cc-devflow 4.5.1 → 4.5.2

package/docs/examples/pdca-loop/README.md

@@ -4,7 +4,7 @@
 
 - Example version: `1.0.0`
 - Last reviewed: `2026-04-17`
-- Bound skills: `cc-roadmap@4.3.4`, `cc-plan@3.5.6`, `cc-do@1.5.2`, `cc-check@1.8.2`, `cc-act@1.6.2`
+- Bound skills: `cc-roadmap@4.3.4`, `cc-plan@3.5.6`, `cc-do@1.5.2`, `cc-check@1.8.4`, `cc-act@1.6.4`
 
 This folder shows one minimal but complete `cc-roadmap -> cc-plan -> cc-do -> cc-check -> cc-act` loop.
 

package/docs/examples/pdca-loop/changes/REQ-001-copy-invite-link/handoff/pr-brief.md

@@ -20,6 +20,25 @@
 - Base branch: `main`
 - PR / MR: not created yet
 
+## Review Range
+
+- Reviewed base SHA: `example-base`
+- Reviewed head SHA: `example-head`
+- Review packet: `planning/tasks.md#T001-T003`; `planning/design.md`
+- Finding triage: no findings
+- QA / claim evidence: `qa=pass`, `tests-pass=pass`, `requirements-met=pass`
+
+## Readiness Dashboard
+
+- Review freshness: `fresh`, reviewed `example-head`, current `example-head`
+- Review quality: `qualityScore=9`
+- Specialist review facets: `testing:pass`
+- QA coverage: `status=pass`, gaps `0`, e2eRequired `false`
+- Browser QA: `skipped`, example fixture uses targeted component evidence instead of a live browser
+- Failure ownership: no open failures recorded
+- Documentation release: README and CLAUDE unchanged for this scoped example
+- PR body accuracy: regenerate the PR body from this brief, current report-card, and current diff
+
 ## Summary
 
 - removes a small but visible sharing friction in the beta flow
@@ -35,6 +54,7 @@
 ## Verification Evidence
 
 - `report-card.json` verdict: `pass`
+- Merged-result verification: not applicable before merge
 - Fresh evidence:
   - `npm test -- src/features/share/ShareDialog.test.tsx`
   - `npm run lint -- src/features/share/ShareDialog.tsx`

package/docs/examples/pdca-loop/changes/REQ-001-copy-invite-link/review/report-card.json

