ghagga-core 2.8.0 → 2.9.0

package/dist/tracing/index.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Lightweight OTel-compatible tracing abstraction.
+ *
+ * Works WITHOUT requiring @opentelemetry packages (they are optional).
+ * Defaults to a no-op implementation. Real OTel can be injected via
+ * configureTracer() at application startup.
+ */
+export interface Span {
+    setAttribute(key: string, value: string | number | boolean): void;
+    recordException(error: Error): void;
+    end(): void;
+}
+export interface Tracer {
+    startSpan(name: string, attributes?: Record<string, string | number | boolean>): Span;
+}
+/**
+ * Replace the global tracer with a real OTel tracer (or any custom implementation).
+ * Must be called before any pipeline operations to take effect.
+ */
+export declare function configureTracer(tracer: Tracer): void;
+/**
+ * Get the currently active global tracer.
+ * Returns NoopTracer by default when OTel is not configured.
+ */
+export declare function getTracer(): Tracer;
+/**
+ * Wrap an async function in a span.
+ *
+ * Creates a span, passes it to the callback so attributes can be set
+ * mid-execution, then ends the span when the promise settles.
+ * Exceptions are recorded on the span before being re-thrown.
+ *
+ * @param name       - Span name (e.g., "ghagga.review")
+ * @param attributes - Initial span attributes set before the function runs
+ * @param fn         - Async function to execute inside the span
+ * @returns The resolved value of fn
+ */
+export declare function withSpan<T>(name: string, attributes: Record<string, string | number | boolean>, fn: (span: Span) => Promise<T>): Promise<T>;
+//# sourceMappingURL=index.d.ts.map

package/dist/tracing/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tracing/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,MAAM,WAAW,IAAI;IACnB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;IAClE,eAAe,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IACpC,GAAG,IAAI,IAAI,CAAC;CACb;AAED,MAAM,WAAW,MAAM;IACrB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC;CACvF;AA4BD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAEpD;AAED;;;GAGG;AACH,wBAAgB,SAAS,IAAI,MAAM,CAElC;AAID;;;;;;;;;;;GAWG;AACH,wBAAsB,QAAQ,CAAC,CAAC,EAC9B,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,EACrD,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,GAC7B,OAAO,CAAC,CAAC,CAAC,CAaZ"}

package/dist/tracing/index.js

@@ -0,0 +1,70 @@
+/**
+ * Lightweight OTel-compatible tracing abstraction.
+ *
+ * Works WITHOUT requiring @opentelemetry packages (they are optional).
+ * Defaults to a no-op implementation. Real OTel can be injected via
+ * configureTracer() at application startup.
+ */
+// ─── No-op Implementation ────────────────────────────────────────
+class NoopSpan {
+    setAttribute(_key, _value) {
+        // intentional no-op
+    }
+    recordException(_error) {
+        // intentional no-op
+    }
+    end() {
+        // intentional no-op
+    }
+}
+class NoopTracer {
+    startSpan(_name, _attributes) {
+        return new NoopSpan();
+    }
+}
+// ─── Global Tracer State ─────────────────────────────────────────
+let _tracer = new NoopTracer();
+/**
+ * Replace the global tracer with a real OTel tracer (or any custom implementation).
+ * Must be called before any pipeline operations to take effect.
+ */
+export function configureTracer(tracer) {
+    _tracer = tracer;
+}
+/**
+ * Get the currently active global tracer.
+ * Returns NoopTracer by default when OTel is not configured.
+ */
+export function getTracer() {
+    return _tracer;
+}
+// ─── Convenience Wrapper ─────────────────────────────────────────
+/**
+ * Wrap an async function in a span.
+ *
+ * Creates a span, passes it to the callback so attributes can be set
+ * mid-execution, then ends the span when the promise settles.
+ * Exceptions are recorded on the span before being re-thrown.
