ghagga-core 2.0.0

package/dist/memory/privacy.js

@@ -0,0 +1,77 @@
+/**
+ * Privacy-safe text sanitization.
+ *
+ * Strips sensitive data (API keys, tokens, passwords) from text
+ * before it gets persisted to memory. This ensures that even if
+ * a diff contains credentials, they won't be stored in the database.
+ */
+// ─── Patterns ───────────────────────────────────────────────────
+/**
+ * Regex patterns for common secret formats.
+ * Each pattern is paired with a human-readable replacement label.
+ */
+const SENSITIVE_PATTERNS = [
+    // Anthropic API keys
+    { pattern: /sk-ant-[a-zA-Z0-9_-]{20,}/g, replacement: '[REDACTED_ANTHROPIC_KEY]' },
+    // OpenAI API keys (classic sk-... and newer sk-proj-... with internal hyphens)
+    { pattern: /sk-[a-zA-Z0-9_-]{20,}/g, replacement: '[REDACTED_OPENAI_KEY]' },
+    // AWS Access Key IDs
+    { pattern: /AKIA[0-9A-Z]{16}/g, replacement: '[REDACTED_AWS_KEY]' },
+    // AWS Secret Access Keys (typically 40 chars, base64-ish)
+    { pattern: /(?<=AWS_SECRET_ACCESS_KEY\s*=\s*)[A-Za-z0-9/+=]{40}/g, replacement: '[REDACTED_AWS_SECRET]' },
+    // GitHub tokens (classic and fine-grained)
+    { pattern: /ghp_[a-zA-Z0-9]{36,}/g, replacement: '[REDACTED_GITHUB_PAT]' },
+    { pattern: /gho_[a-zA-Z0-9]{36,}/g, replacement: '[REDACTED_GITHUB_OAUTH]' },
+    { pattern: /ghs_[a-zA-Z0-9]{36,}/g, replacement: '[REDACTED_GITHUB_APP]' },
+    { pattern: /ghr_[a-zA-Z0-9]{36,}/g, replacement: '[REDACTED_GITHUB_REFRESH]' },
+    { pattern: /github_pat_[a-zA-Z0-9_]{22,}/g, replacement: '[REDACTED_GITHUB_FINE_PAT]' },
+    // Google API keys
+    { pattern: /AIza[0-9A-Za-z_-]{35}/g, replacement: '[REDACTED_GOOGLE_KEY]' },
+    // Slack tokens
+    { pattern: /xox[bpors]-[0-9a-zA-Z-]{10,}/g, replacement: '[REDACTED_SLACK_TOKEN]' },
+    // Generic Bearer tokens in headers
+    { pattern: /Bearer\s+[a-zA-Z0-9._-]{20,}/gi, replacement: 'Bearer [REDACTED_TOKEN]' },
+    // Generic "password" / "secret" / "token" assignments
+    // Matches: password = "...", PASSWORD: "...", secret: '...', token='...'
+    {
+        pattern: /(?<=(password|secret|token|api_key|apikey|api-key)\s*[:=]\s*['"])[^'"]{8,}(?=['"])/gi,
+        replacement: '[REDACTED]',
+    },
+    // Base64-encoded strings that look like they could be secrets (64+ chars)
+    // Only match when preceded by common secret-related variable names
+    {
+        pattern: /(?<=(SECRET|KEY|TOKEN|CREDENTIAL|PASSWORD)\s*[:=]\s*['"]?)[A-Za-z0-9+/]{64,}={0,2}(?=['"]?)/gi,
+        replacement: '[REDACTED_BASE64]',
+    },
+    // Private keys (PEM format)
+    {
+        pattern: /-----BEGIN (?:RSA |EC |DSA )?PRIVATE KEY-----[\s\S]*?-----END (?:RSA |EC |DSA )?PRIVATE KEY-----/g,
+        replacement: '[REDACTED_PRIVATE_KEY]',
+    },
+    // JWT tokens (three base64url segments separated by dots)
+    {
+        pattern: /eyJ[a-zA-Z0-9_-]{10,}\.eyJ[a-zA-Z0-9_-]{10,}\.[a-zA-Z0-9_-]{10,}/g,
+        replacement: '[REDACTED_JWT]',
+    },
+];
+// ─── Main Function ──────────────────────────────────────────────
+/**
+ * Strip sensitive data from text before persisting to memory.
+ *
+ * Applies all known secret patterns and replaces matches with
+ * human-readable redaction labels. The patterns are applied in
+ * order, so more specific patterns take precedence.
+ *
+ * @param text - The text to sanitize
+ * @returns Sanitized text with secrets replaced by redaction labels
+ */
+export function stripPrivateData(text) {
+    let sanitized = text;
+    for (const { pattern, replacement } of SENSITIVE_PATTERNS) {
+        // Reset regex lastIndex for each application (since we use /g flag)
+        pattern.lastIndex = 0;
+        sanitized = sanitized.replace(pattern, replacement);
+    }
+    return sanitized;
+}
+//# sourceMappingURL=privacy.js.map

