ghagga 2.0.0

package/README.md

@@ -0,0 +1,171 @@
+# GHAGGA CLI
+
+AI-powered code review from the command line. **Free** with GitHub Models.
+
+```bash
+npx @ghagga/cli login
+npx @ghagga/cli review
+```
+
+That's it. Zero config, zero cost.
+
+## What is GHAGGA?
+
+GHAGGA is a multi-agent AI code reviewer that analyzes your code changes using LLMs. It supports three review modes with increasing depth:
+
+| Mode | Speed | Depth | LLM Calls |
+|------|-------|-------|-----------|
+| **simple** | ~2s | Single-pass review | 1 |
+| **workflow** | ~15s | 5 specialist agents + synthesis | 6 |
+| **consensus** | ~7s | For/against/neutral voting | 3 |
+
+## Quick Start
+
+### 1. Login (one time)
+
+```bash
+npx @ghagga/cli login
+```
+
+This authenticates with GitHub using Device Flow. Your GitHub token gives you **free access** to AI models via [GitHub Models](https://github.com/marketplace/models).
+
+### 2. Review your code
+
+```bash
+# Review staged/uncommitted changes (simple mode)
+npx @ghagga/cli review
+
+# Thorough review with 5 specialist agents
+npx @ghagga/cli review --mode workflow
+
+# Balanced review with for/against/neutral voting
+npx @ghagga/cli review --mode consensus
+
+# See detailed progress of each step
+npx @ghagga/cli review --mode workflow --verbose
+```
+
+### 3. Check your status
+
+```bash
+npx @ghagga/cli status    # Show auth & config
+npx @ghagga/cli logout    # Clear credentials
+```
+
+## Global Installation
+
+If you use it frequently:
+
+```bash
+npm install -g @ghagga/cli
+
+ghagga login
+ghagga review
+ghagga review -m workflow -v
+```
+
+## Options
+
+```
+Usage: ghagga review [options] [path]
+
+Options:
+  -m, --mode <mode>          Review mode: simple, workflow, consensus (default: "simple")
+  -p, --provider <provider>  LLM provider: github, openai, anthropic, google
+  --model <model>            LLM model identifier
+  --api-key <key>            LLM provider API key
+  -f, --format <format>      Output format: markdown, json (default: "markdown")
+  -v, --verbose              Show detailed progress during review
+  --no-semgrep               Disable Semgrep static analysis
+  --no-trivy                 Disable Trivy vulnerability scanning
+  --no-cpd                   Disable CPD duplicate detection
+  -c, --config <path>        Path to .ghagga.json config file
+```
+
+## BYOK (Bring Your Own Key)
+
+Use any supported LLM provider:
+
+```bash
+# GitHub Models (default, free)
+ghagga review --provider github
+
+# Ollama (local, free, 100% offline)
+ghagga review --provider ollama
+ghagga review --provider ollama --model codellama:13b
+
+# OpenAI
+ghagga review --provider openai --api-key sk-...
+
+# Anthropic
+ghagga review --provider anthropic --api-key sk-ant-...
+
+# Google
+ghagga review --provider google --api-key AIza...
+```
+
+## Local Models with Ollama
+
+Run reviews 100% offline with [Ollama](https://ollama.com):
+
+```bash
+# 1. Install Ollama and pull a model
+ollama pull qwen2.5-coder:7b
+
+# 2. Review with local AI (no API key, no internet needed)
+ghagga review --provider ollama
+
+# Recommended models for code review:
+#   qwen2.5-coder:7b    (~5 GB RAM, great for code)
+#   codellama:13b        (~8 GB RAM, solid analysis)
+#   deepseek-coder-v2:16b (~10 GB RAM, excellent quality)
+#   llama3.1:8b          (~5 GB RAM, general purpose)
+```
+
+## Environment Variables
+
+```bash
+GHAGGA_API_KEY=<key>       # API key for the LLM provider
+GHAGGA_PROVIDER=<provider> # LLM provider override
+GHAGGA_MODEL=<model>       # Model identifier override
+GITHUB_TOKEN=<token>       # GitHub token (fallback for github provider)
+```
+
+## Config File
+
+Create a `.ghagga.json` in your project root:
+
+```json
+{
+  "mode": "workflow",
+  "enableSemgrep": true,
+  "enableTrivy": true,
+  "enableCpd": true,
+  "ignorePatterns": ["*.test.ts", "*.spec.ts"],
+  "reviewLevel": "strict"
+}
+```
+
+## How It Works
+
+1. Gets your `git diff` (staged or uncommitted changes)
+2. Parses the diff and detects tech stacks
+3. Runs static analysis (Semgrep, Trivy, CPD) if available
+4. Sends the diff + context to the AI review agent
+5. Returns findings with severity, file, line, and suggestions
+
+## Requirements
+
+- Node.js >= 20
+- Git (for diff detection)
+- A GitHub account (for free AI models)
+
+## License
+
+MIT
+
+## Links
+
+- [GitHub Repository](https://github.com/JNZader/ghagga)
+- [Documentation](https://jnzader.github.io/ghagga/docs/)
+- [Landing Page](https://jnzader.github.io/ghagga/)

