@hansjm10/volt-coding-agent 0.0.0-bootstrap.0 → 0.1.0

package/dist/core/review.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review.d.ts","sourceRoot":"","sources":["../../src/core/review.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAOH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EAAoB,KAAK,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGrD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,EAA2B,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAGpF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAM7D,MAAM,MAAM,YAAY,GACrB;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,GACvB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpC,eAAO,MAAM,YAAY,sHAC2F,CAAC;AAErH,eAAO,MAAM,wBAAwB,yCAA0C,CAAC;AAEhF;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG;IACzD,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;CACf,CA4BA;AAMD,iFAAiF;AACjF,MAAM,WAAW,cAAc;IAC9B,iEAAiE;IACjE,WAAW,EAAE,MAAM,CAAC;IACpB,6DAA6D;IAC7D,WAAW,EAAE,MAAM,CAAC;IACpB,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,SAAS,EAAE,OAAO,CAAC;IACnB,mEAAmE;IACnE,YAAY,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,oEAAoE;AACpE,eAAO,MAAM,qBAAqB,SAAU,CAAC;AAyC7C,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAe/E;AA0CD;;;GAGG;AACH,wBAAsB,mBAAmB,CACxC,MAAM,EAAE,YAAY,EACpB,GAAG,EAAE,MAAM,GACT,OAAO,CAAC,cAAc,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAmJ7C;AAED,oDAAoD;AACpD,MAAM,WAAW,YAAY;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAC;CACb;AAqCD;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAWzF;AAED,iEAAiE;AACjE,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,OAAO,CAAC,YAAY,EAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAc5G;AAMD,eAAO,MAAM,oBAAoB,gwLA+Fd,CAAC;AAUpB,oDAAoD;AACpD,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,CAsBlE;AAMD,MAAM,WAAW,aAAa;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,cAAc;IAC9B,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAC5B,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC5B;AA6JD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAiDxE;AAMD;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKlE;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CACxC,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE,aAAa,GAAG,aAAa,CAAC,EAC7D,MAAM,EAAE,YAAY,GAAG,SAAS,EAChC,GAAG,EAAE,MAAM,GACT,MAAM,CA6DR;AAMD;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,cAAc,CAexF;AAmBD,MAAM,WAAW,gBAAgB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAClB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,WAAW,EAAE,WAAW,CAAC;IACzB,aAAa,EAAE,aAAa,CAAC;IAC7B,eAAe,EAAE,eAAe,CAAC;IACjC,QAAQ,EAAE,cAAc,CAAC;IACzB,iFAAiF;IACjF,oBAAoB,CAAC,EAAE,cAAc,CAAC;IACtC,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,gDAAgD;IAChD,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,gFAAgF;IAChF,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACvC,0EAA0E;IAC1E,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,uBAAuB,KAAK,IAAI,CAAC;IACnD;;;;OAIG;IACH,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC;IACpD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,iDAAiD;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,qBAAqB;IACrC,kEAAkE;IAClE,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,OAAO,CAAC;IACrB,YAAY,EAAE,OAAO,CAAC;IACtB,KAAK,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,aAAa,EAAE,aAAa,CAAC;IAC7B,cAAc,EAAE,cAAc,CAAC;IAC/B,iBAAiB,CAAC,CAAC,GAAG,OAAO,EAC5B,OAAO,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,YAAY,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC,EACvF,OAAO,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,GAAG,UAAU,GAAG,UAAU,CAAA;KAAE,GAChF,OAAO,CAAC,IAAI,CAAC,CAAC;CACjB;AAED,UAAU,mBAAmB,CAAC,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,CAAC,CAAC;CACX;AAED,MAAM,MAAM,mBAAmB,GAC5B;IACA,IAAI,EAAE,gBAAgB,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,SAAS,CAAC;CACjB,GACD;IACA,IAAI,EAAE,iBAAiB,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,SAAS,GAAG,YAAY,CAAC;CAChC,GACD;IACA,IAAI,EAAE,cAAc,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,WAAW,GAAG,WAAW,GAAG,QAAQ,CAAC;CAC5C,CAAC;AAEL,MAAM,MAAM,uBAAuB,GAChC;IACA,IAAI,EAAE,sBAAsB,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,QAAQ,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9B,GACD;IACA,IAAI,EAAE,oBAAoB,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,QAAQ,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;CAChB,CAAC;AAEL,MAAM,WAAW,mBAAmB;IACnC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACvC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,mBAAmB,GAAG,uBAAuB,KAAK,IAAI,CAAC;IACzE,6EAA6E;IAC7E,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC;IACpD,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IACrC,MAAM,EAAE,YAAY,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,qBAAqB,CAAC;IAC/B,UAAU,EAAE,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAC9C,WAAW,EAAE,WAAW,CAAC;IACzB,eAAe,EAAE,eAAe,CAAC;IACjC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,cAAc,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACxG,cAAc,CAAC,EAAE,CAChB,UAAU,EAAE,cAAc,EAC1B,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,KACb,OAAO,CAAC,mBAAmB,CAAC,GAAG,mBAAmB,CAAC;IACxD,oBAAoB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACjD,6EAA6E;IAC7E,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,mBAAmB,GAAG,uBAAuB,KAAK,IAAI,CAAC;CACzE;AAED,MAAM,MAAM,oBAAoB,GAC7B;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,UAAU,CAAC,EAAE,cAAc,CAAA;CAAE,GACpD;IACA,MAAM,EAAE,WAAW,CAAC;IACpB,UAAU,EAAE,cAAc,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sBAAsB,EAAE,OAAO,CAAC;CAC/B,CAAC;AAEL,wBAAgB,+BAA+B,CAAC,UAAU,EAAE,cAAc,GAAG,MAAM,CAOlF;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE;IAC3C,eAAe,EAAE,eAAe,CAAC;IACjC,aAAa,EAAE,aAAa,CAAC;IAC7B,YAAY,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;CAC1B,GAAG;IAAE,KAAK,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAe3C;AA0BD,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAiKrG;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,OAAO,CAAC,oBAAoB,EAAE;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,CAAC,GAAG,MAAM,CASlH;AAsID;;;;;;;;;;;;;GAaG;AACH,UAAU,gBAAgB;IACzB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACzB;AAED,wBAAsB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAanF;AAgFD;;;;;;;;GAQG;AACH,wBAAsB,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAOnF","sourcesContent":["/**\n * Built-in /review support.\n *\n * Resolves a review target (uncommitted changes, branch diff, GitHub PR, or a\n * single commit) into a diff, runs an isolated in-process review session over\n * it, and parses the structured findings from the reviewer's final message.\n *\n * The review session is intentionally separate from the user's session: it has\n * its own context window and its own reviewer system prompt. It loads the\n * project's context files (AGENTS.md) and inherits the user's configured\n * extension tools, but excludes user extensions, skills, prompt templates,\n * themes, and subagents, and does not start MCP servers. After the review\n * completes the caller starts a fresh session seeded only with the findings.\n */\n\nimport { spawn } from \"node:child_process\";\nimport { randomUUID } from \"node:crypto\";\nimport { mkdtemp, rm } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport type { ThinkingLevel } from \"@hansjm10/volt-agent-core\";\nimport type { AssistantMessage, Model } from \"@hansjm10/volt-ai\";\nimport type { AgentSessionEvent } from \"./agent-session.ts\";\nimport type { AgentSessionRuntime } from \"./agent-session-runtime.ts\";\nimport type { AuthStorage } from \"./auth-storage.ts\";\nimport { createExtensionRuntime } from \"./extensions/loader.ts\";\nimport type { ReplacedSessionContext, ToolDefinition } from \"./extensions/types.ts\";\nimport type { ModelRegistry } from \"./model-registry.ts\";\nimport { findExactModelReferenceMatch } from \"./model-resolver.ts\";\nimport { loadProjectContextFiles, type ResourceLoader } from \"./resource-loader.ts\";\nimport { createAgentSession } from \"./sdk.ts\";\nimport { SessionManager } from \"./session-manager.ts\";\nimport type { SettingsManager } from \"./settings-manager.ts\";\n\n// ============================================================================\n// Review targets\n// ============================================================================\n\nexport type ReviewTarget =\n\t| { kind: \"uncommitted\" }\n\t| { kind: \"branch\"; base?: string }\n\t| { kind: \"pr\"; number?: string }\n\t| { kind: \"commit\"; sha?: string };\n\nexport const REVIEW_USAGE =\n\t\"Usage: /review [tools | uncommitted | branch [base] | pr [number] | commit [sha]] (no arguments opens a selector)\";\n\nexport const REMOTE_REVIEW_TOOL_NAMES = [\"read\", \"grep\", \"find\", \"ls\"] as const;\n\n/**\n * Parse the argument text after \"/review\".