+ *
+ * @param name       - Span name (e.g., "ghagga.review")
+ * @param attributes - Initial span attributes set before the function runs
+ * @param fn         - Async function to execute inside the span
+ * @returns The resolved value of fn
+ */
+export async function withSpan(name, attributes, fn) {
+    const span = _tracer.startSpan(name, attributes);
+    try {
+        const result = await fn(span);
+        return result;
+    }
+    catch (error) {
+        if (error instanceof Error) {
+            span.recordException(error);
+        }
+        throw error;
+    }
+    finally {
+        span.end();
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/tracing/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tracing/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAcH,oEAAoE;AAEpE,MAAM,QAAQ;IACZ,YAAY,CAAC,IAAY,EAAE,MAAiC;QAC1D,oBAAoB;IACtB,CAAC;IAED,eAAe,CAAC,MAAa;QAC3B,oBAAoB;IACtB,CAAC;IAED,GAAG;QACD,oBAAoB;IACtB,CAAC;CACF;AAED,MAAM,UAAU;IACd,SAAS,CAAC,KAAa,EAAE,WAAuD;QAC9E,OAAO,IAAI,QAAQ,EAAE,CAAC;IACxB,CAAC;CACF;AAED,oEAAoE;AAEpE,IAAI,OAAO,GAAW,IAAI,UAAU,EAAE,CAAC;AAEvC;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,OAAO,GAAG,MAAM,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS;IACvB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,oEAAoE;AAEpE;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,IAAY,EACZ,UAAqD,EACrD,EAA8B;IAE9B,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;QAC9B,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAC3B,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,GAAG,EAAE,CAAC;IACb,CAAC;AACH,CAAC"}

package/dist/trajectory.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Trajectory recording — captures every step of the review pipeline
+ * as a structured JSON event for debugging and explainability.
+ *
+ * After a review, consumers can inspect the trajectory to understand:
+ * - Which agents ran and in what order
+ * - What each agent received as input and produced as output
+ * - Token usage per step
+ * - Total cost breakdown
+ */
+export type TrajectoryEventType = 'pipeline_start' | 'pipeline_end' | 'agent_start' | 'agent_end' | 'tool_start' | 'tool_end' | 'llm_call' | 'error';
+export interface TrajectoryEvent {
+    type: TrajectoryEventType;
+    timestamp: string;
+    step: string;
+    durationMs?: number;
+    tokensUsed?: number;
+    model?: string;
+    input?: string;
+    output?: string;
+    error?: string;
+    metadata?: Record<string, unknown>;
+}
+export interface Trajectory {
+    reviewId: string;
+    project: string;
+    startedAt: string;
+    completedAt: string | null;
+    events: TrajectoryEvent[];
+    totalTokens: number;
+    totalDurationMs: number;
+    estimatedCostUSD: number;
+}
+export declare class TrajectoryRecorder {
+    private events;
+    private startTime;
+    private reviewId;
+    private project;
+    constructor(reviewId: string, project: string);
+    record(type: TrajectoryEventType, step: string, data: Partial<Omit<TrajectoryEvent, 'type' | 'timestamp' | 'step'>>): void;
+    recordAgentStart(agent: string, model?: string): void;
+    recordAgentEnd(agent: string, opts: {
+        tokensUsed?: number;
+        durationMs?: number;
+        output?: string;
+    }): void;
+    recordToolStart(tool: string): void;
+    recordToolEnd(tool: string, opts: {
+        durationMs?: number;
+        output?: string;
+    }): void;
+    recordLLMCall(model: string, opts: {
+        tokensUsed?: number;
+        durationMs?: number;
+    }): void;
+    recordError(step: string, error: string): void;
+    finalize(): Trajectory;
+    getEvents(): ReadonlyArray<TrajectoryEvent>;
+    getEventsByType(type: TrajectoryEventType): TrajectoryEvent[];
+    getAgentSteps(): string[];
+}
+export declare function formatTrajectory(trajectory: Trajectory): string;
+export declare function trajectoryToJSON(trajectory: Trajectory): string;
+export declare function trajectoryFromJSON(json: string): Trajectory;
+//# sourceMappingURL=trajectory.d.ts.map

package/dist/trajectory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trajectory.d.ts","sourceRoot":"","sources":["../src/trajectory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,MAAM,MAAM,mBAAmB,GAC3B,gBAAgB,GAChB,cAAc,GACd,aAAa,GACb,WAAW,GACX,YAAY,GACZ,UAAU,GACV,UAAU,GACV,OAAO,CAAC;AAEZ,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,mBAAmB,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAID,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAAyB;IACvC,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,OAAO,CAAS;gBAEZ,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;IAO7C,MAAM,CACJ,IAAI,EAAE,mBAAmB,EACzB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC,CAAC,GAClE,IAAI;IASP,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI;IAIrD,cAAc,CACZ,KAAK,EAAE,MAAM,EACb,IAAI,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAClE,IAAI;IAIP,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAInC,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAIjF,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAItF,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAM9C,QAAQ,IAAI,UAAU;IAoBtB,SAAS,IAAI,aAAa,CAAC,eAAe,CAAC;IAI3C,eAAe,CAAC,IAAI,EAAE,mBAAmB,GAAG,eAAe,EAAE;IAI7D,aAAa,IAAI,MAAM,EAAE;CAG1B;AAID,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,CAoD/D;AAID,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,CAE/D;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAE3D"}

package/dist/trajectory.js

@@ -0,0 +1,126 @@
+/**
+ * Trajectory recording — captures every step of the review pipeline
+ * as a structured JSON event for debugging and explainability.
