@quickchatai/pi-quickreview 0.0.0-stage → 1.1.0

package/dist/extensions/quickreview.js

@@ -0,0 +1,132 @@
+// The QuickReview pi plugin: /review, /scan, /qcr-setup and /selfimprove in a
+// user's own pi. A factory over its config (the host entry,
+// src/plugin/index.ts, reads the process's env and home once and hands them
+// in); the commands themselves are src/plugin/.
+//
+// At load the running pi's VERSION is checked against the range the package
+// declares (src/plugin/versiongate.ts). Outside it the plugin registers no
+// command and says so once, at the session's start.
+//
+// The person's own session gets commands and messages from the plugin, never
+// a tool: the review's lens tools exist only inside the engine's own nested
+// sessions (passes are leaves: the single-shepherd invariant in AGENTS.md).
+import { VERSION, getAgentDir, } from "@earendil-works/pi-coding-agent";
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { loginSummary } from "../src/engine/auth.js";
+import { REVIEW_MESSAGE, runReviewCommand } from "../src/plugin/review.js";
+import { runScanCommand, runSelfImproveCommand } from "../src/plugin/scan.js";
+import { runSetupCommand } from "../src/plugin/setup.js";
+import { declaredPiRange, piGate } from "../src/plugin/versiongate.js";
+/** The commands, in the order /qcr-setup names them. */
+export const QUICKREVIEW_COMMANDS = ["review", "scan", "qcr-setup", "selfimprove"];
+/** The host pi's auth, by the shape the plugin asks of it. */
+function hostAuth(ctx, agentDir) {
+    const registry = ctx.modelRegistry;
+    return {
+        logins() {
+            const file = join(agentDir, "auth.json");
+            if (!existsSync(file))
+                return {};
+            try {
+                return loginSummary(readFileSync(file, "utf8"));
+            }
+            catch {
+                return {};
+            }
+        },
+        configured: (provider) => registry.getProviderAuthStatus(provider).configured,
+        refresh: async (provider, minValidityMs) => {
+            // VERIFY-ON-PIN: the registry facade asks for pi's own five minutes of
+            // validity only; its model runtime takes a longer minimum and refreshes
+            // under the host's own lock when the token is shorter than that. Absent
+            // that runtime, the facade's refresh is the most this pi offers.
+            const runtime = registry.runtime;
+            if (typeof runtime?.getAuth === "function")
+                await runtime.getAuth(provider, { minOAuthValidityMs: minValidityMs });
+            else
+                await registry.getProviderAuth(provider);
+        },
+    };
+}
+/** Is `data` the Esc key, as the terminal sends it? */
+const isEscape = (data) => data === "\x1b" || data === "\x1b[27u";
+function sessionUi(pi, ctx, print) {
+    return {
+        mode: ctx.mode,
+        interactive: ctx.hasUI,
+        select: (title, options, signal) => ctx.ui.select(title, options, signal ? { signal } : undefined),
+        confirm: (title, message, signal) => ctx.ui.confirm(title, message, signal ? { signal } : undefined),
+        notify: (message, level) => ctx.ui.notify(message, level),
+        status: (text) => ctx.ui.setStatus("quickreview", text),
+        onEscape: (handler) => ctx.mode === "tui"
+            ? ctx.ui.onTerminalInput((data) => {
+                if (!isEscape(data))
+                    return undefined;
+                handler();
+                return { consume: true };
+            })
+            : () => { },
+        show: (markdown, details) => pi.sendMessage({ customType: REVIEW_MESSAGE, content: markdown, display: true, details }),
+        tellAgent: (text) => ctx.isIdle() ? pi.sendUserMessage(text) : pi.sendUserMessage(text, { deliverAs: "followUp" }),
+        print,
+    };
+}
+/** The plugin's extension factory over `config`. */
+export function createQuickReview(config) {
+    return (pi) => {
+        const version = config.piVersion ?? VERSION;
+        const range = config.range ?? declaredPiRange();
+        const refused = piGate(version, range);
+        if (refused !== null) {
+            let told = false;
+            pi.on("session_start", (_event, ctx) => {
+                if (told)
+                    return;
+                told = true;
+                ctx.ui.notify(refused, "error");
+            });
+            return;
+        }
+        // The current session's end: a run in flight stops with it.
+        let shutdown = new AbortController();
+        pi.on("session_start", () => {
+            if (shutdown.signal.aborted)
+                shutdown = new AbortController();
+        });
+        pi.on("session_shutdown", () => shutdown.abort());
+        let busy = false;
+        const command = (name, description, run) => pi.registerCommand(name, {
+            description,
+            handler: async (args, ctx) => {
+                if (busy) {
+                    ctx.ui.notify("QuickReview is already running a command in this session", "warning");
+                    return;
+                }
+                busy = true;
+                try {
+                    const agentDir = config.agentDir ?? getAgentDir();
+                    const host = {
+                        cwd: ctx.cwd,
+                        env: config.env,
+                        home: config.home,
+                        piVersion: version,
+                        agentDir,
+                        auth: hostAuth(ctx, agentDir),
+                        runner: config.runner,
+                        shutdown: shutdown.signal,
+                    };
+                    await run(args.trim(), host, sessionUi(pi, ctx, config.print));
+                }
+                finally {
+                    busy = false;
+                }
+            },
+        });
+        command("review", "QuickReview: review a PR, this branch or the uncommitted tree (--preview prices it)", runReviewCommand);
+        command("scan", "QuickReview: scan the whole repo (needs the qcr CLI; --sandbox docker to sandbox it)", runScanCommand);
+        command("qcr-setup", "QuickReview: check what the plugin needs, install qcr", (_a, host, ui) => runSetupCommand(host, ui, { range }));
+        command("selfimprove", "QuickReview: scan this repo, then have this session's agent fix the findings", runSelfImproveCommand);
+    };
+}
+//# sourceMappingURL=quickreview.js.map

