co-maintainer 0.5.0 → 0.5.1-beta.2

package/dist/src/cli/commands/rollback.js

@@ -0,0 +1,42 @@
+/** `co-maintainer rollback`: put back the backup an upgrade took.
+ *
+ * Only the previous version, and only while the version that made the backup
+ * is the one running, because that is the code that knows both the old and the
+ * new structure. Data written since the upgrade is lost, so it asks first. */
+import { CliError, EXIT_USAGE } from "../error.js";
+import { askConfirm } from "../prompt.js";
+import { unknownOptionMessage } from "./registry.js";
+import { canPrompt } from "../../tools/codegraph.js";
+import { VERSION } from "../../version.js";
+import { backupPaths, liveLockPid } from "../../store/app_db.js";
+import { checkRollback, restoreBackup, rolledBackDir, } from "../../store/backup.js";
+export async function runRollback(args) {
+    for (const arg of args) {
+        if (arg !== "--yes") {
+            throw new CliError("usage", unknownOptionMessage(arg, "rollback"));
+        }
+    }
+    const paths = backupPaths();
+    const manifest = await checkRollback(paths, VERSION);
+    const pid = await liveLockPid();
+    if (pid !== undefined) {
+        throw new CliError("serve_already_running", `A co-maintainer serve process (pid ${pid}) is using this data directory.`, "Stop it, then run rollback again.", EXIT_USAGE);
+    }
+    console.log(`Rolling back to the backup taken on ${manifest.createdAt}, before the upgrade to ${manifest.toVersion}.`);
+    console.log("Everything written since then is lost: reviews, settings and cache.");
+    console.log(`The current files are kept in ${rolledBackDir(paths)}.`);
+    if (!args.includes("--yes")) {
+        if (!canPrompt()) {
+            throw new CliError("confirmation_required", "Rollback needs your confirmation.", "Run it in a terminal, or pass --yes.", EXIT_USAGE);
+        }
+        if (!(await askConfirm("Roll back?"))) {
+            console.log("Nothing changed.");
+            return;
+        }
+    }
+    await restoreBackup(paths);
+    console.log("Restored.");
+    console.log(manifest.fromVersion
+        ? `Now install that version: npm i -g co-maintainer@${manifest.fromVersion}`
+        : "Now install the version you upgraded from.");
+}

package/dist/src/cli/commands/serve.js

@@ -212,9 +212,8 @@ export async function runServe(args) {
     // Ctrl+C in an interactive terminal fires this reliably everywhere,
     // including Windows. A SIGTERM sent by another process (a process
     // manager, `kill`, `taskkill`) is reliable on Linux but not on Windows,
-    // where it forcibly terminates the process before any handler can run —
-    // see the P3 Live note in PLAN.md. Registering it anyway costs nothing
-    // and is correct wherever it does work.
+    // where it forcibly terminates the process before any handler can run.
+    // Registering it anyway costs nothing and is correct wherever it does work.
     for (const signal of ["SIGINT", "SIGTERM"]) {
         process.on(signal, () => void shutdown(signal));
     }