package/dist/commands/login.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Login command — authenticates with GitHub via Device Flow.
+ *
+ * Opens the browser to github.com/login/device, shows the user code,
+ * and polls until the user authorizes. Saves the token to config.
+ */
+export declare function loginCommand(): Promise<void>;
+//# sourceMappingURL=login.d.ts.map

package/dist/commands/login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAgCH,wBAAsB,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAwDlD"}

package/dist/commands/login.js

@@ -0,0 +1,73 @@
+/**
+ * Login command — authenticates with GitHub via Device Flow.
+ *
+ * Opens the browser to github.com/login/device, shows the user code,
+ * and polls until the user authorizes. Saves the token to config.
+ */
+import { loadConfig, saveConfig } from '../lib/config.js';
+import { requestDeviceCode, pollForAccessToken, fetchGitHubUser, } from '../lib/oauth.js';
+/**
+ * Try to open a URL in the default browser.
+ * Fails silently if no browser is available (e.g., headless server).
+ */
+async function tryOpenBrowser(url) {
+    try {
+        const { exec } = await import('node:child_process');
+        const { platform } = await import('node:os');
+        const cmd = platform() === 'darwin'
+            ? `open "${url}"`
+            : platform() === 'win32'
+                ? `start "${url}"`
+                : `xdg-open "${url}"`;
+        exec(cmd);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export async function loginCommand() {
+    const config = loadConfig();
+    // Check if already logged in
+    if (config.githubToken && config.githubLogin) {
+        console.log(`\u2139\ufe0f  Already logged in as ${config.githubLogin}.`);
+        console.log('   Run "ghagga logout" first to switch accounts.\n');
+        return;
+    }
+    console.log('\ud83d\udd10 Authenticating with GitHub...\n');
+    try {
+        // Step 1: Request device code
+        const deviceCode = await requestDeviceCode();
+        // Step 2: Show user code and open browser
+        console.log('   \u2794 Open this URL in your browser:\n');
+        console.log(`     \x1b[1m\x1b[36mhttps://github.com/login/device\x1b[0m\n`);
+        console.log(`   \u2794 Enter this code:\n`);
+        console.log(`     \x1b[1m\x1b[33m${deviceCode.user_code}\x1b[0m\n`);
+        const opened = await tryOpenBrowser(deviceCode.verification_uri);
+        if (opened) {
+            console.log('   (Browser opened automatically)\n');
+        }
+        console.log('   Waiting for authorization...');
+        // Step 3: Poll for access token
+        const tokenResponse = await pollForAccessToken(deviceCode.device_code, deviceCode.interval, deviceCode.expires_in);
+        // Step 4: Fetch user profile
+        const user = await fetchGitHubUser(tokenResponse.access_token);
+        // Step 5: Save to config
+        saveConfig({
+            ...config,
+            githubToken: tokenResponse.access_token,
+            githubLogin: user.login,
+            defaultProvider: 'github',
+            defaultModel: 'gpt-4o-mini',
+        });
+        console.log(`\n\u2705 Logged in as \x1b[1m${user.login}\x1b[0m`);
+        console.log('   Provider: github (gpt-4o-mini) — free tier');
+        console.log('\n   Run "ghagga review ." to review your code!\n');
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        console.error(`\n\u274c Login failed: ${message}\n`);
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=login.js.map

