@mrkaran/hodor 0.5.0 → 0.6.2-rc.2

package/dist/cli.js

@@ -1,12 +1,18 @@
 #!/usr/bin/env node
 import {
   detectPlatform,
+  parsePrUrl,
+  postGitlabReviewCommitStatus,
   postReviewComment,
+  postReviewStructured,
   pushMetrics,
+  reviewPr
+} from "./chunk-MRMLGIXO.js";
+import {
   renderMarkdown,
-  reviewPr,
   setLogLevel
-} from "./chunk-QGUJENIG.js";
+} from "./chunk-DVJVQTVW.js";
+import "./chunk-AMUK6GDX.js";
 
 // src/cli.ts
 import { Command } from "commander";
@@ -14,14 +20,14 @@ import chalk from "chalk";
 import "dotenv/config";
 var program = new Command();
 program.name("hodor").description(
-  "AI-powered code review agent for GitHub PRs, GitLab MRs, and local diffs.\n\nHodor uses an AI agent that clones the repository, checks out the PR branch,\nand analyzes the code using tools (gh, git, glab) for metadata fetching and comment posting.\n\nFor local reviews, use --local with --diff-against to review changes in your current git repository."
-).version("0.4.1").argument("[pr-url]", "URL of the GitHub PR or GitLab MR to review (optional with --local)").option(
+  "AI-powered code review agent for GitHub PRs, GitLab MRs, Gitea/Forgejo PRs, and local diffs.\n\nHodor uses an AI agent that clones the repository, checks out the PR branch,\nand analyzes the code using tools (gh, git, glab) for metadata fetching and comment posting.\n\nFor local reviews, use --local with --diff-against to review changes in your current git repository."
+).version("0.6.1").argument("[pr-url]", "URL of the GitHub PR, GitLab MR, or Gitea/Forgejo PR to review (optional with --local)").option(
   "--model <model>",
-  "LLM model to use (e.g., anthropic/claude-sonnet-4-5-20250929, openai/gpt-5)",
+  "LLM model to use as provider/model-id (e.g., anthropic/claude-sonnet-4-5-20250929, openrouter/moonshotai/kimi-k2.6)",
   "anthropic/claude-sonnet-4-5-20250929"
 ).option(
   "--reasoning-effort <level>",
-  "Reasoning effort level: low, medium, high, xhigh"
+  "Reasoning effort level: minimal, low, medium, high, xhigh"
 ).option("-v, --verbose", "Enable verbose logging", false).option(
   "--post",
   "Post the review directly to the PR/MR as a comment",
@@ -32,6 +38,17 @@ program.name("hodor").description(
 ).option(
   "--workspace <dir>",
   "Workspace directory (creates temp dir if not specified)"
+).option(
+  "--review-style <style>",
+  "How to post reviews on GitLab: summary (single comment), inline (diff comments), hybrid (both). Default: hybrid.",
+  "hybrid"
+).option(
+  "--code-quality <path>",
+  "Write a gl-code-quality-report.json CodeClimate artifact to this path"
+).option(
+  "--commit-status",
+  "Post a pass/fail commit status to the MR head SHA",
+  false
 ).option(
   "--ultrathink",
   "Enable maximum reasoning effort with extended thinking budget",
@@ -58,6 +75,9 @@ program.name("hodor").description(
   const prompt = cmdOpts.prompt;
   const promptFile = cmdOpts.promptFile;
   const workspace = cmdOpts.workspace;
+  const reviewStyle = cmdOpts.reviewStyle;
+  const codeQuality = cmdOpts.codeQuality;
+  const commitStatus = cmdOpts.commitStatus;
   const ultrathink = cmdOpts.ultrathink;
   const bedrockTagsRaw = cmdOpts.bedrockTags;
   const prometheusPush = cmdOpts.prometheusPush;
@@ -71,11 +91,15 @@ program.name("hodor").description(
     console.error(chalk.red("Error: --post is not supported in --local mode (no remote to post to)"));
     process.exit(1);
   }
-  const isCI = !!(process.env.CI || process.env.GITLAB_CI || process.env.GITHUB_ACTIONS);
+  if (!["summary", "inline", "hybrid"].includes(reviewStyle ?? "hybrid")) {
+    console.error(chalk.red("Error: --review-style must be one of: summary, inline, hybrid"));
+    process.exit(1);
+  }
+  const isCI = !!(process.env.CI || process.env.GITLAB_CI || process.env.GITHUB_ACTIONS || process.env.GITEA_ACTIONS || process.env.FORGEJO_ACTIONS);
   if (verbose) setLogLevel("debug");
   else if (isCI) setLogLevel("info");
   if (ultrathink) {
-    reasoningEffort = "high";
+    reasoningEffort = "xhigh";
   }
   let bedrockTags = null;
   if (bedrockTagsRaw) {
@@ -157,8 +181,13 @@ program.name("hodor").description(
   }
   try {
     let platform = "local";
+    let metricsProject;
+    let metricsMrIid;
     if (!localMode && prUrl) {
       platform = detectPlatform(prUrl);
+      const parsedPr = parsePrUrl(prUrl);
+      metricsProject = `${parsedPr.owner}/${parsedPr.repo}`;
+      metricsMrIid = String(parsedPr.prNumber);
       const githubToken = process.env.GITHUB_TOKEN;
       const gitlabToken = process.env.GITLAB_TOKEN ?? process.env.GITLAB_PRIVATE_TOKEN ?? process.env.CI_JOB_TOKEN;
       if (platform === "github" && !githubToken) {
@@ -167,6 +196,12 @@ program.name("hodor").description(
       } else if (platform === "gitlab" && !gitlabToken) {
         console.error(chalk.yellow("Warning: No GitLab token detected. Set GITLAB_TOKEN (api scope)."));
         console.error(chalk.dim("  Export GITLAB_TOKEN and optionally GITLAB_HOST.\n"));
+      } else if (platform === "gitea") {
+        const giteaToken = process.env.GITEA_TOKEN ?? process.env.FORGEJO_TOKEN;
+        if (!giteaToken) {
+          console.error(chalk.yellow("Warning: No Gitea/Forgejo token detected. Set GITEA_TOKEN for authentication."));
+          console.error(chalk.dim("  Export GITEA_TOKEN (or FORGEJO_TOKEN) for API access.\n"));
+        }
       }
     }
     log(`
@@ -185,7 +220,7 @@ ${chalk.bold.cyan("Hodor - AI Code Review Agent")}`);
     }
     log();
     streamLog(chalk.dim("\u25B6 Setting up workspace..."));
-    const { review, metricsFooter, headSha, metrics } = await reviewPr({
+    const { review, metricsFooter, headSha, metrics, workspacePath } = await reviewPr({
       prUrl: localMode ? void 0 : prUrl,
       model,
       reasoningEffort,
@@ -201,18 +236,68 @@ ${chalk.bold.cyan("Hodor - AI Code Review Agent")}`);
     });
     const reviewText = renderMarkdown(review);
     streamLog(chalk.green("\u2714 Review complete!"));
+    if (codeQuality) {
+      try {
+        const { formatCodeQualityReport } = await import("./codequality-DTJK2LGF.js");
+        const { writeFileSync } = await import("fs");
+        writeFileSync(
+          codeQuality,
+          formatCodeQualityReport(review, process.env.CI_PROJECT_DIR ?? workspacePath),
+          "utf-8"
+        );
+        log(chalk.dim(`Wrote code quality report to ${codeQuality}`));
+      } catch (err) {
+        log(chalk.yellow(`Failed to write code quality report: ${err}`));
+      }
+    }
     if (post && prUrl) {
       log(chalk.cyan("\nPosting review to PR/MR..."));
-      const result = await postReviewComment({
-        prUrl,
-        reviewText,
-        model,
-        metricsFooter,
-        headSha
-      });
+      const platform2 = detectPlatform(prUrl);
+      const useStructured = platform2 === "gitlab" && reviewStyle !== "summary";
+      let result;
+      if (useStructured) {
+        result = await postReviewStructured({
+          prUrl,
+          review,
+          model,
+          metricsFooter,
+          reviewStyle: reviewStyle ?? "hybrid",
+          commitStatus,
+          headSha,
+          workspacePath
+        });
+      } else {
+        result = await postReviewComment({
+          prUrl,
+          reviewText,
+          model,
+          metricsFooter,
+          headSha
+        });
+        if (platform2 === "gitlab" && commitStatus) {
+          try {
+            const { getGitlabMrDiffRefs } = await import("./gitlab-5TWHYHEP.js");
+            const parsed = parsePrUrl(prUrl);
+            const diffRefs = await getGitlabMrDiffRefs(
+              parsed.owner,
+              parsed.repo,
+              parsed.prNumber,
+              parsed.host
+            );
+            await postGitlabReviewCommitStatus(parsed, review, diffRefs);
+          } catch (err) {
+            result = {
+              success: false,
+              platform: "gitlab",
+              mrNumber: parsePrUrl(prUrl).prNumber,
+              error: `Failed to post commit status: ${err instanceof Error ? err.message : err}`
+            };
+          }
+        }
+      }
       if (result.success) {
         log(chalk.bold.green("Review posted successfully!"));
-        log(chalk.dim(`  ${platform === "github" ? "PR" : "MR"}: ${prUrl}`));
+        log(chalk.dim(`  ${platform2 === "gitlab" ? "MR" : "PR"}: ${prUrl}`));
       } else {
         log(chalk.bold.red(`Failed to post review: ${result.error}`));
         log(chalk.yellow("\nReview output:\n"));
@@ -226,14 +311,18 @@ ${chalk.bold.cyan("Hodor - AI Code Review Agent")}`);
       }
     }
     if (prometheusPush) {
+      const labels = {
+        platform,
+        model,
+        verdict: review.overall_correctness === "patch is correct" ? "correct" : "incorrect"
+      };
+      if (metricsProject) labels.project = metricsProject;
+      if (metricsMrIid) labels.mr_iid = metricsMrIid;
       await pushMetrics({
         pushgatewayUrl: prometheusPush,
         metrics,
-        labels: {
-          platform,
-          model,
-          verdict: review.overall_correctness === "patch is correct" ? "correct" : "incorrect"
-        }
+        findings: review.findings,
+        labels
       });
     }
   } catch (err) {

