one read and \"clear\" per another belongs to neither section of the message.\n        const refused = this.reviewJsonService.refusedChecklists(scan.outstanding, scan.results, scan.authorized);\n        const refusedIds = new Set(refused.map((r: RequiredChecklist): string => r.id));\n        const neverRan = scan.outstanding.filter((r: RequiredChecklist): boolean => !refusedIds.has(r.id));\n        // Rendered BEFORE the throw and, per checklist, with the verdict resolved before its file is moved —\n        // the message quotes the reviewer's own words, so losing them to the move would defeat the point.\n        const refusals = refused.map((req: RequiredChecklist): string => this.retireAndReport(scan, req));\n        throw new InformAiError(\n            this.headline(scan, refused, neverRan)\n            + this.unreadableSection(scan)\n            + this.refusedSection(refusals)\n            + this.neverRanSection(scan, neverRan)\n            + this.footer(refused.length > 0),\n        );\n    }\n\n    /**\n     * Say plainly how many REFUSED and how many never ran.\n     *\n     * The old headline said all of them \"have no passing verdict yet\", which is technically true of a refusal\n     * and reads as though nobody had looked. It is the sentence that framed a decision as an omission.\n     */\n    private headline(scan: ChecklistScan, refused: readonly RequiredChecklist[], neverRan: readonly RequiredChecklist[]): string {\n        const lines = [\n            `⛔ NO PR — ${scan.outstanding.length} of ${scan.applicable.length} review checklist(s) that apply to this branch are not clear:`,\n        ];\n        if (refused.length > 0) {\n            lines.push(`  • ${refused.length} REFUSED — a reviewer ran, judged this change, and said no: ${this.instructions.names(refused)}`);\n        }\n        if (neverRan.length > 0) {\n            lines.push(`  • ${neverRan.length} never ran — no verdict has been written yet: ${this.instructions.names(neverRan)}`);\n        }\n        return lines.join('\\n') + this.skippedNote(scan) + '\\n\\n';\n    }\n\n    /**\n     * The optional checklists nobody ran, stated OUT LOUD on the refusal.\n     *\n     * They are not why the PR is being refused and this block says so — but a message that lists only what\n     * blocked reads as \"everything else was reviewed\", and here that is false: those reviews were declined,\n     * not passed. The one moment a human is looking at the review state is the moment to be honest about\n     * which reviews did not happen, and it is also the prompt an AI needs to offer them again if the human\n     * has changed their mind now that something else came back red.\n     */\n    private skippedNote(scan: ChecklistScan): string {\n        if (scan.optionalNotRun.length === 0) return '';\n        return `\\n  (Not blocking: ${scan.optionalNotRun.length} OPTIONAL checklist(s) were not run — `\n            + `${this.instructions.names(scan.optionalNotRun)}. They do not have to run; re-run\\n`\n            + '   pnpm wp-review-upsert-pr if you now want to offer them.)';\n    }\n\n    // Unreadable verdict files come FIRST. A reviewer that wrote its verdict in the removed `success` format\n    // is otherwise indistinguishable from one that never ran, and the AI would go re-run a subagent instead\n    // of correcting four characters of JSON.\n    private unreadableSection(scan: ChecklistScan): string {\n        if (scan.formatErrors.length === 0) return '';\n        return `${scan.formatErrors.length} verdict file(s) are in an UNREADABLE format:\\n\\n`\n            + scan.formatErrors.map((e: string): string => `  • ${e}`).join('\\n') + '\\n\\n';\n    }\n\n    /**\n     * The refusals — SECOND, above anything that says to spawn a subagent, because a spawn instruction is the\n     * one line an agent acts on first, and acting on it here IS the loop.\n     */\n    private refusedSection(refusals: readonly string[]): string {\n        if (refusals.length === 0) return '';\n        return '⛔ REFUSED — these reviewers ALREADY ANSWERED. Re-spawning one against unchanged code only buys\\n'\n            + '   the same answer: fix what it found (or get a HUMAN to authorize an override), THEN review again.\\n\\n'\n            + refusals.map((r: string): string => `  • ${r}`).join('\\n\\n') + '\\n\\n';\n    }\n\n    /**\n     * The reviewers that genuinely never ran — LAST, and listing ONLY these. When there are none this block\n     * is absent entirely, which is the whole point: the \"You MUST run these N reviewer subagent(s)\"\n     * imperative must not appear at all on a run whose only problem is a refusal.\n     */\n    private neverRanSection(scan: ChecklistScan, neverRan: readonly RequiredChecklist[]): string {\n        if (neverRan.length === 0) return '';\n        return '❓ NO VERDICT YET — nothing has been written for these, so they must actually be run:\\n\\n'\n            + `${this.instructions.render(neverRan, scan.reviewPath, scan.context)}\\n\\n`;\n    }\n\n    /**\n     * Retire ONE refused checklist's verdict and render the refusal that reports it.\n     *\n     * ORDER IS LOAD-BEARING. The verdict is resolved from the already-loaded results, so the finding is in\n     * hand before the file moves; the move then happens; and only then is the message rendered, because it\n     * names the archive path and must not claim a move that did not happen.\n     *\n     * The move is NON-FATAL. A finish that died after retiring a verdict would leave the AI with a red\n     * verdict gone from the live path and no message saying where it went or why the PR was refused — a\n     * silent gap, and the worst possible outcome for a feature whose entire purpose is a durable record. So a\n     * failed move warns and the refusal is reported without an archive path (the file is then still live,\n     * which the un-archived wording of `refusalError` describes correctly).\n     */\n    private retireAndReport(scan: ChecklistScan, req: RequiredChecklist): string {\n        const verdict = this.reviewJsonService.resolveVerdict(req, scan.results, scan.authorized);\n        return this.reviewJsonService.refusalError(req, verdict, this.archiveOrWarn(scan.reviewPath, req.id));\n    }\n\n    // The archive path, or '' when there was nothing to move or the move failed (see retireAndReport).\n    private archiveOrWarn(reviewPath: string, checklistId: string): string {\n        // webpieces-disable no-unmanaged-exceptions -- chokepoint: a failed archive must never swallow the refusal it belongs to\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n        try {\n            return this.reviewJsonService.archiveChecklistResult(reviewPath, checklistId);\n        } catch (err: unknown) {\n            const error = toError(err);\n            process.stderr.write(\n                `⚠️  Could not retire the refused verdict for \"${checklistId}\" (non-fatal — the refusal is still `\n                + `reported below): ${error.message}\\n`);\n            return '';\n        }\n    }\n\n    // Re-running stage 2 is normally optional. It stops being optional after a refusal, because the only way\n    // past one is to CHANGE the code — which is exactly the condition that makes the extracted diff and every\n    // reviewer briefing stale.\n    private footer(anyRefused: boolean): string {\n        if (anyRefused) {\n            return 'Then re-run: pnpm wp-review-upsert-pr (the code changed, so the extracted diff and the reviewer\\n'\n                + 'briefings are stale), re-run the reviewer(s) above, and finally: pnpm wp-finish-upsert-pr';\n        }\n        return 'Then re-run: pnpm wp-finish-upsert-pr\\n'\n            + '(Each reviewer\\'s generated instructions file is already written — re-running pnpm wp-review-upsert-pr\\n'\n            + ' is only needed if the code changed since it ran.)';\n    }\n}\n"]}