package/dist/extensions/quickreview.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quickreview.js","sourceRoot":"","sources":["../../extensions/quickreview.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,4DAA4D;AAC5D,4EAA4E;AAC5E,gDAAgD;AAChD,EAAE;AACF,4EAA4E;AAC5E,2EAA2E;AAC3E,oDAAoD;AACpD,EAAE;AACF,6EAA6E;AAC7E,4EAA4E;AAC5E,4EAA4E;AAC5E,OAAO,EACL,OAAO,EACP,WAAW,GAGZ,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAqB,MAAM,uBAAuB,CAAC;AAExE,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAE9E,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAiBvE,wDAAwD;AACxD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,CAAU,CAAC;AAE5F,8DAA8D;AAC9D,SAAS,QAAQ,CAAC,GAA4B,EAAE,QAAgB;IAC9D,MAAM,QAAQ,GAAG,GAAG,CAAC,aAAa,CAAC;IACnC,OAAO;QACL,MAAM;YACJ,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YACzC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,OAAO,YAAY,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;YAClD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QACD,UAAU,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,UAAU;QAC7E,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE;YACzC,uEAAuE;YACvE,wEAAwE;YACxE,wEAAwE;YACxE,iEAAiE;YACjE,MAAM,OAAO,GACX,QAKD,CAAC,OAAO,CAAC;YACV,IAAI,OAAO,OAAO,EAAE,OAAO,KAAK,UAAU;gBACxC,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,kBAAkB,EAAE,aAAa,EAAE,CAAC,CAAC;;gBACpE,MAAM,QAAQ,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAChD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,uDAAuD;AACvD,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,UAAU,CAAC;AAEnF,SAAS,SAAS,CAChB,EAAgB,EAChB,GAA4B,EAC5B,KAA0B;IAE1B,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,WAAW,EAAE,GAAG,CAAC,KAAK;QACtB,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CACjC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAChE,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAClC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACjE,MAAM,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC;QACzD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,CAAC;QACvD,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CACpB,GAAG,CAAC,IAAI,KAAK,KAAK;YAChB,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE,EAAE;gBAC9B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAAE,OAAO,SAAS,CAAC;gBACtC,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC3B,CAAC,CAAC;YACJ,CAAC,CAAC,GAAG,EAAE,GAAE,CAAC;QACd,IAAI,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,CAC1B,EAAE,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC3F,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAClB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;QAC/F,KAAK;KACN,CAAC;AACJ,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,iBAAiB,CAAC,MAAyB;IACzD,OAAO,CAAC,EAAE,EAAE,EAAE;QACZ,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACvC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,IAAI,IAAI,GAAG,KAAK,CAAC;YACjB,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;gBACrC,IAAI,IAAI;oBAAE,OAAO;gBACjB,IAAI,GAAG,IAAI,CAAC;gBACZ,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAClC,CAAC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,4DAA4D;QAC5D,IAAI,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,GAAG,EAAE;YAC1B,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO;gBAAE,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;QAChE,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;QAClD,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,MAAM,OAAO,GAAG,CACd,IAA2C,EAC3C,WAAmB,EACnB,GAAqE,EAC/D,EAAE,CACR,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE;YACvB,WAAW;YACX,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;gBAC3B,IAAI,IAAI,EAAE,CAAC;oBACT,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,0DAA0D,EAAE,SAAS,CAAC,CAAC;oBACrF,OAAO;gBACT,CAAC;gBACD,IAAI,GAAG,IAAI,CAAC;gBACZ,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,WAAW,EAAE,CAAC;oBAClD,MAAM,IAAI,GAAe;wBACvB,GAAG,EAAE,GAAG,CAAC,GAAG;wBACZ,GAAG,EAAE,MAAM,CAAC,GAAG;wBACf,IAAI,EAAE,MAAM,CAAC,IAAI;wBACjB,SAAS,EAAE,OAAO;wBAClB,QAAQ;wBACR,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC;wBAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,QAAQ,EAAE,QAAQ,CAAC,MAAM;qBAC1B,CAAC;oBACF,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBACjE,CAAC;wBAAS,CAAC;oBACT,IAAI,GAAG,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;SACF,CAAC,CAAC;QACL,OAAO,CACL,QAAQ,EACR,qFAAqF,EACrF,gBAAgB,CACjB,CAAC;QACF,OAAO,CACL,MAAM,EACN,sFAAsF,EACtF,cAAc,CACf,CAAC;QACF,OAAO,CAAC,WAAW,EAAE,uDAAuD,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAC7F,eAAe,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CACrC,CAAC;QACF,OAAO,CACL,aAAa,EACb,8EAA8E,EAC9E,qBAAqB,CACtB,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/src/anchors.d.ts