package/dist/src/cli/commands/set.js

@@ -1,8 +1,11 @@
 import { readConfig, configPath, writeUserConfig } from "../../config.js";
 import { hashPassword, passwordProblem } from "../../util/password.js";
 import { readTextFile } from "../../util/runtime.js";
-import { verifyOpenRouter } from "../../ai/verify.js";
+import { verifyAnthropic, verifyOpenAi, verifyOpenRouter, } from "../../ai/verify.js";
+import { verifyOpenCode } from "../../ai/opencode.js";
 import { die } from "../error.js";
+import { parsePolicy } from "../../services/review_policy.js";
+import { AI_PROVIDERS, rejectRetiredProvider } from "../../ai/provider.js";
 import { renderCommandHelp, renderGlobalHelp } from "./registry.js";
 function text(args, name) {
     return args
@@ -17,6 +20,7 @@ const secretFields = new Set([
     "githubOAuthClientSecret",
     "remoteToken",
     "dashboardPasswordHash",
+    "remoteByok",
 ]);
 /** `co-maintainer set --token=... --ai=... --low-model=... --high-model=...
  * --auth=... --github-app-id=... --github-app-private-key=... (or
@@ -50,6 +54,11 @@ export async function runSet(args) {
         "enable-auth",
         "remote-host",
         "remote-token",
+        "remote-byok-policy",
+        "remote-byok",
+        "remote-byok-default",
+        "review-policy",
+        "review-policy-file",
         "review-blocking",
         "password",
         "unset",
@@ -64,8 +73,9 @@ export async function runSet(args) {
         }
     }
     const ai = text(args, "ai");
-    if (ai && !["none", "openrouter", "hetzner"].includes(ai)) {
-        die("--ai must be one of: none, openrouter, hetzner");
+    rejectRetiredProvider(ai);
+    if (ai && !AI_PROVIDERS.includes(ai)) {
+        die(`--ai must be one of: ${AI_PROVIDERS.join(", ")}`);
     }
     const auth = text(args, "auth");
     if (auth && !["gh", "pat"].includes(auth)) {
@@ -98,6 +108,10 @@ export async function runSet(args) {
         "enable-auth": "githubAuthEnabled",
         "remote-host": "remoteHost",
         "remote-token": "remoteToken",
+        "remote-byok-policy": "remoteByokPolicy",
+        "remote-byok": "remoteByok",
+        "remote-byok-default": "remoteByokDefault",
+        "review-policy": "reviewPolicy",
         "review-blocking": "reviewBlocking",
         password: "dashboardPasswordHash",
     };
@@ -181,6 +195,47 @@ export async function runSet(args) {
     const remoteToken = text(args, "remote-token");
     if (remoteToken)
         patch.remoteToken = remoteToken;
+    const remoteByokPolicy = text(args, "remote-byok-policy");
+    if (remoteByokPolicy) {
+        if (!["off", "allow", "require"].includes(remoteByokPolicy)) {
+            die("--remote-byok-policy must be one of: off, allow, require");
+        }
+        patch.remoteByokPolicy = remoteByokPolicy;
+    }
+    const remoteByok = text(args, "remote-byok");
+    if (remoteByok)
+        patch.remoteByok = remoteByok;
+    const remoteByokDefault = text(args, "remote-byok-default");
+    if (remoteByokDefault) {
+        if (!["on", "off"].includes(remoteByokDefault)) {
+            die("--remote-byok-default must be one of: on, off");
+        }
+        patch.remoteByokDefault = remoteByokDefault === "on";
+    }
+    const reviewPolicy = text(args, "review-policy");
+    const reviewPolicyFile = text(args, "review-policy-file");
+    if (reviewPolicy && reviewPolicyFile) {
+        die("Pass only one of --review-policy or --review-policy-file");
+    }
+    if (reviewPolicy) {
+        const checked = parsePolicy(reviewPolicy);
+        if (!checked.ok)
+            die(`--review-policy: ${checked.problem}`);
+        patch.reviewPolicy = reviewPolicy;
+    }
+    if (reviewPolicyFile) {
+        let parsed;
+        try {
+            parsed = JSON.parse(await readTextFile(reviewPolicyFile));
+        }
+        catch (error) {
+            die(`Could not read a JSON policy from ${reviewPolicyFile}: ${String(error)}`);
+        }
+        const checked = parsePolicy(parsed);
+        if (!checked.ok)
+            die(`--review-policy-file: ${checked.problem}`);
+        patch.reviewPolicy = parsed;
+    }
     const reviewBlocking = text(args, "review-blocking");
     if (reviewBlocking) {
         if (!["model", "severity"].includes(reviewBlocking)) {
@@ -199,11 +254,12 @@ export async function runSet(args) {
         die("Nothing to set. Pass --token= (or --ai-key=), --ai=, --low-model=, --high-model=, --auth=, --github-pat=, " +
             "--github-app-id=, --github-app-private-key(-file|-path)=, --github-webhook-secret=, " +
             "--github-oauth-client-id=, --github-oauth-client-secret=, --github-oauth-allowed-user=, " +
-            "--remote-host=, --remote-token=, --review-blocking=model|severity, " +
+            "--remote-host=, --remote-token=, --remote-byok-policy=off|allow|require, " +
+            "--review-blocking=model|severity, " +
             "--password=, --disable-auth=password, --enable-auth=github, or --unset=name");
     }
     // Verify the key and model before writing, so a typo fails here instead of
-    // after a review has already fetched and cloned the pull request (CORE-22).
+    // after a review has already fetched and cloned the pull request.
     // A field present in the patch wins, including when its value is `undefined`
     // — that is an unset, and there is nothing left to verify.
     const before = readConfig();
@@ -211,8 +267,16 @@ export async function runSet(args) {
     const effectiveAi = effective("ai");
     const effectiveToken = effective("token");
     const effectiveHighModel = effective("highModel");
-    if (verify && effectiveAi === "openrouter" && effectiveToken) {
-        const result = await verifyOpenRouter(String(effectiveToken), effectiveHighModel === undefined ? undefined : String(effectiveHighModel));
+    const verifiers = {
+        openrouter: verifyOpenRouter,
+        openai: verifyOpenAi,
+        anthropic: verifyAnthropic,
+        "opencode-zen": (key, model) => verifyOpenCode("opencode-zen", key, model),
+        "opencode-go": (key, model) => verifyOpenCode("opencode-go", key, model),
+    };
+    const verifyProvider = typeof effectiveAi === "string" ? verifiers[effectiveAi] : undefined;
+    if (verify && verifyProvider && effectiveToken) {
+        const result = await verifyProvider(String(effectiveToken), effectiveHighModel === undefined ? undefined : String(effectiveHighModel));
         if (result.status === "rejected")
             throw result.error;
         if (result.status === "unreachable") {

