@verevoir/review 0.3.1 → 0.3.2

package/README.md

@@ -374,6 +374,15 @@ git diff origin/main...HEAD | npx -y @verevoir/review aigency-review
 - `AIGENCY_REVIEW_LENSES` -- lens set path (see above).
 - `AIGENCY_REVIEW_MODEL` -- default `claude-opus-5-5`.
 - `AIGENCY_REVIEW_MAX_TOKENS` -- positive integer, default `65536`.
+- `AIGENCY_REVIEW_LENS_PRACTICES` -- a default for `--practices <dir>`, for a local gate whose
+  command is argv with no shell and so cannot expand a variable. Used when `--practices` is
+  not given and this is set and non-blank (and `--lenses` is not given); the flag wins. A
+  directory that does not exist is refused like a bad `--practices`, naming this variable.
+- `AIGENCY_REVIEW_TEMPERATURE` -- optional sampling temperature, a number from 0 to 1, sent as
+  `temperature` on every Anthropic API call (lenses and the de-duplication call). Anything else
+  is `could_not_run`. Unset, nothing is sent and the provider default applies. The `claude-cli`
+  route cannot take a temperature (`claude -p` has no such flag): a set value is said not to
+  apply, on stderr and in the footer, and is never silently ignored.
 - `GITHUB_STEP_SUMMARY` -- when set, the report is appended to that file.
 
 **Report footer.** The report ends with what judged it: the model (the id the
@@ -381,7 +390,8 @@ transport reported, else the requested one, said as such), the reviewer route by
 name only (`env`, `key-file` or `claude-cli` -- never a key or a path), and one
 per-lens line with input/output tokens (and cache tokens when non-zero) and wall
 time. The same per-lens lines go to stderr. A route that reports no usage says
-`usage not reported`.
+`usage not reported`. A `temperature:` line records the temperature used, `provider default`
+when none was set, or `not supported on the claude-cli route`.
 
 **Output.** The markdown report goes to stdout; `RESULT: approved|out_of_scope|rejected|could_not_run`
 goes to stderr.

package/dist/cli/bin.js

@@ -3,7 +3,7 @@
 // The process boundary for `aigency-review`: construct the real adapters and
 // hand them to `main` (review.ts). No decision lives here.
 import { execFile } from 'node:child_process';
-import { appendFile, readFile, readdir, realpath, stat } from 'node:fs/promises';
+import { appendFile, lstat, readFile, readdir, realpath, stat } from 'node:fs/promises';
 import process from 'node:process';
 import { promisify } from 'node:util';
 import { main } from './review.js';
@@ -27,6 +27,7 @@ main(process.argv.slice(2), process.env, {
         isDir: e.isDirectory(),
     })),
     realpath: (path) => realpath(path),
+    isSymlink: async (path) => (await lstat(path)).isSymbolicLink(),
     statFile: async (path) => {
         const s = await stat(path);
         return { size: s.size, isFile: s.isFile() };

package/dist/cli/footer.d.ts

@@ -6,6 +6,11 @@ export declare function modelText(requested: string, calls: readonly RawCall[]):
 export declare function tierLine(downgraded: number): string | undefined;
 /** The one line saying how many smells tier enforcement promoted to [blocking]; none for 0. */
 export declare function promotedLine(promoted: number): string | undefined;
-export declare function renderFooter(requested: string, route: RouteName, calls: readonly RawCall[], downgraded?: number, promoted?: number): string;
+/**
+ * The temperature the judging used. The claude-cli route has no temperature option
+ * (`claude -p` documents no flag for it), so a requested one is said not to apply.
+ */
+export declare function temperatureLine(route: RouteName, temperature: number | undefined): string;
+export declare function renderFooter(requested: string, route: RouteName, calls: readonly RawCall[], downgraded?: number, promoted?: number, temperature?: number): string;
 /** One stderr line per lens. */
 export declare function usageLines(calls: readonly RawCall[]): string[];