@@ -0,0 +1,54 @@
+export type Side = "RIGHT" | "LEFT";
+export interface ChangedRun {
+    side: Side;
+    /** First and last line number of the run, in the file version for `side`. */
+    start: number;
+    end: number;
+    /** 0-based index of the hunk this run belongs to (runs never span hunks). */
+    hunk: number;
+}
+export interface AnchorRequest {
+    path: string;
+    side: Side;
+    /** Last line of the anchored range (GitHub's `line`). */
+    line: number;
+    /** First line of a multi-line anchor (GitHub's `start_line`); optional. */
+    start_line?: number;
+}
+/**
+ * Changed-line runs of one file's unified patch.
+ *
+ * A run is a maximal sequence of consecutive changed lines on one side inside
+ * one hunk. Context lines (` `) end a run on both sides. A `-` line does not
+ * advance the RIGHT line counter (and a `+` does not advance LEFT), so a
+ * `+ / - / +` sequence stays one RIGHT run — the line numbers are contiguous.
+ */
+export declare function changedRuns(patch: string): ChangedRun[];
+/** All changed runs of a PR, keyed by file path (own properties only, so a
+ * file named `__proto__` is a key like any other). */
+export declare function runsByPath(patches: Record<string, string>): Record<string, ChangedRun[]>;
+/** Why an anchor cannot be placed on the diff. */
+export type AnchorRejectReason = "unknown-path" | "no-runs" | "outside-changed-run" | "inverted-range";
+export type AnchorCheck = {
+    ok: true;
+} | {
+    ok: false;
+    reason: AnchorRejectReason;
+};
+/** Validate one anchor against the runs of its claimed path. */
+export declare function checkAnchor(runs: Record<string, ChangedRun[]>, req: AnchorRequest): AnchorCheck;
+export interface AnchorPartition<T extends AnchorRequest> {
+    accepted: T[];
+    rejected: Array<{
+        comment: T;
+        reason: AnchorRejectReason;
+    }>;
+}
+/**
+ * Split inline comments into those that anchor cleanly and those that must be
+ * stripped into the body. Never throws — an unparseable/absent patch simply
+ * means the comment cannot be anchored.
+ */
+export declare function partitionByAnchor<T extends AnchorRequest>(comments: T[], patches: Record<string, string>): AnchorPartition<T>;
+export declare const ANCHOR_REASON_TEXT: Record<AnchorRejectReason, string>;
+//# sourceMappingURL=anchors.d.ts.map

