@goodandready/dsh-github-ops 0.6.12 → 0.6.14

package/CHANGELOG.md

@@ -1,6 +1,11 @@
 # Changelog
 
-## 0.6.12
+## 0.6.14
+
+### Features
+- **Inline PR Review Workspace in Web UI (#116)**: Added interactive side-by-side / hunk diff viewer in the Web UI repository panel (`tab === 'pulls'`) with line number tracking (`oldLine` / `newLine`), click-to-comment inline review form, one-click ```suggestion``` snippet generator, live review thread discussion viewer with reply inputs, conversation resolution toggling (`resolve_thread`), and full pull request review submissions (Approve, Comment, Request Changes) backed by dedicated `/dsh-github-ops/pr-review` endpoint.
+
+## 0.6.13
 
 ### Features
 - **GitHub Discussions GraphQL Tools (#118)**: Added `gh_discussion_list`, `gh_discussion_view`, `gh_discussion_create`, and `gh_discussion_comment` tools using GitHub GraphQL API with `confirm: true` protection for creating discussions and posting threaded replies.

package/lib/client.js

@@ -20,6 +20,7 @@ window.__ModuleLoader__.load({
     const SCM_PATH = '/dsh-github-ops/scm'
     const MIRROR_PATH = '/dsh-github-ops/mirror'
     const PANEL_PATH = '/dsh-github-ops/panel'
+    const PR_REVIEW_PATH = '/dsh-github-ops/pr-review'
 
     const fetchWithTimeout = (url, options = {}, timeoutMs = 15000) => {
       const signal = (typeof AbortSignal !== 'undefined' && typeof AbortSignal.timeout === 'function')
@@ -132,6 +133,26 @@ window.__ModuleLoader__.load({
       panelSecurityDisabled: 'Security features are disabled or token lacks security scope.',
       panelChangelog: 'Changelog',
       panelChangelogEmpty: 'No conventional changelog entries found.',
+      panelPrReviewBtn: 'Review',
+      panelPrBack: '← Pull requests',
+      panelPrFilesChanged: 'Files changed',
+      panelPrAddComment: 'Add comment',
+      panelPrInsertSuggestion: 'Insert suggestion',
+      panelPrSubmitReview: 'Submit review',
+      panelPrApprove: 'Approve',
+      panelPrComment: 'Comment',
+      panelPrRequestChanges: 'Request changes',
+      panelPrReviewBody: 'Review summary…',
+      panelPrReply: 'Reply',
+      panelPrReplyPlaceholder: 'Write a reply…',
+      panelPrCommentPlaceholder: 'Leave a comment…',
+      panelPrResolve: 'Resolve conversation',
+      panelPrUnresolve: 'Unresolve conversation',
+      panelPrResolved: 'Resolved',
+      panelPrUnresolved: 'Unresolved',
+      panelPrApplySuggestion: 'Apply suggestion',
+      panelPrEmptyDiff: 'No diff hunks available for this file.',
+      panelPrRefresh: 'Refresh',
       panelCopyMarkdown: 'Copy Markdown',
       panelDiagnose: 'Diagnose',
       panelDiagnosing: 'Diagnosing…',
@@ -262,6 +283,26 @@ window.__ModuleLoader__.load({
       panelSecurityDisabled: '安全功能已禁用或令牌缺少安全权限。',
       panelChangelog: '更新日志',
       panelChangelogEmpty: '未找到常规提交更新日志记录。',
+      panelPrReviewBtn: '评审',
+      panelPrBack: '← 返回 PR 列表',
+      panelPrFilesChanged: '变更文件',
+      panelPrAddComment: '添加行评论',
+      panelPrInsertSuggestion: '插入修改建议',
+      panelPrSubmitReview: '提交评审',
+      panelPrApprove: '批准',
+      panelPrComment: '评论',
+      panelPrRequestChanges: '请求修改',
+      panelPrReviewBody: '评审总结…',
+      panelPrReply: '回复',
+      panelPrReplyPlaceholder: '填写回复…',
+      panelPrCommentPlaceholder: '填写评论…',
+      panelPrResolve: '解决讨论',
+      panelPrUnresolve: '重新打开讨论',
+      panelPrResolved: '已解决',
+      panelPrUnresolved: '未解决',
+      panelPrApplySuggestion: '应用建议',
+      panelPrEmptyDiff: '该文件无可显示的差异代码块。',
+      panelPrRefresh: '刷新',
       panelCopyMarkdown: '复制 Markdown',
       panelDiagnose: '诊断',
       panelDiagnosing: '诊断中…',
@@ -873,6 +914,7 @@ window.__ModuleLoader__.load({
       const [tree, setTree] = React.useState({ phase: 'idle', path: '', entries: [] })
       const [file, setFile] = React.useState(null)
       const [items, setItems] = React.useState({ phase: 'idle', list: [] })
+      const [selectedPr, setSelectedPr] = React.useState(null)
       const [error, setError] = React.useState('')
       const [loading, setLoading] = React.useState(false)
       const [securityData, setSecurityData] = React.useState({ phase: 'idle', data: null })
@@ -1035,6 +1077,12 @@ window.__ModuleLoader__.load({
               style: { marginLeft: '8px' },
               onClick: (e) => { e.stopPropagation(); loadDiagnostics(item.id) },
             }, diagnoseLoadingId === item.id ? t('panelDiagnosing') : t('panelDiagnose')) : null,
+            tab === 'pulls' ? React.createElement('button', {
+              type: 'button',
+              className: 'gho-diagnose-btn',
+              style: { marginLeft: '8px' },
+              onClick: (e) => { e.stopPropagation(); setSelectedPr(item.number) },
+            }, t('panelPrReviewBtn')) : null,
             item.url || item.html_url ? React.createElement('a', { className: 'gho-link', href: item.url || item.html_url, target: '_blank', rel: 'noreferrer' }, '↗') : null,
           ),
           diagnostics && diagnostics.runId === item.id ? React.createElement('div', { style: { padding: '8px', border: '1px solid var(--dsw-alias-border-l2)', borderRadius: '6px', margin: '4px 0 8px', background: 'var(--dsw-alias-bg-layer-2)' } },
@@ -1198,6 +1246,24 @@ window.__ModuleLoader__.load({
         )
       })()
 