\n * Returns an empty object when no arguments were given (caller shows a selector).\n */\nexport function parseReviewCommandArgs(argsText: string): {\n\ttarget?: ReviewTarget;\n\tconfigureTools?: boolean;\n\terror?: string;\n} {\n\tconst tokens = argsText.trim().split(/\\s+/).filter(Boolean);\n\tif (tokens.length === 0) {\n\t\treturn {};\n\t}\n\n\tconst keyword = tokens[0].toLowerCase();\n\t// Reject trailing tokens beyond the keyword's expected arity so mistakes like\n\t// `/review pr 42 foo` fail loudly instead of silently dropping the extra args.\n\tconst tooManyArgs = (max: number): { error: string } | undefined =>\n\t\ttokens.length > max ? { error: `Unexpected arguments after \"${tokens[0]}\". ${REVIEW_USAGE}` } : undefined;\n\tswitch (keyword) {\n\t\tcase \"tools\":\n\t\t\treturn tooManyArgs(1) ?? { configureTools: true };\n\t\tcase \"uncommitted\":\n\t\tcase \"unstaged\":\n\t\tcase \"working\":\n\t\t\treturn tooManyArgs(1) ?? { target: { kind: \"uncommitted\" } };\n\t\tcase \"branch\":\n\t\t\treturn tooManyArgs(2) ?? { target: { kind: \"branch\", base: tokens[1] } };\n\t\tcase \"pr\":\n\t\t\treturn tooManyArgs(2) ?? { target: { kind: \"pr\", number: tokens[1] } };\n\t\tcase \"commit\":\n\t\t\t// Without a SHA the caller shows a commit picker.\n\t\t\treturn tooManyArgs(2) ?? { target: { kind: \"commit\", sha: tokens[1] } };\n\t\tdefault:\n\t\t\treturn { error: `Unknown review target \"${tokens[0]}\". ${REVIEW_USAGE}` };\n\t}\n}\n\n// ============================================================================\n// Target resolution (git / gh)\n// ============================================================================\n\n/** A review target resolved to a concrete diff plus reviewer-facing metadata. */\nexport interface ResolvedReview {\n\t/** Human-readable description, e.g. `branch changes vs main`. */\n\tdescription: string;\n\t/** Command the reviewer can re-run to reproduce the diff. */\n\tdiffCommand: string;\n\t/** The diff text (possibly truncated, see `truncated`). */\n\tdiff: string;\n\t/** True when the diff exceeded the inline size limit and was truncated. */\n\ttruncated: boolean;\n\t/** Extra context: commit log, PR metadata, untracked file list. */\n\textraContext?: string;\n}\n\n/** Maximum diff characters embedded inline in the review prompt. */\nexport const MAX_REVIEW_DIFF_CHARS = 150_000;\n\ninterface CommandResult {\n\tok: boolean;\n\tstdout: string;\n\tstderr: string;\n}\n\nfunction runCommand(\n\tcommand: string,\n\targs: string[],\n\tcwd: string,\n\tenv?: Record<string, string>,\n): Promise<CommandResult> {\n\treturn new Promise((resolve) => {\n\t\tconst proc = spawn(command, args, {\n\t\t\tcwd,\n\t\t\tstdio: [\"ignore\", \"pipe\", \"pipe\"],\n\t\t\tenv: env ? { ...process.env, ...env } : process.env,\n\t\t});\n\t\tlet stdout = \"\";\n\t\tlet stderr = \"\";\n\t\tproc.stdout.on(\"data\", (data) => {\n\t\t\tstdout += data.toString();\n\t\t});\n\t\tproc.stderr.on(\"data\", (data) => {\n\t\t\tstderr += data.toString();\n\t\t});\n\t\tproc.on(\"error\", (error) => {\n\t\t\tresolve({ ok: false, stdout, stderr: error.message });\n\t\t});\n\t\tproc.on(\"close\", (code) => {\n\t\t\tresolve({ ok: code === 0, stdout, stderr });\n\t\t});\n\t});\n}\n\nfunction isHighSurrogate(codeUnit: number): boolean {\n\treturn codeUnit >= 0xd800 && codeUnit <= 0xdbff;\n}\n\nexport function truncateDiff(diff: string): { diff: string; truncated: boolean } {\n\tif (diff.length <= MAX_REVIEW_DIFF_CHARS) {\n\t\treturn { diff, truncated: false };\n\t}\n\tlet end = MAX_REVIEW_DIFF_CHARS;\n\t// Prefer cutting on a line boundary so the preview ends with whole diff lines\n\t// rather than a partial hunk. For a single line longer than the limit there is\n\t// no boundary, so fall back to a raw cut that does not split a surrogate pair.\n\tconst lastNewline = diff.lastIndexOf(\"\\n\", end - 1);\n\tif (lastNewline >= 0) {\n\t\tend = lastNewline + 1;\n\t} else if (isHighSurrogate(diff.charCodeAt(end - 1))) {\n\t\tend -= 1;\n\t}\n\treturn { diff: diff.slice(0, end), truncated: true };\n}\n\nasync function detectBaseBranch(cwd: string): Promise<string | undefined> {\n\tconst originHead = await runCommand(\"git\", [\"symbolic-ref\", \"--short\", \"refs/remotes/origin/HEAD\"], cwd);\n\tif (originHead.ok) {\n\t\tconst ref = originHead.stdout.trim();\n\t\tif (ref) {\n\t\t\t// Keep the remote-tracking ref (e.g. \"origin/main\") rather than stripping\n\t\t\t// to \"main\": it always resolves and reflects the fetched upstream instead\n\t\t\t// of a possibly stale or missing local branch (single-branch/shallow checkouts).\n\t\t\treturn ref;\n\t\t}\n\t}\n\tfor (const candidate of [\"main\", \"master\"]) {\n\t\tconst exists = await runCommand(\"git\", [\"rev-parse\", \"--verify\", \"--quiet\", candidate], cwd);\n\t\tif (exists.ok) {\n\t\t\treturn candidate;\n\t\t}\n\t}\n\treturn undefined;\n}\n\n/**\n * Resolve a base ref to something that exists. Returns the ref itself when it\n * resolves, otherwise the matching remote-tracking ref (`origin/<base>`) when\n * only that exists (e.g. a checkout that has no local copy of the base branch).\n */\nasync function resolveBaseRef(base: string, cwd: string): Promise<string | undefined> {\n\tconst direct = await runCommand(\"git\", [\"rev-parse\", \"--verify\", \"--quiet\", base], cwd);\n\tif (direct.ok) {\n\t\treturn base;\n\t}\n\tif (!base.startsWith(\"origin/\")) {\n\t\tconst remote = `origin/${base}`;\n\t\tconst remoteExists = await runCommand(\"git\", [\"rev-parse\", \"--verify\", \"--quiet\", remote], cwd);\n\t\tif (remoteExists.ok) {\n\t\t\treturn remote;\n\t\t}\n\t}\n\treturn undefined;\n}\n\n/**\n * Resolve a review target into a concrete diff.\n * Returns `{ error }` for user-facing failures (not a git repo, empty diff, gh missing, ...).\n */\nexport async function resolveReviewTarget(\n\ttarget: ReviewTarget,\n\tcwd: string,\n): Promise<ResolvedReview | { error: string }> {\n\tconst inRepo = await runCommand(\"git\", [\"rev-parse\", \"--is-inside-work-tree\"], cwd);\n\tif (!inRepo.ok) {\n\t\treturn { error: \"Not inside a git repository.\" };\n\t}\n\n\tswitch (target.kind) {\n\t\tcase \"uncommitted\": {\n\t\t\tlet diffResult = await runCommand(\"git\", [\"diff\", \"HEAD\"], cwd);\n\t\t\tlet diffCommand = \"git diff HEAD\";\n\t\t\tif (!diffResult.ok) {\n\t\t\t\t// No commits yet: combine the staged diff (index vs the empty tree)\n\t\t\t\t// with the worktree diff so staged changes are not missed.\n\t\t\t\tconst stagedResult = await runCommand(\"git\", [\"diff\", \"--cached\"], cwd);\n\t\t\t\tconst worktreeResult = await runCommand(\"git\", [\"diff\"], cwd);\n\t\t\t\tif (!stagedResult.ok || !worktreeResult.ok) {\n\t\t\t\t\tconst failed = stagedResult.ok ? worktreeResult : stagedResult;\n\t\t\t\t\treturn { error: `git diff failed: ${failed.stderr.trim()}` };\n\t\t\t\t}\n\t\t\t\tdiffResult = { ok: true, stdout: stagedResult.stdout + worktreeResult.stdout, stderr: \"\" };\n\t\t\t\tdiffCommand = \"git diff --cached; git diff\";\n\t\t\t}\n\t\t\tconst untrackedResult = await runCommand(\"git\", [\"ls-files\", \"--others\", \"--exclude-standard\"], cwd);\n\t\t\tconst untracked = untrackedResult.ok\n\t\t\t\t? untrackedResult.stdout\n\t\t\t\t\t\t.split(\"\\n\")\n\t\t\t\t\t\t.map((line) => line.trim())\n\t\t\t\t\t\t.filter(Boolean)\n\t\t\t\t: [];\n\t\t\tif (!diffResult.stdout.trim() && untracked.length === 0) {\n\t\t\t\treturn { error: \"No uncommitted changes to review.\" };\n\t\t\t}\n\t\t\tconst { diff, truncated } = truncateDiff(diffResult.stdout);\n\t\t\treturn {\n\t\t\t\tdescription: \"uncommitted changes\",\n\t\t\t\tdiffCommand,\n\t\t\t\tdiff,\n\t\t\t\ttruncated,\n\t\t\t\textraContext:\n\t\t\t\t\tuntracked.length > 0\n\t\t\t\t\t\t? `Untracked files (not in the diff; read them directly):\\n${untracked.map((file) => `- ${file}`).join(\"\\n\")}`\n\t\t\t\t\t\t: undefined,\n\t\t\t};\n\t\t}\n\t\tcase \"branch\": {\n\t\t\tconst requestedBase = target.base ?? (await detectBaseBranch(cwd));\n\t\t\tif (!requestedBase) {\n\t\t\t\treturn { error: \"Could not detect a base branch. Use /review branch <base>.\" };\n\t\t\t}\n\t\t\tconst base = await resolveBaseRef(requestedBase, cwd);\n\t\t\tif (!base) {\n\t\t\t\treturn { error: `Base branch \"${requestedBase}\" not found.` };\n\t\t\t}\n\t\t\tconst diffResult = await runCommand(\"git\", [\"diff\", `${base}...HEAD`], cwd);\n\t\t\tif (!diffResult.ok) {\n\t\t\t\treturn { error: `git diff failed: ${diffResult.stderr.trim()}` };\n\t\t\t}\n\t\t\tif (!diffResult.stdout.trim()) {\n\t\t\t\treturn { error: `No changes between ${base} and HEAD.