@zephyrdeng/pi-review 0.6.2 → 0.7.1

package/dist/prompt.test.js

@@ -0,0 +1,37 @@
+import assert from "node:assert/strict";
+import { test } from "node:test";
+import { buildPrompt, buildReviewerPrompt, buildAdjudicatorPrompt } from "./prompt.js";
+test("review prompt requests the parseable finding contract", () => {
+    const prompt = buildPrompt("code", { description: "code", instructions: "Review the code." }, { fileRefs: ["@src/cli.ts"], userText: "" }, "");
+    assert.match(prompt, /### F1: <summary>/);
+    assert.match(prompt, /Severity: critical \| high \| medium \| low/);
+    assert.match(prompt, /Path: <path or none>/);
+    assert.match(prompt, /Actionable: yes \| no/);
+    assert.match(prompt, /No material findings\./);
+});
+test("reviewer prompt injects stable reviewer identity and the shared contract", () => {
+    const reviewer = { id: "security", role: "Security reviewer" };
+    const prompt = buildReviewerPrompt("code", { description: "code", instructions: "Review the code." }, { fileRefs: ["@src/cli.ts"], userText: "" }, "", reviewer);
+    assert.match(prompt, /Reviewer ID: security/);
+    assert.match(prompt, /Role: Security reviewer/);
+    assert.match(prompt, /cannot see other reviewers' findings/);
+    assert.match(prompt, /### F1: <summary>/);
+    assert.match(prompt, /## Verdict/);
+});
+test("adjudicator prompt enforces aggregation-only constraints and the strict clustering contract", () => {
+    const findings = [
+        { id: "r1#F1", reviewerId: "r1", finding: { summary: "loop bound is wrong", actionable: true, path: "src/cli.ts" } },
+        { id: "r2#F1", reviewerId: "r2", finding: { summary: "off-by-one iteration", actionable: true, path: "src/cli.ts" } },
+    ];
+    const prompt = buildAdjudicatorPrompt([{ anchorPath: "src/cli.ts", findings }]);
+    assert.match(prompt, /consensus adjudicator/i);
+    assert.match(prompt, /aggregation-only/);
+    assert.match(prompt, /may not invent new findings/);
+    assert.match(prompt, /no write tools/);
+    assert.match(prompt, /"sourceFindingIds":\["r1#F1","r2#F1"\],"confidence"/);
+    assert.match(prompt, /must come from the candidates below/);
+    // Adjudicator receives structured findings, not free repo access.
+    assert.match(prompt, /r1#F1/);
+    assert.match(prompt, /loop bound is wrong/);
+});
+//# sourceMappingURL=prompt.test.js.map

package/dist/prompt.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.test.js","sourceRoot":"","sources":["../src/prompt.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAGvF,IAAI,CAAC,uDAAuD,EAAE,GAAG,EAAE;IACjE,MAAM,MAAM,GAAG,WAAW,CACxB,MAAM,EACN,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,kBAAkB,EAAE,EACzD,EAAE,QAAQ,EAAE,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,EAC3C,EAAE,CACH,CAAC;IAEF,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAC1C,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,6CAA6C,CAAC,CAAC;IACpE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IAC7C,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;IAC9C,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;AACjD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0EAA0E,EAAE,GAAG,EAAE;IACpF,MAAM,QAAQ,GAAsB,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;IAClF,MAAM,MAAM,GAAG,mBAAmB,CAChC,MAAM,EACN,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,kBAAkB,EAAE,EACzD,EAAE,QAAQ,EAAE,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,EAC3C,EAAE,EACF,QAAQ,CACT,CAAC;IAEF,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;IAC9C,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;IAChD,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,sCAAsC,CAAC,CAAC;IAC7D,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAC1C,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AACrC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6FAA6F,EAAE,GAAG,EAAE;IACvG,MAAM,QAAQ,GAAoB;QAChC,EAAE,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE;QACpH,EAAE,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE;KACtH,CAAC;IACF,MAAM,MAAM,GAAG,sBAAsB,CAAC,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;IAEhF,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;IAC/C,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IACzC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACvC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,qDAAqD,CAAC,CAAC;IAC5E,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,qCAAqC,CAAC,CAAC;IAC5D,kEAAkE;IAClE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;AAC9C,CAAC,CAAC,CAAC"}

