@weareikko/code-review 0.9.6 → 0.9.7

package/dist/{cli-D6vNV3kA.js → cli-m4pS6_5q.js}

@@ -35,7 +35,7 @@ var GitlabReviewError = class extends Error {
 };
 /**
 * Patterns that identify a provider credit/quota-exhaustion error across
-* providers (Anthropic, OpenAI, Cloudflare AI Gateway, …). Matched against the
+* providers (Anthropic, OpenAI, OpenRouter, …). Matched against the
 * provider's error message. Deliberately excludes transient rate limits (429),
 * which are retryable rather than a billing dead-end.
 */
@@ -399,7 +399,7 @@ async function git$1(args, options = {}) {
 	try {
 		const { stdout } = await exec$1("git", args, {
 			cwd: options.cwd,
-			maxBuffer: 50 * 1024 * 1024
+			maxBuffer: 52428800
 		});
 		return stdout;
 	} catch (error) {
@@ -791,7 +791,8 @@ function redactUrl(url) {
 }
 /** Base directory for cached git-skill clones (honours `XDG_CACHE_HOME`). */
 function resolveSkillCacheDir() {
-	return join(process.env.XDG_CACHE_HOME?.trim() || join(homedir(), ".cache"), "code-review", "skills");
+	const base = process.env.XDG_CACHE_HOME?.trim() || join(homedir(), ".cache");
+	return join(base, "code-review", "skills");
 }
 /**
 * Stable cache-directory name for a git skill. Keyed on the clone URL plus the
@@ -965,7 +966,7 @@ var DEFAULT_MARKETPLACE_FORMAT = "anthropic";
 * (`npm:`, `file:`, `git:`) or the bare-name builtin lookup, and so cannot be
 * used as a marketplace name — `<name>:<plugin>/<skill>` would be ambiguous.
 */
-var RESERVED_MARKETPLACE_NAMES = new Set([
+var RESERVED_MARKETPLACE_NAMES = /* @__PURE__ */ new Set([
 	"npm",
 	"file",
 	"git",
@@ -1431,7 +1432,7 @@ function buildSummaryBody(summary, costFooter, options = {}) {
 	return `${withFooter}\n\n${buildSummaryHistoryBlock(historyEntries)}`;
 }
 function buildReviewedCommitFooter(commitSha) {
-	return `Reviewed by ${PRODUCT_LINK} v0.9.6 for commit ${commitSha}.`;
+	return `Reviewed by ${PRODUCT_LINK} v0.9.7 for commit ${commitSha}.`;
 }
 function extractReviewedCommitSha(body) {
 	return REVIEWED_COMMIT_FOOTER_PATTERN.exec(body)?.[1] ?? null;
@@ -1651,8 +1652,9 @@ async function createDraftsConcurrently(gitlab, project, mr, fresh) {
 			next += 1;
 			if (index >= fresh.length) return;
 			const item = fresh[index];
+			const draft = await gitlab.createDraftNote(project, mr, item.payload);
 			records[index] = {
-				id: (await gitlab.createDraftNote(project, mr, item.payload)).id,
+				id: draft.id,
 				fingerprints: item.fingerprints
 			};
 		}
@@ -1783,8 +1785,8 @@ var RESERVED_ENV_SUFFIX_SET = new Set(RESERVED_ENV_SUFFIXES);
 * CI-wide variable of the same name.
 *
 * This lets credentials and infra vars that `@earendil-works/pi-ai` reads
-* (`ANTHROPIC_API_KEY`, `CLOUDFLARE_API_KEY`, `CLOUDFLARE_ACCOUNT_ID`,
-* `OLLAMA_HOST`, ambient AWS/Vertex creds, …) — and the GitLab tokens — be
+* (`ANTHROPIC_API_KEY`, `OPENROUTER_API_KEY`, `OLLAMA_HOST`,
+* ambient AWS/Vertex creds, …) — and the GitLab tokens — be
 * scoped under `CODE_REVIEW_` in shared CI without enumerating pi-ai's
 * provider list.
