@weareikko/code-review 0.8.3 → 0.8.4

package/README.md

@@ -110,7 +110,7 @@ jobs:
     steps:
       # Checkout (full history) is bundled — no separate checkout step needed.
       # Opt out with `checkout: false` if your job already checked out the code.
-      - uses: weareikko/code-review@0.8.2 # pin to a release tag
+      - uses: weareikko/code-review@0.8 # moving minor tag — auto patch updates (see Pinning below)
         with:
           model: anthropic/claude-sonnet-4-5
           api-key: ${{ secrets.ANTHROPIC_API_KEY }}
@@ -122,6 +122,13 @@ Inputs: `model` (required), `api-key`, `github-token` (default `${{ github.token
 
 Because the composite action references your secrets directly (`${{ secrets.ANTHROPIC_API_KEY }}`), it works from **any** repository, including consumers in a different organization from this one.
 
+> **Pinning the ref.** Two moving tags are maintained, each re-pointed to the latest release it covers:
+>
+> - `@0.8` — **minor series**: newest `0.8.x`, patches only. Because a `0.x` minor bump marks a breaking change, this is the non-breaking channel and the recommended pin while the project is pre-1.0.
+> - `@0` — **major series**: newest stable release. **Caveat:** in 0.x a minor bump _is_ a breaking change, so `@0` may advance across breaking releases (`0.8 → 0.9`); it becomes a true semver compatibility boundary only once `1.0` ships.
+>
+> For a frozen build, pin an exact patch (`@0.8.3`) or a commit SHA (immutable; strongest supply-chain posture); to track the tip, use `@main`. GitHub `uses:` refs do not support wildcards, so `@0.8.x` is not valid — use a moving tag instead.
+
 ### Reusable workflow (same org/enterprise)
 
 The bundled reusable workflow lets a caller enable reviews with no `steps:` of its own — it checks out the code, installs the CLI, and runs the review for you:
@@ -137,7 +144,7 @@ permissions:
 
