code-mower 0.5.0b46__tar.gz → 0.5.0b48__tar.gz

{code_mower-0.5.0b46 → code_mower-0.5.0b48}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: code-mower
-Version: 0.5.0b46
+Version: 0.5.0b48
 Summary: Multi-reviewer AI code audit orchestration
 License-Expression: Apache-2.0
 Requires-Python: >=3.11
@@ -103,11 +103,11 @@ Code Mower currently targets Python 3.11+; Python 3.12 is recommended.
 
 ```bash
 python3.12 --version
-pipx install --python python3.12 code-mower==0.5.0b46
+pipx install --python python3.12 code-mower==0.5.0b48
 code-mower --version
 ```
 
-`0.5.0b46` is a beta release. Until Code Mower publishes a stable `1.0`
+`0.5.0b48` is a beta release. Until Code Mower publishes a stable `1.0`
 line, use the explicit beta version above or allow prereleases with:
 
 ```bash
@@ -155,7 +155,7 @@ First-time command map: [docs/launch-command-surface.md](docs/launch-command-sur
 
 The current PyPI beta has been rehearsed end-to-end from a clean install:
 [First-User Install Rehearsal](docs/first-user-install-rehearsal.md) records
-the latest 10/10 public-package readiness proof for `code-mower==0.5.0b46`.
+the latest 10/10 public-package readiness proof for `code-mower==0.5.0b48`.
 
 ## Optional: Plan Before Coding
 
@@ -310,9 +310,9 @@ builder provenance, start with
 
 ## Installation Status
 
-The current public beta is `v0.5.0-beta.46` from
+The current public beta is `v0.5.0-beta.48` from
 [codemower-ai/code-mower](https://github.com/codemower-ai/code-mower), published
-as `code-mower==0.5.0b46` on [PyPI](https://pypi.org/project/code-mower/).
+as `code-mower==0.5.0b48` on [PyPI](https://pypi.org/project/code-mower/).
 GitHub releases remain the auditable source for tags, build artifacts, and
 release notes.
 

{code_mower-0.5.0b46 → code_mower-0.5.0b48}/README.md

@@ -88,11 +88,11 @@ Code Mower currently targets Python 3.11+; Python 3.12 is recommended.
 
 ```bash
 python3.12 --version
-pipx install --python python3.12 code-mower==0.5.0b46
+pipx install --python python3.12 code-mower==0.5.0b48
 code-mower --version
 ```
 
-`0.5.0b46` is a beta release. Until Code Mower publishes a stable `1.0`
+`0.5.0b48` is a beta release. Until Code Mower publishes a stable `1.0`
 line, use the explicit beta version above or allow prereleases with:
 
 ```bash
@@ -140,7 +140,7 @@ First-time command map: [docs/launch-command-surface.md](docs/launch-command-sur
 
 The current PyPI beta has been rehearsed end-to-end from a clean install:
 [First-User Install Rehearsal](docs/first-user-install-rehearsal.md) records
-the latest 10/10 public-package readiness proof for `code-mower==0.5.0b46`.
+the latest 10/10 public-package readiness proof for `code-mower==0.5.0b48`.
 
 ## Optional: Plan Before Coding
 
@@ -295,9 +295,9 @@ builder provenance, start with
 
 ## Installation Status
 
-The current public beta is `v0.5.0-beta.46` from
+The current public beta is `v0.5.0-beta.48` from
 [codemower-ai/code-mower](https://github.com/codemower-ai/code-mower), published
-as `code-mower==0.5.0b46` on [PyPI](https://pypi.org/project/code-mower/).
+as `code-mower==0.5.0b48` on [PyPI](https://pypi.org/project/code-mower/).
 GitHub releases remain the auditable source for tags, build artifacts, and
 release notes.
 

{code_mower-0.5.0b46 → code_mower-0.5.0b48}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "code-mower"
-version = "0.5.0b46"
+version = "0.5.0b48"
 description = "Multi-reviewer AI code audit orchestration"
 requires-python = ">=3.11"
 readme = "README.md"

{code_mower-0.5.0b46 → code_mower-0.5.0b48}/src/code_mower/__init__.py

@@ -1,3 +1,3 @@
 """Code Mower package."""
 