package/dist/src/cli/commands/view.js

@@ -1,13 +1,13 @@
-/** `co-maintainer view`: print the guides co-maintainer already generated
- * (CORE-23, F25). Read-only — the counterpart to `config` for the generated
+/** `co-maintainer view`: print the guides co-maintainer already generated.
+ * Read-only — the counterpart to `config` for the generated
  * knowledge rather than the settings.
  *
- * Two sources, one presentation (CORE-44): the guide directory on this machine,
+ * Two sources, one presentation: the guide directory on this machine,
  * or the servers a remote review token can read (`--remote`). Local and remote
  * differ only in where the guide list comes from, so `--list`, a single guide
  * and the every-guide headers are all rendered by the same code.
  *
- * Naming: the plan calls the guide kinds `skill`, `codebase`,
+ * Naming: the guide kinds are `skill`, `codebase`,
  * `review-guide`, `detailed-guide`; `--list` and the headers show the real
  * file names, and a kind name is accepted too so a user never has to type
  * `PR_REVIEW_GUIDE.md` unless they want to. */
@@ -16,7 +16,7 @@ import { detectRemoteRepo } from "../../local/git_ops.js";
 import { CliError, EXIT_USAGE } from "../error.js";
 import { renderCommandHelp, unknownOptionMessage } from "./registry.js";
 import { readDir, readTextFile, stat } from "../../util/runtime.js";
-import { baseUrl, die, readApiError, remoteFetch } from "../../remote/http.js";
+import { baseUrl, die, readApiError, remoteFetch, remoteFromEnv, } from "../../remote/http.js";
 /** The four generated guides, in the order a reader wants them: the
  * contribution skill first, then the codebase notes, then the two review
  * guides (short, then the evidence behind it). */
@@ -26,7 +26,7 @@ const GUIDES = [
     { kind: "review-guide", file: "PR_REVIEW_GUIDE.md" },
     { kind: "detailed-guide", file: "PR_REVIEW_DETAILED_GUIDE.md" },
 ];
-/** Resolves a user-supplied name to a guide. Accepts the plan's kind names
+/** Resolves a user-supplied name to a guide. Accepts the kind names
  * (`review-guide`), the file name (`PR_REVIEW_GUIDE.md`), and the bare stem
  * (`PR_REVIEW_GUIDE`), case-insensitively. */
 function resolveGuide(name) {
@@ -88,13 +88,14 @@ async function readLocalGuides(repo) {
     }
     return guides;
 }
-/** The guides a remote review server holds for `repo` (CORE-44). The token is
+/** The guides a remote review server holds for `repo`. The token is
  * the same one `review --remote` uses, so a host already configured for remote
  * review needs no extra setup. */
 async function readRemoteGuides(repo) {
     const config = readConfig();
-    const host = config.remoteHost;
-    const token = config.remoteToken;
+    const fromEnv = remoteFromEnv();
+    const host = fromEnv.host ?? config.remoteHost;
+    const token = fromEnv.token ?? config.remoteToken;
     if (!host || !token) {
         die("remote_not_configured", "Remote review is not configured.", "co-maintainer config set remote-host https://your-server " +
             "&& co-maintainer config set remote-token <token>");