+      if (tab === 'pulls' && selectedPr) {
+        return React.createElement('div', { className: 'gho-panel' },
+          header,
+          React.createElement('div', { className: 'gho-panel-tabs' },
+            tabButton('tree', 'Code'),
+            tabButton('issues', t('panelIssues')),
+            tabButton('pulls', t('panelPulls')),
+            tabButton('runs', t('panelRuns')),
+            tabButton('security', t('panelSecurity')),
+            tabButton('changelog', t('panelChangelog')),
+            tabButton('inbox', t('panelInbox')),
+            tabButton('matrix', t('panelMatrix')),
+            React.createElement('button', { type: 'button', className: 'gho-panel-tab', onClick: () => { setRepo(''); setFile(null); setSelectedPr(null) } }, t('panelRepo')),
+          ),
+          React.createElement(PRReviewWorkspace, { repo, number: selectedPr, t, onBack: () => setSelectedPr(null) }),
+        )
+      }
+
       return React.createElement('div', { className: 'gho-panel' },
         header,
         React.createElement('div', { className: 'gho-panel-tabs' },
@@ -1332,10 +1398,280 @@ window.__ModuleLoader__.load({
         '.gho-toast-success{border-left:4px solid #22c55e}',
         '.gho-toast-warn{border-left:4px solid #ef4444}',
         '.gho-toast-info{border-left:4px solid #6366f1}',
+        '.gho-pr-workspace{display:flex;flex-direction:column;gap:10px;padding:8px 0}',
+        '.gho-pr-header{display:flex;flex-direction:column;gap:6px;padding:10px;border:1px solid var(--dsw-alias-border-l2);border-radius:8px;background:var(--dsw-alias-bg-layer-2)}',
+        '.gho-pr-file{border:1px solid var(--dsw-alias-border-l2);border-radius:8px;margin-bottom:12px;overflow:hidden}',
+        '.gho-pr-file-head{display:flex;justify-content:space-between;align-items:center;padding:8px 12px;background:var(--dsw-alias-bg-layer-2);border-bottom:1px solid var(--dsw-alias-border-l2);font-size:12px;font-weight:600}',
+        '.gho-pr-line-wrap{display:flex;flex-direction:column}',
+        '.gho-pr-gutter{width:60px;flex-shrink:0;display:flex;justify-content:space-between;padding:0 6px;user-select:none;color:var(--dsw-alias-label-tertiary);background:var(--dsw-alias-bg-layer-2);border-right:1px solid var(--dsw-alias-border-l2);cursor:pointer}',
+        '.gho-pr-gutter:hover{background:rgba(99,102,241,0.15);color:#818cf8}',
+        '.gho-pr-thread{margin:6px 12px;padding:8px;border-radius:6px;border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-2);font-size:12px}',
+        '.gho-pr-thread-head{display:flex;justify-content:space-between;margin-bottom:6px;font-weight:600}',
+        '.gho-pr-comment{margin:4px 0;padding:4px 0;border-bottom:1px solid var(--dsw-alias-border-l2)}',
+        '.gho-pr-comment:last-child{border-bottom:0}',
+        '.gho-pr-inline-box{margin:6px 12px;padding:8px;border-radius:6px;border:1px solid rgba(99,102,241,0.3);background:var(--dsw-alias-bg-layer-2);display:flex;flex-direction:column;gap:6px}',
       ].join('\n')
       document.head.appendChild(style)
     }
 
