@zephyrdeng/pi-review 0.18.3 → 0.20.0

package/dist/verify-regression.test.js

@@ -0,0 +1,307 @@
+// Regression guard for --verify being strictly opt-in: with the flag absent,
+// the reviewer argv (which carries the full prompt) and PI_REVIEW_META_JSON
+// must stay byte-identical to the pre-verify base (16855bc). The inline
+// snapshots below were recorded on that base before any verify code existed.
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { spawnSync } from "node:child_process";
+import { fileURLToPath } from "node:url";
+import { afterEach, expect, test } from "vitest";
+const repoRoot = path.dirname(fileURLToPath(new URL("../package.json", import.meta.url)));
+let tempDir = "";
+afterEach(() => {
+    if (tempDir)
+        fs.rmSync(tempDir, { recursive: true, force: true });
+    tempDir = "";
+});
+function writeFixtures(dir) {
+    const presets = path.join(dir, "presets.json");
+    fs.writeFileSync(presets, JSON.stringify({ code: { description: "fixture", tools: "read,grep,find,ls", instructions: "Fixture instructions." } }));
+    const systemPrompt = path.join(dir, "system.md");
+    fs.writeFileSync(systemPrompt, "Fixture system prompt.");
+    const argvDir = path.join(dir, "argv");
+    fs.mkdirSync(argvDir);
+    const fakePi = path.join(dir, "fake-pi");
+    fs.writeFileSync(fakePi, `#!/usr/bin/env node
+const fs = require("node:fs");
+const path = require("node:path");
+fs.writeFileSync(path.join(process.env.FAKE_PI_ARGV_DIR, process.pid + ".json"), JSON.stringify(process.argv.slice(2)));
+const text = "## Verdict\\napprove\\n\\n## Summary\\n- Fixture.\\n\\n## Findings\\nNo material findings.\\n";
+const line = (o) => process.stdout.write(JSON.stringify(o) + "\\n");
+line({ type: "message_end", message: { role: "assistant", content: [{ type: "text", text }], model: "fake/model", stopReason: "stop" } });
+line({ type: "agent_end", messages: [{ role: "assistant", content: [{ type: "text", text }] }] });
+`);
+    fs.chmodSync(fakePi, 0o755);
+    return { presets, systemPrompt, argvDir, fakePi };
+}
+function runCli(args) {
+    tempDir = fs.mkdtempSync(path.join(os.tmpdir(), "pi-review-verify-regression-"));
+    const fx = writeFixtures(tempDir);
+    const env = {
+        ...process.env,
+        PI_BIN: fx.fakePi,
+        PI_REVIEW_PRESETS: fx.presets,
+        PI_REVIEW_SYSTEM_PROMPT: fx.systemPrompt,
+        FAKE_PI_ARGV_DIR: fx.argvDir,
+    };
+    delete env.TYPESAFE_API_KEY;
+    delete env.PI_REVIEW_META_STDOUT;
+    const result = spawnSync(process.execPath, ["--import", "tsx", path.join(repoRoot, "src/cli.ts"), ...args, "--", "@src/types.ts", "check the gate"], { cwd: repoRoot, env, encoding: "utf8", timeout: 60_000, input: "" });
+    // Generic panel roles are shuffled per run; pin them so the snapshot is stable.
+    const normalize = (value) => value.split(repoRoot).join("<ROOT>").split(tempDir).join("<TMP>").replace(/- Role: [^\\\n]+/g, "- Role: <ROLE>");
+    const argvs = fs.readdirSync(fx.argvDir).map((name) => normalize(fs.readFileSync(path.join(fx.argvDir, name), "utf8"))).sort();
+    const metaLine = result.stderr.split("\n").find((line) => line.startsWith("PI_REVIEW_META_JSON: "));
+    const meta = JSON.parse(metaLine.slice("PI_REVIEW_META_JSON: ".length));
+    meta.durationMs = 0;
+    for (const reviewer of meta.reviewers ?? [])
+        Object.assign(reviewer, { durationMs: 0, role: "<ROLE>" });
+    return { status: result.status, argvs: argvs.map((a) => JSON.parse(a)), meta };
+}
+test("single review without --verify: argv, prompt, and meta match the base", () => {
+    const run = runCli(["--no-stream"]);
+    expect(run.status).toBe(0);
+    expect(run.argvs).toMatchInlineSnapshot(`
+    [
+      [
+        "-p",
+        "--mode",
+        "json",
+        "--append-system-prompt",
+        "Fixture system prompt.",
+        "--tools",
+        "read,grep,find,ls",
+        "--no-session",
+        "--no-extensions",
+        "--extension",
+        "<ROOT>/src/rules-extension.ts",
+        "@src/types.ts",
+        "You are running pi-review mode \`code\`.
