@zhixuan92/multi-model-agent-core 3.12.7 → 4.0.0

package/dist/research/allowlist.js

@@ -1,102 +0,0 @@
-import { isIP } from 'node:net';
-const URL_REGEX = /\bhttps?:\/\/[^\s'"<>()]+/gi;
-const FORBIDDEN_HOST_CHARS = /[\/:@?#]|:\/\//;
-const MAX_HOSTNAME_LENGTH = 253;
-const TRAILING_URL_PUNCTUATION = /[.,;:!?]+$/;
-/**
- * Validate and canonicalize a hostname string. Returns the canonical
- * (lowercase, IDNA-encoded) form or null if the input is not a valid
- * DNS FQDN. Mirrors the HostString rules in config/schema.ts as a
- * defense-in-depth layer: even though ResearchConfigSchema already
- * validates fetchAllowlistExtra via HostString, this function ensures
- * that any caller of buildHostAllowlist — including callers that bypass
- * schema parsing — cannot inject non-FQDN entries with "extra" provenance.
- */
-function canonicalizeHostname(raw) {
-    const trimmed = raw.trim();
-    if (trimmed.length === 0 || trimmed.length > MAX_HOSTNAME_LENGTH)
-        return null;
-    if (FORBIDDEN_HOST_CHARS.test(trimmed))
-        return null;
-    // Strip trailing dot (DNS root label) — example.com. ≡ example.com
-    const stripped = trimmed.endsWith('.') ? trimmed.slice(0, -1) : trimmed;
-    if (stripped.length === 0 || stripped.length > MAX_HOSTNAME_LENGTH)
-        return null;
-    let canonical;
-    try {
-        canonical = new URL(`https://${stripped}`).hostname;
-    }
-    catch {
-        return null;
-    }
-    if (canonical.length === 0 || canonical.length > MAX_HOSTNAME_LENGTH)
-        return null;
-    if (isIP(canonical) !== 0)
-        return null;
-    const labels = canonical.split('.');
-    if (labels.length < 2)
-        return null;
-    for (const label of labels) {
-        if (label.length === 0 || label.length > 63)
-            return null;
-        if (label.startsWith('-') || label.endsWith('-'))
-            return null;
-    }
-    return canonical;
-}
-export function extractURLHosts(strings) {
-    const out = [];
-    const seen = new Set();
-    for (const s of strings) {
-        const matches = s.match(URL_REGEX) ?? [];
-        for (const m of matches) {
-            try {
-                const candidate = m.replace(TRAILING_URL_PUNCTUATION, '');
-                const u = new URL(candidate);
-                if (!u.hostname)
-                    continue;
-                const canonical = canonicalizeHostname(u.hostname);
-                if (canonical === null)
-                    continue;
-                if (!seen.has(canonical)) {
-                    seen.add(canonical);
-                    out.push(canonical);
-                }
-            }
-            catch {
-                // malformed URL — silently skip
-            }
-        }
-    }
-    return out;
-}
-/**
- * Build the per-task fetch allowlist as a provenance-aware map. Per spec
- * §6.2 / §7.1 step 8, the private-network opt-in is gated on
- * `provenance === 'extra'` — only operator-declared hosts in
- * `fetchAllowlistExtra` are eligible, never hosts harvested from
- * `userSources`. Build order: userSources first (lower precedence), then
- * fetchAllowlistExtra overwrites — so collisions resolve to the operator's
- * deliberate intent.
- *
- * Both sources are validated through canonicalizeHostname; invalid entries
- * (IP literals, single-label names, malformed hostnames, overlong hosts)
- * are silently skipped. This mirrors ResearchConfigSchema's HostString
- * canonicalization as defense-in-depth for callers that have not parsed
- * configuration first; silent skipping preserves URL-extraction behavior
- * for untrusted userSources while keeping this builder non-throwing.
- */
-export function buildHostAllowlist(input) {
-    const map = new Map();
-    for (const h of extractURLHosts(input.userSources)) {
-        map.set(h, 'user_source');
-    }
-    for (const h of input.fetchAllowlistExtra) {
-        const canonical = canonicalizeHostname(h);
-        if (canonical !== null) {
-            map.set(canonical, 'extra');
-        }
-    }
-    return map;
-}
-//# sourceMappingURL=allowlist.js.map