-__version__ = "0.5.0b46"
+__version__ = "0.5.0b48"

{code_mower-0.5.0b46 → code_mower-0.5.0b48}/src/code_mower/audit_labeler_lib.py

@@ -10,6 +10,7 @@ has proven the shared library on main.
 from __future__ import annotations
 
 import functools
+import hashlib
 import json
 import os
 import sys
@@ -24,9 +25,15 @@ import re
 MIN_ABBREVIATED_SHA_LENGTH = 7
 AUTHOR_EXCLUSION_ENV = "CODE_MOWER_AUTHOR_EXCLUSION_JSON"
 ACTIONS_RUN_MARKER_RE = re.compile(
-    r"<!--\s*CODE_MOWER_AUDIT_RUN:\s*run_id=([0-9]+)\s*-->"
+    r"<!--\s*CODE_MOWER_AUDIT_RUN:\s*run_id=([0-9]+)"
+    r"(?:\s+comment_id=([0-9]+))?"
+    r"(?:\s+body_sha256=([0-9a-f]{64}))?\s*-->"
 )
 TRUSTED_ACTIONS_AUDIT_EVENTS = frozenset({"pull_request_target"})
+AUDIT_RUN_NON_TERMINAL_STATUSES = frozenset(
+    {"queued", "requested", "waiting", "pending", "in_progress"}
+)
+HEAD_SHA_LINE_RE = re.compile(r"Head SHA:\s*`?([0-9a-fA-F]{7,40})`?", re.IGNORECASE)
 
 
 @dataclass(frozen=True)
@@ -44,6 +51,13 @@ class GitHubToken:
     value: str
 
 
+@dataclass(frozen=True)
+class ActionsRunMarker:
+    run_id: str
+    comment_id: str
+    body_sha256: str
+
+
 @dataclass(frozen=True)
 class LaneConfig:
     name: str
@@ -300,8 +314,32 @@ def parse_csv_set(raw: str) -> frozenset[str]:
 
 
 def parse_audit_run_id(body: str) -> str:
+    marker = parse_audit_run_marker(body)
+    return marker.run_id if marker else ""
+
+
+def parse_audit_run_marker(body: str) -> Optional[ActionsRunMarker]:
     match = ACTIONS_RUN_MARKER_RE.search(body)
-    return match.group(1) if match else ""
+    if not match:
+        return None
+    return ActionsRunMarker(
+        run_id=match.group(1),
+        comment_id=match.group(2) or "",
+        body_sha256=match.group(3) or "",
+    )
+
+
+def audit_run_marker_body_digest_matches(body: str) -> bool:
+    match = ACTIONS_RUN_MARKER_RE.search(body)
+    if not match or not match.group(2) or not match.group(3):
+        return False
+    canonical_marker = (
+        "<!-- CODE_MOWER_AUDIT_RUN: "
+        f"run_id={match.group(1)} comment_id={match.group(2)} -->"
+    )
+    canonical_body = body[: match.start()] + canonical_marker + body[match.end() :]
+    digest = hashlib.sha256(canonical_body.encode("utf-8")).hexdigest()
+    return digest == match.group(3)
 
 
 def workflow_path_matches(path: str, trusted_workflows: Sequence[str]) -> bool:
@@ -310,6 +348,192 @@ def workflow_path_matches(path: str, trusted_workflows: Sequence[str]) -> bool:
     return any(path == item or path.endswith("/" + item) for item in trusted_workflows)
 