+
+    Your job is to produce a review conclusion only. Do not edit files, do not write files, do not produce patches, and do not claim implementation work was done.
+
+    Fixture instructions.
+
+    Output Markdown with exactly these top-level sections:
+
+    ## Verdict
+    One of: approve | request_changes | needs_clarification | blocked
+
+    ## Summary
+    Short conclusion in 2-5 bullets.
+
+    ## Findings
+    Prioritized findings. For every material finding, use this exact shape (increment IDs as F1, F2, ...):
+
+    ### F1: <summary>
+    - Severity: critical | high | medium | low
+    - Path: <path or none>
+    - Lines: <line or line-range in Path, or none>
+    - Side: base | working (optional; defaults to working)
+    - Actionable: yes | no
+    - Evidence: <concrete evidence>
+    - Impact: <why it matters>
+    - Recommendation: <specific next step>
+
+    Set Actionable to yes when the host must fix or consciously reject the finding before clean closeout. Use no for informational or explicitly out-of-scope follow-up findings. Include Lines only when you have reliable line numbers for Path: a single line (\`42\`) or an inclusive range (\`42-58\`). Omit Lines or write "none" for file-level or non-line-specific findings — never guess a line number. Side marks which half of a diff Lines refers to (\`base\` = before the change, \`working\` = after); omit it to default to \`working\`. If there are no material findings, write "No material findings."
+
+    ## Risks and Blind Spots
+    What could still be wrong, missing, or unverified.
+
+    ## Open Questions
+    Questions the parent agent or user should answer before acting. If none, write "None."
+
+    <user-request>
+    check the gate
+    </user-request>
+
+    Review the attached file reference(s): @src/types.ts",
+      ],
+    ]
+  `);
+    expect(run.meta).toMatchInlineSnapshot(`
+    {
+      "actionableCount": 0,
+      "durationMs": 0,
+      "findings": [],
+      "metaVersion": 1,
+      "model": null,
+      "reviewMode": "code",
+      "status": "clean",
+      "verdict": "approve",
+      "verdictSource": "parsed",
+    }
+  `);
+});
+test("panel review without --verify: reviewer argv, prompts, and meta match the base", () => {
+    const run = runCli(["--reviewers", "2"]);
+    expect(run.status).toBe(0);
+    expect(run.argvs).toMatchInlineSnapshot(`
+    [
+      [
+        "-p",
+        "--mode",
+        "json",
+        "--append-system-prompt",
+        "Fixture system prompt.",
+        "--tools",
+        "read,grep,find,ls",
+        "--no-extensions",
+        "--extension",
+        "<ROOT>/src/rules-extension.ts",
+        "--no-session",
+        "@src/types.ts",
+        "You are an independent panel reviewer.
+    - Reviewer ID: r1
+    - Role: <ROLE>
+    You cannot see other reviewers' findings. Submit your own independent conclusion only.
+
+    You are running pi-review mode \`code\`.
+
+    Your job is to produce a review conclusion only. Do not edit files, do not write files, do not produce patches, and do not claim implementation work was done.
+
+    Fixture instructions.
+
+    Output Markdown with exactly these top-level sections:
+
+    ## Verdict
+    One of: approve | request_changes | needs_clarification | blocked
+
+    ## Summary
+    Short conclusion in 2-5 bullets.