package/dist/src/cli/error.d.ts

@@ -1,4 +1,4 @@
-/** One error shape for every CLI failure (CORE-10).
+/** One error shape for every CLI failure.
  *
  * The message is the first line the user reads, `hint` is an optional
  * follow-up line printed as `Hint: ...`, and `exitCode` is the documented
@@ -27,13 +27,13 @@ export declare function die(message: string, code?: string): never;
  * of the intended code. Every provider and remote call uses fetch, so this is
  * reachable from any error path after a request. Setting `exitCode` and letting
  * the loop empty is what the probe confirms is crash-free and immediate (the
- * undici pool does not keep the process alive). CORE-11. */
+ * undici pool does not keep the process alive). */
 export declare function exitWith(code: number): void;
 /** Renders an error the way the CLI prints it: the message, then `Hint: ...`
  * when there is one. Used where an error becomes a log line rather than the
- * top-level exit (CORE-12), so a hint is not lost just because the failure was
+ * top-level exit, so a hint is not lost just because the failure was
  * quarantined. */
 export declare function formatError(error: unknown): string;
-/** A failed `fetch` as a message that names the host and the cause (CORE-12).
+/** A failed `fetch` as a message that names the host and the cause.
  * Node's own text is only `fetch failed`, which says neither. */
 export declare function networkFailure(url: string, error: unknown): CliError;

package/dist/src/cli/error.js

@@ -1,4 +1,4 @@
-/** One error shape for every CLI failure (CORE-10).
+/** One error shape for every CLI failure.
  *
  * The message is the first line the user reads, `hint` is an optional
  * follow-up line printed as `Hint: ...`, and `exitCode` is the documented
@@ -35,13 +35,13 @@ export function die(message, code = "usage") {
  * of the intended code. Every provider and remote call uses fetch, so this is
  * reachable from any error path after a request. Setting `exitCode` and letting
  * the loop empty is what the probe confirms is crash-free and immediate (the
- * undici pool does not keep the process alive). CORE-11. */
+ * undici pool does not keep the process alive). */
 export function exitWith(code) {
     process.exitCode = code;
 }
 /** Renders an error the way the CLI prints it: the message, then `Hint: ...`
  * when there is one. Used where an error becomes a log line rather than the
- * top-level exit (CORE-12), so a hint is not lost just because the failure was
+ * top-level exit, so a hint is not lost just because the failure was
  * quarantined. */
 export function formatError(error) {
     if (error instanceof CliError) {
@@ -49,7 +49,7 @@ export function formatError(error) {
     }
     return error instanceof Error ? error.message : String(error);
 }
-/** A failed `fetch` as a message that names the host and the cause (CORE-12).
+/** A failed `fetch` as a message that names the host and the cause.
  * Node's own text is only `fetch failed`, which says neither. */
 export function networkFailure(url, error) {
     const code = error.cause?.code;