 
+def flatten_paginated_items(payload: Any) -> list[dict[str, Any]]:
+    items: list[dict[str, Any]] = []
+    if isinstance(payload, list):
+        for page in payload:
+            if isinstance(page, list):
+                items.extend(item for item in page if isinstance(item, dict))
+            elif isinstance(page, dict):
+                items.append(page)
+    return items
+
+
+def audit_comment_head_sha(body: str) -> str:
+    match = HEAD_SHA_LINE_RE.search(body)
+    return match.group(1) if match else ""
+
+
+def terminal_audit_trailer_verdict(lane: Mapping[str, Any], body: str) -> str:
+    candidates: list[tuple[int, str]] = []
+    for label_key, verdict in (("done", "done"), ("blocked", "blocked")):
+        label = str(lane.get(label_key) or "")
+        if not label:
+            continue
+        index = body.rfind(": " + label + " -->")
+        if index >= 0:
+            candidates.append((index, verdict))
+    if not candidates:
+        return ""
+    return max(candidates, key=lambda item: item[0])[1]
+
+
+def current_audit_trailer_verdict(
+    lane: Mapping[str, Any],
+    body: str,
+    *,
+    head_sha: str,
+) -> str:
+    if "Head SHA: `" + head_sha + "`" not in body:
+        return ""
+    return terminal_audit_trailer_verdict(lane, body)
+
+
+def latest_current_audit_verdict(
+    lane: Mapping[str, Any],
+    comments: Sequence[Mapping[str, Any]],
+    *,
+    head_sha: str,
+    trusted_comment_author: Callable[
+        [Mapping[str, Any], str, str, object, str | None],
+        bool,
+    ],
+) -> str:
+    verdicts: list[tuple[tuple[str, str, int, int], str]] = []
+    for index, comment in enumerate(comments):
+        author = str(((comment.get("user") or {}).get("login")) or "")
+        body = str(comment.get("body") or "")
+        if not trusted_comment_author(lane, author, body, comment.get("id"), None):
+            continue
+        verdict = current_audit_trailer_verdict(lane, body, head_sha=head_sha)
+        if verdict:
+            try:
+                comment_id = int(comment.get("id") or 0)
+            except (TypeError, ValueError):
+                comment_id = 0
+            updated = str(
+                comment.get("updated_at")
+                or comment.get("updatedAt")
+                or comment.get("created_at")
+                or comment.get("createdAt")
+                or ""
+            )
+            created = str(comment.get("created_at") or comment.get("createdAt") or "")
+            verdicts.append(((updated, created, comment_id, index), verdict))
+    if verdicts:
+        return max(verdicts, key=lambda item: item[0])[1]
+    return ""
+
+
+def attested_non_current_audit_heads(
+    lanes: Sequence[Mapping[str, Any]],
+    comments: Sequence[Mapping[str, Any]],
+    *,
+    head_sha: str,
+    trusted_comment_author: Callable[
+        [Mapping[str, Any], str, str, object, str | None],
+        bool,
+    ],
+) -> list[str]:
+    heads: list[str] = []
+    for comment in comments:
+        author = str(((comment.get("user") or {}).get("login")) or "")
+        body = str(comment.get("body") or "")
+        reviewed = audit_comment_head_sha(body)
+        if not reviewed or sha_matches(reviewed, head_sha):
+            continue
+        for lane in lanes:
+            if not terminal_audit_trailer_verdict(lane, body):
+                continue
+            if not trusted_comment_author(lane, author, body, comment.get("id"), reviewed):
+                continue
+            heads.append(reviewed)
+            break
+    return list(dict.fromkeys(heads))
+
+
+def audit_run_workflow_path(run: Mapping[str, Any]) -> str:
+    return str(run.get("path") or run.get("workflow_path") or run.get("workflowPath") or "")
+
+
+def audit_run_matches_pr_head(
+    run: Mapping[str, Any],
+    *,
+    head_sha: str,
+    pr_number: int | str,
+) -> bool:
+    run_head_sha = str(run.get("head_sha") or "")
+    pull_requests = [
+        item for item in run.get("pull_requests") or [] if isinstance(item, Mapping)