+ *
+ * After a review, consumers can inspect the trajectory to understand:
+ * - Which agents ran and in what order
+ * - What each agent received as input and produced as output
+ * - Token usage per step
+ * - Total cost breakdown
+ */
+// ── Recorder ──
+export class TrajectoryRecorder {
+    events = [];
+    startTime;
+    reviewId;
+    project;
+    constructor(reviewId, project) {
+        this.reviewId = reviewId;
+        this.project = project;
+        this.startTime = Date.now();
+        this.record('pipeline_start', 'pipeline', {});
+    }
+    record(type, step, data) {
+        this.events.push({
+            type,
+            timestamp: new Date().toISOString(),
+            step,
+            ...data,
+        });
+    }
+    recordAgentStart(agent, model) {
+        this.record('agent_start', agent, { model });
+    }
+    recordAgentEnd(agent, opts) {
+        this.record('agent_end', agent, opts);
+    }
+    recordToolStart(tool) {
+        this.record('tool_start', tool, {});
+    }
+    recordToolEnd(tool, opts) {
+        this.record('tool_end', tool, opts);
+    }
+    recordLLMCall(model, opts) {
+        this.record('llm_call', model, { model, ...opts });
+    }
+    recordError(step, error) {
+        this.record('error', step, { error });
+    }
+    // ── Finalization ──
+    finalize() {
+        this.record('pipeline_end', 'pipeline', {});
+        const totalTokens = this.events.reduce((sum, e) => sum + (e.tokensUsed ?? 0), 0);
+        const totalDurationMs = Date.now() - this.startTime;
+        return {
+            reviewId: this.reviewId,
+            project: this.project,
+            startedAt: new Date(this.startTime).toISOString(),
+            completedAt: new Date().toISOString(),
+            events: this.events,
+            totalTokens,
+            totalDurationMs,
+            estimatedCostUSD: 0, // filled by consumer with pricing info
+        };
+    }
+    // ── Query ──
+    getEvents() {
+        return this.events;
+    }
+    getEventsByType(type) {
+        return this.events.filter((e) => e.type === type);
+    }
+    getAgentSteps() {
+        return this.events.filter((e) => e.type === 'agent_start').map((e) => e.step);
+    }
+}
+// ── Formatting ──
+export function formatTrajectory(trajectory) {
+    const lines = [];
+    lines.push(`## Review Trajectory — ${trajectory.reviewId}`);
+    lines.push(`**Project**: ${trajectory.project} | **Duration**: ${(trajectory.totalDurationMs / 1000).toFixed(1)}s | **Tokens**: ${trajectory.totalTokens}`);
+    lines.push('');
+    let indent = 0;
+    for (const event of trajectory.events) {
+        const prefix = '  '.repeat(indent);
+        const ts = event.timestamp.slice(11, 19); // HH:MM:SS
+        switch (event.type) {
+            case 'pipeline_start':
+                lines.push(`${prefix}${ts} ▶ Pipeline started`);
+                indent++;
+                break;
+            case 'pipeline_end':
+                indent = Math.max(0, indent - 1);
+                lines.push(`${prefix}${ts} ■ Pipeline ended`);
+                break;
+            case 'agent_start':
+                lines.push(`${prefix}${ts} → ${event.step}${event.model ? ` (${event.model})` : ''}`);
+                indent++;
+                break;
+            case 'agent_end':
+                indent = Math.max(0, indent - 1);
+                lines.push(`${prefix}${ts} ← ${event.step}${event.tokensUsed ? ` [${event.tokensUsed} tok]` : ''}${event.durationMs ? ` ${event.durationMs}ms` : ''}`);
+                break;
+            case 'tool_start':
+                lines.push(`${prefix}${ts}   🔧 ${event.step}`);
+                break;
+            case 'tool_end':
+                lines.push(`${prefix}${ts}   ✓ ${event.step}${event.durationMs ? ` ${event.durationMs}ms` : ''}`);
+                break;
+            case 'llm_call':
+                lines.push(`${prefix}${ts}   🤖 ${event.model}${event.tokensUsed ? ` [${event.tokensUsed} tok]` : ''}`);
+                break;
+            case 'error':
+                lines.push(`${prefix}${ts}   ✗ ERROR: ${event.error}`);
+                break;
+        }
+    }
+    return lines.join('\n');
+}
+// ── Serialization ──
