@effect-agent/pr-review 0.1.0-beta.28 → 0.1.0-beta.29

package/dist/index.mjs

@@ -1,79 +1,171 @@
-import { $ as ReviewDiscoveryPass, $n as ReadFileDiff, $t as MAX_STORED_ADJUDICATIONS, A as MAX_CHILD_FINDINGS, An as toStoredFinding, Ar as hasReviewableContent, At as buildPriorReviewContext, B as assessmentSettlesSuggestionExactly, Bn as FileSliceQuery, Bt as threadFindingTarget, C as FileReviewBrief, Cn as fromStoredFinding, Cr as normalizeRepoRelativePath, Ct as anchorViolation, D as FileReviewer, Dn as selectReviewRange, Dr as MAX_REVIEW_CONTENT_CHARS, Dt as MAX_THREAD_ADJUDICATION_COMMANDS, E as FileReviewToolkit, En as isLineageAncestor, Er as ChangedPath, Et as AdjudicationComment, F as ReviewCandidate, Fn as ChangedFilesView, Ft as noReviewAdjudicationHostLayer, G as makeFileReviewerInstructions, Gn as MAX_CONCERNS, Gt as ReviewRetirementHost, H as defaultFileReviewerPolicy, Hn as FindingSeverity, Ht as RetirableReview, I as ReviewCandidateId, In as CodeReview, It as parseIssueAdjudication, J as MAX_MERGED_FINDINGS, Jn as MAX_WALKTHROUGH_ENTRIES, Jt as hasReviewMetadataMarker, K as reviewCandidateSubjectKey, Kn as MAX_FINDINGS, Kt as ReviewRetirementReport, L as ReviewPassMisbehaved, Ln as FileDiffQuery, Lt as parseThreadAdjudication, M as MAX_REVIEW_CHILDREN, Mn as validateReviewState, Mr as parsePatch, Mt as deriveAdjudications, N as MAX_UNIT_CANDIDATES, Nn as webCryptoReviewStateAuthenticatorLayer, Nr as renderReviewContent, Nt as mergeAdjudications, O as FindingCandidate, On as selectedPullRequestSourceLayer, Or as annotatePatch, Ot as ReviewAdjudicationFailure, P as REVIEW_UNIT_CONCURRENCY, Pn as ChangedFileSummary, Pt as noReviewAdjudicationHost, Q as MAX_UNIT_FILES, Qn as ReadFile, Qt as MAX_REVIEW_STATE_MARKER_CHARS, R as ReviewWorkPerspective, Rn as FileDiffView, Rt as renderAdjudicationContextLine, S as DiscoveredConcern, Sn as fromStoredConcern, Sr as ReviewInputViolation, St as splitCarriedScope, T as FileReviewReport, Tn as fullReviewSelection, Tr as ChangedFileStatus, Tt as AdjudicableThread, U as fileReviewerInstructions, Un as ListChangedFiles, Ut as RetirableReviewComment, V as confirmedFindingForPublication, Vn as FindingCategory, Vt as INLINE_FINDING_TITLE_PATTERN, W as makeFileReviewerDefinition, Wn as ListChangedFilesQuery, Wt as ReviewRetirementFailure, X as MAX_REVIEW_UNITS, Xn as PullRequestReviewer, Xt as AdjudicationDisposition, Y as MAX_REPORTED_UNASSIGNED_EVIDENCE_SHARDS, Yn as MAX_WALKTHROUGH_SUMMARY_CHARS, Yt as retireStaleReviews, Z as MAX_UNIT_EVIDENCE_SHARDS, Zn as REVIEW_TOOL_RESULT_MAX_BYTES, Zt as GitCommitSha, _ as computeProfileFingerprint, _n as UnreviewedStage, _r as MAX_CHANGED_FILES, _t as ReviewInputCoverage, a as PriorReviews, an as ReviewMode, ar as ReviewVerdict, at as ReviewUnit, b as CandidateAssessment, bn as concernIdentity, br as PullRequestSource, bt as fanOutInputCoverage, c as fingerprintUnchanged, cn as ReviewStateAuthenticationFailure, cr as defaultReviewPolicy, ct as UNIT_EVIDENCE_CHAR_BUDGET, d as gitHubReviewAdjudicationHostLayer, dn as ReviewStateMarkerTooLarge, dr as listChangedFilesHandler, dt as planReviewUnits, en as MAX_STORED_UNREVIEWED_PASSES, er as ReviewConcern, et as ReviewDiscoveryPerspective, f as gitHubReviewPublisherLayer, fn as ReviewTreeComparison, fr as makeReviewInstructions, ft as rankAndDedupeConcerns, g as computeChangesetFingerprint, gn as StoredUnreviewedPass, gr as reviewInstructions, gt as ReviewAssurance, h as FINGERPRINT_MARKER_LENGTH, hn as StoredReviewFinding, hr as resolveGuidance, ht as FailedReviewPass, i as PriorReviewLookupFailure, in as ReviewHeadComparison, ir as ReviewToolkitLayer, it as ReviewRiskCategory, j as MAX_FILE_REVIEW_TOOL_CALLS, jn as unavailableReviewStateAuthenticatorLayer, jr as isReviewableFile, jt as collectReviewAdjudications, k as MAX_CHILD_CONCERNS, kn as toStoredConcern, kr as commentableLines, kt as ReviewAdjudicationHost, l as gitHubPriorReviewsLayer, ln as ReviewStateAuthenticator, lr as fileDiffView, lt as classifyReviewRisks, m as parseGitHubSubmittedAt, mn as StoredReviewConcern, mr as readFileHandler, mt as reviewConcernKey, n as GitHubApiFailure, nn as MAX_TREE_COMPARISON_PATHS, nr as ReviewMission, nt as ReviewEvidenceShardId, o as PublishedReview, on as ReviewScopeMode, or as WalkthroughEntry, ot as ReviewUnitId, p as gitHubReviewRetirementHostLayer, pn as StoredAdjudication, pr as readFileDiffHandler, pt as rankAndDedupeFindings, q as runFanOutReview, qn as MAX_PATCH_CHARS, qt as decideReviewRetirement, r as GitHubReviewTarget, rn as ReviewExecutionContext, rr as ReviewToolkit, rt as ReviewPassId, s as ReviewPublisher, sn as ReviewState, sr as clampMaxFindings, st as ReviewUnitPlan, t as DEFAULT_GITHUB_REVIEW_AUTHOR_LOGIN, tn as MAX_STORED_UNREVIEWED_PATHS, tr as ReviewFinding, tt as ReviewEvidenceShard, u as gitHubPullRequestSourceLayer, un as ReviewStateMarker, ur as fileReviewEvidenceChunks, ut as findingAnchorInUnitEvidence, v as extractFingerprint, vn as adjudicationIdentity, vr as MAX_FILE_CHARS, vt as assessFlatReview, w as FileReviewEvidence, wn as fullReviewExecutionContextLayer, wr as ChangedFile, wt as AUTHORIZED_ADJUDICATION_ASSOCIATIONS, x as ConcernCandidate, xn as findingIdentity, xr as PullRequestSourceFailure, xt as flatAssurance, y as renderFingerprintMarker, yn as buildProfileMission, yr as PullRequestMetadata, yt as boundedListReason, z as ReviewWorkPhase, zn as FileSlice, zt as renderPriorFindingContextLine } from "./github-CCuLgyqb.mjs";
-import { A as enforceFindingsBound, B as planPublication, C as parseProgressClaim, D as PrReview, E as renderProgressSettleBody, F as AGENT_PROMPT_PREAMBLE, G as EFFORT_ALIASES, H as renderAgentPrompt, I as ReviewCommentDraft, J as parseEffortPosition, K as InvalidEffortInput, L as ReviewEvent, M as executeReview, N as fanOutReviewBudgetLimits, O as ReviewRunOutcome, P as reviewBudgetLimits, R as ReviewPublicationPlan, S as noopReviewProgressReporterLayer, T as renderProgressClaimMarker, U as compileIgnoreGlobs, V as planWalkthrough, W as ignoringPullRequestSourceLayer, Y as resolveEffortRung, _ as readGitHubEvent, a as PROVIDER_EFFORT_RUNGS, b as ReviewProgressReporter, c as anthropicClientLayer, d as makeOpenAiReviewModel, f as openAiClientLayer, g as gitHubReviewLayers, h as ReviewTargetUnresolved, i as PROVIDER_CREDENTIAL_ENV, j as executeFanOutReview, k as buildReviewMission, l as describeReviewModel, m as GitHubEventWire, n as DEFAULT_PROVIDER, o as ReviewProvider, p as validateReviewServiceTier, q as isEffortPosition, r as OpenAiServiceTier, s as UnsupportedServiceTierProvider, t as DEFAULT_MODEL, u as makeAnthropicReviewModel, v as resolveReviewTarget, w as renderProgressBeginBody, x as gitHubReviewProgressLayer, y as PROGRESS_COMMENT_MARKER_PREFIX, z as estimateReviewEffort } from "./providers-Br9FRn7j.mjs";
