argus-reviewer-e2e 0.3.0 → 0.3.1

package/action/action.yml

@@ -51,6 +51,10 @@ inputs:
     description: Cap on inline review comments posted per run; overflow is summarized in the sticky. Overrides review.maxComments when set.
     default: ''
     required: false
+  code-model:
+    description: Optional OpenRouter model slug for code review (e.g. openai/gpt-5-mini). Wins over the checkout's config code_model — including on pull_request events, where PR config never executes.
+    default: ''
+    required: false
   install-consumer-dependencies:
     description: Explicitly install the consumer project's dependencies for a trusted runtime lane. Disabled by default so code review never runs PR-controlled lifecycle scripts beside secrets.
     default: 'false'
@@ -138,6 +142,7 @@ runs:
         ARGUS_BROWSER: ${{ inputs.browser }}
         ARGUS_BUDGET_USD: ${{ inputs.budget-usd }}
         ARGUS_MAX_COMMENTS: ${{ inputs.max-comments }}
+        ARGUS_CODE_MODEL: ${{ inputs.code-model }}
       run: node "$ARGUS_ACTION_PATH/bootstrap.mjs"
 
     - name: Reject executable lanes on untrusted pull requests
@@ -204,6 +209,7 @@ runs:
         ARGUS_DEBUG: '1'
         ARGUS_DIFF_BASE: ${{ inputs.diff-base }}
         ARGUS_BUDGET_USD: ${{ inputs.budget-usd }}
+        ARGUS_CODE_MODEL: ${{ inputs.code-model }}
         ARGUS_REVIEWER_TRACE: >-
           {"repo":"${{ github.repository }}",
           "pr":"${{ github.event.pull_request.number }}",

package/action/bootstrap.mjs

@@ -13,6 +13,7 @@ import {
   setActionOutput,
   validateBrowser,
   validateBudget,
+  validateCodeModel,
   validateMaxComments,
   validatePathInput,
   validateVersion,
@@ -29,6 +30,7 @@ const reportDir = validatePathInput(
 validateBrowser(process.env.ARGUS_BROWSER || 'chromium')
 validateBudget(process.env.ARGUS_BUDGET_USD)
 validateMaxComments(process.env.ARGUS_MAX_COMMENTS)
+validateCodeModel(process.env.ARGUS_CODE_MODEL)
 
 async function stageConfig() {
   if (configInput === '' || configInput === 'argus-reviewer.config.ts') return

package/action/runtime.mjs

@@ -93,6 +93,18 @@ export function validateMaxComments(raw) {
   return Number(raw)
 }
 
+export function validateCodeModel(raw) {
+  if (raw === undefined || raw === '') return undefined
+  const value = String(raw).trim()
+  // OpenRouter slugs are `vendor/model` with an optional `:variant`
+  // (`deepseek/deepseek-r1:free`). Env-only value — no shell — but keep it
+  // to slug-shaped input so typos surface here instead of at the API.
+  if (!/^[A-Za-z0-9][A-Za-z0-9._:/-]{0,199}$/.test(value)) {
+    throw new Error('code-model must be an OpenRouter model slug (e.g. openai/gpt-5-mini)')
+  }
+  return value
+}
+
 export function resolveWorkingDirectory(workspace, input) {
   const root = realpathSync(resolve(workspace))
   const requested = String(input ?? '').trim()

package/dist/cli.js

@@ -1135,6 +1135,12 @@ async function cmdCodeReview(args, ctx, deps) {
     // (github.event.pull_request.number is empty), and '' is not nullish.
     const pr = fixtureDir !== undefined ? '0' : trace?.pr || trustResult.pr;
     const token = ctx.env.GITHUB_TOKEN ?? ctx.env.GH_TOKEN;
+    // ARGUS_CODE_MODEL is an operator surface (workflow/plugin env) and wins
+    // over checkout config — in the untrusted lane it is the only way to pick
+    // the review model, since PR-controlled config never executes.
+    const envCodeModel = ctx.env.ARGUS_CODE_MODEL?.trim();
+    if (envCodeModel !== undefined && envCodeModel !== '')
+        config.code_model = envCodeModel;
     const model = config.code_model ?? config.model;
     debug('code-review', `repo=${repo ?? 'none'} pr=${pr ?? 'none'} model=${model} budget=${config.codeReviewBudgetUsd ?? 'unlimited'}`);
     const skip = async (reason) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "argus-reviewer-e2e",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "argus-reviewer — open-source vision-model E2E testing harness. Record, replay, heal, and assert with any OpenRouter model under a hard budget cap.",
   "type": "module",
   "license": "MIT",