+export function trajectoryToJSON(trajectory) {
+    return JSON.stringify(trajectory, null, 2);
+}
+export function trajectoryFromJSON(json) {
+    return JSON.parse(json);
+}
+//# sourceMappingURL=trajectory.js.map

package/dist/trajectory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trajectory.js","sourceRoot":"","sources":["../src/trajectory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAsCH,iBAAiB;AAEjB,MAAM,OAAO,kBAAkB;IACrB,MAAM,GAAsB,EAAE,CAAC;IAC/B,SAAS,CAAS;IAClB,QAAQ,CAAS;IACjB,OAAO,CAAS;IAExB,YAAY,QAAgB,EAAE,OAAe;QAC3C,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,CACJ,IAAyB,EACzB,IAAY,EACZ,IAAmE;QAEnE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACf,IAAI;YACJ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,IAAI;YACJ,GAAG,IAAI;SACR,CAAC,CAAC;IACL,CAAC;IAED,gBAAgB,CAAC,KAAa,EAAE,KAAc;QAC5C,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,cAAc,CACZ,KAAa,EACb,IAAmE;QAEnE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,eAAe,CAAC,IAAY;QAC1B,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,aAAa,CAAC,IAAY,EAAE,IAA8C;QACxE,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,aAAa,CAAC,KAAa,EAAE,IAAkD;QAC7E,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,WAAW,CAAC,IAAY,EAAE,KAAa;QACrC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,qBAAqB;IAErB,QAAQ;QACN,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QAE5C,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACjF,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QAEpD,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;YACjD,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,WAAW;YACX,eAAe;YACf,gBAAgB,EAAE,CAAC,EAAE,uCAAuC;SAC7D,CAAC;IACJ,CAAC;IAED,cAAc;IAEd,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,eAAe,CAAC,IAAyB;QACvC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACpD,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAChF,CAAC;CACF;AAED,mBAAmB;AAEnB,MAAM,UAAU,gBAAgB,CAAC,UAAsB;IACrD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,0BAA0B,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5D,KAAK,CAAC,IAAI,CACR,gBAAgB,UAAU,CAAC,OAAO,oBAAoB,CAAC,UAAU,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,UAAU,CAAC,WAAW,EAAE,CAChJ,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW;QAErD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,gBAAgB;gBACnB,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,GAAG,EAAE,qBAAqB,CAAC,CAAC;gBAChD,MAAM,EAAE,CAAC;gBACT,MAAM;YACR,KAAK,cAAc;gBACjB,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC;gBACjC,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,GAAG,EAAE,mBAAmB,CAAC,CAAC;gBAC9C,MAAM;YACR,KAAK,aAAa;gBAChB,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,GAAG,EAAE,MAAM,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtF,MAAM,EAAE,CAAC;gBACT,MAAM;YACR,KAAK,WAAW;gBACd,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC;gBACjC,KAAK,CAAC,IAAI,CACR,GAAG,MAAM,GAAG,EAAE,MAAM,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,UAAU,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC3I,CAAC;gBACF,MAAM;YACR,KAAK,YAAY;gBACf,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,GAAG,EAAE,SAAS,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;gBAChD,MAAM;YACR,KAAK,UAAU;gBACb,KAAK,CAAC,IAAI,CACR,GAAG,MAAM,GAAG,EAAE,QAAQ,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACtF,CAAC;gBACF,MAAM;YACR,KAAK,UAAU;gBACb,KAAK,CAAC,IAAI,CACR,GAAG,MAAM,GAAG,EAAE,SAAS,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,UAAU,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5F,CAAC;gBACF,MAAM;YACR,KAAK,OAAO;gBACV,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,GAAG,EAAE,eAAe,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;gBACvD,MAAM;QACV,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,sBAAsB;AAEtB,MAAM,UAAU,gBAAgB,CAAC,UAAsB;IACrD,OAAO,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAC;AACxC,CAAC"}

package/dist/trust/index.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Author Trust Scoring
+ *
+ * Computes a trust score (0–1) for a PR author based on their git history
+ * in the repository. High-trust authors (well-known contributors) receive
+ * lightweight "simple" review; new/unknown authors receive deep "workflow" review.