+    ]
+    for item in pull_requests:
+        if not isinstance(item, Mapping):
+            continue
+        if str(item.get("number") or "") != str(pr_number):
+            continue
+        pr_head = str(((item.get("head") or {}).get("sha")) or "")
+        if pr_head and sha_matches(pr_head, head_sha):
+            return True
+        if run_head_sha and sha_matches(run_head_sha, head_sha):
+            return True
+    if pull_requests:
+        return False
+    if run_head_sha and sha_matches(run_head_sha, head_sha):
+        return True
+    return False
+
+
+def _audit_lane_match_tokens(lane: Mapping[str, Any]) -> set[str]:
+    tokens = [
+        str(lane.get("id") or ""),
+        str(lane.get("author_lane") or ""),
+        str(lane.get("display_name") or ""),
+    ]
+    for label_key in ("done", "blocked"):
+        label = str(lane.get(label_key) or "")
+        for suffix in ("-audit-done", "-audit-blocked", "-done", "-blocked"):
+            if label.endswith(suffix):
+                tokens.append(label[: -len(suffix)])
+    return {token.strip().lower().replace("_", "-") for token in tokens if token.strip()}
+
+
+def audit_job_matches_lane(job: Mapping[str, Any], lane: Mapping[str, Any]) -> bool:
+    name = str(job.get("name") or "").lower().replace("_", "-")
+    return any(token in name for token in _audit_lane_match_tokens(lane))
+
+
+def audit_run_in_flight_for_lane(
+    entry: Mapping[str, Any],
+    lane: Mapping[str, Any],
+    *,
+    head_sha: str,
+    pr_number: int | str,
+) -> bool:
+    run = entry.get("run") if isinstance(entry.get("run"), Mapping) else entry
+    if not isinstance(run, Mapping):
+        return False
+    if str(run.get("status") or "") not in AUDIT_RUN_NON_TERMINAL_STATUSES:
+        return False
+    workflows = parse_csv_set(str(lane.get("github_actions_workflows") or ""))
+    if not workflow_path_matches(audit_run_workflow_path(run), workflows):
+        return False
+    if not audit_run_matches_pr_head(run, head_sha=head_sha, pr_number=pr_number):
+        return False
+    jobs = entry.get("jobs") if isinstance(entry.get("jobs"), list) else []
+    non_terminal_jobs = [
+        job
+        for job in jobs
+        if isinstance(job, Mapping)
+        and (
+            str(job.get("status") or "") in AUDIT_RUN_NON_TERMINAL_STATUSES
+            or (str(job.get("status") or "") != "completed" and job.get("conclusion") is None)
+        )
+    ]
+    if non_terminal_jobs:
+        return any(audit_job_matches_lane(job, lane) for job in non_terminal_jobs)
+    return bool(entry.get("jobs_fetch_failed") or not jobs)
+
+
 def _pr_item_matches_head(
     item: Mapping[str, Any],
     *,
@@ -357,6 +581,7 @@ def github_actions_comment_attested(
     *,
     repo: str,
     body: str,
+    comment_id: int | str | None = None,
     issue_number: int,
     head_sha: str,
     workflow_paths: Sequence[str],
@@ -367,14 +592,19 @@ def github_actions_comment_attested(
     """Return whether a github-actions[bot] audit comment is tied to this PR head."""
     trusted_workflows = tuple(parse_csv_set(",".join(workflow_paths)))
     token_list = tuple(token for token in tokens if token.value)
-    run_id = parse_audit_run_id(body)
-    if not trusted_workflows or not token_list or not run_id or not head_sha:
+    marker = parse_audit_run_marker(body)
+    comment_id_text = str(comment_id or "").strip()
+    if not trusted_workflows or not token_list or marker is None or not head_sha:
+        return False
+    if not comment_id_text or marker.comment_id != comment_id_text:
+        return False
+    if not audit_run_marker_body_digest_matches(body):
         return False
     try:
         if actions_run_lookup is None:
-            run = fetch_actions_run(repo, run_id, tokens=token_list)
+            run = fetch_actions_run(repo, marker.run_id, tokens=token_list)
         else:
-            run = dict(actions_run_lookup(run_id))
+            run = dict(actions_run_lookup(marker.run_id))
     except Exception:
         return False
 

