diffprism 0.38.0 → 0.39.0

package/dist/bin.js

@@ -134,29 +134,81 @@ description: Open current code changes in DiffPrism's browser-based review UI fo
 
 # DiffPrism Review
 
-When the user invokes \`/review\`, call \`mcp__diffprism__open_review\` with:
+You have 9 DiffPrism MCP tools available. Use them proactively \u2014 don't wait for the user to ask.
 
-- \`diff_ref\`: \`"working-copy"\` (or what the user specified, e.g. \`"staged"\`, or a GitHub PR ref like \`"owner/repo#123"\`)
-- \`title\`: Brief summary of the changes
-- \`reasoning\`: Your reasoning about the implementation decisions
-- \`post_to_github\`: Set to \`true\` to post the review back to GitHub (only for PR refs)
+## Workflow 1: Self-Review Before Human Review
 
-The tool blocks until the human submits their review. Handle the result:
+After making multi-file changes, **proactively self-review before requesting human review**:
 
+1. Run \`mcp__diffprism__analyze_diff\` with \`diff_ref: "working-copy"\`
+2. Check the response for:
+   - **Pattern flags** \u2014 console.logs left in, TODO comments, security issues (hardcoded secrets, SQL injection, XSS)
+   - **Test coverage gaps** \u2014 new code paths without corresponding tests
+   - **High complexity scores** \u2014 functions or files with elevated complexity
+3. **Fix any issues found** \u2014 remove debug logs, add missing tests, simplify complex code
+4. Only then open a human review with \`mcp__diffprism__open_review\`
+
+This should happen automatically after significant changes. You don't need the user to ask.
+
+## Workflow 2: Annotated Human Review
+
+When opening a review, help the reviewer by flagging what matters:
+
+1. Call \`mcp__diffprism__open_review\` with:
+   - \`diff_ref\`: \`"working-copy"\` (or what the user specified, e.g. \`"staged"\`, \`"HEAD~3..HEAD"\`)
+   - \`title\`: Brief summary of the changes
+   - \`reasoning\`: Your reasoning about implementation decisions
+   - \`annotations\`: Array of inline findings to pre-populate the review (see tool schema)
+2. Use annotations to flag:
+   - Areas of uncertainty ("I chose approach X over Y because...")
+   - Security-sensitive changes
+   - Performance implications
+   - Anything the reviewer should look at closely
+3. After opening, use \`mcp__diffprism__flag_for_attention\` to highlight files that need careful review (e.g. auth logic, data migrations, public API changes)
+4. Use \`mcp__diffprism__add_annotation\` to post additional findings about specific lines if you discover issues while the review is open
+
+Handle the review result:
 - **\`approved\`** \u2014 Proceed with the task.
 - **\`changes_requested\`** \u2014 Read comments, make fixes, offer to re-review.
 - If \`postReviewAction\` is \`"commit"\` \u2014 commit the changes.
 - If \`postReviewAction\` is \`"commit_and_pr"\` \u2014 commit and open a PR.
 
-## Headless Tools
+## Workflow 3: PR Review
+
+To review a GitHub pull request:
+
+1. Call \`mcp__diffprism__review_pr\` with \`pr: "owner/repo#123"\` or a full GitHub PR URL
+2. Set \`post_to_github: true\` to post the review back to GitHub after the human submits
+3. The tool fetches the PR diff, runs analysis, and opens the review UI
+
+## Tool Reference
+
+### Review Lifecycle
+| Tool | Purpose |
+|------|---------|
+| \`open_review\` | Open browser review UI for local changes. Blocks until submitted. |
+| \`review_pr\` | Open browser review UI for a GitHub PR. Blocks until submitted. |
+| \`get_review_result\` | Fetch result from a previous review (advanced \u2014 \`open_review\` already returns it). |
+| \`update_review_context\` | Push updated reasoning/description to a running review session. |
+
+### Headless Analysis
+| Tool | Purpose |
+|------|---------|
+| \`analyze_diff\` | Returns analysis JSON (patterns, complexity, test gaps) without opening a browser. |
+| \`get_diff\` | Returns structured diff JSON (file-level and hunk-level changes). |
 
-- \`mcp__diffprism__analyze_diff\` \u2014 Returns analysis JSON (patterns, complexity, test gaps) without opening a browser. Use proactively to self-check before requesting review.
-- \`mcp__diffprism__get_diff\` \u2014 Returns structured diff JSON.
+### Annotation & Flagging
+| Tool | Purpose |
+|------|---------|
+| \`add_annotation\` | Post a finding/suggestion/question on a specific line in a running review. |
+| \`flag_for_attention\` | Mark files for human attention with warning annotations. |
+| \`get_review_state\` | Get current state of a review session including all annotations. |
 
 ## Rules
 
-- Only open a review when the user explicitly asks (\`/review\` or "review my changes").
-- Headless tools can be used proactively without user request.
+- **Self-review is proactive** \u2014 run \`analyze_diff\` after significant changes without being asked.
+- **Human review requires explicit request** \u2014 only open \`open_review\` when the user asks (\`/review\`, "review my changes", or as part of a defined workflow like PR creation).
+- **Annotate generously** \u2014 the more context you provide in annotations, the faster the reviewer can make decisions.
 `;
 
 // cli/src/commands/setup.ts
@@ -756,7 +808,7 @@ async function serverStop() {
 
 // cli/src/index.ts
 var program = new Command();
-program.name("diffprism").description("Local-first code review tool for agent-generated changes").version(true ? "0.38.0" : "0.0.0-dev");
+program.name("diffprism").description("Local-first code review tool for agent-generated changes").version(true ? "0.39.0" : "0.0.0-dev");
 program.command("demo").description("Open a sample review to see DiffPrism in action").option("--dev", "Use Vite dev server").action(demo);
 program.command("review [ref]").description("Open a browser-based diff review (local git ref or GitHub PR ref like owner/repo#123)").option("--staged", "Review staged changes").option("--unstaged", "Review unstaged changes").option("-t, --title <title>", "Review title").option("--reasoning <text>", "Agent reasoning about the changes").option("--dev", "Use Vite dev server with HMR instead of static files").option("--post-to-github", "Automatically post review back to GitHub without prompting").action(review);
 program.command("review-pr <pr>", { hidden: true }).action((pr, flags) => review(pr, flags));

package/dist/mcp-server.js

@@ -117,7 +117,7 @@ async function handlePrReview(pr, options) {
 async function startMcpServer() {
   const server = new McpServer({
     name: "diffprism",
-    version: true ? "0.38.0" : "0.0.0-dev"
+    version: true ? "0.39.0" : "0.0.0-dev"
   });
   server.tool(
     "open_review",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "diffprism",
-  "version": "0.38.0",
+  "version": "0.39.0",
   "type": "module",
   "description": "Local-first code review tool for agent-generated code changes",
   "bin": {