package/dist/cli/footer.js

@@ -42,8 +42,25 @@ export function promotedLine(promoted) {
         ? `Tier: ${String(promoted)} finding(s) promoted: quotes a Reject signal`
         : undefined;
 }
-export function renderFooter(requested, route, calls, downgraded = 0, promoted = 0) {
-    const lines = ['---', '', `Judged with ${modelText(requested, calls)}, route: ${route}.`];
+/**
+ * The temperature the judging used. The claude-cli route has no temperature option
+ * (`claude -p` documents no flag for it), so a requested one is said not to apply.
+ */
+export function temperatureLine(route, temperature) {
+    if (temperature === undefined)
+        return 'temperature: provider default';
+    return route === 'claude-cli'
+        ? 'temperature: not supported on the claude-cli route'
+        : `temperature: ${String(temperature)}`;
+}
+export function renderFooter(requested, route, calls, downgraded = 0, promoted = 0, temperature) {
+    const lines = [
+        '---',
+        '',
+        `Judged with ${modelText(requested, calls)}, route: ${route}.`,
+        '',
+        temperatureLine(route, temperature),
+    ];
     const tier = tierLine(downgraded);
     if (tier !== undefined)
         lines.push('', tier);

package/dist/cli/review.d.ts

@@ -27,6 +27,8 @@ export interface ReviewIo {
         readonly size: number;
         readonly isFile: boolean;
     }>;
+    /** lstat: true when the path is itself a symbolic link. Required: the check fails closed. */
+    readonly isSymlink: (path: string) => Promise<boolean>;
     /** List a directory's entries (for the ADR search). Optional: absent, ADRs are not searched. */
     readonly listDir?: (path: string) => Promise<DirEntry[]>;
 }