 jobs:
   review:
-    uses: weareikko/code-review/.github/workflows/code-review.yml@0.8.2 # pin to a release tag
+    uses: weareikko/code-review/.github/workflows/code-review.yml@0.8 # moving minor tag — auto patch updates
     secrets: inherit
 ```
 

package/dist/{cli-CICuhytH.js → cli-FDpPZaNn.js}

@@ -512,7 +512,12 @@ function buildSizeNoticeBlock(notice) {
 	if (sizeSkippedFiles.length > 0) {
 		const fileList = sizeSkippedFiles.map((file) => `- \`${file.path}\` (${formatChars(file.chars)})`).join("\n");
 		const cov = notice.coverage;
-		const coverageLine = cov && cov.totalLines > 0 ? `> **Partial review — ~${Math.round(cov.reviewedLines / cov.totalLines * 100)}% of changed lines reviewed** (${cov.reviewedLines} of ${cov.totalLines}). The files below were NOT reviewed; their absence from the findings is not a clean bill of health.` : `> **${sizeSkippedFiles.length} file(s) were not reviewed** — the diff exceeded the size budget, so these files were dropped from the review:`;
+		const retrieved = notice.retrieved === true;
+		let coverageLine;
+		if (cov && cov.totalLines > 0) {
+			const pct = Math.round(cov.reviewedLines / cov.totalLines * 100);
+			coverageLine = retrieved ? `> **Large diff — ~${pct}% of changed lines fit the inline budget** (${cov.reviewedLines} of ${cov.totalLines}). The files below exceeded it and were staged for on-demand retrieval; see the review summary for which were read. Absence from the findings is not a clean bill of health.` : `> **Partial review — ~${pct}% of changed lines reviewed** (${cov.reviewedLines} of ${cov.totalLines}). The files below were NOT reviewed; their absence from the findings is not a clean bill of health.`;
+		} else coverageLine = retrieved ? `> **${sizeSkippedFiles.length} file(s) exceeded the size budget** — their diffs were staged for on-demand retrieval; see the review summary for which were read:` : `> **${sizeSkippedFiles.length} file(s) were not reviewed** — the diff exceeded the size budget, so these files were dropped from the review:`;
 		blocks.push([
 			`> [!WARNING]`,
 			coverageLine,
@@ -543,7 +548,7 @@ function buildSummaryBody(summary, costFooter, options = {}) {
 	return `${withFooter}\n\n${buildSummaryHistoryBlock(historyEntries)}`;
 }
 function buildReviewedCommitFooter(commitSha) {
-	return `Reviewed by ${PRODUCT_LINK} v0.8.3 for commit ${commitSha}.`;
+	return `Reviewed by ${PRODUCT_LINK} v0.8.4 for commit ${commitSha}.`;
 }
 function extractReviewedCommitSha(body) {
 	return REVIEWED_COMMIT_FOOTER_PATTERN.exec(body)?.[1] ?? null;
@@ -936,6 +941,7 @@ var BOOLEAN_FLAGS = new Set([
 	"no-summary",
 	"force-review",
 	"retrieve-skipped",
+	"no-retrieve-skipped",
 	"verbose",
 	"help",
 	"version"
@@ -994,6 +1000,22 @@ function resolvePostSummary(args, env) {
 	}
 	return true;
 }
+function resolveRetrieveSkipped(args, env) {
+	if (args.noRetrieveSkipped === true) return false;
+	if (args.retrieveSkipped === true) return true;
+	const raw = env.CODE_REVIEW_RETRIEVE_SKIPPED;
+	if (typeof raw === "string") {
+		const normalized = raw.trim().toLowerCase();
+		if ([
+			"0",
+			"false",
+			"no",
+			"off"
+		].includes(normalized)) return false;
+		if (normalized.length > 0) return true;
+	}
+	return true;
+}
 function normalizeChoice(value) {
 	return String(value ?? "").trim().toLowerCase();
 }
@@ -1197,7 +1219,7 @@ function resolveConfig(argv = process.argv.slice(2), env = process.env) {
 		maxDiffChars,
 		decomposeHintLines,
 		diffContext,
-		retrieveSkipped: toBoolean(args.retrieveSkipped) || toBoolean(env.CODE_REVIEW_RETRIEVE_SKIPPED),
+		retrieveSkipped: resolveRetrieveSkipped(args, env),
 		reviewFile: String(args.reviewFile ?? "code-review.md"),
 		output: String(args.output ?? "review-comments.json"),
 		dryRun: toBoolean(args.dryRun),
@@ -3788,10 +3810,10 @@ function buildUserPrompt(diff, skippedFiles = [], commitLog, priorThreads, inten
 	if (commitLog?.trim()) parts.push(`Commits in this MR (oldest first):\n<commits>\n${commitLog.trim()}\n</commits>`);
 	parts.push(`Review this diff:\n<diff>\n${diff}\n</diff>`);
 	if (retrievableSkipped && retrievableSkipped.length > 0) parts.push(renderRetrievableSkippedBlock(retrievableSkipped));
-	else if (skippedFiles.length > 0) parts.push(`<skipped_files>\n${skippedFiles.map((file) => `- ${file}`).join("\n")}\n</skipped_files>\nThe above files were not included because the diff exceeded the size limit. Mention them explicitly in your summary as not reviewed.`);
+	else if (skippedFiles.length > 0) parts.push(`<skipped_files>\n${skippedFiles.map((file) => `- ${file}`).join("\n")}\n</skipped_files>\nThe above files were not included because the diff exceeded the size limit. They are already surfaced to the reader in the MR summary, so do not re-list them; just do not assume they are clean, since you did not see them.`);
 	if (coverage && coverage.totalLines > 0 && coverage.reviewedLines < coverage.totalLines) {
 		const pct = Math.round(coverage.reviewedLines / coverage.totalLines * 100);
-		parts.push(`<coverage>You reviewed ${coverage.reviewedLines} of ${coverage.totalLines} changed lines (~${pct}%). The rest were dropped for the size budget and you did NOT see them. State this partial coverage in your summary and do not imply the unreviewed files are clean — their absence from your findings is not a clearance.</coverage>`);
+		parts.push(`<coverage>You reviewed ${coverage.reviewedLines} of ${coverage.totalLines} changed lines (~${pct}%). The rest were dropped for the size budget and you did NOT see them. The MR summary already reports this partial coverage to the reader, so do not restate it; just do not imply the unreviewed files are clean — their absence from your findings is not a clearance.</coverage>`);