package/dist/src/anchors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anchors.d.ts","sourceRoot":"","sources":["../../src/anchors.ts"],"names":[],"mappings":"AAYA,MAAM,MAAM,IAAI,GAAG,OAAO,GAAG,MAAM,CAAC;AAEpC,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,IAAI,CAAC;IACX,6EAA6E;IAC7E,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,6EAA6E;IAC7E,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,IAAI,CAAC;IACX,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,EAAE,CA4DvD;AAED;sDACsD;AACtD,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAIxF;AAED,kDAAkD;AAClD,MAAM,MAAM,kBAAkB,GAC5B,cAAc,GAAG,SAAS,GAAG,qBAAqB,GAAG,gBAAgB,CAAC;AAExE,MAAM,MAAM,WAAW,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,kBAAkB,CAAA;CAAE,CAAC;AAEnF,gEAAgE;AAChE,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,GAAG,EAAE,aAAa,GAAG,WAAW,CAW/F;AAED,MAAM,WAAW,eAAe,CAAC,CAAC,SAAS,aAAa;IACtD,QAAQ,EAAE,CAAC,EAAE,CAAC;IACd,QAAQ,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC,CAAC;QAAC,MAAM,EAAE,kBAAkB,CAAA;KAAE,CAAC,CAAC;CAC7D;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,aAAa,EACvD,QAAQ,EAAE,CAAC,EAAE,EACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,eAAe,CAAC,CAAC,CAAC,CAUpB;AAED,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAKjE,CAAC"}