package/dist/review-events.d.ts

@@ -0,0 +1,70 @@
+import type { PanelReviewMeta, ReviewerSubmission, TokenUsage } from "./types.js";
+export declare const REVIEW_EVENT_VERSION: 1;
+export declare const REVIEW_EVENT_TEXT_LIMIT = 512;
+export interface ReviewerIdentity {
+    reviewerId: string;
+    role: string;
+    model: string | null;
+    thinking?: string;
+}
+type ReviewEventBase<T extends string> = {
+    v: typeof REVIEW_EVENT_VERSION;
+    runId: string;
+    seq: number;
+    at: number;
+    type: T;
+};
+export type ReviewEvent = (ReviewEventBase<"panel.started"> & {
+    target: string;
+    mode: string;
+    panelPreset?: string;
+    reviewers: ReviewerIdentity[];
+}) | (ReviewEventBase<"reviewer.queued"> & {
+    reviewerId: string;
+}) | (ReviewEventBase<"reviewer.started"> & {
+    reviewerId: string;
+}) | (ReviewEventBase<"reviewer.turn.started"> & {
+    reviewerId: string;
+    turn: number;
+}) | (ReviewEventBase<"reviewer.tool.started"> & {
+    reviewerId: string;
+    tool: string;
+    summary?: string;
+}) | (ReviewEventBase<"reviewer.tool.finished"> & {
+    reviewerId: string;
+    tool: string;
+    summary?: string;
+}) | (ReviewEventBase<"reviewer.text.delta"> & {
+    reviewerId: string;
+    text: string;
+}) | (ReviewEventBase<"reviewer.usage"> & {
+    reviewerId: string;
+    usage: TokenUsage;
+}) | (ReviewEventBase<"reviewer.completed"> & {
+    reviewerId: string;
+    submission: ReviewerSubmission;
+}) | (ReviewEventBase<"reviewer.failed"> & {
+    reviewerId: string;
+    message: string;
+}) | (ReviewEventBase<"reviewer.cancelled"> & {
+    reviewerId: string;
+    message?: string;
+}) | ReviewEventBase<"aggregation.started"> | (ReviewEventBase<"panel.completed"> & {
+    meta: PanelReviewMeta;
+});
+type ReviewEventPayload<T extends ReviewEvent["type"]> = Omit<Extract<ReviewEvent, {
+    type: T;
+}>, "v" | "runId" | "seq" | "at" | "type">;
+export type ReviewEventListener = (event: ReviewEvent) => void;
+/** Replace common secret-shaped values and optionally cap renderer-visible free text. */
+export declare function redactReviewEventText(value: string, limit?: number): string;
+/** Redact and bound arbitrary renderer-visible data while preserving its shape. */
+export declare function redactReviewEventPayload<T>(value: T): T;
+/** Redact machine-readable review metadata without truncating its findings. */
+export declare function redactReviewMetaPayload<T>(value: T): T;
+/** Build one ordered event stream for exactly one panel run. */
+export declare function createReviewEventEmitter(runId: string, listener?: ReviewEventListener, now?: () => number): <T extends ReviewEvent["type"]>(type: T, payload: ReviewEventPayload<T>) => Extract<ReviewEvent, {
+    type: T;
+}>;
+export {};
+//# sourceMappingURL=review-events.d.ts.map

package/dist/review-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-events.d.ts","sourceRoot":"","sources":["../src/review-events.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAElF,eAAO,MAAM,oBAAoB,EAAG,CAAU,CAAC;AAC/C,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAE3C,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,KAAK,eAAe,CAAC,CAAC,SAAS,MAAM,IAAI;IACvC,CAAC,EAAE,OAAO,oBAAoB,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,CAAC,CAAC;CACT,CAAC;AAEF,MAAM,MAAM,WAAW,GACnB,CAAC,eAAe,CAAC,eAAe,CAAC,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,gBAAgB,EAAE,CAAA;CAAE,CAAC,GAC1H,CAAC,eAAe,CAAC,iBAAiB,CAAC,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,GAC7D,CAAC,eAAe,CAAC,kBAAkB,CAAC,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,GAC9D,CAAC,eAAe,CAAC,uBAAuB,CAAC,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GACjF,CAAC,eAAe,CAAC,uBAAuB,CAAC,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GACnG,CAAC,eAAe,CAAC,wBAAwB,CAAC,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GACpG,CAAC,eAAe,CAAC,qBAAqB,CAAC,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GAC/E,CAAC,eAAe,CAAC,gBAAgB,CAAC,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE,CAAC,GAC/E,CAAC,eAAe,CAAC,oBAAoB,CAAC,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,kBAAkB,CAAA;CAAE,CAAC,GAChG,CAAC,eAAe,CAAC,iBAAiB,CAAC,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,GAC9E,CAAC,eAAe,CAAC,oBAAoB,CAAC,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GAClF,eAAe,CAAC,qBAAqB,CAAC,GACtC,CAAC,eAAe,CAAC,iBAAiB,CAAC,GAAG;IAAE,IAAI,EAAE,eAAe,CAAA;CAAE,CAAC,CAAC;AAErE,KAAK,kBAAkB,CAAC,CAAC,SAAS,WAAW,CAAC,MAAM,CAAC,IAAI,IAAI,CAC3D,OAAO,CAAC,WAAW,EAAE;IAAE,IAAI,EAAE,CAAC,CAAA;CAAE,CAAC,EACjC,GAAG,GAAG,OAAO,GAAG,KAAK,GAAG,IAAI,GAAG,MAAM,CACtC,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;AAE/D,yFAAyF;AACzF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAM3E;AAWD,mFAAmF;AACnF,wBAAgB,wBAAwB,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAEvD;AAED,+EAA+E;AAC/E,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAEtD;AAOD,gEAAgE;AAChE,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,mBAAmB,EAAE,GAAG,GAAE,MAAM,MAAiB,IAE1G,CAAC,SAAS,WAAW,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,EAAE,SAAS,kBAAkB,CAAC,CAAC,CAAC,KAAG,OAAO,CAAC,WAAW,EAAE;IAAE,IAAI,EAAE,CAAC,CAAA;CAAE,CAAC,CAYnH"}