+    function PRReviewWorkspace(props) {
+      const repo = props.repo
+      const number = props.number
+      const t = props.t || ((key) => key)
+      const onBack = props.onBack
+
+      const [reviewData, setReviewData] = React.useState({ phase: 'loading', data: null, error: '' })
+      const [activeComment, setActiveComment] = React.useState(null)
+      const [replyState, setReplyState] = React.useState({ threadId: null, commentId: null, body: '' })
+      const [reviewSubmit, setReviewSubmit] = React.useState({ open: false, body: '', event: 'COMMENT' })
+      const [busy, setBusy] = React.useState('')
+      const [actionError, setActionError] = React.useState('')
+
+      const loadData = React.useCallback(() => {
+        setReviewData((prev) => ({ ...prev, phase: 'loading', error: '' }))
+        fetchWithTimeout(`${PR_REVIEW_PATH}?repo=${encodeURIComponent(repo)}&number=${number}`, { headers: { accept: 'application/json' } })
+          .then((res) => (res.ok ? res.json() : Promise.reject(new Error(`HTTP ${res.status}`))))
+          .then((payload) => {
+            if (payload.configured === false) {
+              setReviewData({ phase: 'error', data: null, error: payload.guidance || t('panelNoAccess') })
+              return
+            }
+            setReviewData({ phase: 'ready', data: payload, error: '' })
+          })
+          .catch((err) => setReviewData({ phase: 'error', data: null, error: String((err && err.message) || err) }))
+      }, [repo, number, t])
+
+      React.useEffect(() => {
+        loadData()
+      }, [loadData])
+
+      const sendAction = (action, extra) => {
+        setBusy(action)
+        setActionError('')
+        return fetchWithTimeout(PR_REVIEW_PATH, {
+          method: 'POST',
+          headers: { 'content-type': 'application/json', accept: 'application/json' },
+          body: JSON.stringify({ action, repo, number, ...(extra || {}) }),
+        })
+          .then((res) => (res.ok ? res.json() : Promise.reject(new Error(`HTTP ${res.status}`))))
+          .then((payload) => {
+            setBusy('')
+            if (!payload.ok) throw new Error(payload.error || 'Action failed')
+            loadData()
+            return payload
+          })
+          .catch((err) => {
+            setBusy('')
+            setActionError(String((err && err.message) || err))
+          })
+      }
+
+      if (reviewData.phase === 'loading') {
+        return React.createElement('div', { className: 'gho-panel-muted', style: { padding: '16px' } }, t('panelLoading'))
+      }
+      if (reviewData.phase === 'error' || !reviewData.data) {
+        return React.createElement('div', { className: 'gho-panel-muted', style: { padding: '16px' } },
+          React.createElement('button', { type: 'button', className: 'gho-link', onClick: onBack }, t('panelPrBack')),
+          React.createElement('div', { className: 'gho-scm-error', style: { marginTop: '8px' } }, reviewData.error || t('panelEmpty')),
+        )
+      }
+
+      const pull = reviewData.data.pull || {}
+      const files = reviewData.data.files || []
+      const threads = reviewData.data.threads || []
+
+      const header = React.createElement('div', { className: 'gho-pr-header' },
+        React.createElement('div', { style: { display: 'flex', justifyContent: 'space-between', alignItems: 'center' } },
+          React.createElement('button', { type: 'button', className: 'gho-link', style: { margin: 0 }, onClick: onBack }, t('panelPrBack')),
+          React.createElement('div', { style: { display: 'flex', gap: '6px' } },
+            React.createElement('button', { type: 'button', className: 'gho-diagnose-btn', disabled: Boolean(busy), onClick: loadData }, t('panelPrRefresh')),
+            React.createElement('button', {
+              type: 'button',
+              className: 'gho-diagnose-btn',
+              style: { background: 'var(--dsw-alias-color-primary, #1f6feb)', color: '#fff', border: 0 },
+              onClick: () => setReviewSubmit((s) => ({ ...s, open: !s.open })),
+            }, t('panelPrSubmitReview')),
+          ),
+        ),
+        React.createElement('div', { style: { display: 'flex', gap: '8px', alignItems: 'baseline' } },
+          React.createElement('strong', { style: { fontSize: '14px' } }, `#${pull.number} ${pull.title}`),
+          React.createElement('span', { className: `gho-badge gho-badge-${pull.state === 'open' ? 'active' : (pull.merged ? 'healthy' : 'failing')}` }, pull.state),
+        ),
+        React.createElement('div', { className: 'gho-panel-muted', style: { fontSize: '11px', display: 'flex', gap: '10px' } },
+          React.createElement('span', null, `${pull.base || 'main'} ← ${pull.head || ''}`),
+          React.createElement('span', null, `@${pull.author || 'unknown'}`),
+          pull.changedFiles ? React.createElement('span', null, `${pull.changedFiles} files (+${pull.additions || 0} -${pull.deletions || 0})`) : null,
+        ),
+        actionError ? React.createElement('div', { className: 'gho-scm-meta gho-scm-error' }, actionError) : null,
+      )
+
+      const reviewSubmitBox = reviewSubmit.open ? React.createElement('div', { className: 'gho-pr-inline-box', style: { margin: '8px 0' } },
+        React.createElement('div', { style: { display: 'flex', gap: '8px', marginBottom: '4px' } },
+          React.createElement('button', {
+            type: 'button',
+            className: `gho-diagnose-btn${reviewSubmit.event === 'COMMENT' ? ' gho-badge-active' : ''}`,
+            onClick: () => setReviewSubmit((s) => ({ ...s, event: 'COMMENT' })),
+          }, t('panelPrComment')),
+          React.createElement('button', {
+            type: 'button',
+            className: `gho-diagnose-btn${reviewSubmit.event === 'APPROVE' ? ' gho-badge-healthy' : ''}`,