` };\n\t\t\t}\n\t\t\tconst logResult = await runCommand(\"git\", [\"log\", \"--oneline\", `${base}..HEAD`], cwd);\n\t\t\tconst { diff, truncated } = truncateDiff(diffResult.stdout);\n\t\t\treturn {\n\t\t\t\tdescription: `branch changes vs ${base}`,\n\t\t\t\tdiffCommand: `git diff ${base}...HEAD`,\n\t\t\t\tdiff,\n\t\t\t\ttruncated,\n\t\t\t\textraContext: logResult.ok && logResult.stdout.trim() ? `Commits:\\n${logResult.stdout.trim()}` : undefined,\n\t\t\t};\n\t\t}\n\t\tcase \"pr\": {\n\t\t\tconst numberArgs = target.number ? [target.number] : [];\n\t\t\tconst viewResult = await runCommand(\n\t\t\t\t\"gh\",\n\t\t\t\t[\"pr\", \"view\", ...numberArgs, \"--json\", \"number,title,body,baseRefName,headRefName,url\"],\n\t\t\t\tcwd,\n\t\t\t);\n\t\t\tif (!viewResult.ok) {\n\t\t\t\tconst stderr = viewResult.stderr.trim();\n\t\t\t\tif (/ENOENT|not found|not recognized/i.test(stderr)) {\n\t\t\t\t\treturn { error: \"GitHub CLI (gh) is not installed. Install it from https://cli.github.com/\" };\n\t\t\t\t}\n\t\t\t\treturn { error: `gh pr view failed: ${stderr}` };\n\t\t\t}\n\t\t\tlet prInfo: {\n\t\t\t\tnumber: number;\n\t\t\t\ttitle: string;\n\t\t\t\tbody: string;\n\t\t\t\tbaseRefName: string;\n\t\t\t\theadRefName: string;\n\t\t\t\turl: string;\n\t\t\t};\n\t\t\ttry {\n\t\t\t\tprInfo = JSON.parse(viewResult.stdout);\n\t\t\t} catch {\n\t\t\t\treturn { error: \"Could not parse gh pr view output.\" };\n\t\t\t}\n\t\t\tconst diffResult = await runCommand(\"gh\", [\"pr\", \"diff\", String(prInfo.number)], cwd);\n\t\t\tif (!diffResult.ok) {\n\t\t\t\treturn { error: `gh pr diff failed: ${diffResult.stderr.trim()}` };\n\t\t\t}\n\t\t\tif (!diffResult.stdout.trim()) {\n\t\t\t\treturn { error: `PR #${prInfo.number} has an empty diff.` };\n\t\t\t}\n\t\t\tconst { diff, truncated } = truncateDiff(diffResult.stdout);\n\t\t\tconst bodyText = prInfo.body?.trim();\n\t\t\treturn {\n\t\t\t\tdescription: `PR #${prInfo.number} (${prInfo.title})`,\n\t\t\t\tdiffCommand: `gh pr diff ${prInfo.number}`,\n\t\t\t\tdiff,\n\t\t\t\ttruncated,\n\t\t\t\textraContext: [\n\t\t\t\t\t`PR #${prInfo.number}: ${prInfo.title}`,\n\t\t\t\t\t`Base branch: ${prInfo.baseRefName}`,\n\t\t\t\t\t`Head branch: ${prInfo.headRefName}`,\n\t\t\t\t\t`URL: ${prInfo.url}`,\n\t\t\t\t\t`Note: the local worktree may not have the PR head checked out. Do not assume local files match the diff; inspect PR file contents against fetched refs instead (e.g. \\`git fetch origin ${prInfo.headRefName}\\` then \\`git show FETCH_HEAD:<path>\\`).`,\n\t\t\t\t\tbodyText ? `Description:\\n${bodyText}` : undefined,\n\t\t\t\t]\n\t\t\t\t\t.filter(Boolean)\n\t\t\t\t\t.join(\"\\n\"),\n\t\t\t};\n\t\t}\n\t\tcase \"commit\": {\n\t\t\tif (!target.sha) {\n\t\t\t\treturn { error: \"Missing commit SHA.\" };\n\t\t\t}\n\t\t\t// --diff-merges=first-parent: plain `git show` prints no patch hunks\n\t\t\t// for merge commits; diff against the first parent shows what the\n\t\t\t// merge brought into the branch. Non-merge commits are unaffected.\n\t\t\tconst diffResult = await runCommand(\n\t\t\t\t\"git\",\n\t\t\t\t[\"show\", \"--stat\", \"--patch\", \"--diff-merges=first-parent\", target.sha],\n\t\t\t\tcwd,\n\t\t\t);\n\t\t\tif (!diffResult.ok) {\n\t\t\t\treturn { error: `git show failed: ${diffResult.stderr.trim()}` };\n\t\t\t}\n\t\t\tconst { diff, truncated } = truncateDiff(diffResult.stdout);\n\t\t\treturn {\n\t\t\t\tdescription: `commit ${target.sha}`,\n\t\t\t\tdiffCommand: `git show --stat --patch --diff-merges=first-parent ${target.sha}`,\n\t\t\t\tdiff,\n\t\t\t\ttruncated,\n\t\t\t};\n\t\t}\n\t}\n}\n\n/** A commit entry for the /review commit picker. */\nexport interface RecentCommit {\n\tsha: string;\n\tsubject: string;\n\t/** Relative author date, e.g. \"2 days ago\". */\n\tdate: string;\n}\n\n/**\n * Order base-branch candidates for the picker. Canonical bases come first\n * (local main/master, then their origin/ equivalents), then other local\n * branches, then other remote-tracking branches; each tier is sorted\n * alphabetically. Local vs remote is known from the source lists, so branch\n * names containing slashes (e.g. `feature/login`) are classified correctly.\n */\nfunction orderBaseBranches(local: string[], remote: string[]): string[] {\n\tconst scored: Array<{ ref: string; tier: number }> = [];\n\tconst seen = new Set<string>();\n\tconst add = (ref: string, tier: number): void => {\n\t\tif (!ref || seen.has(ref)) {\n\t\t\treturn;\n\t\t}\n\t\tseen.add(ref);\n\t\tscored.push({ ref, tier });\n\t};\n\tfor (const ref of local) {\n\t\tadd(ref, ref === \"main\" ? 0 : ref === \"master\" ? 1 : 4);\n\t}\n\tfor (const ref of remote) {\n\t\tadd(ref, ref === \"origin/main\" ? 2 : ref === \"origin/master\" ? 3 : 5);\n\t}\n\treturn scored\n\t\t.sort((a, b) => (a.tier === b.tier ? a.ref.localeCompare(b.ref) : a.tier - b.tier))\n\t\t.map((entry) => entry.ref);\n}\n\nfunction splitBranchLines(stdout: string): string[] {\n\treturn stdout\n\t\t.split(\"\\n\")\n\t\t.map((line) => line.trim())\n\t\t.filter(Boolean);\n}\n\n/**\n * List candidate base branches for the /review base-branch picker: local\n * branches plus remote-tracking branches (e.g. `origin/main`). The `origin/HEAD`\n * alias (which `%(refname:short)` renders as the bare remote name) is skipped.\n */\nexport async function listBaseBranches(cwd: string): Promise<string[] | { error: string }> {\n\tconst localResult = await runCommand(\"git\", [\"for-each-ref\", \"--format=%(refname:short)\", \"refs/heads\"], cwd);\n\tif (!localResult.ok) {\n\t\treturn { error: `git branch failed: ${localResult.stderr.trim()}` };\n\t}\n\tconst local = splitBranchLines(localResult.stdout);\n\tconst remoteResult = await runCommand(\"git\", [\"for-each-ref\", \"--format=%(refname:short)\", \"refs/remotes\"], cwd);\n\tconst remote = remoteResult.ok\n\t\t? splitBranchLines(remoteResult.stdout).filter((ref) => ref.includes(\"/\") && !ref.endsWith(\"/HEAD\"))\n\t\t: [];\n\treturn orderBaseBranches(local, remote);\n}\n\n/** List recent commits on HEAD for the /review commit picker. */\nexport async function listRecentCommits(cwd: string, limit = 30): Promise<RecentCommit[] | { error: string }> {\n\tconst result = await runCommand(\"git\", [\"log\", \"-n\", String(limit), \"--pretty=format:%h%x09%cr%x09%s\"], cwd);\n\tif (!result.ok) {\n\t\treturn { error: `git log failed: ${result.stderr.trim()}` };\n\t}\n\tconst commits: RecentCommit[] = [];\n\tfor (const line of result.stdout.split(\"\\n\")) {\n\t\tconst [sha, date, ...subjectParts] = line.split(\"\\t\");\n\t\tif (!sha?.trim()) {\n\t\t\tcontinue;\n\t\t}\n\t\tcommits.push({ sha: sha.trim(), date: date?.trim() ?? \"\", subject: subjectParts.join(\"\\t\").trim() });\n\t}\n\treturn commits;\n}\n\n// ============================================================================\n// Review prompt\n// ============================================================================\n\nexport const REVIEW_SYSTEM_PROMPT = `<reviewer_prompt>\n  <role>\n    You are an expert code reviewer operating inside volt, a coding agent harness.\n    You review a code change comprehensively and report every substantiated finding that matters.\n  </role>\n\n  <goal>\n    Complete the whole review, not a first-hit bug hunt. Do not stop after finding one or two issues.\n    Continue until you have reviewed the full diff and the relevant surrounding code.\n  </goal>\n\n  <tool_use>\n    <instruction>Build a map of the changed files, changed symbols, and intended behavior before judging individual hunks.</instruction>\n    <instruction>Read the full files around changed hunks, or enough of each file to understand its invariants; never judge a hunk in isolation.</instruction>\n    <instruction>Trace callers, callees, tests, configuration, and related code when a change could break an invariant elsewhere.</instruction>\n    <instruction>If the inline diff is truncated, run the provided diff command and review the full diff before finalizing.</instruction>\n    <instruction>If you suspect a behavioral bug, verify it when feasible: run the relevant tests, or write a small scratch test/script to confirm.</instruction>\n    <instruction>Delete any scratch files you create and revert any temporary edits before finishing, leaving the working tree as you found it.</instruction>\n  </tool_use>\n\n  <review_workflow>\n    <step id=\"1\" name=\"scope\">Identify all changed files, changed entry points, and the intended behavior.</step>\n    <step id=\"2\" name=\"context\">Read surrounding code and project instructions relevant to each change.</step>\n    <step id=\"3\" name=\"trace\">Follow call sites, data flow, configuration, and tests for changes that affect contracts or invariants.</step>\n    <step id=\"4\" name=\"verify\">Run targeted commands or scratch checks for suspected behavioral bugs when feasible.</step>\n    <step id=\"5\" name=\"coverage\">Apply the checklist below across the whole diff before finalizing.</step>\n    <step id=\"6\" name=\"report\">Report all independent substantiated findings in the required payload.