package/dist/review-events.js

@@ -0,0 +1,52 @@
+// Stable, pi-review-owned event contract for live renderers and replay.
+// Raw Pi JSONL remains an implementation detail of the child process.
+export const REVIEW_EVENT_VERSION = 1;
+export const REVIEW_EVENT_TEXT_LIMIT = 512;
+/** Replace common secret-shaped values and optionally cap renderer-visible free text. */
+export function redactReviewEventText(value, limit) {
+    const redacted = value
+        .replace(/\b(?:sk|rk|pk)[_-][A-Za-z0-9_-]{8,}\b|\b(?:ghp|github_pat)_[A-Za-z0-9_-]{8,}\b/gi, "[REDACTED]")
+        .replace(/\b(api[_-]?key|token|password|secret)\s*[=:]\s*[^\s,;]+/gi, "$1=[REDACTED]");
+    if (limit === undefined || redacted.length <= limit)
+        return redacted;
+    return `${redacted.slice(0, Math.max(0, limit - 1))}…`;
+}
+function redactValue(value, limit) {
+    if (typeof value === "string")
+        return redactReviewEventText(value, limit);
+    if (Array.isArray(value))
+        return value.map((item) => redactValue(item, limit));
+    if (value && typeof value === "object") {
+        return Object.fromEntries(Object.entries(value).map(([key, nested]) => [key, redactValue(nested, limit)]));
+    }
+    return value;
+}
+/** Redact and bound arbitrary renderer-visible data while preserving its shape. */
+export function redactReviewEventPayload(value) {
+    return redactValue(value, REVIEW_EVENT_TEXT_LIMIT);
+}
+/** Redact machine-readable review metadata without truncating its findings. */
+export function redactReviewMetaPayload(value) {
+    return redactValue(value);
+}
+function redactEvent(event) {
+    const { v, runId, seq, at, type, ...payload } = event;
+    return { v, runId, seq, at, type, ...redactReviewEventPayload(payload) };
+}
+/** Build one ordered event stream for exactly one panel run. */
+export function createReviewEventEmitter(runId, listener, now = Date.now) {
+    let seq = 0;
+    return (type, payload) => {
+        const event = redactEvent({
+            v: REVIEW_EVENT_VERSION,
+            runId,
+            seq: ++seq,
+            at: now(),
+            type,
+            ...payload,
+        });
+        listener?.(event);
+        return event;
+    };
+}
+//# sourceMappingURL=review-events.js.map

package/dist/review-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-events.js","sourceRoot":"","sources":["../src/review-events.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,sEAAsE;AAItE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAU,CAAC;AAC/C,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAuC3C,yFAAyF;AACzF,MAAM,UAAU,qBAAqB,CAAC,KAAa,EAAE,KAAc;IACjE,MAAM,QAAQ,GAAG,KAAK;SACnB,OAAO,CAAC,kFAAkF,EAAE,YAAY,CAAC;SACzG,OAAO,CAAC,2DAA2D,EAAE,eAAe,CAAC,CAAC;IACzF,IAAI,KAAK,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,IAAI,KAAK;QAAE,OAAO,QAAQ,CAAC;IACrE,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;AACzD,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,KAAc;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC1E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IAC/E,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7G,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,wBAAwB,CAAI,KAAQ;IAClD,OAAO,WAAW,CAAC,KAAK,EAAE,uBAAuB,CAAM,CAAC;AAC1D,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,uBAAuB,CAAI,KAAQ;IACjD,OAAO,WAAW,CAAC,KAAK,CAAM,CAAC;AACjC,CAAC;AAED,SAAS,WAAW,CAAwB,KAAQ;IAClD,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,CAAC;IACtD,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,GAAI,wBAAwB,CAAC,OAAO,CAAY,EAAO,CAAC;AAC5F,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,wBAAwB,CAAC,KAAa,EAAE,QAA8B,EAAE,MAAoB,IAAI,CAAC,GAAG;IAClH,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,OAAO,CAAgC,IAAO,EAAE,OAA8B,EAAqC,EAAE;QACnH,MAAM,KAAK,GAAG,WAAW,CAAC;YACxB,CAAC,EAAE,oBAAoB;YACvB,KAAK;YACL,GAAG,EAAE,EAAE,GAAG;YACV,EAAE,EAAE,GAAG,EAAE;YACT,IAAI;YACJ,GAAG,OAAO;SAC0B,CAAC,CAAC;QACxC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC;QAClB,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;AACJ,CAAC"}