package/dist/research/allowlist.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"allowlist.js","sourceRoot":"","sources":["../../src/research/allowlist.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAEhC,MAAM,SAAS,GAAG,6BAA6B,CAAC;AAEhD,MAAM,oBAAoB,GAAG,gBAAgB,CAAC;AAC9C,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,MAAM,wBAAwB,GAAG,YAAY,CAAC;AAE9C;;;;;;;;GAQG;AACH,SAAS,oBAAoB,CAAC,GAAW;IACvC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,mBAAmB;QAAE,OAAO,IAAI,CAAC;IAC9E,IAAI,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,mEAAmE;IACnE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACxE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,mBAAmB;QAAE,OAAO,IAAI,CAAC;IAChF,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,IAAI,GAAG,CAAC,WAAW,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,mBAAmB;QAAE,OAAO,IAAI,CAAC;IAClF,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QACzD,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IAChE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAA0B;IACxD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACzC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,CAAC,CAAC,OAAO,CAAC,wBAAwB,EAAE,EAAE,CAAC,CAAC;gBAC1D,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC7B,IAAI,CAAC,CAAC,CAAC,QAAQ;oBAAE,SAAS;gBAC1B,MAAM,SAAS,GAAG,oBAAoB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;gBACnD,IAAI,SAAS,KAAK,IAAI;oBAAE,SAAS;gBACjC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;oBACzB,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;oBACpB,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,gCAAgC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAUD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAqB;IACtD,MAAM,GAAG,GAAG,IAAI,GAAG,EAA+B,CAAC;IACnD,KAAK,MAAM,CAAC,IAAI,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IAC5B,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,EAAE,CAAC;QAC1C,MAAM,SAAS,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/review/aggregate-result.d.ts

@@ -1,5 +0,0 @@
-import type { ParsedStructuredReport } from '../reporting/structured-report.js';
-type ReviewAggregateStatus = 'approved' | 'changes_required' | 'annotated' | 'skipped' | 'error' | 'api_error' | 'network_error' | 'timeout';
-export declare function aggregateResult(implReport: ParsedStructuredReport, specReport: ParsedStructuredReport | undefined, qualityReport: ParsedStructuredReport | undefined, specStatus: ReviewAggregateStatus, qualityStatus: ReviewAggregateStatus): ParsedStructuredReport;
-export {};
-//# sourceMappingURL=aggregate-result.d.ts.map

package/dist/review/aggregate-result.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"aggregate-result.d.ts","sourceRoot":"","sources":["../../src/review/aggregate-result.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAEhF,KAAK,qBAAqB,GACtB,UAAU,GACV,kBAAkB,GAClB,WAAW,GACX,SAAS,GACT,OAAO,GACP,WAAW,GACX,eAAe,GACf,SAAS,CAAC;AAEd,wBAAgB,eAAe,CAC7B,UAAU,EAAE,sBAAsB,EAClC,UAAU,EAAE,sBAAsB,GAAG,SAAS,EAC9C,aAAa,EAAE,sBAAsB,GAAG,SAAS,EACjD,UAAU,EAAE,qBAAqB,EACjC,aAAa,EAAE,qBAAqB,GACnC,sBAAsB,CAmCxB"}

package/dist/review/aggregate-result.js

@@ -1,35 +0,0 @@
-export function aggregateResult(implReport, specReport, qualityReport, specStatus, qualityStatus) {
-    const prefix = specStatus === 'changes_required'
-        ? '[Spec review exhausted] '
-        : qualityStatus === 'changes_required'
-            ? '[Quality review exhausted] '
-            : '[Reviewed] ';
-    return {
-        summary: `${prefix}${implReport.summary ?? ''}`,
-        filesChanged: [
-            ...implReport.filesChanged,
-            ...(qualityReport?.filesChanged ?? []),
-        ],
-        validationsRun: [
-            ...implReport.validationsRun,
-            ...(specReport?.validationsRun ?? []),
-            ...(qualityReport?.validationsRun ?? []),
-        ],
-        deviationsFromBrief: [
-            ...(implReport.deviationsFromBrief ?? []),
-            ...(specReport?.deviationsFromBrief ?? []),
-            ...(qualityReport?.deviationsFromBrief ?? []),
-        ],
-        unresolved: [
-            ...(implReport.unresolved ?? []),
-            ...(specReport?.unresolved ?? []),
-            ...(qualityReport?.unresolved ?? []),
-        ],
-        extraSections: {
-            ...(implReport.extraSections ?? {}),
-            ...(specReport?.extraSections ?? {}),
-            ...(qualityReport?.extraSections ?? {}),
-        },
-    };
-}
-//# sourceMappingURL=aggregate-result.js.map