+            onClick: () => setReviewSubmit((s) => ({ ...s, event: 'APPROVE' })),
+          }, t('panelPrApprove')),
+          React.createElement('button', {
+            type: 'button',
+            className: `gho-diagnose-btn${reviewSubmit.event === 'REQUEST_CHANGES' ? ' gho-badge-failing' : ''}`,
+            onClick: () => setReviewSubmit((s) => ({ ...s, event: 'REQUEST_CHANGES' })),
+          }, t('panelPrRequestChanges')),
+        ),
+        React.createElement('textarea', {
+          className: 'gho-panel-input',
+          style: { minHeight: '60px', resize: 'vertical' },
+          placeholder: t('panelPrReviewBody'),
+          value: reviewSubmit.body,
+          onChange: (e) => setReviewSubmit((s) => ({ ...s, body: e.target.value })),
+        }),
+        React.createElement('div', { style: { display: 'flex', gap: '6px', justifyContent: 'flex-end' } },
+          React.createElement('button', { type: 'button', className: 'gho-diagnose-btn', onClick: () => setReviewSubmit({ open: false, body: '', event: 'COMMENT' }) }, t('scmAbort')),
+          React.createElement('button', {
+            type: 'button',
+            className: 'gho-diagnose-btn',
+            style: { background: 'var(--dsw-alias-color-primary, #1f6feb)', color: '#fff', border: 0 },
+            disabled: Boolean(busy),
+            onClick: () => sendAction('submit_review', { body: reviewSubmit.body, event: reviewSubmit.event }).then(() => setReviewSubmit({ open: false, body: '', event: 'COMMENT' })),
+          }, t('panelPrSubmitReview')),
+        ),
+      ) : null
+
+      const filesList = React.createElement('div', null,
+        React.createElement('div', { style: { fontWeight: 600, fontSize: '13px', margin: '10px 0 6px' } }, `${t('panelPrFilesChanged')} (${files.length})`),
+        files.map((file, fIdx) => React.createElement('div', { key: file.filename || fIdx, className: 'gho-pr-file' },
+          React.createElement('div', { className: 'gho-pr-file-head' },
+            React.createElement('span', null, file.filename),
+            React.createElement('span', { className: 'gho-panel-muted' }, `+${file.additions} -${file.deletions} · ${file.status}`),
+          ),
+          (!file.hunks || file.hunks.length === 0)
+            ? React.createElement('div', { className: 'gho-panel-muted', style: { padding: '8px 12px' } }, t('panelPrEmptyDiff'))
+            : file.hunks.map((hunk, hIdx) => React.createElement('div', { key: hIdx, className: 'gho-diff-hunk' },
+                React.createElement('div', { className: 'gho-diff-hunk-head' },
+                  React.createElement('span', { className: 'gho-diff-hunk-title' }, hunk.header),
+                ),
+                React.createElement('div', { className: 'gho-diff-hunk-body' },
+                  hunk.lines.map((line, lIdx) => {
+                    const isHeader = line.type === 'hunk_header'
+                    if (isHeader) return null
+                    const targetLine = line.newLine || line.oldLine
+                    const isCommenting = activeComment && activeComment.path === file.filename && activeComment.line === targetLine
+                    const matchingThreads = threads.filter((th) => th.path === file.filename && (th.line === line.newLine || (!line.newLine && th.line === line.oldLine)))
+
+                    return React.createElement('div', { key: lIdx, className: 'gho-pr-line-wrap' },
+                      React.createElement('div', { className: `gho-diff-line gho-diff-${line.type}` },
+                        React.createElement('div', {
+                          className: 'gho-pr-gutter',
+                          title: t('panelPrAddComment'),
+                          onClick: () => setActiveComment({ path: file.filename, line: targetLine, side: line.newLine ? 'RIGHT' : 'LEFT', body: '' }),
+                        },
+                          React.createElement('span', null, line.oldLine || ' '),
+                          React.createElement('span', null, line.newLine || ' '),
+                        ),
+                        React.createElement('span', { className: 'gho-diff-char' }, line.type === 'add' ? '+' : (line.type === 'del' ? '-' : ' ')),
+                        React.createElement('span', { className: 'gho-diff-text' }, line.type === 'add' || line.type === 'del' ? line.text.slice(1) : line.text),
+                      ),
+                      isCommenting ? React.createElement('div', { className: 'gho-pr-inline-box' },
+                        React.createElement('textarea', {
+                          className: 'gho-panel-input',
+                          style: { minHeight: '50px' },
+                          placeholder: t('panelPrCommentPlaceholder'),
+                          value: activeComment.body,
+                          onChange: (e) => setActiveComment((prev) => ({ ...prev, body: e.target.value })),
+                        }),
+                        React.createElement('div', { style: { display: 'flex', gap: '6px', justifyContent: 'space-between' } },
+                          React.createElement('button', {
+                            type: 'button',
+                            className: 'gho-diagnose-btn',
+                            onClick: () => {
+                              const snippet = line.type === 'add' || line.type === 'del' ? line.text.slice(1) : line.text
+                              setActiveComment((prev) => ({ ...prev, body: (prev.body ? prev.body + '\n' : '') + '```suggestion\n' + snippet + '\n```' }))
+                            },
+                          }, t('panelPrInsertSuggestion')),
+                          React.createElement('div', { style: { display: 'flex', gap: '6px' } },