 *
@@ -1812,8 +1814,8 @@ function applyCodeReviewEnvPrefix(env = process.env) {
 /**
 * Default pi-ai's prompt-cache retention to `long` when the caller has not set
 * it. pi-ai reads `PI_CACHE_RETENTION` from `process.env` at request time; `long`
-* asks providers that support it (e.g. OpenAI's `openai-responses` API, including
-* via the Cloudflare AI Gateway) to keep the cached system-prompt prefix for up
+* asks providers that support it (e.g. OpenAI's `openai-responses` API) to keep
+* the cached system-prompt prefix for up
 * to 24h so reviews spaced hours apart still reuse it. It is a safe no-op for
 * providers/models without long-retention support (e.g. Anthropic), where it
 * behaves exactly like the default `short`.
@@ -1825,7 +1827,7 @@ function applyDefaultCacheRetention(env = process.env) {
 	if (!env.PI_CACHE_RETENTION) env.PI_CACHE_RETENTION = "long";
 	return env;
 }
-var BOOLEAN_FLAGS = new Set([
+var BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
 	"dry-run",
 	"no-post",
 	"no-summary",
@@ -1836,7 +1838,7 @@ var BOOLEAN_FLAGS = new Set([
 	"help",
 	"version"
 ]);
-var MULTI_FLAGS = new Set(["skill", "marketplace"]);
+var MULTI_FLAGS = /* @__PURE__ */ new Set(["skill", "marketplace"]);
 function parseArgs(argv) {
 	const args = {};
 	for (let i = 0; i < argv.length; i += 1) {
@@ -2446,7 +2448,8 @@ function createGitTools(dir, options = {}) {
 					dir,
 					oid
 				});
-				const diff = await diffCommits(dir, fs, commit.parent[0] ?? null, oid);
+				const parent = commit.parent[0] ?? null;
+				const diff = await diffCommits(dir, fs, parent, oid);
 				return text(`commit ${oid}\nAuthor: ${commit.author.name} <${commit.author.email}>\n\n${commit.message.trim()}\n\n${diff}`);
 			}
 		},
@@ -2459,7 +2462,9 @@ function createGitTools(dir, options = {}) {
 				to: Type.String({ description: "Target ref/sha." })
 			}),
 			async execute(_id, params) {
-				return text(await diffCommits(dir, fs, await resolveOid(dir, fs, params.from), await resolveOid(dir, fs, params.to)));
+				const fromOid = await resolveOid(dir, fs, params.from);
+				const toOid = await resolveOid(dir, fs, params.to);
+				return text(await diffCommits(dir, fs, fromOid, toOid));
 			}
 		}
 	];
@@ -2625,6 +2630,80 @@ function removeAtIndex(text, start, count) {
 function endsWithCommaOrNewline(text) {
 	return /[,\n][ \t\r]*$/.test(text);
 }
+var namedHtmlEntities = {
+	"&quot;": "\"",
+	"&amp;": "&",
+	"&lt;": "<",
+	"&gt;": ">",
+	"&apos;": "'"
+};
+/**
+* Try to match an HTML entity at the start of the given fragment. The fragment
+* is a small slice of text that begins exactly at the candidate '&'. Returns the
+* decoded character and the number of characters consumed, or null when there
+* is no complete, valid entity (for example a truncated "&quot" without ';').
+*/
+function matchHtmlEntity(fragment) {
+	if (fragment.charAt(0) !== "&") return null;
+	const semicolon = fragment.indexOf(";");
+	if (semicolon === -1) return null;
+	const entity = fragment.substring(0, semicolon + 1);
+	const named = namedHtmlEntities[entity];
+	if (named !== void 0) return {
+		char: named,
+		length: entity.length
+	};
+	if (fragment.charAt(1) === "#") {
+		const body = fragment.substring(2, semicolon);
+		const hex = body.charAt(0) === "x" || body.charAt(0) === "X";
+		const digits = hex ? body.substring(1) : body;
+		if (digits.length > 0) {
+			const code = Number.parseInt(digits, hex ? 16 : 10);
+			if (!Number.isNaN(code) && code >= 0 && code <= 1114111) return {
+				char: String.fromCodePoint(code),
+				length: entity.length
+			};
+		}
+	}
+	return null;
+}
+/**
+* Test whether a matched HTML entity decodes to a double quote character
+*/
+function isDoubleQuoteEntity(match) {
+	return match !== null && match.char === "\"";
+}
+/**
+* Test whether a matched HTML entity decodes to a single quote character
+*/
+function isSingleQuoteEntity(match) {
+	return match !== null && match.char === "'";
+}
+/**
+* Count the number of occurrences of a single character in a string
+*/
+function countOccurrences(text, char) {
+	let count = 0;
+	for (let i = 0; i < text.length; i++) if (text.charAt(i) === char) count++;
+	return count;
+}
+/**
+* Test whether `closeChar` is a closing bracket and `text` still contains an
+* unmatched opening bracket of the same kind. This indicates that the end of
+* `text` is located inside the brackets, for example the quote in
+* `"a (b") c"` is followed by `)` while `(` is still unclosed.