-import { n as compactReviewLoggingLayer, r as formatCompactLogLine, t as compactReviewLogger } from "./logging-Q4j0oub-.mjs";
-import { Schema } from "effect";
-//#region src/internal/profiles.ts
-/** The flat reviewer's committed capability claim. */
-var PullRequestReviewerProfile = class extends Schema.Class("@effect-agent/pr-review/PullRequestReviewerProfile")({
-	/** Ephemeral runtime: one bounded AgentRuntime.run per invocation. */
-	deploymentClass: Schema.Literal("E"),
-	/** Every model-callable tool is a read of the pull request; none mutate. */
-	readOnlyToolSurface: Schema.Literal(true),
-	/** The review is posted by the host AFTER the run settles, never by a tool. */
-	publicationOutsideAgentLoop: Schema.Literal(true),
-	/** Finding anchors are validated against the parsed diff before posting. */
-	anchorsValidatedBeforePublication: Schema.Literal(true),
-	/** The live profile is env-gated out of every ordinary test gate. */
-	liveProfileOptIn: Schema.Literal(true),
-	/** Never claimed at any phase (DUR-003). */
-	exactlyOnceExternalEffects: Schema.Literal(false)
+import { Effect, Schema } from "effect";
+import { Agent, AgentPolicy, AgentRuntime, IdGenerator, UsageBudgetLimits, makeUsageBudget, toRunBudgetHook } from "effect-agent";
+import { Toolkit } from "effect/unstable/ai";
+//#region src/review.ts
+const ReviewPath = Schema.NonEmptyString.check(Schema.isMaxLength(512));
+const Revision = Schema.NonEmptyString.check(Schema.isMaxLength(128));
+/** One complete textual patch supplied by the host. */
+var ReviewChange = class extends Schema.Class("@effect-agent/pr-review/ReviewChange")({
+	path: ReviewPath,
+	patch: Schema.NonEmptyString.check(Schema.isMaxLength(8e4))
 }) {};
-const pullRequestReviewerProfile = PullRequestReviewerProfile.make({
-	deploymentClass: "E",
-	readOnlyToolSurface: true,
-	publicationOutsideAgentLoop: true,
-	anchorsValidatedBeforePublication: true,
-	liveProfileOptIn: true,
-	exactlyOnceExternalEffects: false
-});
-/** The fan-out reviewer's committed capability claim, schema-first. */
-var FanOutReviewerProfile = class extends Schema.Class("@effect-agent/pr-review/FanOutReviewerProfile")({
-	/** Ephemeral runtime: bounded host-scheduled child runs per invocation. */
-	deploymentClass: Schema.Literal("E"),
-	/** Every model-callable surface is evidence-only; children expose no tools. */
-	readOnlyToolSurface: Schema.Literal(true),
-	/** The review is posted by the host AFTER the run settles, never by a tool. */
-	publicationOutsideAgentLoop: Schema.Literal(true),
-	/** Child findings are untrusted; anchors are validated against the parsed diff. */
-	anchorsValidatedBeforePublication: Schema.Literal(true),
-	/** Host code schedules every pass from the deterministic plan; no coordinator model. */
-	hostScheduledPasses: Schema.Literal(true),
-	/** A failed pass is retried once, then reported and carried as unreviewed scope. */
-	failedPassesRetriedOnceThenCarried: Schema.Literal(true),
-	/** Risk categories and required specialist passes are pure host policy. */
-	hostOwnedRiskClassification: Schema.Literal(true),
-	/** Every host-classified high-risk unit receives a fresh specialist pass. */
-	redundantHighRiskDiscovery: Schema.Literal(true),
-	/** Only exact candidates confirmed by a fresh verifier child may publish. */
-	independentCandidateVerification: Schema.Literal(true),
-	/** No bounded model pipeline proves that a pull request is defect-free. */
-	defectAbsenceProven: Schema.Literal(false),
-	/** The live profile is env-gated out of every ordinary test gate. */
-	liveProfileOptIn: Schema.Literal(true),
-	/** Never claimed at any phase (DUR-003). */
-	exactlyOnceExternalEffects: Schema.Literal(false)
+/** The provider-neutral input to one review pass. */
+var ReviewRequest = class extends Schema.Class("@effect-agent/pr-review/ReviewRequest")({
+	title: Schema.String.check(Schema.isMaxLength(1e3)),
+	description: Schema.String.check(Schema.isMaxLength(2e4)),
+	baseRevision: Revision,
+	headRevision: Revision,
+	changes: Schema.Array(ReviewChange).check(Schema.isMaxLength(100)),
+	unreviewedPaths: Schema.Array(ReviewPath).check(Schema.isMaxLength(300))
+}) {};
+const ReviewSeverity = Schema.Literals([
+	"blocking",
+	"important",
+	"nit"
+]);
+/** A model-claimed problem kind used only to label findings for readers. */
+const ReviewCategory = Schema.Literals([
+	"correctness",
+	"security",
+	"concurrency",
+	"performance",
+	"resources",
+	"error-handling",
+	"testing",
+	"maintainability",
+	"style",
+	"docs"
+]);
+/** One actionable defect. `line` is a RIGHT-side line in the supplied patch. */
+var ReviewFinding = class extends Schema.Class("@effect-agent/pr-review/ReviewFinding")({
+	path: ReviewPath,
+	line: Schema.optionalKey(Schema.Int.check(Schema.isGreaterThan(0))),
+	severity: ReviewSeverity,
+	/** Presentation label only; it never changes review admission or failure policy. */
+	category: ReviewCategory,
+	title: Schema.NonEmptyString.check(Schema.isMaxLength(200)),
+	body: Schema.NonEmptyString.check(Schema.isMaxLength(2e3))
+}) {};
+/** The only model-authored output. An empty findings array is a successful review. */
+var ReviewReport = class extends Schema.Class("@effect-agent/pr-review/ReviewReport")({
+	summary: Schema.NonEmptyString.check(Schema.isMaxLength(6e3)),
+	findings: Schema.Array(ReviewFinding).check(Schema.isMaxLength(12))
+}) {};
+var ReviewUsage = class extends Schema.Class("@effect-agent/pr-review/ReviewUsage")({
+	inputTokens: Schema.Natural,
+	outputTokens: Schema.Natural
+}) {};
+var ReviewOutcome = class extends Schema.Class("@effect-agent/pr-review/ReviewOutcome")({
+	report: ReviewReport,
+	turns: Schema.Natural,
+	usage: ReviewUsage
 }) {};
-const fanOutReviewerProfile = FanOutReviewerProfile.make({
-	deploymentClass: "E",
-	readOnlyToolSurface: true,
-	publicationOutsideAgentLoop: true,
-	anchorsValidatedBeforePublication: true,
-	hostScheduledPasses: true,
-	failedPassesRetriedOnceThenCarried: true,
-	hostOwnedRiskClassification: true,
-	redundantHighRiskDiscovery: true,
-	independentCandidateVerification: true,
-	defectAbsenceProven: false,
-	liveProfileOptIn: true,
-	exactlyOnceExternalEffects: false
+const BASE_INSTRUCTIONS = `Review the supplied pull-request diff once.