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/cli.ts"],"sourcesContent":["#!/usr/bin/env node\n\nimport { Command } from \"commander\";\nimport chalk from \"chalk\";\nimport \"dotenv/config\";\n\nimport { detectPlatform, postReviewComment, reviewPr } from \"./agent.js\";\nimport type { AgentProgressEvent } from \"./agent.js\";\nimport { renderMarkdown } from \"./render.js\";\nimport { pushMetrics } from \"./metrics.js\";\nimport { setLogLevel } from \"./utils/logger.js\";\n\nconst program = new Command();\n\nprogram\n  .name(\"hodor\")\n  .description(\n    \"AI-powered code review agent for GitHub PRs, GitLab MRs, and local diffs.\\n\\n\" +\n      \"Hodor uses an AI agent that clones the repository, checks out the PR branch,\\n\" +\n      \"and analyzes the code using tools (gh, git, glab) for metadata fetching and comment posting.\\n\\n\" +\n      \"For local reviews, use --local with --diff-against to review changes in your current git repository.\",\n  )\n  .version(\"0.4.1\")\n  .argument(\"[pr-url]\", \"URL of the GitHub PR or GitLab MR to review (optional with --local)\")\n  .option(\n    \"--model <model>\",\n    \"LLM model to use (e.g., anthropic/claude-sonnet-4-5-20250929, openai/gpt-5)\",\n    \"anthropic/claude-sonnet-4-5-20250929\",\n  )\n  .option(\n    \"--reasoning-effort <level>\",\n    \"Reasoning effort level: low, medium, high, xhigh\",\n  )\n  .option(\"-v, --verbose\", \"Enable verbose logging\", false)\n  .option(\n    \"--post\",\n    \"Post the review directly to the PR/MR as a comment\",\n    false,\n  )\n  .option(\"--prompt <text>\", \"Custom inline prompt text\")\n  .option(\n    \"--prompt-file <path>\",\n    \"Path to file containing custom prompt instructions\",\n  )\n  .option(\n    \"--workspace <dir>\",\n    \"Workspace directory (creates temp dir if not specified)\",\n  )\n  .option(\n    \"--ultrathink\",\n    \"Enable maximum reasoning effort with extended thinking budget\",\n    false,\n  )\n  .option(\n    \"--bedrock-tags <json>\",\n    \"JSON object of cost allocation tags for Bedrock requests (e.g., '{\\\"team\\\":\\\"platform\\\"}')\",\n  )\n  .option(\n    \"--prometheus-push <url>\",\n    \"Push review metrics to a Prometheus Pushgateway URL\",\n  )\n  .option(\n    \"--local\",\n    \"Review local changes in the current directory (no PR URL required)\",\n    false,\n  )\n  .option(\n    \"--diff-against <ref>\",\n    \"Git ref to diff against in local mode (e.g., origin/main, HEAD~1)\",\n    \"origin/main\",\n  )\n  .action(async (prUrl: string | undefined, cmdOpts: Record<string, unknown>) => {\n    const verbose = cmdOpts.verbose as boolean;\n    const post = cmdOpts.post as boolean;\n    const model = cmdOpts.model as string;\n    let reasoningEffort = cmdOpts.reasoningEffort as string | undefined;\n    const prompt = cmdOpts.prompt as string | undefined;\n    const promptFile = cmdOpts.promptFile as string | undefined;\n    const workspace = cmdOpts.workspace as string | undefined;\n    const ultrathink = cmdOpts.ultrathink as boolean;\n    const bedrockTagsRaw = cmdOpts.bedrockTags as string | undefined;\n    const prometheusPush = cmdOpts.prometheusPush as string | undefined;\n    const localMode = cmdOpts.local as boolean;\n    const diffAgainst = cmdOpts.diffAgainst as string;\n\n    if (!localMode && !prUrl) {\n      console.error(chalk.red(\"Error: pr-url is required unless --local is specified\"));\n      process.exit(1);\n    }\n    if (localMode && post) {\n      console.error(chalk.red(\"Error: --post is not supported in --local mode (no remote to post to)\"));\n      process.exit(1);\n    }\n\n    // Auto-detect CI environment\n    const isCI = !!(process.env.CI || process.env.GITLAB_CI || process.env.GITHUB_ACTIONS);\n\n    if (verbose) setLogLevel(\"debug\");\n    else if (isCI) setLogLevel(\"info\");\n\n    // Handle ultrathink\n    if (ultrathink) {\n      reasoningEffort = \"high\";\n    }\n\n    // Parse Bedrock cost allocation tags\n    let bedrockTags: Record<string, string> | null = null;\n    if (bedrockTagsRaw) {\n      try {\n        bedrockTags = JSON.parse(bedrockTagsRaw) as Record<string, string>;\n      } catch {\n        console.error(chalk.red(\"Error: --bedrock-tags must be valid JSON\"));\n        process.exit(1);\n      }\n    }\n\n    const log = console.log;\n    const logStream = process.stdout;\n\n    const toolIcons: Record<string, string> = {\n      bash: \"$\",\n      read: \"cat\",\n      grep: \"grep\",\n      find: \"find\",\n      ls: \"ls\",\n    };\n\n    /** Write a line to the log stream */\n    function streamLog(msg: string): void {\n      logStream.write(`${msg}\\n`);\n    }\n\n    /** Write inline text (no newline) for streaming deltas */\n    function streamWrite(text: string): void {\n      process.stderr.write(text);\n    }\n\n    function handleEvent(event: AgentProgressEvent): void {\n      switch (event.type) {\n        case \"agent_start\":\n          streamLog(chalk.dim(\"▶ Agent started\"));\n          break;\n        case \"turn_start\":\n          streamLog(chalk.dim(`\\n── Turn ${event.turnIndex ?? \"?\"} ──`));\n          break;\n        case \"tool_start\": {\n          const icon = toolIcons[event.toolName ?? \"\"] ?? event.toolName;\n          const preview = event.toolArgs ? ` ${event.toolArgs}` : \"\";\n          const maxLen = 160;\n          const truncated = preview.length > maxLen ? preview.slice(0, maxLen) + \"…\" : preview;\n          streamLog(chalk.green(`  ${icon}${truncated}`));\n          break;\n        }\n        case \"tool_end\": {\n          if (event.isError) {\n            streamLog(chalk.red(`  ✗ error`));\n          }\n          if (event.result) {\n            const lines = event.result.split(\"\\n\");\n            const maxLines = verbose ? 15 : 6;\n            const maxChars = verbose ? 400 : 200;\n            let chars = 0;\n            for (let i = 0; i < Math.min(lines.length, maxLines); i++) {\n              const line = lines[i];\n              if (chars + line.length > maxChars) {\n                streamLog(chalk.dim(`    …(${lines.length - i} more lines)`));\n                break;\n              }\n              streamLog(chalk.dim(`    ${line}`));\n              chars += line.length;\n            }\n          }\n          break;\n        }\n        case \"text_delta\":\n          if (verbose && event.delta) {\n            streamWrite(event.delta);\n          }\n          break;\n        case \"thinking_delta\":\n          // Only show reasoning in verbose mode\n          if (verbose && event.delta) {\n            streamWrite(chalk.dim(event.delta));\n          }\n          break;\n        case \"agent_end\":\n          streamLog(chalk.dim(\"\\n▶ Extracting review...\"));\n          break;\n      }\n    }\n\n    try {\n      // Detect platform and warn about missing tokens\n      let platform: string = \"local\";\n      if (!localMode && prUrl) {\n        platform = detectPlatform(prUrl);\n        const githubToken = process.env.GITHUB_TOKEN;\n        const gitlabToken =\n          process.env.GITLAB_TOKEN ??\n          process.env.GITLAB_PRIVATE_TOKEN ??\n          process.env.CI_JOB_TOKEN;\n\n        if (platform === \"github\" && !githubToken) {\n          console.error(chalk.yellow(\"Warning: GITHUB_TOKEN not set. You may encounter rate limits.