@sentry/warden 0.0.0 → 0.1.0

package/dist/types/index.js

@@ -0,0 +1,162 @@
+import { z } from 'zod';
+// Severity levels for findings
+export const SeveritySchema = z.enum(['critical', 'high', 'medium', 'low', 'info']);
+// Confidence levels for findings
+export const ConfidenceSchema = z.enum(['high', 'medium', 'low']);
+/**
+ * Confidence order for comparison (lower = more confident).
+ * Single source of truth for confidence ordering across the codebase.
+ */
+export const CONFIDENCE_ORDER = {
+    high: 0,
+    medium: 1,
+    low: 2,
+};
+// Severity threshold for config options (includes 'off' to disable)
+export const SeverityThresholdSchema = z.enum(['off', 'critical', 'high', 'medium', 'low', 'info']);
+/**
+ * Severity order for comparison (lower = more severe).
+ * Single source of truth for severity ordering across the codebase.
+ */
+export const SEVERITY_ORDER = {
+    critical: 0,
+    high: 1,
+    medium: 2,
+    low: 3,
+    info: 4,
+};
+/**
+ * Filter findings to only include those at or above the given severity threshold.
+ * If no threshold is provided, returns all findings unchanged.
+ * If threshold is 'off', returns empty array (disabled).
+ */
+export function filterFindingsBySeverity(findings, threshold) {
+    if (!threshold)
+        return findings;
+    if (threshold === 'off')
+        return [];
+    const thresholdOrder = SEVERITY_ORDER[threshold];
+    return findings.filter((f) => SEVERITY_ORDER[f.severity] <= thresholdOrder);
+}
+// Location within a file
+export const LocationSchema = z.object({
+    path: z.string(),
+    startLine: z.number().int().positive(),
+    endLine: z.number().int().positive().optional(),
+});
+// Suggested fix with diff
+export const SuggestedFixSchema = z.object({
+    description: z.string(),
+    diff: z.string(),
+});
+// Individual finding from a skill
+export const FindingSchema = z.object({
+    id: z.string(),
+    severity: SeveritySchema,
+    confidence: ConfidenceSchema.optional(),
+    title: z.string(),
+    description: z.string(),
+    location: LocationSchema.optional(),
+    suggestedFix: SuggestedFixSchema.optional(),
+    elapsedMs: z.number().nonnegative().optional(),
+});
+// Usage statistics from SDK
+export const UsageStatsSchema = z.object({
+    inputTokens: z.number().int().nonnegative(),
+    outputTokens: z.number().int().nonnegative(),
+    cacheReadInputTokens: z.number().int().nonnegative().optional(),
+    cacheCreationInputTokens: z.number().int().nonnegative().optional(),
+    costUSD: z.number().nonnegative(),
+});
+// Skipped file info for chunking
+export const SkippedFileSchema = z.object({
+    filename: z.string(),
+    reason: z.enum(['pattern', 'builtin']),
+    pattern: z.string().optional(),
+});
+// Skill report output
+export const SkillReportSchema = z.object({
+    skill: z.string(),
+    summary: z.string(),
+    findings: z.array(FindingSchema),
+    metadata: z.record(z.string(), z.unknown()).optional(),
+    durationMs: z.number().nonnegative().optional(),
+    usage: UsageStatsSchema.optional(),
+    /** Files that were skipped due to chunking patterns */
+    skippedFiles: z.array(SkippedFileSchema).optional(),
+    /** Number of hunks that failed to analyze (SDK errors, API errors, etc.) */
+    failedHunks: z.number().int().nonnegative().optional(),
+});
+// GitHub event types
+export const GitHubEventTypeSchema = z.enum([
+    'pull_request',
+    'issues',
+    'issue_comment',
+    'pull_request_review',
+    'pull_request_review_comment',
+    'schedule',
+]);
+// Pull request actions
+export const PullRequestActionSchema = z.enum([
+    'opened',
+    'synchronize',
+    'reopened',
+    'closed',
+]);
+// File change info
+export const FileChangeSchema = z.object({
+    filename: z.string(),
+    status: z.enum(['added', 'removed', 'modified', 'renamed', 'copied', 'changed', 'unchanged']),
+    additions: z.number().int().nonnegative(),
+    deletions: z.number().int().nonnegative(),
+    patch: z.string().optional(),
+    chunks: z.number().int().nonnegative().optional(),
+});
+/**
+ * Count the number of chunks/hunks in a patch string.
+ * Each chunk starts with @@ -X,Y +A,B @@
+ */
+export function countPatchChunks(patch) {
+    if (!patch)
+        return 0;
+    const matches = patch.match(/^@@\s/gm);
+    return matches?.length ?? 0;
+}
+// Pull request context
+export const PullRequestContextSchema = z.object({
+    number: z.number().int().positive(),
+    title: z.string(),
+    body: z.string().nullable(),
+    author: z.string(),
+    baseBranch: z.string(),
+    headBranch: z.string(),
+    headSha: z.string(),
+    files: z.array(FileChangeSchema),
+});
+// Repository context
+export const RepositoryContextSchema = z.object({
+    owner: z.string(),
+    name: z.string(),
+    fullName: z.string(),
+    defaultBranch: z.string(),
+});
+// Full event context
+export const EventContextSchema = z.object({
+    eventType: GitHubEventTypeSchema,
+    action: z.string(),
+    repository: RepositoryContextSchema,
+    pullRequest: PullRequestContextSchema.optional(),
+    repoPath: z.string(),
+});
+// Retry configuration for SDK calls
+export const RetryConfigSchema = z.object({
+    /** Maximum number of retry attempts (default: 3) */
+    maxRetries: z.number().int().nonnegative().default(3),
+    /** Initial delay in milliseconds before first retry (default: 1000) */
+    initialDelayMs: z.number().int().positive().default(1000),
+    /** Multiplier for exponential backoff (default: 2) */
+    backoffMultiplier: z.number().positive().default(2),
+    /** Maximum delay in milliseconds between retries (default: 30000) */
+    maxDelayMs: z.number().int().positive().default(30000),
+});
+//# sourceMappingURL=index.js.map