package/dist/review/aggregate-result.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"aggregate-result.js","sourceRoot":"","sources":["../../src/review/aggregate-result.ts"],"names":[],"mappings":"AAYA,MAAM,UAAU,eAAe,CAC7B,UAAkC,EAClC,UAA8C,EAC9C,aAAiD,EACjD,UAAiC,EACjC,aAAoC;IAEpC,MAAM,MAAM,GACV,UAAU,KAAK,kBAAkB;QAC/B,CAAC,CAAC,0BAA0B;QAC5B,CAAC,CAAC,aAAa,KAAK,kBAAkB;YACpC,CAAC,CAAC,6BAA6B;YAC/B,CAAC,CAAC,aAAa,CAAC;IAEtB,OAAO;QACL,OAAO,EAAE,GAAG,MAAM,GAAG,UAAU,CAAC,OAAO,IAAI,EAAE,EAAE;QAC/C,YAAY,EAAE;YACZ,GAAG,UAAU,CAAC,YAAY;YAC1B,GAAG,CAAC,aAAa,EAAE,YAAY,IAAI,EAAE,CAAC;SACvC;QACD,cAAc,EAAE;YACd,GAAG,UAAU,CAAC,cAAc;YAC5B,GAAG,CAAC,UAAU,EAAE,cAAc,IAAI,EAAE,CAAC;YACrC,GAAG,CAAC,aAAa,EAAE,cAAc,IAAI,EAAE,CAAC;SACzC;QACD,mBAAmB,EAAE;YACnB,GAAG,CAAC,UAAU,CAAC,mBAAmB,IAAI,EAAE,CAAC;YACzC,GAAG,CAAC,UAAU,EAAE,mBAAmB,IAAI,EAAE,CAAC;YAC1C,GAAG,CAAC,aAAa,EAAE,mBAAmB,IAAI,EAAE,CAAC;SAC9C;QACD,UAAU,EAAE;YACV,GAAG,CAAC,UAAU,CAAC,UAAU,IAAI,EAAE,CAAC;YAChC,GAAG,CAAC,UAAU,EAAE,UAAU,IAAI,EAAE,CAAC;YACjC,GAAG,CAAC,aAAa,EAAE,UAAU,IAAI,EAAE,CAAC;SACrC;QACD,aAAa,EAAE;YACb,GAAG,CAAC,UAAU,CAAC,aAAa,IAAI,EAAE,CAAC;YACnC,GAAG,CAAC,UAAU,EAAE,aAAa,IAAI,EAAE,CAAC;YACpC,GAAG,CAAC,aAAa,EAAE,aAAa,IAAI,EAAE,CAAC;SACxC;KACF,CAAC;AACJ,CAAC"}

package/dist/review/diff-review.d.ts

@@ -1,46 +0,0 @@
-import type { VerifyStageResult } from '../run-tasks/verify-stage.js';
-import type { SkippedReviewResult } from './skipped-result.js';
-export type DiffReviewConcern = {
-    source: 'diff_review';
-    severity: 'critical' | 'high' | 'medium' | 'low';
-    message: string;
-};
-export type DiffReviewVerdict = {
-    kind: 'approve';
-    status?: 'approved';
-    concerns: [];
-} | {
-    kind: 'concerns';
-    status?: 'changes_required';
-    concerns: DiffReviewConcern[];
-} | {
-    kind: 'reject';
-    status?: 'changes_required';
-    message: string;
-} | {
-    kind: 'transport_failure';
-    status: 'api_error' | 'network_error' | 'timeout' | 'api_aborted';
-    concerns: DiffReviewConcern[];
-    reason?: string;
-};
-export type DiffReviewOrSkipped = DiffReviewVerdict | SkippedReviewResult;
-export interface DiffReviewInput {
-    cwd: string;
-    diff: string;
-    diffTruncated: boolean;
-    verification: VerifyStageResult;
-    worker: {
-        call: (prompt: string, opts?: {
-            cwd?: string;
-            abortSignal?: AbortSignal;
-            timeoutMs?: number;
-        }) => Promise<{
-            output: string;
-            status?: string;
-        }>;
-    };
-    taskDeadlineMs?: number;
-    abortSignal?: AbortSignal;
-}
-export declare function runDiffReview(input: DiffReviewInput): Promise<DiffReviewVerdict>;
-//# sourceMappingURL=diff-review.d.ts.map

package/dist/review/diff-review.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"diff-review.d.ts","sourceRoot":"","sources":["../../src/review/diff-review.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE/D,MAAM,MAAM,iBAAiB,GAAG;IAC9B,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACjD,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,CAAC,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,EAAE,CAAA;CAAE,GACtD;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAAC,QAAQ,EAAE,iBAAiB,EAAE,CAAA;CAAE,GAChF;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAChE;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,MAAM,EAAE,WAAW,GAAG,eAAe,GAAG,SAAS,GAAG,aAAa,CAAC;IAAC,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAErJ,MAAM,MAAM,mBAAmB,GAAG,iBAAiB,GAAG,mBAAmB,CAAC;AAE1E,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,OAAO,CAAC;IACvB,YAAY,EAAE,iBAAiB,CAAC;IAChC,MAAM,EAAE;QACN,IAAI,EAAE,CACJ,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE;YAAE,GAAG,CAAC,EAAE,MAAM,CAAC;YAAC,WAAW,CAAC,EAAE,WAAW,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAA;SAAE,KACnE,OAAO,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACnD,CAAC;IACF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAoBD,wBAAsB,aAAa,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAmDtF"}

