diffpal 0.1.48

package/LICENSE

@@ -0,0 +1,19 @@
+Copyright 2026 DiffPal contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,137 @@
+# DiffPal
+
+[![ci](https://github.com/diffpal/diffpal/actions/workflows/ci.yml/badge.svg)](https://github.com/diffpal/diffpal/actions/workflows/ci.yml)
+[![diffpal-dev review](https://github.com/diffpal/diffpal/actions/workflows/diffpal-dev-review.yml/badge.svg)](https://github.com/diffpal/diffpal/actions/workflows/diffpal-dev-review.yml)
+[![npm](https://img.shields.io/npm/v/@diffpal/diffpal?label=npm)](https://www.npmjs.com/package/@diffpal/diffpal)
+[![license: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
+[![Product Hunt](https://img.shields.io/badge/Product%20Hunt-DA552F?logo=producthunt&logoColor=white)](https://www.producthunt.com/products/diffpal)
+
+**Open-source AI pull request review that runs in your CI.**
+
+DiffPal is for teams that want AI review feedback without adopting a mandatory
+hosted review service. Bring Codex, Copilot, OpenCode, another supported
+provider, or any ACP-compatible agent, and keep one review workflow across
+GitHub, GitLab, and Azure DevOps.
+
+[Quickstart](docs/getting-started/github-quickstart.md) ·
+[Documentation](docs/README.md) ·
+[Live Demo](https://github.com/diffpal/demo/pull/13) ·
+[Security](docs/security.md) ·
+[GitHub](https://github.com/diffpal/diffpal)
+
+## What Users Get
+
+| Output | Where it shows up |
+| --- | --- |
+| PR/MR summary | GitHub reviews, GitLab summaries, Azure PR threads |
+| Actionable findings | Inline comments, discussions, or PR threads on changed lines |
+| Machine-readable artifacts | Findings JSON, summary Markdown, SARIF, and Code Quality reports |
+| Optional merge gates | CI exit status, checks, commit statuses, or PR statuses |
+
+## Why DiffPal
+
+- **Runs in your CI:** review happens in the workflow you already control.
+- **Provider choice:** use the default Codex copy-paste setup, another supported
+  provider, or an ACP-compatible agent with the same DiffPal workflow.
+- **Repository-owned configuration:** review policy, instructions, artifacts,
+  and gates live with the codebase.
+- **No mandatory hosted service:** DiffPal standardizes review output without
+  requiring a hosted DiffPal review platform.
+
+## Minimal GitHub Quickstart
+
+Generate a GitHub Actions config with the default Codex API-key recipe:
+
+```bash
+npx -y @diffpal/diffpal@latest init --wizard --setup codex-api-key --platform github
+```
+
+Add `OPENAI_API_KEY` as a repository secret, then download the workflow:
+
+`OPENAI_API_KEY` is a provider credential. DiffPal runs in your CI and sends
+review input to the provider you configure, so keep this secret out of
+untrusted fork PR jobs.
+
+```bash
+mkdir -p .github/workflows
+curl -fsSL \
+  https://raw.githubusercontent.com/diffpal/diffpal/main/examples/ci/github-actions/codex-api-key.yml \
+  -o .github/workflows/diffpal.yml
+```
+
+Open a same-repository pull request. After the first successful run, expect a
+`DiffPal Review Summary`, inline findings when actionable issues exist, and
+the retained `diffpal-review` artifact containing
+`.artifacts/diffpal/findings.json`.
+
+For full setup details, provider alternatives, and fork PR guidance, use the
+[GitHub quickstart](docs/getting-started/github-quickstart.md).
+
+## Review Before Committing
+
+Run the latest published CLI directly:
+
+```bash
+npx -y @diffpal/diffpal@latest --profile local review uncommitted
+```
+
+The command changes the provider task: the backend inspects the uncommitted
+state in its workspace snapshot with its own tools. DiffPal does not construct a
+second Git snapshot or pass changed files one by one. See the
+[CLI reference](docs/reference/cli.md#diffpal-review-uncommitted).
+
+## Coding-Agent Plugin
+
+DiffPal includes an instruction-only plugin for Codex, Claude Code, Grok Build,
+GitHub Copilot CLI, Cursor, OpenCode, and Agent Plugins 1.0.0 clients. Its three
+skills configure separate local and CI profiles, run review with explicit
+provider/publishing boundaries, and merge safe CI automation for GitHub,
+GitLab, Azure, or custom runners.
+
+See the [plugin guide](plugins/diffpal/README.md) for host installation and the
+exact setup, review, and CI skill names.
+
+## Supported Integrations
+
+| Host | Native outputs | Guide |
+| --- | --- | --- |
+| GitHub Actions | PR review summary, file-level review comments, SARIF | [GitHub Actions](docs/integrations/github-actions.md) |
+| GitLab CI | MR summary, discussions, Code Quality, SARIF, status | [GitLab CI](docs/integrations/gitlab-ci.md) |
+| Azure Pipelines | PR summary thread, PR threads, PR status | [Azure Pipelines](docs/integrations/azure-pipelines.md) |
+| Custom CI/CD | Artifact-only review, or publishing through a supported code host | [Custom CI/CD](docs/integrations/custom-ci.md) |
+
+GitHub users can also install the
+[DiffPal Review action](https://github.com/marketplace/actions/diffpal-review).
+Azure users can install the
+[DiffPal Review extension](https://marketplace.visualstudio.com/items?itemName=diffpal.diffpal).
+
+## Documentation By Goal
+
+| Goal | Start here |
+| --- | --- |
+| Run the first GitHub review | [GitHub quickstart](docs/getting-started/github-quickstart.md) |
+| Confirm the first run worked | [Verify First Review](docs/getting-started/verify-first-review.md) |
+| Improve a working setup | [Next Steps](docs/getting-started/next-steps.md) |
+| Understand the concepts | [Concepts](docs/concepts/README.md) and [Glossary](docs/reference/glossary.md) |
+| Choose a provider or ACP agent | [Providers](docs/providers/README.md) |
+| Set up GitLab, Azure, or custom CI | [Integrations](docs/integrations/README.md) |
+| Secure secrets and fork PRs | [Secrets and fork PRs](docs/guides/secrets-and-fork-prs.md) |
+| Tune review policy | [Configuration reference](docs/reference/configuration.md) |
+| Consume artifacts or schemas | [Artifacts](docs/reference/artifacts.md) and [findings schema](docs/reference/findings-schema.md) |
+| Debug setup problems | [Troubleshooting](docs/help/troubleshooting.md) |
+| Get quick answers | [FAQ](docs/help/faq.md) |
+| Compare DiffPal to alternatives | [Comparison guide](docs/concepts/comparison.md) |
+
+## Project Status
+
+DiffPal is under active development. The public docs describe the current
+supported workflow and integration surface.
+
+## Contributing
+
+Contributions are welcome. Start with [CONTRIBUTING.md](CONTRIBUTING.md) for
+local setup, verification commands, and repository conventions.
+
+## License
+
+DiffPal is released under the [MIT License](LICENSE).