package/dist/memory/privacy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy.js","sourceRoot":"","sources":["../../src/memory/privacy.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,mEAAmE;AAEnE;;;GAGG;AACH,MAAM,kBAAkB,GAAoD;IAC1E,qBAAqB;IACrB,EAAE,OAAO,EAAE,4BAA4B,EAAE,WAAW,EAAE,0BAA0B,EAAE;IAElF,+EAA+E;IAC/E,EAAE,OAAO,EAAE,wBAAwB,EAAE,WAAW,EAAE,uBAAuB,EAAE;IAE3E,qBAAqB;IACrB,EAAE,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,oBAAoB,EAAE;IAEnE,0DAA0D;IAC1D,EAAE,OAAO,EAAE,sDAAsD,EAAE,WAAW,EAAE,uBAAuB,EAAE;IAEzG,2CAA2C;IAC3C,EAAE,OAAO,EAAE,uBAAuB,EAAE,WAAW,EAAE,uBAAuB,EAAE;IAC1E,EAAE,OAAO,EAAE,uBAAuB,EAAE,WAAW,EAAE,yBAAyB,EAAE;IAC5E,EAAE,OAAO,EAAE,uBAAuB,EAAE,WAAW,EAAE,uBAAuB,EAAE;IAC1E,EAAE,OAAO,EAAE,uBAAuB,EAAE,WAAW,EAAE,2BAA2B,EAAE;IAC9E,EAAE,OAAO,EAAE,+BAA+B,EAAE,WAAW,EAAE,4BAA4B,EAAE;IAEvF,kBAAkB;IAClB,EAAE,OAAO,EAAE,wBAAwB,EAAE,WAAW,EAAE,uBAAuB,EAAE;IAE3E,eAAe;IACf,EAAE,OAAO,EAAE,+BAA+B,EAAE,WAAW,EAAE,wBAAwB,EAAE;IAEnF,mCAAmC;IACnC,EAAE,OAAO,EAAE,gCAAgC,EAAE,WAAW,EAAE,yBAAyB,EAAE;IAErF,sDAAsD;IACtD,yEAAyE;IACzE;QACE,OAAO,EAAE,sFAAsF;QAC/F,WAAW,EAAE,YAAY;KAC1B;IAED,0EAA0E;IAC1E,mEAAmE;IACnE;QACE,OAAO,EAAE,+FAA+F;QACxG,WAAW,EAAE,mBAAmB;KACjC;IAED,4BAA4B;IAC5B;QACE,OAAO,EAAE,mGAAmG;QAC5G,WAAW,EAAE,wBAAwB;KACtC;IAED,0DAA0D;IAC1D;QACE,OAAO,EAAE,mEAAmE;QAC5E,WAAW,EAAE,gBAAgB;KAC9B;CACF,CAAC;AAEF,mEAAmE;AAEnE;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,IAAI,SAAS,GAAG,IAAI,CAAC;IAErB,KAAK,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,kBAAkB,EAAE,CAAC;QAC1D,oEAAoE;QACpE,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QACtB,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/memory/search.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Memory search — retrieves relevant past observations for prompt injection.
+ *
+ * Builds a search query from the file paths in the current diff,
+ * then uses PostgreSQL full-text search (via ghagga-db) to find
+ * observations from past reviews of the same project.
+ */
+/**
+ * Search past review observations for context relevant to the current diff.
+ *
+ * Returns a formatted string suitable for injection into agent prompts,
+ * or null if no relevant observations are found (or if db is unavailable).
+ *
+ * @param db - Database instance (from ghagga-db). Typed as unknown for loose coupling.
+ * @param project - Project identifier (e.g., "owner/repo")
+ * @param fileList - List of file paths in the current diff
+ * @returns Formatted memory context string, or null
+ */
+export declare function searchMemoryForContext(db: unknown, project: string, fileList: string[]): Promise<string | null>;
+//# sourceMappingURL=search.d.ts.map

package/dist/memory/search.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../src/memory/search.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAqDH;;;;;;;;;;GAUG;AACH,wBAAsB,sBAAsB,CAC1C,EAAE,EAAE,OAAO,EACX,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAAE,GACjB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAiCxB"}