package/dist/review/diff-review.js

@@ -1,65 +0,0 @@
-const PROMPT_SYSTEM = `You are reviewing a mechanical refactor in a single pass. No rework loop is available.
-
-Reply with EXACTLY one of:
-- APPROVE
-- CONCERNS: <comma-separated short concern messages>
-- REJECT: <one-line reason>`;
-const PROMPT_TEMPLATE = (i) => `
-Working directory: ${i.cwd}
-Verification: ${i.verification.status}
-${i.verification.steps.map((s) => `- ${s.command} → ${s.status}`).join('\n')}
-
-Diff${i.diffTruncated ? ' (TRUNCATED at 64 KB — you may not approve cleanly)' : ''}:
-\`\`\`diff
-${i.diff}
-\`\`\`
-`;
-export async function runDiffReview(input) {
-    if (input.abortSignal?.aborted) {
-        return { kind: 'transport_failure', status: 'api_aborted', concerns: [], reason: 'aborted before worker call' };
-    }
-    const remaining = input.taskDeadlineMs !== undefined
-        ? Math.max(1, input.taskDeadlineMs - Date.now())
-        : undefined;
-    const prompt = `${PROMPT_SYSTEM}\n\n${PROMPT_TEMPLATE(input)}`;
-    const result = await input.worker.call(prompt, {
-        cwd: input.cwd,
-        abortSignal: input.abortSignal,
-        timeoutMs: remaining,
-    });
-    if (result.status === 'api_error' || result.status === 'network_error' || result.status === 'timeout' || result.status === 'api_aborted') {
-        return { kind: 'transport_failure', status: result.status, concerns: [] };
-    }
-    const trimmed = result.output.trim();
-    if (trimmed === 'APPROVE')
-        return { kind: 'approve', concerns: [] };
-    if (trimmed.startsWith('CONCERNS:')) {
-        const msgs = trimmed
-            .slice('CONCERNS:'.length)
-            .split(',')
-            .map((s) => s.trim())
-            .filter(Boolean);
-        return {
-            kind: 'concerns',
-            concerns: msgs.map((m) => ({
-                source: 'diff_review',
-                severity: 'medium',
-                message: m,
-            })),
-        };
-    }
-    if (trimmed.startsWith('REJECT:')) {
-        return { kind: 'reject', message: trimmed.slice('REJECT:'.length).trim() };
-    }
-    return {
-        kind: 'concerns',
-        concerns: [
-            {
-                source: 'diff_review',
-                severity: 'high',
-                message: `unparseable verdict: ${trimmed.slice(0, 200)}`,
-            },
-        ],
-    };
-}
-//# sourceMappingURL=diff-review.js.map

package/dist/review/diff-review.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"diff-review.js","sourceRoot":"","sources":["../../src/review/diff-review.ts"],"names":[],"mappings":"AAgCA,MAAM,aAAa,GAAG;;;;;4BAKM,CAAC;AAE7B,MAAM,eAAe,GAAG,CAAC,CAAkB,EAAE,EAAE,CAAC;qBAC3B,CAAC,CAAC,GAAG;gBACV,CAAC,CAAC,YAAY,CAAC,MAAM;EACnC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;;MAEtE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,qDAAqD,CAAC,CAAC,CAAC,EAAE;;EAEhF,CAAC,CAAC,IAAI;;CAEP,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAsB;IACxD,IAAI,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC;QAC/B,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;IAClH,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,cAAc,KAAK,SAAS;QAClD,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAChD,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,MAAM,GAAG,GAAG,aAAa,OAAO,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;IAC/D,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE;QAC7C,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,SAAS;KACrB,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,MAAM,KAAK,eAAe,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QACzI,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC5E,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAErC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAEpE,IAAI,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,OAAO;aACjB,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC;aACzB,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,OAAO,CAAC,CAAC;QAEnB,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACzB,MAAM,EAAE,aAAsB;gBAC9B,QAAQ,EAAE,QAAiB;gBAC3B,OAAO,EAAE,CAAC;aACX,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IAC7E,CAAC;IAED,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE;YACR;gBACE,MAAM,EAAE,aAAa;gBACrB,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,wBAAwB,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;aACzD;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/review/evidence.d.ts

@@ -1,15 +0,0 @@
-import type { Commit } from '../runners/base/result-builders.js';
-import type { VerifyStageResult } from '../run-tasks/verify-stage.js';
-export interface EvidenceInput {
-    cwd: string;
-    baselineHead: string;
-    commits: Commit[];
-    verification: VerifyStageResult;
-    reviewPolicy: 'full' | 'spec_only' | 'diff_only' | 'off';
-}
-export declare function buildEvidence(i: EvidenceInput): Promise<{
-    block: string;
-    diffTruncated: boolean;
-    fullDiff: string;
-}>;
-//# sourceMappingURL=evidence.d.ts.map

package/dist/review/evidence.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"evidence.d.ts","sourceRoot":"","sources":["../../src/review/evidence.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oCAAoC,CAAC;AACjE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAItE,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,YAAY,EAAE,iBAAiB,CAAC;IAChC,YAAY,EAAE,MAAM,GAAG,WAAW,GAAG,WAAW,GAAG,KAAK,CAAC;CAC1D;AAED,wBAAsB,aAAa,CAAC,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAoB1H"}

