agent-roast 0.1.3 → 0.2.0

package/dist/cli.js

@@ -1,31 +1,87 @@
 #!/usr/bin/env node
 import {
+  GitError,
+  GitResolutionError,
+  InvalidDetectorError,
+  auditPullRequest,
+  formatGithubStepSummary,
   roastRepository
-} from "./chunk-EPPMO4JE.js";
+} from "./chunk-FHRPVXCI.js";
 
 // src/cli.ts
 import { Command } from "commander";
 import { createRequire } from "module";
+import * as fs from "fs";
 var require2 = createRequire(import.meta.url);
 var pkg = require2("../package.json");
 var program = new Command();
-program.name("agent-roast").description("Audit your git history for AI coding agent infractions and panic loops").version(pkg.version || "0.1.2").argument("[path]", "Path to git repository (default: current directory)", ".").option("-a, --all", "Audit ALL commits regardless of AI attribution tags", false).option("-s, --since <time>", "Time window for git analysis", "90 days ago").option("-v, --verbose", "Show commit SHAs and line snippets for all infractions", false).option("--json", "Output results as raw JSON", false).action(async (repoPath, options) => {
+program.name("agent-roast").description("Audit your git history or PR diffs for AI coding shortcuts and panic loops").version(pkg.version || "0.2.0").argument("[path]", "Path to git repository (default: current directory)", ".").option("-a, --all", "Audit ALL commits regardless of AI attribution tags", false).option("-s, --since <time>", "Time window for git analysis", "90 days ago").option("-v, --verbose", "Show commit SHAs and line snippets for all infractions", false).option("--json", "Output results as raw JSON", false).option("--base <ref>", "Base git ref/branch for PR mode audit (e.g. origin/main)").option("--head <ref>", "Head git ref/SHA for PR mode audit (default: HEAD)", "HEAD").option("--fail-on <rules>", "Comma-separated detectors that trigger CI failure", "test-skip").option("--format <format>", "Output format: terminal, json, github", "terminal").option("--authors", "Display author names and emails in report", false).action(async (repoPath, options) => {
   try {
-    const result = await roastRepository({
-      cwd: repoPath,
-      since: options.since,
-      all: options.all,
-      verbose: options.verbose,
-      json: options.json
-    });
-    if (options.json) {
-      console.log(JSON.stringify(result.summary, null, 2));
+    if (process.env.GITHUB_EVENT_NAME === "pull_request_target") {
+      console.warn(
+        "Warning: pull_request_target runs with elevated repository privileges. agent-roast recommends running on 'pull_request'."
+      );
+    }
+    if (options.base) {
+      const failOnRules = options.failOn ? options.failOn.split(",").map((s) => s.trim()).filter(Boolean) : ["test-skip"];
+      const chosenFormat = options.json ? "json" : options.format || "terminal";
+      const prResult = await auditPullRequest({
+        cwd: repoPath,
+        base: options.base,
+        head: options.head || "HEAD",
+        failOn: failOnRules,
+        format: chosenFormat,
+        verbose: options.verbose,
+        authors: options.authors
+      });
+      if (process.env.GITHUB_STEP_SUMMARY) {
+        try {
+          fs.appendFileSync(
+            process.env.GITHUB_STEP_SUMMARY,
+            formatGithubStepSummary(prResult) + "\n"
+          );
+        } catch (err) {
+          console.error(`Warning: Failed to write to GITHUB_STEP_SUMMARY: ${err.message}`);
+        }
+      }
+      if (process.env.GITHUB_OUTPUT) {
+        try {
+          fs.appendFileSync(
+            process.env.GITHUB_OUTPUT,
+            `passed=${prResult.passed}
+infractions-count=${prResult.infractions.length}
+has-supported-changes=${prResult.hasSupportedChanges}
+`
+          );
+        } catch (err) {
+          console.error(`Warning: Failed to write to GITHUB_OUTPUT: ${err.message}`);
+        }
+      }
+      console.log(prResult.output);
+      process.exitCode = prResult.exitCode;
     } else {
-      console.log(result.output);
+      const result = await roastRepository({
+        cwd: repoPath,
+        since: options.since,
+        all: options.all,
+        verbose: options.verbose,
+        json: options.json
+      });
+      if (options.json) {
+        console.log(JSON.stringify(result.summary, null, 2));
+      } else {
+        console.log(result.output);
+      }
+      process.exitCode = 0;
     }
   } catch (err) {
-    console.error(`Error auditing repository: ${err.message}`);
-    process.exit(1);
+    if (err instanceof GitResolutionError || err instanceof InvalidDetectorError || err instanceof GitError || err.name === "GitError") {
+      console.error(`agent-roast error: ${err.message}`);
+      process.exitCode = 2;
+    } else {
+      console.error(`Error auditing repository: ${err.message}`);
+      process.exitCode = 1;
+    }
   }
 });
 program.parse(process.argv);

