dsh-auto-review 0.4.0

package/lib/types/events.js

@@ -0,0 +1,369 @@
+/**
+ * Durable session vocabulary for `dsh-auto-review`: the `autoReview/state`
+ * per-session override, the `autoReview/verdict` audit event, and the pure
+ * folds that read them back from a session log.
+ *
+ * The model-visible ⟺ logged invariant holds by construction: the verdict is
+ * log-only (UI-auditable, never in the model transcript), and the only
+ * model-visible auto-review content is the deny reason injected into the
+ * denied call's `tool/result`, which carries the `reviewId` marker that links
+ * it back to this event.
+ * @module dsh-auto-review/events
+ */
+/** Closed {@link AutoReviewFallback} list for runtime normalization. */
+export const AUTO_REVIEW_FALLBACKS = ['timeout', 'cancelled', 'unavailable', 'schema'];
+/**
+ * Brand a string as an {@link AutoReviewVerdictId}.
+ * @param id - the raw id string.
+ * @returns the same string, branded (a compile-time cast — no runtime cost).
+ */
+export function AutoReviewVerdictId(id) {
+    return id;
+}
+/**
+ * Brand a string as an {@link AutoReviewCircuitId}.
+ * @param id - the raw id string.
+ * @returns the same string, branded (a compile-time cast — no runtime cost).
+ */
+export function AutoReviewCircuitId(id) {
+    return id;
+}
+/**
+ * Brand a string as an {@link AutoReviewRejectionId}.
+ * @param id - the raw id string.
+ * @returns the same string, branded (a compile-time cast — no runtime cost).
+ */
+export function AutoReviewRejectionId(id) {
+    return id;
+}
+/** Stable marker prefix inside every injected deny reason, parsed by the invariant companion. */
+export const DENY_MARKER = '[auto-review]';
+/** Regex extracting the reviewId from an injected deny reason. */
+export const DENY_MARKER_PATTERN = /\[auto-review\] review ([^\s]+) denied/u;
+/** Stable marker prefix inside every injected fallback rejection text (a distinct vocabulary from {@link DENY_MARKER}). */
+export const FALLBACK_MARKER = '[auto-review-fallback]';
+/** Regex extracting the reviewId from an injected fallback rejection. */
+export const FALLBACK_MARKER_PATTERN = /\[auto-review-fallback\] review ([^\s]+) failed/u;
+/** Stable marker prefix inside every injected circuit rejection text. */
+export const CIRCUIT_MARKER = '[auto-review-circuit]';
+/** Regex extracting the circuitId and tool name from an injected circuit rejection. */
+export const CIRCUIT_MARKER_PATTERN = /\[auto-review-circuit\] circuit ([^\s]+) rejected tool "([^"]+)" before review/u;
+/** Stable marker prefix inside every injected hard-disable (`never`) rejection text. */
+export const NEVER_MARKER = '[auto-review-never]';
+/** Regex extracting the rejectionId and tool name from an injected never rejection. */
+export const NEVER_MARKER_PATTERN = /\[auto-review-never\] rejection ([^\s]+) hard-disabled tool "([^"]+)"/u;
+/**
+ * Build the model-visible deny text injected into a denied tool result. The
+ * embedded reviewId is what makes the model-visible text reconstructable
+ * from the session log (model-visible ⟺ logged).
+ * @param reviewId - the verdict event's id.
+ * @param toolName - the denied tool.
+ * @param reason - the reviewer's reason (already truncated).
+ * @returns the exact error text shown to the model.
+ */
+export function denyResultText(reviewId, toolName, reason) {
+    return `Error: ${DENY_MARKER} review ${reviewId} denied tool "${toolName}": ${reason}`;
+}
+/**
+ * Build the model-visible text injected into a tool result whose review
+ * failed and was rejected by the fallback policy. The embedded reviewId
+ * links it to the recorded fallback verdict (model-visible ⟺ logged).
+ * @param reviewId - the fallback verdict event's id.
+ * @param fallback - the failure category (timeout/unavailable/schema).