+                            React.createElement('button', { type: 'button', className: 'gho-diagnose-btn', onClick: () => setActiveComment(null) }, t('scmAbort')),
+                            React.createElement('button', {
+                              type: 'button',
+                              className: 'gho-diagnose-btn',
+                              style: { background: 'var(--dsw-alias-color-primary, #1f6feb)', color: '#fff', border: 0 },
+                              disabled: Boolean(busy) || !activeComment.body.trim(),
+                              onClick: () => sendAction('comment', { path: activeComment.path, line: activeComment.line, side: activeComment.side, body: activeComment.body }).then(() => setActiveComment(null)),
+                            }, t('panelPrAddComment')),
+                          ),
+                        ),
+                      ) : null,
+                      matchingThreads.map((th, thIdx) => React.createElement('div', { key: th.id || thIdx, className: 'gho-pr-thread' },
+                        React.createElement('div', { className: 'gho-pr-thread-head' },
+                          React.createElement('span', null, `Thread #${String(th.id).slice(-6)}`),
+                          React.createElement('span', { className: `gho-badge gho-badge-${th.isResolved ? 'healthy' : 'building'}` }, th.isResolved ? t('panelPrResolved') : t('panelPrUnresolved')),
+                        ),
+                        (th.comments || []).map((c, cIdx) => React.createElement('div', { key: c.id || cIdx, className: 'gho-pr-comment' },
+                          React.createElement('div', { style: { display: 'flex', justifyContent: 'space-between', color: 'var(--dsw-alias-label-secondary)' } },
+                            React.createElement('strong', null, `@${c.author}`),
+                            React.createElement('span', null, c.createdAt ? new Date(c.createdAt).toLocaleTimeString([], { hour: '2-digit', minute: '2-digit' }) : ''),
+                          ),
+                          React.createElement('div', { style: { whiteSpace: 'pre-wrap', margin: '4px 0' } }, c.body),
+                          c.body && c.body.includes('```suggestion') ? React.createElement('button', {
+                            type: 'button',
+                            className: 'gho-diagnose-btn',
+                            style: { background: 'rgba(99,102,241,0.15)', color: '#818cf8', border: 0, margin: '4px 0' },
+                            disabled: Boolean(busy),
+                            onClick: () => sendAction('apply_suggestion', { commentId: c.databaseId || c.id, message: 'Apply suggestion' }),
+                          }, t('panelPrApplySuggestion')) : null,
+                        )),
+                        React.createElement('div', { style: { display: 'flex', gap: '6px', marginTop: '6px', justifyContent: 'flex-end' } },
+                          replyState.threadId === th.id ? React.createElement('div', { style: { width: '100%', display: 'flex', flexDirection: 'column', gap: '4px' } },
+                            React.createElement('input', {
+                              className: 'gho-panel-input',
+                              placeholder: t('panelPrReplyPlaceholder'),
+                              value: replyState.body,
+                              onChange: (e) => setReplyState((s) => ({ ...s, body: e.target.value })),
+                            }),
+                            React.createElement('div', { style: { display: 'flex', gap: '6px', justifyContent: 'flex-end' } },
+                              React.createElement('button', { type: 'button', className: 'gho-diagnose-btn', onClick: () => setReplyState({ threadId: null, commentId: null, body: '' }) }, t('scmAbort')),
+                              React.createElement('button', {
+                                type: 'button',
+                                className: 'gho-diagnose-btn',
+                                style: { background: 'var(--dsw-alias-color-primary, #1f6feb)', color: '#fff', border: 0 },
+                                disabled: Boolean(busy) || !replyState.body.trim(),
+                                onClick: () => sendAction('reply_thread', { threadId: th.id, commentId: th.comments?.[0]?.databaseId, body: replyState.body }).then(() => setReplyState({ threadId: null, commentId: null, body: '' })),
+                              }, t('panelPrReply')),
+                            ),
+                          ) : React.createElement('div', { style: { display: 'flex', gap: '6px' } },
+                            React.createElement('button', {
+                              type: 'button',
+                              className: 'gho-diagnose-btn',
+                              onClick: () => setReplyState({ threadId: th.id, commentId: th.comments?.[0]?.databaseId, body: '' }),
+                            }, t('panelPrReply')),
+                            React.createElement('button', {
+                              type: 'button',
+                              className: 'gho-diagnose-btn',
+                              disabled: Boolean(busy),
+                              onClick: () => sendAction('resolve_thread', { threadId: th.id, resolve: !th.isResolved }),
+                            }, th.isResolved ? t('panelPrUnresolve') : t('panelPrResolve')),
+                          ),
+                        ),
+                      )),
+                    )
+                  }),
+                ),
+              )),
+        )),
+      )
+
+      return React.createElement('div', { className: 'gho-pr-workspace' },
+        header,
+        reviewSubmitBox,
+        filesList,
+      )
+    }
+
+
     function makeTranslator(locale) {
       const dict = String(locale || '').startsWith('zh') ? zh : en
       const fallback = en