+*
+* Note that the (potentially expensive) counting is only performed when
+* `closeChar` actually is a closing bracket.
+*/
+function isInsideUnclosedBracket(text, closeChar) {
+	switch (closeChar) {
+		case ")": return countOccurrences(text, "(") > countOccurrences(text, ")");
+		case "]": return countOccurrences(text, "[") > countOccurrences(text, "]");
+		case "}": return countOccurrences(text, "{") > countOccurrences(text, "}");
+		default: return false;
+	}
+}
 //#endregion
 //#region node_modules/jsonrepair/lib/esm/regular/jsonrepair.js
 var controlCharacters = {
@@ -2797,23 +2876,26 @@ function jsonrepair(text) {
 					processedComma = parseCharacter(",");
 					if (!processedComma) output = insertBeforeLastWhitespace(output, ",");
 					parseWhitespaceAndSkipComments();
-				} else {
-					processedComma = true;
-					initial = false;
-				}
+				} else processedComma = true;
 				skipEllipsis();
 				if (!(parseString() || parseUnquotedString(true))) {
-					if (text[i] === "}" || text[i] === "{" || text[i] === "]" || text[i] === "[" || text[i] === void 0) output = stripLastOccurrence(output, ",");
-					else throwObjectKeyExpected();
+					if (text[i] === "}" || text[i] === "{" || text[i] === "]" || text[i] === "[" || text[i] === void 0) {
+						if (!initial) output = stripLastOccurrence(output, ",");
+					} else throwObjectKeyExpected();
 					break;
 				}
 				parseWhitespaceAndSkipComments();
 				const processedColon = parseCharacter(":");
 				const truncatedText = i >= text.length;
-				if (!processedColon) if (isStartOfValue(text[i]) || truncatedText) output = insertBeforeLastWhitespace(output, ":");
-				else throwColonExpected();
-				if (!parseValue()) if (processedColon || truncatedText) output += "null";
-				else throwColonExpected();
+				if (!processedColon) {
+					if (isStartOfValue(text[i]) || truncatedText) output = insertBeforeLastWhitespace(output, ":");
+					else throwColonExpected();
+				}
+				if (!parseValue()) {
+					if (processedColon || truncatedText) output += "null";
+					else throwColonExpected();
+				}
+				initial = false;
 			}
 			if (text[i] === "}") {
 				output += "}";
@@ -2836,12 +2918,13 @@ function jsonrepair(text) {
 			while (i < text.length && text[i] !== "]") {
 				if (!initial) {
 					if (!parseCharacter(",")) output = insertBeforeLastWhitespace(output, ",");
-				} else initial = false;
+				}
 				skipEllipsis();
 				if (!parseValue()) {
-					output = stripLastOccurrence(output, ",");
+					if (!initial) output = stripLastOccurrence(output, ",");
 					break;
 				}
+				initial = false;
 			}
 			if (text[i] === "]") {
 				output += "]";
@@ -2883,17 +2966,19 @@ function jsonrepair(text) {
 	function parseString() {
 		let stopAtDelimiter = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : false;
 		let stopAtIndex = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : -1;
-		let skipEscapeChars = text[i] === "\\";
+		const skipEscapeChars = text[i] === "\\";
 		if (skipEscapeChars) {
 			i++;
-			skipEscapeChars = true;
+			if (!isQuote(text[i])) throwUnexpectedCharacter();
 		}
-		if (isQuote(text[i])) {
+		const openEntity = text[i] === "&" ? matchHtmlEntity(text.slice(i, i + 12)) : null;
+		const openedByEntity = isDoubleQuoteEntity(openEntity) || isSingleQuoteEntity(openEntity);
