@reviewsensei/cli-linux-x64-gnu 0.6.12 → 0.6.13

package/README.md

@@ -1,5 +1,19 @@
 # @reviewsensei/cli-linux-x64-gnu
 
-Native ReviewSensei standalone payload for x64 Linux using glibc 2.36 or newer.
-Linux musl systems are not supported. This package contains no installer or
-download hook.
+ReviewSensei is a provider-neutral AI code review engine that turns unified
+Git diffs into validated summaries and findings. This package contains the
+standalone Python engine bundled for Linux x64 with glibc 2.36+.
+
+Install the public launcher, which selects the matching native package:
+
+```console
+npm install --save-dev @reviewsensei/cli@0.6.13
+npx review-sensei --help
+```
+
+Use [`@reviewsensei/cli`](https://www.npmjs.com/package/@reviewsensei/cli) for
+installation, provider/model configuration, authentication, and review examples.
+The launcher forwards CLI arguments unchanged and inherits your working directory
+and environment; the engine reads `.reviewsensei.yml` or an explicit `--config`.
+There is no separate platform-package configuration, npm command, installer, or
+download hook. A separate Python installation is unnecessary.

package/bin/_internal/review_sensei/schemas/coverage-manifest.schema.json

@@ -43,6 +43,8 @@
             "enum": [
               "binary",
               "generated",
+              "lockfile-format",
+              "no-review-stage",
               "too-large-hunk",
               "too-large-file",
               "chunk-failed",
@@ -81,6 +83,8 @@
             "enum": [
               "binary",
               "generated",
+              "lockfile-format",
+              "no-review-stage",
               "too-large-hunk",
               "too-large-file",
               "chunk-failed",

package/bin/_internal/review_sensei.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: review-sensei
-Version: 0.6.12
+Version: 0.6.13
 Summary: Provider-neutral AI code review engine with an Ollama adapter.
 Author: Mohamad Alsabbagh
 License-Expression: MIT
@@ -136,8 +136,8 @@ Node.js 22 or newer can invoke the same Python review engine through the
 provider-neutral `@reviewsensei/cli` launcher:
 
 ```bash
-npx --yes @reviewsensei/cli@0.6.12 --version
-npx --yes @reviewsensei/cli@0.6.12 --help
+npx --yes @reviewsensei/cli@0.6.13 --version
+npx --yes @reviewsensei/cli@0.6.13 --help
 ```
 
 The launcher selects one of the five native packages (macOS arm64/x64,
@@ -334,6 +334,28 @@ limits stay in place; opt-in `--orchestrate-large-changes` adds a separate
 total-work budget so larger diffs can be chunked without silent truncation or
 unbounded provider calls.
 
+Npm `package-lock.json` and `npm-shrinkwrap.json` changes are reviewed as
+material dependency input. Every original hunk remains in the request; a
+bounded aid identifies visible dependency members with exact diff hashes and
+left/right line references. This is patch evidence, not a validated full
+dependency graph or an integrity/security audit of downloaded packages. The
+lockfile version and owning package may be unknown in isolated hunks. Other
+recognized lockfile formats currently report `unsupported` with reason
+`lockfile-format`; generated non-lockfile exclusions still report `generated`.
+
+Validated partial results with explicit complete enumeration and evidence of
+some reviewed work can be checkpointed and published. Their findings and
+coverage limitations remain visible; approval is withheld, and enforcement
+modes keep the check at `action_required`. Publication success means the
+findings were delivered, not that review coverage became complete. Missing
+coverage, incomplete enumeration, summary-only results, and total analysis
+failure still cannot enter the partial identity-bound publication path. Legacy
+complete artifacts without coverage retain checkpoint/publication compatibility;
+their existing compatibility behavior is unchanged. The default
+review exit is `2` for a partial result; workflow `operational` exit semantics
+allow safe checkpointed findings to reach publication. Existing publisher
+diff-size and location-validation limits still apply.
+
 Repository paths are strict canonical NFC UTF-8, `/`-separated, relative paths:
 no empty, dot, parent, absolute, drive/UNC, backslash, surrounding whitespace,
 control/format/surrogate, or silently normalized forms are accepted. Glob

package/bin/_internal/review_sensei.egg-info/SOURCES.txt

@@ -79,6 +79,7 @@ docs/adr/0056-host-fact-placement-and-honest-approval-presentation.md
 docs/adr/0056-remove-pr-wide-review-count-caps.md
 docs/adr/0057-one-check-run-as-the-single-merge-authority.md
 docs/adr/0058-budgeted-document-context.md
+docs/adr/0059-dependency-review-and-partial-publication.md
 docs/adr/README.md
 docs/architecture/index.md
 docs/process/adr-process.md
@@ -144,6 +145,7 @@ src/review_sensei/context.py
 src/review_sensei/convergence.py
 src/review_sensei/conversation.py
 src/review_sensei/coverage.py
+src/review_sensei/dependencies.py
 src/review_sensei/diagnostics.py
 src/review_sensei/diff.py
 src/review_sensei/disposition.py

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@reviewsensei/cli-linux-x64-gnu",
-  "version": "0.6.12",
-  "description": "ReviewSensei native CLI for glibc Linux x64",
+  "version": "0.6.13",
+  "description": "ReviewSensei AI code review engine for Linux x64 with glibc 2.36+; native payload used by @reviewsensei/cli",
   "license": "MIT",
   "repository": {
     "type": "git",