{code_mower-0.5.0b46 → code_mower-0.5.0b48}/src/code_mower/calibration/__init__.py

@@ -85,6 +85,7 @@ from .run_status import (
     RUN_STATUS_CATEGORY_ALIASES,
     RUN_STATUS_INFRA_ERROR,
     RUN_STATUS_PASS,
+    RUN_STATUS_STALE,
     RUN_STATUS_UNKNOWN,
     count_normalized_findings,
     normalize_run_status_category,
@@ -119,6 +120,7 @@ __all__ = [
     "RUN_STATUS_CATEGORY_ALIASES",
     "RUN_STATUS_INFRA_ERROR",
     "RUN_STATUS_PASS",
+    "RUN_STATUS_STALE",
     "RUN_STATUS_UNKNOWN",
     "SELECTIVE_USEFUL_RATE",
     "TRUTH_EXPECTATION_ALIASES",

{code_mower-0.5.0b46 → code_mower-0.5.0b48}/src/code_mower/calibration/effect_report.py

@@ -12,6 +12,7 @@ from .run_status import (
     RUN_STATUS_BLOCKED,
     RUN_STATUS_INFRA_ERROR,
     RUN_STATUS_PASS,
+    RUN_STATUS_STALE,
     normalize_run_status_category,
 )
 
@@ -39,6 +40,7 @@ class CellStats:
     known_blocked_missed_runs: int = 0
     audit_input_insufficient_runs: int = 0
     infra_error_runs: int = 0
+    stale_runs: int = 0
     unknown_blocked_runs: int = 0
     known_clean_runs: int = 0
     known_clean_pass_runs: int = 0
@@ -94,6 +96,7 @@ class CellStats:
             "clean_nonblocking_finding_runs": self.clean_nonblocking_finding_runs,
             "audit_input_insufficient_runs": self.audit_input_insufficient_runs,
             "infra_error_runs": self.infra_error_runs,
+            "stale_runs": self.stale_runs,
             "unknown_blocked_runs": self.unknown_blocked_runs,
             "duration_seconds_total": round(self.duration_seconds_total, 3),
             "seconds_per_run": _round_or_none(self.seconds_per_run),
@@ -209,8 +212,12 @@ def build_effect_report(
                 cell.audit_input_insufficient_runs += 1
             elif status_category == RUN_STATUS_INFRA_ERROR:
                 cell.infra_error_runs += 1
+            elif status_category == RUN_STATUS_STALE:
+                cell.stale_runs += 1
             else:
                 cell.unknown_blocked_runs += 1
+        elif status_category == RUN_STATUS_STALE:
+            cell.stale_runs += 1
         if known_clean:
             cell.known_clean_runs += 1
             if status_category == RUN_STATUS_PASS and finding_count == 0:
@@ -489,8 +496,8 @@ def render_effect_report_text(report: Mapping[str, Any]) -> str:
         "",
         "## Provider/Lens Cells",
         "",
-        "| Provider | Lens | Runs | Blocked caught/missed | Input gaps | Clean pass/false block | Effective catch | Evaluable catch | False-blocker rate | Sec/run |",
-        "| --- | --- | ---: | --- | ---: | --- | ---: | ---: | ---: | ---: |",
+        "| Provider | Lens | Runs | Blocked caught/missed | Input gaps | Stale | Clean pass/false block | Effective catch | Evaluable catch | False-blocker rate | Sec/run |",
+        "| --- | --- | ---: | --- | ---: | ---: | --- | ---: | ---: | ---: | ---: |",
     ]
     for cell in report.get("cells", []) or []:
         if not isinstance(cell, Mapping):
@@ -504,6 +511,7 @@ def render_effect_report_text(report: Mapping[str, Any]) -> str:
                     str(cell.get("runs", 0)),
                     f"{cell.get('known_blocked_caught_runs', 0)}/{cell.get('known_blocked_missed_runs', 0)}",
                     str(cell.get("audit_input_insufficient_runs", 0)),
+                    str(cell.get("stale_runs", 0)),
                     f"{cell.get('known_clean_pass_runs', 0)}/{cell.get('blocking_false_positive_runs', 0)}",
                     _format_rate(cell.get("effective_catch_rate")),
                     _format_rate(cell.get("catch_rate")),

{code_mower-0.5.0b46 → code_mower-0.5.0b48}/src/code_mower/calibration/evidence_report.py