+ * @param error - the failure detail (already truncated upstream).
+ * @returns the exact error text shown to the model.
+ */
+export function fallbackResultText(reviewId, fallback, error) {
+    return `Error: ${FALLBACK_MARKER} review ${reviewId} failed (${fallback}) and the request was rejected: ${error}`;
+}
+/**
+ * Build the model-visible text injected into a tool result rejected by a
+ * tripped circuit breaker. The embedded circuitId links it to the recorded
+ * `autoReview/circuit` event (model-visible ⟺ logged).
+ * @param circuitId - the circuit event's id.
+ * @param toolName - the rejected tool.
+ * @param explanation - why the breaker rejects (trip kind and count).
+ * @returns the exact error text shown to the model.
+ */
+export function circuitResultText(circuitId, toolName, explanation) {
+    return `Error: ${CIRCUIT_MARKER} circuit ${circuitId} rejected tool "${toolName}" before review: ${explanation}`;
+}
+/**
+ * Build the model-visible text injected into a tool result rejected by a
+ * `never` policy (a hard disable: risk rule or tool-policy table entry). The
+ * embedded rejectionId links it to the recorded `autoReview/rejection` event
+ * (model-visible ⟺ logged).
+ * @param rejectionId - the rejection event's id.
+ * @param toolName - the hard-disabled tool.
+ * @param source - which rule or policy entry disabled it.
+ * @returns the exact error text shown to the model.
+ */
+export function neverResultText(rejectionId, toolName, source) {
+    return `Error: ${NEVER_MARKER} rejection ${rejectionId} hard-disabled tool "${toolName}": ${source}`;
+}
+/**
+ * The session's auto-review override: the last `autoReview/state` event, or
+ * `undefined` when the session never switched (callers apply the configured
+ * `enableByDefault`). The pure fold — replay IS the state.
+ * @param events - session events in log order (other types are skipped).
+ * @returns the enabled flag of the last switch, or undefined without one.
+ */
+export function effectiveAutoReviewState(events) {
+    for (let index = events.length - 1; index >= 0; index -= 1) {
+        const event = events[index];
+        if (event.type === 'autoReview/state')
+            return event.data.enabled;
+    }
+    return undefined;
+}
+/**
+ * The verdict events inside the session's CURRENT open turn, oldest first.
+ * A turn without `turn/start` (or one already closed by `turn/end`) yields
+ * an empty list.
+ * @param events - session events in log order.
+ * @returns the open turn's verdict payloads.
+ */
+export function openTurnVerdicts(events) {
+    let openSeq = -1;
+    for (let index = events.length - 1; index >= 0; index -= 1) {
+        const type = events[index].type;
+        if (type === 'turn/end')
+            return [];
+        if (type === 'turn/start') {
+            openSeq = events[index].seq;
+            break;
+        }
+    }
+    if (openSeq < 0)
+        return [];
+    const verdicts = [];
+    for (let index = events.length - 1; index >= 0; index -= 1) {
+        const event = events[index];
+        if (event.seq <= openSeq)
+            break;
+        if (event.type === 'autoReview/verdict')
+            verdicts.push(event.data);
+    }
+    verdicts.reverse();
+    return verdicts;
+}
+/**
+ * How many REAL AI verdicts the session's CURRENT open turn has consumed.
+ * Fallback verdicts do not count: they are budgeted separately by
+ * {@link autoReviewFailuresInOpenTurn}, so a failing reviewer does not eat
+ * the AI-decision budget. A turn without `turn/start` (or one already closed
+ * by `turn/end`) counts zero.
+ * @param events - session events in log order.
+ * @returns the decision-carrying verdict count inside the current open turn.
+ */
+export function autoReviewsInOpenTurn(events) {
+    return openTurnVerdicts(events).filter(data => data.decision !== undefined).length;
+}
+/**
+ * How many reviewer FAILURES the session's CURRENT open turn has consumed —
+ * `autoReview/verdict` events carrying a fallback other than `cancelled`
+ * (a user withdrawal is not a reviewer failure). The answerer delegates once
+ * the budget is exhausted so a broken reviewer costs one timeout instead of
+ * `maxFailuresPerTurn` of them.