package/dist/src/cli/main.d.ts

@@ -1,8 +1,8 @@
 export declare function run(args: string[]): Promise<void>;
-/** The single place a CLI error turns into output and an exit code (CORE-10).
+/** The single place a CLI error turns into output and an exit code.
  * The message's first line and the optional `Hint:` line keep the 0.4.13
  * shape. With `--json` the error goes to stdout as `schemaVersion 1` JSON, the
- * same shape local review already used. CORE-11 later replaces the direct
- * `process.exit` with `exitCode` plus handle cleanup, which is why that work is
- * separate. */
+ * same shape local review already used. The exit goes through `exitWith`,
+ * which sets `exitCode` and lets open handles drain instead of calling
+ * `process.exit`. */
 export declare function reportCliError(error: unknown): void;

package/dist/src/cli/main.js

@@ -1,7 +1,8 @@
 /** CLI dispatch only. Each branch parses nothing itself beyond `args[0]` and
- * calls straight into a command or a service — see PLAN.md Section 3. */
+ * calls straight into a command or a service. */
 import { parseArgs } from "./args.js";
 import { runServe } from "./commands/serve.js";
+import { runRollback } from "./commands/rollback.js";
 import { runSet } from "./commands/set.js";
 import { runConfig } from "./commands/config.js";
 import { runView } from "./commands/view.js";
@@ -13,7 +14,7 @@ import { CliError, EXIT_RUNTIME, exitWith } from "./error.js";
 import { findCommand, renderCommandHelp, renderGlobalHelp, unknownCommandMessage, } from "./commands/registry.js";
 /** Every command's help is rendered from the registry, so a new flag cannot
  * drift out of it. `help <command>`, `<command> --help` and `<command> -h` all
- * land here and all exit 0 (CORE-20). */
+ * land here and all exit 0. */
 function printHelpFor(name) {
     const help = renderCommandHelp(name);
     console.log(help ?? renderGlobalHelp());
@@ -38,7 +39,7 @@ function handleHelp(args) {
         return true;
     }
     // `<command> --help` without a repo: `serve --help` and `set --help` must not
-    // reach their handlers, which would start a server or demand a flag (CORE-20).
+    // reach their handlers, which would start a server or demand a flag.
     if (first && (args.includes("--help") || args.includes("-h"))) {
         const spec = findCommand(first);
         if (spec) {
@@ -71,12 +72,16 @@ export async function run(args) {
         await runServe(args.slice(1));
         return;
     }
+    if (args[0] === "rollback") {
+        await runRollback(args.slice(1));
+        return;
+    }
     if (args[0] === "review") {
         await runReviewFromCli(args.slice(1));
         return;
     }
     // An unknown command is a usage error with a suggestion, and it must resolve
-    // through the registry so hidden aliases still work (CORE-20).
+    // through the registry so hidden aliases still work.
     if (args[0] && !args[0].startsWith("-") && !findCommand(args[0])) {
         throw new CliError("usage", unknownCommandMessage(args[0]));
     }
@@ -86,12 +91,12 @@ export async function run(args) {
     else
         await runInitOrRemake(options);
 }
-/** The single place a CLI error turns into output and an exit code (CORE-10).
+/** The single place a CLI error turns into output and an exit code.
  * The message's first line and the optional `Hint:` line keep the 0.4.13
  * shape. With `--json` the error goes to stdout as `schemaVersion 1` JSON, the
- * same shape local review already used. CORE-11 later replaces the direct
- * `process.exit` with `exitCode` plus handle cleanup, which is why that work is
- * separate. */
+ * same shape local review already used. The exit goes through `exitWith`,
+ * which sets `exitCode` and lets open handles drain instead of calling
+ * `process.exit`. */
 export function reportCliError(error) {
     const cli = error instanceof CliError
         ? error