+
+Report only concrete correctness, security, reliability, or maintainability defects that the author should act on. Do not praise, restate the change, invent missing repository context, or ask for speculative cleanup. An empty findings array is valid.
+
+Every finding must use an exact supplied path. Set line only to a RIGHT-side added or context line visible in that path's unified patch; otherwise omit line. Use blocking only for a defect that should prevent shipping. Classify each finding with the closest available category. Treat unreviewedPaths as unavailable scope and never imply that you inspected it.`;
+const reviewPolicy = AgentPolicy.make({
+	maxTurns: 1,
+	maxToolCalls: 1,
+	maxDuration: "5 minutes",
+	toolConcurrency: 1,
+	tokenBudget: 56e3,
+	completionReserveTokens: 8e3,
+	contextTokenLimit: 48e3,
+	onExhaustion: "fail"
+});
+const makeDefinition = (guidance) => Agent.define("pr-review", {
+	input: ReviewRequest,
+	output: ReviewReport,
+	instructions: guidance === void 0 || guidance.trim().length === 0 ? BASE_INSTRUCTIONS : `${BASE_INSTRUCTIONS}\n\nRepository guidance:\n${guidance.trim()}`,
+	toolkit: Toolkit.empty,
+	policy: reviewPolicy,
+	description: "Review one supplied pull-request diff in a single model call.",
+	metadata: {
+		deploymentClass: "E",
+		surface: "read-only"
+	}
+});
+const reviewBudgetLimits = UsageBudgetLimits.make({
+	maxInputTokens: 48e3,
+	maxOutputTokens: 8e3,
+	maxToolCalls: 0,
+	maxDurationMillis: 3e5
 });
-const LIVE_GATE_ENV = "EFFECT_AGENT_LIVE";
+/** Return every RIGHT-side line on which GitHub can place a diff comment. */
+const commentableLines = (patch) => {
+	const lines = /* @__PURE__ */ new Set();
+	let right;
+	for (const text of patch.split("\n")) {
+		const hunk = /^@@ -\d+(?:,\d+)? \+(\d+)(?:,\d+)? @@/.exec(text);
+		if (hunk !== null) {
+			right = Number(hunk[1]);
+			continue;
+		}
+		if (right === void 0 || text.startsWith("\\")) continue;
+		if (text.startsWith("-")) continue;
+		if (text.startsWith("+") || text.startsWith(" ")) {
+			lines.add(right);
+			right += 1;
+		}
+	}
+	return lines;
+};
+const isCommentableLine = (patch, line) => commentableLines(patch).has(line);
 /**
-* `EFFECT_AGENT_LIVE=1` plus the named credential is the only enabling
-* combination for live (network, billed) profiles.
+* Treat model output as untrusted: remove unknown paths, demote invalid line
+* anchors to top-level findings, and collapse exact duplicates.
 */
-const liveProfileEnabled = (env, credentialEnv) => env["EFFECT_AGENT_LIVE"] === "1" && (env[credentialEnv] ?? "") !== "";
+const sanitizeReviewReport = (request, report) => {
+	const patches = new Map(request.changes.map((change) => [change.path, change.patch]));
+	const seen = /* @__PURE__ */ new Set();
+	const findings = [];
+	for (const finding of report.findings) {
+		const patch = patches.get(finding.path);
+		if (patch === void 0) continue;
+		const line = finding.line !== void 0 && isCommentableLine(patch, finding.line) ? finding.line : void 0;
+		const key = `${finding.path}\u0000${String(line ?? "")}\u0000${finding.title.trim().toLowerCase()}`;
+		if (seen.has(key)) continue;
+		seen.add(key);
+		findings.push(ReviewFinding.make({
+			path: finding.path,
+			...line === void 0 ? {} : { line },
+			severity: finding.severity,
+			category: finding.category,
+			title: finding.title,
+			body: finding.body
+		}));
+	}
+	return ReviewReport.make({
+		summary: report.summary,
+		findings
+	});
+};
+/** Build a provider-neutral reviewer. The returned `review` performs exactly one Run. */
+const makeReviewer = (options) => {
+	const definition = makeDefinition(options.guidance);
+	const binding = Agent.withModel(definition, options.model);
+	const review = (request) => Effect.gen(function* () {
+		const budget = yield* makeUsageBudget(reviewBudgetLimits);
+		const result = yield* AgentRuntime.run(binding, request, { budget: toRunBudgetHook(budget) });
+		const usage = yield* budget.snapshot;
+		return ReviewOutcome.make({
+			report: sanitizeReviewReport(request, result.output),
+			turns: result.turns,
+			usage: ReviewUsage.make({
+				inputTokens: usage.inputTokens,
+				outputTokens: usage.outputTokens
+			})
+		});
+	}).pipe(Effect.provide(IdGenerator.layer), Effect.scoped);
+	return {
+		definition,
+		binding,
+		review
+	};
+};
 //#endregion
-export { AGENT_PROMPT_PREAMBLE, AUTHORIZED_ADJUDICATION_ASSOCIATIONS, AdjudicableThread, AdjudicationComment, AdjudicationDisposition, CandidateAssessment, ChangedFile, ChangedFileStatus, ChangedFileSummary, ChangedFilesView, ChangedPath, CodeReview, ConcernCandidate, DEFAULT_GITHUB_REVIEW_AUTHOR_LOGIN, DEFAULT_MODEL, DEFAULT_PROVIDER, DiscoveredConcern, EFFORT_ALIASES, FINGERPRINT_MARKER_LENGTH, FailedReviewPass, FanOutReviewerProfile, FileDiffQuery, FileDiffView, FileReviewBrief, FileReviewEvidence, FileReviewReport, FileReviewToolkit, FileReviewer, FileSlice, FileSliceQuery, FindingCandidate, FindingCategory, FindingSeverity, GitCommitSha, GitHubApiFailure, GitHubEventWire, GitHubReviewTarget, INLINE_FINDING_TITLE_PATTERN, InvalidEffortInput, LIVE_GATE_ENV, ListChangedFiles, ListChangedFilesQuery, MAX_CHANGED_FILES, MAX_CHILD_CONCERNS, MAX_CHILD_FINDINGS, MAX_CONCERNS, MAX_FILE_CHARS, MAX_FILE_REVIEW_TOOL_CALLS, MAX_FINDINGS, MAX_MERGED_FINDINGS, MAX_PATCH_CHARS, MAX_REPORTED_UNASSIGNED_EVIDENCE_SHARDS, MAX_REVIEW_CHILDREN, MAX_REVIEW_CONTENT_CHARS, MAX_REVIEW_STATE_MARKER_CHARS, MAX_REVIEW_UNITS, MAX_STORED_ADJUDICATIONS, MAX_STORED_UNREVIEWED_PASSES, MAX_STORED_UNREVIEWED_PATHS, MAX_THREAD_ADJUDICATION_COMMANDS, MAX_TREE_COMPARISON_PATHS, MAX_UNIT_CANDIDATES, MAX_UNIT_EVIDENCE_SHARDS, MAX_UNIT_FILES, MAX_WALKTHROUGH_ENTRIES, MAX_WALKTHROUGH_SUMMARY_CHARS, OpenAiServiceTier, PROGRESS_COMMENT_MARKER_PREFIX, PROVIDER_CREDENTIAL_ENV, PROVIDER_EFFORT_RUNGS, PrReview, PriorReviewLookupFailure, PriorReviews, PublishedReview, PullRequestMetadata, PullRequestReviewer, PullRequestReviewerProfile, PullRequestSource, PullRequestSourceFailure, REVIEW_TOOL_RESULT_MAX_BYTES, REVIEW_UNIT_CONCURRENCY, ReadFile, ReadFileDiff, RetirableReview, RetirableReviewComment, ReviewAdjudicationFailure, ReviewAdjudicationHost, ReviewAssurance, ReviewCandidate, ReviewCandidateId, ReviewCommentDraft, ReviewConcern, ReviewDiscoveryPass, ReviewDiscoveryPerspective, ReviewEvent, ReviewEvidenceShard, ReviewEvidenceShardId, ReviewExecutionContext, ReviewFinding, ReviewHeadComparison, ReviewInputCoverage, ReviewInputViolation, ReviewMission, ReviewMode, ReviewPassId, ReviewPassMisbehaved, ReviewProgressReporter, ReviewProvider, ReviewPublicationPlan, ReviewPublisher, ReviewRetirementFailure, ReviewRetirementHost, ReviewRetirementReport, ReviewRiskCategory, ReviewRunOutcome, ReviewScopeMode, ReviewState, ReviewStateAuthenticationFailure, ReviewStateAuthenticator, ReviewStateMarker, ReviewStateMarkerTooLarge, ReviewTargetUnresolved, ReviewToolkit, ReviewToolkitLayer, ReviewTreeComparison, ReviewUnit, ReviewUnitId, ReviewUnitPlan, ReviewVerdict, ReviewWorkPerspective, ReviewWorkPhase, StoredAdjudication, StoredReviewConcern, StoredReviewFinding, StoredUnreviewedPass, UNIT_EVIDENCE_CHAR_BUDGET, UnreviewedStage, UnsupportedServiceTierProvider, WalkthroughEntry, adjudicationIdentity, anchorViolation, annotatePatch, anthropicClientLayer, assessFlatReview, assessmentSettlesSuggestionExactly, boundedListReason, buildPriorReviewContext, buildProfileMission, buildReviewMission, clampMaxFindings, classifyReviewRisks, collectReviewAdjudications, commentableLines, compactReviewLogger, compactReviewLoggingLayer, compileIgnoreGlobs, computeChangesetFingerprint, computeProfileFingerprint, concernIdentity, confirmedFindingForPublication, decideReviewRetirement, defaultFileReviewerPolicy, defaultReviewPolicy, deriveAdjudications, describeReviewModel, enforceFindingsBound, estimateReviewEffort, executeFanOutReview, executeReview, extractFingerprint, fanOutInputCoverage, fanOutReviewBudgetLimits, fanOutReviewerProfile, fileDiffView, fileReviewEvidenceChunks, fileReviewerInstructions, findingAnchorInUnitEvidence, findingIdentity, fingerprintUnchanged, flatAssurance, formatCompactLogLine, fromStoredConcern, fromStoredFinding, fullReviewExecutionContextLayer, fullReviewSelection, gitHubPriorReviewsLayer, gitHubPullRequestSourceLayer, gitHubReviewAdjudicationHostLayer, gitHubReviewLayers, gitHubReviewProgressLayer, gitHubReviewPublisherLayer, gitHubReviewRetirementHostLayer, hasReviewMetadataMarker, hasReviewableContent, ignoringPullRequestSourceLayer, isEffortPosition, isLineageAncestor, isReviewableFile, listChangedFilesHandler, liveProfileEnabled, makeAnthropicReviewModel, makeFileReviewerDefinition, makeFileReviewerInstructions, makeOpenAiReviewModel, makeReviewInstructions, mergeAdjudications, noReviewAdjudicationHost, noReviewAdjudicationHostLayer, noopReviewProgressReporterLayer, normalizeRepoRelativePath, openAiClientLayer, parseEffortPosition, parseGitHubSubmittedAt, parseIssueAdjudication, parsePatch, parseProgressClaim, parseThreadAdjudication, planPublication, planReviewUnits, planWalkthrough, pullRequestReviewerProfile, rankAndDedupeConcerns, rankAndDedupeFindings, readFileDiffHandler, readFileHandler, readGitHubEvent, renderAdjudicationContextLine, renderAgentPrompt, renderFingerprintMarker, renderPriorFindingContextLine, renderProgressBeginBody, renderProgressClaimMarker, renderProgressSettleBody, renderReviewContent, resolveEffortRung, resolveGuidance, resolveReviewTarget, retireStaleReviews, reviewBudgetLimits, reviewCandidateSubjectKey, reviewConcernKey, reviewInstructions, runFanOutReview, selectReviewRange, selectedPullRequestSourceLayer, splitCarriedScope, threadFindingTarget, toStoredConcern, toStoredFinding, unavailableReviewStateAuthenticatorLayer, validateReviewServiceTier, validateReviewState, webCryptoReviewStateAuthenticatorLayer };
+export { ReviewCategory, ReviewChange, ReviewFinding, ReviewOutcome, ReviewReport, ReviewRequest, ReviewSeverity, ReviewUsage, commentableLines, isCommentableLine, makeReviewer, reviewBudgetLimits, reviewPolicy, sanitizeReviewReport };
 
 //# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../src/internal/profiles.ts"],"sourcesContent":["import { Schema } from \"effect\";\n\n// ---------------------------------------------------------------------------\n// Committed capability claims, schema-first: what this package's reviewers\n// promise and — just as deliberately — what they never claim. Deployment\n// class E (ephemeral): one bounded AgentRuntime.run per invocation, no\n// durability, no exactly-once external effects (DUR-003).\n// ---------------------------------------------------------------------------\n\n/** The flat reviewer's committed capability claim. */\nexport class PullRequestReviewerProfile extends Schema.Class<PullRequestReviewerProfile>(\n  \"@effect-agent/pr-review/PullRequestReviewerProfile\",\n)({\n  /** Ephemeral runtime: one bounded AgentRuntime.run per invocation. */\n  deploymentClass: Schema.Literal(\"E\"),\n  /** Every model-callable tool is a read of the pull request; none mutate. */\n  readOnlyToolSurface: Schema.Literal(true),\n  /** The review is posted by the host AFTER the run settles, never by a tool. */\n  publicationOutsideAgentLoop: Schema.Literal(true),\n  /** Finding anchors are validated against the parsed diff before posting. */\n  anchorsValidatedBeforePublication: Schema.Literal(true),\n  /** The live profile is env-gated out of every ordinary test gate. */\n  liveProfileOptIn: Schema.Literal(true),\n  /** Never