package/dist/cli/review.js

@@ -24,7 +24,7 @@ import { buildPrompt, renderPrompt } from '../prompt.js';
 import { deriveLensSet, extractBar } from '../practice-lenses.js';
 import { buildFileContext, NO_FILE_CONTEXT_NOTE } from '../context-files.js';
 import { buildReferences } from '../references.js';
-import { promotedLine, renderFooter, tierLine, usageLines } from './footer.js';
+import { promotedLine, renderFooter, temperatureLine, tierLine, usageLines } from './footer.js';
 /** Governance's pinned default, sent to both routes. */
 export const DEFAULT_MODEL = 'claude-opus-5-5';
 /** Governance's default output-token budget (billed route only). */
@@ -44,7 +44,8 @@ const USAGE = [
     '  --title <text>   the title shown at the top of the report (default: "this change")',
     '  --lenses <path>  a lens set JSON file (else AIGENCY_REVIEW_LENSES, else the bundled set)',
     '  --practices <dir>  derive one lens per `lens:` front-matter value from the practice',
-    '                   markdown files in <dir> (cannot be combined with --lenses)',
+    '                   markdown files in <dir> (cannot be combined with --lenses). Default:',
+    '                   AIGENCY_REVIEW_LENS_PRACTICES, when set and non-blank; the flag wins',
     '  --print-lenses   with --practices: print the derived lenses as JSON and exit 0,',
     '                   with no reviewer call and no diff',
     '  --print-prompt <lens-id>  print the exact prompt that lens would be sent for the diff',
@@ -63,7 +64,9 @@ const USAGE = [
     '  -h, --help       print this and exit 0',
     '',
     'Environment: ANTHROPIC_API_KEY, ANTHROPIC_API_KEY_FILE, AIGENCY_REVIEW_LENSES,',
-    'AIGENCY_REVIEW_MODEL, AIGENCY_REVIEW_MAX_TOKENS, GITHUB_STEP_SUMMARY.',
+    'AIGENCY_REVIEW_MODEL, AIGENCY_REVIEW_MAX_TOKENS, AIGENCY_REVIEW_LENS_PRACTICES,',
+    'AIGENCY_REVIEW_TEMPERATURE (0 to 1; API routes only, unset sends none),',
+    'GITHUB_STEP_SUMMARY.',
 ].join('\n');
 function parseArgs(argv) {
     let base;
@@ -251,13 +254,18 @@ export async function main(argv, env, io, deps) {
         if (parsed.practices !== undefined && parsed.lenses !== undefined) {
             return await fail('--practices and --lenses cannot be used together; choose one lens source.');
         }
-        if (parsed.printLenses && parsed.practices === undefined) {
+        // The practices directory: the flag, else (with no --lenses either) the environment default.
+        const practicesFromEnv = parsed.practices === undefined && parsed.lenses === undefined
+            ? present(env['AIGENCY_REVIEW_LENS_PRACTICES'])
+            : undefined;
+        const practicesDir = parsed.practices ?? practicesFromEnv;
+        if (parsed.printLenses && practicesDir === undefined) {
             return await fail('--print-lenses needs --practices <dir>.');
         }
         let derived;
         let bar;
-        if (parsed.practices !== undefined) {
-            const dir = parsed.practices;
+        if (practicesDir !== undefined) {
+            const dir = practicesDir;
             // The grading rules (README), read first so its failure has its own reason.
             let readme;
             try {
@@ -266,7 +274,10 @@ export async function main(argv, env, io, deps) {
             catch (cause) {
                 return await fail(`The practices README at ${dir}/README.md could not be read, so the review has no ` +
                     'grading rules (reject / accept / expect): ' +
-                    `${cause instanceof Error ? cause.message : String(cause)}`);
+                    `${cause instanceof Error ? cause.message : String(cause)}` +
+                    (practicesFromEnv === undefined
+                        ? ''
+                        : '\n\nThe directory came from AIGENCY_REVIEW_LENS_PRACTICES.'));
             }
             try {
                 const names = (await io.readDir(dir)).filter((n) => n.endsWith('.md') && n.toLowerCase() !== 'readme.md');
@@ -336,6 +347,18 @@ export async function main(argv, env, io, deps) {
                 maxTokens = n;
             }
         }
+        // Optional sampling temperature: unset sends nothing; set, it must be a number 0 to 1.
+        let temperature;
+        const rawTemperature = present(env['AIGENCY_REVIEW_TEMPERATURE']);
+        if (rawTemperature !== undefined) {
+            const t = Number(rawTemperature);
+            if (!Number.isFinite(t) || t < 0 || t > 1) {
+                problems.push(`AIGENCY_REVIEW_TEMPERATURE must be a number from 0 to 1, got ${JSON.stringify(rawTemperature)}`);
+            }
+            else {
+                temperature = t;
+            }
+        }
         if (resolved.kind === 'problem' || problems.length > 0) {
             return await fail(`The configuration is present and wrong:\n\n${problems.map((p) => `- ${p}`).join('\n')}`);
         }
@@ -408,6 +431,7 @@ export async function main(argv, env, io, deps) {
                     realpath: io.realpath,
                     statFile: io.statFile,
                     readFile: io.readFile,
+                    isSymlink: io.isSymlink,
                 };
                 fileContext = await buildFileContext(diff, contextRoot, fs);
                 references = await buildReferences(diff, contextRoot, {
@@ -430,7 +454,7 @@ export async function main(argv, env, io, deps) {
         // 3. The lens set: --lenses, else AIGENCY_REVIEW_LENSES, else bundled.
         const lensPath = parsed.lenses ?? present(env['AIGENCY_REVIEW_LENSES']);
         const source = derived !== undefined
-            ? `practices in ${parsed.practices ?? ''} (derived: one lens per lens: value)`
+            ? `practices in ${practicesDir ?? ''} (derived: one lens per lens: value)`
             : (lensPath ?? 'bundled default lenses (aigency-governance review/lenses.json @ de238aa)');
         let lensSet;
         try {
@@ -456,6 +480,11 @@ export async function main(argv, env, io, deps) {
             return 0;
         }
         // 4. The panel.
+        if (temperature !== undefined && route === 'claude-cli') {
+            // The claude-cli transport has no temperature option: say so, never ignore silently.
+            io.stderr(`warning: ${temperatureLine(route, temperature)} ` +
+                `(AIGENCY_REVIEW_TEMPERATURE=${String(temperature)} was not applied)\n`);
+        }
         const calls = [];
         const result = await runReviewNode({
             subject,
@@ -465,6 +494,7 @@ export async function main(argv, env, io, deps) {
             account,
             model,
             maxTokens,
+            ...(temperature === undefined ? {} : { temperature }),
             ...(deps.reviewer === undefined ? {} : { reviewer: deps.reviewer }),
             warmFirst: parsed.warmFirst,
             dedup: parsed.dedup,
@@ -488,7 +518,7 @@ export async function main(argv, env, io, deps) {
         // Audit trail for tier decisions behind merged groups: stderr, not the report (see dedup.ts).
         for (const line of result.dedupAudit)
             io.stderr(line);
-        const footer = `\n\n${renderFooter(model, route, calls, result.downgraded, result.promoted)}`;
+        const footer = `\n\n${renderFooter(model, route, calls, result.downgraded, result.promoted, temperature)}`;
         const note = derived !== undefined && derived.untagged.length > 0
             ? `\n\n> ${String(derived.untagged.length)} practice(s) had no "lens:" tag and were ` +
                 `not reviewed: ${derived.untagged.join(', ')}`