+ * @param events - session events in log order.
+ * @returns the failure count inside the current open turn.
+ */
+export function autoReviewFailuresInOpenTurn(events) {
+    return openTurnVerdicts(events).filter(data => data.fallback !== undefined && data.fallback !== 'cancelled').length;
+}
+/**
+ * Whether a verdict is a denial of the request: a reviewer deny, or an allow
+ * overridden by the risk policy (`escalation: 'risk-policy'` with the deny
+ * outcome). The circuit breaker and the approve list count both.
+ * @param data - the verdict payload.
+ * @returns true when the request was denied.
+ */
+export function isDenial(data) {
+    return data.decision === 'deny' || data.escalation === 'risk-policy';
+}
+/**
+ * The trailing run of consecutive denials in the current open turn —
+ * the circuit breaker's `consecutiveDenies` signal.
+ * @param events - session events in log order.
+ * @returns the length of the trailing denial run.
+ */
+export function consecutiveDeniesInOpenTurn(events) {
+    const verdicts = openTurnVerdicts(events);
+    let count = 0;
+    for (let index = verdicts.length - 1; index >= 0; index -= 1) {
+        if (!isDenial(verdicts[index]))
+            break;
+        count += 1;
+    }
+    return count;
+}
+/**
+ * How many of the last {@link windowSize} decision verdicts in the current
+ * open turn are denials — the circuit breaker's `windowDenies` signal.
+ * @param events - session events in log order.
+ * @param windowSize - how many recent verdicts the window counts.
+ * @returns the denial count inside the window.
+ */
+export function deniesInRecentVerdicts(events, windowSize) {
+    const decisions = openTurnVerdicts(events).filter(data => data.decision !== undefined);
+    return decisions.slice(-windowSize).filter(data => isDenial(data)).length;
+}
+/**
+ * The current open turn's circuit trip, when one was recorded.
+ * @param events - session events in log order.
+ * @returns the last `autoReview/circuit` payload in the open turn, or undefined.
+ */
+export function circuitInOpenTurn(events) {
+    let openSeq = -1;
+    for (let index = events.length - 1; index >= 0; index -= 1) {
+        const type = events[index].type;
+        if (type === 'turn/end')
+            return undefined;
+        if (type === 'turn/start') {
+            openSeq = events[index].seq;
+            break;
+        }
+    }
+    if (openSeq < 0)
+        return undefined;
+    for (let index = events.length - 1; index >= 0; index -= 1) {
+        const event = events[index];
+        if (event.seq <= openSeq)
+            break;
+        if (event.type === 'autoReview/circuit')
+            return event.data;
+    }
+    return undefined;
+}
+/**
+ * The most recent deny verdicts, newest first — the `/auto-review approve`
+ * candidate list.
+ * @param events - session events in log order.
+ * @param limit - how many to collect.
+ * @returns up to {@link limit} deny verdicts, newest first.
+ */
+export function lastDeniedVerdicts(events, limit) {
+    const result = [];
+    for (let index = events.length - 1; index >= 0 && result.length < limit; index -= 1) {
+        const event = events[index];
+        if (event.type !== 'autoReview/verdict' || !isDenial(event.data))
+            continue;
+        const data = event.data;
+        result.push({
+            reviewId: data.reviewId,
+            toolName: data.toolName,
+            ...data.reason !== undefined ? { reason: data.reason } : {},
+            ...data.riskLevel !== undefined ? { riskLevel: data.riskLevel } : {},
+        });
+    }
+    return result;
+}
+/**
+ * Whether a human one-shot override is pending for a tool: the latest
+ * `autoReview/override` for the tool is still unconsumed (no verdict for the
+ * tool after it) and unexpired. An override is consumed by the NEXT
+ * same-tool review regardless of its decision — single-use by construction.
+ * @param events - session events in log order.
+ * @param toolName - the tool an approval request is about.
+ * @param ttlMs - the override lifetime.
+ * @param now - the current epoch milliseconds.