package/dist/types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,+BAA+B;AAC/B,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AAGpF,iCAAiC;AACjC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;AAGlE;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA+B;IAC1D,IAAI,EAAE,CAAC;IACP,MAAM,EAAE,CAAC;IACT,GAAG,EAAE,CAAC;CACP,CAAC;AAEF,oEAAoE;AACpE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AAGpG;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAA6B;IACtD,QAAQ,EAAE,CAAC;IACX,IAAI,EAAE,CAAC;IACP,MAAM,EAAE,CAAC;IACT,GAAG,EAAE,CAAC;IACN,IAAI,EAAE,CAAC;CACR,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,QAAmB,EAAE,SAA6B;IACzF,IAAI,CAAC,SAAS;QAAE,OAAO,QAAQ,CAAC;IAChC,IAAI,SAAS,KAAK,KAAK;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,cAAc,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IACjD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,cAAc,CAAC,CAAC;AAC9E,CAAC;AAED,yBAAyB;AACzB,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAChD,CAAC,CAAC;AAGH,0BAA0B;AAC1B,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;CACjB,CAAC,CAAC;AAGH,kCAAkC;AAClC,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,QAAQ,EAAE,cAAc;IACxB,UAAU,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACvC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;IACnC,YAAY,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IAC3C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CAC/C,CAAC,CAAC;AAGH,4BAA4B;AAC5B,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC3C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC5C,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC/D,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACnE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;CAClC,CAAC,CAAC;AAGH,iCAAiC;AACjC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAGH,sBAAsB;AACtB,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC/C,KAAK,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IAClC,uDAAuD;IACvD,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE;IACnD,4EAA4E;IAC5E,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CACvD,CAAC,CAAC;AAGH,qBAAqB;AACrB,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC1C,cAAc;IACd,QAAQ;IACR,eAAe;IACf,qBAAqB;IACrB,6BAA6B;IAC7B,UAAU;CACX,CAAC,CAAC;AAGH,uBAAuB;AACvB,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC5C,QAAQ;IACR,aAAa;IACb,UAAU;IACV,QAAQ;CACT,CAAC,CAAC;AAGH,mBAAmB;AACnB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IAC7F,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACzC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACzC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CAClD,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAyB;IACxD,IAAI,CAAC,KAAK;QAAE,OAAO,CAAC,CAAC;IACrB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACvC,OAAO,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,uBAAuB;AACvB,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACnC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;CACjC,CAAC,CAAC;AAGH,qBAAqB;AACrB,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;CAC1B,CAAC,CAAC;AAGH,qBAAqB;AACrB,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,SAAS,EAAE,qBAAqB;IAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,UAAU,EAAE,uBAAuB;IACnC,WAAW,EAAE,wBAAwB,CAAC,QAAQ,EAAE;IAChD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;CACrB,CAAC,CAAC;AAGH,oCAAoC;AACpC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,oDAAoD;IACpD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACrD,uEAAuE;IACvE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACzD,sDAAsD;IACtD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACnD,qEAAqE;IACrE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACvD,CAAC,CAAC"}