</step>\n  </review_workflow>\n\n  <coverage_checklist>\n    <item>Runtime correctness, logic errors, regressions, and broken invariants.</item>\n    <item>Missed call sites, API/contract compatibility, migrations, and configuration changes.</item>\n    <item>Edge cases: empty input, partial failure, cancellation/abort, retries, large inputs, platform differences, and boundary values.</item>\n    <item>Error handling, cleanup, data loss, concurrency, async ordering, and race conditions.</item>\n    <item>Security and privacy issues: trust boundaries, injection, path traversal, credential exposure, unsafe file/network operations.</item>\n    <item>Tests: missing or weakened coverage for changed behavior, and whether existing tests still exercise the intended behavior.</item>\n    <item>Project-specific conventions and instructions from project context.</item>\n  </coverage_checklist>\n\n  <finding_rules>\n    <flag>Bugs and logic errors that affect behavior.</flag>\n    <flag>Security issues, data loss, race conditions, broken error handling.</flag>\n    <flag>Changes that contradict explicit project conventions from project context.</flag>\n    <flag>Regressions: removed checks, broken invariants, missed call sites.</flag>\n    <flag>All independent, substantiated priority 0, 1, or 2 findings. Include priority 3 only when it meaningfully helps the author.</flag>\n    <do_not_flag>Style nits, formatting, or naming preferences.</do_not_flag>\n    <do_not_flag>Speculative concerns you could not substantiate from the code.</do_not_flag>\n    <do_not_flag>Pre-existing issues in code the change does not touch, unless the change makes them worse.</do_not_flag>\n    <grouping>If multiple hunks share one root cause, group them into one finding; otherwise do not omit independent issues.</grouping>\n    <empty_findings>Use an empty findings array only after completing the workflow and checklist.</empty_findings>\n  </finding_rules>\n\n  <priority_scale>\n    <priority value=\"0\">Must fix before landing.</priority>\n    <priority value=\"1\">Should fix.</priority>\n    <priority value=\"2\">Worth fixing.</priority>\n    <priority value=\"3\">Optional.</priority>\n  </priority_scale>\n\n  <output_contract>\n    <format>End your final message with one XML response envelope. Do not put anything after the closing response tag.</format>\n    <summary>Before the payload, include a short summary of what you reviewed, what you verified, and any important areas you could not verify.</summary>\n    <payload_rules>\n      <rule>The payload content must be valid JSON. Do not wrap it in markdown fences.</rule>\n      <rule>overall_correctness must be \"correct\" or \"incorrect\".</rule>\n      <rule>Confidence is a number from 0.0 to 1.0 and must be grounded in code you read or executed.</rule>\n      <rule>Use empty arrays in coverage when nothing applies.</rule>\n    </payload_rules>\n    <response_shape>\n<response>\n  <summary>Short prose summary.</summary>\n  <payload>\n{\n  \"findings\": [\n    {\n      \"title\": \"Short imperative summary\",\n      \"body\": \"Explanation with evidence: what is wrong, why, and the concrete impact. Reference files and lines.\",\n      \"priority\": 1,\n      \"confidence\": 0.9,\n      \"file\": \"relative/path/to/file.ts\",\n      \"line\": \"120-134\"\n    }\n  ],\n  \"coverage\": {\n    \"files_reviewed\": [\"relative/path/to/file.ts\"],\n    \"commands_run\": [\"npm run check\"],\n    \"unchecked_areas\": [\"Integration tests not run: reason\"]\n  },\n  \"overall_correctness\": \"correct\",\n  \"overall_explanation\": \"One or two sentences on whether the change is safe to land.\"\n}\n  </payload>\n</response>\n    </response_shape>\n  </output_contract>\n</reviewer_prompt>`;\n\nfunction escapeXml(value: string): string {\n\treturn value.replace(/&/g, \"&amp;\").replace(/</g, \"&lt;\").replace(/>/g, \"&gt;\");\n}\n\nfunction wrapXmlCdata(value: string): string {\n\treturn `<![CDATA[${value.replace(/\\]\\]>/g, \"]]]]><![CDATA[>\")}]]>`;\n}\n\n/** Build the user prompt for the review session. */\nexport function buildReviewPrompt(resolved: ResolvedReview): string {\n\tconst diffNote = resolved.truncated\n\t\t? `The diff is too large to include inline. Run \\`${resolved.diffCommand}\\` yourself to read the full diff. A truncated preview is included in the diff node.`\n\t\t: `Reproduce this diff with \\`${resolved.diffCommand}\\`.`;\n\tconst parts: string[] = [\n\t\t\"<review_request>\",\n\t\t\"  <target>\",\n\t\t`    <description>${escapeXml(resolved.description)}</description>`,\n\t\t`    <diff_command>${escapeXml(resolved.diffCommand)}</diff_command>`,\n\t\t`    <diff_truncated>${resolved.truncated ? \"true\" : \"false\"}</diff_truncated>`,\n\t\t\"  </target>\",\n\t];\n\tif (resolved.extraContext) {\n\t\tparts.push(`  <extra_context>${wrapXmlCdata(resolved.extraContext)}</extra_context>`);\n\t}\n\tparts.push(\n\t\t`  <diff_note>${escapeXml(diffNote)}</diff_note>`,\n\t\t`  <diff>${wrapXmlCdata(resolved.diff)}</diff>`,\n\t\t\"  <task>Investigate the surrounding code before judging any hunk. Complete the review workflow across the whole diff before finalizing; do not stop after the first finding. Verify suspected bugs when feasible. Then produce your findings in the required XML response envelope with a JSON payload.</task>\",\n\t\t\"</review_request>\",\n\t);\n\treturn parts.join(\"\\n\");\n}\n\n// ============================================================================\n// Findings parsing\n// ============================================================================\n\nexport interface ReviewFinding {\n\ttitle: string;\n\tbody: string;\n\t/** 0 = must fix, 1 = should fix, 2 = worth fixing, 3 = optional. */\n\tpriority?: number;\n\t/** 0.0 - 1.0 */\n\tconfidence?: number;\n\tfile?: string;\n\tline?: string;\n}\n\nexport interface ReviewCoverage {\n\tfilesReviewed: string[];\n\tcommandsRun: string[];\n\tuncheckedAreas: string[];\n}\n\nexport interface ParsedReview {\n\tfindings: ReviewFinding[];\n\tcoverage?: ReviewCoverage;\n\toverallCorrectness?: string;\n\toverallExplanation?: string;\n}\n\nfunction coerceFinding(raw: unknown): ReviewFinding | undefined {\n\tif (typeof raw !== \"object\" || raw === null) {\n\t\treturn undefined;\n\t}\n\tconst record = raw as Record<string, unknown>;\n\tconst title = typeof record.title === \"string\" ? record.title.trim() : \"\";\n\tconst body = typeof record.body === \"string\" ? record.body.trim() : \"\";\n\tif (!title && !body) {\n\t\treturn undefined;\n\t}\n\treturn {\n\t\ttitle: title || body.slice(0, 80),\n\t\tbody,\n\t\tpriority: typeof record.priority === \"number\" ? record.priority : undefined,\n\t\tconfidence: typeof record.confidence === \"number\" ? record.confidence : undefined,\n\t\tfile: typeof record.file === \"string\" && record.file.trim() ? record.file.trim() : undefined,\n\t\tline:\n\t\t\ttypeof record.line === \"string\" && record.line.trim()\n\t\t\t\t? record.line.trim()\n\t\t\t\t: typeof record.line === \"number\"\n\t\t\t\t\t? String(record.line)\n\t\t\t\t\t: undefined,\n\t};\n}\n\nfunction coerceStringArray(raw: unknown): string[] {\n\tif (!Array.isArray(raw)) {\n\t\treturn [];\n\t}\n\treturn raw\n\t\t.filter((value): value is string => typeof value === \"string\")\n\t\t.map((value) => value.trim())\n\t\t.filter(Boolean);\n}\n\nfunction coerceCoverage(raw: unknown): ReviewCoverage | undefined {\n\tif (typeof raw !== \"object\" || raw === null) {\n\t\treturn undefined;\n\t}\n\tconst record = raw as Record<string, unknown>;\n\tconst coverage = {\n\t\tfilesReviewed: coerceStringArray(record.files_reviewed),\n\t\tcommandsRun: coerceStringArray(record.commands_run),\n\t\tuncheckedAreas: coerceStringArray(record.unchecked_areas),\n\t};\n\tif (\n\t\tcoverage.filesReviewed.length === 0 &&\n\t\tcoverage.commandsRun.length === 0 &&\n\t\tcoverage.uncheckedAreas.length === 0\n\t) {\n\t\treturn undefined;\n\t}\n\treturn coverage;\n}\n\ninterface JsonCandidate {\n\tindex: number;\n\ttext: string;\n}\n\nconst NAMED_XML_ENTITIES: Record<string, string> = {\n\tquot: '\"',\n\tapos: \"'\",\n\tlt: \"<\",\n\tgt: \">\",\n\tamp: \"&\",\n};\n\n// Matches the five named entities plus decimal (&#38;) and hex (&#x26;/&#X26;)\n// character references. A single global pass decodes each reference exactly once\n// left-to-right, so `&amp;lt;` yields `&lt;` (no double-decode).\nconst XML_ENTITY_PATTERN = /&(?:#(\\d+)|#[xX]([0-9a-fA-F]+)|(quot|apos|lt|gt|amp));/g;\n\nfunction decodeXmlEntities(value: string): string {\n\treturn value.replace(\n\t\tXML_ENTITY_PATTERN,\n\t\t(match, dec: string | undefined, hex: string | undefined, named: string | undefined) => {\n\t\t\tif (named !== undefined) {\n\t\t\t\treturn NAMED_XML_ENTITIES[named] ?? match;\n\t\t\t}\n\t\t\tconst code = dec !