package/src/scripts/wp-authorize.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+import 'reflect-metadata';

package/src/scripts/wp-authorize.js

@@ -0,0 +1,22 @@
+#!/usr/bin/env node
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+require("reflect-metadata");
+const inversify_1 = require("inversify");
+const rules_config_1 = require("@webpieces/rules-config");
+const pr_gate_app_1 = require("./pr-gate-app");
+// Composition root for the HUMAN-ONLY authorization mint. It reads every prompt from /dev/tty, so an
+// agent's Bash tool cannot drive it — see AuthorizeCommand for why that gate, and not stdin, is the
+// mechanism. The matching harness `permissions.deny` entry exists to make the refusal legible rather
+// than a hang.
+(0, rules_config_1.runMain)(async () => {
+    // autobind self-binds every @injectable(Singleton) tooling class (replaces the buildProviderModule registry scan)
+    const container = new inversify_1.Container({ autobind: true });
+    const args = container.get(rules_config_1.CliArgs).parse(new rules_config_1.CliUsage('wp-authorize', 'HUMAN ONLY: sign an authorization letting one review checklist be overridden on this branch.', [
+        new rules_config_1.CliFlag('--checklist', 'REQUIRED. The checklist id (= reviewer subagent name) being authorized.', true),
+        new rules_config_1.CliFlag('--gate', 'Optional. The specific gate inside that checklist this approval is for.', true),
+        new rules_config_1.CliFlag('--hours', 'Optional. How long the approval lives (default 4). An approval is for today\'s work.', true),
+    ]));
+    container.get(pr_gate_app_1.PrGateApp).authorize(args);
+});
+//# sourceMappingURL=wp-authorize.js.map