package/dist/utils/async.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Process items with limited concurrency using chunked batches.
+ */
+export declare function processInBatches<T, R>(items: T[], fn: (item: T) => Promise<R>, batchSize: number): Promise<R[]>;
+//# sourceMappingURL=async.d.ts.map

package/dist/utils/async.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"async.d.ts","sourceRoot":"","sources":["../../src/utils/async.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,wBAAsB,gBAAgB,CAAC,CAAC,EAAE,CAAC,EACzC,KAAK,EAAE,CAAC,EAAE,EACV,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,EAC3B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,CAAC,EAAE,CAAC,CAUd"}

package/dist/utils/async.js

@@ -0,0 +1,13 @@
+/**
+ * Process items with limited concurrency using chunked batches.
+ */
+export async function processInBatches(items, fn, batchSize) {
+    const results = [];
+    for (let i = 0; i < items.length; i += batchSize) {
+        const batch = items.slice(i, i + batchSize);
+        const batchResults = await Promise.all(batch.map(fn));
+        results.push(...batchResults);
+    }
+    return results;
+}
+//# sourceMappingURL=async.js.map

package/dist/utils/async.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"async.js","sourceRoot":"","sources":["../../src/utils/async.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAU,EACV,EAA2B,EAC3B,SAAiB;IAEjB,MAAM,OAAO,GAAQ,EAAE,CAAC;IAExB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,SAAS,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC;QAC5C,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACtD,OAAO,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/utils/index.d.ts

@@ -0,0 +1,16 @@
+export { processInBatches } from './async.js';
+export { getVersion, getMajorVersion } from './version.js';
+/** Default concurrency for parallel trigger/skill execution */
+export declare const DEFAULT_CONCURRENCY = 4;
+/**
+ * Escape HTML special characters to prevent them from being interpreted as HTML.
+ * Preserves content inside markdown code blocks (```) and inline code (`).
+ * Used when rendering finding titles/descriptions in GitHub comments.
+ */
+export declare function escapeHtml(text: string): string;
+/**
+ * Get the Anthropic API key from environment variables.
+ * Checks WARDEN_ANTHROPIC_API_KEY first, then falls back to ANTHROPIC_API_KEY.
+ */
+export declare function getAnthropicApiKey(): string | undefined;
+//# sourceMappingURL=index.d.ts.map

package/dist/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE3D,+DAA+D;AAC/D,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAErC;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CA+B/C;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,SAAS,CAEvD"}