package/dist/src/anchors.js

@@ -0,0 +1,127 @@
+// Inline-comment anchor validation: each claimed range must lie completely
+// within one changed-line run in one hunk on the exact claimed path and side.
+//
+// GitHub rejects the *whole* review call when a single inline comment fails to
+// anchor, so every comment is validated here first and anything invalid is
+// stripped into the summary-body overflow instead — never a failed post.
+//
+// Input is the unified patch text GitHub returns per file in the PR files API
+// (`patch` field). Pure module: no I/O.
+import { parseHunkHeader } from "./hunkheader.js";
+/**
+ * Changed-line runs of one file's unified patch.
+ *
+ * A run is a maximal sequence of consecutive changed lines on one side inside
+ * one hunk. Context lines (` `) end a run on both sides. A `-` line does not
+ * advance the RIGHT line counter (and a `+` does not advance LEFT), so a
+ * `+ / - / +` sequence stays one RIGHT run — the line numbers are contiguous.
+ */
+export function changedRuns(patch) {
+    const runs = [];
+    let hunk = -1;
+    let oldLine = 0;
+    let newLine = 0;
+    const open = {};
+    const close = (side) => {
+        for (const s of side ? [side] : ["RIGHT", "LEFT"]) {
+            const run = open[s];
+            if (run) {
+                runs.push(run);
+                delete open[s];
+            }
+        }
+    };
+    const extend = (side, line) => {
+        const run = open[side];
+        if (run && run.end + 1 === line) {
+            run.end = line;
+            return;
+        }
+        close(side);
+        open[side] = { side, start: line, end: line, hunk };
+    };
+    for (const raw of patch.split("\n")) {
+        if (raw.startsWith("@@")) {
+            close();
+            const h = parseHunkHeader(raw);
+            if (!h)
+                continue;
+            hunk += 1;
+            oldLine = h.old_start;
+            newLine = h.new_start;
+            continue;
+        }
+        if (hunk < 0)
+            continue; // preamble (diff --git / index / --- / +++)
+        if (raw.startsWith("\\"))
+            continue; // ""
+        const marker = raw.length === 0 ? " " : raw[0];
+        if (marker === "+") {
+            extend("RIGHT", newLine);
+            newLine += 1;
+        }
+        else if (marker === "-") {
+            extend("LEFT", oldLine);
+            oldLine += 1;
+        }
+        else if (marker === " ") {
+            close();
+            oldLine += 1;
+            newLine += 1;
+        }
+        else {
+            // Unknown line shape (e.g. a truncated patch): be conservative.
+            close();
+        }
+    }
+    close();
+    // Deterministic order: by hunk, then start line, then LEFT before RIGHT.
+    const sideRank = (s) => (s === "LEFT" ? 0 : 1);
+    return runs.sort((a, b) => a.hunk - b.hunk || a.start - b.start || sideRank(a.side) - sideRank(b.side));
+}
+/** All changed runs of a PR, keyed by file path (own properties only, so a
+ * file named `__proto__` is a key like any other). */
+export function runsByPath(patches) {
+    return Object.fromEntries(Object.entries(patches).map(([path, patch]) => [path, changedRuns(patch)]));
+}
+/** Validate one anchor against the runs of its claimed path. */
+export function checkAnchor(runs, req) {
+    // Own keys only: a path such as `constructor` names no file of the diff.
+    const fileRuns = Object.hasOwn(runs, req.path) ? runs[req.path] : undefined;
+    if (!fileRuns)
+        return { ok: false, reason: "unknown-path" };
+    if (fileRuns.length === 0)
+        return { ok: false, reason: "no-runs" };
+    const end = req.line;
+    const start = req.start_line ?? req.line;
+    if (start > end)
+        return { ok: false, reason: "inverted-range" };
+    return fileRuns.some((r) => r.side === req.side && start >= r.start && end <= r.end)
+        ? { ok: true }
+        : { ok: false, reason: "outside-changed-run" };
+}
+/**
+ * Split inline comments into those that anchor cleanly and those that must be
+ * stripped into the body. Never throws — an unparseable/absent patch simply
+ * means the comment cannot be anchored.
+ */
+export function partitionByAnchor(comments, patches) {
+    const runs = runsByPath(patches);
+    const accepted = [];
+    const rejected = [];
+    for (const c of comments) {
+        const check = checkAnchor(runs, c);
+        if (check.ok)
+            accepted.push(c);
+        else
+            rejected.push({ comment: c, reason: check.reason });
+    }
+    return { accepted, rejected };
+}
+export const ANCHOR_REASON_TEXT = {
+    "unknown-path": "path is not in this PR's diff",
+    "no-runs": "file has no changed lines in this PR",
+    "outside-changed-run": "line is outside any changed-line run on that side",
+    "inverted-range": "start_line is after line",
+};
+//# sourceMappingURL=anchors.js.map

package/dist/src/anchors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anchors.js","sourceRoot":"","sources":["../../src/anchors.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,8EAA8E;AAC9E,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,yEAAyE;AACzE,EAAE;AACF,8EAA8E;AAC9E,wCAAwC;AAExC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAsBlD;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,MAAM,IAAI,GAAiB,EAAE,CAAC;IAC9B,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC;IACd,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,MAAM,IAAI,GAAsC,EAAE,CAAC;IAEnD,MAAM,KAAK,GAAG,CAAC,IAAW,EAAE,EAAE;QAC5B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,CAAC,OAAO,EAAE,MAAM,CAAY,EAAE,CAAC;YAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACpB,IAAI,GAAG,EAAE,CAAC;gBACR,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACf,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;YACjB,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,IAAU,EAAE,IAAY,EAAE,EAAE;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;YAChC,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC;YACf,OAAO;QACT,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,CAAC;QACZ,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACtD,CAAC,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,KAAK,EAAE,CAAC;YACR,MAAM,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,CAAC,CAAC;gBAAE,SAAS;YACjB,IAAI,IAAI,CAAC,CAAC;YACV,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC;YACtB,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC;YACtB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,GAAG,CAAC;YAAE,SAAS,CAAC,4CAA4C;QACpE,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS,CAAC,gCAAgC;QACpE,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACzB,OAAO,IAAI,CAAC,CAAC;QACf,CAAC;aAAM,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YAC1B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACxB,OAAO,IAAI,CAAC,CAAC;QACf,CAAC;aAAM,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YAC1B,KAAK,EAAE,CAAC;YACR,OAAO,IAAI,CAAC,CAAC;YACb,OAAO,IAAI,CAAC,CAAC;QACf,CAAC;aAAM,CAAC;YACN,gEAAgE;YAChE,KAAK,EAAE,CAAC;QACV,CAAC;IACH,CAAC;IACD,KAAK,EAAE,CAAC;IACR,yEAAyE;IACzE,MAAM,QAAQ,GAAG,CAAC,CAAO,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC,IAAI,CACd,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CACtF,CAAC;AACJ,CAAC;AAED;sDACsD;AACtD,MAAM,UAAU,UAAU,CAAC,OAA+B;IACxD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAC3E,CAAC;AACJ,CAAC;AAQD,gEAAgE;AAChE,MAAM,UAAU,WAAW,CAAC,IAAkC,EAAE,GAAkB;IAChF,yEAAyE;IACzE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAC5D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACnE,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC;IACrB,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,IAAI,CAAC;IACzC,IAAI,KAAK,GAAG,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAChE,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC;QAClF,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE;QACd,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;AACnD,CAAC;AAOD;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAa,EACb,OAA+B;IAE/B,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAQ,EAAE,CAAC;IACzB,MAAM,QAAQ,GAAmC,EAAE,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACnC,IAAI,KAAK,CAAC,EAAE;YAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;;YAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAuC;IACpE,cAAc,EAAE,+BAA+B;IAC/C,SAAS,EAAE,sCAAsC;IACjD,qBAAqB,EAAE,mDAAmD;IAC1E,gBAAgB,EAAE,0BAA0B;CAC7C,CAAC"}