+
+    ## Findings
+    Prioritized findings. For every material finding, use this exact shape (increment IDs as F1, F2, ...):
+
+    ### F1: <summary>
+    - Severity: critical | high | medium | low
+    - Path: <path or none>
+    - Lines: <line or line-range in Path, or none>
+    - Side: base | working (optional; defaults to working)
+    - Actionable: yes | no
+    - Evidence: <concrete evidence>
+    - Impact: <why it matters>
+    - Recommendation: <specific next step>
+
+    Set Actionable to yes when the host must fix or consciously reject the finding before clean closeout. Use no for informational or explicitly out-of-scope follow-up findings. Include Lines only when you have reliable line numbers for Path: a single line (\`42\`) or an inclusive range (\`42-58\`). Omit Lines or write "none" for file-level or non-line-specific findings — never guess a line number. Side marks which half of a diff Lines refers to (\`base\` = before the change, \`working\` = after); omit it to default to \`working\`. If there are no material findings, write "No material findings."
+
+    ## Risks and Blind Spots
+    What could still be wrong, missing, or unverified.
+
+    ## Open Questions
+    Questions the parent agent or user should answer before acting. If none, write "None."
+
+    <user-request>
+    check the gate
+    </user-request>
+
+    Review the attached file reference(s): @src/types.ts",
+      ],
+      [
+        "-p",
+        "--mode",
+        "json",
+        "--append-system-prompt",
+        "Fixture system prompt.",
+        "--tools",
+        "read,grep,find,ls",
+        "--no-extensions",
+        "--extension",
+        "<ROOT>/src/rules-extension.ts",
+        "--no-session",
+        "@src/types.ts",
+        "You are an independent panel reviewer.
+    - Reviewer ID: r2
+    - Role: <ROLE>
+    You cannot see other reviewers' findings. Submit your own independent conclusion only.
+
+    You are running pi-review mode \`code\`.
+
+    Your job is to produce a review conclusion only. Do not edit files, do not write files, do not produce patches, and do not claim implementation work was done.
+
+    Fixture instructions.
+
+    Output Markdown with exactly these top-level sections:
+
+    ## Verdict
+    One of: approve | request_changes | needs_clarification | blocked
+
+    ## Summary
+    Short conclusion in 2-5 bullets.
+
+    ## Findings
+    Prioritized findings. For every material finding, use this exact shape (increment IDs as F1, F2, ...):
+
+    ### F1: <summary>
+    - Severity: critical | high | medium | low
+    - Path: <path or none>
+    - Lines: <line or line-range in Path, or none>
+    - Side: base | working (optional; defaults to working)
+    - Actionable: yes | no
+    - Evidence: <concrete evidence>
+    - Impact: <why it matters>
+    - Recommendation: <specific next step>
+
+    Set Actionable to yes when the host must fix or consciously reject the finding before clean closeout. Use no for informational or explicitly out-of-scope follow-up findings. Include Lines only when you have reliable line numbers for Path: a single line (\`42\`) or an inclusive range (\`42-58\`). Omit Lines or write "none" for file-level or non-line-specific findings — never guess a line number. Side marks which half of a diff Lines refers to (\`base\` = before the change, \`working\` = after); omit it to default to \`working\`. If there are no material findings, write "No material findings."
+
+    ## Risks and Blind Spots
+    What could still be wrong, missing, or unverified.
+
+    ## Open Questions
+    Questions the parent agent or user should answer before acting. If none, write "None."