package/dist/review/evidence.js

@@ -1,26 +0,0 @@
-import { execFile } from 'node:child_process';
-import { promisify } from 'node:util';
-const exec = promisify(execFile);
-export async function buildEvidence(i) {
-    const { stdout: stat } = await exec('git', ['diff', `${i.baselineHead}..HEAD`, '--stat'], { cwd: i.cwd });
-    const { stdout: full } = await exec('git', ['diff', `${i.baselineHead}..HEAD`], { cwd: i.cwd });
-    const cap = 64 * 1024;
-    // Cap by UTF-8 bytes, not JS-string length, so non-ASCII diffs hit the actual byte cap.
-    const fullBytes = Buffer.byteLength(full, 'utf8');
-    const diffTruncated = fullBytes > cap;
-    const truncFull = diffTruncated
-        ? Buffer.from(full, 'utf8').subarray(0, cap).toString('utf8') + '\n[diff truncated]'
-        : full;
-    let block = '## Implementation evidence\n';
-    block += '- Commits:\n';
-    for (const c of i.commits)
-        block += `  - ${c.sha.slice(0, 12)} "${c.subject}" (filesChanged: ${c.filesChanged.length})\n`;
-    block += `- Verification: ${i.verification.status}\n`;
-    for (const s of i.verification.steps)
-        block += `  - \`${s.command}\` → ${s.status}${s.exitCode !== null ? ` (exit=${s.exitCode})` : ''} (${s.durationMs}ms)\n`;
-    block += `- Diff stat:\n\n\`\`\`\n${stat}\`\`\`\n\n`;
-    block += `- Full diff:\n\n\`\`\`diff\n${truncFull}\n\`\`\`\n`;
-    block += `- diffTruncated: ${diffTruncated}\n`;
-    return { block, diffTruncated, fullDiff: truncFull };
-}
-//# sourceMappingURL=evidence.js.map

package/dist/review/evidence.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../src/review/evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAItC,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAUjC,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,CAAgB;IAClD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,YAAY,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1G,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,YAAY,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAChG,MAAM,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC;IACtB,wFAAwF;IACxF,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,aAAa,GAAG,SAAS,GAAG,GAAG,CAAC;IACtC,MAAM,SAAS,GAAG,aAAa;QAC7B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,oBAAoB;QACpF,CAAC,CAAC,IAAI,CAAC;IAET,IAAI,KAAK,GAAG,8BAA8B,CAAC;IAC3C,KAAK,IAAI,cAAc,CAAC;IACxB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO;QAAE,KAAK,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,OAAO,oBAAoB,CAAC,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;IAC1H,KAAK,IAAI,mBAAmB,CAAC,CAAC,YAAY,CAAC,MAAM,IAAI,CAAC;IACtD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,KAAK;QAAE,KAAK,IAAI,SAAS,CAAC,CAAC,OAAO,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,UAAU,OAAO,CAAC;IAC/J,KAAK,IAAI,2BAA2B,IAAI,YAAY,CAAC;IACrD,KAAK,IAAI,+BAA+B,SAAS,YAAY,CAAC;IAC9D,KAAK,IAAI,oBAAoB,aAAa,IAAI,CAAC;IAC/C,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AACvD,CAAC"}

package/dist/review/fallback-extraction.d.ts

@@ -1,17 +0,0 @@
-import { type AnnotatedFinding } from '../executors/_shared/findings-schema.js';
-/**
- * Deterministic regex extractor — runs when the LLM reviewer's JSON output
- * fails parse twice. Synthesizes AnnotatedFinding[] so telemetry always has
- * something to count.
- *
- * Confidence is null. Ids are always sequential `F${i+1}` (never use the
- * worker's number — duplicates would violate annotatedFindingsSchema).
- * evidenceGrounded reflects the actual substring check on the normalized
- * worker output.
- *
- * If the worker output has zero parseable numbered sections and no explicit
- * "no findings" language, emits a single catch-all finding so downstream
- * telemetry never sees an empty list.
- */
-export declare function fallbackExtractFindings(workerOutput: string): AnnotatedFinding[];
-//# sourceMappingURL=fallback-extraction.d.ts.map

package/dist/review/fallback-extraction.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"fallback-extraction.d.ts","sourceRoot":"","sources":["../../src/review/fallback-extraction.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,yCAAyC,CAAC;AA4IjD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CAAC,YAAY,EAAE,MAAM,GAAG,gBAAgB,EAAE,CA6ChF"}