package/lib/routes.js

@@ -20,6 +20,7 @@ import { generateChangelog } from './tools/changelog.js'
 import { listNotifications, repoTreeView } from './tools/panel-data.js'
 import { mirrorStatus, syncMirror } from './tools/mirror.js'
 import { matrixStatus } from './tools/matrix.js'
+import { listReviewThreads, replyReviewThread, resolveReviewThread, applySuggestion } from './tools/pulls.js'
 
 /** Where the settings card reads the access status from. */
 export const STATUS_PATH = '/dsh-github-ops/status'
@@ -42,6 +43,9 @@ export const GRAPH_PATH = '/dsh-github-ops/graph'
 /** Where real-time CI and PR events are streamed via SSE. */
 export const EVENTS_PATH = '/dsh-github-ops/events'
 
+/** Where inline PR review workspace reads diff and posts line reviews. */
+export const PR_REVIEW_PATH = '/dsh-github-ops/pr-review'
+
 /**
  * Register the three routes.
  *
@@ -615,6 +619,203 @@ export function registerRoutes(ctx, deps = {}) {
       if (typeof wctx.effect === 'function') wctx.effect(registerEvents, 'dsh-github-ops: events route')
       else registerEvents()
 
+      const registerPrReview = () => wctx.webServer.register({
+        kind: 'exact',
+        path: PR_REVIEW_PATH,
+        handler: async (req, res) => {
+          try {
+            if (req.method !== 'GET' && req.method !== 'POST') return sendJson(res, 405, { error: 'method not allowed' })
+            if (req.method === 'POST') {
+              if (!isTrustedWriteRequest(req, routeOptions())) {
+                const status = getWriteRejectionStatus(req, routeOptions()) || 403
+                return sendJson(res, status, { error: status === 401 ? 'unauthorized' : 'forbidden' })
+              }
+            } else {
+              if (!isTrustedRequest(req, routeOptions())) {
+                const status = getRejectionStatus(req, routeOptions()) || 403
+                return sendJson(res, status, { error: status === 401 ? 'unauthorized' : 'forbidden' })
+              }
+            }
+            const access = await resolveToken()
+            if (!access.value) return sendJson(res, 200, { configured: false, guidance: access.guidance })
+            const github = await client()
+
+            if (req.method === 'GET') {
+              const url = new URL(req.url || '/', 'http://localhost')
+              const repoSpec = url.searchParams.get('repo') || ''
+              const number = Number(url.searchParams.get('number'))
+              const [repoOwner, repoName] = repoSpec.split('/')
+              if (!repoOwner || !repoName || !number) {
+                return sendJson(res, 400, { configured: true, error: 'repo and number are required' })
+              }
+
+              const [pullRes, filesRes] = await Promise.all([
+                github.get(`/repos/${repoOwner}/${repoName}/pulls/${number}`),
+                github.get(`/repos/${repoOwner}/${repoName}/pulls/${number}/files`, { query: { per_page: 100 } }),
+              ])
+
+              const pull = pullRes.data
+              const rawFiles = Array.isArray(filesRes.data) ? filesRes.data : []
+              const files = rawFiles.map((f) => {
+                const patch = typeof f.patch === 'string' ? f.patch : ''
+                return {
+                  filename: f.filename,
+                  status: f.status,
+                  additions: f.additions,
+                  deletions: f.deletions,
+                  patch,
+                  hunks: parseDiffHunks(patch),
+                }
+              })
+
+              let threads = []
+              try {
+                const thData = await listReviewThreads(github, { owner: repoOwner, repo: repoName, number })
+                threads = thData.threads || []
+              } catch {
+                try {
+                  const { data: rawComments } = await github.get(`/repos/${repoOwner}/${repoName}/pulls/${number}/comments`, { query: { per_page: 100 } })
+                  if (Array.isArray(rawComments)) {
+                    const threadMap = new Map()
+                    for (const c of rawComments) {
+                      const rootId = c.in_reply_to_id || c.id
+                      if (!threadMap.has(rootId)) {
+                        threadMap.set(rootId, {
+                          id: String(rootId),
+                          path: c.path,
+                          line: c.line || c.original_line || null,
+                          diffSide: c.side || 'RIGHT',
+                          isResolved: false,
+                          comments: [],
+                        })
+                      }
+                      threadMap.get(rootId).comments.push({
+                        id: String(c.id),
+                        databaseId: c.id,
+                        author: (c.user && c.user.login) || 'unknown',
+                        body: c.body || '',
+                        createdAt: c.created_at,
+                        url: c.html_url,
+                      })