package/dist/review-events.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=review-events.test.d.ts.map

package/dist/review-events.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-events.test.d.ts","sourceRoot":"","sources":["../src/review-events.test.ts"],"names":[],"mappings":""}

package/dist/review-events.test.js

@@ -0,0 +1,47 @@
+import assert from "node:assert/strict";
+import { test } from "node:test";
+import { createReviewEventEmitter, redactReviewEventPayload, redactReviewEventText } from "./review-events.js";
+test("ReviewEvent v1 emits a monotonic, replayable panel lifecycle", () => {
+    const events = [];
+    const emit = createReviewEventEmitter("run-1", (event) => events.push(event));
+    emit("panel.started", { target: "@src", mode: "code", reviewers: [] });
+    emit("aggregation.started", {});
+    assert.deepEqual(events.map((event) => event.type), ["panel.started", "aggregation.started"]);
+    assert.deepEqual(events.map((event) => event.seq), [1, 2]);
+    assert.deepEqual([...new Set(events.map((event) => event.runId))], ["run-1"]);
+});
+test("ReviewEvent v1 redacts obvious secrets and bounds renderer text", () => {
+    const text = redactReviewEventText(`token=sk-secret-value ${"x".repeat(900)}`, 512);
+    assert.doesNotMatch(text, /sk-secret-value/);
+    assert.match(text, /^token=\[REDACTED\]/);
+    assert.doesNotMatch(text, /\$1=/);
+    assert.ok(text.length <= 512);
+});
+test("ReviewEvent v1 recognizes dashed API key prefixes", () => {
+    assert.equal(redactReviewEventText("credential sk-live-secret-value"), "credential [REDACTED]");
+});
+test("ReviewEvent v1 redacts bounded final reviewer findings before renderers receive them", () => {
+    const events = [];
+    const emit = createReviewEventEmitter("run-1", (event) => {
+        if (event.type === "reviewer.completed")
+            events.push(event);
+    });
+    emit("reviewer.completed", {
+        reviewerId: "security",
+        submission: {
+            reviewerId: "security",
+            durationMs: 1,
+            result: { status: "has_findings", verdict: "request_changes", verdictSource: "parsed", actionableCount: 1, findings: [{ summary: `token=sk-final-secret ${"x".repeat(900)}`, actionable: true }] },
+        },
+    });
+    const summary = events[0].submission.result.findings[0].summary;
+    assert.doesNotMatch(summary, /sk-final-secret/);
+    assert.ok(summary.length <= 512);
+});
+test("redacted panel metadata keeps its renderer-safe shape", () => {
+    const meta = redactReviewEventPayload({ model: "token=sk-model-secret", confirmedClusters: [{ summary: "x".repeat(900) }] });
+    assert.equal(meta.confirmedClusters.length, 1);
+    assert.doesNotMatch(meta.model, /sk-model-secret/);
+    assert.ok(meta.confirmedClusters[0].summary.length <= 512);
+});
+//# sourceMappingURL=review-events.test.js.map

package/dist/review-events.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-events.test.js","sourceRoot":"","sources":["../src/review-events.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAE/G,IAAI,CAAC,8DAA8D,EAAE,GAAG,EAAE;IACxE,MAAM,MAAM,GAAwD,EAAE,CAAC;IACvE,MAAM,IAAI,GAAG,wBAAwB,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAE9E,IAAI,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;IACvE,IAAI,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC;IAEhC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,eAAe,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC9F,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;AAChF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iEAAiE,EAAE,GAAG,EAAE;IAC3E,MAAM,IAAI,GAAG,qBAAqB,CAAC,yBAAyB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IACpF,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAC7C,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;IAC1C,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAClC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC;AAChC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mDAAmD,EAAE,GAAG,EAAE;IAC7D,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,iCAAiC,CAAC,EAAE,uBAAuB,CAAC,CAAC;AAClG,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sFAAsF,EAAE,GAAG,EAAE;IAChG,MAAM,MAAM,GAAgF,EAAE,CAAC;IAC/F,MAAM,IAAI,GAAG,wBAAwB,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QACvD,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,oBAAoB,EAAE;QACzB,UAAU,EAAE,UAAU;QACtB,UAAU,EAAE;YACV,UAAU,EAAE,UAAU;YACtB,UAAU,EAAE,CAAC;YACb,MAAM,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,yBAAyB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,EAAE;SACnM;KACF,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC;IAClE,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAChD,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC;AACnC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uDAAuD,EAAE,GAAG,EAAE;IACjE,MAAM,IAAI,GAAG,wBAAwB,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7H,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC/C,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;IACnD,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC;AAC9D,CAAC,CAAC,CAAC"}

package/dist/review-result.d.ts

@@ -0,0 +1,5 @@
+import type { ReviewStatus, StructuredReviewResult, VerdictInfo } from "./types.js";
+export declare function reviewExitCode(status: ReviewStatus): number;
+/** Derives the machine review contract from the human-readable conclusion. */
+export declare function parseReviewResult(markdown: string, verdictInfo?: VerdictInfo): StructuredReviewResult;
+//# sourceMappingURL=review-result.d.ts.map

