harivansh-afk/claude-code-vertical/verifier

<verifier-skill>
[This skill]
</verifier-skill>
 
<verification-spec>
- type: command
  run: "npm run typecheck"
  expect: exit_code 0
 
- type: file-contains
  path: src/auth/password.ts
  pattern: "bcrypt"
</verification-spec>
 
Run all checks. Report PASS or FAIL with details.

- type: command
  run: "npm run typecheck"
  expect: exit_code 0

npm run typecheck
echo "Exit code: $?"

- type: file-contains
  path: src/auth/password.ts
  pattern: "bcrypt"

grep -q "bcrypt" src/auth/password.ts && echo "FOUND" || echo "NOT FOUND"

- type: file-not-contains
  path: src/auth/password.ts
  pattern: "console.log.*password"

grep -E "console.log.*password" src/auth/password.ts && echo "FOUND (BAD)" || echo "NOT FOUND (GOOD)"

- type: file-exists
  path: src/auth/password.ts

- type: agent
  name: security-review
  prompt: |
    Check password implementation:
    1. Verify bcrypt usage
    2. Check cost factor >= 10

Check 1: [command] npm typecheck -> PASS
Check 2: [file-contains] bcrypt -> PASS
Check 3: [file-not-contains] password log -> FAIL
STOP - Do not run remaining checks

RESULT: PASS
 
Checks completed: 5/5
 
1. [command] npm run typecheck
   Status: PASS
   Exit code: 0
 
2. [command] npm test
   Status: PASS
   Exit code: 0
 
3. [file-contains] bcrypt in src/auth/password.ts
   Status: PASS
   Found: line 5: import bcrypt from 'bcrypt'
 
4. [file-not-contains] password logging
   Status: PASS
   Pattern not found in src/
 
5. [agent] security-review
   Status: PASS
   Evidence:
     - bcrypt: ✓ (line 5)
     - cost factor: 12 (line 15)
     - no logging: ✓
 
All checks passed.

RESULT: FAIL
 
Checks completed: 2/5
 
1. [command] npm run typecheck
   Status: PASS
   Exit code: 0
 
2. [command] npm test
   Status: FAIL
   Exit code: 1
   Expected: exit_code 0
   Actual: exit_code 1
 
   Error output:
   FAIL src/auth/password.test.ts
     ✕ hashPassword should return hashed string
       Error: Cannot find module 'bcrypt'
 
Suggested fix: Run `npm install bcrypt`

5. [agent] security-review
   Status: FAIL
 
   Evidence:
     File: src/auth/password.ts
     Line 15: const hash = md5(password)
 
   Criterion failed: "Verify bcrypt is used (not md5)"
   Found: md5 usage instead of bcrypt
 
   Suggested fix: Replace md5 with bcrypt.hash()

1. [command] npm run typecheck
   Status: ERROR
   Error: Command 'npm' not found
 
   This is an environment issue, not code.
   Suggested fix: Ensure npm is installed and in PATH

2. [file-contains] bcrypt in src/auth/password.ts
   Status: FAIL
   Error: File not found: src/auth/password.ts
 
   The file doesn't exist.
   Suggested fix: Create src/auth/password.ts

1. [command] npm test
   Status: TIMEOUT
   Error: Command timed out after 60 seconds
 
   Possible causes:
   - Infinite loop in tests
   - Missing test setup
   - Hung process
 
   Suggested fix: Check test configuration

if output contains "RESULT: PASS":
  → weaver creates PR
else if output contains "RESULT: FAIL":
  → weaver reads "Suggested fix" line
  → weaver applies fix
  → weaver respawns you