+                    }
+                    threads = Array.from(threadMap.values())
+                  }
+                } catch {}
+              }
+
+              return sendJson(res, 200, {
+                configured: true,
+                pull: {
+                  number: pull.number,
+                  title: pull.title,
+                  body: pull.body || '',
+                  state: pull.state,
+                  author: (pull.user && pull.user.login) || 'unknown',
+                  base: pull.base && pull.base.ref,
+                  head: pull.head && pull.head.ref,
+                  headSha: pull.head && pull.head.sha,
+                  htmlUrl: pull.html_url,
+                  additions: pull.additions,
+                  deletions: pull.deletions,
+                  changedFiles: pull.changed_files,
+                  merged: Boolean(pull.merged),
+                  mergeable: pull.mergeable,
+                },
+                files,
+                threads,
+              })
+            }
+
+            if (req.method === 'POST') {
+              let body = {}
+              try {
+                body = await readJsonBody(req)
+              } catch (err) {
+                return sendJson(res, 400, { ok: false, error: String((err && err.message) || err) })
+              }
+              const { action, repo: repoSpec, number } = body
+              const [repoOwner, repoName] = (repoSpec || '').split('/')
+              if (!repoOwner || !repoName) {
+                return sendJson(res, 400, { ok: false, error: 'repo (owner/repo) is required' })
+              }
+
+              if (action === 'comment') {
+                const { path, line, body: commentBody, commit_id, side } = body
+                if (!commentBody || !path || !line) {
+                  return sendJson(res, 400, { ok: false, error: 'path, line, and body are required' })
+                }
+                let commitSha = commit_id
+                if (!commitSha) {
+                  const { data: pr } = await github.get(`/repos/${repoOwner}/${repoName}/pulls/${number}`)
+                  commitSha = pr.head && pr.head.sha
+                }
+                const { data: comment } = await github.post(`/repos/${repoOwner}/${repoName}/pulls/${number}/comments`, {
+                  body: commentBody,
+                  commit_id: commitSha,
+                  path,
+                  line: Number(line),
+                  side: side || 'RIGHT',
+                })
+                return sendJson(res, 200, { ok: true, comment })
+              }
+
+              if (action === 'reply_thread') {
+                const { threadId, commentId, body: replyBody } = body
+                const resData = await replyReviewThread(github, {
+                  owner: repoOwner,
+                  repo: repoName,
+                  number: Number(number),
+                  threadId,
+                  commentId,
+                  body: replyBody,
+                })
+                return sendJson(res, 200, { ok: true, ...resData })
+              }
+
+              if (action === 'resolve_thread') {
+                const { threadId, resolve } = body
+                const resData = await resolveReviewThread(github, {
+                  owner: repoOwner,
+                  repo: repoName,
+                  threadId,
+                  resolve: resolve !== false,
+                })
+                return sendJson(res, 200, { ok: true, ...resData })
+              }
+
+              if (action === 'apply_suggestion') {
+                const { commentId, commentIds, message } = body
+                const resData = await applySuggestion(github, {
+                  owner: repoOwner,
+                  repo: repoName,
+                  pullNumber: Number(number),
+                  commentId,
+                  commentIds,
+                  confirm: true,
+                  message,
+                })
+                return sendJson(res, 200, { ok: true, ...resData })
+              }
+
+              if (action === 'submit_review') {
+                const { body: reviewBody, event } = body
+                const { data: review } = await github.post(`/repos/${repoOwner}/${repoName}/pulls/${number}/reviews`, {
+                  body: reviewBody || '',
+                  event: event || 'COMMENT',
+                })
+                return sendJson(res, 200, { ok: true, review })
+              }
+
+              return sendJson(res, 400, { ok: false, error: `unknown action: ${action}` })
+            }
+          } catch (err) {
+            return sendJson(res, 500, { ok: false, error: describeError(err) })
+          }
+        },
+      })
+      if (typeof wctx.effect === 'function') wctx.effect(registerPrReview, 'dsh-github-ops: pr-review route')
+      else registerPrReview()
+
     } catch (err) {
       ctx.logger?.warn?.('[dsh-github-ops] panel route not registered:', err && err.message)
     }

