@mechanai/deepreview 2.1.4 → 2.1.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -8,6 +8,9 @@ permission:
8
8
  "git log*": allow
9
9
  "git blame*": allow
10
10
  "git show*": allow
11
+ "*--help*": allow
12
+ "*--version*": allow
13
+ "man *": allow
11
14
  "*": deny
12
15
  ---
13
16
 
@@ -23,11 +26,12 @@ For each finding in all 3 reviews:
23
26
 
24
27
  1. Read the source file and line referenced in the finding
25
28
  2. Determine if the claimed issue actually exists in the code
26
- 3. Check if the issue is already handled elsewhere (error handling, validation, guards)
27
- 4. Classify the finding:
29
+ 3. If the finding makes claims about external tool behavior (CLI flags, API parameters, library methods), **verify those claims**. Run `--help`, check man pages, or use WebFetch to check documentation. If the claimed behavior doesn't exist, classify as disproved.
30
+ 4. Check if the issue is already handled elsewhere (error handling, validation, guards)
31
+ 5. Classify the finding:
28
32
  - **confirmed** (high confidence): you verified the issue exists in the code
29
33
  - **plausible** (medium confidence): the issue might exist but you cannot fully verify
30
- - **disproved** (low confidence): the code already handles this, or the claim is wrong
34
+ - **disproved** (low confidence): the code already handles this, the claim is wrong, or the finding assumes external tool/API behavior that doesn't exist
31
35
 
32
36
  Discard all low-confidence (disproved) findings entirely.
33
37
 
@@ -1,5 +1,5 @@
1
1
  import { type Plugin, type PluginInput, tool } from "@opencode-ai/plugin";
2
- import { postReview } from "@mechanai/deepreview/api";
2
+ import { postReview } from "../../src/post-review.ts";
3
3
 
4
4
  // oxlint-disable-next-line require-await -- Why: Plugin type signature requires async but this plugin has no async initialization
5
5
  export const server: Plugin = async (_input: PluginInput) => {
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@mechanai/deepreview",
3
- "version": "2.1.4",
3
+ "version": "2.1.5",
4
4
  "description": "Multi-agent parallel code/spec review for OpenCode",
5
5
  "license": "MIT",
6
6
  "repository": {