+ *
+ * Score formula:
+ *   commit_count_score : min(commitCount / 50, 1.0) * 0.6
+ *   tenure_score       : min(daysSinceFirstCommit / 365, 1.0) * 0.3
+ *   recency_score      : daysSinceLastCommit < 90 ? 0.1 : 0
+ */
+import type { AuthorTrustScore, AuthorTrustTier } from '../types.js';
+export interface TrustScoringOptions {
+    /** Path to the git repository directory. */
+    cwd: string;
+    /** Score threshold to classify an author as "trusted". Default: 0.7 */
+    trustedThreshold?: number;
+    /** Score threshold below which an author is classified as "new". Default: 0.3 */
+    newThreshold?: number;
+}
+/**
+ * Compute a trust score (0–1) for a given author using git log stats.
+ * Falls back to score=0 / tier="new" when git is unavailable or no history found.
+ */
+export declare function computeAuthorTrustScore(author: string, options: TrustScoringOptions): Promise<AuthorTrustScore>;
+/**
+ * Map a trust tier to a recommended review mode.
+ * - trusted → simple (lightweight, lower LLM cost)
+ * - new     → workflow (deep multi-specialist review)
+ * - standard → unchanged (use the caller's default mode)
+ */
+export declare function getReviewModeForTier(tier: AuthorTrustTier, defaultMode: string): string;
+//# sourceMappingURL=index.d.ts.map

package/dist/trust/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/trust/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAIrE,MAAM,WAAW,mBAAmB;IAClC,4CAA4C;IAC5C,GAAG,EAAE,MAAM,CAAC;IACZ,uEAAuE;IACvE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iFAAiF;IACjF,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,gBAAgB,CAAC,CA0D3B;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CASvF"}

package/dist/trust/index.js

@@ -0,0 +1,78 @@
+/**
+ * Author Trust Scoring
+ *
+ * Computes a trust score (0–1) for a PR author based on their git history
+ * in the repository. High-trust authors (well-known contributors) receive
+ * lightweight "simple" review; new/unknown authors receive deep "workflow" review.
+ *
+ * Score formula:
+ *   commit_count_score : min(commitCount / 50, 1.0) * 0.6
+ *   tenure_score       : min(daysSinceFirstCommit / 365, 1.0) * 0.3
+ *   recency_score      : daysSinceLastCommit < 90 ? 0.1 : 0
+ */
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+const execFileAsync = promisify(execFile);
+/**
+ * Compute a trust score (0–1) for a given author using git log stats.
+ * Falls back to score=0 / tier="new" when git is unavailable or no history found.
+ */
+export async function computeAuthorTrustScore(author, options) {
+    const { cwd, trustedThreshold = 0.7, newThreshold = 0.3 } = options;
+    let commitCount = 0;
+    let firstSeenDaysAgo = 0;
+    let lastSeenDaysAgo = 999;
+    try {
+        // Count commits by author
+        const { stdout: countOut } = await execFileAsync('git', ['log', '--oneline', '--author', author, '--'], { cwd });
+        commitCount = countOut.trim().split('\n').filter(Boolean).length;
+        if (commitCount > 0) {
+            // Get all commit timestamps (Unix epoch seconds), sorted ascending
+            const { stdout: datesOut } = await execFileAsync('git', ['log', '--format=%at', '--author', author, '--'], { cwd });
+            const timestamps = datesOut
+                .trim()
+                .split('\n')
+                .filter(Boolean)
+                .map(Number)
+                .sort((a, b) => a - b);
+            if (timestamps.length > 0) {
+                const nowSec = Date.now() / 1000;
+                firstSeenDaysAgo = Math.floor((nowSec - timestamps[0]) / (60 * 60 * 24));
+                lastSeenDaysAgo = Math.floor((nowSec - timestamps[timestamps.length - 1]) / (60 * 60 * 24));
+            }
+        }
+    }
+    catch {
+        // git unavailable or not a repo — treat as new author (score=0)
+    }
+    const commitScore = Math.min(commitCount / 50, 1.0) * 0.6;
+    const tenureScore = Math.min(firstSeenDaysAgo / 365, 1.0) * 0.3;
+    const recencyScore = lastSeenDaysAgo < 90 ? 0.1 : 0;
+    const score = Math.round((commitScore + tenureScore + recencyScore) * 100) / 100;
+    const tier = score >= trustedThreshold ? 'trusted' : score >= newThreshold ? 'standard' : 'new';
+    return {
+        author,
+        score,
+        tier,
+        commitCount,
+        firstSeenDaysAgo,
+        lastUpdated: new Date(),
+    };
+}
+/**
+ * Map a trust tier to a recommended review mode.