package/dist/review-result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-result.d.ts","sourceRoot":"","sources":["../src/review-result.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAiB,YAAY,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAoFnG,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAE3D;AAED,8EAA8E;AAC9E,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,WAAW,GAAE,WAAoC,GAChD,sBAAsB,CA4BxB"}

package/dist/review-result.js

@@ -0,0 +1,98 @@
+import { parseVerdict } from "./verdict.js";
+function escapeRegExp(value) {
+    return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function markdownSection(markdown, heading) {
+    const escaped = escapeRegExp(heading);
+    return markdown.match(new RegExp(`(?:^|\\n)##\\s*${escaped}\\s*\\n+([\\s\\S]*?)(?=\\n##\\s+|$)`, "i"))?.[1]?.trim() ?? "";
+}
+function field(block, name) {
+    const escaped = escapeRegExp(name);
+    return block.match(new RegExp(`^\\s*[-*]\\s*(?:\\*\\*)?${escaped}(?:\\*\\*)?\\s*:\\s*(.+?)\\s*$`, "im"))?.[1]?.trim();
+}
+const SEVERITY_PREFIX = /^(critical|high|medium|low|info|warning)\s*[:—-]\s*/i;
+function findingBlocks(section) {
+    const headings = [...section.matchAll(/^###\s+(.+?)\s*$/gm)].map((match) => ({
+        header: match[1],
+        index: match.index ?? 0,
+        length: match[0].length,
+    }));
+    if (headings.length > 0)
+        return headings;
+    return [...section.matchAll(/^(?:[-*]|(\d+)[.)])\s+(.+?)\s*$/gm)].map((match) => ({
+        header: match[2],
+        index: match.index ?? 0,
+        length: match[0].length,
+        ...(match[1] ? { listId: match[1] } : {}),
+    }));
+}
+function parseStructuredFindings(markdown, verdictInfo) {
+    const section = markdownSection(markdown, "Findings");
+    const blocks = findingBlocks(section);
+    return blocks.map((entry, index) => {
+        const plainHeader = entry.header.replace(/[*_]/g, "").trim();
+        const idParts = plainHeader.match(/^([A-Za-z]+\d+|\d+)[.):\s-]+(.+)$/);
+        let summary = (idParts?.[2] ?? plainHeader).trim();
+        const severityFromHeader = summary.match(SEVERITY_PREFIX)?.[1]?.toLowerCase();
+        summary = summary.replace(SEVERITY_PREFIX, "");
+        const pathFromHeader = summary.match(/`([^`]+)`/)?.[1];
+        if (pathFromHeader)
+            summary = summary.replace(/`[^`]+`\s*[:—-]?\s*/, "");
+        const blockStart = entry.index + entry.length;
+        const blockEnd = blocks[index + 1]?.index ?? section.length;
+        const block = section.slice(blockStart, blockEnd);
+        const severity = field(block, "Severity")?.toLowerCase() ?? severityFromHeader;
+        const rawPath = field(block, "Path")?.replace(/^`|`$/g, "") ?? pathFromHeader;
+        const findingPath = rawPath && !/^(?:none|n\/a|-)$/i.test(rawPath) ? rawPath : undefined;
+        const actionableField = field(block, "Actionable");
+        const actionable = actionableField === undefined
+            ? verdictInfo.verdict === "request_changes"
+            : /^(?:yes|true)$/i.test(actionableField);
+        const id = entry.listId ?? idParts?.[1];
+        return {
+            ...(id ? { id } : {}),
+            ...(severity ? { severity } : {}),
+            ...(findingPath ? { path: findingPath } : {}),
+            summary: summary.replace(/[`*_]/g, "").trim(),
+            actionable,
+        };
+    });
+}
+const REVIEW_EXIT_CODE = {
+    clean: 0,
+    has_findings: 1,
+    needs_human: 3,
+    blocked: 4,
+};
+export function reviewExitCode(status) {
+    return REVIEW_EXIT_CODE[status];
+}
+/** Derives the machine review contract from the human-readable conclusion. */
+export function parseReviewResult(markdown, verdictInfo = parseVerdict(markdown)) {
+    const findings = parseStructuredFindings(markdown, verdictInfo);
+    const actionableCount = findings.filter((finding) => finding.actionable).length;
+    let status;
+    switch (verdictInfo.verdict) {
+        case "approve":
+            status = "clean";
+            break;
+        case "request_changes":
+            status = "has_findings";
+            break;
+        case "needs_clarification":
+            status = "needs_human";
+            break;
+        case "blocked":
+            status = "blocked";
+            break;
+    }
+    if (verdictInfo.verdict === "approve" && actionableCount > 0)
+        status = "has_findings";
+    return {
+        ...verdictInfo,
+        status,
+        findings,
+        actionableCount,
+    };
+}
+//# sourceMappingURL=review-result.js.map