+ * @returns the overridden deny verdict's id, or undefined without a pending override.
+ */
+export function activeOverride(events, toolName, ttlMs, now) {
+    for (let index = events.length - 1; index >= 0; index -= 1) {
+        const event = events[index];
+        if (event.type === 'autoReview/verdict' && event.data.toolName === toolName)
+            return undefined;
+        if (event.type === 'autoReview/override' && event.data.toolName === toolName) {
+            return now - event.time <= ttlMs ? event.data.reviewId : undefined;
+        }
+    }
+    return undefined;
+}
+/**
+ * Fold one session's review statistics: verdict counts, never-rejection
+ * count, mean duration, and the three most recent verdicts.
+ * @param events - session events in log order.
+ * @returns the statistics.
+ */
+export function reviewStats(events) {
+    let allows = 0;
+    let denies = 0;
+    let fallbacks = 0;
+    let rejections = 0;
+    let decided = 0;
+    let durationSum = 0;
+    for (const event of events) {
+        if (event.type === 'autoReview/rejection') {
+            rejections += 1;
+            continue;
+        }
+        if (event.type !== 'autoReview/verdict')
+            continue;
+        const data = event.data;
+        if (data.decision === 'allow')
+            allows += 1;
+        else if (data.decision === 'deny')
+            denies += 1;
+        else
+            fallbacks += 1;
+        if (data.decision !== undefined) {
+            decided += 1;
+            durationSum += data.durationMs;
+        }
+    }
+    const recent = [];
+    for (let index = events.length - 1; index >= 0 && recent.length < 3; index -= 1) {
+        const event = events[index];
+        if (event.type === 'autoReview/verdict')
+            recent.push(event.data);
+    }
+    return { allows, denies, fallbacks, rejections, avgDurationMs: decided === 0 ? 0 : Math.round(durationSum / decided), recent };
+}
+/**
+ * Correlate a pending approval request with the `approval/asked` event the
+ * service just appended. The service appends the asked event synchronously
+ * before waterfall dispatch, so the matching event is the last unpaired
+ * asked event whose call id (or, without one, tool name) matches the request.
+ * @param events - session events in log order.
+ * @param toolName - the request's tool name.
+ * @param callId - the request's call id, when present.
+ * @returns the asked event's approval id, or undefined when the chain is broken.
+ */
+export function correlateApprovalId(events, toolName, callId) {
+    const decided = new Set();
+    let candidate;
+    for (let index = events.length - 1; index >= 0; index -= 1) {
+        const event = events[index];
+        if (event.type === 'approval/decided') {
+            decided.add(event.data.id);
+            continue;
+        }
+        if (event.type !== 'approval/asked')
+            continue;
+        const asked = event.data;
+        if (decided.has(asked.id))
+            continue;
+        if (callId !== undefined ? asked.callId === callId : asked.toolName === toolName) {
+            candidate = asked.id;
+            break;
+        }
+    }
+    return candidate;
+}
+/**
+ * Find the already-presented tool call the approval request refers to — the
+ * `tool/call` event whose arguments the model produced and the UI streamed.
+ * @param events - session events in log order.
+ * @param callId - the exact call to find.
+ * @returns the call's raw arguments JSON string, or undefined without one.