== undefined ? Number.parseInt(dec, 10) : Number.parseInt(hex ?? \"\", 16);\n\t\t\t// Leave invalid, out-of-range, or surrogate code points as-is rather than\n\t\t\t// producing replacement or lone-surrogate characters that could break JSON.\n\t\t\tif (!Number.isFinite(code) || code < 0 || code > 0x10ffff || (code >= 0xd800 && code <= 0xdfff)) {\n\t\t\t\treturn match;\n\t\t\t}\n\t\t\treturn String.fromCodePoint(code);\n\t\t},\n\t);\n}\n\n/** Unwrap CDATA sections; the enclosed text is literal and needs no entity decoding. */\nfunction unwrapCdata(value: string): string {\n\treturn value.replace(/<!\\[CDATA\\[([\\s\\S]*?)\\]\\]>/g, \"$1\");\n}\n\nfunction stripJsonMarkdownFence(value: string): string {\n\tconst trimmed = value.trim();\n\tconst match = /^```(?:json)?[ \\t]*(?:\\r?\\n)?([\\s\\S]*?)\\r?\\n?```$/i.exec(trimmed);\n\treturn match?.[1]?.trim() ?? trimmed;\n}\n\nfunction collectXmlPayloadCandidates(text: string): JsonCandidate[] {\n\tconst candidates: JsonCandidate[] = [];\n\tconst payloadRegex = /<payload\\b[^>]*>([\\s\\S]*?)<\\/payload>/gi;\n\tlet match = payloadRegex.exec(text);\n\twhile (match !== null) {\n\t\tcandidates.push({ index: match.index, text: unwrapCdata(match[1] ?? \"\").trim() });\n\t\tmatch = payloadRegex.exec(text);\n\t}\n\treturn candidates;\n}\n\n/** Parse one JSON candidate into a ParsedReview, or undefined if it lacks a findings array. */\nfunction tryParseFindingsObject(candidate: string): ParsedReview | undefined {\n\tlet parsed: unknown;\n\ttry {\n\t\tparsed = JSON.parse(candidate);\n\t} catch {\n\t\treturn undefined;\n\t}\n\tif (typeof parsed !== \"object\" || parsed === null) {\n\t\treturn undefined;\n\t}\n\tconst record = parsed as Record<string, unknown>;\n\tif (!Array.isArray(record.findings)) {\n\t\treturn undefined;\n\t}\n\tconst findings = record.findings\n\t\t.map(coerceFinding)\n\t\t.filter((finding): finding is ReviewFinding => finding !== undefined);\n\treturn {\n\t\tfindings,\n\t\tcoverage: coerceCoverage(record.coverage),\n\t\toverallCorrectness: typeof record.overall_correctness === \"string\" ? record.overall_correctness : undefined,\n\t\toverallExplanation: typeof record.overall_explanation === \"string\" ? record.overall_explanation : undefined,\n\t};\n}\n\n/**\n * Parse a JSON candidate, retrying with XML entities decoded only when the raw\n * text does not parse. Trying raw first avoids corrupting payloads whose string\n * values legitimately contain entity-like text (e.g. a finding that mentions\n * `&amp;` or `&quot;`), while still recovering payloads that a model XML-escaped\n * to keep them valid inside the <payload> tag.\n */\nfunction parseFindingsCandidate(candidate: string): ParsedReview | undefined {\n\tconst parsed = tryParseFindingsObject(candidate);\n\tif (parsed) {\n\t\treturn parsed;\n\t}\n\tconst decoded = decodeXmlEntities(candidate);\n\treturn decoded === candidate ? undefined : tryParseFindingsObject(decoded);\n}\n\n/**\n * Parse the reviewer's final message. Looks for the last XML payload, fenced json block,\n * or bare JSON object containing a findings array. Returns undefined when no parseable block exists.\n */\nexport function parseReviewOutput(text: string): ParsedReview | undefined {\n\t// Extract XML payloads first so the preferred response envelope can contain prose safely.\n\tconst candidates = collectXmlPayloadCandidates(text);\n\n\t// Extract fenced blocks line by line. Any info string opens a block (so a\n\t// ```ts block in prose doesn't pair fences off-by-one), but only json or\n\t// untagged blocks become candidates. A closer must be a bare ``` line, so\n\t// fences embedded inside JSON strings don't terminate the block early.\n\tlet blockLines: string[] | undefined;\n\tlet blockIsCandidate = false;\n\tlet blockStartIndex = 0;\n\tlet lineStartIndex = 0;\n\tfor (const line of text.split(\"\\n\")) {\n\t\tconst trimmed = line.trim();\n\t\tif (blockLines === undefined) {\n\t\t\tif (trimmed.startsWith(\"```\")) {\n\t\t\t\tconst infoString = trimmed.slice(3).trim();\n\t\t\t\tblockLines = [];\n\t\t\t\tblockIsCandidate = infoString === \"\" || infoString === \"json\";\n\t\t\t\tblockStartIndex = lineStartIndex;\n\t\t\t}\n\t\t} else if (trimmed === \"```\") {\n\t\t\tif (blockIsCandidate) {\n\t\t\t\tcandidates.push({ index: blockStartIndex, text: blockLines.join(\"\\n\") });\n\t\t\t}\n\t\t\tblockLines = undefined;\n\t\t} else {\n\t\t\tblockLines.push(line);\n\t\t}\n\t\tlineStartIndex += line.length + 1;\n\t}\n\t// An unterminated trailing block is still worth trying.\n\tif (blockLines !== undefined && blockIsCandidate) {\n\t\tcandidates.push({ index: blockStartIndex, text: blockLines.join(\"\\n\") });\n\t}\n\t// Also try the whole text in case the model emitted bare JSON.\n\tcandidates.push({ index: 0, text });\n\n\tfor (const candidateEntry of candidates.sort((a, b) => b.index - a.index)) {\n\t\tconst candidate = stripJsonMarkdownFence(candidateEntry.text);\n\t\tif (!candidate.startsWith(\"{\")) {\n\t\t\tcontinue;\n\t\t}\n\t\tconst parsed = parseFindingsCandidate(candidate);\n\t\tif (parsed) {\n\t\t\treturn parsed;\n\t\t}\n\t}\n\treturn undefined;\n}\n\n// ============================================================================\n// Seeding the fresh session\n// ============================================================================\n\n/**\n * Strip the machine-readable `<response>…</response>` envelope (summary + JSON\n * payload) from reviewer assistant text so a live in-process render shows the\n * reviewer's prose and tool activity instead of raw markup. Also drops a\n * trailing unterminated `<response>` so a mid-stream partial envelope never\n * flashes. The formatted findings are surfaced separately after the handoff.\n */\nexport function stripReviewEnvelopeForDisplay(text: string): string {\n\treturn text\n\t\t.replace(/<response\\b[\\s\\S]*?<\\/response>/gi, \"\")\n\t\t.replace(/<response\\b[\\s\\S]*$/i, \"\")\n\t\t.trim();\n}\n\n/**\n * Format the review result as the seed message for the fresh post-review session.\n * This text is both displayed and sent to the LLM as context.\n */\nexport function formatReviewForNewSession(\n\tresolved: Pick<ResolvedReview, \"description\" | \"diffCommand\">,\n\tparsed: ParsedReview | undefined,\n\traw: string,\n): string {\n\tconst lines: string[] = [\n\t\t`An automated code review of ${resolved.description} was completed in a separate session.`,\n\t\t\"\",\n\t];\n\n\tif (!parsed) {\n\t\tlines.push(\"The reviewer's report (unstructured):\", \"\", raw.trim());\n\t} else {\n\t\tif (parsed.overallCorrectness || parsed.overallExplanation) {\n\t\t\tconst verdict = [parsed.overallCorrectness, parsed.overallExplanation].filter(Boolean).join(\" — \");\n\t\t\tlines.push(`Overall: ${verdict}`, \"\");\n\t\t}\n\t\tif (parsed.coverage) {\n\t\t\tconst coverageLines: string[] = [];\n\t\t\tif (parsed.coverage.filesReviewed.length > 0) {\n\t\t\t\tcoverageLines.push(`Files reviewed: ${parsed.coverage.filesReviewed.join(\", \")}`);\n\t\t\t}\n\t\t\tif (parsed.coverage.commandsRun.length > 0) {\n\t\t\t\tcoverageLines.push(`Commands run: ${parsed.coverage.commandsRun.join(\"; \")}`);\n\t\t\t}\n\t\t\tif (parsed.coverage.uncheckedAreas.length > 0) {\n\t\t\t\tcoverageLines.push(`Unchecked areas: ${parsed.coverage.uncheckedAreas.join(\"; \")}`);\n\t\t\t}\n\t\t\tif (coverageLines.length > 0) {\n\t\t\t\tlines.push(\"Coverage:\", ...coverageLines.map((line) => `- ${line}`), \"\");\n\t\t\t}\n\t\t}\n\t\tif (parsed.findings.length === 0) {\n\t\t\tlines.push(\"The review found no issues worth flagging.\");\n\t\t} else {\n\t\t\tlines.push(\"Findings:\", \"\");\n\t\t\tparsed.findings.forEach((finding, index) => {\n\t\t\t\tconst meta: string[] = [];\n\t\t\t\tif (finding.priority !== undefined) {\n\t\t\t\t\tmeta.push(`P${finding.priority}`);\n\t\t\t\t}\n\t\t\t\tif (finding.confidence !== undefined) {\n\t\t\t\t\tmeta.push(`confidence ${Math.round(finding.confidence * 100)}%`);\n\t\t\t\t}\n\t\t\t\tconst location = finding.file ? ` (${finding.file}${finding.line ? `:${finding.line}` : \"\"})` : \"\";\n\t\t\t\tconst metaText = meta.length > 0 ? ` [${meta.join(\", \")}]` : \"\";\n\t\t\t\tlines.push(`### ${index + 1}. ${finding.title}${metaText}${location}`, \"\");\n\t\t\t\tif (finding.body) {\n\t\t\t\t\tlines.push(finding.body, \"\");\n\t\t\t\t}\n\t\t\t});\n\t\t}\n\t}\n\n\t// Collapse any trailing blank lines (the findings loop appends one after each\n\t// entry) so the footer is always separated by exactly one blank line.\n\twhile (lines.length > 0 && lines[lines.length - 1] === \"\") {\n\t\tlines.pop();\n\t}\n\tlines.push(\n\t\t\"\",\n\t\t`Reproduce the reviewed diff with \\`${resolved.diffCommand}\\`.