+ * - trusted → simple (lightweight, lower LLM cost)
+ * - new     → workflow (deep multi-specialist review)
+ * - standard → unchanged (use the caller's default mode)
+ */
+export function getReviewModeForTier(tier, defaultMode) {
+    switch (tier) {
+        case 'trusted':
+            return 'simple';
+        case 'new':
+            return 'workflow';
+        default:
+            return defaultMode;
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/trust/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/trust/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAW1C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAAc,EACd,OAA4B;IAE5B,MAAM,EAAE,GAAG,EAAE,gBAAgB,GAAG,GAAG,EAAE,YAAY,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC;IAEpE,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,IAAI,eAAe,GAAG,GAAG,CAAC;IAE1B,IAAI,CAAC;QACH,0BAA0B;QAC1B,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAC9C,KAAK,EACL,CAAC,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,EAC9C,EAAE,GAAG,EAAE,CACR,CAAC;QACF,WAAW,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QAEjE,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YACpB,mEAAmE;YACnE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAC9C,KAAK,EACL,CAAC,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,EACjD,EAAE,GAAG,EAAE,CACR,CAAC;YACF,MAAM,UAAU,GAAG,QAAQ;iBACxB,IAAI,EAAE;iBACN,KAAK,CAAC,IAAI,CAAC;iBACX,MAAM,CAAC,OAAO,CAAC;iBACf,GAAG,CAAC,MAAM,CAAC;iBACX,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAEzB,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;gBACjC,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC,CAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;gBAC1E,eAAe,GAAG,IAAI,CAAC,KAAK,CAC1B,CAAC,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAC/D,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gEAAgE;IAClE,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,EAAE,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC;IAC1D,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,GAAG,GAAG,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC;IAChE,MAAM,YAAY,GAAG,eAAe,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,GAAG,WAAW,GAAG,YAAY,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;IAEjF,MAAM,IAAI,GACR,KAAK,IAAI,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC;IAErF,OAAO;QACL,MAAM;QACN,KAAK;QACL,IAAI;QACJ,WAAW;QACX,gBAAgB;QAChB,WAAW,EAAE,IAAI,IAAI,EAAE;KACxB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAqB,EAAE,WAAmB;IAC7E,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,SAAS;YACZ,OAAO,QAAQ,CAAC;QAClB,KAAK,KAAK;YACR,OAAO,UAAU,CAAC;QACpB;YACE,OAAO,WAAW,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/types.d.ts

@@ -4,10 +4,20 @@
  * These types define the contract between the core review engine
  * and all distribution adapters (server, CLI, action).
  */
+export type { EmbeddingProvider, EmbeddingProviderFactory } from './embed.js';
 export type ReviewMode = 'simple' | 'workflow' | 'consensus' | 'diagnostic' | 'fan-out';
-export type LLMProvider = 'anthropic' | 'openai' | 'google' | 'github' | 'ollama' | 'qwen' | 'groq' | 'cerebras' | 'deepseek' | 'openrouter' | 'cli-bridge' | 'gateway';
-/** Providers available in the SaaS dashboard (excludes Ollama) */
-export type SaaSProvider = 'anthropic' | 'openai' | 'google' | 'github' | 'qwen' | 'groq' | 'cerebras' | 'deepseek' | 'openrouter' | 'cli-bridge' | 'gateway';
+/**
+ * Supported LLM provider modes.
+ * - gateway: delegates to mcp-llm-bridge (recommended for server/action)
+ * - cli-bridge: calls local CLIs directly (Claude, OpenCode, Gemini, Copilot) — CLI only
+ * - ollama: calls local Ollama instance directly (no subprocess, OpenAI-compatible)
+ *
+ * Migration: 'anthropic', 'openai', 'google', etc. → set provider: 'gateway' and
+ * configure credentials in mcp-llm-bridge vault.