package/dist/commands/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,GAChB,MAAM,iBAAiB,CAAC;AAEzB;;;GAGG;AACH,KAAK,UAAU,cAAc,CAAC,GAAW;IACvC,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACpD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QAE7C,MAAM,GAAG,GACP,QAAQ,EAAE,KAAK,QAAQ;YACrB,CAAC,CAAC,SAAS,GAAG,GAAG;YACjB,CAAC,CAAC,QAAQ,EAAE,KAAK,OAAO;gBACtB,CAAC,CAAC,UAAU,GAAG,GAAG;gBAClB,CAAC,CAAC,aAAa,GAAG,GAAG,CAAC;QAE5B,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAE5B,6BAA6B;IAC7B,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,sCAAsC,MAAM,CAAC,WAAW,GAAG,CAAC,CAAC;QACzE,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;QAClE,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;IAE5D,IAAI,CAAC;QACH,8BAA8B;QAC9B,MAAM,UAAU,GAAG,MAAM,iBAAiB,EAAE,CAAC;QAE7C,0CAA0C;QAC1C,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC;QAC5E,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,uBAAuB,UAAU,CAAC,SAAS,WAAW,CAAC,CAAC;QAEpE,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;QACjE,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;QACrD,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAE/C,gCAAgC;QAChC,MAAM,aAAa,GAAG,MAAM,kBAAkB,CAC5C,UAAU,CAAC,WAAW,EACtB,UAAU,CAAC,QAAQ,EACnB,UAAU,CAAC,UAAU,CACtB,CAAC;QAEF,6BAA6B;QAC7B,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QAE/D,yBAAyB;QACzB,UAAU,CAAC;YACT,GAAG,MAAM;YACT,WAAW,EAAE,aAAa,CAAC,YAAY;YACvC,WAAW,EAAE,IAAI,CAAC,KAAK;YACvB,eAAe,EAAE,QAAQ;YACzB,YAAY,EAAE,aAAa;SAC5B,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,CAAC,gCAAgC,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,CAAC,KAAK,CAAC,0BAA0B,OAAO,IAAI,CAAC,CAAC;QACrD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/commands/logout.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Logout command — clears stored GitHub credentials.
+ */
+export declare function logoutCommand(): void;
+//# sourceMappingURL=logout.d.ts.map

package/dist/commands/logout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logout.d.ts","sourceRoot":"","sources":["../../src/commands/logout.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,wBAAgB,aAAa,IAAI,IAAI,CAapC"}

package/dist/commands/logout.js

@@ -0,0 +1,16 @@
+/**
+ * Logout command — clears stored GitHub credentials.
+ */
+import { clearConfig, isLoggedIn, loadConfig } from '../lib/config.js';
+export function logoutCommand() {
+    if (!isLoggedIn()) {
+        console.log('\u2139\ufe0f  Not currently logged in.\n');
+        return;
+    }
+    const config = loadConfig();
+    const login = config.githubLogin ?? 'unknown';
+    clearConfig();
+    console.log(`\u2705 Logged out from ${login}.`);
+    console.log('   Stored credentials have been removed.\n');
+}
+//# sourceMappingURL=logout.js.map

package/dist/commands/logout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logout.js","sourceRoot":"","sources":["../../src/commands/logout.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEvE,MAAM,UAAU,aAAa;IAC3B,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;QACxD,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,IAAI,SAAS,CAAC;IAE9C,WAAW,EAAE,CAAC;IAEd,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,GAAG,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;AAC5D,CAAC"}