package/dist/review/fallback-extraction.js

@@ -1,189 +0,0 @@
-import { normalizeWhitespace, } from '../executors/_shared/findings-schema.js';
-/**
- * Map a worker-emitted severity string (case-insensitive, may be "mid")
- * to the canonical 4-tier value. Default 'medium' on unknown.
- */
-function mapSeverity(raw) {
-    const s = raw.trim().toLowerCase();
-    if (s === 'critical')
-        return 'critical';
-    if (s === 'high')
-        return 'high';
-    if (s === 'medium' || s === 'mid')
-        return 'medium';
-    if (s === 'low')
-        return 'low';
-    return 'medium';
-}
-/**
- * Match numbered/finding-shaped headings — broad enough to catch the most
- * common patterns workers actually produce. Two alternatives:
- *
- *   A. Markdown headings (Round-2 #5):
- *       "## 1. Title"           — h2 with number
- *       "### 2. Title"          — h3 with number
- *       "#### 3: Title"         — h4 with number+colon
- *       "### [4] Title"         — bracketed number
- *       "### Finding 5 — Title" — "Finding N" form
- *
- *   B. Bold-wrapped numbered headers (3.12.6 — what DeepSeek-as-implementer
- *      actually produces for audit narratives):
- *       "**1.**"                — bare bold-number on its own line, title-less;
- *                                 the body's "Issue:" line carries the claim
- *       "**Finding 2:** Title"  — bold "Finding N" with title
- *       "**[3]** Title"         — bold-bracketed number
- *
- * Plain `### Summary` / `### Performance Notes` and bare `**Severity:**`
- * tags are ignored on purpose so the fallback does not invent findings
- * out of structural sections or label lines.
- *
- * Capture group 1 is the bracketed number (when [N] form), 2 is the bare
- * number (otherwise). At least one is always set when this regex matches.
- * Group 3 is the title (may be empty for the bare bold-number form).
- */
-// Note on whitespace: we use `[ \t]*` instead of `\s*` after the trailing
-// `**` because `\s` matches `\n` in JS regex — that lets the title group
-// `(.*)$` greedily eat the LINE BELOW the heading (which for audit findings
-// is the `Severity:` label line) and produce a junk title. Restricting to
-// horizontal whitespace keeps each heading bounded to its own line.
-const SECTION_RE = /^(?:#{2,6}[ \t]+|\*\*[ \t]*)(?:Finding\s+)?(?:\[(\d+)\]|(\d+))(?:\*\*)?[ \t]*[\.\:\)\-\—\–]?(?:\*\*)?[ \t]*(.*)$/gim;
-// Severity line — accepts optional Markdown-bullet prefixes (`-`, `*`, `+`)
-// and optional bold wrappers, since 3.12.6 standardized the implementer
-// prompt to emit findings as bulleted bodies (`- Severity: high`). Pre-3.12.6
-// expected bare `Severity: ...` and quietly defaulted everything to medium
-// when bullets were present — even though the implementer wrote real
-// severities — producing dashboards that always showed "11 medium, 0 of
-// anything else" for read-only audits.
-const SEVERITY_RE = /^[ \t]*(?:[-*+][ \t]+)?\**[ \t]*Severity[ \t]*:[ \t]*\**[ \t]*(critical|high|medium|mid|low)\**[ \t]*$/gim;
-/** Single-pass section iteration (Round-1 P3). */
-function findSections(workerOutput) {
-    const sections = [];
-    SECTION_RE.lastIndex = 0;
-    let prev = null;
-    let match;
-    while ((match = SECTION_RE.exec(workerOutput)) !== null) {
-        const startIdx = match.index;
-        if (prev) {
-            sections.push({ ...prev, endIdx: startIdx });
-        }
-        // capture[1] = [N] bracketed number; capture[2] = bare number; capture[3] = title.
-        const workerNumber = match[1] ?? match[2] ?? '';
-        prev = {
-            startIdx,
-            workerNumber,
-            title: (match[3] ?? '').trim(),
-        };
-    }
-    if (prev)
-        sections.push({ ...prev, endIdx: workerOutput.length });
-    return sections;
-}
-/**
- * Detect explicit "no findings" language so fallback returns [] instead of
- * a synthetic catch-all when a clean codebase produces a clean narrative
- * but the reviewer happens to fail JSON parse (Round-2 #6).
- */
-const NO_FINDINGS_RE = /\b(?:no\s+(?:findings|issues|problems)\s+(?:found|detected|reported)?|nothing\s+to\s+report|0\s+findings|zero\s+findings)\b/i;
-function severityFromSection(section) {
-    SEVERITY_RE.lastIndex = 0;
-    const m = SEVERITY_RE.exec(section);
-    if (!m)
-        return 'medium';
-    return mapSeverity(m[1]);
-}
-/**
- * Build meaningful synthetic evidence (Round-1 #8):
- * - Prefer the section body (first 240 chars after the heading).
- * - If the body is too short, build a meaningful sentence from the title,
- *   not a space-padded string.
- *
- * Worker-stated number is preserved in the evidence prose, not in the id
- * (Round-1 #2 — ids must always be unique sequential).
- */
-function buildEvidence(sectionText, title, workerNumber) {
-    const body = sectionText.split('\n').slice(1).join('\n').trim();
-    if (body.length >= 20)
-        return body.slice(0, 240);
-    const synth = `Worker finding #${workerNumber} (${title}): no detailed body provided in implementer report.`;
-    return synth.length >= 20 ? synth : `${synth} fallback-synthesized.`;
-}
-/**
- * Pull a one-line claim from labeled body lines when the section heading
- * itself carried no title (the bare `**N.**` form, common in DeepSeek
- * audit narratives). Falls back to empty string when no labeled line is
- * present — caller defaults to `Finding N` in that case.
- *
- * Recognized labels (case-insensitive): Issue, Title, Summary, Claim,
- * Description, Problem, Finding. Strips Markdown bold wrappers from
- * label and value. Truncates at 160 chars to keep dashboard rows readable.
- */
-// Allow optional bullet prefixes (`-`, `*`, `+`) since 3.12.6 standardized
-// the implementer prompt to emit labeled bullets (`- Issue: ...`). The
-// optional `\**` captures bold-wrapped labels (`**Issue:**`).
-const CLAIM_LABEL_RE = /^[ \t]*(?:[-*+][ \t]+)?\**[ \t]*(?:Issue|Title|Summary|Claim|Description|Problem|Finding)[ \t]*:?\**[ \t]*(.+?)[ \t]*$/im;
-function claimFromBody(sectionText) {
-    const body = sectionText.split('\n').slice(1).join('\n');
-    const m = CLAIM_LABEL_RE.exec(body);
-    if (!m || !m[1])
-        return '';
-    const raw = m[1].replace(/^\*+|\*+$/g, '').trim();
-    return raw.length > 160 ? raw.slice(0, 157) + '...' : raw;
-}
-/**
- * Deterministic regex extractor — runs when the LLM reviewer's JSON output
- * fails parse twice. Synthesizes AnnotatedFinding[] so telemetry always has
- * something to count.
- *
- * Confidence is null. Ids are always sequential `F${i+1}` (never use the
- * worker's number — duplicates would violate annotatedFindingsSchema).
- * evidenceGrounded reflects the actual substring check on the normalized
- * worker output.
- *
- * If the worker output has zero parseable numbered sections and no explicit
- * "no findings" language, emits a single catch-all finding so downstream
- * telemetry never sees an empty list.
- */
-export function fallbackExtractFindings(workerOutput) {
-    const normalizedWorker = normalizeWhitespace(workerOutput);
-    const sections = findSections(workerOutput);
-    // Round-2 #6: respect explicit "no findings" worker output.
-    if (sections.length === 0 && NO_FINDINGS_RE.test(workerOutput)) {
-        return [];
-    }
-    if (sections.length === 0) {
-        const trimmed = workerOutput.trim();
-        // Use real worker text when long enough — preserves evidenceGrounded=true.
-        // Otherwise fall back to a meaningful synthetic sentence (knowingly ungrounded).
-        const evidence = trimmed.length >= 20
-            ? trimmed.slice(0, 240)
-            : `Worker output had no parseable findings (length ${trimmed.length}). Fallback emitted catch-all so telemetry has at least one entry.`;
-        const eNorm = normalizeWhitespace(evidence);
-        return [{
-                id: 'F1',
-                severity: 'medium',
-                claim: 'reviewer parse failed; deterministic fallback emitted single catch-all from worker output',
-                evidence,
-                reviewerConfidence: null,
-                evidenceGrounded: eNorm.length >= 20 && normalizedWorker.includes(eNorm),
-            }];
-    }
-    return sections.map((section, i) => {
-        const sectionText = workerOutput.slice(section.startIdx, section.endIdx);
-        const severity = severityFromSection(sectionText);
-        const evidence = buildEvidence(sectionText, section.title, section.workerNumber);
-        const eNorm = normalizeWhitespace(evidence);
-        // 3.12.6: when the section heading was titleless (bare `**N.**` form),
-        // try to derive the claim from a labeled body line (Issue: / Title: /
-        // Summary: / etc.) so dashboard rows aren't all "Finding 1, Finding 2..."
-        const derivedClaim = section.title || claimFromBody(sectionText) || `Finding ${i + 1}`;
-        return {
-            id: `F${i + 1}`,
-            severity,
-            claim: derivedClaim,
-            evidence,
-            reviewerConfidence: null,
-            evidenceGrounded: eNorm.length >= 20 && normalizedWorker.includes(eNorm),
-        };
-    });
-}
-//# sourceMappingURL=fallback-extraction.js.map