@@ -12,6 +12,7 @@ from .run_status import (
     RUN_STATUS_BLOCKED,
     RUN_STATUS_INFRA_ERROR,
     RUN_STATUS_PASS,
+    RUN_STATUS_STALE,
     RUN_STATUS_UNKNOWN,
     normalize_run_status_category,
 )
@@ -77,6 +78,7 @@ def build_reviewer_evidence_report(corpus: Mapping[str, Any]) -> dict[str, Any]:
     profile_known_blocked_missed_run_keys: dict[str, set[tuple[Any, ...]]] = {}
     profile_audit_input_insufficient_run_keys: dict[str, set[tuple[Any, ...]]] = {}
     profile_infra_error_run_keys: dict[str, set[tuple[Any, ...]]] = {}
+    profile_stale_run_keys: dict[str, set[tuple[Any, ...]]] = {}
     profile_run_statuses: dict[str, dict[str, int]] = {}
     profile_automated_vs_manual: dict[str, dict[str, int]] = {}
     profile_review_classes: dict[str, set[str]] = {}
@@ -303,6 +305,8 @@ def build_reviewer_evidence_report(corpus: Mapping[str, Any]) -> dict[str, Any]:
                 profile_infra_error_run_keys.setdefault(reviewer, set()).add(
                     reviewer_run_key
                 )
+            if status_category == RUN_STATUS_STALE:
+                profile_stale_run_keys.setdefault(reviewer, set()).add(reviewer_run_key)
             if status_category == RUN_STATUS_AUDIT_INPUT_INSUFFICIENT:
                 profile_audit_input_insufficient_run_keys.setdefault(
                     reviewer, set()
@@ -358,6 +362,7 @@ def build_reviewer_evidence_report(corpus: Mapping[str, Any]) -> dict[str, Any]:
                 profile_known_blocked_missed_run_keys.get(reviewer, set())
             ),
             "infra_error_runs": len(profile_infra_error_run_keys.get(reviewer, set())),
+            "stale_runs": len(profile_stale_run_keys.get(reviewer, set())),
             "audit_input_insufficient_runs": len(
                 profile_audit_input_insufficient_run_keys.get(reviewer, set())
             ),

{code_mower-0.5.0b46 → code_mower-0.5.0b48}/src/code_mower/calibration/policy.py

@@ -32,6 +32,7 @@ def build_lane_policy_report(metrics: Mapping[str, Any]) -> dict[str, Any]:
         false_positive_runs = int(stats.get("blocking_false_positive_runs") or 0)
         known_blocked_missed_runs = int(stats.get("known_blocked_missed_runs") or 0)
         infra_error_runs = int(stats.get("infra_error_runs") or 0)
+        stale_runs = int(stats.get("stale_runs") or 0)
         audit_input_insufficient_runs = int(
             stats.get("audit_input_insufficient_runs") or 0
         )
@@ -158,6 +159,7 @@ def build_lane_policy_report(metrics: Mapping[str, Any]) -> dict[str, Any]:
             ),
             "known_blocked_missed_runs": known_blocked_missed_runs,
             "infra_error_runs": infra_error_runs,
+            "stale_runs": stale_runs,
             "audit_input_insufficient_runs": audit_input_insufficient_runs,
             "observed_pr_count": observed_pr_count,
             "reasons": reasons

{code_mower-0.5.0b46 → code_mower-0.5.0b48}/src/code_mower/calibration/run_status.py

@@ -9,6 +9,7 @@ RUN_STATUS_PASS = "pass"
 RUN_STATUS_BLOCKED = "blocked"
 RUN_STATUS_AUDIT_INPUT_INSUFFICIENT = "audit_input_insufficient"
 RUN_STATUS_INFRA_ERROR = "infra_error"
+RUN_STATUS_STALE = "stale"
 RUN_STATUS_UNKNOWN = "unknown"
 
 RUN_STATUS_CATEGORY_ALIASES = {
@@ -36,7 +37,9 @@ RUN_STATUS_CATEGORY_ALIASES = {
     "rate_limit": RUN_STATUS_INFRA_ERROR,
     "rate_limited": RUN_STATUS_INFRA_ERROR,
     "setup_error": RUN_STATUS_INFRA_ERROR,
-    "stale": RUN_STATUS_INFRA_ERROR,
+    "stale": RUN_STATUS_STALE,
+    "superseded": RUN_STATUS_STALE,
+    "superseded_head": RUN_STATUS_STALE,
     "timeout": RUN_STATUS_INFRA_ERROR,
     "timed_out": RUN_STATUS_INFRA_ERROR,
 }

{code_mower-0.5.0b46 → code_mower-0.5.0b48}/src/code_mower/calibration/value_report.py