package/dist/memory/search.js

@@ -0,0 +1,76 @@
+/**
+ * Memory search — retrieves relevant past observations for prompt injection.
+ *
+ * Builds a search query from the file paths in the current diff,
+ * then uses PostgreSQL full-text search (via ghagga-db) to find
+ * observations from past reviews of the same project.
+ */
+import { searchObservations } from 'ghagga-db';
+import { formatMemoryContext } from './context.js';
+// ─── Helpers ────────────────────────────────────────────────────
+/**
+ * Build a search query from file paths.
+ *
+ * Extracts meaningful segments from file paths (directory names,
+ * file names without extensions) to use as search terms.
+ *
+ * @example
+ *   ["src/auth/login.ts", "lib/db/pool.ts"]
+ *   → "auth login db pool"
+ */
+function buildSearchQuery(fileList) {
+    const terms = new Set();
+    for (const filePath of fileList) {
+        // Split path into segments
+        const segments = filePath.split('/').filter(Boolean);
+        for (const segment of segments) {
+            // Skip common uninformative directories
+            if (['src', 'lib', 'dist', 'build', 'node_modules', 'test', 'tests'].includes(segment)) {
+                continue;
+            }
+            // Remove file extension and add as a search term
+            const name = segment.replace(/\.[^.]+$/, '');
+            if (name.length > 2) {
+                terms.add(name);
+            }
+        }
+    }
+    return [...terms].slice(0, 10).join(' ');
+}
+// ─── Main Function ──────────────────────────────────────────────
+/**
+ * Search past review observations for context relevant to the current diff.
+ *
+ * Returns a formatted string suitable for injection into agent prompts,
+ * or null if no relevant observations are found (or if db is unavailable).
+ *
+ * @param db - Database instance (from ghagga-db). Typed as unknown for loose coupling.
+ * @param project - Project identifier (e.g., "owner/repo")
+ * @param fileList - List of file paths in the current diff
+ * @returns Formatted memory context string, or null
+ */
+export async function searchMemoryForContext(db, project, fileList) {
+    try {
+        if (!db)
+            return null;
+        const query = buildSearchQuery(fileList);
+        if (!query)
+            return null;
+        // Search with a reasonable limit — we don't want to flood the prompt
+        const observations = await searchObservations(db, project, query, { limit: 8 });
+        if (!observations || observations.length === 0)
+            return null;
+        // Format observations for prompt injection
+        return formatMemoryContext(observations.map((obs) => ({
+            type: obs.type,
+            title: obs.title,
+            content: obs.content,
+        })));
+    }
+    catch (error) {
+        // Memory is optional — never let it break the review pipeline
+        console.warn('[ghagga] Memory search failed (degrading gracefully):', error instanceof Error ? error.message : String(error));
+        return null;
+    }
+}
+//# sourceMappingURL=search.js.map

package/dist/memory/search.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search.js","sourceRoot":"","sources":["../../src/memory/search.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAYnD,mEAAmE;AAEnE;;;;;;;;;GASG;AACH,SAAS,gBAAgB,CAAC,QAAkB;IAC1C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAEhC,KAAK,MAAM,QAAQ,IAAI,QAAQ,EAAE,CAAC;QAChC,2BAA2B;QAC3B,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAErD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,wCAAwC;YACxC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvF,SAAS;YACX,CAAC;YAED,iDAAiD;YACjD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YAC7C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC3C,CAAC;AAED,mEAAmE;AAEnE;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,EAAW,EACX,OAAe,EACf,QAAkB;IAElB,IAAI,CAAC;QACH,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAErB,MAAM,KAAK,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAExB,qEAAqE;QACrE,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAC3C,EAA8C,EAC9C,OAAO,EACP,KAAK,EACL,EAAE,KAAK,EAAE,CAAC,EAAE,CACb,CAAC;QAEF,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAE5D,2CAA2C;QAC3C,OAAO,mBAAmB,CACxB,YAAY,CAAC,GAAG,CAAC,CAAC,GAAgB,EAAE,EAAE,CAAC,CAAC;YACtC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,OAAO,EAAE,GAAG,CAAC,OAAO;SACrB,CAAC,CAAC,CACJ,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,8DAA8D;QAC9D,OAAO,CAAC,IAAI,CACV,uDAAuD,EACvD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/pipeline.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Main review pipeline orchestrator.
+ *
+ * Coordinates the entire review flow:
+ *   1. Validate input
+ *   2. Parse and filter the diff
+ *   3. Detect tech stacks
+ *   4. Run static analysis tools
+ *   5. Search memory for past context
+ *   6. Execute the selected agent mode
+ *   7. Persist new observations to memory
+ *   8. Return the final result
+ *
+ * Each step degrades gracefully — if static analysis fails, or
+ * memory is unavailable, the pipeline continues with what it has.
+ */
+import type { ReviewInput, ReviewResult } from './types.js';
+/**
+ * Run the full review pipeline.
+ *
+ * This is the primary entry point for all review operations.
+ * It orchestrates parsing, analysis, agent execution, and
+ * memory operations in a resilient pipeline that degrades
+ * gracefully when optional components fail.
+ *
+ * @param input - Complete review input with diff, config, and settings
+ * @returns ReviewResult with status, findings, and metadata
+ */
+export declare function reviewPipeline(input: ReviewInput): Promise<ReviewResult>;
+//# sourceMappingURL=pipeline.d.ts.map