package/dist/review/fallback-extraction.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"fallback-extraction.js","sourceRoot":"","sources":["../../src/review/fallback-extraction.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,GAEpB,MAAM,yCAAyC,CAAC;AAIjD;;;GAGG;AACH,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnC,IAAI,CAAC,KAAK,UAAU;QAAE,OAAO,UAAU,CAAC;IACxC,IAAI,CAAC,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IAChC,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,KAAK;QAAE,OAAO,QAAQ,CAAC;IACnD,IAAI,CAAC,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAC9B,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,0EAA0E;AAC1E,yEAAyE;AACzE,4EAA4E;AAC5E,0EAA0E;AAC1E,oEAAoE;AACpE,MAAM,UAAU,GAAG,qHAAqH,CAAC;AACzI,4EAA4E;AAC5E,wEAAwE;AACxE,8EAA8E;AAC9E,2EAA2E;AAC3E,qEAAqE;AACrE,wEAAwE;AACxE,uCAAuC;AACvC,MAAM,WAAW,GAAG,2GAA2G,CAAC;AAShI,kDAAkD;AAClD,SAAS,YAAY,CAAC,YAAoB;IACxC,MAAM,QAAQ,GAAiB,EAAE,CAAC;IAClC,UAAU,CAAC,SAAS,GAAG,CAAC,CAAC;IACzB,IAAI,IAAI,GAAqE,IAAI,CAAC;IAClF,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACxD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC;QAC7B,IAAI,IAAI,EAAE,CAAC;YACT,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC/C,CAAC;QACD,mFAAmF;QACnF,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAChD,IAAI,GAAG;YACL,QAAQ;YACR,YAAY;YACZ,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;SAC/B,CAAC;IACJ,CAAC;IACD,IAAI,IAAI;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;IAClE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,cAAc,GAAG,8HAA8H,CAAC;AAEtJ,SAAS,mBAAmB,CAAC,OAAe;IAC1C,WAAW,CAAC,SAAS,GAAG,CAAC,CAAC;IAC1B,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAC;IACxB,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,aAAa,CAAC,WAAmB,EAAE,KAAa,EAAE,YAAoB;IAC7E,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAChE,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,mBAAmB,YAAY,KAAK,KAAK,qDAAqD,CAAC;IAC7G,OAAO,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,wBAAwB,CAAC;AACvE,CAAC;AAED;;;;;;;;;GASG;AACH,2EAA2E;AAC3E,uEAAuE;AACvE,8DAA8D;AAC9D,MAAM,cAAc,GAAG,0HAA0H,CAAC;AAClJ,SAAS,aAAa,CAAC,WAAmB;IACxC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzD,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAClD,OAAO,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;AAC5D,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,uBAAuB,CAAC,YAAoB;IAC1D,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IAE5C,4DAA4D;IAC5D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QAC/D,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC;QACpC,2EAA2E;QAC3E,iFAAiF;QACjF,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE;YACnC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YACvB,CAAC,CAAC,mDAAmD,OAAO,CAAC,MAAM,oEAAoE,CAAC;QAC1I,MAAM,KAAK,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAC5C,OAAO,CAAC;gBACN,EAAE,EAAE,IAAI;gBACR,QAAQ,EAAE,QAAQ;gBAClB,KAAK,EAAE,2FAA2F;gBAClG,QAAQ;gBACR,kBAAkB,EAAE,IAAI;gBACxB,gBAAgB,EAAE,KAAK,CAAC,MAAM,IAAI,EAAE,IAAI,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC;aACzE,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE;QACjC,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACzE,MAAM,QAAQ,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QACjF,MAAM,KAAK,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAC5C,uEAAuE;QACvE,sEAAsE;QACtE,0EAA0E;QAC1E,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,IAAI,aAAa,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACvF,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE;YACf,QAAQ;YACR,KAAK,EAAE,YAAY;YACnB,QAAQ;YACR,kBAAkB,EAAE,IAAI;YACxB,gBAAgB,EAAE,KAAK,CAAC,MAAM,IAAI,EAAE,IAAI,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC;SACzE,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/review/parse-reviewer-findings.d.ts