+ */
+export function findPresentedCall(events, callId) {
+    for (let index = events.length - 1; index >= 0; index -= 1) {
+        const event = events[index];
+        if (event.type === 'tool/call' && event.data.callId === callId)
+            return event.data.arguments;
+    }
+    return undefined;
+}
+//# sourceMappingURL=events.js.map

package/lib/types/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../src/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AA2IH,wEAAwE;AACxE,MAAM,CAAC,MAAM,qBAAqB,GAAkC,CAAC,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAA;AAWrH;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAAU;IAC5C,OAAO,EAAyB,CAAA;AAClC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAAU;IAC5C,OAAO,EAAyB,CAAA;AAClC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,EAAU;IAC9C,OAAO,EAA2B,CAAA;AACpC,CAAC;AAED,iGAAiG;AACjG,MAAM,CAAC,MAAM,WAAW,GAAG,eAAe,CAAA;AAE1C,kEAAkE;AAClE,MAAM,CAAC,MAAM,mBAAmB,GAAG,yCAAyC,CAAA;AAE5E,2HAA2H;AAC3H,MAAM,CAAC,MAAM,eAAe,GAAG,wBAAwB,CAAA;AAEvD,yEAAyE;AACzE,MAAM,CAAC,MAAM,uBAAuB,GAAG,kDAAkD,CAAA;AAEzF,yEAAyE;AACzE,MAAM,CAAC,MAAM,cAAc,GAAG,uBAAuB,CAAA;AAErD,uFAAuF;AACvF,MAAM,CAAC,MAAM,sBAAsB,GAAG,iFAAiF,CAAA;AAEvH,wFAAwF;AACxF,MAAM,CAAC,MAAM,YAAY,GAAG,qBAAqB,CAAA;AAEjD,uFAAuF;AACvF,MAAM,CAAC,MAAM,oBAAoB,GAAG,wEAAwE,CAAA;AAE5G;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,QAA6B,EAAE,QAAgB,EAAE,MAAc;IAC5F,OAAO,UAAU,WAAW,WAAW,QAAQ,iBAAiB,QAAQ,MAAM,MAAM,EAAE,CAAA;AACxF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAA6B,EAAE,QAA4B,EAAE,KAAa;IAC3G,OAAO,UAAU,eAAe,WAAW,QAAQ,YAAY,QAAQ,mCAAmC,KAAK,EAAE,CAAA;AACnH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAA8B,EAAE,QAAgB,EAAE,WAAmB;IACrG,OAAO,UAAU,cAAc,YAAY,SAAS,mBAAmB,QAAQ,oBAAoB,WAAW,EAAE,CAAA;AAClH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,WAAkC,EAAE,QAAgB,EAAE,MAAc;IAClG,OAAO,UAAU,YAAY,cAAc,WAAW,wBAAwB,QAAQ,MAAM,MAAM,EAAE,CAAA;AACtG,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAA+B;IACtE,KAAK,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAiB,CAAA;QAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAA;IAClE,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAA+B;IAC9D,IAAI,OAAO,GAAG,CAAC,CAAC,CAAA;IAChB,KAAK,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,GAAI,MAAM,CAAC,KAAK,CAAkB,CAAC,IAAI,CAAA;QACjD,IAAI,IAAI,KAAK,UAAU;YAAE,OAAO,EAAE,CAAA;QAClC,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;YAC1B,OAAO,GAAI,MAAM,CAAC,KAAK,CAAkB,CAAC,GAAG,CAAA;YAC7C,MAAK;QACP,CAAC;IACH,CAAC;IACD,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,EAAE,CAAA;IAC1B,MAAM,QAAQ,GAA4C,EAAE,CAAA;IAC5D,KAAK,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAiB,CAAA;QAC3C,IAAI,KAAK,CAAC,GAAG,IAAI,OAAO;YAAE,MAAK;QAC/B,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB;YAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACpE,CAAC;IACD,QAAQ,CAAC,OAAO,EAAE,CAAA;IAClB,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAA+B;IACnE,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,MAAM,CAAA;AACpF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAA+B;IAC1E,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC,MAAM,CAAA;AACrH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CAAC,IAA2C;IAClE,OAAO,IAAI,CAAC,QAAQ,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,KAAK,aAAa,CAAA;AACtE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CAAC,MAA+B;IACzE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAA;IACzC,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,IAAI,KAAK,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC7D,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAE,CAAC;YAAE,MAAK;QACtC,KAAK,IAAI,CAAC,CAAA;IACZ,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAA+B,EAAE,UAAkB;IACxF,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAA;IACtF,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAA;AAC3E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAA+B;IAC/D,IAAI,OAAO,GAAG,CAAC,CAAC,CAAA;IAChB,KAAK,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,GAAI,MAAM,CAAC,KAAK,CAAkB,CAAC,IAAI,CAAA;QACjD,IAAI,IAAI,KAAK,UAAU;YAAE,OAAO,SAAS,CAAA;QACzC,