@@ -3,6 +3,65 @@
   "verdict": "pass",
   "overall": "pass",
   "summary": "verdict=pass quick=2/2 strict=0/0 review=pass",
+  "specAlignment": "pass",
+  "specDeltaVerified": true,
+  "specSyncReady": true,
+  "runtime": {
+    "status": "pass",
+    "failureOwnership": []
+  },
+  "claimEvidence": [
+    {
+      "claim": "tests-pass",
+      "requiredProof": "fresh targeted test command with exit 0",
+      "commandOrArtifact": "npm test -- src/features/share/ShareDialog.test.tsx",
+      "exitStatus": 0,
+      "keyObservation": "share dialog targeted tests passed",
+      "status": "pass"
+    },
+    {
+      "claim": "requirements-met",
+      "requiredProof": "line-by-line planning/tasks.md and task-manifest.json checklist",
+      "commandOrArtifact": "planning/tasks.md + planning/task-manifest.json",
+      "exitStatus": null,
+      "keyObservation": "T001-T003 complete with spec/code review proof",
+      "status": "pass"
+    }
+  ],
+  "qa": {
+    "status": "pass",
+    "regressionProof": [],
+    "testQuality": [
+      {
+        "area": "share-dialog",
+        "checksRealBehavior": true,
+        "mockBoundary": "none",
+        "testOnlyProductionApi": false,
+        "status": "pass"
+      }
+    ],
+    "coverageAudit": {
+      "status": "pass",
+      "coveragePct": 80,
+      "pathMap": ["copy invite link success path", "clipboard fallback error path"],
+      "gaps": [],
+      "testsAdded": ["src/features/share/ShareDialog.test.tsx"],
+      "e2eRequired": false,
+      "evalRequired": false,
+      "qualityStars": "★★"
+    },
+    "browserEvidence": {
+      "status": "skipped",
+      "mode": "not-applicable",
+      "affectedRoutes": [],
+      "screenshots": [],
+      "consoleErrors": [],
+      "healthScore": null,
+      "issues": [],
+      "skipReason": "example fixture uses targeted component evidence instead of a live browser"
+    },
+    "tddException": null
+  },
   "quickGates": [
     {
       "name": "targeted-tests",
@@ -22,10 +81,35 @@
     "status": "pass",
     "summary": "Task review proof and requirement-level diff review both passed",
     "details": "T001-T003 have matching spec/code review proof and the diff stays inside the approved tiny-design boundary.",
+    "freshness": {
+      "status": "fresh",
+      "reviewedCommit": "example-head",
+      "currentCommit": "example-head",
+      "commitsSinceReview": 0,
+      "staleReason": ""
+    },
+    "qualityScore": 9,
+    "specialistReviews": [
+      {
+        "name": "testing",
+        "status": "pass",
+        "required": true,
+        "summary": "targeted tests cover the share dialog behavior for this example",
+        "skipReason": "",
+        "findings": []
+      }
+    ],
     "taskReviews": {
       "status": "pass",
       "required": true,
       "summary": "All completed tasks carry spec/code proof",
+      "reviewPacket": {
+        "baseSha": "example-base",
+        "headSha": "example-head",
+        "requirements": "planning/tasks.md#T001-T003",
+        "implemented": "copy invite link workflow",
+        "reviewerContext": "task manifest plus changed share dialog files"
+      },
       "reviewers": [],
       "findings": []
     },
@@ -33,12 +117,20 @@
       "status": "pass",
       "required": false,
       "summary": "No blocking requirement-level findings",
+      "reviewPacket": {
+        "baseSha": "example-base",
+        "headSha": "example-head",
+        "requirements": "planning/design.md",
+        "implemented": "copy invite link workflow",
+        "reviewerContext": "requirement diff, plan completion, scope drift, docs staleness"
+      },
       "reviewers": [],
       "findings": []
     },
     "findings": []
   },
   "blockingFindings": [],
+  "gaps": [],
   "reroute": "none",
   "timestamp": "2026-04-15T11:20:00.000Z"
 }

package/lib/skill-runtime/review.js

@@ -79,6 +79,7 @@ function makeFinding({
   status = 'open',
   fingerprint
 }) {
+  const confidenceScore = severityRank(severity) >= severityRank('important') ? 8 : 6;
   return {
     id,
     source,
@@ -91,7 +92,12 @@ function makeFinding({
     ...(typeof line === 'number' ? { line } : {}),
     action,
     status,
-    ...(fingerprint ? { fingerprint } : {})
+    confidenceScore,
+    fingerprint: fingerprint || `${source}:${category}:${id}`,
+    displayTier: status === 'informational'
+      ? 'info'
+      : (severityRank(severity) >= severityRank('important') ? 'blocking' : 'warning'),
+    suppressionReason: null
   };
 }
 
@@ -231,6 +237,14 @@ async function detectBaseRef(repoRoot) {
   return 'HEAD~1';
 }
 
+async function detectCurrentCommit(repoRoot) {
+  const result = await runCommand('git rev-parse --short HEAD', { cwd: repoRoot });
+  if (result.code === 0 && result.stdout.trim()) {
+    return result.stdout.trim();
+  }
+  return 'working-tree';
+}
+
 async function runCodexStructuredReview({ repoRoot, baseRef }) {
   const command = [
     'codex review',
@@ -530,6 +544,7 @@ async function runReviewSuite({ repoRoot, changeId, manifest, strict, skipReview
   const diffReview = await runDiffReviewSection({ repoRoot, strict, skipReview });
   const findings = flattenFindings(taskReviews, diffReview);
   const status = deriveReviewStatus(taskReviews, diffReview);
+  const currentCommit = await detectCurrentCommit(repoRoot);
   const details = [
     taskReviews.summary,
     diffReview.summary
@@ -539,6 +554,54 @@ async function runReviewSuite({ repoRoot, changeId, manifest, strict, skipReview
     status,
     summary: `Task review: ${taskReviews.status}. Diff review: ${diffReview.status}.`,
     details,
+    freshness: {
+      status: 'fresh',
+      reviewedCommit: currentCommit,
+      currentCommit,
+      commitsSinceReview: 0,
+      staleReason: ''
+    },
+    qualityScore: status === 'pass' ? 9 : (status === 'blocked' ? 5 : 3),
+    specialistReviews: [
+      {
+        name: 'testing',
+        status: taskReviews.status,
+        required: true,
+        summary: taskReviews.summary,
+        skipReason: '',
+        findings: []
+      }
+    ],
+    runtime: {
+      status: status === 'pass' ? 'pass' : (status === 'fail' ? 'fail' : 'blocked'),
+      failureOwnership: []
+    },
+    qa: {
+      status: 'pass',
+      regressionProof: [],
+      testQuality: [],
+      coverageAudit: {
+        status: 'pass',
+        coveragePct: null,
+        pathMap: [],
+        gaps: [],
+        testsAdded: [],
+        e2eRequired: false,
+        evalRequired: false,
+        qualityStars: ''
+      },
+      browserEvidence: {
+        status: 'skipped',
+        mode: 'not-applicable',
+        affectedRoutes: [],
+        screenshots: [],
+        consoleErrors: [],
+        healthScore: null,
+        issues: [],
+        skipReason: 'runtime verify did not identify a UI browser QA target'
+      },
+      tddException: null
+    },
     taskReviews,
     diffReview,
     findings