package/dist/src/assetroot.d.ts

@@ -0,0 +1,16 @@
+/** The nearest directory at or above `dir` that holds a package.json — robust
+ * under both dist/src (built) and src (vitest). `what` names it in the error. */
+export declare function packageRootFrom(dir: string, what: string): string;
+/** The data root for a module in `dir`. An installed package (inside a
+ * `node_modules/`) reads its own `assets/`, wherever it was installed, even
+ * under a checkout of this repo. Otherwise the checkout comes first: a module
+ * under it reads the repo root's data, never the frozen copy a pack of the
+ * package makes in its `assets/` (the postpack removes it, but a pack that
+ * stopped half way leaves it, and it is gitignored, so nothing shows it). Else
+ * the first directory at or above `dir` that holds the data: an `assets/`
+ * with `agents/` in it (an installed package; the answer is that `assets/`),
+ * or one holding both `agents/` and `prompts/`. */
+export declare function assetRootFrom(dir: string): string;
+/** The root of the review core's shipped data. */
+export declare function assetRoot(): string;
+//# sourceMappingURL=assetroot.d.ts.map

package/dist/src/assetroot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assetroot.d.ts","sourceRoot":"","sources":["../../src/assetroot.ts"],"names":[],"mappings":"AAWA;iFACiF;AACjF,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAOjE;AA0BD;;;;;;;;mDAQmD;AACnD,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAgBjD;AAED,kDAAkD;AAClD,wBAAgB,SAAS,IAAI,MAAM,CAElC"}