+		if (isQuote(text[i]) || openedByEntity) {
 			const isEndQuote = isDoubleQuote(text[i]) ? isDoubleQuote : isSingleQuote(text[i]) ? isSingleQuote : isSingleQuoteLike(text[i]) ? isSingleQuoteLike : isDoubleQuoteLike;
 			const iBefore = i;
 			const oBefore = output.length;
 			let str = "\"";
-			i++;
+			i += openedByEntity && openEntity ? openEntity.length : 1;
 			while (true) {
 				if (i >= text.length) {
 					const iPrev = prevNonWhitespaceIndex(i - 1);
@@ -2911,17 +2996,19 @@ function jsonrepair(text) {
 					output += str;
 					return true;
 				}
-				if (isEndQuote(text[i])) {
+				const entity = openedByEntity && text[i] === "&" ? matchHtmlEntity(text.slice(i, i + 12)) : null;
+				if (entity && openEntity ? entity.char === openEntity.char : isEndQuote(text[i])) {
 					const iQuote = i;
 					const oQuote = str.length;
 					str += "\"";
-					i++;
+					i += entity ? entity.length : 1;
 					output += str;
 					parseWhitespaceAndSkipComments(false);
-					if (stopAtDelimiter || i >= text.length || isDelimiter(text[i]) || isQuote(text[i]) || isDigit(text[i])) {
+					if (stopAtDelimiter || i >= text.length || isDelimiter(text[i]) && !isInsideUnclosedBracket(str, text[i]) || isQuote(text[i]) && !nextQuoteIsEndQuote(i) || isDigit(text[i])) {
 						parseConcatenatedString();
 						return true;
 					}
+					if (text[i] === "\\") throwUnexpectedCharacter();
 					const iPrevChar = prevNonWhitespaceIndex(iQuote - 1);
 					const prevChar = text.charAt(iPrevChar);
 					if (prevChar === ",") {
@@ -2935,7 +3022,7 @@ function jsonrepair(text) {
 						return parseString(true);
 					}
 					output = output.substring(0, oBefore);
-					i = iQuote + 1;
+					i = iQuote + (entity ? entity.length : 1);
 					str = `${str.substring(0, oQuote)}\\${str.substring(oQuote)}`;
 				} else if (stopAtDelimiter && isUnquotedStringDelimiter(text[i])) {
 					if (text[i - 1] === ":" && regexUrlStart.test(text.substring(iBefore + 1, i + 2))) while (i < text.length && regexUrlChar.test(text[i])) {
@@ -2946,6 +3033,12 @@ function jsonrepair(text) {
 					output += str;
 					parseConcatenatedString();
 					return true;
+				} else if (entity) {
+					const char = entity.char;
+					if (char === "\"") str += "\\\"";
+					else if (isControlCharacter(char)) str += controlCharacters[char];
+					else str += char;
+					i += entity.length;
 				} else if (text[i] === "\\") {
 					const char = text.charAt(i + 1);
 					if (escapeCharacters[char] !== void 0) {
@@ -3007,51 +3100,48 @@ function jsonrepair(text) {
 	*/
 	function parseNumber() {
 		const start = i;
+		let num = "";
+		let invalid = false;
 		if (text[i] === "-") {
+			num += text[i];
+			i++;
+			if (!isDigit(text[i]) && atEndOfNumber()) num += "0";
+		}
+		if (text[i] === "0" && isDigit(text[i + 1])) invalid = true;
+		while (isDigit(text[i])) {
+			num += text[i];
 			i++;
-			if (atEndOfNumber()) {
-				repairNumberEndingWithNumericSymbol(start);
-				return true;
-			}
-			if (!isDigit(text[i])) {
-				i = start;
-				return false;
-			}
 		}
-		while (isDigit(text[i])) i++;
 		if (text[i] === ".") {
+			if (num === "" || num === "-") num += "0";
+			num += text[i];
 			i++;
-			if (atEndOfNumber()) {
-				repairNumberEndingWithNumericSymbol(start);
-				return true;
-			}