package/lib/skill-runtime/schemas.js

@@ -269,8 +269,26 @@ const GateResultSchema = z.object({
 });
 
 const ReviewSeveritySchema = z.enum(['critical', 'important', 'minor', 'info']);
-const ReviewActionSchema = z.enum(['fix_now', 'follow_up', 'cc-investigate', 'none']);
-const ReviewFindingStatusSchema = z.enum(['open', 'resolved', 'accepted', 'informational']);
+const ReviewActionSchema = z.enum([
+  'fix_now',
+  'follow_up',
+  'cc-investigate',
+  'reroute-cc-do',
+  'reroute-cc-plan',
+  'reroute-cc-investigate',
+  'document-follow-up',
+  'none'
+]);
+const ReviewFindingStatusSchema = z.enum([
+  'open',
+  'resolved',
+  'accepted',
+  'informational',
+  'accepted-fixed',
+  'rejected-with-evidence',
+  'deferred-minor',
+  'clarification-needed'
+]);
 
 const ReviewEvidenceSchema = z.object({
   kind: z.enum(['command', 'file', 'note']),
@@ -291,7 +309,11 @@ const ReviewFindingSchema = z.object({
   line: z.number().int().min(1).optional(),
   action: ReviewActionSchema.default('none'),
   status: ReviewFindingStatusSchema.default('open'),
-  fingerprint: z.string().optional()
+  fingerprint: z.string().optional(),
+  confidence: z.enum(['high', 'medium', 'low']).optional(),
+  confidenceScore: z.number().min(1).max(10).optional(),
+  displayTier: z.enum(['blocking', 'warning', 'info', 'suppressed']).optional(),
+  suppressionReason: z.string().nullable().optional()
 });
 
 const ReviewerResultSchema = z.object({
@@ -317,6 +339,28 @@ const ReportReviewSchema = z.object({
   status: ReviewDecisionStatusSchema.default('skipped'),
   summary: z.string().default(''),
   details: z.string().default(''),
+  freshness: z.object({
+    status: z.enum(['fresh', 'stale', 'unknown', 'not-applicable']).default('unknown'),
+    reviewedCommit: z.string().default(''),
+    currentCommit: z.string().default(''),
+    commitsSinceReview: z.number().int().min(0).nullable().default(null),
+    staleReason: z.string().default('')
+  }).default({
+    status: 'unknown',
+    reviewedCommit: '',
+    currentCommit: '',
+    commitsSinceReview: null,
+    staleReason: ''
+  }),
+  qualityScore: z.number().min(0).max(10).nullable().default(null),
+  specialistReviews: z.array(z.object({
+    name: z.string().min(1),
+    status: ReviewDecisionStatusSchema,
+    required: z.boolean().default(false),
+    summary: z.string().default(''),
+    skipReason: z.string().default(''),
+    findings: z.array(ReviewFindingSchema).default([])
+  })).default([]),
   taskReviews: ReviewSectionSchema.default({
     status: 'skipped',
     required: false,
@@ -334,15 +378,118 @@ const ReportReviewSchema = z.object({
   findings: z.array(ReviewFindingSchema).default([])
 });
 