\"));\n          console.error(chalk.dim(\"  Set GITHUB_TOKEN or run: gh auth login\\n\"));\n        } else if (platform === \"gitlab\" && !gitlabToken) {\n          console.error(chalk.yellow(\"Warning: No GitLab token detected. Set GITLAB_TOKEN (api scope).\"));\n          console.error(chalk.dim(\"  Export GITLAB_TOKEN and optionally GITLAB_HOST.\\n\"));\n        }\n      }\n\n      log(`\\n${chalk.bold.cyan(\"Hodor - AI Code Review Agent\")}`);\n      if (localMode) {\n        log(chalk.dim(`Mode: Local diff review`));\n        log(chalk.dim(`Diff against: ${diffAgainst}`));\n        log(chalk.dim(`Workspace: ${workspace ?? process.cwd()}`));\n      } else {\n        log(chalk.dim(`Platform: ${platform.toUpperCase()}`));\n        log(chalk.dim(`PR URL: ${prUrl}`));\n      }\n      log(chalk.dim(`Model: ${model}`));\n      if (reasoningEffort) {\n        log(chalk.dim(`Reasoning Effort: ${reasoningEffort}`));\n      }\n      log();\n\n      streamLog(chalk.dim(\"▶ Setting up workspace...\"));\n      const { review, metricsFooter, headSha, metrics } = await reviewPr({\n        prUrl: localMode ? undefined : prUrl,\n        model,\n        reasoningEffort,\n        customPrompt: prompt,\n        promptFile,\n        cleanup: !workspace,\n        workspaceDir: workspace,\n        includeMetricsFooter: post && !localMode,\n        onEvent: handleEvent,\n        bedrockTags,\n        localMode,\n        diffAgainst,\n      });\n      const reviewText = renderMarkdown(review);\n\n      streamLog(chalk.green(\"✔ Review complete!\"));\n\n      if (post && prUrl) {\n        log(chalk.cyan(\"\\nPosting review to PR/MR...\"));\n\n        const result = await postReviewComment({\n          prUrl,\n          reviewText,\n          model,\n          metricsFooter,\n          headSha,\n        });\n\n        if (result.success) {\n          log(chalk.bold.green(\"Review posted successfully!\"));\n          log(chalk.dim(`  ${platform === \"github\" ? \"PR\" : \"MR\"}: ${prUrl}`));\n        } else {\n          log(chalk.bold.red(`Failed to post review: ${result.error}`));\n          log(chalk.yellow(\"\\nReview output:\\n\"));\n          console.log(reviewText);\n        }\n      } else {\n        log(chalk.bold.green(\"Review Complete\\n\"));\n        console.log(reviewText);\n        if (!localMode) {\n          log(chalk.dim(\"\\nTip: Use --post to automatically post this review to the PR/MR\"));\n        }\n      }\n\n      // Push metrics to Prometheus Pushgateway (best-effort, never fails the run)\n      if (prometheusPush) {\n        await pushMetrics({\n          pushgatewayUrl: prometheusPush,\n          metrics,\n          labels: {\n            platform,\n            model,\n            verdict: review.overall_correctness === \"patch is correct\" ? \"correct\" : \"incorrect\",\n          },\n        });\n      }\n    } catch (err) {\n      streamLog(chalk.red(\"✗ Review failed\"));\n      console.error(\n        chalk.bold.red(`\\nError: ${err instanceof Error ? err.message : err}`),\n      );\n      if (verbose && err instanceof Error && err.stack) {\n        console.error(chalk.dim(err.stack));\n      }\n      process.exit(1);\n    }\n  });\n\nprogram.parse();\n"],"mappings":";;;;;;;;;;;AAEA,SAAS,eAAe;AACxB,OAAO,WAAW;AAClB,OAAO;AAQP,IAAM,UAAU,IAAI,QAAQ;AAE5B,QACG,KAAK,OAAO,EACZ;AAAA,EACC;AAIF,EACC,QAAQ,OAAO,EACf,SAAS,YAAY,qEAAqE,EAC1F;AAAA,EACC;AAAA,EACA;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,iBAAiB,0BAA0B,KAAK,EACvD;AAAA,EACC;AAAA,EACA;AAAA,EACA;AACF,EACC,OAAO,mBAAmB,2BAA2B,EACrD;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AAAA,EACA;AACF,EACC,OAAO,OAAO,OAA2B,YAAqC;AAC7E,QAAM,UAAU,QAAQ;AACxB,QAAM,OAAO,QAAQ;AACrB,QAAM,QAAQ,QAAQ;AACtB,MAAI,kBAAkB,QAAQ;AAC9B,QAAM,SAAS,QAAQ;AACvB,QAAM,aAAa,QAAQ;AAC3B,QAAM,YAAY,QAAQ;AAC1B,QAAM,aAAa,QAAQ;AAC3B,QAAM,iBAAiB,QAAQ;AAC/B,QAAM,iBAAiB,QAAQ;AAC/B,QAAM,YAAY,QAAQ;AAC1B,QAAM,cAAc,QAAQ;AAE5B,MAAI,CAAC,aAAa,CAAC,OAAO;AACxB,YAAQ,MAAM,MAAM,IAAI,uDAAuD,CAAC;AAChF,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,MAAI,aAAa,MAAM;AACrB,YAAQ,MAAM,MAAM,IAAI,uEAAuE,CAAC;AAChG,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,QAAM,OAAO,CAAC,EAAE,QAAQ,IAAI,MAAM,QAAQ,IAAI,aAAa,QAAQ,IAAI;AAEvE,MAAI,QAAS,aAAY,OAAO;AAAA,WACvB,KAAM,aAAY,MAAM;AAGjC,MAAI,YAAY;AACd,sBAAkB;AAAA,EACpB;AAGA,MAAI,cAA6C;AACjD,MAAI,gBAAgB;AAClB,QAAI;AACF,oBAAc,KAAK,MAAM,cAAc;AAAA,IACzC,QAAQ;AACN,cAAQ,MAAM,MAAM,IAAI,0CAA0C,CAAC;AACnE,cAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,MAAM,QAAQ;AACpB,QAAM,YAAY,QAAQ;AAE1B,QAAM,YAAoC;AAAA,IACxC,MAAM;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,IAAI;AAAA,EACN;AAGA,WAAS,UAAU,KAAmB;AACpC,cAAU,MAAM,GAAG,GAAG;AAAA,CAAI;AAAA,EAC5B;AAGA,WAAS,YAAY,MAAoB;AACvC,YAAQ,OAAO,MAAM,IAAI;AAAA,EAC3B;AAEA,WAAS,YAAY,OAAiC;AACpD,YAAQ,MAAM,MAAM;AAAA,MAClB,KAAK;AACH,kBAAU,MAAM,IAAI,sBAAiB,CAAC;AACtC;AAAA,MACF,KAAK;AACH,kBAAU,MAAM,IAAI;AAAA,oBAAa,MAAM,aAAa,GAAG,eAAK,CAAC;AAC7D;AAAA,MACF,KAAK,cAAc;AACjB,cAAM,OAAO,UAAU,MAAM,YAAY,EAAE,KAAK,MAAM;AACtD,cAAM,UAAU,MAAM,WAAW,IAAI,MAAM,QAAQ,KAAK;AACxD,cAAM,SAAS;AACf,cAAM,YAAY,QAAQ,SAAS,SAAS,QAAQ,MAAM,GAAG,MAAM,IAAI,WAAM;AAC7E,kBAAU,MAAM,MAAM,KAAK,IAAI,GAAG,SAAS,EAAE,CAAC;AAC9C;AAAA,MACF;AAAA,MACA,KAAK,YAAY;AACf,YAAI,MAAM,SAAS;AACjB,oBAAU,MAAM,IAAI,gBAAW,CAAC;AAAA,QAClC;AACA,YAAI,MAAM,QAAQ;AAChB,gBAAM,QAAQ,MAAM,OAAO,MAAM,IAAI;AACrC,gBAAM,WAAW,UAAU,KAAK;AAChC,gBAAM,WAAW,UAAU,MAAM;AACjC,cAAI,QAAQ;AACZ,mBAAS,IAAI,GAAG,IAAI,KAAK,IAAI,MAAM,QAAQ,QAAQ,GAAG,KAAK;AACzD,kBAAM,OAAO,MAAM,CAAC;AACpB,gBAAI,QAAQ,KAAK,SAAS,UAAU;AAClC,wBAAU,MAAM,IAAI,cAAS,MAAM,SAAS,CAAC,cAAc,CAAC;AAC5D;AAAA,YACF;AACA,sBAAU,MAAM,IAAI,OAAO,IAAI,EAAE,CAAC;AAClC,qBAAS,KAAK;AAAA,UAChB;AAAA,QACF;AACA;AAAA,MACF;AAAA,MACA,KAAK;AACH,YAAI,WAAW,MAAM,OAAO;AAC1B,sBAAY,MAAM,KAAK;AAAA,QACzB;AACA;AAAA,MACF,KAAK;AAEH,YAAI,WAAW,MAAM,OAAO;AAC1B,sBAAY,MAAM,IAAI,MAAM,KAAK,CAAC;AAAA,QACpC;AACA;AAAA,MACF,KAAK;AACH,kBAAU,MAAM,IAAI,+BAA0B,CAAC;AAC/C;AAAA,IACJ;AAAA,EACF;AAEA,MAAI;AAEF,QAAI,WAAmB;AACvB,QAAI,CAAC,aAAa,OAAO;AACvB,iBAAW,eAAe,KAAK;AAC/B,YAAM,cAAc,QAAQ,IAAI;AAChC,YAAM,cACJ,QAAQ,IAAI,gBACZ,QAAQ,IAAI,wBACZ,QAAQ,IAAI;AAEd,UAAI,aAAa,YAAY,CAAC,aAAa;AACzC,gBAAQ,MAAM,MAAM,OAAO,+DAA+D,CAAC;AAC3F,gBAAQ,MAAM,MAAM,IAAI,4CAA4C,CAAC;AAAA,MACvE,WAAW,aAAa,YAAY,CAAC,aAAa;AAChD,gBAAQ,MAAM,MAAM,OAAO,kEAAkE,CAAC;AAC9F,gBAAQ,MAAM,MAAM,IAAI,qDAAqD,CAAC;AAAA,MAChF;AAAA,IACF;AAEA,QAAI;AAAA,EAAK,MAAM,KAAK,KAAK,8BAA8B,CAAC,EAAE;AAC1D,QAAI,WAAW;AACb,UAAI,MAAM,IAAI,yBAAyB,CAAC;AACxC,UAAI,MAAM,IAAI,iBAAiB,WAAW,EAAE,CAAC;AAC7C,UAAI,MAAM,IAAI,cAAc,aAAa,QAAQ,IAAI,CAAC,EAAE,CAAC;AAAA,IAC3D,OAAO;AACL,UAAI,MAAM,IAAI,aAAa,SAAS,YAAY,CAAC,EAAE,CAAC;AACpD,UAAI,MAAM,IAAI,WAAW,KAAK,EAAE,CAAC;AAAA,IACnC;AACA,QAAI,MAAM,IAAI,UAAU,KAAK,EAAE,CAAC;AAChC,QAAI,iBAAiB;AACnB,UAAI,MAAM,IAAI,qBAAqB,eAAe,EAAE,CAAC;AAAA,IACvD;AACA,QAAI;AAEJ,cAAU,MAAM,IAAI,gCAA2B,CAAC;AAChD,UAAM,EAAE,QAAQ,eAAe,SAAS,QAAQ,IAAI,MAAM,SAAS;AAAA,MACjE,OAAO,YAAY,SAAY;AAAA,MAC/B;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd;AAAA,MACA,SAAS,CAAC;AAAA,MACV,cAAc;AAAA,MACd,sBAAsB,QAAQ,CAAC;AAAA,MAC/B,SAAS;AAAA,MACT;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AACD,UAAM,aAAa,eAAe,MAAM;AAExC,cAAU,MAAM,MAAM,yBAAoB,CAAC;AAE3C,QAAI,QAAQ,OAAO;AACjB,UAAI,MAAM,KAAK,8BAA8B,CAAC;AAE9C,YAAM,SAAS,MAAM,kBAAkB;AAAA,QACrC;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAED,UAAI,OAAO,SAAS;AAClB,YAAI,MAAM,KAAK,MAAM,6BAA6B,CAAC;AACnD,YAAI,MAAM,IAAI,KAAK,aAAa,WAAW,OAAO,IAAI,KAAK,KAAK,EAAE,CAAC;AAAA,MACrE,OAAO;AACL,YAAI,MAAM,KAAK,IAAI,0BAA0B,OAAO,KAAK,EAAE,CAAC;AAC5D,YAAI,MAAM,OAAO,oBAAoB,CAAC;AACtC,gBAAQ,IAAI,UAAU;AAAA,MACxB;AAAA,IACF,OAAO;AACL,UAAI,MAAM,KAAK,MAAM,mBAAmB,CAAC;AACzC,cAAQ,IAAI,UAAU;AACtB,UAAI,CAAC,WAAW;AACd,YAAI,MAAM,IAAI,kEAAkE,CAAC;AAAA,MACnF;AAAA,IACF;AAGA,QAAI,gBAAgB;AAClB,YAAM,YAAY;AAAA,QAChB,gBAAgB;AAAA,QAChB;AAAA,QACA,QAAQ;AAAA,UACN;AAAA,UACA;AAAA,UACA,SAAS,OAAO,wBAAwB,qBAAqB,YAAY;AAAA,QAC3E;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF,SAAS,KAAK;AACZ,cAAU,MAAM,IAAI,sBAAiB,CAAC;AACtC,YAAQ;AAAA,MACN,MAAM,KAAK,IAAI;AAAA,SAAY,eAAe,QAAQ,IAAI,UAAU,GAAG,EAAE;AAAA,IACvE;AACA,QAAI,WAAW,eAAe,SAAS,IAAI,OAAO;AAChD,cAAQ,MAAM,MAAM,IAAI,IAAI,KAAK,CAAC;AAAA,IACpC;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF,CAAC;AAEH,QAAQ,MAAM;","names":[]}