package/diffpal.js

@@ -0,0 +1,49 @@
+#!/usr/bin/env node
+const path = require('path');
+const os = require('os');
+
+const platform = os.platform();
+const arch = os.arch();
+
+const platformMap = {
+	'darwin': { x64: 'darwin-x64', arm64: 'darwin-arm64' },
+	'linux': { x64: 'linux-x64', arm64: 'linux-arm64' },
+	'win32': { x64: 'win32-x64' }
+};
+
+const archMap = { x64: 'x64', arm64: 'arm64', ia32: 'x86' };
+const cpu = archMap[arch] || arch;
+
+const osKey = platform === 'win32' ? 'win32' : platform;
+const platformKey = platformMap[osKey]?.[cpu];
+
+if (!platformKey) {
+	console.error('Unsupported platform: ' + platform + '/' + cpu);
+	console.error('Expected package: diffpal-<os>-<cpu>');
+	process.exit(1);
+}
+
+const platformPkgName = '@diffpal/diffpal-' + platformKey;
+const binaryName = platform === 'win32' ? 'diffpal.exe' : 'diffpal';
+
+try {
+	const { execFileSync } = require('child_process');
+	const platformPkgJSON = require.resolve(platformPkgName + '/package.json', { paths: [__dirname] });
+	const platformPkgDir = path.dirname(platformPkgJSON);
+	const binaryPath = path.join(platformPkgDir, 'bin', binaryName);
+	process.exit(execFileSync(binaryPath, process.argv.slice(2), { stdio: 'inherit' }));
+} catch (e) {
+	if (e.code === 'ENOENT') {
+		console.error('Binary not found in package: ' + platformPkgName);
+		console.error('Expected platform package: ' + '@diffpal/diffpal-' + platformKey);
+		console.error('This may be an unsupported platform or installation issue.');
+		process.exit(1);
+	}
+	if (e.code === 'MODULE_NOT_FOUND') {
+		console.error('Platform package not installed: ' + platformPkgName);
+		console.error('Expected platform package: ' + '@diffpal/diffpal-' + platformKey);
+		console.error('Try reinstalling the package, and ensure optional dependencies are enabled.');
+		process.exit(1);
+	}
+	process.exit(e.status || 1);
+}

package/package.json

@@ -0,0 +1,28 @@
+{
+  "bin": {
+    "diffpal": "diffpal.js"
+  },
+  "description": "Meta package for diffpal",
+  "engines": {
+    "node": ">=16"
+  },
+  "files": [
+    "diffpal.js",
+    "README.md",
+    "LICENSE"
+  ],
+  "license": "SEE LICENSE IN LICENSE",
+  "name": "diffpal",
+  "optionalDependencies": {
+    "@diffpal/diffpal-darwin-arm64": "0.1.48",
+    "@diffpal/diffpal-darwin-x64": "0.1.48",
+    "@diffpal/diffpal-linux-arm64": "0.1.48",
+    "@diffpal/diffpal-linux-x64": "0.1.48",
+    "@diffpal/diffpal-win32-x64": "0.1.48"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/diffpal/diffpal.git"
+  },
+  "version": "0.1.48"
+}