package/dist/utils/index.js

@@ -0,0 +1,44 @@
+export { processInBatches } from './async.js';
+export { getVersion, getMajorVersion } from './version.js';
+/** Default concurrency for parallel trigger/skill execution */
+export const DEFAULT_CONCURRENCY = 4;
+/**
+ * Escape HTML special characters to prevent them from being interpreted as HTML.
+ * Preserves content inside markdown code blocks (```) and inline code (`).
+ * Used when rendering finding titles/descriptions in GitHub comments.
+ */
+export function escapeHtml(text) {
+    // Extract code blocks and inline code, escape HTML in the rest
+    const codeBlocks = [];
+    // Replace code blocks (``` ... ```) and inline code (` ... `) with indexed placeholders
+    // Process triple backticks first (they may contain single backticks)
+    let processed = text.replace(/```[\s\S]*?```/g, (match) => {
+        const idx = codeBlocks.length;
+        codeBlocks.push(match);
+        return `\0CODE${idx}\0`;
+    });
+    // Then process inline code (single backticks)
+    processed = processed.replace(/`[^`]+`/g, (match) => {
+        const idx = codeBlocks.length;
+        codeBlocks.push(match);
+        return `\0CODE${idx}\0`;
+    });
+    // Escape HTML in the non-code portions
+    processed = processed
+        .replace(/&/g, '&')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;');
+    // Restore code blocks by index
+    codeBlocks.forEach((block, i) => {
+        processed = processed.replace(`\0CODE${i}\0`, block);
+    });
+    return processed;
+}
+/**
+ * Get the Anthropic API key from environment variables.
+ * Checks WARDEN_ANTHROPIC_API_KEY first, then falls back to ANTHROPIC_API_KEY.
+ */
+export function getAnthropicApiKey() {
+    return process.env['WARDEN_ANTHROPIC_API_KEY'] ?? process.env['ANTHROPIC_API_KEY'];
+}
+//# sourceMappingURL=index.js.map

package/dist/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE3D,+DAA+D;AAC/D,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAErC;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,+DAA+D;IAC/D,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,wFAAwF;IACxF,qEAAqE;IACrE,IAAI,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE;QACxD,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC;QAC9B,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvB,OAAO,SAAS,GAAG,IAAI,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,8CAA8C;IAC9C,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE;QAClD,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC;QAC9B,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvB,OAAO,SAAS,GAAG,IAAI,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,uCAAuC;IACvC,SAAS,GAAG,SAAS;SAClB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAEzB,+BAA+B;IAC/B,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9B,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;AACrF,CAAC"}

package/dist/utils/index.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.test.d.ts.map

package/dist/utils/index.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.test.d.ts","sourceRoot":"","sources":["../../src/utils/index.test.ts"],"names":[],"mappings":""}