+const ClaimEvidenceSchema = z.object({
+  claim: z.string().min(1),
+  requiredProof: z.string().min(1),
+  commandOrArtifact: z.string().min(1),
+  exitStatus: z.number().int().nullable().optional(),
+  keyObservation: z.string().default(''),
+  status: ReviewDecisionStatusSchema
+});
+
+const RuntimeFailureOwnershipSchema = z.object({
+  failure: z.string().min(1),
+  classification: z.enum(['in-branch', 'pre-existing', 'environment', 'ambiguous']),
+  touchedByDiff: z.boolean().optional(),
+  evidence: z.string().default(''),
+  action: z.string().default(''),
+  status: z.string().default('open')
+});
+
+const ReportRuntimeSchema = z.object({
+  status: ReviewDecisionStatusSchema.default('skipped'),
+  failureOwnership: z.array(RuntimeFailureOwnershipSchema).default([])
+}).default({
+  status: 'skipped',
+  failureOwnership: []
+});
+
+const QaSchema = z.object({
+  status: ReviewDecisionStatusSchema.default('skipped'),
+  regressionProof: z.array(z.record(z.any())).default([]),
+  testQuality: z.array(z.record(z.any())).default([]),
+  coverageAudit: z.object({
+    status: ReviewDecisionStatusSchema.default('skipped'),
+    coveragePct: z.number().nullable().default(null),
+    pathMap: z.array(z.string()).default([]),
+    gaps: z.array(z.string()).default([]),
+    testsAdded: z.array(z.string()).default([]),
+    e2eRequired: z.boolean().default(false),
+    evalRequired: z.boolean().default(false),
+    qualityStars: z.string().default('')
+  }).default({
+    status: 'skipped',
+    coveragePct: null,
+    pathMap: [],
+    gaps: [],
+    testsAdded: [],
+    e2eRequired: false,
+    evalRequired: false,
+    qualityStars: ''
+  }),
+  browserEvidence: z.object({
+    status: ReviewDecisionStatusSchema.default('skipped'),
+    mode: z.string().default('not-applicable'),
+    affectedRoutes: z.array(z.string()).default([]),
+    screenshots: z.array(z.string()).default([]),
+    consoleErrors: z.array(z.string()).default([]),
+    healthScore: z.number().nullable().default(null),
+    issues: z.array(z.record(z.any())).default([]),
+    skipReason: z.string().default('')
+  }).default({
+    status: 'skipped',
+    mode: 'not-applicable',
+    affectedRoutes: [],
+    screenshots: [],
+    consoleErrors: [],
+    healthScore: null,
+    issues: [],
+    skipReason: ''
+  }),
+  tddException: z.string().nullable().default(null)
+}).default({
+  status: 'skipped',
+  regressionProof: [],
+  testQuality: [],
+  coverageAudit: {
+    status: 'skipped',
+    coveragePct: null,
+    pathMap: [],
+    gaps: [],
+    testsAdded: [],
+    e2eRequired: false,
+    evalRequired: false,
+    qualityStars: ''
+  },
+  browserEvidence: {
+    status: 'skipped',
+    mode: 'not-applicable',
+    affectedRoutes: [],
+    screenshots: [],
+    consoleErrors: [],
+    healthScore: null,
+    issues: [],
+    skipReason: ''
+  },
+  tddException: null
+});
+
 const ReportCardSchema = z.object({
   changeId: ChangeIdSchema,
   verdict: z.enum(['pass', 'fail', 'blocked']).optional(),
   overall: z.enum(['pass', 'fail']),
   summary: z.string().default(''),
+  specAlignment: z.enum(['pass', 'fail', 'blocked']).default('blocked'),
+  specDeltaVerified: z.boolean().default(false),
+  specSyncReady: z.boolean().default(false),
+  runtime: ReportRuntimeSchema,
+  claimEvidence: z.array(ClaimEvidenceSchema).default([]),
+  qa: QaSchema,
   quickGates: z.array(GateResultSchema),
   strictGates: z.array(GateResultSchema),
   review: ReportReviewSchema,
   blockingFindings: z.array(z.string()),
+  gaps: z.array(z.string()).default([]),
   reroute: z.enum(['none', 'cc-do', 'cc-investigate', 'cc-plan']).default('none'),
   timestamp: z.string().datetime()
 });

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "cc-devflow",
-    "version": "4.5.1",
+    "version": "4.5.2",
     "description": "Multi-platform CLI and skill pack for agent coding",
     "main": "bin/cc-devflow.js",
     "bin": {