package/lib/scm.js

@@ -385,6 +385,8 @@ export function parseDiffHunks(diffText) {
 
   const hunks = []
   let currentHunk = null
+  let curOld = 0
+  let curNew = 0
 
   while (i < lines.length) {
     const line = lines[i]
@@ -394,22 +396,39 @@ export function parseDiffHunks(diffText) {
         hunks.push(currentHunk)
       }
       const match = line.match(/^@@ -(\d+)(?:,(\d+))? \+(\d+)(?:,(\d+))? @@(.*)$/)
+      const oldStart = match ? parseInt(match[1], 10) : 0
+      const oldCount = match ? (match[2] !== undefined ? parseInt(match[2], 10) : 1) : 0
+      const newStart = match ? parseInt(match[3], 10) : 0
+      const newCount = match ? (match[4] !== undefined ? parseInt(match[4], 10) : 1) : 0
+      curOld = oldStart
+      curNew = newStart
       currentHunk = {
         header: line,
-        oldStart: match ? parseInt(match[1], 10) : 0,
-        oldCount: match ? (match[2] !== undefined ? parseInt(match[2], 10) : 1) : 0,
-        newStart: match ? parseInt(match[3], 10) : 0,
-        newCount: match ? (match[4] !== undefined ? parseInt(match[4], 10) : 1) : 0,
+        oldStart,
+        oldCount,
+        newStart,
+        newCount,
         heading: match ? match[5].trim() : '',
-        lines: [{ type: 'hunk_header', text: line, raw: line }],
+        lines: [{ type: 'hunk_header', text: line, raw: line, oldLine: null, newLine: null }],
         patch: '',
       }
     } else if (currentHunk) {
       let type = 'context'
-      if (line.startsWith('+')) type = 'add'
-      else if (line.startsWith('-')) type = 'del'
-      else if (line.startsWith('\\')) type = 'meta'
-      currentHunk.lines.push({ type, text: line, raw: line })
+      let oldLine = null
+      let newLine = null
+      if (line.startsWith('+')) {
+        type = 'add'
+        newLine = curNew++
+      } else if (line.startsWith('-')) {
+        type = 'del'
+        oldLine = curOld++
+      } else if (line.startsWith('\\')) {
+        type = 'meta'
+      } else {
+        oldLine = curOld++
+        newLine = curNew++
+      }
+      currentHunk.lines.push({ type, text: line, raw: line, oldLine, newLine })
     }
     i++
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@goodandready/dsh-github-ops",
-  "version": "0.6.12",
+  "version": "0.6.14",
   "description": "GitHub operations for DeepSeek Harness: releases, tags, a guarded generic API pass-through, workflow runs, secrets and sanitized mirror publication.",
   "license": "MIT",
   "type": "module",