claimed at any phase (DUR-003). */\n  exactlyOnceExternalEffects: Schema.Literal(false),\n}) {}\n\nexport const pullRequestReviewerProfile = PullRequestReviewerProfile.make({\n  deploymentClass: \"E\",\n  readOnlyToolSurface: true,\n  publicationOutsideAgentLoop: true,\n  anchorsValidatedBeforePublication: true,\n  liveProfileOptIn: true,\n  exactlyOnceExternalEffects: false,\n});\n\n/** The fan-out reviewer's committed capability claim, schema-first. */\nexport class FanOutReviewerProfile extends Schema.Class<FanOutReviewerProfile>(\n  \"@effect-agent/pr-review/FanOutReviewerProfile\",\n)({\n  /** Ephemeral runtime: bounded host-scheduled child runs per invocation. */\n  deploymentClass: Schema.Literal(\"E\"),\n  /** Every model-callable surface is evidence-only; children expose no tools. */\n  readOnlyToolSurface: Schema.Literal(true),\n  /** The review is posted by the host AFTER the run settles, never by a tool. */\n  publicationOutsideAgentLoop: Schema.Literal(true),\n  /** Child findings are untrusted; anchors are validated against the parsed diff. */\n  anchorsValidatedBeforePublication: Schema.Literal(true),\n  /** Host code schedules every pass from the deterministic plan; no coordinator model. */\n  hostScheduledPasses: Schema.Literal(true),\n  /** A failed pass is retried once, then reported and carried as unreviewed scope. */\n  failedPassesRetriedOnceThenCarried: Schema.Literal(true),\n  /** Risk categories and required specialist passes are pure host policy. */\n  hostOwnedRiskClassification: Schema.Literal(true),\n  /** Every host-classified high-risk unit receives a fresh specialist pass. */\n  redundantHighRiskDiscovery: Schema.Literal(true),\n  /** Only exact candidates confirmed by a fresh verifier child may publish. */\n  independentCandidateVerification: Schema.Literal(true),\n  /** No bounded model pipeline proves that a pull request is defect-free. */\n  defectAbsenceProven: Schema.Literal(false),\n  /** The live profile is env-gated out of every ordinary test gate. */\n  liveProfileOptIn: Schema.Literal(true),\n  /** Never claimed at any phase (DUR-003). */\n  exactlyOnceExternalEffects: Schema.Literal(false),\n}) {}\n\nexport const fanOutReviewerProfile = FanOutReviewerProfile.make({\n  deploymentClass: \"E\",\n  readOnlyToolSurface: true,\n  publicationOutsideAgentLoop: true,\n  anchorsValidatedBeforePublication: true,\n  hostScheduledPasses: true,\n  failedPassesRetriedOnceThenCarried: true,\n  hostOwnedRiskClassification: true,\n  redundantHighRiskDiscovery: true,\n  independentCandidateVerification: true,\n  defectAbsenceProven: false,\n  liveProfileOptIn: true,\n  exactlyOnceExternalEffects: false,\n});\n\nexport const LIVE_GATE_ENV = \"EFFECT_AGENT_LIVE\";\n\n/**\n * `EFFECT_AGENT_LIVE=1` plus the named credential is the only enabling\n * combination for live (network, billed) profiles.\n */\nexport const liveProfileEnabled = (\n  env: Record<string, string | undefined>,\n  credentialEnv: string,\n): boolean => env[LIVE_GATE_ENV] === \"1\" && (env[credentialEnv] ?? \"\") !== \"\";\n"],"mappings":";;;;;;AAUA,IAAa,6BAAb,cAAgD,OAAO,MACrD,oDACF,CAAC,CAAC;;CAEA,iBAAiB,OAAO,QAAQ,GAAG;;CAEnC,qBAAqB,OAAO,QAAQ,IAAI;;CAExC,6BAA6B,OAAO,QAAQ,IAAI;;CAEhD,mCAAmC,OAAO,QAAQ,IAAI;;CAEtD,kBAAkB,OAAO,QAAQ,IAAI;;CAErC,4BAA4B,OAAO,QAAQ,KAAK;AAClD,CAAC,CAAC,CAAC,CAAC;AAEJ,MAAa,6BAA6B,2BAA2B,KAAK;CACxE,iBAAiB;CACjB,qBAAqB;CACrB,6BAA6B;CAC7B,mCAAmC;CACnC,kBAAkB;CAClB,4BAA4B;AAC9B,CAAC;;AAGD,IAAa,wBAAb,cAA2C,OAAO,MAChD,+CACF,CAAC,CAAC;;CAEA,iBAAiB,OAAO,QAAQ,GAAG;;CAEnC,qBAAqB,OAAO,QAAQ,IAAI;;CAExC,6BAA6B,OAAO,QAAQ,IAAI;;CAEhD,mCAAmC,OAAO,QAAQ,IAAI;;CAEtD,qBAAqB,OAAO,QAAQ,IAAI;;CAExC,oCAAoC,OAAO,QAAQ,IAAI;;CAEvD,6BAA6B,OAAO,QAAQ,IAAI;;CAEhD,4BAA4B,OAAO,QAAQ,IAAI;;CAE/C,kCAAkC,OAAO,QAAQ,IAAI;;CAErD,qBAAqB,OAAO,QAAQ,KAAK;;CAEzC,kBAAkB,OAAO,QAAQ,IAAI;;CAErC,4BAA4B,OAAO,QAAQ,KAAK;AAClD,CAAC,CAAC,CAAC,CAAC;AAEJ,MAAa,wBAAwB,sBAAsB,KAAK;CAC9D,iBAAiB;CACjB,qBAAqB;CACrB,6BAA6B;CAC7B,mCAAmC;CACnC,qBAAqB;CACrB,oCAAoC;CACpC,6BAA6B;CAC7B,4BAA4B;CAC5B,kCAAkC;CAClC,qBAAqB;CACrB,kBAAkB;CAClB,4BAA4B;AAC9B,CAAC;AAED,MAAa,gBAAgB;;;;;AAM7B,MAAa,sBACX,KACA,kBACY,IAAA,yBAAuB,QAAQ,IAAI,kBAAkB,QAAQ"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../src/review.ts"],"sourcesContent":["import { Effect, Schema } from \"effect\";\nimport {\n  Agent,\n  AgentPolicy,\n  AgentRuntime,\n  IdGenerator,\n  makeUsageBudget,\n  toRunBudgetHook,\n  UsageBudgetLimits,\n} from \"effect-agent\";\nimport { type LanguageModel, type Model, Toolkit } from \"effect/unstable/ai\";\n\nconst ReviewPath = Schema.NonEmptyString.check(Schema.isMaxLength(512));\nconst Revision = Schema.NonEmptyString.check(Schema.isMaxLength(128));\n\n/** One complete textual patch supplied by the host. */\nexport class ReviewChange extends Schema.Class<ReviewChange>(\n  \"@effect-agent/pr-review/ReviewChange\",\n)({\n  path: ReviewPath,\n  patch: Schema.NonEmptyString.check(Schema.isMaxLength(80_000)),\n}) {}\n\n/** The provider-neutral input to one review pass. */\nexport class ReviewRequest extends Schema.Class<ReviewRequest>(\n  \"@effect-agent/pr-review/ReviewRequest\",\n)({\n  title: Schema.String.check(Schema.isMaxLength(1_000)),\n  description: Schema.String.check(Schema.isMaxLength(20_000)),\n  baseRevision: Revision,\n  headRevision: Revision,\n  changes: Schema.Array(ReviewChange).check(Schema.isMaxLength(100)),\n  unreviewedPaths: Schema.Array(ReviewPath).check(Schema.isMaxLength(300)),\n}) {}\n\nexport const ReviewSeverity = Schema.Literals([\"blocking\", \"important\", \"nit\"]);\nexport type ReviewSeverity = typeof ReviewSeverity.Type;\n\n/** A model-claimed problem kind used only to label findings for readers. */\nexport const ReviewCategory = Schema.Literals([\n  \"correctness\",\n  \"security\",\n  \"concurrency\",\n  \"performance\",\n  \"resources\",\n  \"error-handling\",\n  \"testing\",\n  \"maintainability\",\n  \"style\",\n  \"docs\",\n]);\nexport type ReviewCategory = typeof ReviewCategory.Type;\n\n/** One actionable defect. `line` is a RIGHT-side line in the supplied patch. */\nexport class ReviewFinding extends Schema.Class<ReviewFinding>(\n  \"@effect-agent/pr-review/ReviewFinding\",\n)({\n  path: ReviewPath,\n  line: Schema.optionalKey(Schema.Int.check(Schema.isGreaterThan(0))),\n  severity: ReviewSeverity,\n  /** Presentation label only; it never changes review admission or failure policy. */\n  category: ReviewCategory,\n  title: Schema.NonEmptyString.check(Schema.isMaxLength(200)),\n  body: Schema.NonEmptyString.check(Schema.isMaxLength(2_000)),\n}) {}\n\n/** The only model-authored output. An empty findings array is a successful review. */\nexport class ReviewReport extends Schema.Class<ReviewReport>(\n  \"@effect-agent/pr-review/ReviewReport\",\n)({\n  summary: Schema.NonEmptyString.check(Schema.isMaxLength(6_000)),\n  findings: Schema.Array(ReviewFinding).check(Schema.isMaxLength(12)),\n}) {}\n\nexport class ReviewUsage extends Schema.Class<ReviewUsage>(\"@effect-agent/pr-review/ReviewUsage\")({\n  inputTokens: Schema.Natural,\n  outputTokens: Schema.Natural,\n}) {}\n\nexport class ReviewOutcome extends Schema.Class<ReviewOutcome>(\n  \"@effect-agent/pr-review/ReviewOutcome\",\n)({\n  report: ReviewReport,\n  turns: Schema.Natural,\n  usage: ReviewUsage,\n}) {}\n\nconst BASE_INSTRUCTIONS = `Review the supplied pull-request diff once.\n\nReport only concrete correctness, security, reliability, or maintainability defects that the author should act on. Do not praise, restate the change, invent missing repository context, or ask for speculative cleanup. An empty findings array is valid.\n\nEvery finding must use an exact supplied path. Set line only to a RIGHT-side added or context line visible in that path's unified patch; otherwise omit line. Use blocking only for a defect that should prevent shipping. Classify each finding with the closest available category. Treat unreviewedPaths as unavailable scope and never imply that you inspected it.`;\n\nexport const reviewPolicy = AgentPolicy.make({\n  maxTurns: 1,\n  maxToolCalls: 1,\n  maxDuration: \"5 minutes\",\n  toolConcurrency: 1,\n  tokenBudget: 56_000,\n  completionReserveTokens: 8_000,\n  contextTokenLimit: 48_000,\n  onExhaustion: \"fail\",\n});\n\nconst makeDefinition = (guidance?: string) =>\n  Agent.define(\"pr-review\", {\n    input: ReviewRequest,\n    output: ReviewReport,\n    instructions:\n      guidance === undefined || guidance.trim().length === 0\n        ? BASE_INSTRUCTIONS\n        : `${BASE_INSTRUCTIONS}\\n\\nRepository guidance:\\n${guidance.trim()}`,\n    toolkit: Toolkit.empty,\n    policy: reviewPolicy,\n    description: \"Review one supplied pull-request diff in a single model call.\",\n    metadata: { deploymentClass: \"E\", surface: \"read-only\" },\n  });\n\nexport const reviewBudgetLimits = UsageBudgetLimits.make({\n  maxInputTokens: 48_000,\n  maxOutputTokens: 8_000,\n  maxToolCalls: 0,\n  maxDurationMillis: 300_000,\n});\n\n/** Return every RIGHT-side line on which GitHub can place a diff comment. */\nexport const commentableLines = (patch: string): ReadonlySet<number> => {\n  const lines = new Set<number>();\n  let right: number | undefined;\n  for (const text of patch.split(\"\\n\")) {\n    const hunk = /^@@ -\\d+(?:,\\d+)? \\+(\\d+)(?:,\\d+)? @@/.exec(text);\n    if (hunk !== null) {\n      right = Number(hunk[1]);\n      continue;\n    }\n    if (right === undefined || text.startsWith(\"\\\\\")) continue;\n    if (text.startsWith(\"-\")) continue;\n    if (text.startsWith(\"+\") || text.startsWith(\" \")) {\n      lines.add(right);\n      right += 1;\n    }\n  }\n  return lines;\n};\n\nexport const isCommentableLine = (patch: string, line: number): boolean =>\n  commentableLines(patch).has(line);\n\n/**\n * Treat model output as untrusted: remove unknown paths, demote invalid line\n * anchors to top-level findings, and collapse exact duplicates.\n */\nexport const sanitizeReviewReport = (\n  request: Pick<ReviewRequest, \"changes\">,\n  report: ReviewReport,\n): ReviewReport => {\n  const patches = new Map(request.changes.map((change) => [change.path, change.patch] as const));\n  const seen = new Set<string>();\n  const findings: Array<ReviewFinding> = [];\n  for (const finding of report.findings) {\n    const patch = patches.get(finding.path);\n    if (patch === undefined) continue;\n    const line =\n      finding.line !== undefined && isCommentableLine(patch, finding.line)\n        ? finding.line\n        : undefined;\n    const key = `${finding.path}\\u0000${String(line ?? \"\")}\\u0000${finding.title.trim().toLowerCase()}`;\n    if (seen.has(key)) continue;\n    seen.add(key);\n    findings.push(\n      ReviewFinding.make({\n        path: finding.path,\n        ...