+{"version":3,"sources":["../src/cli.ts"],"sourcesContent":["#!/usr/bin/env node\n\nimport { Command } from \"commander\";\nimport chalk from \"chalk\";\nimport \"dotenv/config\";\n\nimport { detectPlatform, parsePrUrl, postGitlabReviewCommitStatus, postReviewComment, postReviewStructured, reviewPr } from \"./agent.js\";\nimport type { AgentProgressEvent } from \"./agent.js\";\nimport type { PostCommentResult } from \"./types.js\";\nimport { renderMarkdown } from \"./render.js\";\nimport { pushMetrics } from \"./metrics.js\";\nimport { setLogLevel } from \"./utils/logger.js\";\n\nconst program = new Command();\n\nprogram\n  .name(\"hodor\")\n  .description(\n    \"AI-powered code review agent for GitHub PRs, GitLab MRs, Gitea/Forgejo PRs, and local diffs.\\n\\n\" +\n      \"Hodor uses an AI agent that clones the repository, checks out the PR branch,\\n\" +\n      \"and analyzes the code using tools (gh, git, glab) for metadata fetching and comment posting.\\n\\n\" +\n      \"For local reviews, use --local with --diff-against to review changes in your current git repository.\",\n  )\n  .version(\"0.6.1\")\n  .argument(\"[pr-url]\", \"URL of the GitHub PR, GitLab MR, or Gitea/Forgejo PR to review (optional with --local)\")\n  .option(\n    \"--model <model>\",\n    \"LLM model to use as provider/model-id (e.g., anthropic/claude-sonnet-4-5-20250929, openrouter/moonshotai/kimi-k2.6)\",\n    \"anthropic/claude-sonnet-4-5-20250929\",\n  )\n  .option(\n    \"--reasoning-effort <level>\",\n    \"Reasoning effort level: minimal, low, medium, high, xhigh\",\n  )\n  .option(\"-v, --verbose\", \"Enable verbose logging\", false)\n  .option(\n    \"--post\",\n    \"Post the review directly to the PR/MR as a comment\",\n    false,\n  )\n  .option(\"--prompt <text>\", \"Custom inline prompt text\")\n  .option(\n    \"--prompt-file <path>\",\n    \"Path to file containing custom prompt instructions\",\n  )\n  .option(\n    \"--workspace <dir>\",\n    \"Workspace directory (creates temp dir if not specified)\",\n  )\n  .option(\n    \"--review-style <style>\",\n    \"How to post reviews on GitLab: summary (single comment), inline (diff comments), hybrid (both). Default: hybrid.\",\n    \"hybrid\",\n  )\n  .option(\n    \"--code-quality <path>\",\n    \"Write a gl-code-quality-report.json CodeClimate artifact to this path\",\n  )\n  .option(\n    \"--commit-status\",\n    \"Post a pass/fail commit status to the MR head SHA\",\n    false,\n  )\n  .option(\n    \"--ultrathink\",\n    \"Enable maximum reasoning effort with extended thinking budget\",\n    false,\n  )\n  .option(\n    \"--bedrock-tags <json>\",\n    \"JSON object of cost allocation tags for Bedrock requests (e.g., '{\\\"team\\\":\\\"platform\\\"}')\",\n  )\n  .option(\n    \"--prometheus-push <url>\",\n    \"Push review metrics to a Prometheus Pushgateway URL\",\n  )\n  .option(\n    \"--local\",\n    \"Review local changes in the current directory (no PR URL required)\",\n    false,\n  )\n  .option(\n    \"--diff-against <ref>\",\n    \"Git ref to diff against in local mode (e.g., origin/main, HEAD~1)\",\n    \"origin/main\",\n  )\n  .action(async (prUrl: string | undefined, cmdOpts: Record<string, unknown>) => {\n    const verbose = cmdOpts.verbose as boolean;\n    const post = cmdOpts.post as boolean;\n    const model = cmdOpts.model as string;\n    let reasoningEffort = cmdOpts.reasoningEffort as string | undefined;\n    const prompt = cmdOpts.prompt as string | undefined;\n    const promptFile = cmdOpts.promptFile as string | undefined;\n    const workspace = cmdOpts.workspace as string | undefined;\n    const reviewStyle = cmdOpts.reviewStyle as \"summary\" | \"inline\" | \"hybrid\" | undefined;\n    const codeQuality = cmdOpts.codeQuality as string | undefined;\n    const commitStatus = cmdOpts.commitStatus as boolean;\n    const ultrathink = cmdOpts.ultrathink as boolean;\n    const bedrockTagsRaw = cmdOpts.bedrockTags as string | undefined;\n    const prometheusPush = cmdOpts.prometheusPush as string | undefined;\n    const localMode = cmdOpts.local as boolean;\n    const diffAgainst = cmdOpts.diffAgainst as string;\n\n    if (!localMode && !prUrl) {\n      console.error(chalk.red(\"Error: pr-url is required unless --local is specified\"));\n      process.exit(1);\n    }\n    if (localMode && post) {\n      console.error(chalk.red(\"Error: --post is not supported in --local mode (no remote to post to)\"));\n      process.exit(1);\n    }\n    if (![\"summary\", \"inline\", \"hybrid\"].includes(reviewStyle ?? \"hybrid\")) {\n      console.error(chalk.red(\"Error: --review-style must be one of: summary, inline, hybrid\"));\n      process.exit(1);\n    }\n\n    // Auto-detect CI environment\n    const isCI = !!(process.env.CI || process.env.GITLAB_CI || process.env.GITHUB_ACTIONS || process.env.GITEA_ACTIONS || process.env.FORGEJO_ACTIONS);\n\n    if (verbose) setLogLevel(\"debug\");\n    else if (isCI) setLogLevel(\"info\");\n\n    // Handle ultrathink\n    if (ultrathink) {\n      reasoningEffort = \"xhigh\";\n    }\n\n    // Parse Bedrock cost allocation tags\n    let bedrockTags: Record<string, string> | null = null;\n    if (bedrockTagsRaw) {\n      try {\n        bedrockTags = JSON.parse(bedrockTagsRaw) as Record<string, string>;\n      } catch {\n        console.error(chalk.red(\"Error: --bedrock-tags must be valid JSON\"));\n        process.exit(1);\n      }\n    }\n\n    const log = console.log;\n    const logStream = process.stdout;\n\n    const toolIcons: Record<string, string> = {\n      bash: \"$\",\n      read: \"cat\",\n      grep: \"grep\",\n      find: \"find\",\n      ls: \"ls\",\n    };\n\n    /** Write a line to the log stream */\n    function streamLog(msg: string): void {\n      logStream.write(`${msg}\\n`);\n    }\n\n    /** Write inline text (no newline) for streaming deltas */\n    function streamWrite(text: string): void {\n      process.stderr.write(text);\n    }\n\n    function handleEvent(event: AgentProgressEvent): void {\n      switch (event.type) {\n        case \"agent_start\":\n          streamLog(chalk.dim(\"▶ Agent started\"));\n          break;\n        case \"turn_start\":\n          streamLog(chalk.dim(`\\n── Turn ${event.turnIndex ?? \"?