package/dist/commands/review.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Review command handler.
+ *
+ * Gets the local git diff, merges configuration from CLI options,
+ * environment, and optional .ghagga.json file, then runs the
+ * core review pipeline and formats the output.
+ */
+import type { ReviewMode, LLMProvider } from 'ghagga-core';
+export interface ReviewOptions {
+    mode: ReviewMode;
+    provider: LLMProvider;
+    model: string;
+    apiKey: string;
+    format: 'markdown' | 'json';
+    semgrep: boolean;
+    trivy: boolean;
+    cpd: boolean;
+    config?: string;
+    verbose: boolean;
+}
+export declare function reviewCommand(targetPath: string, options: ReviewOptions): Promise<void>;
+//# sourceMappingURL=review.d.ts.map

package/dist/commands/review.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review.d.ts","sourceRoot":"","sources":["../../src/commands/review.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AASH,OAAO,KAAK,EACV,UAAU,EACV,WAAW,EAOZ,MAAM,aAAa,CAAC;AAIrB,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,WAAW,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,UAAU,GAAG,MAAM,CAAC;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,EAAE,OAAO,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;CAClB;AAgBD,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,IAAI,CAAC,CA4Df"}

package/dist/commands/review.js

@@ -0,0 +1,269 @@
+/**
+ * Review command handler.
+ *
+ * Gets the local git diff, merges configuration from CLI options,
+ * environment, and optional .ghagga.json file, then runs the
+ * core review pipeline and formats the output.
+ */
+import { execSync } from 'node:child_process';
+import { readFileSync, existsSync } from 'node:fs';
+import { resolve, join } from 'node:path';
+import { reviewPipeline, DEFAULT_SETTINGS, } from 'ghagga-core';
+// ─── Main Command ───────────────────────────────────────────────
+export async function reviewCommand(targetPath, options) {
+    const repoPath = resolve(targetPath);
+    try {
+        // Step 1: Get the git diff
+        const diff = getGitDiff(repoPath);
+        if (!diff || diff.trim().length === 0) {
+            console.log('\u2139\ufe0f  No changes detected. Stage some changes or make commits to review.');
+            process.exit(0);
+        }
+        // Step 2: Load optional config file
+        const fileConfig = loadConfigFile(repoPath, options.config);
+        // Step 3: Merge settings (CLI options take priority over config file)
+        const settings = mergeSettings(options, fileConfig);
+        // Step 4: Show progress
+        console.log('\ud83e\udd16 GHAGGA Code Review');
+        console.log(`   Mode: ${options.mode} | Provider: ${options.provider} | Model: ${options.model}`);
+        console.log('   Analyzing...\n');
+        // Step 5: Run the review pipeline
+        const onProgress = options.verbose
+            ? createProgressHandler()
+            : undefined;
+        const result = await reviewPipeline({
+            diff,
+            mode: options.mode,
+            provider: options.provider,
+            model: options.model,
+            apiKey: options.apiKey,
+            settings,
+            context: {
+                repoFullName: 'local/review',
+                prNumber: 0,
+                commitMessages: [],
+                fileList: [],
+            },
+            db: undefined,
+            onProgress,
+        });
+        // Step 6: Output the result
+        if (options.format === 'json') {
+            console.log(JSON.stringify(result, null, 2));
+        }
+        else {
+            console.log(formatMarkdownResult(result));
+        }
+        // Step 7: Exit code based on status
+        const exitCode = getExitCode(result.status);
+        process.exit(exitCode);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        console.error(`\n\u274c Review failed: ${message}`);