`,\n\t\t'The user may refer to findings by number (e.g. \"fix 1 and 3\"). When asked to fix findings, read the relevant code first and apply minimal, correct fixes.',\n\t);\n\treturn lines.join(\"\\n\");\n}\n\n// ============================================================================\n// Running the review\n// ============================================================================\n\n/**\n * Minimal resource loader for the isolated review session: it loads the\n * project's context files (AGENTS.md) but provides no user extensions, skills,\n * prompt templates, themes, or subagents. Configured extension *tools* are\n * inherited separately (see collectParentExtensionTools) and passed as\n * customTools in runReviewSession.\n */\nexport function createReviewResourceLoader(cwd: string, agentDir: string): ResourceLoader {\n\tconst extensionsResult = { extensions: [], errors: [], runtime: createExtensionRuntime() };\n\tconst agentsFiles = loadProjectContextFiles({ cwd, agentDir });\n\treturn {\n\t\tgetExtensions: () => extensionsResult,\n\t\tgetSkills: () => ({ skills: [], diagnostics: [] }),\n\t\tgetPrompts: () => ({ prompts: [], diagnostics: [] }),\n\t\tgetThemes: () => ({ themes: [], diagnostics: [] }),\n\t\tgetSubagents: () => ({ definitions: [], diagnostics: [] }),\n\t\tgetAgentsFiles: () => ({ agentsFiles }),\n\t\tgetSystemPrompt: () => REVIEW_SYSTEM_PROMPT,\n\t\tgetAppendSystemPrompt: () => [],\n\t\textendResources: () => {},\n\t\treload: async () => {},\n\t};\n}\n\nfunction collectParentExtensionTools(parentResourceLoader: ResourceLoader | undefined): ToolDefinition[] {\n\tconst parentExtensions = parentResourceLoader?.getExtensions();\n\tif (!parentExtensions) {\n\t\treturn [];\n\t}\n\n\tconst toolsByName = new Map<string, ToolDefinition>();\n\tfor (const extension of parentExtensions.extensions) {\n\t\tfor (const tool of extension.tools.values()) {\n\t\t\tif (!toolsByName.has(tool.definition.name)) {\n\t\t\t\ttoolsByName.set(tool.definition.name, tool.definition);\n\t\t\t}\n\t\t}\n\t}\n\treturn Array.from(toolsByName.values());\n}\n\nexport interface RunReviewOptions {\n\tcwd: string;\n\tagentDir: string;\n\tmodel: Model<any>;\n\tthinkingLevel?: ThinkingLevel;\n\tauthStorage: AuthStorage;\n\tmodelRegistry: ModelRegistry;\n\tsettingsManager: SettingsManager;\n\tresolved: ResolvedReview;\n\t/** Parent session resource loader used to inherit configured extension tools. */\n\tparentResourceLoader?: ResourceLoader;\n\t/** Optional review tool allowlist. Omit to use normal review defaults. */\n\ttools?: string[];\n\t/** Aborts the review session when triggered. */\n\tsignal?: AbortSignal;\n\t/** Called with short progress updates (tool activity) while the review runs. */\n\tonProgress?: (message: string) => void;\n\t/** Emits sanitized review tool lifecycle events while the review runs. */\n\tonEvent?: (event: ReviewWorkflowToolEvent) => void;\n\t/**\n\t * Full in-process review-session event stream, for rich local rendering.\n\t * In-process (TUI) only; never forwarded over RPC, where only the sanitized\n\t * `onEvent` stream is exposed.\n\t */\n\tonSessionEvent?: (event: AgentSessionEvent) => void;\n\tworkflowId?: string;\n\tworkflowAction?: string;\n}\n\nexport interface ReviewRunResult {\n\taborted: boolean;\n\t/** Full text of the reviewer's final message. */\n\traw: string;\n\tparsed?: ParsedReview;\n\terrorMessage?: string;\n}\n\nexport interface ReviewWorkflowSession {\n\t/** Falls back to isStreaming for legacy workflow integrations. */\n\tisBusy?: boolean;\n\tisStreaming: boolean;\n\tisCompacting: boolean;\n\tmodel?: Model<any>;\n\tthinkingLevel?: ThinkingLevel;\n\tmodelRegistry: ModelRegistry;\n\tresourceLoader: ResourceLoader;\n\tsendCustomMessage<T = unknown>(\n\t\tmessage: Pick<ReviewCustomMessage<T>, \"customType\" | \"content\" | \"display\" | \"details\">,\n\t\toptions?: { triggerTurn?: boolean; deliverAs?: \"steer\" | \"followUp\" | \"nextTurn\" },\n\t): Promise<void>;\n}\n\ninterface ReviewCustomMessage<T> {\n\tcustomType: string;\n\tcontent: string;\n\tdisplay: boolean;\n\tdetails: T;\n}\n\nexport type ReviewWorkflowEvent =\n\t| {\n\t\t\ttype: \"workflow_start\";\n\t\t\tworkflowId: string;\n\t\t\tkind: \"review\";\n\t\t\taction: string;\n\t\t\ttitle: string;\n\t\t\tmessage: string;\n\t\t\tstatus: \"running\";\n\t  }\n\t| {\n\t\t\ttype: \"workflow_update\";\n\t\t\tworkflowId: string;\n\t\t\tkind: \"review\";\n\t\t\taction: string;\n\t\t\ttitle: string;\n\t\t\tmessage: string;\n\t\t\tstatus: \"running\" | \"finalizing\";\n\t  }\n\t| {\n\t\t\ttype: \"workflow_end\";\n\t\t\tworkflowId: string;\n\t\t\tkind: \"review\";\n\t\t\taction: string;\n\t\t\ttitle: string;\n\t\t\tmessage: string;\n\t\t\tstatus: \"completed\" | \"cancelled\" | \"failed\";\n\t  };\n\nexport type ReviewWorkflowToolEvent =\n\t| {\n\t\t\ttype: \"tool_execution_start\";\n\t\t\tworkflowId: string;\n\t\t\tworkflowKind: \"review\";\n\t\t\tworkflowAction: string;\n\t\t\ttoolCallId: string;\n\t\t\ttoolName: string;\n\t\t\targs?: Record<string, unknown>;\n\t  }\n\t| {\n\t\t\ttype: \"tool_execution_end\";\n\t\t\tworkflowId: string;\n\t\t\tworkflowKind: \"review\";\n\t\t\tworkflowAction: string;\n\t\t\ttoolCallId: string;\n\t\t\ttoolName: string;\n\t\t\tisError: boolean;\n\t  };\n\nexport interface ReviewWorkflowHooks {\n\tsignal?: AbortSignal;\n\tonProgress?: (message: string) => void;\n\tonEvent?: (event: ReviewWorkflowEvent | ReviewWorkflowToolEvent) => void;\n\t/** Full in-process review-session event stream, for rich local rendering. */\n\tonSessionEvent?: (event: AgentSessionEvent) => void;\n\tcleanup?: () => void;\n}\n\nexport interface ReviewWorkflowOptions {\n\ttarget: ReviewTarget;\n\tcwd: string;\n\tagentDir: string;\n\tsession: ReviewWorkflowSession;\n\tnewSession: AgentSessionRuntime[\"newSession\"];\n\tauthStorage: AuthStorage;\n\tsettingsManager: SettingsManager;\n\ttools?: readonly string[];\n\trequireProjectTrust?: boolean;\n\trequireConfirmation?: boolean;\n\tconfirm?: (request: { title: string; message: string; resolution: ResolvedReview }) => Promise<boolean>;\n\tonBeforeReview?: (\n\t\tresolution: ResolvedReview,\n\t\tmodel: Model<any>,\n\t) => Promise<ReviewWorkflowHooks> | ReviewWorkflowHooks;\n\tonReviewModelWarning?: (message: string) => void;\n\t/** Emits sanitized review workflow and tool-usage events for UI surfaces. */\n\tonEvent?: (event: ReviewWorkflowEvent | ReviewWorkflowToolEvent) => void;\n}\n\nexport type ReviewWorkflowResult =\n\t| { status: \"cancelled\"; resolution?: ResolvedReview }\n\t| {\n\t\t\tstatus: \"completed\";\n\t\t\tresolution: ResolvedReview;\n\t\t\tfindingsCount?: number;\n\t\t\tsessionSwitchCancelled: boolean;\n\t  };\n\nexport function createReviewConfirmationMessage(resolution: ResolvedReview): string {\n\treturn [\n\t\t`Review ${resolution.description}?`,\n\t\t\"\",\n\t\t\"Volt will inspect the selected git diff, may read related project files with host-approved read-only tools, consume model tokens, and create a fresh session seeded with the findings.\",\n\t\t`Diff command: ${resolution.diffCommand}`,\n\t].join(\"\\n\");\n}\n\nexport function resolveReviewModel(options: {\n\tsettingsManager: SettingsManager;\n\tmodelRegistry: ModelRegistry;\n\tcurrentModel?: Model<any>;\n}): { model?: Model<any>; warning?: string } {\n\tconst reference = options.settingsManager.getReviewModel();\n\tif (reference) {\n\t\toptions.modelRegistry.refresh();\n\t\tconst available = options.modelRegistry.getAvailable();\n\t\tconst match = findExactModelReferenceMatch(reference, available);\n\t\tif (match) {\n\t\t\treturn { model: match };\n\t\t}\n\t\treturn {\n\t\t\tmodel: options.currentModel,\n\t\t\twarning: `reviewModel \"${reference}\" not found or not authenticated; using the current model.`,\n\t\t};\n\t}\n\treturn { model: options.currentModel };\n}\n\nfunction reviewActionIdForTarget(target: ReviewTarget): string {\n\tswitch (target.kind) {\n\t\tcase \"uncommitted\":\n\t\t\treturn \"review.uncommitted\";\n\t\tcase \"branch\":\n\t\t\treturn \"review.branch\";\n\t\tcase \"pr\":\n\t\t\treturn \"review.pr\";\n\t\tcase \"commit\":\n\t\t\treturn \"review.commit\";\n\t}\n}\n\nfunction createReviewWorkflowId(): string {\n\treturn `review:${randomUUID()}`;\n}\n\nfunction emitReviewWorkflowEvent(\n\temit: ((event: ReviewWorkflowEvent | ReviewWorkflowToolEvent) => void) | undefined,\n\tevent: ReviewWorkflowEvent,\n): void {\n\temit?.(event);\n}\n\nexport async function runReviewWorkflow(options: ReviewWorkflowOptions): Promise<ReviewWorkflowResult> {\n\tassertReviewCanStart(options.session);\n\tif (options.requireProjectTrust && !options.settingsManager.isProjectTrusted()) {\n\t\tthrow new Error(\"Project trust is required before running a remote review.\");\n\t}\n\n\tconst resolution = await resolveReviewTarget(options.target, options.cwd);\n\tif (\"error\" in resolution) {\n\t\tthrow new Error(resolution.error);\n\t}\n\n\tif (options.requireConfirmation) {\n\t\tconst confirmed = await options.confirm?.