@mrciphersmith/keryx 0.3.37 → 0.3.38

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. package/README.md +24 -0
  2. package/dist/cli.js +53842 -52481
  3. package/dist/core.js +6 -0
  4. package/package.json +1 -1
package/README.md CHANGED
@@ -977,6 +977,29 @@ repository checkout, since the evaluation corpus is not shipped in the npm
977
977
  package. See
978
978
  [run keryx in CI](docs/docs/guides/run-in-ci.md).
979
979
 
980
+ ### Review bot on pull requests
981
+
982
+ A GitHub Action reviews each same-repository pull request, has a second model
983
+ turn try to refute every finding, and posts one review with inline comments:
984
+
985
+ ```yaml
986
+ - uses: MrCipherSmith/keryx@main
987
+ with:
988
+ model-api-key: ${{ secrets.ANTHROPIC_API_KEY }}
989
+ ```
990
+
991
+ Set up the secret and copy [`docs/examples/review-bot.yml`](docs/examples/review-bot.yml)
992
+ (`permissions: contents: read, pull-requests: write`, trigger `pull_request`, never
993
+ `pull_request_target`). Fork pull requests are refused before any model call.
994
+ `keryx review bot post` is a dry run until you pass `--post`; the action's
995
+ `post: "false"` does the same. A run reviews at most `max-diff-bytes` of the diff
996
+ (default 200,000 bytes) with one reviewer turn plus one verifier turn per finding.
997
+ `keryx review metrics` (and `/reviews` in the shell) reports findings acted on,
998
+ dismissed, precision and resolved-before-merge; a ratio with no data prints
999
+ `n/a`. Metrics need the managed review packages on the machine where you run
1000
+ `keryx review complete`; the Action's runner keeps them only for the job and
1001
+ nothing uploads them. See [review as a pull request bot](docs/docs/guides/review-as-a-pr-bot.md).
1002
+
980
1003
  ## Documentation
981
1004
 
982
1005
  Full documentation site: **<https://mrciphersmith.github.io/keryx/>**
@@ -990,6 +1013,7 @@ Full documentation site: **<https://mrciphersmith.github.io/keryx/>**
990
1013
  - **[Workspace & lifecycle](docs/docs/workspace-and-lifecycle.md)** — the `.metaproject/` contract and `init`/`update` lifecycle.
991
1014
  - **[Limitations](docs/docs/limitations.md)** — known gaps, platform caveats, and what to do instead.
992
1015
  - **[Shared Agent Context](docs/docs/guides/shared-agent-context.md)** *(experimental)* — local-first work-context layer: FWK overview, proposals, runtime policy guard.
1016
+ - **[Review as a pull request bot](docs/docs/guides/review-as-a-pr-bot.md)** — the GitHub Action, secrets, the same-repository rule, dry run, cost, and the precision and resolved-before-merge metrics.
993
1017
  - **[Permission modes](docs/docs/guides/permission-modes.md)** — `ask`/`trust`/`auto` for the interactive shell: how to set them and exactly where the per-project default is stored.
994
1018
  - **[Changelog](CHANGELOG.md)** — what has landed since `v0.1.0`.
995
1019