cortad 0.3.1-rc.6 → 0.3.1-rc.7

package/lib/text.mjs

@@ -144,6 +144,17 @@ const moveText = (m) => `held ${kn(m.before)} readings before, ${kn(m.after)} af
 // Over zero pairs there is no move to print: the line says verification is unavailable and why,
 // never "no change, 0 points" measured on nothing. The visible side's reason is the said line.
 function verifyLines(v) {
+  // An access verify is a re-knock, not a trial move: the routes side by side, then the count.
+  if (v.access) {
+    const lines = [`Verify of ${v.findingId}.`];
+    for (const r of v.routes ?? []) {
+      const then = r.wasOpen ? `answered ${r.before} with no sign-in` : `refused (${r.before || "no answer"})`;
+      const now = r.nowOpen ? `answers ${r.after} with no sign-in` : r.after ? `refuses (${r.after})` : "did not answer";
+      lines.push(`  ${r.method} ${r.route}: ${then}, now ${now}.`);
+    }
+    if (v.said) lines.push(v.said);
+    return lines;
+  }
   const lines = [`Verify of ${v.findingId}${v.path ? ` at ${at(v.path, v.line)}` : ""}.`];
   if (v.visible && !v.visible.unavailable) lines.push(`Visible trials: ${moveText(v.visible)}`);
   if (v.holdout?.unavailable) lines.push(`Held-out trials: verification unavailable: ${v.holdout.unavailable}.`);
@@ -233,6 +244,9 @@ function findingsHead(d) {
   if (reads) lines.push(reads);
   if (d.baseRunId) lines.push(`Compared with run ${d.baseRunId}.`);
   for (const s of [d.read, d.heldBack, d.findings?.length ? null : d.why]) if (s) lines.push(s);
+  // A finding in a situation the run keeps back: what failed and where, so the rule can be fixed;
+  // its inputs and trials stay unseen, and verify replays it all the same.
+  for (const k of d.keptBack ?? []) lines.push(`Kept back ${k.id}: "${clip(k.asks, 160)}"${k.file ? ` at ${at(k.file, k.line)}` : ""}, held ${kn(k.rate)} at reply ${num(k.reply)}${k.quote ? `; the reply said "${clip(k.quote, 120)}"` : ""}. Its inputs are not shown; verify ${k.id} replays them.`);
   return lines.join("\n");
 }
 
@@ -271,6 +285,17 @@ function findingsPages(d, budget = PAGE_CHARS - 60) {
 }
 
 function findingBlock(f, placed) {
+  // A gate the run knocked open: the route, the address, the request sent and the status it answered
+  // with no sign-in. Its own words, then how to prove the fix.
+  if (f.kind === "access-open") {
+    const lines = [`${f.id}  ${f.says}`];
+    if (f.path) lines.push(`  At ${at(f.path, f.line)}`);
+    if (f.standard) lines.push(`  Standard: ${clip(f.standard, 200)}`);
+    lines.push(`  Sent: ${f.request.method} ${f.request.path}${f.request.body ? ` ${clip(f.request.body, 200)}` : ""}${f.as === "another-user" ? " as another user" : " with no sign-in"}`);
+    lines.push(`  Answered: ${f.status}${has(f.response) && f.response ? `, ${clip(f.response, 400)}` : ""}`);
+    lines.push(`  Replay: verify ${f.id}`);
+    return lines.join("\n");
+  }
   const lines = [`${f.id}  ${f.asks}`];
   if (!placed && f.file) lines.push(`  At ${at(f.file, f.line)}`);
   if (f.criteria) lines.push(`  Criteria: ${clip(f.criteria, 600)}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cortad",
-  "version": "0.3.1-rc.6",
+  "version": "0.3.1-rc.7",
   "description": "Connects the AI app on your machine to Cortad for test conversations, and gives your coding agent the MCP and skill to run them. No dependencies.",
   "bin": {
     "cortad": "local.mjs"