package/dist/src/assetroot.js

@@ -0,0 +1,77 @@
+// Where the review core's shipped data lives: prompts/, agents/, seeds/,
+// profiles/ (the generic examples), schemas/, deploy/reviewer and the seed
+// manifest. Resolved from this module's own location, however the package
+// was installed: an installed package carries a byte copy of the data in its
+// own `assets/` (its prepack, scripts/plugin-assets.mjs, makes it, and its
+// postpack removes it again), and in the checkout the data is the repo
+// root's, above packages/pi-plugin, whatever a pack left behind.
+import { existsSync, realpathSync } from "node:fs";
+import { dirname, join, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+/** The nearest directory at or above `dir` that holds a package.json — robust
+ * under both dist/src (built) and src (vitest). `what` names it in the error. */
+export function packageRootFrom(dir, what) {
+    let at = dir;
+    for (let i = 0; i < 5; i++) {
+        if (existsSync(resolve(at, "package.json")))
+            return at;
+        at = resolve(at, "..");
+    }
+    throw new Error(`${what} not found (no package.json above module dir)`);
+}
+/** Is `at` this repo's checkout: the data itself (agents/ and prompts/) with
+ * the review core's package beneath it? */
+function isCheckout(at) {
+    return (existsSync(join(at, "agents")) &&
+        existsSync(join(at, "prompts")) &&
+        existsSync(join(at, "packages", "pi-plugin", "package.json")));
+}
+/** The installed package `dir` is in: the nearest directory at or above it
+ * with a package.json, when that directory really sits inside a
+ * `node_modules/` (symlinks resolved: a workspace link into a checkout is the
+ * checkout) and carries its data in `assets/`. Null for a module in a checkout. */
+function installedPackageAssets(dir) {
+    for (let at = resolve(dir);; at = dirname(at)) {
+        if (existsSync(join(at, "package.json"))) {
+            const inside = realpathSync(at).split(/[\\/]/).includes("node_modules");
+            return inside && existsSync(join(at, "assets", "agents")) ? join(at, "assets") : null;
+        }
+        if (dirname(at) === at)
+            return null;
+    }
+}
+/** The data root for a module in `dir`. An installed package (inside a
+ * `node_modules/`) reads its own `assets/`, wherever it was installed, even
+ * under a checkout of this repo. Otherwise the checkout comes first: a module
+ * under it reads the repo root's data, never the frozen copy a pack of the
+ * package makes in its `assets/` (the postpack removes it, but a pack that
+ * stopped half way leaves it, and it is gitignored, so nothing shows it). Else
+ * the first directory at or above `dir` that holds the data: an `assets/`
+ * with `agents/` in it (an installed package; the answer is that `assets/`),
+ * or one holding both `agents/` and `prompts/`. */
+export function assetRootFrom(dir) {
+    const start = resolve(dir);
+    const own = installedPackageAssets(start);
+    if (own !== null)
+        return own;
+    for (let at = start;; at = dirname(at)) {
+        if (isCheckout(at))
+            return at;
+        if (dirname(at) === at)
+            break;
+    }
+    for (let at = start;; at = dirname(at)) {
+        if (existsSync(join(at, "assets", "agents")))
+            return join(at, "assets");
+        if (existsSync(join(at, "agents")) && existsSync(join(at, "prompts")))
+            return at;
+        if (dirname(at) === at)
+            break;
+    }
+    throw new Error(`asset root not found: no assets/agents/, and no directory with agents/ and prompts/, above ${dir}`);
+}
+/** The root of the review core's shipped data. */
+export function assetRoot() {
+    return assetRootFrom(dirname(fileURLToPath(import.meta.url)));
+}
+//# sourceMappingURL=assetroot.js.map

package/dist/src/assetroot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assetroot.js","sourceRoot":"","sources":["../../src/assetroot.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,2EAA2E;AAC3E,0EAA0E;AAC1E,6EAA6E;AAC7E,2EAA2E;AAC3E,uEAAuE;AACvE,iEAAiE;AACjE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC;iFACiF;AACjF,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,IAAY;IACvD,IAAI,EAAE,GAAG,GAAG,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;QACvD,EAAE,GAAG,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACzB,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,+CAA+C,CAAC,CAAC;AAC1E,CAAC;AAED;2CAC2C;AAC3C,SAAS,UAAU,CAAC,EAAU;IAC5B,OAAO,CACL,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC9B,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAC/B,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC,CAC9D,CAAC;AACJ,CAAC;AAED;;;mFAGmF;AACnF,SAAS,sBAAsB,CAAC,GAAW;IACzC,KAAK,IAAI,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,GAAI,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;QAC/C,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;YACxE,OAAO,MAAM,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACxF,CAAC;QACD,IAAI,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;IACtC,CAAC;AACH,CAAC;AAED;;;;;;;;mDAQmD;AACnD,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC;IAC7B,KAAK,IAAI,EAAE,GAAG,KAAK,GAAI,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;QACxC,IAAI,UAAU,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,CAAC;QAC9B,IAAI,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE;YAAE,MAAM;IAChC,CAAC;IACD,KAAK,IAAI,EAAE,GAAG,KAAK,GAAI,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;QACxC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACxE,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;QACjF,IAAI,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE;YAAE,MAAM;IAChC,CAAC;IACD,MAAM,IAAI,KAAK,CACb,8FAA8F,GAAG,EAAE,CACpG,CAAC;AACJ,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,SAAS;IACvB,OAAO,aAAa,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAChE,CAAC"}