package/dist/pipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline.d.ts","sourceRoot":"","sources":["../src/pipeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAYH,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAgB,MAAM,YAAY,CAAC;AA4B1E;;;;;;;;;;GAUG;AACH,wBAAsB,cAAc,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAiK9E"}

package/dist/pipeline.js

@@ -0,0 +1,267 @@
+/**
+ * Main review pipeline orchestrator.
+ *
+ * Coordinates the entire review flow:
+ *   1. Validate input
+ *   2. Parse and filter the diff
+ *   3. Detect tech stacks
+ *   4. Run static analysis tools
+ *   5. Search memory for past context
+ *   6. Execute the selected agent mode
+ *   7. Persist new observations to memory
+ *   8. Return the final result
+ *
+ * Each step degrades gracefully — if static analysis fails, or
+ * memory is unavailable, the pipeline continues with what it has.
+ */
+import { parseDiffFiles, filterIgnoredFiles, truncateDiff } from './utils/diff.js';
+import { detectStacks } from './utils/stack-detect.js';
+import { calculateTokenBudget } from './utils/token-budget.js';
+import { runStaticAnalysis, formatStaticAnalysisContext } from './tools/runner.js';
+import { searchMemoryForContext } from './memory/search.js';
+import { persistReviewObservations } from './memory/persist.js';
+import { buildStackHints } from './agents/prompts.js';
+import { runSimpleReview } from './agents/simple.js';
+import { runWorkflowReview } from './agents/workflow.js';
+import { runConsensusReview } from './agents/consensus.js';
+// ─── Validation ─────────────────────────────────────────────────
+/**
+ * Validate the review input for required fields.
+ * Throws descriptive errors for misconfiguration.
+ */
+function validateInput(input) {
+    if (!input.diff || input.diff.trim().length === 0) {
+        throw new Error('Review input must include a non-empty diff');
+    }
+    if (!input.apiKey) {
+        throw new Error('Review input must include an API key');
+    }
+    if (!input.provider) {
+        throw new Error('Review input must specify an LLM provider');
+    }
+    if (!input.model) {
+        throw new Error('Review input must specify a model');
+    }
+}
+// ─── Pipeline ───────────────────────────────────────────────────
+/**
+ * Run the full review pipeline.
+ *
+ * This is the primary entry point for all review operations.
+ * It orchestrates parsing, analysis, agent execution, and
+ * memory operations in a resilient pipeline that degrades
+ * gracefully when optional components fail.
+ *
+ * @param input - Complete review input with diff, config, and settings
+ * @returns ReviewResult with status, findings, and metadata
+ */
+export async function reviewPipeline(input) {
+    const startTime = Date.now();
+    const emit = input.onProgress ?? (() => { });
+    // ── Step 1: Validate ───────────────────────────────────────
+    validateInput(input);
+    emit({ step: 'validate', message: 'Input validated' });
+    // ── Step 2: Parse and filter the diff ──────────────────────
+    const allFiles = parseDiffFiles(input.diff);
+    const filteredFiles = filterIgnoredFiles(allFiles, input.settings.ignorePatterns);
+    emit({
+        step: 'parse-diff',
+        message: `Parsed ${allFiles.length} files from diff, ${filteredFiles.length} after filtering`,
+        detail: filteredFiles.map((f) => `  ${f.path}`).join('\n'),
+    });
+    // If all files were filtered out, skip the review
+    if (filteredFiles.length === 0) {
+        return createSkippedResult(input, startTime);
+    }
+    // Reconstruct filtered diff and get file list
+    const filteredDiff = filteredFiles.map((f) => f.content).join('\n');
+    const fileList = filteredFiles.map((f) => f.path);
+    // ── Step 3: Detect tech stacks ─────────────────────────────
+    const stacks = detectStacks(fileList);
+    const stackHints = buildStackHints(stacks);
+    emit({
+        step: 'detect-stacks',
+        message: `Detected ${stacks.length} tech stack(s)`,
+        detail: stacks.length > 0 ? stacks.map((s) => `  ${s}`).join('\n') : '  (none detected)',
+    });
+    // ── Step 4: Truncate diff to fit token budget ──────────────
+    const { diffBudget } = calculateTokenBudget(input.model);
+    const { truncated: truncatedDiff } = truncateDiff(filteredDiff, diffBudget);
+    emit({
+        step: 'token-budget',
+        message: `Token budget: ${diffBudget.toLocaleString()} tokens for diff`,
+    });
+    // ── Step 5: Run static analysis (in parallel with memory) ──
+    emit({ step: 'static-analysis', message: 'Running static analysis & memory search...' });
+    const [staticResult, memoryContext] = await Promise.all([
+        runStaticAnalysisSafe(fileList, input),
+        searchMemorySafe(input, fileList),
+    ]);
+    const staticContext = formatStaticAnalysisContext(staticResult);
+    {
+        const toolsSummary = Object.entries(staticResult)
+            .map(([name, result]) => `  ${name}: ${result.status} (${result.findings.length} findings)`)
+            .join('\n');
+        emit({
+            step: 'static-results',
+            message: 'Static analysis complete',
+            detail: toolsSummary + (memoryContext ? '\n  memory: loaded' : '\n  memory: disabled'),
+        });
+    }
+    // ── Step 6: Execute agent mode ─────────────────────────────
+    emit({ step: 'agent-start', message: `Running ${input.mode} agent...` });
+    let result;
+    switch (input.mode) {
+        case 'simple':
+            result = await runSimpleReview({
+                diff: truncatedDiff,
+                provider: input.provider,
+                model: input.model,
+                apiKey: input.apiKey,
+                staticContext,
+                memoryContext,
