@usepipr/runtime 0.2.0 → 0.2.1

package/README.md

@@ -0,0 +1,42 @@
+# @usepipr/runtime
+
+`@usepipr/runtime` owns Pipr's config loading, Action and local command
+execution, Diff Manifest creation, Pi execution, review validation, and
+publication planning.
+
+## Technical Notes
+
+- The package root exports command APIs for init, Action runs, dry runs,
+  config checks, plan inspection, and local review.
+- `./runtime-tools-extension` is the static Pi runtime tools extension loaded
+  during condensed Diff Manifest runs.
+- `./internal/testing` is an unsupported test surface for Pipr's private e2e
+  harness.
+- The build emits ESM and declaration files to `dist`.
+
+## Source Map
+
+| Path | Responsibility |
+| --- | --- |
+| `src/action` | CLI and GitHub Action command orchestration |
+| `src/config` | `.pipr/config.ts` loading, init files, recipes, and SDK stubs |
+| `src/diff` | Diff Manifest parsing, projection, ranges, and path filters |
+| `src/pi` | Pi subprocess contract, runtime tools, and provider wiring |
+| `src/review` | Task execution, agent prompts, validation, comments, and publication plans |
+| `src/hosts` | Code host adapters for GitHub and local runs |
+
+## Commands
+
+```bash
+bun run --cwd packages/runtime test:config-init
+bun run --cwd packages/runtime test:config-loader
+bun run --cwd packages/runtime test:core
+bun run --cwd packages/runtime check
+```
+
+## Docs
+
+- [Runtime Guide](https://pipr.run/docs/guide/runtime)
+- [Comments and Findings](https://pipr.run/docs/guide/comments)
+- [Architecture](https://pipr.run/docs/reference/architecture)
+- [Trust and Security](https://pipr.run/docs/guide/trust-security)