\"} ──`));\n          break;\n        case \"tool_start\": {\n          const icon = toolIcons[event.toolName ?? \"\"] ?? event.toolName;\n          const preview = event.toolArgs ? ` ${event.toolArgs}` : \"\";\n          const maxLen = 160;\n          const truncated = preview.length > maxLen ? preview.slice(0, maxLen) + \"…\" : preview;\n          streamLog(chalk.green(`  ${icon}${truncated}`));\n          break;\n        }\n        case \"tool_end\": {\n          if (event.isError) {\n            streamLog(chalk.red(`  ✗ error`));\n          }\n          if (event.result) {\n            const lines = event.result.split(\"\\n\");\n            const maxLines = verbose ? 15 : 6;\n            const maxChars = verbose ? 400 : 200;\n            let chars = 0;\n            for (let i = 0; i < Math.min(lines.length, maxLines); i++) {\n              const line = lines[i];\n              if (chars + line.length > maxChars) {\n                streamLog(chalk.dim(`    …(${lines.length - i} more lines)`));\n                break;\n              }\n              streamLog(chalk.dim(`    ${line}`));\n              chars += line.length;\n            }\n          }\n          break;\n        }\n        case \"text_delta\":\n          if (verbose && event.delta) {\n            streamWrite(event.delta);\n          }\n          break;\n        case \"thinking_delta\":\n          // Only show reasoning in verbose mode\n          if (verbose && event.delta) {\n            streamWrite(chalk.dim(event.delta));\n          }\n          break;\n        case \"agent_end\":\n          streamLog(chalk.dim(\"\\n▶ Extracting review...\"));\n          break;\n      }\n    }\n\n    try {\n      // Detect platform and warn about missing tokens\n      let platform: string = \"local\";\n      let metricsProject: string | undefined;\n      let metricsMrIid: string | undefined;\n      if (!localMode && prUrl) {\n        platform = detectPlatform(prUrl);\n        const parsedPr = parsePrUrl(prUrl);\n        metricsProject = `${parsedPr.owner}/${parsedPr.repo}`;\n        metricsMrIid = String(parsedPr.prNumber);\n        const githubToken = process.env.GITHUB_TOKEN;\n        const gitlabToken =\n          process.env.GITLAB_TOKEN ??\n          process.env.GITLAB_PRIVATE_TOKEN ??\n          process.env.CI_JOB_TOKEN;\n\n        if (platform === \"github\" && !githubToken) {\n          console.error(chalk.yellow(\"Warning: GITHUB_TOKEN not set. You may encounter rate limits.\"));\n          console.error(chalk.dim(\"  Set GITHUB_TOKEN or run: gh auth login\\n\"));\n        } else if (platform === \"gitlab\" && !gitlabToken) {\n          console.error(chalk.yellow(\"Warning: No GitLab token detected. Set GITLAB_TOKEN (api scope).\"));\n          console.error(chalk.dim(\"  Export GITLAB_TOKEN and optionally GITLAB_HOST.\\n\"));\n        } else if (platform === \"gitea\") {\n          const giteaToken = process.env.GITEA_TOKEN ?? process.env.FORGEJO_TOKEN;\n          if (!giteaToken) {\n            console.error(chalk.yellow(\"Warning: No Gitea/Forgejo token detected. Set GITEA_TOKEN for authentication.\"));\n            console.error(chalk.dim(\"  Export GITEA_TOKEN (or FORGEJO_TOKEN) for API access.\\n\"));\n          }\n        }\n      }\n\n      log(`\\n${chalk.bold.cyan(\"Hodor - AI Code Review Agent\")}`);\n      if (localMode) {\n        log(chalk.dim(`Mode: Local diff review`));\n        log(chalk.dim(`Diff against: ${diffAgainst}`));\n        log(chalk.dim(`Workspace: ${workspace ?? process.cwd()}`));\n      } else {\n        log(chalk.dim(`Platform: ${platform.toUpperCase()}`));\n        log(chalk.dim(`PR URL: ${prUrl}`));\n      }\n      log(chalk.dim(`Model: ${model}`));\n      if (reasoningEffort) {\n        log(chalk.dim(`Reasoning Effort: ${reasoningEffort}`));\n      }\n      log();\n\n      streamLog(chalk.dim(\"▶ Setting up workspace...\"));\n      const { review, metricsFooter, headSha, metrics, workspacePath } = await reviewPr({\n        prUrl: localMode ? undefined : prUrl,\n        model,\n        reasoningEffort,\n        customPrompt: prompt,\n        promptFile,\n        cleanup: !workspace,\n        workspaceDir: workspace,\n        includeMetricsFooter: post && !localMode,\n        onEvent: handleEvent,\n        bedrockTags,\n        localMode,\n        diffAgainst,\n      });\n      const reviewText = renderMarkdown(review);\n\n      streamLog(chalk.green(\"✔ Review complete!\"));\n\n      if (codeQuality) {\n        try {\n          const { formatCodeQualityReport } = await import(\"./codequality.js\");\n          const { writeFileSync } = await import(\"node:fs\");\n          writeFileSync(\n            codeQuality,\n            formatCodeQualityReport(review, process.env.CI_PROJECT_DIR ?? workspacePath),\n            \"utf-8\",\n          );\n          log(chalk.dim(`Wrote code quality report to ${codeQuality}`));\n        } catch (err) {\n          log(chalk.yellow(`Failed to write code quality report: ${err}`));\n        }\n      }\n\n      if (post && prUrl) {\n        log(chalk.cyan(\"\\nPosting review to PR/MR...\"));\n\n        const platform = detectPlatform(prUrl);\n        const useStructured = platform === \"gitlab\" && reviewStyle !== \"summary\";\n\n        let result: PostCommentResult;\n        if (useStructured) {\n          result = await postReviewStructured({\n            prUrl,\n            review,\n            model,\n            metricsFooter,\n            reviewStyle: reviewStyle ?? \"hybrid\",\n            commitStatus,\n            headSha,\n            workspacePath,\n          });\n        } else {\n          result = await postReviewComment({\n            prUrl,\n            reviewText,\n            model,\n            metricsFooter,\n            headSha,\n          });\n\n          if (platform === \"gitlab\" && commitStatus) {\n            try {\n              const { getGitlabMrDiffRefs } = await import(\"./gitlab.js\");\n              const parsed = parsePrUrl(prUrl);\n              const diffRefs = await getGitlabMrDiffRefs(\n                parsed.owner,\n                parsed.repo,\n                parsed.prNumber,\n                parsed.host,\n              );\n              await postGitlabReviewCommitStatus(parsed, review, diffRefs);\n            } catch (err) {\n              result = {\n                success: false,\n                platform: \"gitlab\",\n                mrNumber: parsePrUrl(prUrl).prNumber,\n                error: `Failed to post commit status: ${err instanceof Error ? err.message : err}`,\n              };\n            }\n          }\n        }\n\n        if (result.success) {\n          log(chalk.bold.green(\"Review posted successfully!