+                stackHints,
+                onProgress: input.onProgress,
+            });
+            break;
+        case 'workflow':
+            result = await runWorkflowReview({
+                diff: truncatedDiff,
+                provider: input.provider,
+                model: input.model,
+                apiKey: input.apiKey,
+                staticContext,
+                memoryContext,
+                stackHints,
+                onProgress: input.onProgress,
+            });
+            break;
+        case 'consensus':
+            // Consensus mode uses the primary model with different stances
+            // In production, the caller would configure multiple models via the context
+            result = await runConsensusReview({
+                diff: truncatedDiff,
+                models: [
+                    { provider: input.provider, model: input.model, apiKey: input.apiKey, stance: 'for' },
+                    { provider: input.provider, model: input.model, apiKey: input.apiKey, stance: 'against' },
+                    { provider: input.provider, model: input.model, apiKey: input.apiKey, stance: 'neutral' },
+                ],
+                staticContext,
+                memoryContext,
+                stackHints,
+                onProgress: input.onProgress,
+            });
+            break;
+        default: {
+            const _exhaustive = input.mode;
+            throw new Error(`Unknown review mode: ${_exhaustive}`);
+        }
+    }
+    // ── Step 7: Merge static analysis into result ──────────────
+    result.staticAnalysis = staticResult;
+    result.memoryContext = memoryContext;
+    // Add static analysis findings to the result's findings array
+    const staticFindings = [
+        ...staticResult.semgrep.findings,
+        ...staticResult.trivy.findings,
+        ...staticResult.cpd.findings,
+    ];
+    result.findings = [...result.findings, ...staticFindings];
+    // Track which tools ran successfully
+    result.metadata.toolsRun = [];
+    result.metadata.toolsSkipped = [];
+    for (const [name, tool] of Object.entries(staticResult)) {
+        if (tool.status === 'success') {
+            result.metadata.toolsRun.push(name);
+        }
+        else {
+            result.metadata.toolsSkipped.push(name);
+        }
+    }
+    // Update execution time to cover the full pipeline
+    result.metadata.executionTimeMs = Date.now() - startTime;
+    // ── Step 8: Persist to memory (fire-and-forget) ────────────
+    if (input.settings.enableMemory && input.db && input.context) {
+        // Don't await — memory persistence shouldn't block the response
+        persistReviewObservations(input.db, input.context.repoFullName, input.context.prNumber, result).catch((error) => {
+            console.warn('[ghagga] Memory persist failed (non-fatal):', error instanceof Error ? error.message : String(error));
+        });
+    }
+    return result;
+}
+// ─── Helpers ────────────────────────────────────────────────────
+/**
+ * Run static analysis with graceful degradation.
+ * Returns a result with all tools skipped if anything goes wrong.
+ */
+async function runStaticAnalysisSafe(fileList, input) {
+    try {
+        // Build a file map for static analysis (paths only, content from diff)
+        const files = new Map();
+        for (const path of fileList) {
+            files.set(path, ''); // Content is extracted from diff by the tool runner
+        }
+        return await runStaticAnalysis(files, '.', {
+            enableSemgrep: input.settings.enableSemgrep,
+            enableTrivy: input.settings.enableTrivy,
+            enableCpd: input.settings.enableCpd,
+            customRules: input.settings.customRules,
+        });
+    }
+    catch (error) {
+        console.warn('[ghagga] Static analysis failed (degrading gracefully):', error instanceof Error ? error.message : String(error));
+        const errorResult = {
+            status: 'error',
+            findings: [],
+            error: error instanceof Error ? error.message : String(error),
+            executionTimeMs: 0,
+        };
+        return {
+            semgrep: errorResult,
+            trivy: errorResult,
+            cpd: errorResult,
+        };
+    }
+}
+/**
+ * Search memory with graceful degradation.
+ * Returns null if memory is disabled or unavailable.
+ */
+async function searchMemorySafe(input, fileList) {
+    if (!input.settings.enableMemory || !input.db || !input.context) {
+        return null;
+    }
+    try {
+        return await searchMemoryForContext(input.db, input.context.repoFullName, fileList);
+    }
+    catch (error) {
+        console.warn('[ghagga] Memory search failed (degrading gracefully):', error instanceof Error ? error.message : String(error));
+        return null;
+    }
+}
+/**
+ * Create a SKIPPED result when all files are filtered out.
+ */
+function createSkippedResult(input, startTime) {
+    return {
+        status: 'SKIPPED',
+        summary: 'All files in the diff matched ignore patterns. No review was performed.',
+        findings: [],
+        staticAnalysis: {
+            semgrep: { status: 'skipped', findings: [], executionTimeMs: 0 },
+            trivy: { status: 'skipped', findings: [], executionTimeMs: 0 },
+            cpd: { status: 'skipped', findings: [], executionTimeMs: 0 },
+        },
+        memoryContext: null,
+        metadata: {
+            mode: input.mode,
+            provider: input.provider,
+            model: input.model,
+            tokensUsed: 0,
+            executionTimeMs: Date.now() - startTime,
+            toolsRun: [],
+            toolsSkipped: ['semgrep', 'trivy', 'cpd'],
+        },
+    };
+}
+//# sourceMappingURL=pipeline.js.map