({\n\t\t\ttitle: \"Review changes\",\n\t\t\tmessage: createReviewConfirmationMessage(resolution),\n\t\t\tresolution,\n\t\t});\n\t\tif (!confirmed) {\n\t\t\treturn { status: \"cancelled\", resolution };\n\t\t}\n\t}\n\n\tconst reviewModel = resolveReviewModel({\n\t\tsettingsManager: options.settingsManager,\n\t\tmodelRegistry: options.session.modelRegistry,\n\t\tcurrentModel: options.session.model,\n\t});\n\tif (reviewModel.warning) {\n\t\toptions.onReviewModelWarning?.(reviewModel.warning);\n\t}\n\tconst model = reviewModel.model;\n\tif (!model) {\n\t\tthrow new Error(\"No model available for review. Use /model to select one.\");\n\t}\n\n\tassertReviewCanStart(options.session);\n\tconst workflowId = createReviewWorkflowId();\n\tconst workflowAction = reviewActionIdForTarget(options.target);\n\tconst hooks = await options.onBeforeReview?.(resolution, model);\n\tconst emitEvent = (event: ReviewWorkflowEvent | ReviewWorkflowToolEvent): void => {\n\t\toptions.onEvent?.(event);\n\t\thooks?.onEvent?.(event);\n\t};\n\n\temitReviewWorkflowEvent(emitEvent, {\n\t\ttype: \"workflow_start\",\n\t\tworkflowId,\n\t\tkind: \"review\",\n\t\taction: workflowAction,\n\t\ttitle: \"Review\",\n\t\tmessage: `Reviewing ${resolution.description}.`,\n\t\tstatus: \"running\",\n\t});\n\n\tlet terminalWorkflowEmitted = false;\n\tconst emitTerminalWorkflowEvent = (event: Extract<ReviewWorkflowEvent, { type: \"workflow_end\" }>): void => {\n\t\tterminalWorkflowEmitted = true;\n\t\temitReviewWorkflowEvent(emitEvent, event);\n\t};\n\n\ttry {\n\t\tlet result: ReviewRunResult;\n\t\ttry {\n\t\t\tresult = await runReview({\n\t\t\t\tcwd: options.cwd,\n\t\t\t\tagentDir: options.agentDir,\n\t\t\t\tmodel,\n\t\t\t\tthinkingLevel: options.session.thinkingLevel,\n\t\t\t\tauthStorage: options.authStorage,\n\t\t\t\tmodelRegistry: options.session.modelRegistry,\n\t\t\t\tsettingsManager: options.settingsManager,\n\t\t\t\tresolved: resolution,\n\t\t\t\tparentResourceLoader: options.session.resourceLoader,\n\t\t\t\ttools: options.tools ? [...options.tools] : undefined,\n\t\t\t\tsignal: hooks?.signal,\n\t\t\t\tonProgress: hooks?.onProgress,\n\t\t\t\tonSessionEvent: hooks?.onSessionEvent,\n\t\t\t\tonEvent: emitEvent,\n\t\t\t\tworkflowId,\n\t\t\t\tworkflowAction,\n\t\t\t});\n\t\t} finally {\n\t\t\thooks?.cleanup?.();\n\t\t}\n\n\t\tif (result.aborted || hooks?.signal?.aborted) {\n\t\t\temitTerminalWorkflowEvent({\n\t\t\t\ttype: \"workflow_end\",\n\t\t\t\tworkflowId,\n\t\t\t\tkind: \"review\",\n\t\t\t\taction: workflowAction,\n\t\t\t\ttitle: \"Review\",\n\t\t\t\tmessage: \"Review cancelled.\",\n\t\t\t\tstatus: \"cancelled\",\n\t\t\t});\n\t\t\treturn { status: \"cancelled\", resolution };\n\t\t}\n\t\tif (result.errorMessage) {\n\t\t\temitTerminalWorkflowEvent({\n\t\t\t\ttype: \"workflow_end\",\n\t\t\t\tworkflowId,\n\t\t\t\tkind: \"review\",\n\t\t\t\taction: workflowAction,\n\t\t\t\ttitle: \"Review\",\n\t\t\t\tmessage: `Review failed: ${result.errorMessage}`,\n\t\t\t\tstatus: \"failed\",\n\t\t\t});\n\t\t\tthrow new Error(`Review failed: ${result.errorMessage}`);\n\t\t}\n\n\t\temitReviewWorkflowEvent(emitEvent, {\n\t\t\ttype: \"workflow_update\",\n\t\t\tworkflowId,\n\t\t\tkind: \"review\",\n\t\t\taction: workflowAction,\n\t\t\ttitle: \"Review\",\n\t\t\tmessage: \"Finalizing findings.\",\n\t\t\tstatus: \"finalizing\",\n\t\t});\n\n\t\tconst reviewMessage = createReviewSeedMessage(resolution, result);\n\t\tconst newSessionResult = await options.newSession({\n\t\t\twithSession: async (ctx: ReplacedSessionContext) => {\n\t\t\t\tawait ctx.sendMessage(reviewMessage);\n\t\t\t},\n\t\t});\n\t\tif (newSessionResult.cancelled) {\n\t\t\tawait options.session.sendCustomMessage(reviewMessage);\n\t\t}\n\t\tconst completedResult = {\n\t\t\tstatus: \"completed\" as const,\n\t\t\tresolution,\n\t\t\tfindingsCount: result.parsed?.findings.length,\n\t\t\tsessionSwitchCancelled: newSessionResult.cancelled,\n\t\t};\n\t\temitTerminalWorkflowEvent({\n\t\t\ttype: \"workflow_end\",\n\t\t\tworkflowId,\n\t\t\tkind: \"review\",\n\t\t\taction: workflowAction,\n\t\t\ttitle: \"Review\",\n\t\t\tmessage: newSessionResult.cancelled\n\t\t\t\t? `${formatReviewWorkflowSummary(completedResult)} Findings were added to the current session.`\n\t\t\t\t: `${formatReviewWorkflowSummary(completedResult)} Opening review session.`,\n\t\t\tstatus: \"completed\",\n\t\t});\n\t\treturn completedResult;\n\t} catch (error) {\n\t\tif (!terminalWorkflowEmitted) {\n\t\t\temitTerminalWorkflowEvent({\n\t\t\t\ttype: \"workflow_end\",\n\t\t\t\tworkflowId,\n\t\t\t\tkind: \"review\",\n\t\t\t\taction: workflowAction,\n\t\t\t\ttitle: \"Review\",\n\t\t\t\tmessage: \"Review failed.\",\n\t\t\t\tstatus: \"failed\",\n\t\t\t});\n\t\t}\n\t\tthrow error;\n\t}\n}\n\nexport function formatReviewWorkflowSummary(result: Extract<ReviewWorkflowResult, { status: \"completed\" }>): string {\n\tconst findingCount = result.findingsCount;\n\tif (findingCount === undefined) {\n\t\treturn \"Review complete.\";\n\t}\n\tif (findingCount === 0) {\n\t\treturn \"Review complete: no issues found.\";\n\t}\n\treturn `Review complete: ${findingCount} finding${findingCount === 1 ? \"\" : \"s\"}.`;\n}\n\nfunction assertReviewCanStart(session: Pick<ReviewWorkflowSession, \"isBusy\" | \"isStreaming\" | \"isCompacting\">): void {\n\tif ((session.isBusy ?? session.isStreaming) || session.isCompacting) {\n\t\tthrow new Error(\"Wait for the current response to finish before starting a review.\");\n\t}\n}\n\nfunction createReviewSeedMessage(resolution: ResolvedReview, result: Pick<ReviewRunResult, \"raw\" | \"parsed\">) {\n\treturn {\n\t\tcustomType: \"review\",\n\t\tcontent: formatReviewForNewSession(resolution, result.parsed, result.raw),\n\t\tdisplay: true,\n\t\tdetails: { target: resolution.description, findings: result.parsed?.findings ?? [] },\n\t};\n}\n\nfunction summarizeToolArgs(args: unknown): string | undefined {\n\tif (typeof args !== \"object\" || args === null) {\n\t\treturn undefined;\n\t}\n\tfor (const value of Object.values(args as Record<string, unknown>)) {\n\t\tif (typeof value === \"string\" && value.trim()) {\n\t\t\tconst oneLine = value.replace(/\\s+/g, \" \").trim();\n\t\t\treturn oneLine.length > 60 ? `${oneLine.slice(0, 57)}...` : oneLine;\n\t\t}\n\t}\n\treturn undefined;\n}\n\nconst REVIEW_WORKFLOW_ARG_STRING_LIMIT = 240;\n\nfunction createReviewWorkflowToolCallId(workflowId: string | undefined, toolCallId: unknown): string {\n\tconst id = typeof toolCallId === \"string\" && toolCallId.trim() ? toolCallId.trim() : \"unknown\";\n\treturn workflowId ? `${workflowId}:${id}` : id;\n}\n\nfunction sanitizeReviewWorkflowToolArgs(\n\ttoolName: string | undefined,\n\targs: unknown,\n): Record<string, unknown> | undefined {\n\tif (typeof args !== \"object\" || args === null || Array.isArray(args)) {\n\t\treturn undefined;\n\t}\n\tconst record = args as Record<string, unknown>;\n\tconst normalizedToolName = toolName?.trim().toLowerCase();\n\tconst keysByTool: Record<string, string[]> = {\n\t\tread: [\"path\", \"file_path\", \"offset\", \"limit\"],\n\t\tgrep: [\"pattern\", \"path\", \"glob\", \"ignoreCase\", \"literal\", \"context\", \"limit\"],\n\t\tfind: [\"pattern\", \"query\", \"path\", \"limit\"],\n\t\tls: [\"path\", \"limit\"],\n\t\tbash: [\"command\"],\n\t\tlsp: [\"action\", \"symbol\", \"line\", \"path\"],\n\t};\n\tconst allowedKeys = keysByTool[normalizedToolName ?? \"\"] ?? [\n\t\t\"action\",\n\t\t\"command\",\n\t\t\"file_path\",\n\t\t\"glob\",\n\t\t\"line\",\n\t\t\"path\",\n\t\t\"pattern\",\n\t\t\"query\",\n\t\t\"symbol\",\n\t];\n\tconst sanitized: Record<string, unknown> = {};\n\tfor (const key of allowedKeys) {\n\t\tif (!Object.hasOwn(record, key)) {\n\t\t\tcontinue;\n\t\t}\n\t\tconst value = sanitizeReviewWorkflowArgValue(record[key]);\n\t\tif (value !== undefined) {\n\t\t\tsanitized[key] = value;\n\t\t}\n\t}\n\treturn Object.keys(sanitized).length > 0 ? sanitized : undefined;\n}\n\nfunction sanitizeReviewWorkflowArgValue(value: unknown): string | number | boolean | undefined {\n\tif (typeof value === \"string\") {\n\t\tconst trimmed = value.replace(/\\s+/g, \" \").trim();\n\t\tif (!trimmed) {\n\t\t\treturn undefined;\n\t\t}\n\t\treturn trimmed.length <= REVIEW_WORKFLOW_ARG_STRING_LIMIT\n\t\t\t? trimmed\n\t\t\t: `${trimmed.slice(0, REVIEW_WORKFLOW_ARG_STRING_LIMIT - 1)}…`;\n\t}\n\tif (typeof value === \"number\" && Number.isFinite(value)) {\n\t\treturn value;\n\t}\n\tif (typeof value === \"boolean\") {\n\t\treturn value;\n\t}\n\treturn undefined;\n}\n\nfunction emitReviewWorkflowToolEvent(\n\temit: ((event: ReviewWorkflowToolEvent) => void) | undefined,\n\toptions: Pick<RunReviewOptions, \"workflowId\" | \"workflowAction\">,\n\tevent: { type: string; toolCallId?: string; toolName?: string; args?: unknown; isError?: boolean },\n): void {\n\tif (!emit || !options.workflowId || !options.workflowAction || !event.toolName) {\n\t\treturn;\n\t}\n\tif (event.type === \"tool_execution_start\") {\n\t\temit({\n\t\t\ttype: \"tool_execution_start\",\n\t\t\tworkflowId: options.workflowId,\n\t\t\tworkflowKind: \"review\",\n\t\t\tworkflowAction: options.workflowAction,\n\t\t\ttoolCallId: createReviewWorkflowToolCallId(options.workflowId, event.toolCallId),\n\t\t\ttoolName: event.toolName,\n\t\t\targs: sanitizeReviewWorkflowToolArgs(event.toolName, event.args),\n\t\t});\n\t\treturn;\n\t}\n\tif (event.type === \"tool_execution_end\") {\n\t\temit({\n\t\t\ttype: \"tool_execution_end\",\n\t\t\tworkflowId: options.workflowId,\n\t\t\tworkflowKind: \"review\",\n\t\t\tworkflowAction: options.workflowAction,\n\t\t\ttoolCallId: createReviewWorkflowToolCallId(options.workflowId, event.toolCallId),\n\t\t\ttoolName: event.toolName,\n\t\t\tisError: event.isError === true,\n\t\t});\n\t}\n}\n\n// ============================================================================\n// Working-tree guard\n// ============================================================================\n\n/**\n * Snapshot/restore guard for the reviewer's working tree.