package/dist/index.d.ts

@@ -9,15 +9,19 @@ interface CommitInfo {
     isAiAttributed: boolean;
     aiSignatures: string[];
 }
+type DetectorType = "test-skip" | "type-escape" | "swallowed-error" | "panic-loop";
+declare const VALID_DETECTORS: readonly DetectorType[];
 interface Infraction {
-    type: "test-skip" | "type-escape" | "swallowed-error" | "panic-loop";
+    type: DetectorType;
     file?: string;
+    lineNumber?: number;
     lineSnippet?: string;
     commitHash: string;
     commitDate: string;
     reason: string;
 }
 interface MetricSummary {
+    schemaVersion: string;
     totalLinesAdded: number;
     aiLinesAdded: number;
     totalCommits: number;
@@ -27,10 +31,12 @@ interface MetricSummary {
     swallowedErrors: Infraction[];
     panicLoops: Infraction[];
     rawScore: number;
-    score: number;
+    score: number | null;
     isSufficientData: boolean;
     archetype: string;
     archetypeDescription: string;
+    skippedLongLines?: number;
+    skippedUnknownFiles?: number;
 }
 interface RoastOptions {
     cwd?: string;
@@ -38,6 +44,33 @@ interface RoastOptions {
     all?: boolean;
     verbose?: boolean;
     json?: boolean;
+    authors?: boolean;
+}
+interface PrAuditOptions {
+    cwd?: string;
+    base: string;
+    head: string;
+    failOn?: string[];
+    format?: "terminal" | "json" | "github";
+    verbose?: boolean;
+    authors?: boolean;
+}
+interface PrAuditResult {
+    schemaVersion: string;
+    baseSha: string;
+    headSha: string;
+    mergeBaseSha: string;
+    hasSupportedChanges: boolean;
+    filesInspected: number;
+    linesAdded: number;
+    defectDensityPer100Lines: number;
+    infractions: Infraction[];
+    failedRules: string[];
+    passed: boolean;
+    skippedLongLines: number;
+    skippedUnknownFiles: number;
+    output: string;
+    exitCode: number;
 }
 
 interface AiAttributionResult {
@@ -53,14 +86,69 @@ interface ParsedDiffLine {
 interface ParsedFileDiff {
     path: string;
     addedLines: ParsedDiffLine[];
+    deleted?: boolean;
 }
 interface ParsedCommit extends CommitInfo {
     files: ParsedFileDiff[];
     totalAddedCount: number;
 }
-declare function parseGitLogStream(stream: Readable, onCommit: (commit: ParsedCommit) => void): Promise<void>;
+interface ParseDiffResult {
+    files: ParsedFileDiff[];
+    totalAdded: number;
+    skippedLongLines: number;
+    skippedUnknownFiles: number;
+}
+declare const RECORD_SEPARATOR = "\u001E__ROAST_REC__\u001E";
+declare const FIELD_SEPARATOR = "\u001F__ROAST_FIELD__\u001F";
+declare class GitError extends Error {
+    stderr: string;
+    code: number | null;
+    constructor(stderr: string, code: number | null);
+}
+declare const HERMETIC_GIT_FLAGS: readonly ["-c", "core.quotepath=false", "-c", "diff.noprefix=false", "-c", "diff.mnemonicPrefix=false", "--no-pager"];
+declare function getHermeticGitEnv(extraEnv?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+declare function parseGitLogStream(stream: Readable, onCommit: (commit: ParsedCommit, stats: {
+    skippedLongLines: number;
+    skippedUnknownFiles: number;
+}) => void): Promise<{
+    totalSkippedLongLines: number;
+    totalSkippedUnknownFiles: number;
+}>;
+/**
+ * Unquotes git C-style escaped path (e.g. "b/foo\"bar.ts" or "b/\321\202\320\265\321\201\321\202.ts")
+ * decoding octal escape sequences and full Unicode code points safely without surrogate splitting.
+ */
+declare function unquoteGitPath(pathStr: string): string;
+/**
+ * Parses raw git diff text into structured files and added lines.
+ * Deterministic, robust against desynchronization and minified files.
+ */
+declare function parseDiff(rawDiff: string): ParseDiffResult;
 declare function streamGitLog(cwd?: string, since?: string): Readable;
+declare function streamGitDiff(cwd: string, baseSha: string, headSha: string): Readable;
+/**
+ * Validates and resolves a git ref to a full commit SHA safely using --end-of-options.
+ * Exits with code 2 on failure.
+ */
+declare function resolveCommitSha(cwd: string, ref: string, roleName?: string): string;
+/**
+ * Finds the merge-base between two commit SHAs safely using --end-of-options.
+ */
+declare function findMergeBase(cwd: string, baseSha: string, headSha: string): string;
+declare class GitResolutionError extends Error {
+    constructor(message: string);
+}
 