package/dist/src/cli/prompt.js

@@ -7,7 +7,7 @@ import { createInterface } from "node:readline/promises";
 /** Asks one question and always settles.
  *
  * `rl.question` never settles when stdin reaches EOF before an answer, which
- * is the F01 hang: `co-maintainer review </dev/null` awaited the answer
+ * is the hang: `co-maintainer review </dev/null` awaited the answer
  * forever, printed `Warning: Detected unsettled top-level await`, and exited
  * 13. Racing the question against `close`/`end` and treating those as "no
  * answer" keeps the caller's fallback path alive instead. */

package/dist/src/cli/review_args.d.ts

@@ -10,10 +10,16 @@ type ReviewFlags = {
     branch?: string;
     repoOverride?: string;
     remakeBeforeReview: boolean;
-    /** `--remote-host` override for this run only (CORE-25). */
+    /** `--remote-host` override for this run only. */
     remoteHost?: string;
-    /** `--remote-token` override for this run only (CORE-25). */
+    /** `--remote-token` override for this run only. */
     remoteToken?: string;
+    /** `--remote-byok` (`true`) / `--no-remote-byok` (`false`) for this run
+     * only. Unset means "use the configured default". */
+    remoteByok?: boolean;
+    /** `--output=github`: workflow commands and a job summary instead of prose.
+     */
+    output?: "github";
 };
 export type ReviewCliArgs = ({
     mode: "pr";
@@ -27,6 +33,6 @@ export type ReviewCliArgs = ({
 } & ReviewFlags);
 /** Strip local-only flags before `parseArgs` for PR-style options. */
 export declare function filterReviewConfigArgs(raw: string[]): string[];
-/** Parses `co-maintainer review` after the `review` token (plan §8.1). */
+/** Parses `co-maintainer review` after the `review` token. */
 export declare function parseReviewArgs(args: string[]): Promise<ReviewCliArgs>;
 export {};