+
+    <user-request>
+    check the gate
+    </user-request>
+
+    Review the attached file reference(s): @src/types.ts",
+      ],
+    ]
+  `);
+    expect(run.meta).toMatchInlineSnapshot(`
+    {
+      "actionableCount": 0,
+      "adjudicationUsed": false,
+      "advisories": [],
+      "configuredReviewers": 2,
+      "confirmedClusters": [],
+      "consensusPolicy": "quorum",
+      "consensusThreshold": 2,
+      "durationMs": 0,
+      "findings": [],
+      "metaVersion": 1,
+      "model": null,
+      "panelHealth": "healthy",
+      "reviewMode": "code",
+      "reviewers": [
+        {
+          "contributed": true,
+          "durationMs": 0,
+          "model": null,
+          "reviewerId": "r1",
+          "role": "<ROLE>",
+          "status": "clean",
+          "verdict": "approve",
+          "verdictSource": "parsed",
+        },
+        {
+          "contributed": true,
+          "durationMs": 0,
+          "model": null,
+          "reviewerId": "r2",
+          "role": "<ROLE>",
+          "status": "clean",
+          "verdict": "approve",
+          "verdictSource": "parsed",
+        },
+      ],
+      "sourceFindings": [],
+      "status": "clean",
+      "strategy": "panel",
+      "successfulReviewers": 2,
+      "verdict": "approve",
+      "verdictSource": "parsed",
+    }
+  `);
+});
+//# sourceMappingURL=verify-regression.test.js.map

package/dist/verify-regression.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-regression.test.js","sourceRoot":"","sources":["../src/verify-regression.test.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,4EAA4E;AAC5E,wEAAwE;AACxE,6EAA6E;AAC7E,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAEjD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC1F,IAAI,OAAO,GAAG,EAAE,CAAC;AACjB,SAAS,CAAC,GAAG,EAAE;IACb,IAAI,OAAO;QAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,OAAO,GAAG,EAAE,CAAC;AACf,CAAC,CAAC,CAAC;AAEH,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC/C,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,mBAAmB,EAAE,YAAY,EAAE,uBAAuB,EAAE,EAAE,CAAC,CAAC,CAAC;IACnJ,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACjD,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,wBAAwB,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvC,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACtB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACzC,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE;;;;;;;;CAQ1B,CAAC,CAAC;IACD,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC5B,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,MAAM,CAAC,IAAc;IAC5B,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,8BAA8B,CAAC,CAAC,CAAC;IACjF,MAAM,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,GAAG,GAAsB;QAC7B,GAAG,OAAO,CAAC,GAAG;QACd,MAAM,EAAE,EAAE,CAAC,MAAM;QACjB,iBAAiB,EAAE,EAAE,CAAC,OAAO;QAC7B,uBAAuB,EAAE,EAAE,CAAC,YAAY;QACxC,gBAAgB,EAAE,EAAE,CAAC,OAAO;KAC7B,CAAC;IACF,OAAO,GAAG,CAAC,gBAAgB,CAAC;IAC5B,OAAO,GAAG,CAAC,qBAAqB,CAAC;IACjC,MAAM,MAAM,GAAG,SAAS,CACtB,OAAO,CAAC,QAAQ,EAChB,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,gBAAgB,CAAC,EACxG,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CACrE,CAAC;IACF,gFAAgF;IAChF,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,EAAE,CAClC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAC;IACnH,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/H,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAC,CAAC;IACpG,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAS,CAAC,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC;IACzE,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;IACpB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,IAAI,EAAE;QAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACxG,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAa,CAAC,EAAE,IAAI,EAAE,CAAC;AAC7F,CAAC;AAED,IAAI,CAAC,uEAAuE,EAAE,GAAG,EAAE;IACjF,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;IACpC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDvC,CAAC,CAAC;IACH,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,qBAAqB,CAAC;;;;;;;;;;;;GAYtC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gFAAgF,EAAE,GAAG,EAAE;IAC1F,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,CAAC;IACzC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyHvC,CAAC,CAAC;IACH,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,qBAAqB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CtC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/verify.d.ts

@@ -0,0 +1,151 @@
+import type { ParsedArgs, VerificationApproval, VerificationStepResult, VerificationSummary } from "./types.js";
+export declare const VERIFY_CONFIG_FILE = ".pi-review.json";
+export declare const DEFAULT_STEP_TIMEOUT_SEC = 300;
+export declare const MAX_STEP_TIMEOUT_SEC = 1800;
+export declare const OUTPUT_TAIL_LIMIT = 4000;
+export declare const DEFAULT_MAX_FOLLOW_UP_ROUNDS = 1;
+export interface PlanFile {
+    path: string;
+    content: string;
+}
+export interface PlanStep {
+    id: string;