package/dist/utils/index.test.js

@@ -0,0 +1,68 @@
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import { escapeHtml, getAnthropicApiKey } from './index.js';
+describe('escapeHtml', () => {
+    it('escapes angle brackets outside code', () => {
+        expect(escapeHtml('Check the <sub> tag')).toBe('Check the &lt;sub&gt; tag');
+    });
+    it('escapes ampersands', () => {
+        expect(escapeHtml('foo & bar')).toBe('foo &amp; bar');
+    });
+    it('escapes multiple HTML characters', () => {
+        expect(escapeHtml('<div>foo & bar</div>')).toBe('&lt;div&gt;foo &amp; bar&lt;/div&gt;');
+    });
+    it('preserves content inside inline code', () => {
+        expect(escapeHtml('no `<sub>warden:` tag')).toBe('no `<sub>warden:` tag');
+    });
+    it('preserves content inside code blocks', () => {
+        const input = 'Check this:\n```\n<html>\n  <body></body>\n</html>\n```\nDone';
+        expect(escapeHtml(input)).toBe(input);
+    });
+    it('escapes outside code but preserves inside', () => {
+        const input = 'When <sub> tag like `<sub>warden:` is missing';
+        const expected = 'When &lt;sub&gt; tag like `<sub>warden:` is missing';
+        expect(escapeHtml(input)).toBe(expected);
+    });
+    it('handles multiple inline code spans', () => {
+        const input = 'Use `<div>` or `<span>` elements';
+        expect(escapeHtml(input)).toBe(input);
+    });
+    it('handles mixed code blocks and inline code', () => {
+        const input = 'See `<tag>` and:\n```\n<html>\n```\nThen <other>';
+        const expected = 'See `<tag>` and:\n```\n<html>\n```\nThen &lt;other&gt;';
+        expect(escapeHtml(input)).toBe(expected);
+    });
+    it('returns empty string unchanged', () => {
+        expect(escapeHtml('')).toBe('');
+    });
+    it('returns string without HTML unchanged', () => {
+        expect(escapeHtml('plain text')).toBe('plain text');
+    });
+});
+describe('getAnthropicApiKey', () => {
+    const originalEnv = process.env;
+    beforeEach(() => {
+        process.env = { ...originalEnv };
+        delete process.env['WARDEN_ANTHROPIC_API_KEY'];
+        delete process.env['ANTHROPIC_API_KEY'];
+    });
+    afterEach(() => {
+        process.env = originalEnv;
+    });
+    it('returns WARDEN_ANTHROPIC_API_KEY when set', () => {
+        process.env['WARDEN_ANTHROPIC_API_KEY'] = 'warden-key';
+        expect(getAnthropicApiKey()).toBe('warden-key');
+    });
+    it('returns WARDEN_ANTHROPIC_API_KEY over ANTHROPIC_API_KEY when both set', () => {
+        process.env['WARDEN_ANTHROPIC_API_KEY'] = 'warden-key';
+        process.env['ANTHROPIC_API_KEY'] = 'anthropic-key';
+        expect(getAnthropicApiKey()).toBe('warden-key');
+    });
+    it('falls back to ANTHROPIC_API_KEY when WARDEN key not set', () => {
+        process.env['ANTHROPIC_API_KEY'] = 'anthropic-key';
+        expect(getAnthropicApiKey()).toBe('anthropic-key');
+    });
+    it('returns undefined when neither key is set', () => {
+        expect(getAnthropicApiKey()).toBeUndefined();
+    });
+});
+//# sourceMappingURL=index.test.js.map

package/dist/utils/index.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.test.js","sourceRoot":"","sources":["../../src/utils/index.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAE5D,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAC5B,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,KAAK,GAAG,+DAA+D,CAAC;QAC9E,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,KAAK,GAAG,+CAA+C,CAAC;QAC9D,MAAM,QAAQ,GAAG,qDAAqD,CAAC;QACvE,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,KAAK,GAAG,kCAAkC,CAAC;QACjD,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,KAAK,GAAG,kDAAkD,CAAC;QACjE,MAAM,QAAQ,GAAG,wDAAwD,CAAC;QAC1E,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC;IAEhC,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QACjC,OAAO,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QAC/C,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,CAAC,GAAG,GAAG,WAAW,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,GAAG,YAAY,CAAC;QACvD,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,GAAG,YAAY,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,GAAG,eAAe,CAAC;QACnD,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,GAAG,eAAe,CAAC;QACnD,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/utils/version.d.ts

@@ -0,0 +1,3 @@
+export declare function getVersion(): string;
+export declare function getMajorVersion(): string;
+//# sourceMappingURL=version.d.ts.map

package/dist/utils/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../src/utils/version.ts"],"names":[],"mappings":"AAMA,wBAAgB,UAAU,IAAI,MAAM,CAMnC;AAED,wBAAgB,eAAe,IAAI,MAAM,CAExC"}