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;YAC1B,OAAO,GAAI,MAAM,CAAC,KAAK,CAAkB,CAAC,GAAG,CAAA;YAC7C,MAAK;QACP,CAAC;IACH,CAAC;IACD,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,SAAS,CAAA;IACjC,KAAK,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAiB,CAAA;QAC3C,IAAI,KAAK,CAAC,GAAG,IAAI,OAAO;YAAE,MAAK;QAC/B,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB;YAAE,OAAO,KAAK,CAAC,IAAI,CAAA;IAC5D,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAUD;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAA+B,EAAE,KAAa;IAC/E,MAAM,MAAM,GAAiB,EAAE,CAAA;IAC/B,KAAK,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,KAAK,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAiB,CAAA;QAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAQ;QAC1E,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAA;QACvB,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE;YAC3D,GAAG,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE;SACrE,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAC5B,MAA+B,EAC/B,QAAgB,EAChB,KAAa,EACb,GAAW;IAEX,KAAK,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAiB,CAAA;QAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAA;QAC7F,IAAI,KAAK,CAAC,IAAI,KAAK,qBAAqB,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC7E,OAAO,GAAG,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAA;QACpE,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAeD;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,MAA+B;IACzD,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,IAAI,SAAS,GAAG,CAAC,CAAA;IACjB,IAAI,UAAU,GAAG,CAAC,CAAA;IAClB,IAAI,OAAO,GAAG,CAAC,CAAA;IACf,IAAI,WAAW,GAAG,CAAC,CAAA;IACnB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;YAC1C,UAAU,IAAI,CAAC,CAAA;YACf,SAAQ;QACV,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB;YAAE,SAAQ;QACjD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAA;QACvB,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO;YAAE,MAAM,IAAI,CAAC,CAAA;aACrC,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM;YAAE,MAAM,IAAI,CAAC,CAAA;;YACzC,SAAS,IAAI,CAAC,CAAA;QACnB,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,CAAA;YACZ,WAAW,IAAI,IAAI,CAAC,UAAU,CAAA;QAChC,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAA4C,EAAE,CAAA;IAC1D,KAAK,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAChF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAiB,CAAA;QAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAClE,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;AAChI,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAA+B,EAC/B,QAAgB,EAChB,MAAe;IAEf,MAAM,OAAO,GAAG,IAAI,GAAG,EAAqB,CAAA;IAC5C,IAAI,SAAwC,CAAA;IAC5C,KAAK,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAiB,CAAA;QAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YAC1B,SAAQ;QACV,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB;YAAE,SAAQ;QAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAA;QACxB,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAAE,SAAQ;QACnC,IAAI,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjF,SAAS,GAAG,KAAK,CAAC,EAAE,CAAA;YACpB,MAAK;QACP,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAA+B,EAAE,MAAc;IAC/E,KAAK,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAiB,CAAA;QAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAA;IAC7F,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC"}

package/lib/types/index.d.ts

@@ -0,0 +1,26 @@
+/**
+ * `dsh-auto-review` — second-model AI auto-review for DeepSeek Harness
+ * approval requests. Registers an answerer on the `approval/request`
+ * waterfall that, when a session has auto-review enabled and the configured
+ * tool/risk policy says `ai`, runs a read-only one-shot reviewer subagent
+ * (`toolFilter` allow-list, structured verdict schema) and settles the
+ * request from its verdict; every other request delegates via `next()` to
+ * the human answerer chain. Failures fall back per `fallbackPolicy` (default
+ * fail-closed `rejected`).
+ *
+ * Function plugin — no default export (the Loader unwraps
+ * `exports.default ?? exports`, and a stray default would discard
+ * `name`/`inject`/`Config`/`apply`).