+        process.exit(1);
+    }
+}
+// ─── Git Diff ───────────────────────────────────────────────────
+/**
+ * Get the diff from git. Uses staged changes if available,
+ * otherwise falls back to `git diff HEAD`.
+ */
+function getGitDiff(repoPath) {
+    const execOpts = { cwd: repoPath, encoding: 'utf-8', maxBuffer: 10 * 1024 * 1024 };
+    // Check for staged changes first
+    try {
+        const staged = execSync('git diff --staged', execOpts).toString();
+        if (staged.trim().length > 0) {
+            return staged;
+        }
+    }
+    catch {
+        // git diff --staged failed, try HEAD
+    }
+    // Fall back to diff against HEAD
+    try {
+        const headDiff = execSync('git diff HEAD', execOpts).toString();
+        if (headDiff.trim().length > 0) {
+            return headDiff;
+        }
+    }
+    catch {
+        // HEAD might not exist (fresh repo), try unstaged diff
+    }
+    // Last resort: unstaged diff
+    try {
+        return execSync('git diff', execOpts).toString();
+    }
+    catch {
+        throw new Error(`Could not get git diff from "${repoPath}". ` +
+            'Make sure the path is a git repository with changes.');
+    }
+}
+// ─── Config File ────────────────────────────────────────────────
+/**
+ * Load and parse an optional .ghagga.json config file.
+ */
+function loadConfigFile(repoPath, configPath) {
+    const filePath = configPath
+        ? resolve(configPath)
+        : join(repoPath, '.ghagga.json');
+    if (!existsSync(filePath)) {
+        return {};
+    }
+    try {
+        const raw = readFileSync(filePath, 'utf-8');
+        return JSON.parse(raw);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        console.warn(`\u26a0\ufe0f  Could not parse config file: ${message}`);
+        return {};
+    }
+}
+// ─── Settings Merge ─────────────────────────────────────────────
+/**
+ * Merge CLI options, config file, and defaults.
+ * Priority: CLI options > config file > defaults.
+ */
+function mergeSettings(options, fileConfig) {
+    return {
+        enableSemgrep: options.semgrep ?? fileConfig.enableSemgrep ?? DEFAULT_SETTINGS.enableSemgrep,
+        enableTrivy: options.trivy ?? fileConfig.enableTrivy ?? DEFAULT_SETTINGS.enableTrivy,
+        enableCpd: options.cpd ?? fileConfig.enableCpd ?? DEFAULT_SETTINGS.enableCpd,
+        enableMemory: false, // Memory is disabled in CLI mode
+        customRules: fileConfig.customRules ?? DEFAULT_SETTINGS.customRules,
+        ignorePatterns: fileConfig.ignorePatterns ?? DEFAULT_SETTINGS.ignorePatterns,
+        reviewLevel: fileConfig.reviewLevel ?? DEFAULT_SETTINGS.reviewLevel,
+    };
+}
+// ─── Verbose Progress ───────────────────────────────────────────
+/** Step-to-emoji mapping for verbose output. */
+const STEP_ICON = {
+    'validate': '🔍',
+    'parse-diff': '📄',
+    'detect-stacks': '🧩',
+    'token-budget': '📊',
+    'static-analysis': '🛡️',
+    'static-results': '📋',
+    'agent-start': '🤖',
+    'simple-call': '💬',
+    'simple-done': '✅',
+    'workflow-start': '🔄',
+    'workflow-synthesis': '🧬',
+    'consensus-start': '🗳️',
+    'consensus-voting': '🏛️',
+};
+/**
+ * Create a progress callback that prints real-time verbose output.
+ * Each step prints a single line with an icon, step name, and message.
+ * Specialist/vote steps (dynamic names) get a generic icon.
+ */
+function createProgressHandler() {
+    return (event) => {
+        const icon = STEP_ICON[event.step]
+            ?? (event.step.startsWith('specialist-') ? '👤' : undefined)
+            ?? (event.step.startsWith('vote-') ? '🗳️' : undefined)
+            ?? '▸';
+        const prefix = `  ${icon} [${event.step}]`;
+        console.log(`${prefix} ${event.message}`);
+        if (event.detail) {
+            // Indent detail lines for readability
+            const indented = event.detail
+                .split('\n')
+                .map((line) => `      ${line}`)