(line === undefined ? {} : { line }),\n        severity: finding.severity,\n        category: finding.category,\n        title: finding.title,\n        body: finding.body,\n      }),\n    );\n  }\n  return ReviewReport.make({ summary: report.summary, findings });\n};\n\nexport interface ReviewerOptions<Provider, ModelProvides, ModelRequires> {\n  readonly model: Model.Model<Provider, LanguageModel.LanguageModel | ModelProvides, ModelRequires>;\n  readonly guidance?: string | undefined;\n}\n\n/** Build a provider-neutral reviewer. The returned `review` performs exactly one Run. */\nexport const makeReviewer = <Provider, ModelProvides, ModelRequires>(\n  options: ReviewerOptions<Provider, ModelProvides, ModelRequires>,\n) => {\n  const definition = makeDefinition(options.guidance);\n  const binding = Agent.withModel(definition, options.model);\n  const review = (request: ReviewRequest) =>\n    Effect.gen(function* () {\n      const budget = yield* makeUsageBudget(reviewBudgetLimits);\n      const result = yield* AgentRuntime.run(binding, request, {\n        budget: toRunBudgetHook(budget),\n      });\n      const usage = yield* budget.snapshot;\n      return ReviewOutcome.make({\n        report: sanitizeReviewReport(request, result.output),\n        turns: result.turns,\n        usage: ReviewUsage.make({\n          inputTokens: usage.inputTokens,\n          outputTokens: usage.outputTokens,\n        }),\n      });\n    }).pipe(Effect.provide(IdGenerator.layer), Effect.scoped);\n  return { definition, binding, review } as const;\n};\n"],"mappings":";;;;AAYA,MAAM,aAAa,OAAO,eAAe,MAAM,OAAO,YAAY,GAAG,CAAC;AACtE,MAAM,WAAW,OAAO,eAAe,MAAM,OAAO,YAAY,GAAG,CAAC;;AAGpE,IAAa,eAAb,cAAkC,OAAO,MACvC,sCACF,CAAC,CAAC;CACA,MAAM;CACN,OAAO,OAAO,eAAe,MAAM,OAAO,YAAY,GAAM,CAAC;AAC/D,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,gBAAb,cAAmC,OAAO,MACxC,uCACF,CAAC,CAAC;CACA,OAAO,OAAO,OAAO,MAAM,OAAO,YAAY,GAAK,CAAC;CACpD,aAAa,OAAO,OAAO,MAAM,OAAO,YAAY,GAAM,CAAC;CAC3D,cAAc;CACd,cAAc;CACd,SAAS,OAAO,MAAM,YAAY,CAAC,CAAC,MAAM,OAAO,YAAY,GAAG,CAAC;CACjE,iBAAiB,OAAO,MAAM,UAAU,CAAC,CAAC,MAAM,OAAO,YAAY,GAAG,CAAC;AACzE,CAAC,CAAC,CAAC,CAAC;AAEJ,MAAa,iBAAiB,OAAO,SAAS;CAAC;CAAY;CAAa;AAAK,CAAC;;AAI9E,MAAa,iBAAiB,OAAO,SAAS;CAC5C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;;AAID,IAAa,gBAAb,cAAmC,OAAO,MACxC,uCACF,CAAC,CAAC;CACA,MAAM;CACN,MAAM,OAAO,YAAY,OAAO,IAAI,MAAM,OAAO,cAAc,CAAC,CAAC,CAAC;CAClE,UAAU;;CAEV,UAAU;CACV,OAAO,OAAO,eAAe,MAAM,OAAO,YAAY,GAAG,CAAC;CAC1D,MAAM,OAAO,eAAe,MAAM,OAAO,YAAY,GAAK,CAAC;AAC7D,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,eAAb,cAAkC,OAAO,MACvC,sCACF,CAAC,CAAC;CACA,SAAS,OAAO,eAAe,MAAM,OAAO,YAAY,GAAK,CAAC;CAC9D,UAAU,OAAO,MAAM,aAAa,CAAC,CAAC,MAAM,OAAO,YAAY,EAAE,CAAC;AACpE,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAa,cAAb,cAAiC,OAAO,MAAmB,qCAAqC,CAAC,CAAC;CAChG,aAAa,OAAO;CACpB,cAAc,OAAO;AACvB,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAa,gBAAb,cAAmC,OAAO,MACxC,uCACF,CAAC,CAAC;CACA,QAAQ;CACR,OAAO,OAAO;CACd,OAAO;AACT,CAAC,CAAC,CAAC,CAAC;AAEJ,MAAM,oBAAoB;;;;;AAM1B,MAAa,eAAe,YAAY,KAAK;CAC3C,UAAU;CACV,cAAc;CACd,aAAa;CACb,iBAAiB;CACjB,aAAa;CACb,yBAAyB;CACzB,mBAAmB;CACnB,cAAc;AAChB,CAAC;AAED,MAAM,kBAAkB,aACtB,MAAM,OAAO,aAAa;CACxB,OAAO;CACP,QAAQ;CACR,cACE,aAAa,KAAA,KAAa,SAAS,KAAK,CAAC,CAAC,WAAW,IACjD,oBACA,GAAG,kBAAkB,4BAA4B,SAAS,KAAK;CACrE,SAAS,QAAQ;CACjB,QAAQ;CACR,aAAa;CACb,UAAU;EAAE,iBAAiB;EAAK,SAAS;CAAY;AACzD,CAAC;AAEH,MAAa,qBAAqB,kBAAkB,KAAK;CACvD,gBAAgB;CAChB,iBAAiB;CACjB,cAAc;CACd,mBAAmB;AACrB,CAAC;;AAGD,MAAa,oBAAoB,UAAuC;CACtE,MAAM,wBAAQ,IAAI,IAAY;CAC9B,IAAI;CACJ,KAAK,MAAM,QAAQ,MAAM,MAAM,IAAI,GAAG;EACpC,MAAM,OAAO,wCAAwC,KAAK,IAAI;EAC9D,IAAI,SAAS,MAAM;GACjB,QAAQ,OAAO,KAAK,EAAE;GACtB;EACF;EACA,IAAI,UAAU,KAAA,KAAa,KAAK,WAAW,IAAI,GAAG;EAClD,IAAI,KAAK,WAAW,GAAG,GAAG;EAC1B,IAAI,KAAK,WAAW,GAAG,KAAK,KAAK,WAAW,GAAG,GAAG;GAChD,MAAM,IAAI,KAAK;GACf,SAAS;EACX;CACF;CACA,OAAO;AACT;AAEA,MAAa,qBAAqB,OAAe,SAC/C,iBAAiB,KAAK,CAAC,CAAC,IAAI,IAAI;;;;;AAMlC,MAAa,wBACX,SACA,WACiB;CACjB,MAAM,UAAU,IAAI,IAAI,QAAQ,QAAQ,KAAK,WAAW,CAAC,OAAO,MAAM,OAAO,KAAK,CAAU,CAAC;CAC7F,MAAM,uBAAO,IAAI,IAAY;CAC7B,MAAM,WAAiC,CAAC;CACxC,KAAK,MAAM,WAAW,OAAO,UAAU;EACrC,MAAM,QAAQ,QAAQ,IAAI,QAAQ,IAAI;EACtC,IAAI,UAAU,KAAA,GAAW;EACzB,MAAM,OACJ,QAAQ,SAAS,KAAA,KAAa,kBAAkB,OAAO,QAAQ,IAAI,IAC/D,QAAQ,OACR,KAAA;EACN,MAAM,MAAM,GAAG,QAAQ,KAAK,QAAQ,OAAO,QAAQ,EAAE,EAAE,QAAQ,QAAQ,MAAM,KAAK,CAAC,CAAC,YAAY;EAChG,IAAI,KAAK,IAAI,GAAG,GAAG;EACnB,KAAK,IAAI,GAAG;EACZ,SAAS,KACP,cAAc,KAAK;GACjB,MAAM,QAAQ;GACd,GAAI,SAAS,KAAA,IAAY,CAAC,IAAI,EAAE,KAAK;GACrC,UAAU,QAAQ;GAClB,UAAU,QAAQ;GAClB,OAAO,QAAQ;GACf,MAAM,QAAQ;EAChB,CAAC,CACH;CACF;CACA,OAAO,aAAa,KAAK;EAAE,SAAS,OAAO;EAAS;CAAS,CAAC;AAChE;;AAQA,MAAa,gBACX,YACG;CACH,MAAM,aAAa,eAAe,QAAQ,QAAQ;CAClD,MAAM,UAAU,MAAM,UAAU,YAAY,QAAQ,KAAK;CACzD,MAAM,UAAU,YACd,OAAO,IAAI,aAAa;EACtB,MAAM,SAAS,OAAO,gBAAgB,kBAAkB;EACxD,MAAM,SAAS,OAAO,aAAa,IAAI,SAAS,SAAS,EACvD,QAAQ,gBAAgB,MAAM,EAChC,CAAC;EACD,MAAM,QAAQ,OAAO,OAAO;EAC5B,OAAO,cAAc,KAAK;GACxB,QAAQ,qBAAqB,SAAS,OAAO,MAAM;GACnD,OAAO,OAAO;GACd,OAAO,YAAY,KAAK;IACtB,aAAa,MAAM;IACnB,cAAc,MAAM;GACtB,CAAC;EACH,CAAC;CACH,CAAC,CAAC,CAAC,KAAK,OAAO,QAAQ,YAAY,KAAK,GAAG,OAAO,MAAM;CAC1D,OAAO;EAAE;EAAY;EAAS;CAAO;AACvC"}

package/package.json

@@ -1,32 +1,17 @@
 {
   "name": "@effect-agent/pr-review",
-  "version": "0.1.0-beta.28",
+  "version": "0.1.0-beta.29",
   "exports": {
     ".": {
       "types": "./dist/index.d.mts",
       "default": "./dist/index.mjs"
-    },
-    "./testing": {
-      "types": "./dist/testing.d.mts",
-      "default": "./dist/testing.mjs"
-    },
-    "./action": {
-      "types": "./dist/action.d.mts",
-      "default": "./dist/action.mjs"
-    },
-    "./cli": {
-      "types": "./dist/cli.d.mts",
-      "default": "./dist/cli.mjs"
     }
   },
   "dependencies": {
-    "@effect/ai-anthropic": "4.0.0-rc.110",
-    "@effect/ai-openai": "4.0.0-rc.110",
-    "@effect/platform-node": "4.0.0-rc.110",
     "effect": "4.0.0-rc.110",
-    "effect-agent": "0.1.0-beta.28"
+    "effect-agent": "0.1.0-beta.29"
   },
-  "description": "Bounded, fail-closed GitHub pull-request reviewer built on the effect-agent public surface: schema-first review contracts, read-only tools, GitHub adapters, a configuration factory, and CLI + GitHub Actions entrypoints.",
+  "description": "A provider-neutral, single-pass pull-request review agent.",
   "license": "MIT",
   "repository": {
     "type": "git",

package/src/index.ts

@@ -1,25 +1 @@
-// The @effect-agent/pr-review public surface. Platform-free: host entrypoints
-// live behind the "./action" and "./cli" subpaths, deterministic test helpers
-// behind "./testing".