package/dist/context-files.d.ts

@@ -10,6 +10,12 @@ export interface ContextFs {
         readonly isFile: boolean;
     }>;
     readonly readFile: (path: string) => Promise<string>;
+    /**
+     * lstat-based: true when the path itself is a symbolic link (not followed). Rejects with an
+     * fs-style `code` if absent. REQUIRED: a security check must fail closed, so a host that
+     * cannot answer does not compile rather than silently skipping the refusal.
+     */
+    readonly isSymlink: (path: string) => Promise<boolean>;
 }
 export interface DiffPath {
     readonly path: string;
@@ -25,6 +31,12 @@ export interface DiffPath {
 export declare function diffPaths(diff: string): DiffPath[];
 /** Why a diff-supplied path must not be read, or undefined if it is acceptable. */
 export declare function unsafePathReason(path: string): string | undefined;
+/**
+ * True when any component of `rel` (taken under `prefix`, which ends in `/`) is a symbolic link.
+ * Never follows one: each cumulative path is lstat-ed. An absent component ends the walk
+ * (the caller's realpath reports absence); any other lstat failure counts as a refusal.
+ */
+export declare function hasSymlinkComponent(prefix: string, rel: string, fs: ContextFs): Promise<boolean>;
 /**
  * Build the body of the "Changed files in full" section for `diff`, reading
  * from `root`. Throws only when the root itself cannot be resolved; every

package/dist/context-files.js

@@ -7,7 +7,9 @@
 // untrusted. A path is refused (never read) when it is absolute, contains a
 // `..` segment or a NUL; and the resolved real path of every candidate must
 // stay inside the real path of the context root, so a symlink pointing out
-// of the tree is refused too. Refusals are listed in the section, not thrown.
+// of the tree is refused too. The host must supply `isSymlink` (an lstat; required, so the
+// check fails closed): a path is also refused when ANY of its components is a symbolic link,
+// even one pointing inside the root. A symlink is never followed. Refusals are listed in the section, not thrown.
 //
 // PURE-ish: all disk access goes through the injected `ContextFs`, so tests
 // use fakes.
@@ -84,6 +86,29 @@ function isAbsent(cause) {
     const code = cause.code;
     return code === 'ENOENT' || code === 'ENOTDIR';
 }
+/**
+ * True when any component of `rel` (taken under `prefix`, which ends in `/`) is a symbolic link.
+ * Never follows one: each cumulative path is lstat-ed. An absent component ends the walk
+ * (the caller's realpath reports absence); any other lstat failure counts as a refusal.
+ */
+export async function hasSymlinkComponent(prefix, rel, fs) {
+    const check = fs.isSymlink;
+    let current = prefix;
+    for (const part of rel.split('/')) {
+        if (part === '' || part === '.')
+            continue;
+        current = `${current}${part}`;
+        try {
+            if (await check(current))
+                return true;
+        }
+        catch (cause) {
+            return !isAbsent(cause);
+        }
+        current = `${current}/`;
+    }
+    return false;
+}
 function describe(cause) {
     return cause instanceof Error ? cause.message : String(cause);
 }
@@ -120,6 +145,10 @@ export async function buildFileContext(diff, root, fs) {
             skipped.push(`- \`${label}\`: refused (${unsafe})`);
             continue;
         }
+        if (await hasSymlinkComponent(prefix, entry.path, fs)) {
+            skipped.push(`- \`${label}\`: not shown: ${label} is a symbolic link`);
+            continue;
+        }
         let real;
         try {
             real = await fs.realpath(`${prefix}${entry.path}`);