\"));\n          log(chalk.dim(`  ${platform === \"gitlab\" ? \"MR\" : \"PR\"}: ${prUrl}`));\n        } else {\n          log(chalk.bold.red(`Failed to post review: ${result.error}`));\n          log(chalk.yellow(\"\\nReview output:\\n\"));\n          console.log(reviewText);\n        }\n      } else {\n        log(chalk.bold.green(\"Review Complete\\n\"));\n        console.log(reviewText);\n        if (!localMode) {\n          log(chalk.dim(\"\\nTip: Use --post to automatically post this review to the PR/MR\"));\n        }\n      }\n\n      // Push metrics to Prometheus Pushgateway (best-effort, never fails the run)\n      if (prometheusPush) {\n        const labels: Record<string, string> = {\n          platform,\n          model,\n          verdict: review.overall_correctness === \"patch is correct\" ? \"correct\" : \"incorrect\",\n        };\n        if (metricsProject) labels.project = metricsProject;\n        if (metricsMrIid) labels.mr_iid = metricsMrIid;\n\n        await pushMetrics({\n          pushgatewayUrl: prometheusPush,\n          metrics,\n          findings: review.findings,\n          labels,\n        });\n      }\n    } catch (err) {\n      streamLog(chalk.red(\"✗ Review failed\"));\n      console.error(\n        chalk.bold.red(`\\nError: ${err instanceof Error ? err.message : err}`),\n      );\n      if (verbose && err instanceof Error && err.stack) {\n        console.error(chalk.dim(err.stack));\n      }\n      process.exit(1);\n    }\n  });\n\nprogram.parse();\n"],"mappings":";;;;;;;;;;;;;;;;;AAEA,SAAS,eAAe;AACxB,OAAO,WAAW;AAClB,OAAO;AASP,IAAM,UAAU,IAAI,QAAQ;AAE5B,QACG,KAAK,OAAO,EACZ;AAAA,EACC;AAIF,EACC,QAAQ,OAAO,EACf,SAAS,YAAY,wFAAwF,EAC7G;AAAA,EACC;AAAA,EACA;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,iBAAiB,0BAA0B,KAAK,EACvD;AAAA,EACC;AAAA,EACA;AAAA,EACA;AACF,EACC,OAAO,mBAAmB,2BAA2B,EACrD;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AAAA,EACA;AACF,EACC,OAAO,OAAO,OAA2B,YAAqC;AAC7E,QAAM,UAAU,QAAQ;AACxB,QAAM,OAAO,QAAQ;AACrB,QAAM,QAAQ,QAAQ;AACtB,MAAI,kBAAkB,QAAQ;AAC9B,QAAM,SAAS,QAAQ;AACvB,QAAM,aAAa,QAAQ;AAC3B,QAAM,YAAY,QAAQ;AAC1B,QAAM,cAAc,QAAQ;AAC5B,QAAM,cAAc,QAAQ;AAC5B,QAAM,eAAe,QAAQ;AAC7B,QAAM,aAAa,QAAQ;AAC3B,QAAM,iBAAiB,QAAQ;AAC/B,QAAM,iBAAiB,QAAQ;AAC/B,QAAM,YAAY,QAAQ;AAC1B,QAAM,cAAc,QAAQ;AAE5B,MAAI,CAAC,aAAa,CAAC,OAAO;AACxB,YAAQ,MAAM,MAAM,IAAI,uDAAuD,CAAC;AAChF,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,MAAI,aAAa,MAAM;AACrB,YAAQ,MAAM,MAAM,IAAI,uEAAuE,CAAC;AAChG,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,MAAI,CAAC,CAAC,WAAW,UAAU,QAAQ,EAAE,SAAS,eAAe,QAAQ,GAAG;AACtE,YAAQ,MAAM,MAAM,IAAI,+DAA+D,CAAC;AACxF,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,QAAM,OAAO,CAAC,EAAE,QAAQ,IAAI,MAAM,QAAQ,IAAI,aAAa,QAAQ,IAAI,kBAAkB,QAAQ,IAAI,iBAAiB,QAAQ,IAAI;AAElI,MAAI,QAAS,aAAY,OAAO;AAAA,WACvB,KAAM,aAAY,MAAM;AAGjC,MAAI,YAAY;AACd,sBAAkB;AAAA,EACpB;AAGA,MAAI,cAA6C;AACjD,MAAI,gBAAgB;AAClB,QAAI;AACF,oBAAc,KAAK,MAAM,cAAc;AAAA,IACzC,QAAQ;AACN,cAAQ,MAAM,MAAM,IAAI,0CAA0C,CAAC;AACnE,cAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,MAAM,QAAQ;AACpB,QAAM,YAAY,QAAQ;AAE1B,QAAM,YAAoC;AAAA,IACxC,MAAM;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,IAAI;AAAA,EACN;AAGA,WAAS,UAAU,KAAmB;AACpC,cAAU,MAAM,GAAG,GAAG;AAAA,CAAI;AAAA,EAC5B;AAGA,WAAS,YAAY,MAAoB;AACvC,YAAQ,OAAO,MAAM,IAAI;AAAA,EAC3B;AAEA,WAAS,YAAY,OAAiC;AACpD,YAAQ,MAAM,MAAM;AAAA,MAClB,KAAK;AACH,kBAAU,MAAM,IAAI,sBAAiB,CAAC;AACtC;AAAA,MACF,KAAK;AACH,kBAAU,MAAM,IAAI;AAAA,oBAAa,MAAM,aAAa,GAAG,eAAK,CAAC;AAC7D;AAAA,MACF,KAAK,cAAc;AACjB,cAAM,OAAO,UAAU,MAAM,YAAY,EAAE,KAAK,MAAM;AACtD,cAAM,UAAU,MAAM,WAAW,IAAI,MAAM,QAAQ,KAAK;AACxD,cAAM,SAAS;AACf,cAAM,YAAY,QAAQ,SAAS,SAAS,QAAQ,MAAM,GAAG,MAAM,IAAI,WAAM;AAC7E,kBAAU,MAAM,MAAM,KAAK,IAAI,GAAG,SAAS,EAAE,CAAC;AAC9C;AAAA,MACF;AAAA,MACA,KAAK,YAAY;AACf,YAAI,MAAM,SAAS;AACjB,oBAAU,MAAM,IAAI,gBAAW,CAAC;AAAA,QAClC;AACA,YAAI,MAAM,QAAQ;AAChB,gBAAM,QAAQ,MAAM,OAAO,MAAM,IAAI;AACrC,gBAAM,WAAW,UAAU,KAAK;AAChC,gBAAM,WAAW,UAAU,MAAM;AACjC,cAAI,QAAQ;AACZ,mBAAS,IAAI,GAAG,IAAI,KAAK,IAAI,MAAM,QAAQ,QAAQ,GAAG,KAAK;AACzD,kBAAM,OAAO,MAAM,CAAC;AACpB,gBAAI,QAAQ,KAAK,SAAS,UAAU;AAClC,wBAAU,MAAM,IAAI,cAAS,MAAM,SAAS,CAAC,cAAc,CAAC;AAC5D;AAAA,YACF;AACA,sBAAU,MAAM,IAAI,OAAO,IAAI,EAAE,CAAC;AAClC,qBAAS,KAAK;AAAA,UAChB;AAAA,QACF;AACA;AAAA,MACF;AAAA,MACA,KAAK;AACH,YAAI,WAAW,MAAM,OAAO;AAC1B,sBAAY,MAAM,KAAK;AAAA,QACzB;AACA;AAAA,MACF,KAAK;AAEH,YAAI,WAAW,MAAM,OAAO;AAC1B,sBAAY,MAAM,IAAI,MAAM,KAAK,CAAC;AAAA,QACpC;AACA;AAAA,MACF,KAAK;AACH,kBAAU,MAAM,IAAI,+BAA0B,CAAC;AAC/C;AAAA,IACJ;AAAA,EACF;AAEA,MAAI;AAEF,QAAI,WAAmB;AACvB,QAAI;AACJ,QAAI;AACJ,QAAI,CAAC,aAAa,OAAO;AACvB,iBAAW,eAAe,KAAK;AAC/B,YAAM,WAAW,WAAW,KAAK;AACjC,uBAAiB,GAAG,SAAS,KAAK,IAAI,SAAS,IAAI;AACnD,qBAAe,OAAO,SAAS,QAAQ;AACvC,YAAM,cAAc,QAAQ,IAAI;AAChC,YAAM,cACJ,QAAQ,IAAI,gBACZ,QAAQ,IAAI,wBACZ,QAAQ,IAAI;AAEd,UAAI,aAAa,YAAY,CAAC,aAAa;AACzC,gBAAQ,MAAM,MAAM,OAAO,+DAA+D,CAAC;AAC3F,gBAAQ,MAAM,MAAM,IAAI,4CAA4C,CAAC;AAAA,MACvE,WAAW,aAAa,YAAY,CAAC,aAAa;AAChD,gBAAQ,MAAM,MAAM,OAAO,kEAAkE,CAAC;AAC9F,gBAAQ,MAAM,MAAM,IAAI,qDAAqD,CAAC;AAAA,MAChF,WAAW,aAAa,SAAS;AAC/B,cAAM,aAAa,QAAQ,IAAI,eAAe,QAAQ,IAAI;AAC1D,YAAI,CAAC,YAAY;AACf,kBAAQ,MAAM,MAAM,OAAO,+EAA+E,CAAC;AAC3G,kBAAQ,MAAM,MAAM,IAAI,2DAA2D,CAAC;AAAA,QACtF;AAAA,MACF;AAAA,IACF;AAEA,QAAI;AAAA,EAAK,MAAM,KAAK,KAAK,8BAA8B,CAAC,EAAE;AAC1D,QAAI,WAAW;AACb,UAAI,MAAM,IAAI,yBAAyB,CAAC;AACxC,UAAI,MAAM,IAAI,iBAAiB,WAAW,EAAE,CAAC;AAC7C,UAAI,MAAM,IAAI,cAAc,aAAa,QAAQ,IAAI,CAAC,EAAE,CAAC;AAAA,IAC3D,OAAO;AACL,UAAI,MAAM,IAAI,aAAa,SAAS,YAAY,CAAC,EAAE,CAAC;AACpD,UAAI,MAAM,IAAI,WAAW,KAAK,EAAE,CAAC;AAAA,IACnC;AACA,QAAI,MAAM,IAAI,UAAU,KAAK,EAAE,CAAC;AAChC,QAAI,iBAAiB;AACnB,UAAI,MAAM,IAAI,qBAAqB,eAAe,EAAE,CAAC;AAAA,IACvD;AACA,QAAI;AAEJ,cAAU,MAAM,IAAI,gCAA2B,CAAC;AAChD,UAAM,EAAE,QAAQ,eAAe,SAAS,SAAS,cAAc,IAAI,MAAM,SAAS;AAAA,MAChF,OAAO,YAAY,SAAY;AAAA,MAC/B;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd;AAAA,MACA,SAAS,CAAC;AAAA,MACV,cAAc;AAAA,MACd,sBAAsB,QAAQ,CAAC;AAAA,MAC/B,SAAS;AAAA,MACT;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AACD,UAAM,aAAa,eAAe,MAAM;AAExC,cAAU,MAAM,MAAM,yBAAoB,CAAC;AAE3C,QAAI,aAAa;AACf,UAAI;AACF,cAAM,EAAE,wBAAwB,IAAI,MAAM,OAAO,2BAAkB;AACnE,cAAM,EAAE,cAAc,IAAI,MAAM,OAAO,IAAS;AAChD;AAAA,UACE;AAAA,UACA,wBAAwB,QAAQ,QAAQ,IAAI,kBAAkB,aAAa;AAAA,UAC3E;AAAA,QACF;AACA,YAAI,MAAM,IAAI,gCAAgC,WAAW,EAAE,CAAC;AAAA,MAC9D,SAAS,KAAK;AACZ,YAAI,MAAM,OAAO,wCAAwC,GAAG,EAAE,CAAC;AAAA,MACjE;AAAA,IACF;AAEA,QAAI,QAAQ,OAAO;AACjB,UAAI,MAAM,KAAK,8BAA8B,CAAC;AAE9C,YAAMA,YAAW,eAAe,KAAK;AACrC,YAAM,gBAAgBA,cAAa,YAAY,gBAAgB;AAE/D,UAAI;AACJ,UAAI,eAAe;AACjB,iBAAS,MAAM,qBAAqB;AAAA,UAClC;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA,aAAa,eAAe;AAAA,UAC5B;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AAAA,MACH,OAAO;AACL,iBAAS,MAAM,kBAAkB;AAAA,UAC/B;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AAED,YAAIA,cAAa,YAAY,cAAc;AACzC,cAAI;AACF,kBAAM,EAAE,oBAAoB,IAAI,MAAM,OAAO,sBAAa;AAC1D,kBAAM,SAAS,WAAW,KAAK;AAC/B,kBAAM,WAAW,MAAM;AAAA,cACrB,OAAO;AAAA,cACP,OAAO;AAAA,cACP,OAAO;AAAA,cACP,OAAO;AAAA,YACT;AACA,kBAAM,6BAA6B,QAAQ,QAAQ,QAAQ;AAAA,UAC7D,SAAS,KAAK;AACZ,qBAAS;AAAA,cACP,SAAS;AAAA,cACT,UAAU;AAAA,cACV,UAAU,WAAW,KAAK,EAAE;AAAA,cAC5B,OAAO,iCAAiC,eAAe,QAAQ,IAAI,UAAU,GAAG;AAAA,YAClF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAEA,UAAI,OAAO,SAAS;AAClB,YAAI,MAAM,KAAK,MAAM,6BAA6B,CAAC;AACnD,YAAI,MAAM,IAAI,KAAKA,cAAa,WAAW,OAAO,IAAI,KAAK,KAAK,EAAE,CAAC;AAAA,MACrE,OAAO;AACL,YAAI,MAAM,KAAK,IAAI,0BAA0B,OAAO,KAAK,EAAE,CAAC;AAC5D,YAAI,MAAM,OAAO,oBAAoB,CAAC;AACtC,gBAAQ,IAAI,UAAU;AAAA,MACxB;AAAA,IACF,OAAO;AACL,UAAI,MAAM,KAAK,MAAM,mBAAmB,CAAC;AACzC,cAAQ,IAAI,UAAU;AACtB,UAAI,CAAC,WAAW;AACd,YAAI,MAAM,IAAI,kEAAkE,CAAC;AAAA,MACnF;AAAA,IACF;AAGA,QAAI,gBAAgB;AAClB,YAAM,SAAiC;AAAA,QACrC;AAAA,QACA;AAAA,QACA,SAAS,OAAO,wBAAwB,qBAAqB,YAAY;AAAA,MAC3E;AACA,UAAI,eAAgB,QAAO,UAAU;AACrC,UAAI,aAAc,QAAO,SAAS;AAElC,YAAM,YAAY;AAAA,QAChB,gBAAgB;AAAA,QAChB;AAAA,QACA,UAAU,OAAO;AAAA,QACjB;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF,SAAS,KAAK;AACZ,cAAU,MAAM,IAAI,sBAAiB,CAAC;AACtC,YAAQ;AAAA,MACN,MAAM,KAAK,IAAI;AAAA,SAAY,eAAe,QAAQ,IAAI,UAAU,GAAG,EAAE;AAAA,IACvE;AACA,QAAI,WAAW,eAAe,SAAS,IAAI,OAAO;AAChD,cAAQ,MAAM,MAAM,IAAI,IAAI,KAAK,CAAC;AAAA,IACpC;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF,CAAC;AAEH,QAAQ,MAAM;","names":["platform"]}

