agent-roast 0.10.0 → 0.10.1

package/README.md

@@ -98,6 +98,10 @@ re-labeled.
 It is a **review aid**: it cannot prove who wrote a change or that code is correct, and it
 reads text, not program semantics. A green result is not a quality certificate.
 
+**Want to see what it says about your repository?** [docs/pilot.md](docs/pilot.md) has a
+five-minute look back, an advisory workflow that never fails a pull request, and a feedback form.
+Counts are enough; no code is needed.
+
 ### Quick start
 
 ```bash
@@ -114,8 +118,9 @@ npx agent-roast --all --verbose
 ```
 
 A finding includes its file and line, the evidence, and a concrete next step.
-`--format json|markdown|sarif|github` are available; terminal output shows the first
-20 findings.
+`--format json|markdown|sarif|github` are available; terminal output shows the 20 most
+important findings (rules that block first, then the before/after rules, then the noisier
+line patterns).
 
 ### Context review for pull requests
 
@@ -175,12 +180,12 @@ regressions) may appear in the report/summary rather than as an inline PR annota
 Use a separate SARIF category for introduced-findings review; it does not represent
 a full scan of all outstanding alerts.
 
-Install 0.10.0: `npx agent-roast@0.10.0 review --base origin/main`. For local development,
+Install 0.10.1: `npx agent-roast@0.10.1 review --base origin/main`. For local development,
 run `npm run build` and use `node dist/cli.js`.
 
 ### Precise exceptions (since 0.8.0)
 
-Use `npx agent-roast@0.10.0 check --format json`, or build this checkout with
+Use `npx agent-roast@0.10.1 check --format json`, or build this checkout with
 `npm run build` and run `node dist/cli.js`.
 
 Some skipped integrations or abstract stubs are intentional. In 0.8.0 you can accept
@@ -416,7 +421,7 @@ jobs:
 
 To pilot the Action without blocking on findings, set `advisory: true`. It passes
 an explicit empty fail-on list; invalid configuration, Git errors and incomplete
-scans still fail. The `v1` Action installs 0.10.0. The CLI equivalent is `--fail-on ''`.
+scans still fail. The `v1` Action installs 0.10.1. The CLI equivalent is `--fail-on ''`.
 
 > **Security Note:** `agent-roast` runs in an isolated runner directory (`$RUNNER_TEMP`) with `--ignore-scripts` to neutralize malicious `.npmrc` files in untrusted pull requests. `pull_request_target` is not supported.
 
@@ -504,7 +509,7 @@ node scripts/verify-user-workflows.mjs dist/cli.js
 against current code. Regression tests use disposable Git repositories. The programmatic
 `auditPullRequest({ staged: true })` API retains the legacy added-lines contract;
 use `reviewStagedChanges()` for the new context comparison and `ReviewResult`.
-The composite Action installs exactly 0.10.0. For local development, use
+The composite Action installs exactly 0.10.1. For local development, use
 `node dist/cli.js --staged` after building.
 