package/dist/review-result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-result.js","sourceRoot":"","sources":["../src/review-result.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB,EAAE,OAAe;IACxD,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACtC,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,kBAAkB,OAAO,qCAAqC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC5H,CAAC;AAED,SAAS,KAAK,CAAC,KAAa,EAAE,IAAY;IACxC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,2BAA2B,OAAO,gCAAgC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;AACxH,CAAC;AAED,MAAM,eAAe,GAAG,sDAAsD,CAAC;AAS/E,SAAS,aAAa,CAAC,OAAe;IACpC,MAAM,QAAQ,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC3E,MAAM,EAAE,KAAK,CAAC,CAAC,CAAE;QACjB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC;QACvB,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM;KACxB,CAAC,CAAC,CAAC;IACJ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAEzC,OAAO,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,mCAAmC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAChF,MAAM,EAAE,KAAK,CAAC,CAAC,CAAE;QACjB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC;QACvB,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM;QACvB,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,uBAAuB,CAAC,QAAgB,EAAE,WAAwB;IACzE,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IAEtC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACjC,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7D,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvE,IAAI,OAAO,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;QACnD,MAAM,kBAAkB,GAAG,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QAC9E,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QAC/C,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACvD,IAAI,cAAc;YAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC;QAEzE,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC;QAC9C,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;QAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,WAAW,EAAE,IAAI,kBAAkB,CAAC;QAC/E,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,cAAc,CAAC;QAC9E,MAAM,WAAW,GAAG,OAAO,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QACzF,MAAM,eAAe,GAAG,KAAK,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QACnD,MAAM,UAAU,GAAG,eAAe,KAAK,SAAS;YAC9C,CAAC,CAAC,WAAW,CAAC,OAAO,KAAK,iBAAiB;YAC3C,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC5C,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QAExC,OAAO;YACL,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;YAC7C,UAAU;SACX,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,gBAAgB,GAAiC;IACrD,KAAK,EAAE,CAAC;IACR,YAAY,EAAE,CAAC;IACf,WAAW,EAAE,CAAC;IACd,OAAO,EAAE,CAAC;CACX,CAAC;AAEF,MAAM,UAAU,cAAc,CAAC,MAAoB;IACjD,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,iBAAiB,CAC/B,QAAgB,EAChB,cAA2B,YAAY,CAAC,QAAQ,CAAC;IAEjD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAChE,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;IAEhF,IAAI,MAAwC,CAAC;IAC7C,QAAQ,WAAW,CAAC,OAAO,EAAE,CAAC;QAC5B,KAAK,SAAS;YACZ,MAAM,GAAG,OAAO,CAAC;YACjB,MAAM;QACR,KAAK,iBAAiB;YACpB,MAAM,GAAG,cAAc,CAAC;YACxB,MAAM;QACR,KAAK,qBAAqB;YACxB,MAAM,GAAG,aAAa,CAAC;YACvB,MAAM;QACR,KAAK,SAAS;YACZ,MAAM,GAAG,SAAS,CAAC;YACnB,MAAM;IACV,CAAC;IAED,IAAI,WAAW,CAAC,OAAO,KAAK,SAAS,IAAI,eAAe,GAAG,CAAC;QAAE,MAAM,GAAG,cAAc,CAAC;IAEtF,OAAO;QACL,GAAG,WAAW;QACd,MAAM;QACN,QAAQ;QACR,eAAe;KAChB,CAAC;AACJ,CAAC"}

package/dist/review-result.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=review-result.test.d.ts.map

package/dist/review-result.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-result.test.d.ts","sourceRoot":"","sources":["../src/review-result.test.ts"],"names":[],"mappings":""}