@@ -1,26 +0,0 @@
-import { type AnnotatedFinding } from '../executors/_shared/findings-schema.js';
-interface ParseOk {
-    ok: true;
-    findings: AnnotatedFinding[];
-    /** Findings whose evidence was NOT a substring of worker output — kept but flagged. */
-    ungroundedCount: number;
-}
-interface ParseErr {
-    ok: false;
-    reason: string;
-}
-export type ParseReviewerFindingsResult = ParseOk | ParseErr;
-/**
- * Parse the reviewer's structured output and annotate each finding with
- * `evidenceGrounded`.
- *
- * Pipeline:
- * 1. Extract the final `` ```json `` block (permissive fence).
- * 2. JSON.parse + Zod-validate against reviewerEmittedFindingsSchema.
- * 3. Normalize worker output ONCE; for each finding set
- *    `evidenceGrounded` against the normalized worker.
- * 4. Return ALL findings — never drop. `ungroundedCount` is informational only.
- */
-export declare function parseReviewerFindings(reviewerOutput: string, workerOutput: string): ParseReviewerFindingsResult;
-export {};
-//# sourceMappingURL=parse-reviewer-findings.d.ts.map

package/dist/review/parse-reviewer-findings.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"parse-reviewer-findings.d.ts","sourceRoot":"","sources":["../../src/review/parse-reviewer-findings.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,gBAAgB,EACtB,MAAM,yCAAyC,CAAC;AAEjD,UAAU,OAAO;IACf,EAAE,EAAE,IAAI,CAAC;IACT,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,uFAAuF;IACvF,eAAe,EAAE,MAAM,CAAC;CACzB;AACD,UAAU,QAAQ;IAChB,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;CAChB;AACD,MAAM,MAAM,2BAA2B,GAAG,OAAO,GAAG,QAAQ,CAAC;AAmC7D;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACnC,cAAc,EAAE,MAAM,EACtB,YAAY,EAAE,MAAM,GACnB,2BAA2B,CA0B7B"}