package/dist/codequality-DTJK2LGF.js

@@ -0,0 +1,42 @@
+import {
+  relativizeWorkspacePath
+} from "./chunk-AMUK6GDX.js";
+
+// src/codequality.ts
+import { createHash } from "crypto";
+var PRIORITY_TO_SEVERITY = {
+  0: "critical",
+  1: "major",
+  2: "minor",
+  3: "info"
+};
+function fingerprint(finding, relativePath) {
+  const input = `${finding.title}:${relativePath}:${finding.code_location.line_range.start}`;
+  return createHash("md5").update(input).digest("hex");
+}
+function formatCodeQualityReport(review, workspacePrefix) {
+  const issues = review.findings.map((finding) => {
+    const relPath = relativizeWorkspacePath(finding.code_location.absolute_file_path, workspacePrefix);
+    return {
+      type: "issue",
+      check_name: `hodor/P${finding.priority}`,
+      description: finding.title,
+      content: { body: finding.body },
+      categories: ["Bug Risk"],
+      severity: PRIORITY_TO_SEVERITY[finding.priority] ?? "info",
+      location: {
+        path: relPath,
+        lines: {
+          begin: finding.code_location.line_range.start,
+          end: finding.code_location.line_range.end
+        }
+      },
+      fingerprint: fingerprint(finding, relPath)
+    };
+  });
+  return JSON.stringify(issues, null, 2);
+}
+export {
+  formatCodeQualityReport
+};
+//# sourceMappingURL=codequality-DTJK2LGF.js.map

package/dist/codequality-DTJK2LGF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/codequality.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport type { ReviewOutput, ReviewFinding, ReviewPriority } from \"./types.js\";\nimport { relativizeWorkspacePath } from \"./utils/path.js\";\n\nconst PRIORITY_TO_SEVERITY: Record<ReviewPriority, string> = {\n  0: \"critical\",\n  1: \"major\",\n  2: \"minor\",\n  3: \"info\",\n};\n\nfunction fingerprint(finding: ReviewFinding, relativePath: string): string {\n  const input = `${finding.title}:${relativePath}:${finding.code_location.line_range.start}`;\n  return createHash(\"md5\").update(input).digest(\"hex\");\n}\n\nexport function formatCodeQualityReport(\n  review: ReviewOutput,\n  workspacePrefix?: string,\n): string {\n  const issues = review.findings.map((finding) => {\n    const relPath = relativizeWorkspacePath(finding.code_location.absolute_file_path, workspacePrefix);\n    return {\n      type: \"issue\",\n      check_name: `hodor/P${finding.priority}`,\n      description: finding.title,\n      content: { body: finding.body },\n      categories: [\"Bug Risk\"],\n      severity: PRIORITY_TO_SEVERITY[finding.priority] ?? \"info\",\n      location: {\n        path: relPath,\n        lines: {\n          begin: finding.code_location.line_range.start,\n          end: finding.code_location.line_range.end,\n        },\n      },\n      fingerprint: fingerprint(finding, relPath),\n    };\n  });\n\n  return JSON.stringify(issues, null, 2);\n}\n"],"mappings":";;;;;AAAA,SAAS,kBAAkB;AAI3B,IAAM,uBAAuD;AAAA,EAC3D,GAAG;AAAA,EACH,GAAG;AAAA,EACH,GAAG;AAAA,EACH,GAAG;AACL;AAEA,SAAS,YAAY,SAAwB,cAA8B;AACzE,QAAM,QAAQ,GAAG,QAAQ,KAAK,IAAI,YAAY,IAAI,QAAQ,cAAc,WAAW,KAAK;AACxF,SAAO,WAAW,KAAK,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK;AACrD;AAEO,SAAS,wBACd,QACA,iBACQ;AACR,QAAM,SAAS,OAAO,SAAS,IAAI,CAAC,YAAY;AAC9C,UAAM,UAAU,wBAAwB,QAAQ,cAAc,oBAAoB,eAAe;AACjG,WAAO;AAAA,MACL,MAAM;AAAA,MACN,YAAY,UAAU,QAAQ,QAAQ;AAAA,MACtC,aAAa,QAAQ;AAAA,MACrB,SAAS,EAAE,MAAM,QAAQ,KAAK;AAAA,MAC9B,YAAY,CAAC,UAAU;AAAA,MACvB,UAAU,qBAAqB,QAAQ,QAAQ,KAAK;AAAA,MACpD,UAAU;AAAA,QACR,MAAM;AAAA,QACN,OAAO;AAAA,UACL,OAAO,QAAQ,cAAc,WAAW;AAAA,UACxC,KAAK,QAAQ,cAAc,WAAW;AAAA,QACxC;AAAA,MACF;AAAA,MACA,aAAa,YAAY,SAAS,OAAO;AAAA,IAC3C;AAAA,EACF,CAAC;AAED,SAAO,KAAK,UAAU,QAAQ,MAAM,CAAC;AACvC;","names":[]}

package/dist/gitlab-5TWHYHEP.js

@@ -0,0 +1,33 @@
+import {
+  GitLabAPIError,
+  HODOR_REVIEW_MARKER,
+  bulkPublishGitlabDraftNotes,
+  cleanupHodorComments,
+  createGitlabDraftNote,
+  fetchGitlabMrInfo,
+  getGitlabMrDiffRefs,
+  listHodorDiscussions,
+  parseGlabPaginatedJson,
+  postGitlabCommitStatus,
+  postGitlabInlineComment,
+  postGitlabMrComment,
+  resolveGitlabDiscussions,
+  summarizeGitlabNotes
+} from "./chunk-DVJVQTVW.js";
+export {
+  GitLabAPIError,
+  HODOR_REVIEW_MARKER,
+  bulkPublishGitlabDraftNotes,
+  cleanupHodorComments,
+  createGitlabDraftNote,
+  fetchGitlabMrInfo,
+  getGitlabMrDiffRefs,
+  listHodorDiscussions,
+  parseGlabPaginatedJson,
+  postGitlabCommitStatus,
+  postGitlabInlineComment,
+  postGitlabMrComment,
+  resolveGitlabDiscussions,
+  summarizeGitlabNotes
+};
+//# sourceMappingURL=gitlab-5TWHYHEP.js.map

package/dist/gitlab-5TWHYHEP.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/index.d.ts

@@ -1,4 +1,6 @@
-type Platform = "github" | "gitlab";
+import { ThinkingLevel } from '@earendil-works/pi-ai';
+
+type Platform = "github" | "gitlab" | "gitea";
 interface ParsedPrUrl {
     owner: string;
     repo: string;
@@ -61,6 +63,10 @@ interface ReviewFinding {
             end: number;
         };
     };
+    /** Verbatim copy of the source lines the finding refers to, used to resolve
+     * line_range against the on-disk file. Optional; falls back to line_range. */
+    existing_code?: string;
+    suggestion?: string;
 }
 interface ReviewOutput {
     findings: ReviewFinding[];
@@ -75,6 +81,15 @@ interface PostCommentResult {
     error?: string;
 }
 
+/**
+ * Render structured review output into clean markdown for PR/MR comments.
+ */
+
+/**
+ * Render a ReviewOutput into clean markdown for posting as a PR/MR comment.
+ */
+declare function renderMarkdown(review: ReviewOutput): string;
+
 interface AgentProgressEvent {
     type: "tool_start" | "tool_end" | "thinking" | "turn_start" | "turn_end" | "agent_start" | "agent_end" | "text_delta" | "thinking_delta" | "tool_result";
     toolName?: string;
@@ -111,6 +126,7 @@ declare function reviewPr(opts: {
     metricsFooter: string | null;
     headSha: string | null;
     metrics: ReviewMetrics;
+    workspacePath: string;
 }>;
 
 declare function buildPrReviewPrompt(opts: {
@@ -139,19 +155,22 @@ declare function parseModelString(model: string): ParsedModel;
  * Map reasoning effort strings to pi-ai thinking levels.
  * Returns undefined for no reasoning.
  */
-declare function mapReasoningEffort(effort: string | undefined): "low" | "medium" | "high" | undefined;
+declare function mapReasoningEffort(effort: string | undefined): ThinkingLevel | undefined;
 /**
  * Get API key with provider-aware selection.
  *
  * Priority:
  * 1. LLM_API_KEY (universal override)
- * 2. Provider-specific key (ANTHROPIC_API_KEY, OPENAI_API_KEY)
- * 3. Fallback to any available key
+ * 2. Provider-specific key known by pi-ai (ANTHROPIC_API_KEY, OPENAI_API_KEY,
+ *    OPENROUTER_API_KEY, etc.)
  *
  * Returns null for bedrock (uses AWS credentials).
  */
 declare function getApiKey(model?: string): string | null;
 
