@zeldrisho/pi-coderabbit-skills 0.0.0 → 0.1.0

package/CHANGELOG.md

@@ -13,5 +13,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 - CodeRabbit `autofix` and `code-review` skills adapted for explicit invocation in Pi.
 
+### Changed
+
+- Hardened autofix review-thread error handling and clarified manual invocation and authentication guidance for CodeRabbit reviews.
+
 [Unreleased]: https://github.com/zeldrisho/pi-packages/compare/pi-coderabbit-skills-v0.1.0...HEAD
 [0.1.0]: https://github.com/zeldrisho/pi-packages/releases/tag/pi-coderabbit-skills-v0.1.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zeldrisho/pi-coderabbit-skills",
-  "version": "0.0.0",
+  "version": "0.1.0",
   "description": "CodeRabbit skills packaged for Pi",
   "keywords": [
     "code-review",
@@ -22,26 +22,16 @@
   },
   "files": [
     "skills",
-    "CHANGELOG.md",
-    "LICENSE"
+    "CHANGELOG.md"
   ],
   "type": "module",
   "publishConfig": {
     "access": "public"
   },
-  "scripts": {
-    "check": "vp check",
-    "test": "vp test",
-    "test:watch": "vp test --watch",
-    "lint": "vp lint",
-    "lint:fix": "vp lint --fix",
-    "format": "vp fmt --write",
-    "typecheck": "vp check --no-fmt --no-lint"
-  },
   "devDependencies": {
-    "typescript": "catalog:",
-    "vite": "catalog:",
-    "vite-plus": "catalog:"
+    "typescript": "^7.0.2",
+    "vite": "npm:@voidzero-dev/vite-plus-core@0.3.3",
+    "vite-plus": "0.3.3"
   },
   "engines": {
     "node": ">=24"
@@ -50,5 +40,14 @@
     "skills": [
       "./skills"
     ]
+  },
+  "scripts": {
+    "check": "vp check",
+    "test": "vp test",
+    "test:watch": "vp test --watch",
+    "lint": "vp lint",
+    "lint:fix": "vp lint --fix",
+    "format": "vp fmt --write",
+    "typecheck": "vp check --no-fmt --no-lint"
   }
-}
+}

package/skills/autofix/SKILL.md

@@ -97,7 +97,7 @@ while :; do
     args+=(-F cursor="$cursor")
   fi
 
-  response=$(gh api graphql "${args[@]}" -f query='query($owner:String!, $repo:String!, $pr:Int!, $cursor:String) {
+  if ! response=$(gh api graphql "${args[@]}" -f query='query($owner:String!, $repo:String!, $pr:Int!, $cursor:String) {
     repository(owner:$owner, name:$repo) {
       pullRequest(number:$pr) {
         title
@@ -124,7 +124,15 @@ while :; do
         }
       }
     }
-  }')
+  }'); then
+    echo "GitHub GraphQL request failed" >&2
+    exit 1
+  fi
+
+  if ! jq -e '(.errors == null or (.errors | length == 0)) and (.data.repository.pullRequest.reviewThreads.nodes | type == "array")' <<<"$response" >/dev/null; then
+    echo "GitHub GraphQL response contained errors or no review-thread data" >&2
+    exit 1
+  fi
 
   all_threads=$(jq -c --argjson response "$response" '
     . + $response.data.repository.pullRequest.reviewThreads.nodes

package/skills/autofix/github.md

@@ -50,7 +50,7 @@ while :; do
     args+=(-F cursor="$cursor")
   fi
 
-  response=$(gh api graphql "${args[@]}" -f query='query($owner:String!, $repo:String!, $pr:Int!, $cursor:String) {
+  if ! response=$(gh api graphql "${args[@]}" -f query='query($owner:String!, $repo:String!, $pr:Int!, $cursor:String) {
     repository(owner:$owner, name:$repo) {
       pullRequest(number:$pr) {
         title
@@ -77,7 +77,15 @@ while :; do
         }
       }
     }
-  }')
+  }'); then
+    echo "GitHub GraphQL request failed" >&2
+    exit 1
+  fi
+
+  if ! jq -e '(.errors == null or (.errors | length == 0)) and (.data.repository.pullRequest.reviewThreads.nodes | type == "array")' <<<"$response" >/dev/null; then
+    echo "GitHub GraphQL response contained errors or no review-thread data" >&2
+    exit 1
+  fi
 
   all_threads=$(jq -c --argjson response "$response" '
     . + $response.data.repository.pullRequest.reviewThreads.nodes

package/skills/code-review/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: code-review
-description: "Run CodeRabbit CLI reviews, retrieve saved local or GitHub PR fix prompts, and interpret CodeRabbit authentication and review output. Use for CodeRabbit review commands, committed/uncommitted or directory scopes, and CodeRabbit runbooks. Default code-review skill: also trigger for explicit code/PR/quality/security review requests or when a review is needed."
+description: "Run CodeRabbit CLI reviews, retrieve saved local or GitHub PR fix prompts, and interpret CodeRabbit authentication and review output. Use for CodeRabbit review commands, committed/uncommitted or directory scopes, and CodeRabbit runbooks."
 disable-model-invocation: true
 ---
 
@@ -60,7 +60,7 @@ Use `--agent` for output optimized for AI agents:
 coderabbit review --agent
 ```
 
-Run the review directly; the CLI starts browser authentication when needed, including a local callback flow in agent mode. Honor explicit no-login restrictions. If the execution environment hides host credentials or cannot open the callback, use the supported host execution path or hand off `coderabbit auth login`; do not read credential files or request pasted tokens. A sandbox authentication failure alone does not prove the user is logged out on the host.
+Before running the review, ensure that the CLI is authenticated. If authentication is missing, use the supported host execution path or hand off `coderabbit auth login --agent`; do not read credential files or request pasted tokens. A sandbox authentication failure alone does not prove the user is logged out on the host.
 
 If the user asks to review a specific directory, append `--dir <path>`. The directory must be inside an initialized Git working tree.