package/dist/references.js

@@ -9,7 +9,7 @@
 // or a NUL is refused without being touched; a path or ADR file that resolves (through a
 // symlink) outside the context root is refused. The ADR search lists directories to a depth of
 // 4 and skips node_modules, .git and dist.
-import { diffPaths, unsafePathReason } from './context-files.js';
+import { diffPaths, hasSymlinkComponent, unsafePathReason } from './context-files.js';
 /** At most this many distinct references are resolved; the rest are counted, not resolved. */
 export const MAX_REFERENCES = 40;
 /** Directory levels below the root that the ADR search lists. */
@@ -145,6 +145,10 @@ async function resolveAdr(ref, root, files, fs) {
     const parts = [];
     for (const rel of hits) {
         try {
+            if (await hasSymlinkComponent(root.prefix, rel, fs)) {
+                parts.push(`${rel} (not shown: ${rel} is a symbolic link)`);
+                continue;
+            }
             const real = await fs.realpath(`${root.prefix}${rel}`);
             if (!inside(root, real)) {
                 parts.push(`${rel} (refused: resolves outside the context root)`);
@@ -214,8 +218,11 @@ async function resolvePath(ref, root, fs, deleted, maxVisited) {
         return `refused (${unsafe})`;
     const segments = ref.target.split('/');
     const bare = segments.length === 1;
-    // A real repo-relative path always wins.
+    // A real repo-relative path always wins. A symlink is never followed, even to check existence.
     try {
+        if (await hasSymlinkComponent(root.prefix, ref.target, fs)) {
+            return `not shown: ${ref.target} is a symbolic link`;
+        }
         const real = await fs.realpath(`${root.prefix}${ref.target}`);
         if (!inside(root, real))
             return 'refused (resolves outside the context root)';

package/dist/report.js

@@ -16,6 +16,25 @@ const HEADING = {
     could_not_run: 'Could not run',
     out_of_scope: 'Nothing in scope',
 };
+/** The finding tiers the code knows, most severe first, with their report headings. */
+const TIERS = [
+    { blocking: true, tag: 'blocking', heading: 'Blocking' },
+    { blocking: false, tag: 'smell', heading: 'Smells' },
+];
+/** Code-unit comparison: deterministic across locales, so reruns compare equal. */
+function compareText(a, b) {
+    return a < b ? -1 : a > b ? 1 : 0;
+}
+/** Lens count descending, then first lens name, then summary text. */
+function compareGroups(a, b) {
+    return (b.raisedBy.length - a.raisedBy.length ||
+        compareText(a.raisedBy[0]?.lens ?? '', b.raisedBy[0]?.lens ?? '') ||
+        compareText(a.finding.summary, b.finding.summary));
+}
+/** Lens name, then summary text (the --no-dedup order within a tier). */
+function compareFindings(a, b) {
+    return compareText(a.lens, b.lens) || compareText(a.summary, b.summary);
+}
 function raisedByText(view) {
     return view.raisedBy
         .map((r) => (r.practices.length === 0 ? r.lens : `${r.lens} (${r.practices.join(', ')})`))
@@ -84,17 +103,23 @@ export function renderReport(verdict, context) {
         lines.push(`### ${dedup.groups.length} finding(s)` +
             (smells > 0 ? ` (${blocking} blocking, ${smells} non-blocking)` : '') +
             `, de-duplicated from ${dedup.total} raised`, '');
-        for (const group of dedup.groups) {
-            lines.push(`- [${group.blocking ? 'blocking' : 'smell'}] ${group.finding.summary}`);
-            const detail = group.finding.detail;
-            if (detail !== undefined && detail !== '') {
-                for (const detailLine of detail.split('\n')) {
-                    lines.push(detailLine === '' ? '' : `  ${detailLine}`);
+        for (const tier of TIERS) {
+            const inTier = dedup.groups.filter((g) => g.blocking === tier.blocking).sort(compareGroups);
+            if (inTier.length === 0)
+                continue;
+            lines.push(`### ${tier.heading} (${inTier.length})`, '');
+            for (const group of inTier) {
+                lines.push(`- [${tier.tag}] ${group.finding.summary}`);
+                const detail = group.finding.detail;
+                if (detail !== undefined && detail !== '') {
+                    for (const detailLine of detail.split('\n')) {
+                        lines.push(detailLine === '' ? '' : `  ${detailLine}`);
+                    }
                 }
+                lines.push(`  raised by: ${raisedByText(group)}`);
             }
-            lines.push(`  raised by: ${raisedByText(group)}`);
+            lines.push('');
         }
-        lines.push('');
         // Per-lens verdict lines are unchanged: every lens that reviewed gets its own.
         lines.push('### Lens verdicts', '');
         for (const r of verdict.results) {
@@ -106,25 +131,38 @@ export function renderReport(verdict, context) {
     else if (grouped.size > 0) {
         lines.push(`### ${verdict.findings.length} finding(s)` +
             (smellCount > 0 ? ` (${blockingCount} blocking, ${smellCount} non-blocking)` : ''), '');
-        for (const [lens, findings] of grouped) {
-            lines.push(`#### ${verdictHeading(lens, verdict)}`, '');
-            for (const finding of findings) {
-                lines.push(`- [${finding.blocking ? 'blocking' : 'smell'}] ${finding.summary}`);
+        for (const tier of TIERS) {
+            const inTier = verdict.findings
+                .filter((f) => f.blocking === tier.blocking)
+                .sort(compareFindings);
+            if (inTier.length === 0)
+                continue;
+            lines.push(`### ${tier.heading} (${inTier.length})`, '');
+            for (const finding of inTier) {
+                lines.push(`- [${tier.tag}] ${finding.summary}`);
                 if (finding.detail !== undefined && finding.detail !== '') {
                     for (const detailLine of finding.detail.split('\n')) {
                         lines.push(detailLine === '' ? '' : `  ${detailLine}`);
                     }
                 }
+                lines.push(`  raised by: ${finding.lens}`);
             }
             lines.push('');
         }
+        // Per-lens verdict lines, as in the de-duplicated view: every lens that reviewed.
+        lines.push('### Lens verdicts', '');
+        for (const r of verdict.results) {
+            if (r.outcome === 'approved' || r.outcome === 'rejected') {
+                lines.push(`#### ${verdictHeading(r.lens, verdict)}`, '');
+            }
+        }
     }
     // Every lens gets a line: the approving ones, with no findings, are not otherwise
     // visible. Lenses that did not run or had nothing in scope are listed above.
     const quiet = verdict.results.filter((r) => r.outcome === 'approved' && !grouped.has(r.lens));
-    if (dedup === undefined && quiet.length > 0) {
-        if (grouped.size === 0)
-            lines.push('### Lens verdicts', '');
+    // With findings, the non-dedup branch above already listed every lens's verdict.
+    if (dedup === undefined && grouped.size === 0 && quiet.length > 0) {
+        lines.push('### Lens verdicts', '');
         for (const r of quiet)
             lines.push(`#### ${verdictHeading(r.lens, verdict)}`, '');
     }