@@ -56,8 +56,8 @@ def render_value_report_text(report: Mapping[str, Any]) -> str:
         f"Run dispositions: {report.get('run_disposition_count', 0)}",
         f"Reviewer runs: {report.get('reviewer_run_count', 0)}",
         "",
-        "| Reviewer | Runs | Useful | Negative | Useful rate | Known-clean pass | Known-blocked caught/missed | Infra errors | Input gaps | Auto/manual M/MB/FB | Cost | Sec/run | Cost/useful | Policy | Recommended role |",
-        "| --- | ---: | ---: | ---: | ---: | ---: | --- | ---: | ---: | --- | ---: | ---: | ---: | --- | --- |",
+        "| Reviewer | Runs | Useful | Negative | Useful rate | Known-clean pass | Known-blocked caught/missed | Infra errors | Stale | Input gaps | Auto/manual M/MB/FB | Cost | Sec/run | Cost/useful | Policy | Recommended role |",
+        "| --- | ---: | ---: | ---: | ---: | ---: | --- | ---: | ---: | ---: | --- | ---: | ---: | ---: | --- | --- |",
     ]
     if isinstance(profiles, Mapping) and profiles:
         for profile_id, stats in sorted(profiles.items()):
@@ -89,6 +89,7 @@ def render_value_report_text(report: Mapping[str, Any]) -> str:
                         str(stats.get("known_clean_pass_runs", 0)),
                         caught_missed,
                         str(stats.get("infra_error_runs", 0)),
+                        str(stats.get("stale_runs", 0)),
                         str(stats.get("audit_input_insufficient_runs", 0)),
                         auto_manual,
                         str(stats.get("cost_usd", 0)),
@@ -109,7 +110,7 @@ def render_value_report_text(report: Mapping[str, Any]) -> str:
                 + " |"
             )
     else:
-        lines.append("| none | 0 | 0 | 0 |  | 0 | 0/0 | 0 | 0 | 0/0/0 | 0 |  |  |  |  |")
+        lines.append("| none | 0 | 0 | 0 |  | 0 | 0/0 | 0 | 0 | 0 | 0/0/0 | 0 |  |  |  |  |")
 
     recommendations = metrics.get("recommendations", []) if isinstance(metrics, Mapping) else []
     lines.extend(["", "## Recommendations"])
@@ -188,6 +189,7 @@ def render_value_report_html(report: Mapping[str, Any]) -> str:
                 f"<td>{esc(stats.get('negative_findings', 0))}</td>"
                 f"<td>{esc(stats.get('useful_rate', ''))}</td>"
                 f"<td>{esc(caught_missed)}</td>"
+                f"<td>{esc(stats.get('stale_runs', 0))}</td>"
                 f"<td>{esc(auto_manual)}</td>"
                 f"<td>{esc(stats.get('cost_usd', 0))}</td>"
                 f"<td>{esc(stats.get('seconds_per_run', ''))}</td>"
@@ -195,7 +197,7 @@ def render_value_report_html(report: Mapping[str, Any]) -> str:
                 "</tr>"
             )
     else:
-        rows.append("<tr><td colspan='10'>No reviewer rows yet.</td></tr>")
+        rows.append("<tr><td colspan='11'>No reviewer rows yet.</td></tr>")
 
     recommendation_items = (
         "\n".join(f"<li>{esc(item)}</li>" for item in recommendations)
@@ -242,7 +244,7 @@ def render_value_report_html(report: Mapping[str, Any]) -> str:
         "  </section>\n"
         "  <section class='card'>\n"
         "    <h2>Reviewer / lens signal</h2>\n"
-        "    <table><thead><tr><th>Reviewer</th><th>Runs</th><th>Useful</th><th>Negative</th><th>Useful rate</th><th>Blocked caught/missed</th><th>Auto/manual</th><th>Cost</th><th>Sec/run</th><th>Role</th></tr></thead>\n"
+        "    <table><thead><tr><th>Reviewer</th><th>Runs</th><th>Useful</th><th>Negative</th><th>Useful rate</th><th>Blocked caught/missed</th><th>Stale</th><th>Auto/manual</th><th>Cost</th><th>Sec/run</th><th>Role</th></tr></thead>\n"
         f"    <tbody>{''.join(rows)}</tbody></table>\n"
         "  </section>\n"
         "  <section class='card'>\n"