package/dist/pipeline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline.js","sourceRoot":"","sources":["../src/pipeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACnF,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AACnF,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAG3D,mEAAmE;AAEnE;;;GAGG;AACH,SAAS,aAAa,CAAC,KAAkB;IACvC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,mEAAmE;AAEnE;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAkB;IACrD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAE5C,8DAA8D;IAC9D,aAAa,CAAC,KAAK,CAAC,CAAC;IACrB,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAEvD,8DAA8D;IAC9D,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,aAAa,GAAG,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAClF,IAAI,CAAC;QACH,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,UAAU,QAAQ,CAAC,MAAM,qBAAqB,aAAa,CAAC,MAAM,kBAAkB;QAC7F,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;KAC3D,CAAC,CAAC;IAEH,kDAAkD;IAClD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,mBAAmB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC/C,CAAC;IAED,8CAA8C;IAC9C,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAElD,8DAA8D;IAC9D,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,YAAY,MAAM,CAAC,MAAM,gBAAgB;QAClD,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,mBAAmB;KACzF,CAAC,CAAC;IAEH,8DAA8D;IAC9D,MAAM,EAAE,UAAU,EAAE,GAAG,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzD,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,YAAY,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAC5E,IAAI,CAAC;QACH,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,iBAAiB,UAAU,CAAC,cAAc,EAAE,kBAAkB;KACxE,CAAC,CAAC;IAEH,8DAA8D;IAC9D,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC,CAAC;IACzF,MAAM,CAAC,YAAY,EAAE,aAAa,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACtD,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC;QACtC,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC;KAClC,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,2BAA2B,CAAC,YAAY,CAAC,CAAC;IAEhE,CAAC;QACC,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC;aAC9C,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,KAAK,IAAI,KAAK,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,YAAY,CAAC;aAC3F,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,IAAI,CAAC;YACH,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,0BAA0B;YACnC,MAAM,EAAE,YAAY,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,sBAAsB,CAAC;SACvF,CAAC,CAAC;IACL,CAAC;IAED,8DAA8D;IAC9D,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC;IACzE,IAAI,MAAoB,CAAC;IAEzB,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,QAAQ;YACX,MAAM,GAAG,MAAM,eAAe,CAAC;gBAC7B,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,aAAa;gBACb,aAAa;gBACb,UAAU;gBACV,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B,CAAC,CAAC;YACH,MAAM;QAER,KAAK,UAAU;YACb,MAAM,GAAG,MAAM,iBAAiB,CAAC;gBAC/B,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,aAAa;gBACb,aAAa;gBACb,UAAU;gBACV,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B,CAAC,CAAC;YACH,MAAM;QAER,KAAK,WAAW;YACd,+DAA+D;YAC/D,4EAA4E;YAC5E,MAAM,GAAG,MAAM,kBAAkB,CAAC;gBAChC,IAAI,EAAE,aAAa;gBACnB,MAAM,EAAE;oBACN,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;oBACrF,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE;oBACzF,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE;iBAC1F;gBACD,aAAa;gBACb,aAAa;gBACb,UAAU;gBACV,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B,CAAC,CAAC;YACH,MAAM;QAER,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,WAAW,GAAU,KAAK,CAAC,IAAI,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,wBAAwB,WAAW,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,8DAA8D;IAC9D,MAAM,CAAC,cAAc,GAAG,YAAY,CAAC;IACrC,MAAM,CAAC,aAAa,GAAG,aAAa,CAAC;IAErC,8DAA8D;IAC9D,MAAM,cAAc,GAAG;QACrB,GAAG,YAAY,CAAC,OAAO,CAAC,QAAQ;QAChC,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ;QAC9B,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ;KAC7B,CAAC;IACF,MAAM,CAAC,QAAQ,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,EAAE,GAAG,cAAc,CAAC,CAAC;IAE1D,qCAAqC;IACrC,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,EAAE,CAAC;IAC9B,MAAM,CAAC,QAAQ,CAAC,YAAY,GAAG,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACxD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,mDAAmD;IACnD,MAAM,CAAC,QAAQ,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAEzD,8DAA8D;IAC9D,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,IAAI,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAC7D,gEAAgE;QAChE,yBAAyB,CACvB,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,OAAO,CAAC,YAAY,EAC1B,KAAK,CAAC,OAAO,CAAC,QAAQ,EACtB,MAAM,CACP,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACzB,OAAO,CAAC,IAAI,CACV,6CAA6C,EAC7C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,mEAAmE;AAEnE;;;GAGG;AACH,KAAK,UAAU,qBAAqB,CAClC,QAAkB,EAClB,KAAkB;IAElB,IAAI,CAAC;QACH,uEAAuE;QACvE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;QACxC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,oDAAoD;QAC3E,CAAC;QAED,OAAO,MAAM,iBAAiB,CAAC,KAAK,EAAE,GAAG,EAAE;YACzC,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,aAAa;YAC3C,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW;YACvC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS;YACnC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW;SACxC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CACV,yDAAyD,EACzD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;QAEF,MAAM,WAAW,GAAG;YAClB,MAAM,EAAE,OAAgB;YACxB,QAAQ,EAAE,EAAE;YACZ,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YAC7D,eAAe,EAAE,CAAC;SACnB,CAAC;QAEF,OAAO;YACL,OAAO,EAAE,WAAW;YACpB,KAAK,EAAE,WAAW;YAClB,GAAG,EAAE,WAAW;SACjB,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,gBAAgB,CAC7B,KAAkB,EAClB,QAAkB;IAElB,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAChE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,sBAAsB,CACjC,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,OAAO,CAAC,YAAY,EAC1B,QAAQ,CACT,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CACV,uDAAuD,EACvD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAAC,KAAkB,EAAE,SAAiB;IAChE,OAAO;QACL,MAAM,EAAE,SAAyB;QACjC,OAAO,EAAE,yEAAyE;QAClF,QAAQ,EAAE,EAAE;QACZ,cAAc,EAAE;YACd,OAAO,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,eAAe,EAAE,CAAC,EAAE;YAChE,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,eAAe,EAAE,CAAC,EAAE;YAC9D,GAAG,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,eAAe,EAAE,CAAC,EAAE;SAC7D;QACD,aAAa,EAAE,IAAI;QACnB,QAAQ,EAAE;YACR,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,UAAU,EAAE,CAAC;YACb,eAAe,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YACvC,QAAQ,EAAE,EAAE;YACZ,YAAY,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC;SAC1C;KACF,CAAC;AACJ,CAAC"}