+    argv: string[];
+    purpose: string;
+    cwd?: string;
+    expectedDurationSec?: number;
+    sideEffects?: string;
+    idempotent?: boolean;
+    isolated?: boolean;
+    timeoutSec?: number;
+    round?: number;
+    files?: PlanFile[];
+}
+export interface VerificationPlan {
+    version: 1;
+    proposer?: "host" | "pi";
+    summary?: string;
+    steps: PlanStep[];
+}
+export interface WhitelistCommand {
+    id: string;
+    argv: string[];
+    timeoutSec?: number;
+}
+export interface VerifyRepoConfig {
+    commands: WhitelistCommand[];
+    link: string[];
+    maxFollowUpRounds: number;
+}
+export interface ApprovalDecision {
+    id: string;
+    stepSha256: string;
+    decision: "approved" | "rejected";
+}
+export interface ApprovalRecord {
+    version: 1;
+    planSha256: string;
+    approvedBy?: string;
+    approvedAt?: string;
+    decisions: ApprovalDecision[];
+}
+/** Invalid plan / approval / config input (a usage problem, not a run failure). */
+export declare class VerifyInputError extends Error {
+    constructor(message: string);
+}
+export declare function sha256(text: string): string;
+/** Content hash an approval binds to; any edit to the step changes it. */
+export declare function stepSha256(step: PlanStep): string;
+export declare function planSha256(plan: VerificationPlan): string;
+/** A relative path that stays inside its root (no absolute paths, no `..`). */
+export declare function isSafeRelativePath(value: unknown): value is string;
+/** Validate a plan object. Throws VerifyInputError with the first problem found. */
+export declare function parsePlan(raw: unknown, maxFollowUpRounds?: number): VerificationPlan;
+/** Parse `.pi-review.json` text. Only the `verify` key is read. */
+export declare function parseRepoConfig(text: string): VerifyRepoConfig;
+export declare function parseApproval(raw: unknown): ApprovalRecord;
+/** Build an approval record for the plan's current content. */
+export declare function createApproval(plan: VerificationPlan, options: {
+    all?: boolean;
+    approve?: string[];
+    reject?: string[];
+    by?: string;
+    now?: Date;
+}): ApprovalRecord;
+export interface ResolvedStep {
+    step: PlanStep;
+    origin: "whitelist" | "plan";
+    approval: VerificationApproval;
+    sha: string;
+    /** Effective timeout: the step's own, else the matching whitelist entry's. */
+    timeoutSec?: number;
+}
+/**
+ * Decide which steps may run. Without a plan, every whitelist command runs.
+ * With a plan: an explicit matching rejection wins; a rejection recorded for a
+ * different version of the step makes it `stale` (never whitelist pre-approved);
+ * then exact-argv whitelist matches (no files, no cwd) are pre-approved; then a
+ * matching approval; any other decision for the same id is `stale`.
+ */
+export declare function resolveSteps(plan: VerificationPlan | undefined, config: VerifyRepoConfig, approvals: ApprovalRecord[]): ResolvedStep[];
+export declare function isRunnable(approval: VerificationApproval): boolean;
+/** Overall status from step outcomes (tree guard and setup errors are applied by the caller). */
+/** True only for steps whose command was actually spawned (setup errors and skips have no duration). */
+export declare function stepExecuted(step: VerificationStepResult): boolean;
+export declare function overallStatus(steps: VerificationStepResult[]): VerificationSummary["status"];
+/** Minimal environment for verification commands: allowlist minus anything secret-shaped. */
+export declare function verificationEnv(env?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+export interface CommandResult {
+    exitCode: number | null;
+    signal?: string;
+    timedOut: boolean;
+    durationMs: number;
+    outputTail: string;
+    truncated: boolean;
+    error?: string;
+    /** Informational; never changes the step status (e.g. output may be incomplete). */
+    note?: string;
+}
+/** Run argv without a shell in its own process group, with a timeout and a bounded output tail. */
+export declare function runCommand(argv: string[], options: {
+    cwd: string;
+    env: NodeJS.ProcessEnv;
+    timeoutMs: number;
+    outputLimit?: number;
+}): Promise<CommandResult>;
+/** Porcelain status of the original tree, compared before/after verification. */
+export declare function gitStatusSnapshot(repoRoot: string): string;
+/** Read the standing whitelist from HEAD; uncommitted edits never grant pre-approval. */
+export declare function loadRepoConfig(repoRoot: string): VerifyRepoConfig;
+/** Resolve `rel` inside `root`, refusing paths that escape it (including through symlinks). */
+export declare function resolveInside(root: string, rel: string): string;
+export interface IsolatedCopy {
+    dir: string;
+    cleanup: () => void;
+}
+/**
+ * Snapshot HEAD + tracked changes + untracked non-ignored files through a
+ * throwaway index (the real index, tree, and stash stay untouched), then
+ * check it out as a detached worktree with hooks disabled.