package/dist/review-result.test.js

@@ -0,0 +1,196 @@
+import assert from "node:assert/strict";
+import { test } from "node:test";
+import { parseReviewResult, reviewExitCode } from "./review-result.js";
+test("approve with no material findings is clean", () => {
+    const result = parseReviewResult(`
+## Verdict
+approve
+
+## Summary
+- Ready to ship.
+
+## Findings
+No material findings.
+
+## Risks and Blind Spots
+None.
+
+## Open Questions
+None.
+`);
+    assert.equal(result.verdict, "approve");
+    assert.equal(result.status, "clean");
+    assert.deepEqual(result.findings, []);
+    assert.equal(result.actionableCount, 0);
+});
+test("request_changes exposes structured actionable findings", () => {
+    const result = parseReviewResult(`
+## Verdict
+request_changes
+
+## Summary
+- The loop accepts an invalid budget.
+
+## Findings
+### F1: Validate the round budget
+- Severity: high
+- Path: src/args.ts
+- Actionable: yes
+- Evidence: Zero rounds bypasses the review gate.
+- Impact: CI can report success without a review.
+- Recommendation: Reject values below one.
+
+## Risks and Blind Spots
+None.
+
+## Open Questions
+None.
+`);
+    assert.equal(result.status, "has_findings");
+    assert.deepEqual(result.findings, [
+        {
+            id: "F1",
+            severity: "high",
+            path: "src/args.ts",
+            summary: "Validate the round budget",
+            actionable: true,
+        },
+    ]);
+    assert.equal(result.actionableCount, 1);
+});
+test("partial Markdown findings use verdict-aware actionable defaults", () => {
+    const result = parseReviewResult(`
+## Verdict
+request_changes
+
+## Summary
+- The round budget is unsafe.
+
+## Findings
+### High: \`src/args.ts\` accepts zero rounds
+- Evidence: --max-rounds 0 reaches the runner.
+- Impact: The gate can skip all reviews.
+- Recommendation: Require a positive integer.
+
+## Risks and Blind Spots
+None.
+
+## Open Questions
+None.
+`);
+    assert.deepEqual(result.findings, [
+        {
+            severity: "high",
+            path: "src/args.ts",
+            summary: "accepts zero rounds",
+            actionable: true,
+        },
+    ]);
+    assert.equal(result.actionableCount, 1);
+    assert.equal(result.status, "has_findings");
+});
+test("legacy top-level finding lists remain machine-readable", () => {
+    const result = parseReviewResult(`
+## Verdict
+request_changes
+
+## Summary
+- CI does not fail closed.
+
+## Findings
+1. **High** — \`src/cli.ts\`: Dirty reviews still exit zero
+   - Evidence: runReview forwards the child exit code.
+   - Impact: A review gate passes with actionable findings.
+   - Recommendation: Map structured status to a stable exit code.
+
+## Risks and Blind Spots
+None.
+
+## Open Questions
+None.
+`);
+    assert.deepEqual(result.findings, [
+        {
+            id: "1",
+            severity: "high",
+            path: "src/cli.ts",
+            summary: "Dirty reviews still exit zero",
+            actionable: true,
+        },
+    ]);
+});
+test("an actionable finding overrides an approve verdict", () => {
+    const result = parseReviewResult(`
+## Verdict
+approve
+
+## Findings
+### F1: Fix before closeout
+- Severity: medium
+- Actionable: true
+
+## Risks and Blind Spots
+None.
+
+## Open Questions
+None.
+`);
+    assert.equal(result.status, "has_findings");
+    assert.equal(result.actionableCount, 1);
+});
+test("non-actionable findings without a path keep approve clean", () => {
+    const result = parseReviewResult(`
+## Verdict
+approve
+
+## Findings
+### F1: Track a future improvement
+- Severity: low
+- Path: none
+- Actionable: no
+`);
+    assert.equal(result.status, "clean");
+    assert.deepEqual(result.findings, [
+        {
+            id: "F1",
+            severity: "low",
+            summary: "Track a future improvement",
+            actionable: false,
+        },
+    ]);
+});
+test("clarification, parse fallback, and runtime failures escalate", () => {
+    const clarification = parseReviewResult(`
+## Verdict
+needs_clarification
+
+## Findings
+### F1: Confirm the intended contract
+- Severity: high
+- Actionable: yes
+`);
+    assert.equal(clarification.status, "needs_human");
+    const fallback = parseReviewResult("## Findings\nNo material findings.");
+    assert.equal(fallback.status, "needs_human");
+    assert.equal(fallback.verdictSource, "fallback");
+    assert.match(fallback.parseError ?? "", /Could not parse/);
+    const runtime = parseReviewResult(`
+## Findings
+### F1: Retry the child
+- Severity: high
+- Actionable: yes
+`, {
+        verdict: "blocked",
+        verdictSource: "runtime_error",
+        parseError: "child pi exited with status 1",
+    });
+    assert.equal(runtime.status, "blocked");
+    assert.equal(runtime.verdictSource, "runtime_error");
+});
+test("review statuses map to stable gate exit codes", () => {
+    assert.equal(reviewExitCode("clean"), 0);
+    assert.equal(reviewExitCode("has_findings"), 1);
+    assert.equal(reviewExitCode("needs_human"), 3);
+    assert.equal(reviewExitCode("blocked"), 4);
+});
+//# sourceMappingURL=review-result.test.js.map