package/src/scripts/wp-authorize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wp-authorize.js","sourceRoot":"","sources":["../../../../../../packages/tooling/pr-gate/src/scripts/wp-authorize.ts"],"names":[],"mappings":";;;AACA,4BAA0B;AAC1B,yCAAsC;AACtC,0DAA8E;AAC9E,+CAA0C;AAE1C,qGAAqG;AACrG,oGAAoG;AACpG,qGAAqG;AACrG,eAAe;AACf,IAAA,sBAAO,EAAC,KAAK,IAAmB,EAAE;IAC9B,kHAAkH;IAClH,MAAM,SAAS,GAAG,IAAI,qBAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,sBAAO,CAAC,CAAC,KAAK,CAAC,IAAI,uBAAQ,CAClD,cAAc,EACd,8FAA8F,EAC9F;QACI,IAAI,sBAAO,CAAC,aAAa,EAAE,yEAAyE,EAAE,IAAI,CAAC;QAC3G,IAAI,sBAAO,CAAC,QAAQ,EAAE,yEAAyE,EAAE,IAAI,CAAC;QACtG,IAAI,sBAAO,CAAC,SAAS,EAAE,sFAAsF,EAAE,IAAI,CAAC;KACvH,CACJ,CAAC,CAAC;IACH,SAAS,CAAC,GAAG,CAAC,uBAAS,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AAC7C,CAAC,CAAC,CAAC","sourcesContent":["#!/usr/bin/env node\nimport 'reflect-metadata';\nimport { Container } from 'inversify';\nimport { runMain, CliArgs, CliUsage, CliFlag } from '@webpieces/rules-config';\nimport { PrGateApp } from './pr-gate-app';\n\n// Composition root for the HUMAN-ONLY authorization mint. It reads every prompt from /dev/tty, so an\n// agent's Bash tool cannot drive it — see AuthorizeCommand for why that gate, and not stdin, is the\n// mechanism. The matching harness `permissions.deny` entry exists to make the refusal legible rather\n// than a hang.\nrunMain(async (): Promise<void> => {\n    // autobind self-binds every @injectable(Singleton) tooling class (replaces the buildProviderModule registry scan)\n    const container = new Container({ autobind: true });\n    const args = container.get(CliArgs).parse(new CliUsage(\n        'wp-authorize',\n        'HUMAN ONLY: sign an authorization letting one review checklist be overridden on this branch.',\n        [\n            new CliFlag('--checklist', 'REQUIRED. The checklist id (= reviewer subagent name) being authorized.', true),\n            new CliFlag('--gate', 'Optional. The specific gate inside that checklist this approval is for.', true),\n            new CliFlag('--hours', 'Optional. How long the approval lives (default 4). An approval is for today\\'s work.', true),\n        ],\n    ));\n    container.get(PrGateApp).authorize(args);\n});\n"]}

package/src/scripts/wp-check-auth.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+import 'reflect-metadata';

package/src/scripts/wp-check-auth.js

@@ -0,0 +1,16 @@
+#!/usr/bin/env node
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+require("reflect-metadata");
+const inversify_1 = require("inversify");
+const rules_config_1 = require("@webpieces/rules-config");
+const pr_gate_app_1 = require("./pr-gate-app");
+// Composition root for the AGENT-runnable half: read-only verification of the approvals a human signed
+// with wp-authorize. This is the only channel a reviewer may accept an override from.
+(0, rules_config_1.runMain)(async () => {
+    // autobind self-binds every @injectable(Singleton) tooling class (replaces the buildProviderModule registry scan)
+    const container = new inversify_1.Container({ autobind: true });
+    const args = container.get(rules_config_1.CliArgs).parse(new rules_config_1.CliUsage('wp-check-auth', 'Verify (never mint) the human authorizations recorded for this branch. Read-only; agents run this.', [new rules_config_1.CliFlag('--checklist', 'Only report this checklist id. Omitted: report every approval on the branch.', true)]));
+    container.get(pr_gate_app_1.PrGateApp).checkAuth(args);
+});
+//# sourceMappingURL=wp-check-auth.js.map

package/src/scripts/wp-check-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wp-check-auth.js","sourceRoot":"","sources":["../../../../../../packages/tooling/pr-gate/src/scripts/wp-check-auth.ts"],"names":[],"mappings":";;;AACA,4BAA0B;AAC1B,yCAAsC;AACtC,0DAA8E;AAC9E,+CAA0C;AAE1C,uGAAuG;AACvG,sFAAsF;AACtF,IAAA,sBAAO,EAAC,KAAK,IAAmB,EAAE;IAC9B,kHAAkH;IAClH,MAAM,SAAS,GAAG,IAAI,qBAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,sBAAO,CAAC,CAAC,KAAK,CAAC,IAAI,uBAAQ,CAClD,eAAe,EACf,oGAAoG,EACpG,CAAC,IAAI,sBAAO,CAAC,aAAa,EAAE,8EAA8E,EAAE,IAAI,CAAC,CAAC,CACrH,CAAC,CAAC;IACH,SAAS,CAAC,GAAG,CAAC,uBAAS,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AAC7C,CAAC,CAAC,CAAC","sourcesContent":["#!/usr/bin/env node\nimport 'reflect-metadata';\nimport { Container } from 'inversify';\nimport { runMain, CliArgs, CliUsage, CliFlag } from '@webpieces/rules-config';\nimport { PrGateApp } from './pr-gate-app';\n\n// Composition root for the AGENT-runnable half: read-only verification of the approvals a human signed\n// with wp-authorize. This is the only channel a reviewer may accept an override from.\nrunMain(async (): Promise<void> => {\n    // autobind self-binds every @injectable(Singleton) tooling class (replaces the buildProviderModule registry scan)\n    const container = new Container({ autobind: true });\n    const args = container.get(CliArgs).parse(new CliUsage(\n        'wp-check-auth',\n        'Verify (never mint) the human authorizations recorded for this branch. Read-only; agents run this.',\n        [new CliFlag('--checklist', 'Only report this checklist id. Omitted: report every approval on the branch.', true)],\n    ));\n    container.get(PrGateApp).checkAuth(args);\n});\n"]}