package/dist/providers/fallback.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Provider fallback chain.
+ *
+ * Tries each provider/model pair in order. If one fails with a
+ * server error (5xx) or times out, it moves to the next provider.
+ * Client errors (4xx) are NOT retried — they indicate misconfiguration.
+ */
+import type { LLMProvider } from '../types.js';
+export interface FallbackProvider {
+    provider: LLMProvider;
+    model: string;
+    apiKey: string;
+}
+export interface FallbackOptions {
+    /** Ordered list of providers to try */
+    providers: FallbackProvider[];
+    /** System prompt */
+    system: string;
+    /** User prompt */
+    prompt: string;
+    /** Temperature for generation (default: 0.3 for review consistency) */
+    temperature?: number;
+}
+export interface FallbackResult {
+    /** Generated text */
+    text: string;
+    /** Provider that succeeded */
+    provider: LLMProvider;
+    /** Model that succeeded */
+    model: string;
+    /** Approximate tokens used (prompt + completion) */
+    tokensUsed: number;
+}
+/**
+ * Generate text with automatic provider fallback.
+ *
+ * Tries each provider in order. On retryable errors (5xx, timeout,
+ * rate limit), moves to the next provider. Throws the last error
+ * if all providers fail.
+ *
+ * @param options - Providers, system prompt, and user prompt
+ * @returns Generated text with metadata about which provider succeeded
+ * @throws The last encountered error if all providers fail
+ */
+export declare function generateWithFallback(options: FallbackOptions): Promise<FallbackResult>;
+//# sourceMappingURL=fallback.d.ts.map

package/dist/providers/fallback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fallback.d.ts","sourceRoot":"","sources":["../../src/providers/fallback.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAI/C,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,WAAW,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,uCAAuC;IACvC,SAAS,EAAE,gBAAgB,EAAE,CAAC;IAE9B,oBAAoB;IACpB,MAAM,EAAE,MAAM,CAAC;IAEf,kBAAkB;IAClB,MAAM,EAAE,MAAM,CAAC;IAEf,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,qBAAqB;IACrB,IAAI,EAAE,MAAM,CAAC;IAEb,8BAA8B;IAC9B,QAAQ,EAAE,WAAW,CAAC;IAEtB,2BAA2B;IAC3B,KAAK,EAAE,MAAM,CAAC;IAEd,oDAAoD;IACpD,UAAU,EAAE,MAAM,CAAC;CACpB;AAkCD;;;;;;;;;;GAUG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,cAAc,CAAC,CAiDzB"}