+ */
+export type LLMProvider = 'gateway' | 'cli-bridge' | 'ollama';
+/** Providers available in the SaaS dashboard */
+export type SaaSProvider = 'gateway' | 'cli-bridge' | 'ollama';
 export type ReviewLevel = 'soft' | 'normal' | 'strict';
 /**
  * A single entry in the provider fallback chain.
@@ -69,6 +79,11 @@ export interface ReviewInput {
      * Undefined when memory is disabled or unavailable — pipeline degrades gracefully.
      */
     memoryStorage?: MemoryStorage;
+    /**
+     * Base URL for the local Ollama instance.
+     * Only meaningful when provider === 'ollama'. Defaults to 'http://localhost:11434/v1'.
+     */
+    ollamaBaseURL?: string;
     /**
      * Optional progress callback for verbose/debug output.
      * Called at each pipeline step with status updates.
@@ -86,8 +101,47 @@ export interface ReviewInput {
      * When undefined, blast-radius is skipped (current behavior).
      */
     graphLoader?: import('./graph/schema.js').GraphLoader;
+    /**
+     * File content reader for usage analysis.
+     * Injected by the caller to read project source files.
+     * When undefined, function-level usage analysis is skipped.
+     */
+    fileReader?: import('./exploitability/analyzer.js').FileReader;
     /** Enable AI-powered post-analysis enhancement. Default: false. */
     enhance?: boolean;
+    /**
+     * Code intelligence provider for structural queries via MCP.
+     * Injected by the caller (connects to codedb, repoforge graph, etc.).
+     * When undefined, code intelligence context is skipped (graceful degradation).
+     */
+    codeIntelProvider?: import('./code-intel/types.js').CodeIntelProvider;
+    /**
+     * Embedding provider for semantic features (hybrid search, semantic ranking, negative examples).
+     * When undefined, all embedding-dependent features are skipped (graceful degradation).
+     */
+    embeddingProvider?: import('./embed.js').EmbeddingProvider;
+    /**
+     * PR author identifier (e.g. GitHub login or git author string).
+     * Used by the author trust scoring feature when features.authorTrust is enabled.
+     * When absent, trust scoring is skipped gracefully.
+     */
+    author?: string;
+    /**
+     * Feature flags for intelligence v2 capabilities.
+     * Defaults: hybridSearch/semanticRanking auto-enable when embeddingProvider is set.
+     */
+    features?: {
+        /** Enable hybrid BM25 + semantic vector search. Default: false (auto-enabled when embeddingProvider present). */
+        hybridSearch?: boolean;
+        /** Enable author trust-based finding prioritization. Default: false. */
+        authorTrust?: boolean;
+        /** Enable circuit breaker for LLM cascading failures. Default: true. */
+        circuitBreaker?: boolean;
+        /** Enable semantic re-ranking of findings. Default: false (auto-enabled when embeddingProvider present). */
+        semanticRanking?: boolean;
+        /** Enable negative example filtering (suppress known false positives). Default: false. */
+        negativeExamples?: boolean;
+    };
 }
 export interface ReviewSettings {
     enableSemgrep: boolean;
@@ -113,6 +167,28 @@ export interface ReviewSettings {
     enableRecursiveReview?: boolean;
     /** Max re-review iterations for recursive review. Default: 2. */
     maxRecursiveIterations?: number;
+    /** Lens names to use in fan-out mode (e.g., ["security", "wcag"]). */
+    lenses?: string[];
+    /** Path to directory containing custom lens JSON definitions. Default: .ghagga/lenses/ */
+    lensDir?: string;
+    /** Enable bidirectional code-doc validation. Default: false. */
+    enableDocValidation?: boolean;
+    /** Enable code intelligence structural context via MCP. Default: false. */
+    enableCodeIntel?: boolean;
+    /** Timeout in ms for code intelligence queries. Default: 5000. */
+    codeIntelTimeout?: number;
+    /** Max tokens for code intelligence context. Default: 1500. */
+    codeIntelMaxTokens?: number;
+    /** Max concurrent LLM calls in workflow/consensus modes. Default: 2. */
+    reviewConcurrency?: number;
+    /** Delay in ms between sequential LLM call batches. Default: 0. */
+    reviewDelayMs?: number;
+    /**
+     * Path to the JSONL file for the self-improving review loop.
+     * When set, past feedback is loaded and improvement rules are injected into agent prompts.
+     * Default: undefined (feature disabled).