package/dist/reviewer-anthropic.d.ts

@@ -25,6 +25,8 @@ export interface AnthropicReviewerConfig {
      */
     readonly model: string;
     readonly maxTokens: number;
+    /** Sent as `temperature` when present; absent, nothing is sent and the provider default applies. */
+    readonly temperature?: number;
     /** Overridable for tests and for a proxy. */
     readonly baseUrl?: string;
 }

package/dist/reviewer-anthropic.js

@@ -97,6 +97,7 @@ export function anthropicReviewer(config, post, onResolvedModel) {
         const body = JSON.stringify({
             model: config.model,
             max_tokens: config.maxTokens,
+            ...(config.temperature === undefined ? {} : { temperature: config.temperature }),
             // The shared half, marked cacheable — `Prompt`'s ordering contract made
             // real: identical bytes for every lens, sent first, so a five-lens
             // panel pays for the diff once.

package/dist/reviewer-selection.d.ts

@@ -21,6 +21,8 @@ export interface SelectReviewerOptions {
     readonly account: ReviewAccount;
     readonly model: string;
     readonly maxTokens: number;
+    /** Sampling temperature for the api route only; the claude-cli route has no such option. */
+    readonly temperature?: number;
     /** Test-only override for the HTTP transport's own `post` — see
      * reviewer-anthropic.ts's `HttpPost`. Defaults to the global `fetch`. */
     readonly post?: HttpPost;

package/dist/reviewer-selection.js

@@ -67,6 +67,7 @@ export function selectReviewer(options) {
                 apiKey: options.account.apiKey,
                 model: resolvedModelId(options.model) ?? options.model,
                 maxTokens: options.maxTokens,
+                ...(options.temperature === undefined ? {} : { temperature: options.temperature }),
             };
             const post = options.post ?? ((url, init) => fetch(url, init));
             return anthropicReviewer(config, post, options.onResolvedModel);