-export * from "./internal/adjudication.ts";
-export * from "./internal/anchors.ts";
-export * from "./internal/diff.ts";
-export * from "./internal/coverage.ts";
-export * from "./internal/effort.ts";
-export * from "./internal/factory.ts";
-export * from "./internal/fan-out.ts";
-export * from "./internal/fingerprint.ts";
-export * from "./internal/github.ts";
-export * from "./internal/github-env.ts";
-export * from "./internal/ignore.ts";
-export * from "./internal/logging.ts";
-export * from "./internal/profiles.ts";
-export * from "./internal/progress.ts";
-export * from "./internal/providers.ts";
-export * from "./internal/render.ts";
-export * from "./internal/retirement.ts";
-export * from "./internal/review-agent.ts";
-export * from "./internal/review-state.ts";
-export * from "./internal/review-units.ts";
-export * from "./internal/run.ts";
-export * from "./internal/source.ts";
+export * from "./review.ts";

package/src/review.ts

@@ -0,0 +1,212 @@
+import { Effect, Schema } from "effect";
+import {
+  Agent,
+  AgentPolicy,
+  AgentRuntime,
+  IdGenerator,
+  makeUsageBudget,
+  toRunBudgetHook,
+  UsageBudgetLimits,
+} from "effect-agent";
+import { type LanguageModel, type Model, Toolkit } from "effect/unstable/ai";
+
+const ReviewPath = Schema.NonEmptyString.check(Schema.isMaxLength(512));
+const Revision = Schema.NonEmptyString.check(Schema.isMaxLength(128));
+
+/** One complete textual patch supplied by the host. */
+export class ReviewChange extends Schema.Class<ReviewChange>(
+  "@effect-agent/pr-review/ReviewChange",
+)({
+  path: ReviewPath,
+  patch: Schema.NonEmptyString.check(Schema.isMaxLength(80_000)),
+}) {}
+
+/** The provider-neutral input to one review pass. */
+export class ReviewRequest extends Schema.Class<ReviewRequest>(
+  "@effect-agent/pr-review/ReviewRequest",
+)({
+  title: Schema.String.check(Schema.isMaxLength(1_000)),
+  description: Schema.String.check(Schema.isMaxLength(20_000)),
+  baseRevision: Revision,
+  headRevision: Revision,
+  changes: Schema.Array(ReviewChange).check(Schema.isMaxLength(100)),
+  unreviewedPaths: Schema.Array(ReviewPath).check(Schema.isMaxLength(300)),
+}) {}
+
+export const ReviewSeverity = Schema.Literals(["blocking", "important", "nit"]);
+export type ReviewSeverity = typeof ReviewSeverity.Type;
+
+/** A model-claimed problem kind used only to label findings for readers. */
+export const ReviewCategory = Schema.Literals([
+  "correctness",
+  "security",
+  "concurrency",
+  "performance",
+  "resources",
+  "error-handling",
+  "testing",
+  "maintainability",
+  "style",
+  "docs",
+]);
+export type ReviewCategory = typeof ReviewCategory.Type;
+
+/** One actionable defect. `line` is a RIGHT-side line in the supplied patch. */
+export class ReviewFinding extends Schema.Class<ReviewFinding>(
+  "@effect-agent/pr-review/ReviewFinding",
+)({
+  path: ReviewPath,
+  line: Schema.optionalKey(Schema.Int.check(Schema.isGreaterThan(0))),
+  severity: ReviewSeverity,
+  /** Presentation label only; it never changes review admission or failure policy. */
+  category: ReviewCategory,
+  title: Schema.NonEmptyString.check(Schema.isMaxLength(200)),
+  body: Schema.NonEmptyString.check(Schema.isMaxLength(2_000)),
+}) {}
+
+/** The only model-authored output. An empty findings array is a successful review. */
+export class ReviewReport extends Schema.Class<ReviewReport>(
+  "@effect-agent/pr-review/ReviewReport",
+)({
+  summary: Schema.NonEmptyString.check(Schema.isMaxLength(6_000)),
+  findings: Schema.Array(ReviewFinding).check(Schema.isMaxLength(12)),
+}) {}
+
+export class ReviewUsage extends Schema.Class<ReviewUsage>("@effect-agent/pr-review/ReviewUsage")({
+  inputTokens: Schema.Natural,
+  outputTokens: Schema.Natural,
+}) {}
+
+export class ReviewOutcome extends Schema.Class<ReviewOutcome>(
+  "@effect-agent/pr-review/ReviewOutcome",
+)({
+  report: ReviewReport,
+  turns: Schema.Natural,
+  usage: ReviewUsage,
+}) {}
+
+const BASE_INSTRUCTIONS = `Review the supplied pull-request diff once.
+
+Report only concrete correctness, security, reliability, or maintainability defects that the author should act on. Do not praise, restate the change, invent missing repository context, or ask for speculative cleanup. An empty findings array is valid.
+
+Every finding must use an exact supplied path. Set line only to a RIGHT-side added or context line visible in that path's unified patch; otherwise omit line. Use blocking only for a defect that should prevent shipping. Classify each finding with the closest available category. Treat unreviewedPaths as unavailable scope and never imply that you inspected it.`;
+
+export const reviewPolicy = AgentPolicy.make({
+  maxTurns: 1,
+  maxToolCalls: 1,
+  maxDuration: "5 minutes",
+  toolConcurrency: 1,
+  tokenBudget: 56_000,
+  completionReserveTokens: 8_000,
+  contextTokenLimit: 48_000,
+  onExhaustion: "fail",
+});
+
+const makeDefinition = (guidance?: string) =>
+  Agent.define("pr-review", {
+    input: ReviewRequest,
+    output: ReviewReport,
+    instructions:
+      guidance === undefined || guidance.trim().length === 0
+        ? BASE_INSTRUCTIONS
+        : `${BASE_INSTRUCTIONS}\n\nRepository guidance:\n${guidance.trim()}`,
+    toolkit: Toolkit.empty,
+    policy: reviewPolicy,
+    description: "Review one supplied pull-request diff in a single model call.",
+    metadata: { deploymentClass: "E", surface: "read-only" },
+  });
+
+export const reviewBudgetLimits = UsageBudgetLimits.make({
+  maxInputTokens: 48_000,
+  maxOutputTokens: 8_000,
+  maxToolCalls: 0,
+  maxDurationMillis: 300_000,
+});
+
+/** Return every RIGHT-side line on which GitHub can place a diff comment. */
+export const commentableLines = (patch: string): ReadonlySet<number> => {
+  const lines = new Set<number>();
+  let right: number | undefined;
+  for (const text of patch.split("\n")) {
+    const hunk = /^@@ -\d+(?:,\d+)? \+(\d+)(?:,\d+)? @@/.exec(text);
+    if (hunk !== null) {
+      right = Number(hunk[1]);
+      continue;
+    }
+    if (right === undefined || text.startsWith("\\")) continue;
+    if (text.startsWith("-")) continue;
+    if (text.startsWith("+") || text.startsWith(" ")) {
+      lines.add(right);
+      right += 1;
+    }
+  }
+  return lines;
+};
+
+export const isCommentableLine = (patch: string, line: number): boolean =>
+  commentableLines(patch).has(line);
+
+/**
+ * Treat model output as untrusted: remove unknown paths, demote invalid line
+ * anchors to top-level findings, and collapse exact duplicates.
+ */
+export const sanitizeReviewReport = (
+  request: Pick<ReviewRequest, "changes">,
+  report: ReviewReport,
+): ReviewReport => {
+  const patches = new Map(request.changes.map((change) => [change.path, change.patch] as const));
+  const seen = new Set<string>();
+  const findings: Array<ReviewFinding> = [];
+  for (const finding of report.findings) {
+    const patch = patches.get(finding.path);
+    if (patch === undefined) continue;
+    const line =
+      finding.line !== undefined && isCommentableLine(patch, finding.line)
+        ? finding.line
+        : undefined;
+    const key = `${finding.path}\u0000${String(line ?? "")}\u0000${finding.title.trim().toLowerCase()}`;
+    if (seen.has(key)) continue;
+    seen.add(key);
+    findings.push(
+      ReviewFinding.make({
+        path: finding.path,
+        ...(line === undefined ? {} : { line }),
+        severity: finding.severity,
+        category: finding.category,
+        title: finding.title,
+        body: finding.body,
+      }),
+    );
+  }
+  return ReviewReport.make({ summary: report.summary, findings });
+};
+
+export interface ReviewerOptions<Provider, ModelProvides, ModelRequires> {
+  readonly model: Model.Model<Provider, LanguageModel.LanguageModel | ModelProvides, ModelRequires>;
+  readonly guidance?: string | undefined;
+}
+
+/** Build a provider-neutral reviewer. The returned `review` performs exactly one Run. */
+export const makeReviewer = <Provider, ModelProvides, ModelRequires>(
+  options: ReviewerOptions<Provider, ModelProvides, ModelRequires>,
+) => {
+  const definition = makeDefinition(options.guidance);
+  const binding = Agent.withModel(definition, options.model);
+  const review = (request: ReviewRequest) =>
+    Effect.gen(function* () {
+      const budget = yield* makeUsageBudget(reviewBudgetLimits);
+      const result = yield* AgentRuntime.run(binding, request, {
+        budget: toRunBudgetHook(budget),
+      });
+      const usage = yield* budget.snapshot;
+      return ReviewOutcome.make({
+        report: sanitizeReviewReport(request, result.output),
+        turns: result.turns,
+        usage: ReviewUsage.make({
+          inputTokens: usage.inputTokens,
+          outputTokens: usage.outputTokens,
+        }),
+      });
+    }).pipe(Effect.provide(IdGenerator.layer), Effect.scoped);
+  return { definition, binding, review } as const;
+};