-			if (!isDigit(text[i])) {
-				i = start;
-				return false;
+			if (!isDigit(text[i])) num += "0";
+			while (isDigit(text[i])) {
+				num += text[i];
+				i++;
 			}
-			while (isDigit(text[i])) i++;
 		}
-		if (text[i] === "e" || text[i] === "E") {
-			i++;
-			if (text[i] === "-" || text[i] === "+") i++;
-			if (atEndOfNumber()) {
-				repairNumberEndingWithNumericSymbol(start);
-				return true;
+		if (i > start) {
+			if (text[i] === "e" || text[i] === "E") {
+				if (num === "-") invalid = true;
+				num += text[i];
+				i++;
+				if (text[i] === "-" || text[i] === "+") {
+					num += text[i];
+					i++;
+				}
+				if (!isDigit(text[i])) num += "0";
+				while (isDigit(text[i])) {
+					num += text[i];
+					i++;
+				}
 			}
-			if (!isDigit(text[i])) {
+			if (!atEndOfNumber()) {
 				i = start;
 				return false;
 			}
-			while (isDigit(text[i])) i++;
-		}
-		if (!atEndOfNumber()) {
-			i = start;
-			return false;
-		}
-		if (i > start) {
-			const num = text.slice(start, i);
-			const hasInvalidLeadingZero = /^0\d/.test(num);
-			output += hasInvalidLeadingZero ? `"${num}"` : num;
+			output += invalid ? `"${text.substring(start, i)}"` : num;
 			return true;
 		}
 		return false;
@@ -3064,7 +3154,7 @@ function jsonrepair(text) {
 		return parseKeyword("true", "true") || parseKeyword("false", "false") || parseKeyword("null", "null") || parseKeyword("True", "true") || parseKeyword("False", "false") || parseKeyword("None", "null");
 	}
 	function parseKeyword(name, value) {
-		if (text.slice(i, i + name.length) === name) {
+		if (text.slice(i, i + name.length) === name && !isFunctionNameChar(text[i + name.length])) {
 			output += value;
 			i += name.length;
 			return true;
@@ -3117,12 +3207,14 @@ function jsonrepair(text) {
 		while (prev > 0 && isWhitespace(text, prev)) prev--;
 		return prev;
 	}
+	function nextQuoteIsEndQuote(index) {
+		let next = index + 1;
+		while (next < text.length && isWhitespace(text, next)) next++;
+		return next >= text.length || isDelimiter(text[next]);
+	}
 	function atEndOfNumber() {
 		return i >= text.length || isDelimiter(text[i]) || isWhitespace(text, i);
 	}
-	function repairNumberEndingWithNumericSymbol(start) {
-		output += `${text.slice(start, i)}0`;
-	}
 	function throwInvalidCharacter(char) {
 		throw new JSONRepairError(`Invalid character ${JSON.stringify(char)}`, i);
 	}
@@ -3766,7 +3858,8 @@ function slugify(path) {
 */
 async function writeSkippedDiffs(cwd, sections) {
 	if (sections.length === 0) return [];
-	await mkdir(join(cwd, SKIPPED_DIFF_DIR), { recursive: true });
+	const dir = join(cwd, SKIPPED_DIFF_DIR);
+	await mkdir(dir, { recursive: true });
 	const files = [];
 	for (const { path, section } of sections) {
 		const relative = join(SKIPPED_DIFF_DIR, slugify(path));
@@ -3838,7 +3931,7 @@ function normalizeSubject(body) {
 var MAX_LINE_DELTA = 2;
 /** Min token-set Jaccard similarity of normalised subjects required to merge. */
 var SUBJECT_SIMILARITY_THRESHOLD = .6;
-var STOP_WORDS = new Set([
+var STOP_WORDS = /* @__PURE__ */ new Set([
 	"a",
 	"an",
 	"the",
@@ -3961,7 +4054,7 @@ function triageFindings(groups) {
 }
 //#endregion
 //#region src/gitlab-review.ts
-var DEFAULT_REVIEW_TIMEOUT_MS = 600 * 1e3;
+var DEFAULT_REVIEW_TIMEOUT_MS = 6e5;
 var DEFAULT_MAX_DIFF_CHARS = 1e5;