package/dist/providers/fallback.js

@@ -0,0 +1,84 @@
+/**
+ * Provider fallback chain.
+ *
+ * Tries each provider/model pair in order. If one fails with a
+ * server error (5xx) or times out, it moves to the next provider.
+ * Client errors (4xx) are NOT retried — they indicate misconfiguration.
+ */
+import { generateText } from 'ai';
+import { createModel } from './index.js';
+// ─── Helpers ────────────────────────────────────────────────────
+/**
+ * Check if an error is a retryable server-side error (5xx or timeout).
+ */
+function isRetryableError(error) {
+    if (error instanceof Error) {
+        const message = error.message.toLowerCase();
+        // Network/timeout errors
+        if (message.includes('timeout') || message.includes('econnreset') || message.includes('econnrefused')) {
+            return true;
+        }
+        // Check for HTTP status codes in error (provider SDKs often include them)
+        const statusMatch = /status[:\s]*(\d{3})/i.exec(message);
+        if (statusMatch) {
+            const status = parseInt(statusMatch[1], 10);
+            return status >= 500;
+        }
+        // Rate limit (429) — also retryable with a different provider
+        if (message.includes('rate limit') || message.includes('429')) {
+            return true;
+        }
+    }
+    return false;
+}
+// ─── Main Function ──────────────────────────────────────────────
+/**
+ * Generate text with automatic provider fallback.
+ *
+ * Tries each provider in order. On retryable errors (5xx, timeout,
+ * rate limit), moves to the next provider. Throws the last error
+ * if all providers fail.
+ *
+ * @param options - Providers, system prompt, and user prompt
+ * @returns Generated text with metadata about which provider succeeded
+ * @throws The last encountered error if all providers fail
+ */
+export async function generateWithFallback(options) {
+    const { providers, system, prompt, temperature = 0.3 } = options;
+    if (providers.length === 0) {
+        throw new Error('No providers configured for fallback chain');
+    }
+    let lastError;
+    for (const { provider, model, apiKey } of providers) {
+        try {
+            const languageModel = createModel(provider, model, apiKey);
+            const result = await generateText({
+                model: languageModel,
+                system,
+                prompt,
+                temperature,
+            });
+            // Calculate tokens used from the response
+            const tokensUsed = (result.usage?.promptTokens ?? 0) + (result.usage?.completionTokens ?? 0);
+            return {
+                text: result.text,
+                provider,
+                model,
+                tokensUsed,
+            };
+        }
+        catch (error) {
+            lastError = error;
+            if (isRetryableError(error)) {
+                // Log and continue to next provider
+                console.warn(`[ghagga] Provider ${provider}/${model} failed with retryable error, trying next...`, error instanceof Error ? error.message : String(error));
+                continue;
+            }
+            // Non-retryable error (4xx, auth, etc.) — throw immediately
+            throw error;
+        }
+    }
+    // All providers failed with retryable errors
+    throw lastError;
+}
+//# sourceMappingURL=fallback.js.map

package/dist/providers/fallback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fallback.js","sourceRoot":"","sources":["../../src/providers/fallback.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAuCzC,mEAAmE;AAEnE;;GAEG;AACH,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QAE5C,yBAAyB;QACzB,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACtG,OAAO,IAAI,CAAC;QACd,CAAC;QAED,0EAA0E;QAC1E,MAAM,WAAW,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzD,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;YAC7C,OAAO,MAAM,IAAI,GAAG,CAAC;QACvB,CAAC;QAED,8DAA8D;QAC9D,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mEAAmE;AAEnE;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAwB;IAExB,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC;IAEjE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,SAAkB,CAAC;IAEvB,KAAK,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,WAAW,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YAE3D,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;gBAChC,KAAK,EAAE,aAAa;gBACpB,MAAM;gBACN,MAAM;gBACN,WAAW;aACZ,CAAC,CAAC;YAEH,0CAA0C;YAC1C,MAAM,UAAU,GACd,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,gBAAgB,IAAI,CAAC,CAAC,CAAC;YAE5E,OAAO;gBACL,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,QAAQ;gBACR,KAAK;gBACL,UAAU;aACX,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,GAAG,KAAK,CAAC;YAElB,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5B,oCAAoC;gBACpC,OAAO,CAAC,IAAI,CACV,qBAAqB,QAAQ,IAAI,KAAK,8CAA8C,EACpF,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;gBACF,SAAS;YACX,CAAC;YAED,4DAA4D;YAC5D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,6CAA6C;IAC7C,MAAM,SAAS,CAAC;AAClB,CAAC"}