package/dist/src/authwatch.d.ts

@@ -0,0 +1,61 @@
+export declare const PI_AUTH_ERROR_RE: RegExp;
+/** True when a JSONL line is a record carrying an auth-failure `errorMessage`
+ * field — at any depth, since a subagent's failed message arrives nested in
+ * its tool result. Text inside string values (tool output, quoted JSON) never
+ * matches: it is data, not a key. Non-JSON lines never match. */
+export declare function lineHasAuthError(line: string): boolean;
+/** Only the tail is read: session JSONLs grow large, and a live auth failure
+ * is by definition near the end of the file. */
+export declare const AUTH_TAIL_BYTES: number;
+export interface AuthScanHit {
+    file: string;
+    mtimeMs: number;
+}
+/** Scan *.jsonl files modified at/after `sinceMs` (dir + one sublevel) for
+ * auth-error signatures. Unreadable files are skipped — observation must
+ * never throw into the daemon tick — and counted (`scanPiAuth`'s `unread`),
+ * so a caller keeps them inside its next window.
+ *
+ * `seen` (path → byte offset, updated in place) makes the scan read only what
+ * was appended since the last scan, so an old error still inside the tail
+ * never matches again after a re-login and the flag can clear. A file not in
+ * `seen` is read tail-only.
+ *
+ * `seen` is also pruned: an entry under `sessionsDir` whose file
+ * the listing no longer shows — archived, or its whole session dir gone — is
+ * dropped, so the map tracks the live tree instead of every file that ever
+ * existed. Only a listing that answered prunes: an entry under a directory
+ * that could not be read stays (its file is unknown, never gone). */
+export declare function scanPiAuthErrors(sessionsDir: string, sinceMs: number, seen?: Map<string, number>): AuthScanHit[];
+/** How long a detection keeps the status flag up with no fresh errors. */
+export declare const AUTH_FLAG_FRESH_MS: number;
+export interface PiAuthStatus {
+    last_at: string;
+    hits: number;
+}
+/**
+ * Stateful watcher for the daemon tick. Each scan covers files modified since
+ * the previous scan (first scan looks 10 minutes back). `status()` reports
+ * the flag while the last detection is fresh (< AUTH_FLAG_FRESH_MS) — the
+ * flag clears itself once the errors stop.
+ */
+export declare class PiAuthWatch {
+    private readonly now;
+    private sinceMs;
+    private lastErrorAt;
+    private totalHits;
+    /** Per-file offset already scanned — a match is a NEW error line, never an
+     * old one the tail still holds. */
+    private readonly seen;
+    private readonly sessionsDirs;
+    constructor(
+    /** One root, or several: each is scanned the same way (dir + one sublevel). */
+    sessionsDirs: string | readonly string[], now?: () => Date);
+    /** How many files the scan is tracking an offset for — the live tree's
+     * session files it has read, never every file that ever existed. */
+    trackedFiles(): number;
+    /** Returns the NEW hits found this scan (empty array when quiet). */
+    scan(): AuthScanHit[];
+    status(): PiAuthStatus | undefined;
+}
+//# sourceMappingURL=authwatch.d.ts.map

package/dist/src/authwatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authwatch.d.ts","sourceRoot":"","sources":["../../src/authwatch.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,gBAAgB,QAAoE,CAAC;AAElG;;;iEAGiE;AACjE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAiBtD;AAED;gDACgD;AAChD,eAAO,MAAM,eAAe,QAAa,CAAC;AAE1C,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAwBD;;;;;;;;;;;;;;qEAcqE;AACrE,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GACzB,WAAW,EAAE,CAEf;AAoED,0EAA0E;AAC1E,eAAO,MAAM,kBAAkB,QAAiB,CAAC;AAEjD,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,qBAAa,WAAW;IAapB,OAAO,CAAC,QAAQ,CAAC,GAAG;IAZtB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,SAAS,CAAK;IACtB;uCACmC;IACnC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA6B;IAElD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoB;;IAG/C,+EAA+E;IAC/E,YAAY,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,EACvB,GAAG,GAAE,MAAM,IAAuB;IAMrD;wEACoE;IACpE,YAAY,IAAI,MAAM;IAItB,qEAAqE;IACrE,IAAI,IAAI,WAAW,EAAE;IAiBrB,MAAM,IAAI,YAAY,GAAG,SAAS;CAKnC"}