 	}
 	if (priorThreads && priorThreads.length > 0) {
 		const block = renderPriorThreadsBlock(priorThreads);
@@ -4023,13 +4045,14 @@ async function runReview(config, options) {
 		reviewedLines: reviewedChangedLines,
 		totalLines: reviewedChangedLines + skippedChangedLines
 	} : void 0;
+	const retrievableSkipped = config.retrieveSkipped && sizeSkippedSections.length > 0 ? await writeSkippedDiffs(cwd, sizeSkippedSections) : [];
+	if (retrievableSkipped.length > 0) logger.info(`Staged ${retrievableSkipped.length} dropped-file diff(s) on disk for retrieval.`);
 	const sizeNotice = {
 		sizeSkippedFiles,
 		decomposeHint,
-		coverage
+		coverage,
+		retrieved: retrievableSkipped.length > 0
 	};
-	const retrievableSkipped = config.retrieveSkipped && sizeSkippedSections.length > 0 ? await writeSkippedDiffs(cwd, sizeSkippedSections) : [];
-	if (retrievableSkipped.length > 0) logger.info(`Staged ${retrievableSkipped.length} dropped-file diff(s) on disk for retrieval.`);
 	const context = await loadReviewContext(cwd, config.skills, (msg) => logger.warn(msg), { refreshGitSkills: config.refreshGitSkills });
 	const systemPrompt = buildJSONSystemPrompt(context, minSeverity);
 	const userPrompt = buildUserPrompt(diff, skippedFiles, options.commitLog, options.priorThreads, options.intent, coverage, retrievableSkipped);
@@ -4909,7 +4932,7 @@ async function loadDefaultRuntime() {
 	const [sdkNode, resources, semconv] = modules;
 	const serviceResource = resources.resourceFromAttributes({
 		[semconv.ATTR_SERVICE_NAME ?? "service.name"]: SERVICE_NAME,
-		[semconv.ATTR_SERVICE_VERSION ?? "service.version"]: "0.8.3"
+		[semconv.ATTR_SERVICE_VERSION ?? "service.version"]: "0.8.4"
 	});
 	process.env.OTEL_METRICS_EXPORTER = process.env.OTEL_METRICS_EXPORTER ?? "otlp";
 	process.env.OTEL_LOGS_EXPORTER = process.env.OTEL_LOGS_EXPORTER ?? "otlp";
@@ -5341,7 +5364,7 @@ function boldCommentTitle(body) {
 */
 function buildCommentBody(body, commitSha, confidence) {
 	const confidenceLine = `_Confidence: ${confidence}._`;
-	const footer = `<sub>Reviewed by ${PRODUCT_LINK} v0.8.3 for commit ${commitSha}.</sub>`;
+	const footer = `<sub>Reviewed by ${PRODUCT_LINK} v0.8.4 for commit ${commitSha}.</sub>`;
 	return `${boldCommentTitle(body.trim())}\n\n${confidenceLine}\n\n---\n\n${footer}`;
 }
 function buildPayload(comment, body, refs, resolved) {
@@ -6066,9 +6089,10 @@ Options:
                           context aids reasoning but inflates tokens and fits fewer files in
                           the budget; less fits more. 0 = built-in default (20).
                           (env: CODE_REVIEW_DIFF_CONTEXT)
-  --retrieve-skipped      Stage diffs for files dropped by the size budget on disk so the
-                          reviewer can read them on demand instead of losing them.
-                          (env: CODE_REVIEW_RETRIEVE_SKIPPED=true)
+  --no-retrieve-skipped   Disable staging diffs for files dropped by the size budget on disk.
+                          Retrieval is on by default: dropped diffs are staged so the reviewer
+                          can read them on demand instead of losing them.
+                          (env: CODE_REVIEW_RETRIEVE_SKIPPED=0)
   --min-severity <level>  info, warn, or critical (default: info)
   --thinking <level>      off, minimal, low, medium, high, or xhigh (default: off).
                           Higher levels add billable thinking tokens at the model output rate.
@@ -6428,10 +6452,10 @@ async function main(argv = process.argv.slice(2)) {
 		return;
 	}
 	if (argv.includes("--version") || argv.includes("-v")) {
-		console.log("0.8.3");
+		console.log("0.8.4");
 		return;
 	}
-	process.stderr.write(`[code-review] @weareikko/code-review v0.8.3\n`);
+	process.stderr.write(`[code-review] @weareikko/code-review v0.8.4\n`);
 	assertNodeVersion();
 	applyCodeReviewEnvPrefix();
 	applyDefaultCacheRetention();
@@ -6454,4 +6478,4 @@ if (isDirectRun()) main().catch((error) => {
 //#endregion
 export { normalizeBody as $, SUMMARY_HISTORY_END as A, buildSummaryHistoryEntries as B, createDiagnosticContext as C, traceDiagnosticPhase as D, traceDiagnostic as E, SUMMARY_MARKER as F, findExistingSummaryNoteId as G, extractSummaryHistoryEntries as H, buildArchivedSummaryEntry as I, upsertSummaryNote as J, stripSummaryHistory as K, buildReviewedCommitFooter as L, SUMMARY_HISTORY_ENTRY_START as M, SUMMARY_HISTORY_LIMIT as N, normalizeSeverity as O, SUMMARY_HISTORY_START as P, fingerprints as Q, buildSizeNoticeBlock as R, DIAGNOSTIC_CHANNEL_PREFIX as S, diagnosticChannels as T, findExistingReviewedCommitSha as U, extractReviewedCommitSha as V, findExistingSummaryNote as W, extractDiffHunkContext as X, appendFingerprintMarkers as Y, extractExistingFingerprints as Z, resolveNpmSkillDir as _, main as a, parseReviewMarkdownWithWarnings as b, buildGeneratedComments as c, startOtelBridge as d, sha256 as et, filterDiff as f, parseSkillSpec as g, loadNamedSkill as h, formatUsageLine as i, SUMMARY_HISTORY_ENTRY_END as j, toGitLabReviewSeverity as k, buildPayload as l, gitSkillCacheKey as m, formatPerModelUsage as n, run as o, runReview as p, stripSummaryMarker as q, formatSkillsFooter as r, withHttpStamping as s, countPostedBySeverity as t, isOtelEnabled as u, resolveSkillCacheDir as v, createDiagnosticRunId as w, DIAGNOSTIC_CHANNEL_NAMES as x, parseReviewMarkdown as y, buildSummaryBody as z };
 
-//# sourceMappingURL=cli-CICuhytH.js.map
+//# sourceMappingURL=cli-FDpPZaNn.js.map