+declare function isCodeFile(filePath: string): boolean;
+/**
+ * Audits a collection of file diffs (e.g. for PR mode) against detector rules.
+ */
+declare function auditFileDiffs(files: ParsedFileDiff[], commitHash?: string, commitDate?: string): {
+    infractions: Infraction[];
+    hasSupportedChanges: boolean;
+    filesInspected: number;
+    linesAdded: number;
+};
 /**
  * Strips quoted string literals and regex literals from a line so that
  * test fixtures and string constants (e.g. { line: "it.skip" }) are not flagged.
@@ -75,11 +163,18 @@ declare class MetricsCollector {
     private typeEscapes;
     private swallowedErrors;
     private panicLoops;
-    private lastFixCommit;
+    private skippedLongLines;
+    private skippedUnknownFiles;
+    private activePanicChain;
     private includeAll;
     constructor(options?: {
         all?: boolean;
     });
+    recordSkipped(stats: {
+        skippedLongLines?: number;
+        skippedUnknownFiles?: number;
+    }): void;
+    private flushPanicChain;
     processCommit(commit: ParsedCommit): void;
     getSummary(): MetricSummary;
 }
@@ -89,10 +184,24 @@ declare function formatTerminalCard(summary: MetricSummary, options: {
     repoName: string;
     verbose?: boolean;
 }): string;
+declare function formatPrTerminalCard(result: PrAuditResult): string;
+/**
+ * Generates GitHub Actions workflow commands (::error and ::warning)
+ * respecting GitHub's limits (max 10 annotations per level per step).
+ */
+declare function formatGithubAnnotations(result: PrAuditResult): string;
+/**
+ * Generates GitHub Step Summary Markdown
+ */
+declare function formatGithubStepSummary(result: PrAuditResult): string;
 
+declare class InvalidDetectorError extends Error {
+    constructor(message: string);
+}
 declare function roastRepository(options?: RoastOptions): Promise<{
     summary: MetricSummary;
     output: string;
 }>;
+declare function auditPullRequest(options: PrAuditOptions): Promise<PrAuditResult>;
 
-export { type AiAttributionResult, type CommitInfo, type Infraction, type MetricSummary, MetricsCollector, type ParsedCommit, type ParsedDiffLine, type ParsedFileDiff, type RoastOptions, detectAiAttribution, formatTerminalCard, generateShareUrl, parseGitLogStream, roastRepository, streamGitLog, stripStringAndRegexLiterals };
+export { type AiAttributionResult, type CommitInfo, type DetectorType, FIELD_SEPARATOR, GitError, GitResolutionError, HERMETIC_GIT_FLAGS, type Infraction, InvalidDetectorError, type MetricSummary, MetricsCollector, type ParseDiffResult, type ParsedCommit, type ParsedDiffLine, type ParsedFileDiff, type PrAuditOptions, type PrAuditResult, RECORD_SEPARATOR, type RoastOptions, VALID_DETECTORS, auditFileDiffs, auditPullRequest, detectAiAttribution, findMergeBase, formatGithubAnnotations, formatGithubStepSummary, formatPrTerminalCard, formatTerminalCard, generateShareUrl, getHermeticGitEnv, isCodeFile, parseDiff, parseGitLogStream, resolveCommitSha, roastRepository, streamGitDiff, streamGitLog, stripStringAndRegexLiterals, unquoteGitPath };

package/dist/index.js

@@ -1,21 +1,59 @@
 #!/usr/bin/env node
 import {
+  FIELD_SEPARATOR,
+  GitError,
+  GitResolutionError,
+  HERMETIC_GIT_FLAGS,
+  InvalidDetectorError,
   MetricsCollector,
+  RECORD_SEPARATOR,
+  VALID_DETECTORS,
+  auditFileDiffs,
+  auditPullRequest,
   detectAiAttribution,
+  findMergeBase,
+  formatGithubAnnotations,
+  formatGithubStepSummary,
+  formatPrTerminalCard,
   formatTerminalCard,
   generateShareUrl,
+  getHermeticGitEnv,
+  isCodeFile,
+  parseDiff,
   parseGitLogStream,
+  resolveCommitSha,
   roastRepository,
+  streamGitDiff,
   streamGitLog,
-  stripStringAndRegexLiterals
-} from "./chunk-EPPMO4JE.js";
+  stripStringAndRegexLiterals,
+  unquoteGitPath
+} from "./chunk-FHRPVXCI.js";
 export {
+  FIELD_SEPARATOR,
+  GitError,
+  GitResolutionError,
+  HERMETIC_GIT_FLAGS,
+  InvalidDetectorError,
   MetricsCollector,
+  RECORD_SEPARATOR,
+  VALID_DETECTORS,
+  auditFileDiffs,
+  auditPullRequest,
   detectAiAttribution,
+  findMergeBase,
+  formatGithubAnnotations,
+  formatGithubStepSummary,
+  formatPrTerminalCard,
   formatTerminalCard,
   generateShareUrl,
+  getHermeticGitEnv,
+  isCodeFile,
+  parseDiff,
   parseGitLogStream,
+  resolveCommitSha,
   roastRepository,
+  streamGitDiff,
   streamGitLog,
-  stripStringAndRegexLiterals
+  stripStringAndRegexLiterals,
+  unquoteGitPath
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-roast",
-  "version": "0.1.3",
+  "version": "0.2.0",
   "description": "Zero-telemetry CLI scorecard analyzing git history for AI coding agent infractions and panic loops",
   "type": "module",
   "main": "./dist/index.js",