+ * @module dsh-auto-review
+ */
+import { apply } from './runtime.ts';
+export declare const name = "auto-review";
+export declare const inject: string[];
+export { apply };
+export { AutoReviewRuntime } from './runtime.ts';
+export * from './config.ts';
+export * from './events.ts';
+export * from './review.ts';
+export * from './projection.ts';
+export * from './projection-types.ts';
+//# sourceMappingURL=index.d.ts.map

package/lib/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAA;AAEpC,eAAO,MAAM,IAAI,gBAAgB,CAAA;AACjC,eAAO,MAAM,MAAM,UAAiD,CAAA;AAEpE,OAAO,EAAE,KAAK,EAAE,CAAA;AAChB,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAChD,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,uBAAuB,CAAA"}

package/lib/types/index.js

@@ -0,0 +1,26 @@
+/**
+ * `dsh-auto-review` — second-model AI auto-review for DeepSeek Harness
+ * approval requests. Registers an answerer on the `approval/request`
+ * waterfall that, when a session has auto-review enabled and the configured
+ * tool/risk policy says `ai`, runs a read-only one-shot reviewer subagent
+ * (`toolFilter` allow-list, structured verdict schema) and settles the
+ * request from its verdict; every other request delegates via `next()` to
+ * the human answerer chain. Failures fall back per `fallbackPolicy` (default
+ * fail-closed `rejected`).
+ *
+ * Function plugin — no default export (the Loader unwraps
+ * `exports.default ?? exports`, and a stray default would discard
+ * `name`/`inject`/`Config`/`apply`).
+ * @module dsh-auto-review
+ */
+import { apply } from "./runtime.js";
+export const name = 'auto-review';
+export const inject = ['approval', 'subagents', 'commands', 'tools'];
+export { apply };
+export { AutoReviewRuntime } from "./runtime.js";
+export * from "./config.js";
+export * from "./events.js";
+export * from "./review.js";
+export * from "./projection.js";
+export * from "./projection-types.js";
+//# sourceMappingURL=index.js.map

package/lib/types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAA;AAEpC,MAAM,CAAC,MAAM,IAAI,GAAG,aAAa,CAAA;AACjC,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;AAEpE,OAAO,EAAE,KAAK,EAAE,CAAA;AAChB,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAChD,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,uBAAuB,CAAA"}

package/lib/types/invariant.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Package-owned invariant companion for `dsh-auto-review`:
+ *
+ * 1. Every `autoReview/verdict` audit event references an `approval/asked`
+ *    event that precedes it in the same session, at most one verdict exists
+ *    per asked event, and payload fields obey the closed vocabularies
+ *    (decision/reason/riskLevel/outcome/fallback). The same chain holds for
+ *    `autoReview/rejection` events (hard-disable rejections).
+ * 2. Model-visible ⟺ logged: every `tool/result` carrying the deny marker
+ *    links to a recorded `deny` verdict with a matching call id, every
+ *    `tool/result` carrying the fallback marker links to a recorded fallback
+ *    verdict that was rejected, and every `tool/result` carrying the never
+ *    marker links to a recorded rejection that settled rejected.
+ *
+ * @module dsh-auto-review/invariant
+ */
+import type { Context } from '@deepseek-ai/cordis';
+/** Cordis companion plugin name. */
+export declare const name = "auto-review-invariant";
+/** Service required before the companion can reserve package ownership. */
+export declare const inject: string[];
+/**
+ * Register this package's invariant companion.
+ * @param ctx - Cordis context carrying the invariant service.
+ * @returns the installed registration's disposer after setup succeeds.
+ */
+export declare const apply: (ctx: Context) => Promise<() => void>;
+//# sourceMappingURL=invariant.d.ts.map

package/lib/types/invariant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invariant.d.ts","sourceRoot":"","sources":["../../src/invariant.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAOlD,oCAAoC;AACpC,eAAO,MAAM,IAAI,0BAA0B,CAAA;AAC3C,2EAA2E;AAC3E,eAAO,MAAM,MAAM,UAAiB,CAAA;AAoSpC;;;;GAIG;AACH,eAAO,MAAM,KAAK,GAAI,KAAK,OAAO,KAAG,OAAO,CAAC,MAAM,IAAI,CACU,CAAA"}