package/dist/run-review.d.ts

@@ -23,6 +23,8 @@ export interface ReviewNodeInput {
      * family alias. */
     readonly model: string;
     readonly maxTokens: number;
+    /** Sampling temperature, sent to every call (lenses and dedup) on the api route; absent sends none. */
+    readonly temperature?: number;
     /** The bar this change is judged against. Optional — its absence is
      * handled by prompt.ts's own `NO_PRACTICES_NOTICE`, not by this file. */
     readonly practices?: string;

package/dist/run-review.js

@@ -68,6 +68,7 @@ export async function runReviewNode(input, onCall) {
             account: input.account,
             model: input.model,
             maxTokens: input.maxTokens,
+            ...(input.temperature === undefined ? {} : { temperature: input.temperature }),
             ...(input.post === undefined ? {} : { post: input.post }),
             ...(onCall === undefined
                 ? {}

package/node_modules/@anthropic-ai/sdk/.github/logo.svg

@@ -0,0 +1,3 @@
+<svg width="248" height="248" viewBox="0 0 248 248" fill="none" xmlns="http://www.w3.org/2000/svg">
+<path d="M52.4285 162.873L98.7844 136.879L99.5485 134.602L98.7844 133.334H96.4921L88.7237 132.862L62.2346 132.153L39.3113 131.207L17.0249 130.026L11.4214 128.844L6.2 121.873L6.7094 118.447L11.4214 115.257L18.171 115.847L33.0711 116.911L55.485 118.447L71.6586 119.392L95.728 121.873H99.5485L100.058 120.337L98.7844 119.392L97.7656 118.447L74.5877 102.732L49.4995 86.1905L36.3823 76.62L29.3779 71.7757L25.8121 67.2858L24.2839 57.3608L30.6515 50.2716L39.3113 50.8623L41.4763 51.4531L50.2636 58.1879L68.9842 72.7209L93.4357 90.6804L97.0015 93.6343L98.4374 92.6652L98.6571 91.9801L97.0015 89.2625L83.757 65.2772L69.621 40.8192L63.2534 30.6579L61.5978 24.632C60.9565 22.1032 60.579 20.0111 60.579 17.4246L67.8381 7.49965L71.9133 6.19995L81.7193 7.49965L85.7946 11.0443L91.9074 24.9865L101.714 46.8451L116.996 76.62L121.453 85.4816L123.873 93.6343L124.764 96.1155H126.292V94.6976L127.566 77.9197L129.858 57.3608L132.15 30.8942L132.915 23.4505L136.608 14.4708L143.994 9.62643L149.725 12.344L154.437 19.0788L153.8 23.4505L150.998 41.6463L145.522 70.1215L141.957 89.2625H143.994L146.414 86.7813L156.093 74.0206L172.266 53.698L179.398 45.6635L187.803 36.802L193.152 32.5484H203.34L210.726 43.6549L207.415 55.1159L196.972 68.3492L188.312 79.5739L175.896 96.2095L168.191 109.585L168.882 110.689L170.738 110.53L198.755 104.504L213.91 101.787L231.994 98.7149L240.144 102.496L241.036 106.395L237.852 114.311L218.495 119.037L195.826 123.645L162.07 131.592L161.696 131.893L162.137 132.547L177.36 133.925L183.855 134.279H199.774L229.447 136.524L237.215 141.605L241.8 147.867L241.036 152.711L229.065 158.737L213.019 154.956L175.45 145.977L162.587 142.787H160.805V143.85L171.502 154.366L191.242 172.089L215.82 195.011L217.094 200.682L213.91 205.172L210.599 204.699L188.949 188.394L180.544 181.069L161.696 165.118H160.422V166.772L164.752 173.152L187.803 207.771L188.949 218.405L187.294 221.832L181.308 223.959L174.813 222.777L161.187 203.754L147.305 182.486L136.098 163.345L134.745 164.2L128.075 235.42L125.019 239.082L117.887 241.8L111.902 237.31L108.718 229.984L111.902 215.452L115.722 196.547L118.779 181.541L121.58 162.873L123.291 156.636L123.14 156.219L121.773 156.449L107.699 175.752L86.304 204.699L69.3663 222.777L65.291 224.431L58.2867 220.768L58.9235 214.27L62.8713 208.48L86.304 178.705L100.44 160.155L109.551 149.507L109.462 147.967L108.959 147.924L46.6977 188.512L35.6182 189.93L30.7788 185.44L31.4156 178.115L33.7079 175.752L52.4285 162.873Z" fill="#D97757"/>
+</svg>