package/dist/utils/version.js

@@ -0,0 +1,16 @@
+import { readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+let cachedVersion;
+export function getVersion() {
+    if (cachedVersion)
+        return cachedVersion;
+    const __dirname = dirname(fileURLToPath(import.meta.url));
+    const pkg = JSON.parse(readFileSync(join(__dirname, '..', '..', 'package.json'), 'utf-8'));
+    cachedVersion = pkg.version;
+    return cachedVersion;
+}
+export function getMajorVersion() {
+    return getVersion().split('.')[0] ?? '0';
+}
+//# sourceMappingURL=version.js.map

package/dist/utils/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/utils/version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,IAAI,aAAiC,CAAC;AAEtC,MAAM,UAAU,UAAU;IACxB,IAAI,aAAa;QAAE,OAAO,aAAa,CAAC;IACxC,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAwB,CAAC;IAClH,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC;IAC5B,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,UAAU,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;AAC3C,CAAC"}

package/docs/src/pages/config.astro

@@ -2,6 +2,7 @@
 import Base from '../layouts/Base.astro';
 import Terminal from '../components/Terminal.astro';
 import { Code } from 'astro:components';
+import { WARDEN_ACTION } from '../utils/version.js';
 ---
 
 <Base title="Config" description="Warden configuration reference">
@@ -368,7 +369,7 @@ jobs:
       #     app-id: \${{ secrets.WARDEN_APP_ID }}
       #     private-key: \${{ secrets.WARDEN_PRIVATE_KEY }}
 
-      - uses: getsentry/warden-action@v1
+      - uses: ${WARDEN_ACTION}
         with:
           github-token: \${{ secrets.GITHUB_TOKEN }}
           # github-token: \${{ steps.app-token.outputs.token }}`}

package/docs/src/pages/guide.astro

@@ -2,6 +2,7 @@
 import Base from '../layouts/Base.astro';
 import Terminal from '../components/Terminal.astro';
 import { Code } from 'astro:components';
+import { WARDEN_ACTION } from '../utils/version.js';
 
 const base = import.meta.env.BASE_URL.replace(/\/$/, '');
 ---
@@ -384,7 +385,7 @@ commentOn = "medium" # Post comments for medium and above`}
     app-id: \${{ secrets.WARDEN_APP_ID }}
     private-key: \${{ secrets.WARDEN_PRIVATE_KEY }}
 
-- uses: getsentry/warden-action@v1
+- uses: ${WARDEN_ACTION}
   with:
     github-token: \${{ steps.app-token.outputs.token }}`}
       lang="yaml"

package/docs/src/utils/version.ts

@@ -0,0 +1,6 @@
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+
+const pkg = JSON.parse(readFileSync(join(process.cwd(), '..', 'package.json'), 'utf-8'));
+export const MAJOR_VERSION = pkg.version.split('.')[0] ?? '0';
+export const WARDEN_ACTION = `getsentry/warden@v${MAJOR_VERSION}`;

package/package.json

@@ -1,8 +1,13 @@
 {
   "name": "@sentry/warden",
-  "version": "0.0.0",
+  "version": "0.1.0",
   "description": "Event-driven agent that reacts to GitHub events and executes skills via Claude Code SDK",
   "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "bin": {
+    "warden": "dist/cli/index.js"
+  },
   "scripts": {
     "cli": "tsx src/cli/index.ts",
     "build": "tsc",
@@ -36,8 +41,13 @@
     "code-review",
     "security"
   ],
-  "author": "Functional Software, Inc.",
+  "author": "Sentry",
   "license": "FSL-1.1-ALv2",
+  "repository": "https://github.com/getsentry/warden",
+  "bugs": {
+    "url": "https://github.com/getsentry/warden/issues"
+  },
+  "homepage": "https://warden.sentry.dev",
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "^0.2.22",
     "@anthropic-ai/sdk": "^0.72.1",

package/src/cli/args.ts

@@ -3,6 +3,7 @@ import { parseArgs } from 'node:util';
 import { z } from 'zod';
 import { SeverityThresholdSchema } from '../types/index.js';
 import type { SeverityThreshold } from '../types/index.js';
+import { getVersion } from '../utils/index.js';
 
 export const CLIOptionsSchema = z.object({
   targets: z.array(z.string()).optional(),
@@ -53,10 +54,8 @@ export interface ParsedArgs {
   setupAppOptions?: SetupAppOptions;
 }
 