package/dist/{commands-BajlHf13.mjs → commands-Cj8p5IQF.mjs}

@@ -415,6 +415,7 @@ const starterTsconfig = `{
   "compilerOptions": {
     "strict": true,
     "noEmit": true,
+    "skipLibCheck": true,
     "target": "ES2022",
     "module": "ESNext",
     "moduleResolution": "Bundler"
@@ -494,6 +495,7 @@ async function typecheckTypescriptConfigWithApi(configDir, tsconfigPath) {
 	const configPath = path.join(configDir, "config.ts");
 	const program = ts.createProgram([configPath, ...parsed.fileNames], {
 		...parsed.options,
+		skipLibCheck: true,
 		typeRoots: [...new Set([...parsed.options.typeRoots ?? [], ...bundledTypeRoots])],
 		types: [...new Set([...parsed.options.types ?? [], ...bundledTypeRoots.length ? ["bun"] : []])]
 	});
@@ -865,7 +867,7 @@ export default definePipr((pipr) => {
       maintainability, and test coverage.
       Return only actionable findings that target valid diff ranges.
     \`,
-    timeout: "5m",
+    timeout: "10m",
     comment: (result, context) => ({
       main:
         context.platform.id === "local"
@@ -1801,8 +1803,8 @@ function isOfficialInitRecipeId(recipe) {
 //#endregion
 //#region src/config/init.ts
 const supportedOfficialInitAdapters = ["github"];
-const defaultWorkflowActionRef = "somus/pipr@v0.2.0";
-const defaultSdkVersion = "0.2.0";
+const defaultWorkflowActionRef = "somus/pipr@v0.2.1";
+const defaultSdkVersion = "0.2.1";
 const defaultTypesBunVersion = "1.3.14";
 function resolveOfficialInitAdapters(adapters) {
 	if (adapters === void 0) return [...supportedOfficialInitAdapters];
@@ -3578,7 +3580,8 @@ function resolveProvider(config, providerId) {
 	return provider;
 }
 function createAgentRunContext(runtime) {
-	const runId = crypto.randomUUID();
+	const runId = runtime.runId ?? runtime.taskContext?.run.id;
+	if (!runId) throw new Error("runId is required for stable review run identity");
 	const repositorySlugParts = runtime.event.repository.slug.split("/");
 	const repository = {
 		root: runtime.workspace,
@@ -3850,7 +3853,7 @@ function buildRepairPrompt(options) {
 }
 //#endregion
 //#region package.json
-var version = "0.2.0";
+var version = "0.2.1";
 //#endregion
 //#region src/review/prior-state.ts
 const mainCommentMarker = "pipr:main-comment";
@@ -4284,6 +4287,30 @@ function buildCommentPublishingPlan(options) {
 	};
 }
 //#endregion
+//#region src/review/run-identity.ts
+function stableReviewRunId(options) {
+	return `pipr-${new Bun.CryptoHasher("sha256").update(JSON.stringify({
+		platform: options.event.platform.id,
+		repository: options.event.repository.slug,
+		changeNumber: options.event.change.number,
+		baseSha: options.event.change.base.sha,
+		headSha: options.event.change.head.sha,
+		trustedConfigHash: options.trustedConfigHash,
+		trustedConfigSha: options.trustedConfigSha,
+		selectedTasks: options.selectedTasks,
+		command: options.commandInvocation ? {
+			name: options.commandInvocation.name,
+			line: options.commandInvocation.line,
+			arguments: sortedCommandArguments(options.commandInvocation.arguments),
+			sourceCommentId: options.commandInvocation.sourceCommentId
+		} : void 0,
+		verifier: options.verifierInvocation
+	})).digest("hex").slice(0, 24)}`;
+}
+function sortedCommandArguments(arguments_) {
+	return Object.fromEntries(Object.entries(arguments_).sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0));
+}
+//#endregion
 //#region src/review/verifier.ts
 const verifierFindingSchema = z.strictObject({
 	id: z.string().min(1),
@@ -4348,6 +4375,7 @@ async function runInternalVerifier(options) {
 				env: options.env,
 				piExecutable: options.piExecutable,
 				piRunner: options.piRunner,
+				runId: options.runId,
 				log: options.log
 			}
 		});
@@ -4364,6 +4392,7 @@ async function runInternalVerifier(options) {
 function verifierInput(options, prior, candidates) {
 	return {
 		manifest: options.diffManifest,
+		runId: options.runId,
 		mode: options.mode.kind,
 		reviewedHeadSha: prior.reviewedHeadSha,
 		currentHeadSha: options.event.change.head.sha,
@@ -4671,13 +4700,21 @@ async function runTaskRuntime(options) {
 		selectedTasks,
 		taskCount: tasks.length
 	});
+	const runId = stableReviewRunId({
+		event: options.event,
+		selectedTasks,
+		trustedConfigSha: options.trustedConfigSha,
+		trustedConfigHash: options.trustedConfigHash,
+		commandInvocation: options.commandInvocation
+	});
 	const loadedPriorReviewState = options.priorReviewState ?? await options.loadPriorReviewState?.();
 	const priorMainComment = options.priorMainComment ?? await options.loadPriorMainComment?.();
 	const priorReviewState = priorReviewStateForSelectedTasks(loadedPriorReviewState, selectedTasks);
 	const runtimeOptions = {
 		...options,
 		priorReviewState,
-		priorMainComment
+		priorMainComment,
+		runId
 	};
 	const manifestCache = /* @__PURE__ */ new Map();
 	const taskResults = await Promise.all(tasks.map(async (task, taskOrder) => {
@@ -4759,7 +4796,8 @@ async function runTaskRuntime(options) {
 		config,
 		provider,
 		diffManifest,
-		priorReviewState
+		priorReviewState,
+		runId
 	});
 	const publishing = buildCommentPublishingPlan({
 		event: options.event,
@@ -4836,14 +4874,15 @@ async function runSynchronizeVerifier(options) {
 		diffManifest: options.diffManifest,
 		priorReviewState: options.priorReviewState,
 		threadContexts: await options.options.loadInlineThreadContexts?.() ?? [],
-		mode: { kind: "synchronize" }
+		mode: { kind: "synchronize" },
+		runId: options.runId
 	});
 }
 function createTaskContext(options) {
 	const repositorySlugParts = options.event.repository.slug.split("/");
 	let taskContext;
 	taskContext = {
-		run: { id: crypto.randomUUID() },
+		run: { id: options.runId },
 		repository: {
 			root: options.workspace,
 			owner: repositorySlugParts.length > 1 ? repositorySlugParts[0] : void 0,
@@ -4896,7 +4935,8 @@ function createTaskContext(options) {
 				runOptions,
 				runtime: {
 					...options,
-					taskContext
+					taskContext,
+					runId: options.runId
 				}
 			});
 			options.output.providerModels.push(...result.providerModels);
@@ -6778,7 +6818,8 @@ async function dispatchIssueCommentCommand(options, adapter, prepared, log) {
 			commandInvocation: {
 				name: parsedResolution.invocation.commandName,
 				line: parsedResolution.invocation.line,
-				arguments: parsedResolution.invocation.arguments
+				arguments: parsedResolution.invocation.arguments,
+				sourceCommentId: prepared.comment.commentId
 			},
 			log
 		}),
@@ -7022,7 +7063,18 @@ async function runReviewCommentVerifier(options, adapter, prepared, log) {
 				actor: reply.actor
 			},
 			respondWhenStillValid: config.publication.autoResolve.userReplies.respondWhenStillValid
-		}
+		},
+		runId: stableReviewRunId({
+			event,
+			selectedTasks: ["pipr-internal-verifier"],
+			trustedConfigSha: trustedRuntime.trustedConfigSha,
+			trustedConfigHash: trustedRuntime.trustedConfigHash,
+			verifierInvocation: {
+				mode: "user-reply",
+				commentId: reply.commentId,
+				parentCommentId: reply.parentCommentId
+			}
+		})
 	});
 }
 function runnableReviewCommentReply(reply) {
@@ -7197,4 +7249,4 @@ async function runActionCommandWithDependencies(options) {
 //#endregion
 export { runInspectCommand as a, PublicationError as c, supportedOfficialInitRecipes as d, piBuiltinToolNames as f, piThinkingLevels as h, runInitCommand as i, supportedOfficialInitAdapters as l, piRequiredCliFlags as m, runActionCommandWithDependencies as n, runLocalReviewCommand as o, piReadOnlyToolNames as p, runDryRunCommand as r, runValidateCommand as s, runActionCommand as t, listOfficialInitRecipes as u };
 
-//# sourceMappingURL=commands-BajlHf13.mjs.map
+//# sourceMappingURL=commands-Cj8p5IQF.mjs.map