+ */
+export declare function createIsolatedCopy(repoRoot: string, link?: string[]): IsolatedCopy;
+export interface RunVerificationOptions {
+    cwd: string;
+    planFile?: string;
+    approvalFiles?: string[];
+    env?: NodeJS.ProcessEnv;
+    onLog?: (line: string) => void;
+    /** Test seam: override the per-step output tail size. */
+    outputLimit?: number;
+}
+/**
+ * Run verification once. Never throws: every setup problem degrades to
+ * `status: "unverified"` with a reason so the review still runs and says so.
+ */
+export declare function runVerification(options: RunVerificationOptions): Promise<VerificationSummary>;
+export declare function formatVerificationSection(summary: VerificationSummary): string;
+/** Run verification for a review/loop round when it was requested; undefined otherwise. */
+export declare function verificationForReview(parsed: Pick<ParsedArgs, "verify" | "verifyPlan" | "verifyApprovals">, quiet?: boolean): Promise<VerificationSummary | undefined>;
+/** Append the shared verification section to a reviewer prompt (identity when verification is off). */
+export declare function withVerificationSection(prompt: string, summary: VerificationSummary | undefined): string;
+//# sourceMappingURL=verify.d.ts.map

package/dist/verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,UAAU,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEhH,eAAO,MAAM,kBAAkB,oBAAoB,CAAC;AACpD,eAAO,MAAM,wBAAwB,MAAM,CAAC;AAC5C,eAAO,MAAM,oBAAoB,OAAO,CAAC;AACzC,eAAO,MAAM,iBAAiB,OAAO,CAAC;AACtC,eAAO,MAAM,4BAA4B,IAAI,CAAC;AAG9C,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,CAAC,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,QAAQ,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,UAAU,GAAG,UAAU,CAAC;CACnC;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,CAAC,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,gBAAgB,EAAE,CAAC;CAC/B;AAED,mFAAmF;AACnF,qBAAa,gBAAiB,SAAQ,KAAK;gBAC7B,OAAO,EAAE,MAAM;CAI5B;AAmBD,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE3C;AAED,0EAA0E;AAC1E,wBAAgB,UAAU,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAEjD;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,gBAAgB,GAAG,MAAM,CAEzD;AAwBD,+EAA+E;AAC/E,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAKlE;AASD,oFAAoF;AACpF,wBAAgB,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,iBAAiB,SAA+B,GAAG,gBAAgB,CA+C1G;AAED,mEAAmE;AACnE,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,CAkC9D;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,cAAc,CAY1D;AAED,+DAA+D;AAC/D,wBAAgB,cAAc,CAC5B,IAAI,EAAE,gBAAgB,EACtB,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,IAAI,CAAA;CAAE,GACzF,cAAc,CAuBhB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,WAAW,GAAG,MAAM,CAAC;IAC7B,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,8EAA8E;IAC9E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAMD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,SAAS,EAAE,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,YAAY,EAAE,CAoCtI;AAED,wBAAgB,UAAU,CAAC,QAAQ,EAAE,oBAAoB,GAAG,OAAO,CAElE;AAED,iGAAiG;AACjG,wGAAwG;AACxG,wBAAgB,YAAY,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAElE;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,sBAAsB,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAK5F;AASD,6FAA6F;AAC7F,wBAAgB,eAAe,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAAC,UAAU,CAMvF;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oFAAoF;IACpF,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,mGAAmG;AACnG,wBAAgB,UAAU,CACxB,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GACxF,OAAO,CAAC,aAAa,CAAC,CAiExB;AAaD,iFAAiF;AACjF,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,yFAAyF;AACzF,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,gBAAgB,CAIjE;AAED,+FAA+F;AAC/F,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAmB/D;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AASD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,GAAE,MAAM,EAAO,GAAG,YAAY,CAyCtF;AAMD,MAAM,WAAW,sBAAsB;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,yDAAyD;IACzD,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AA6BD;;;GAGG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAOnG;AA4JD,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,CAwC9E;AAED,2FAA2F;AAC3F,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,GAAG,YAAY,GAAG,iBAAiB,CAAC,EACrE,KAAK,UAAQ,GACZ,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAU1C;AAED,uGAAuG;AACvG,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,SAAS,GAAG,MAAM,CAExG"}