 var CONVENTION_FILES = ["AGENTS.md", "CLAUDE.md"];
 var REVIEW_RULE_FILES = ["REVIEW.md"];
@@ -3979,7 +4072,7 @@ var NOISE_PATH_PATTERNS = [
 	/\.d\.ts$/,
 	/\.(js|css)\.map$/
 ];
-var LOCKFILE_BASENAMES = new Set([
+var LOCKFILE_BASENAMES = /* @__PURE__ */ new Set([
 	"package-lock.json",
 	"npm-shrinkwrap.json",
 	"yarn.lock",
@@ -4020,12 +4113,11 @@ var exec = promisify(execFile);
 *
 * pi-ai >=0.82 requires an explicit stream function (earlier versions built one
 * internally from model + getApiKey); `streamSimple` is the drop-in. Critically,
-* 0.83 also moved cloudflare-ai-gateway base-URL substitution — the
-* `{CLOUDFLARE_ACCOUNT_ID}` / `{CLOUDFLARE_GATEWAY_ID}` placeholders — from a
-* direct `process.env` read to an explicit `env` on the stream options. Without
-* threading `env` through, the gateway URL keeps its literal placeholders and
-* every request fails with Cloudflare 401 2035 ("Invalid request path"). Passing
-* `env` is harmless for providers whose base URL has no placeholders.
+* 0.83 also moved base-URL placeholder substitution from a direct `process.env`
+* read to an explicit `env` on the stream options. Providers whose base URL
+* contains `{VAR}` placeholders keep them literal — and fail every request —
+* unless `env` is threaded through. Passing `env` is harmless for providers
+* whose base URL has none.
 *
 * `stream` is injectable so the env threading can be unit-tested without a live call.
 */
@@ -5404,7 +5496,8 @@ async function startOtelBridge(options = {}) {
 		createAgentTelemetry(runId) {
 			const reviewerEntry = openByRun.get(runId)?.get(GEN_AI_PHASE);
 			if (!reviewerEntry || reviewerEntry.closed) return void 0;
-			return buildAgentSubscriber(tracer, tokenUsage, operationCost, timeToFirstToken, trace.setSpan(context.active(), reviewerEntry.span), {
+			const reviewerSpanCtx = trace.setSpan(context.active(), reviewerEntry.span);
+			return buildAgentSubscriber(tracer, tokenUsage, operationCost, timeToFirstToken, reviewerSpanCtx, {
 				ciAttrs,
 				runId,
 				configuredModel: runMeta.get(runId)?.model,
@@ -5694,7 +5787,7 @@ async function loadDefaultRuntime() {
 	const [sdkNode, resources, semconv] = modules;
 	const serviceResource = resources.resourceFromAttributes({
 		[semconv.ATTR_SERVICE_NAME ?? "service.name"]: SERVICE_NAME,
-		[semconv.ATTR_SERVICE_VERSION ?? "service.version"]: "0.9.6"
+		[semconv.ATTR_SERVICE_VERSION ?? "service.version"]: "0.9.7"
 	});
 	applyOtelExporterDefaults(process.env);
 	const sdk = new sdkNode.NodeSDK({ resource: resources.defaultResource().merge(serviceResource) });
@@ -6166,7 +6259,7 @@ function boldCommentTitle(body) {
 */
 function buildCommentBody(body, commitSha, confidence) {
 	const confidenceLine = `_Confidence: ${confidence}._`;
-	const footer = `<sub>Reviewed by ${PRODUCT_LINK} v0.9.6 for commit ${commitSha}.</sub>`;
+	const footer = `<sub>Reviewed by ${PRODUCT_LINK} v0.9.7 for commit ${commitSha}.</sub>`;
 	return `${boldCommentTitle(body.trim())}\n\n${confidenceLine}\n\n---\n\n${footer}`;
 }
 function buildPayload(comment, body, refs, resolved) {
@@ -6745,7 +6838,7 @@ function createPlatform(config) {
 * assumed to be GitLab (`/<repo>/-/blob/<ref>/<path>`), which covers both
 * gitlab.com and the self-hosted instances this tool mostly runs against.