package/dist/src/cli/review_args.js

@@ -3,8 +3,10 @@ import { die } from "./error.js";
 function reviewFlags(rest) {
     const text = (name) => rest.find((item) => item.startsWith(`--${name}=`))?.slice(name.length + 3);
     // `--remake-before-review` is the 0.4.13 spelling; both names mean the same
-    // thing, and only the new one is documented (CORE-21).
+    // thing, and only the new one is documented.
     const syncBeforeReview = rest.some((arg) => arg === "--sync-before-review" || arg === "--remake-before-review");
+    const remoteByokOn = rest.includes("--remote-byok");
+    const remoteByokOff = rest.includes("--no-remote-byok");
     for (const arg of rest) {
         if (arg === "--codegraph") {
             die("Unknown option: --codegraph");
@@ -13,6 +15,16 @@ function reviewFlags(rest) {
             die("--sync-before-review cannot be used with --remote");
         }
     }
+    if (remoteByokOn && remoteByokOff) {
+        die("--remote-byok and --no-remote-byok cannot both be used");
+    }
+    const output = text("output");
+    if (output !== undefined && output !== "github") {
+        die("--output must be: github");
+    }
+    if (output !== undefined && rest.includes("--json")) {
+        die("--output=github cannot be used with --json");
+    }
     return {
         json: rest.includes("--json"),
         remote: rest.includes("--remote"),
@@ -25,6 +37,8 @@ function reviewFlags(rest) {
         remakeBeforeReview: syncBeforeReview,
         remoteHost: text("remote-host"),
         remoteToken: text("remote-token"),
+        remoteByok: remoteByokOn ? true : remoteByokOff ? false : undefined,
+        output,
     };
 }
 const LOCAL_ONLY_FLAGS = new Set([
@@ -35,6 +49,8 @@ const LOCAL_ONLY_FLAGS = new Set([
     "--fresh",
     "--remake-before-review",
     "--sync-before-review",
+    "--remote-byok",
+    "--no-remote-byok",
 ]);
 /** Strip local-only flags before `parseArgs` for PR-style options. */
 export function filterReviewConfigArgs(raw) {
@@ -45,22 +61,26 @@ export function filterReviewConfigArgs(raw) {
             arg.startsWith("--branch=") ||
             arg.startsWith("--repo=") ||
             arg.startsWith("--remote-host=") ||
-            arg.startsWith("--remote-token=")) {
+            arg.startsWith("--remote-token=") ||
+            arg.startsWith("--output=")) {
             return false;
         }
         return true;
     });
 }
-/** Parses `co-maintainer review` after the `review` token (plan §8.1). */
+/** Parses `co-maintainer review` after the `review` token. */
 export async function parseReviewArgs(args) {
     const positional = args.filter((a) => !a.startsWith("--"));
     const flags = reviewFlags(args);
     // `--remote-host` / `--remote-token` only mean something together with
-    // `--remote`; silently dropping them is exactly the F33 surprise (CORE-25).
+    // `--remote`; silently dropping them is exactly the kind of surprise to avoid.
     if ((flags.remoteHost || flags.remoteToken) && !flags.remote) {
         die("--remote-host and --remote-token require --remote");
     }
-    // `--json` must never prompt (plan §8.7). `parseArgs` only receives the
+    if (flags.remoteByok !== undefined && !flags.remote) {
+        die("--remote-byok requires --remote");
+    }
+    // `--json` must never prompt. `parseArgs` only receives the
     // filtered args, and `--json` is stripped before it sees them, so the flag
     // has to be applied here rather than after the parse returns.
     setCliInteractive(!flags.json);
@@ -71,6 +91,9 @@ export async function parseReviewArgs(args) {
         if (flags.remoteHost || flags.remoteToken) {
             die("--remote-host is only for remote review without a PR number");
         }
+        if (flags.remoteByok !== undefined) {
+            die("--remote-byok is only for remote review without a PR number");
+        }
         const options = await parseArgs([
             "review",
             positional[0],

package/dist/src/cli/review_github.d.ts

@@ -0,0 +1,31 @@
+import { type RunSummary } from "../util/run_summary.ts";
+import { type HumanFinding } from "./review_result.ts";
+/** GitHub shows at most this many error and this many warning annotations per
+ * step and drops the rest without a word. */
+export declare const MAX_ANNOTATIONS_PER_LEVEL = 10;
+/** The message part of a workflow command. GitHub's own toolkit escapes exactly
+ * these three, and a `:` or `,` here would show as `%3A` and `%2C` in the text. */
+export declare function escapeData(value: string): string;
+/** A property value (`file`, `title`) also cannot hold `:` or `,`, which end it. */
+export declare function escapeProperty(value: string): string;
+/** One workflow command per finding still standing, errors first. A finding
+ * that was closed since the last review needs no annotation. */
+export declare function githubAnnotations(findings: HumanFinding[]): string[];
+export type GithubSummaryInput = {
+    /** What was reviewed, for the line under the heading. */
+    title: string;
+    findings: HumanFinding[];
+    /** Cost and time, in the same words the terminal uses. Left out when the run
+     * cannot say. */
+    run?: RunSummary;
+};
+export declare function githubSummary(input: GithubSummaryInput): string;
+/** Appends to `$GITHUB_STEP_SUMMARY` when it is set. A summary that cannot be
+ * written is reported on stderr and never fails the review. */
+export declare function appendStepSummary(markdown: string, path?: string | undefined): void;
+/** The whole `--output=github` output of one finished review. */
+export declare function emitGithubOutput(input: GithubSummaryInput): void;
+/** Progress lines that come from somewhere else (the server's job log) are
+ * printed on stderr, and the runner reads workflow commands from stderr too.
+ * A line that would start one is given a prefix so it stays plain text. */
+export declare function neutralizeCommands(text: string): string;