 ### Author & Support

package/dist/{chunk-NSGANOZ5.js → chunk-FFKEBW6D.js}

@@ -1853,7 +1853,7 @@ function formatPrTerminalCard(result) {
   } else {
     lines.push(pc.bold(`  INFRACTIONS DETECTED (${result.infractions.length})`));
     lines.push(pc.dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
-    for (const inf of result.infractions) {
+    for (const inf of mostImportantFirst(result.infractions, result.failedRules)) {
       const isFailedRule = result.failedRules.includes(inf.type);
       const badge = isFailedRule ? pc.red("FAIL") : pc.yellow("WARN");
       const loc = `${inf.file || "unknown"}:${inf.lineNumber || 1}`;
@@ -1877,12 +1877,25 @@ function formatPrTerminalCard(result) {
   lines.push("");
   return lines.join("\n");
 }
-function sortInfractionsDeterministic(infractions) {
-  const getLevelRank = (type) => {
-    return type === "test-skip" || type === "trivial-assert" || type === "swallowed-error" ? 0 : 1;
-  };
+var RULE_PRIORITY = {
+  "assertion-weakened": 0,
+  "guard-weakened": 0,
+  "test-skip": 0,
+  "test-focus": 0,
+  "trivial-assert": 0,
+  "assertion-removed": 1,
+  "expectation-rewritten": 1,
+  "test-removed": 1
+};
+function findingRank(type, failedRules) {
+  return failedRules.includes(type) ? -1 : RULE_PRIORITY[type] ?? 2;
+}
+function mostImportantFirst(findings, failedRules) {
+  return [...findings].sort((a, b) => findingRank(a.type, failedRules) - findingRank(b.type, failedRules));
+}
+function sortInfractionsDeterministic(infractions, failedRules) {
   return [...infractions].sort((a, b) => {
-    const rankDiff = getLevelRank(a.type) - getLevelRank(b.type);
+    const rankDiff = findingRank(a.type, failedRules) - findingRank(b.type, failedRules);
     if (rankDiff !== 0) return rankDiff;
     const fileA = a.file || "";
     const fileB = b.file || "";
@@ -1896,7 +1909,7 @@ function escapeCommand(value, property = false) {
 }
 function formatGithubAnnotations(result) {
   const outputLines = [];
-  const sorted = sortInfractionsDeterministic(result.infractions);
+  const sorted = sortInfractionsDeterministic(result.infractions, result.failedRules);
   const MAX_PER_LEVEL = 10;
   let errorCount = 0;
   let warnCount = 0;
@@ -1951,7 +1964,7 @@ function formatGithubStepSummary(result) {
     lines.push("");
     lines.push("| Type | File:Line | Description | Snippet |");
     lines.push("| --- | --- | --- | --- |");
-    const sorted = sortInfractionsDeterministic(result.infractions);
+    const sorted = sortInfractionsDeterministic(result.infractions, result.failedRules);
     for (const inf of sorted) {
       const loc = inf.file ? markdownCell(`${inf.file}:${inf.lineNumber || 1}`) : "history";
       const snippet = inf.lineSnippet ? markdownCell(inf.lineSnippet) : "-";
@@ -1991,7 +2004,7 @@ function formatPrMarkdownComment(result) {
     lines.push("");
     lines.push("| Type | File:Line | Description | Snippet |");
     lines.push("| :--- | :--- | :--- | :--- |");
-    const sorted = sortInfractionsDeterministic(result.infractions);
+    const sorted = sortInfractionsDeterministic(result.infractions, result.failedRules);
     for (const inf of sorted) {
       const loc = inf.file ? markdownCell(`${inf.file}:${inf.lineNumber || 1}`) : "history";
       const snippet = inf.lineSnippet ? markdownCell(inf.lineSnippet) : "-";
@@ -2051,7 +2064,7 @@ function formatCheckTerminal(result) {
   ];
   lines.push(...exceptionTerminal(result));
   if (result.staleBaselineCount) lines.push(`  ${result.staleBaselineCount} baseline findings no longer present (or now disabled/ignored).`);
-  for (const inf of result.infractions.slice(0, 20)) {
+  for (const inf of mostImportantFirst(result.infractions, result.failedRules).slice(0, 20)) {
     lines.push("", `  ${result.failedRules.includes(inf.type) ? pc.red("FAIL") : pc.yellow("WARN")} [${inf.type}] ${terminalText(inf.file || "unknown")}:${inf.lineNumber}`, `    ${terminalText(inf.lineSnippet || inf.reason)}`);
     if (inf.suggestion) lines.push(`    Next: ${terminalText(inf.suggestion)}`);
   }
@@ -2076,7 +2089,7 @@ function formatCheckMarkdown(result) {
     "| Rule | Location | Finding | Next step |",
     "| --- | --- | --- | --- |"
   ];
-  for (const inf of result.infractions) lines.push(`| ${inf.type} | ${markdownCell(`${inf.file}:${inf.lineNumber}`)} | ${markdownCell(inf.lineSnippet || inf.reason)} | ${markdownCell(inf.suggestion || "Review this occurrence.")} |`);
+  for (const inf of mostImportantFirst(result.infractions, result.failedRules)) lines.push(`| ${inf.type} | ${markdownCell(`${inf.file}:${inf.lineNumber}`)} | ${markdownCell(inf.lineSnippet || inf.reason)} | ${markdownCell(inf.suggestion || "Review this occurrence.")} |`);
   lines.push(...exceptionMarkdown(result));
   if (result.staleBaselineCount) lines.push("", `${result.staleBaselineCount} baseline findings no longer present (or now disabled/ignored).`);
   for (const skipped of result.skippedFiles) lines.push("", `Not scanned: ${markdownCell(skipped.file)} \u2014 ${markdownCell(skipped.reason)}`);
@@ -2094,7 +2107,7 @@ function formatReviewTerminal(result) {
   lines.push(...exceptionTerminal(result));
   if (result.policyChanges.length) lines.push("  Candidate policy changes were ignored; adopt them separately after review.");
   if (result.excludedFiles || result.unsupportedFiles) lines.push(`  ${result.excludedFiles} excluded \xB7 ${result.unsupportedFiles} unsupported/non-source changes`);
-  for (const finding2 of result.infractions.slice(0, 20)) {
+  for (const finding2 of mostImportantFirst(result.infractions, result.failedRules).slice(0, 20)) {
     lines.push(
       "",
       `  ${result.failedRules.includes(finding2.type) ? "FAIL" : "WARN"} [${finding2.type}] ${terminalText(finding2.file || "unknown")}:${finding2.lineNumber}`,
@@ -2120,7 +2133,7 @@ function formatReviewMarkdown(result) {
   ];
   if (result.policyChanges.length) lines.push("Candidate policy changes were ignored. This review uses the supplied base commit's policy.", "");
   lines.push("| New finding | Head location | Evidence | Next step |", "| --- | --- | --- | --- |");
-  for (const finding2 of result.infractions) lines.push(`| ${finding2.type} | ${markdownCell(`${finding2.file}:${finding2.lineNumber}`)} | ${markdownCell(finding2.lineSnippet || finding2.reason)} | ${markdownCell(finding2.suggestion || "Review this occurrence.")} |`);
+  for (const finding2 of mostImportantFirst(result.infractions, result.failedRules)) lines.push(`| ${finding2.type} | ${markdownCell(`${finding2.file}:${finding2.lineNumber}`)} | ${markdownCell(finding2.lineSnippet || finding2.reason)} | ${markdownCell(finding2.suggestion || "Review this occurrence.")} |`);
   lines.push(...exceptionMarkdown(result));
   if (result.removedFindings.length) {
     lines.push(

package/dist/cli.js

@@ -22,7 +22,7 @@ import {
   roastRepository,
   terminalText,
   writeBaseline
-} from "./chunk-NSGANOZ5.js";
+} from "./chunk-FFKEBW6D.js";
 
 // src/cli.ts
 import { Command } from "commander";

package/dist/index.js

@@ -63,7 +63,7 @@ import {
   unquoteGitPath,
   validateExceptions,
   writeBaseline
-} from "./chunk-NSGANOZ5.js";
+} from "./chunk-FFKEBW6D.js";
 export {
   CONFIG_FILENAMES,
   ConfigError,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-roast",
-  "version": "0.10.0",
+  "version": "0.10.1",
   "description": "Offline review for AI-assisted changes: catches weakened tests, lowered quality gates, skipped tests and swallowed errors",
   "type": "module",
   "main": "./dist/index.js",