package/dist/review-result.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-result.test.js","sourceRoot":"","sources":["../src/review-result.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEvE,IAAI,CAAC,4CAA4C,EAAE,GAAG,EAAE;IACtD,MAAM,MAAM,GAAG,iBAAiB,CAAC;;;;;;;;;;;;;;;CAelC,CAAC,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACxC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACtC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;AAC1C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wDAAwD,EAAE,GAAG,EAAE;IAClE,MAAM,MAAM,GAAG,iBAAiB,CAAC;;;;;;;;;;;;;;;;;;;;;CAqBlC,CAAC,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC5C,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE;QAChC;YACE,EAAE,EAAE,IAAI;YACR,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,2BAA2B;YACpC,UAAU,EAAE,IAAI;SACjB;KACF,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;AAC1C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iEAAiE,EAAE,GAAG,EAAE;IAC3E,MAAM,MAAM,GAAG,iBAAiB,CAAC;;;;;;;;;;;;;;;;;;CAkBlC,CAAC,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE;QAChC;YACE,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,qBAAqB;YAC9B,UAAU,EAAE,IAAI;SACjB;KACF,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;IACxC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;AAC9C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wDAAwD,EAAE,GAAG,EAAE;IAClE,MAAM,MAAM,GAAG,iBAAiB,CAAC;;;;;;;;;;;;;;;;;;CAkBlC,CAAC,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE;QAChC;YACE,EAAE,EAAE,GAAG;YACP,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,+BAA+B;YACxC,UAAU,EAAE,IAAI;SACjB;KACF,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oDAAoD,EAAE,GAAG,EAAE;IAC9D,MAAM,MAAM,GAAG,iBAAiB,CAAC;;;;;;;;;;;;;;CAclC,CAAC,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC5C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;AAC1C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2DAA2D,EAAE,GAAG,EAAE;IACrE,MAAM,MAAM,GAAG,iBAAiB,CAAC;;;;;;;;;CASlC,CAAC,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE;QAChC;YACE,EAAE,EAAE,IAAI;YACR,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,4BAA4B;YACrC,UAAU,EAAE,KAAK;SAClB;KACF,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8DAA8D,EAAE,GAAG,EAAE;IACxE,MAAM,aAAa,GAAG,iBAAiB,CAAC;;;;;;;;CAQzC,CAAC,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAElD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,oCAAoC,CAAC,CAAC;IACzE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC7C,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IACjD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,IAAI,EAAE,EAAE,iBAAiB,CAAC,CAAC;IAE3D,MAAM,OAAO,GAAG,iBAAiB,CAAC;;;;;CAKnC,EAAE;QACC,OAAO,EAAE,SAAS;QAClB,aAAa,EAAE,eAAe;QAC9B,UAAU,EAAE,+BAA+B;KAC5C,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACxC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+CAA+C,EAAE,GAAG,EAAE;IACzD,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IACzC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC;IAChD,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/C,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;AAC7C,CAAC,CAAC,CAAC"}

package/dist/review.d.ts

@@ -1,10 +1,16 @@
-import type { ParsedArgs } from "./types.js";
+import type { ParsedArgs, ReviewRunResult } from "./types.js";
 import { type ChildRunResult } from "./child-process.js";
+export declare function readReviewStdin(): string;
+export declare function childEnv(piBin: string): NodeJS.ProcessEnv;
 /** Ensures the ASCII meta footer starts on its own line after streamed child stdout. */
 export declare function metaLinePrefix(childStdout: string, streamMode: boolean): string;
-/** True when the final text must be printed after exit instead of having streamed live. */
-export declare function progressLogBuffersOutput(streamMode: boolean, hasProgressLog: boolean): boolean;
+/** True when the final text must be printed after exit instead of having streamed live.
+ * With --mode json streaming, text deltas are forwarded live in streaming mode;
+ * --progress-log no longer forces buffering (it only tees the raw event stream). */
+export declare function progressLogBuffersOutput(streamMode: boolean, _hasProgressLog: boolean): boolean;
 export declare function childRuntimeError(child: Pick<ChildRunResult, "status" | "signal" | "error">): string | undefined;
 export declare function runModels(piBin: string, args: string[]): never;
-export declare function runReview(parsed: ParsedArgs): Promise<void>;
+export declare function runReviewOnce(parsed: ParsedArgs, stdinText?: string): Promise<ReviewRunResult>;
+/** CLI-compatible single review entrypoint. */
+export declare function runReview(parsed: ParsedArgs): Promise<never>;
 //# sourceMappingURL=review.d.ts.map

package/dist/review.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"review.d.ts","sourceRoot":"","sources":["../src/review.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAc,MAAM,YAAY,CAAC;AACzD,OAAO,EAA2C,KAAK,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAmClG,wFAAwF;AACxF,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,GAAG,MAAM,CAG/E;AAED,2FAA2F;AAC3F,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CAE9F;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC,GAAG,MAAM,GAAG,SAAS,CAKhH;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,KAAK,CAM9D;AAED,wBAAsB,SAAS,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CA6IjE"}
+{"version":3,"file":"review.d.ts","sourceRoot":"","sources":["../src/review.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,UAAU,EAAc,eAAe,EAAE,MAAM,YAAY,CAAC;AAC1E,OAAO,EAA2C,KAAK,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAYlG,wBAAgB,eAAe,IAAI,MAAM,CAOxC;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC,UAAU,CAczD;AAED,wFAAwF;AACxF,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,GAAG,MAAM,CAG/E;AAED;;oFAEoF;AACpF,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,GAAG,OAAO,CAE/F;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC,GAAG,MAAM,GAAG,SAAS,CAKhH;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,KAAK,CAM9D;AAED,wBAAsB,aAAa,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,SAAoB,GAAG,OAAO,CAAC,eAAe,CAAC,CAkM/G;AAED,+CAA+C;AAC/C,wBAAsB,SAAS,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,CAGlE"}