+     */
+    selfImprovePath?: string;
 }
 export interface ReviewContext {
     /** Repository full name (e.g., "owner/repo") */
@@ -143,7 +219,7 @@ export interface Hypothesis {
     /** Files related to this hypothesis */
     relatedFiles: string[];
 }
-export type ReviewStatus = 'PASSED' | 'FAILED' | 'NEEDS_HUMAN_REVIEW' | 'SKIPPED';
+export type ReviewStatus = 'PASSED' | 'FAILED' | 'NEEDS_HUMAN_REVIEW' | 'SKIPPED' | 'PARTIAL';
 export type FindingSeverity = 'critical' | 'high' | 'medium' | 'low' | 'info';
 export type FindingSource = 'ai' | 'semgrep' | 'trivy' | 'cpd' | (string & {});
 export interface ReviewResult {
@@ -169,6 +245,15 @@ export interface ReviewResult {
     checklistScore?: import('./checklist/scorer.js').ChecklistScoreResult;
     /** Recursive review report (present when enableRecursiveReview is true). */
     recursiveReview?: import('./recursive/types.js').RecursiveReviewReport;
+    /** Doc-validation results (present when enableDocValidation is true). */
+    docValidation?: import('./doc-validation/types.js').DocValidationResult;
+    /** Code intelligence metadata (present when enableCodeIntel is true). */
+    codeIntelMetadata?: import('./code-intel/types.js').CodeIntelMetadata;
+    /** Pipeline steps that failed but were gracefully degraded. Present when status is 'PARTIAL'. */
+    failedSteps?: {
+        step: string;
+        error: string;
+    }[];
 }
 export interface ReviewFinding {
     /** Severity level */
@@ -197,6 +282,10 @@ export interface ReviewFinding {
     exploitability?: import('./exploitability/types.js').ExploitabilityLabel;
     /** Detailed exploitability analysis (present when exploitability analysis runs). */
     exploitabilityDetail?: import('./exploitability/types.js').ExploitabilityDetail;
+    /** Function-level usage label for CVE findings (present when usage analysis runs). */
+    usageLabel?: import('./exploitability/types.js').UsageLabel;
+    /** Detailed usage analysis (present when usage analysis runs). */
+    usageDetail?: import('./exploitability/types.js').UsageDetail;
 }
 export interface ReviewMetadata {
     /** Review mode used */
@@ -440,7 +529,57 @@ export interface VersioningConfig {
     contradictionThreshold: number;
 }
 export declare const DEFAULT_VERSIONING_CONFIG: VersioningConfig;
+export type AuthorTrustTier = 'trusted' | 'standard' | 'new';
+export interface AuthorTrustScore {
+    author: string;
+    /** Normalized trust score in the range [0, 1]. */
+    score: number;
+    tier: AuthorTrustTier;
+    commitCount: number;
+    firstSeenDaysAgo: number;
+    lastUpdated: Date;
+}
+export interface NegativeExample {
+    /** SHA256(filePath + lineRange + category) — uniquely identifies a suppressed finding location. */
+    findingHash: string;
+    /** SHA256(filePath) — identifies the file context for the suppression. */
+    contextHash: string;
+    category: string;
+    reason?: string;
+    createdAt: Date;
+}
+export interface AuditInput {
+    /** Path to the repository to audit */
+    repoPath: string;
+    /** Pre-formatted static analysis context (findings as string) */
+    staticContext: string;
+    /** LLM provider identifier */
+    provider: string;
+    /** Model identifier */
+    model: string;
+    /** Decrypted API key */
+    apiKey: string;
+    /**
+     * Optional backend-agnostic generation function.
+     * When provided, used instead of creating one from provider/model/apiKey.
+     */
+    generateFn?: import('./providers/generate-fn.js').GenerateTextFn;
+    /** Optional progress callback for verbose/debug output. */
+    onProgress?: (event: ProgressEvent) => void;
+}
+export type AuditStatus = 'completed' | 'no-findings' | 'error';
+export interface AuditResult {
+    /** Audit outcome */
+    status: AuditStatus;
+    /** Executive report from the LLM auditor */
+    report: string;
+    /** Raw static analysis findings passed to the auditor */
+    findings: StaticAnalysisResult;
+    /** ISO 8601 timestamp of when the audit ran */
+    timestamp: string;
+    /** Error message when status === 'error' */
+    error?: string;
+}
 export declare const DEFAULT_SETTINGS: ReviewSettings;
 export declare const DEFAULT_MODELS: Record<LLMProvider, string>;
-export {};
 //# sourceMappingURL=types.d.ts.map