\n *\n * The reviewer runs in the user's real cwd so it can execute the project's\n * tests and reproduce bugs with the real dependencies (node_modules, build\n * caches, ...). To keep that safe, we snapshot the full working state before\n * the review and afterward — including on error or abort — revert anything the\n * reviewer added, modified, or deleted, while preserving the uncommitted\n * changes that were under review.\n *\n * Caveats: files edited by another process during the review may also be\n * reverted, since the guard cannot distinguish those from reviewer edits;\n * git-ignored files (e.g. node_modules, build output) are never touched.\n */\ninterface WorkingTreeGuard {\n\trestore(): Promise<void>;\n}\n\nexport async function createWorkingTreeGuard(cwd: string): Promise<WorkingTreeGuard> {\n\tconst root = await gitRepoRoot(cwd);\n\tconst snapshot = root ? await captureWorkingTree(root) : undefined;\n\tlet restored = false;\n\treturn {\n\t\tasync restore() {\n\t\t\tif (restored || !root || !snapshot) {\n\t\t\t\treturn;\n\t\t\t}\n\t\t\trestored = true;\n\t\t\tawait restoreWorkingTree(root, snapshot);\n\t\t},\n\t};\n}\n\nasync function gitRepoRoot(cwd: string): Promise<string | undefined> {\n\tconst result = await runCommand(\"git\", [\"rev-parse\", \"--show-toplevel\"], cwd);\n\treturn result.ok ? result.stdout.trim() || undefined : undefined;\n}\n\n/** Write a tree object capturing every non-ignored file in the working tree. */\nasync function captureWorkingTree(root: string): Promise<string | undefined> {\n\treturn withTempIndex(async (indexFile) => {\n\t\tconst env = { GIT_INDEX_FILE: indexFile };\n\t\tconst add = await runCommand(\"git\", [\"add\", \"-A\"], root, env);\n\t\tif (!add.ok) {\n\t\t\treturn undefined;\n\t\t}\n\t\tconst tree = await runCommand(\"git\", [\"write-tree\"], root, env);\n\t\treturn tree.ok ? tree.stdout.trim() || undefined : undefined;\n\t});\n}\n\n/** Revert the working tree back to the snapshot, touching only changed paths. */\nasync function restoreWorkingTree(root: string, snapshotTree: string): Promise<void> {\n\tawait withTempIndex(async (indexFile) => {\n\t\tconst env = { GIT_INDEX_FILE: indexFile };\n\t\tconst add = await runCommand(\"git\", [\"add\", \"-A\"], root, env);\n\t\tif (!add.ok) {\n\t\t\treturn;\n\t\t}\n\t\tconst endTreeResult = await runCommand(\"git\", [\"write-tree\"], root, env);\n\t\tconst endTree = endTreeResult.ok ? endTreeResult.stdout.trim() : \"\";\n\t\tif (!endTree || endTree === snapshotTree) {\n\t\t\treturn; // The reviewer left the working tree as it found it.\n\t\t}\n\t\tconst diff = await runCommand(\n\t\t\t\"git\",\n\t\t\t[\"diff-tree\", \"-r\", \"-z\", \"--no-renames\", \"--name-status\", snapshotTree, endTree],\n\t\t\troot,\n\t\t);\n\t\tif (!diff.ok) {\n\t\t\treturn;\n\t\t}\n\t\tconst { added, changed } = parseNameStatusZ(diff.stdout);\n\t\t// Restore modified/deleted paths from the snapshot, then remove additions.\n\t\tif (changed.length > 0) {\n\t\t\tawait runCommand(\"git\", [\"read-tree\", snapshotTree], root, env);\n\t\t\tawait runCommand(\"git\", [\"checkout-index\", \"-f\", \"--\", ...changed], root, env);\n\t\t}\n\t\tfor (const path of added) {\n\t\t\tawait rm(join(root, path), { force: true });\n\t\t}\n\t});\n}\n\n/** Split a `-z --name-status` diff-tree stream into added vs modified/deleted paths. */\nfunction parseNameStatusZ(stdout: string): { added: string[]; changed: string[] } {\n\tconst tokens = stdout.split(\"\\0\").filter((token) => token.length > 0);\n\tconst added: string[] = [];\n\tconst changed: string[] = [];\n\tfor (let i = 0; i + 1 < tokens.length; i += 2) {\n\t\tconst status = tokens[i];\n\t\tconst path = tokens[i + 1];\n\t\tif (status.startsWith(\"A\")) {\n\t\t\tadded.push(path);\n\t\t} else {\n\t\t\tchanged.push(path);\n\t\t}\n\t}\n\treturn { added, changed };\n}\n\nasync function withTempIndex<T>(fn: (indexFile: string) => Promise<T>): Promise<T> {\n\tconst dir = await mkdtemp(join(tmpdir(), \"volt-review-index-\"));\n\tconst indexFile = join(dir, \"index\");\n\ttry {\n\t\treturn await fn(indexFile);\n\t} finally {\n\t\tawait rm(dir, { recursive: true, force: true }).catch(() => {});\n\t}\n}\n\n/**\n * Run a review in an isolated in-process agent session.\n * The session is in-memory (not persisted) and disposed when done.\n *\n * The reviewer executes in the user's real cwd so it can run the project's\n * tests and reproduce bugs with real dependencies. A working-tree guard\n * snapshots the tree first and reverts anything the reviewer adds, modifies,\n * or deletes once the review finishes — including on error or abort.\n */\nexport async function runReview(options: RunReviewOptions): Promise<ReviewRunResult> {\n\tconst guard = await createWorkingTreeGuard(options.cwd);\n\ttry {\n\t\treturn await runReviewSession(options);\n\t} finally {\n\t\tawait guard.restore();\n\t}\n}\n\nasync function runReviewSession(options: RunReviewOptions): Promise<ReviewRunResult> {\n\tconst inheritedTools = collectParentExtensionTools(options.parentResourceLoader);\n\tconst resourceLoader = createReviewResourceLoader(options.cwd, options.agentDir);\n\tconst { session } = await createAgentSession({\n\t\tcwd: options.cwd,\n\t\tagentDir: options.agentDir,\n\t\tauthStorage: options.authStorage,\n\t\tmodelRegistry: options.modelRegistry,\n\t\tsettingsManager: options.settingsManager,\n\t\tmodel: options.model,\n\t\tthinkingLevel: options.thinkingLevel,\n\t\tsessionManager: SessionManager.inMemory(options.cwd),\n\t\tresourceLoader,\n\t\tcustomTools: inheritedTools.length > 0 ? inheritedTools : undefined,\n\t\ttools: options.tools,\n\t\t// Isolated reviewer: never spin up (or tear down) the user's MCP servers.\n\t\tdisableMcp: true,\n\t});\n\n\t// An abort during session creation fires before the listener below is\n\t// attached, and AbortSignal does not invoke listeners added after the fact.\n\tif (options.signal?.aborted) {\n\t\tsession.dispose();\n\t\treturn { aborted: true, raw: \"\" };\n\t}\n\n\tconst onAbort = () => {\n\t\tvoid session.abort();\n\t};\n\toptions.signal?.addEventListener(\"abort\", onAbort, { once: true });\n\n\tconst unsubscribe = session.subscribe((event) => {\n\t\toptions.onSessionEvent?.(event);\n\t\tif (event.type === \"tool_execution_start\") {\n\t\t\tconst summary = summarizeToolArgs(event.args);\n\t\t\toptions.onProgress?.(summary ? `${event.toolName}: ${summary}` : event.toolName);\n\t\t\temitReviewWorkflowToolEvent(options.onEvent, options, event);\n\t\t} else if (event.type === \"tool_execution_end\") {\n\t\t\temitReviewWorkflowToolEvent(options.onEvent, options, event);\n\t\t}\n\t});\n\n\ttry {\n\t\tawait session.prompt(buildReviewPrompt(options.resolved), { expandPromptTemplates: false });\n\n\t\tif (options.signal?.aborted) {\n\t\t\treturn { aborted: true, raw: \"\" };\n\t\t}\n\n\t\tconst lastAssistant = [...session.messages]\n\t\t\t.reverse()\n\t\t\t.find((message): message is AssistantMessage => message.role === \"assistant\");\n\t\tif (lastAssistant?.stopReason === \"aborted\") {\n\t\t\treturn { aborted: true, raw: \"\" };\n\t\t}\n\t\tif (lastAssistant?.stopReason === \"error\") {\n\t\t\treturn { aborted: false, raw: \"\", errorMessage: lastAssistant.errorMessage ?? \"Review failed\" };\n\t\t}\n\n\t\tconst raw = session.getLastAssistantText() ?? \"\";\n\t\tif (!raw.trim()) {\n\t\t\treturn { aborted: false, raw: \"\", errorMessage: \"Review produced no output\" };\n\t\t}\n\t\treturn { aborted: false, raw, parsed: parseReviewOutput(raw) };\n\t} catch (error) {\n\t\tif (options.signal?.aborted) {\n\t\t\treturn { aborted: true, raw: \"\" };\n\t\t}\n\t\treturn {\n\t\t\taborted: false,\n\t\t\traw: \"\",\n\t\t\terrorMessage: error instanceof Error ? error.message : String(error),\n\t\t};\n\t} finally {\n\t\tunsubscribe();\n\t\toptions.signal?.removeEventListener(\"abort\", onAbort);\n\t\tsession.dispose();\n\t}\n}\n"]}