-const VERSION = '0.1.0';
-
 export function showVersion(): void {
-  console.log(`warden ${VERSION}`);
+  console.log(`warden ${getVersion()}`);
 }
 
 const HELP_TEXT = `

package/src/cli/commands/init.test.ts

@@ -8,6 +8,7 @@ import { Reporter } from '../output/reporter.js';
 import { detectOutputMode } from '../output/tty.js';
 import { Verbosity } from '../output/verbosity.js';
 import type { CLIOptions } from '../args.js';
+import { getMajorVersion } from '../../utils/index.js';
 
 function createMockReporter(): Reporter {
   return new Reporter(detectOutputMode(false), Verbosity.Normal);
@@ -75,7 +76,7 @@ describe('init command', () => {
       expect(content).toContain('pull-requests: write');
       expect(content).toContain('checks: write');
       expect(content).toContain('WARDEN_ANTHROPIC_API_KEY');
-      expect(content).toContain('getsentry/warden@v1');
+      expect(content).toContain(`getsentry/warden@v${getMajorVersion()}`);
     });
   });
 

package/src/cli/commands/init.ts

@@ -4,6 +4,7 @@ import chalk from 'chalk';
 import { getRepoRoot, getGitHubRepoUrl } from '../git.js';
 import type { Reporter } from '../output/reporter.js';
 import type { CLIOptions } from '../args.js';
+import { getMajorVersion } from '../../utils/index.js';
 
 /**
  * Template for warden.toml configuration file.
@@ -17,6 +18,7 @@ function generateWardenToml(): string {
  * Template for GitHub Actions workflow file.
  */
 function generateWorkflowYaml(): string {
+  const majorVersion = getMajorVersion();
   return `name: Warden
 
 on:
@@ -33,7 +35,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: getsentry/warden@v1
+      - uses: getsentry/warden@v${majorVersion}
         with:
           anthropic-api-key: \${{ secrets.WARDEN_ANTHROPIC_API_KEY }}
 `;

package/src/cli/output/reporter.ts

@@ -13,8 +13,7 @@ import {
 } from './formatters.js';
 import { BoxRenderer } from './box.js';
 import { ICON_CHECK } from './icons.js';
-
-const VERSION = '0.1.0';
+import { getVersion } from '../../utils/index.js';
 
 /**
  * ASCII art logo for TTY header.
@@ -82,10 +81,10 @@ export class Reporter {
       for (const line of LOGO.split('\n')) {
         this.log(chalk.dim(line));
       }
-      this.log(chalk.dim(`v${VERSION}`));
+      this.log(chalk.dim(`v${getVersion()}`));
       this.log('');
     } else {
-      this.logCI(`Warden v${VERSION}`);
+      this.logCI(`Warden v${getVersion()}`);
     }
   }
 

package/src/utils/index.ts

@@ -1,4 +1,5 @@
 export { processInBatches } from './async.js';
+export { getVersion, getMajorVersion } from './version.js';
 
 /** Default concurrency for parallel trigger/skill execution */
 export const DEFAULT_CONCURRENCY = 4;

package/src/utils/version.ts

@@ -0,0 +1,17 @@
+import { readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+let cachedVersion: string | undefined;
+
+export function getVersion(): string {
+  if (cachedVersion) return cachedVersion;
+  const __dirname = dirname(fileURLToPath(import.meta.url));
+  const pkg = JSON.parse(readFileSync(join(__dirname, '..', '..', 'package.json'), 'utf-8')) as { version: string };
+  cachedVersion = pkg.version;
+  return cachedVersion;
+}
+
+export function getMajorVersion(): string {
+  return getVersion().split('.')[0] ?? '0';
+}