@open-cr-agent/vcs-github 0.1.1 → 0.1.2

package/dist/adapter.js

@@ -62,6 +62,9 @@ export class GitHubAdapter {
             const match = OVERRIDE.exec(c.body);
             if (!match || !login || login === author || this.isBot(login))
                 continue;
+            // ocra's own summary is never a command, whichever account posted it.
+            if (c.body.includes(SUMMARY_MARKER))
+                continue;
             const [, commit = "", reason = ""] = match;
             // The full commit id: a short prefix can be matched by a new commit.
             if (commit.toLowerCase() !== pr.head.sha)

package/dist/render.js

@@ -46,18 +46,25 @@ const VERDICT = {
     significant_concerns: "🛑 Significant concerns",
 };
 // Model text is untrusted: it may not close our markup, mention people,
-// pull in images, or render as a link that says one thing and goes elsewhere
-// (a bot comment lends it credibility). Inline links lose their `](`, and
-// every `]:` is escaped, so no link reference definition (`[1]: https://…`)
-// can form, at line start or inside a blockquote or list item, and no
-// reference-style link (`[x][1]`, `[x][]`, `[1]`) has anything to resolve to.
-// Bare URLs still show as text.
+// pull in images, spell one of ocra's commands (`/ocra …`, which would count
+// if ocra posted as a person with write access), or become a link at all. A
+// pull request can plant an address for a reviewer to repeat (the adversarial
+// probe saw one), and a bot comment lends it credibility. Inline links lose
+// their `](`, and every `]:` is escaped, so no link reference definition
+// (`[1]: https://…`) can form, at line start or inside a blockquote or list
+// item, and no reference-style link (`[x][1]`, `[x][]`, `[1]`) has anything
+// to resolve to. Web addresses get a zero-width space in their scheme or
+// after `www`, which GitHub's autolinking needs intact, so they read the
+// same and stay text; email addresses already lose theirs at the `@`.
 export function safeMarkdown(text) {
     return text
         .replaceAll("<!--", "&lt;!--")
         .replace(/<\/?[a-zA-Z][^>]*>/g, (tag) => tag.replaceAll("<", "&lt;"))
         .replace(/@(?=[A-Za-z0-9-])/g, "@\u200b")
         .replace(/!\[/g, "!\u200b[")
+        .replace(/\/(?=ocra)/gi, "/\u200b")
+        .replace(/\b(https?|ftp)(?=:\/\/)/gi, "$1\u200b")
+        .replace(/\bwww(?=\.)/gi, "www\u200b")
         .replaceAll("](", "]\\(")
         .replaceAll("]:", "]\\:");
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-cr-agent/vcs-github",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "GitHub pull request adapter for Open-CR-Agent",
   "keywords": [
     "code-review",
@@ -30,7 +30,7 @@
     "!dist/**/*.map"
   ],
   "dependencies": {
-    "@open-cr-agent/core": "0.1.1",
+    "@open-cr-agent/core": "0.1.2",
     "zod": "^4.6.5"
   },
   "publishConfig": {