 */
-var GITHUB_HOSTS = new Set(["github.com", "www.github.com"]);
+var GITHUB_HOSTS = /* @__PURE__ */ new Set(["github.com", "www.github.com"]);
 /** Percent-encode each path segment while keeping the `/` separators intact. */
 function encodePath(path) {
 	return path.split("/").filter(Boolean).map((segment) => encodeURIComponent(segment)).join("/");
@@ -6796,7 +6889,7 @@ function gitRepoWebUrl(cloneUrl) {
 */
 function skillSourceUrl(origin, context = {}) {
 	switch (origin.kind) {
-		case "builtin": return blobUrl(PRODUCT_URL, "0.9.6", `skills/${origin.name}/SKILL.md`);
+		case "builtin": return blobUrl(PRODUCT_URL, "0.9.7", `skills/${origin.name}/SKILL.md`);
 		case "project":
 			if (!context.projectWebUrl || !context.commitSha) return void 0;
 			return blobUrl(context.projectWebUrl, context.commitSha, `${origin.path}/SKILL.md`);
@@ -7375,10 +7468,10 @@ async function main(argv = process.argv.slice(2)) {
 		return;
 	}
 	if (argv.includes("--version") || argv.includes("-v")) {
-		console.log("0.9.6");
+		console.log("0.9.7");
 		return;
 	}
-	process.stderr.write(`[code-review] @weareikko/code-review v0.9.6\n`);
+	process.stderr.write(`[code-review] @weareikko/code-review v0.9.7\n`);
 	assertNodeVersion();
 	applyCodeReviewEnvPrefix();
 	applyDefaultCacheRetention();
@@ -7401,4 +7494,4 @@ if (isDirectRun()) main().catch((error) => {
 //#endregion
 export { normalizeBody as $, SUMMARY_HISTORY_END as A, buildSummaryHistoryEntries as B, createDiagnosticContext as C, traceDiagnosticPhase as D, traceDiagnostic as E, SUMMARY_MARKER as F, findExistingSummaryNoteId as G, extractSummaryHistoryEntries as H, buildArchivedSummaryEntry as I, upsertSummaryNote as J, stripSummaryHistory as K, buildReviewedCommitFooter as L, SUMMARY_HISTORY_ENTRY_START as M, SUMMARY_HISTORY_LIMIT as N, normalizeSeverity as O, SUMMARY_HISTORY_START as P, fingerprints as Q, buildSizeNoticeBlock as R, DIAGNOSTIC_CHANNEL_PREFIX as S, diagnosticChannels as T, findExistingReviewedCommitSha as U, extractReviewedCommitSha as V, findExistingSummaryNote as W, extractDiffHunkContext as X, appendFingerprintMarkers as Y, extractExistingFingerprints as Z, filterDiff as _, main as a, resolveSkillCacheDir as at, parseReviewMarkdownWithWarnings as b, blobUrl as c, skillDisplayName as d, sha256 as et, skillSourceUrl as f, startOtelBridge as g, isOtelEnabled as h, formatUsageLine as i, resolveNpmSkillDir as it, SUMMARY_HISTORY_ENTRY_END as j, toGitLabReviewSeverity as k, formatSkillLink as l, buildPayload as m, formatPerModelUsage as n, loadNamedSkill as nt, run as o, buildGeneratedComments as p, stripSummaryMarker as q, formatSkillsFooter as r, parseSkillSpec as rt, withHttpStamping as s, countPostedBySeverity as t, gitSkillCacheKey as tt, gitRepoWebUrl as u, runReview as v, createDiagnosticRunId as w, DIAGNOSTIC_CHANNEL_NAMES as x, parseReviewMarkdown as y, buildSummaryBody as z };
 
-//# sourceMappingURL=cli-D6vNV3kA.js.map
+//# sourceMappingURL=cli-m4pS6_5q.js.map