+type FindingPriority = {
+    priority: number;
+};
 declare function formatMetricsMarkdown(metrics: ReviewMetrics): string;
 declare function printMetrics(metrics: ReviewMetrics, stream?: NodeJS.WritableStream): void;
 /**
@@ -161,18 +180,10 @@ declare function printMetrics(metrics: ReviewMetrics, stream?: NodeJS.WritableSt
 declare function pushMetrics(opts: {
     pushgatewayUrl: string;
     metrics: ReviewMetrics;
+    findings?: FindingPriority[];
     labels?: Record<string, string>;
 }): Promise<void>;
 
 declare function validateReviewOutput(review: ReviewOutput): ReviewOutput;
 
-/**
- * Render structured review output into clean markdown for PR/MR comments.
- */
-
-/**
- * Render a ReviewOutput into clean markdown for posting as a PR/MR comment.
- */
-declare function renderMarkdown(review: ReviewOutput): string;
-
 export { type AgentProgressEvent, type MrMetadata, type NoteEntry, type ParsedPrUrl, type Platform, type PostCommentResult, type ReviewCorrectness, type ReviewFinding, type ReviewMetrics, type ReviewOutput, type ReviewPriority, buildPrReviewPrompt, detectPlatform, formatMetricsMarkdown, getApiKey, mapReasoningEffort, parseModelString, parsePrUrl, postReviewComment, printMetrics, pushMetrics, renderMarkdown, reviewPr, validateReviewOutput };

package/dist/index.js

@@ -9,10 +9,13 @@ import {
   postReviewComment,
   printMetrics,
   pushMetrics,
-  renderMarkdown,
   reviewPr,
   validateReviewOutput
-} from "./chunk-QGUJENIG.js";
+} from "./chunk-MRMLGIXO.js";
+import {
+  renderMarkdown
+} from "./chunk-DVJVQTVW.js";
+import "./chunk-AMUK6GDX.js";
 export {
   buildPrReviewPrompt,
   detectPlatform,

package/package.json

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "0.5.0",
+  "version": "0.6.2-rc.2",
   "description": "AI-powered code review agent that finds bugs, security issues, and logic errors in pull requests",
   "type": "module",
   "main": "dist/index.js",
@@ -43,19 +43,19 @@
     "node": ">=22"
   },
   "dependencies": {
-    "@sinclair/typebox": "^0.34.48",
-    "@anthropic-ai/sdk": "^0.39.0",
-    "@mariozechner/pi-ai": "^0.62.0",
-    "@mariozechner/pi-coding-agent": "^0.62.0",
-    "chalk": "^5.4.0",
-    "commander": "^13.1.0",
-    "dotenv": "^16.4.0"
+    "@sinclair/typebox": "^0.34.49",
+    "@anthropic-ai/sdk": "^0.95.2",
+    "@earendil-works/pi-ai": "^0.74.0",
+    "@earendil-works/pi-coding-agent": "^0.74.0",
+    "chalk": "^5.6.2",
+    "commander": "^14.0.3",
+    "dotenv": "^17.4.2"
   },
   "devDependencies": {
-    "@types/node": "^22.0.0",
-    "tsup": "^8.0.0",
-    "tsx": "^4.0.0",
-    "typescript": "^5.7.0",
-    "vitest": "^3.0.0"
+    "@types/node": "^25.7.0",
+    "tsup": "^8.5.1",
+    "tsx": "^4.21.0",
+    "typescript": "^6.0.3",
+    "vitest": "^4.1.6"
   }
 }

package/templates/tool-review.md

@@ -72,6 +72,16 @@ Always include the matching numeric priority field in the `submit_review` payloa
 
 Output all findings that the original author would fix if they knew about it. If there is no finding that a person would definitely love to see and fix, prefer outputting no findings. Do not stop at the first qualifying finding. Continue until you've listed every qualifying finding.
 
+### Contract Trace Checklist
+
+For changes that introduce or modify routes, handlers, API parameters, auth/session/token logic, database schema or queries, cache keys, config contracts, or public interfaces:
+
+1. Trace each externally supplied value through the layers it crosses: route/query/body/header → handler extraction and parsing → service method signature → DB/query/cache key → tests or mocks.
+2. Compare semantic identity, not just variable names. Examples: public `user_id` string vs internal integer primary key, client/account ID vs database UID, token key vs full token value, app ID vs API key, enum label vs stored code, timestamp units/timezones, paise vs rupees.
+3. Read the minimal adjacent convention needed when a changed file depends on it: nearby routes for the same resource, model/schema definitions, query files, auth middleware, or changed tests.
+4. Treat a semantic mismatch as a concrete bug when production input will pass one kind of value but the changed code stores, queries, authorizes, or tests a different kind.
+5. Keep this scoped to the diff. Do not browse unrelated code unless it defines a contract that the changed lines directly depend on.
+
 ### Additional Guidelines
 
 - Ignore trivial style unless it obscures meaning or violates documented standards.
@@ -82,10 +92,30 @@ Output all findings that the original author would fix if they knew about it. If
 
 {review_process_section}
 
-**Analysis Focus:**
-- Check edge cases: empty inputs, null values, boundary conditions, error paths
-- Think: What user input or race condition breaks this?
-- Focus on the changes (+ and - lines), use full file context sparingly
+### Conditional Review Lenses
+
+After identifying the changed files and diff hunks, classify which lenses apply. Apply only the relevant lenses below; do not run a broad style review just because a lens exists.
+
+- **Silent failure / error handling lens**: If the diff changes `try`/`catch`, rescue/recover blocks, fallback logic, retries, default values after failures, logging, metrics, or error returns, verify that failures are not swallowed, fallbacks are explicit and safe, and operators/users get enough context to debug the failing operation. Flag only concrete silent failures or misleading success paths.
+- **Critical test gap lens**: If the diff adds behavior, changes edge-case handling, alters async/concurrent behavior, or fixes a bug, compare changed behavior against changed or existing tests. Flag missing tests only when the gap is likely to let a meaningful regression through; do not require line coverage or tests for trivial code.
+- **Comment/documentation accuracy lens**: If the diff adds or modifies comments, docstrings, README snippets, API docs, or examples, verify the prose matches the changed code and commands. Flag comments or docs that are factually wrong, misleading, or likely to cause misuse; ignore harmless wording preferences.
+- **Type/API invariant lens**: If the diff adds or changes types, schemas, DTOs, request/response shapes, config objects, database models, enums, or public interfaces, check whether invalid states became representable, required validation moved out of the boundary, or consumers can now pass semantically wrong values. Prefer concrete invariant or compatibility bugs over abstract design advice.
+- **Simplification lens**: If the diff introduces complex branching, duplicated logic, clever one-liners, or unnecessary abstraction, mention it only when the complexity creates a plausible bug, hides an important invariant, or makes future fixes risky. Do not suggest cosmetic refactors.
+
+### Attack Surface Analysis
+
+When the diff touches the areas below, investigate them specifically — do not skip a category unless it is provably inapplicable to the changed code:
+
+- **Race conditions / TOCTOU**: Shared mutable state, non-atomic check-then-act sequences, missing locks or transactions
+- **Off-by-one / boundary errors**: Loop bounds, slice indices, size comparisons (`<` vs `<=`), pagination math, overflow
+- **Schema / contract drift**: Renamed fields, changed types, enum values, units (paise vs rupees, ms vs s), encoding assumptions, wire format changes
+- **Auth / permission gaps**: New routes or handlers missing auth middleware, privilege escalation paths, token or session misuse, missing ownership checks
+- **Rollback safety**: Migrations that cannot be rolled back cleanly, stateful side effects committed before DB transactions complete, partial-write failure modes
+- **Data loss / silent discard**: Early returns or swallowed errors that drop user data, leave state inconsistent, or suppress failures silently
+- **Observability gaps**: New error paths unreachable from logs or metrics, silent failures, missing structured context on errors
+- **Input validation**: Unvalidated user-supplied values crossing trust boundaries — SQL injection, shell injection, path traversal, template injection, deserialization
+
+Default to skepticism: a change that looks mechanical (rename, refactor, constant tweak) may still introduce one of these. If a category is provably inapplicable, skip it — but verify, don't assume.
 
 ## Final Submission
 
@@ -103,7 +133,9 @@ When you are done, call `submit_review` exactly once with the final structured r
       "code_location": {
         "absolute_file_path": "<absolute file path>",
         "line_range": {"start": <int>, "end": <int>}
-      }
+      },
+      "existing_code": "<verbatim copy of the exact current source lines this finding covers>",
+      "suggestion": "<optional: exact replacement code for the flagged line range>"
     }
   ],
   "overall_correctness": "patch is correct" | "patch is incorrect",
@@ -117,9 +149,13 @@ When you are done, call `submit_review` exactly once with the final structured r
 * Do not print the review as normal assistant text.
 * Do not wrap the payload in markdown fences when calling the tool.
 * If there are no findings, submit `"findings": []`.
+* If `findings` is non-empty, `overall_correctness` must be `"patch is incorrect"`.
+* If `findings` is empty, `overall_correctness` must be `"patch is correct"`.
 * Every finding must include `title`, `body`, `priority`, and `code_location`.
+* Always include `existing_code`: copy the exact current source lines the finding refers to, verbatim and contiguous, from the file or the diff's context/added lines. Do NOT include diff `+`/`-` markers, line numbers, or markdown fences. These lines are matched mechanically against the file to pinpoint the comment location, so they must be an exact quote covering the same lines as `line_range`.
 * Use absolute file paths (for example, `/workspace/path/to/file.py`) not relative paths.
 * The title must start with a priority tag: `[P0]`, `[P1]`, `[P2]`, or `[P3]`.
 * `overall_correctness` must be exactly `"patch is correct"` or `"patch is incorrect"`.
+* If you can suggest a specific code fix for a finding, include the replacement code in the `suggestion` field. This should be the exact code to replace the lines in `line_range`, without markdown fences or extra context. Omit `suggestion` if no specific fix is available.
 
 {start_instruction}