+                .join('\n');
+            console.log(indented);
+        }
+    };
+}
+// ─── Output Formatting ──────────────────────────────────────────
+const STATUS_EMOJI = {
+    PASSED: '\u2705 PASSED',
+    FAILED: '\u274c FAILED',
+    NEEDS_HUMAN_REVIEW: '\u26a0\ufe0f  NEEDS HUMAN REVIEW',
+    SKIPPED: '\u23ed\ufe0f  SKIPPED',
+};
+const SEVERITY_EMOJI = {
+    critical: '\ud83d\udd34',
+    high: '\ud83d\udfe0',
+    medium: '\ud83d\udfe1',
+    low: '\ud83d\udfe2',
+    info: '\ud83d\udfe3',
+};
+/**
+ * Format a ReviewResult as a human-readable markdown string for the terminal.
+ */
+function formatMarkdownResult(result) {
+    const status = STATUS_EMOJI[result.status] ?? result.status;
+    const timeSeconds = (result.metadata.executionTimeMs / 1000).toFixed(1);
+    const lines = [];
+    // Header
+    lines.push('---');
+    lines.push(`\ud83e\udd16 GHAGGA Code Review  |  ${status}`);
+    lines.push(`Mode: ${result.metadata.mode} | Model: ${result.metadata.model} | Time: ${timeSeconds}s | Tokens: ${result.metadata.tokensUsed}`);
+    lines.push('---');
+    lines.push('');
+    // Summary
+    lines.push('## Summary');
+    lines.push(result.summary);
+    lines.push('');
+    // Findings
+    if (result.findings.length > 0) {
+        lines.push(`## Findings (${result.findings.length})`);
+        lines.push('');
+        for (const finding of result.findings) {
+            const emoji = SEVERITY_EMOJI[finding.severity] ?? '';
+            const location = finding.line
+                ? `${finding.file}:${finding.line}`
+                : finding.file;
+            lines.push(`${emoji} [${finding.severity.toUpperCase()}] ${finding.category}`);
+            lines.push(`   ${location}`);
+            lines.push(`   ${finding.message}`);
+            if (finding.suggestion) {
+                lines.push(`   \ud83d\udca1 ${finding.suggestion}`);
+            }
+            lines.push('');
+        }
+    }
+    else {
+        lines.push('No findings. Nice work! \ud83c\udf89');
+        lines.push('');
+    }
+    // Static analysis summary
+    const { toolsRun, toolsSkipped } = result.metadata;
+    if (toolsRun.length > 0 || toolsSkipped.length > 0) {
+        lines.push('## Static Analysis');
+        if (toolsRun.length > 0) {
+            lines.push(`\u2705 Tools run: ${toolsRun.join(', ')}`);
+        }
+        if (toolsSkipped.length > 0) {
+            lines.push(`\u23ed\ufe0f  Tools skipped: ${toolsSkipped.join(', ')}`);
+        }
+        lines.push('');
+    }
+    lines.push('---');
+    lines.push('Powered by GHAGGA \u2014 AI Code Review');
+    return lines.join('\n');
+}
+// ─── Exit Code ──────────────────────────────────────────────────
+/**
+ * Map review status to process exit code.
+ * PASSED and SKIPPED = 0, everything else = 1.
+ */
+function getExitCode(status) {
+    switch (status) {
+        case 'PASSED':
+        case 'SKIPPED':
+            return 0;
+        case 'FAILED':
+        case 'NEEDS_HUMAN_REVIEW':
+            return 1;
+        default: {
+            const _exhaustive = status;
+            console.warn(`Unknown status: ${_exhaustive}`);
+            return 1;
+        }
+    }
+}
+//# sourceMappingURL=review.js.map

package/dist/commands/review.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review.js","sourceRoot":"","sources":["../../src/commands/review.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EACL,cAAc,EACd,gBAAgB,GACjB,MAAM,aAAa,CAAC;AAuCrB,mEAAmE;AAEnE,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,UAAkB,EAClB,OAAsB;IAEtB,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAErC,IAAI,CAAC;QACH,2BAA2B;QAC3B,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAElC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,kFAAkF,CAAC,CAAC;YAChG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,oCAAoC;QACpC,MAAM,UAAU,GAAG,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAE5D,sEAAsE;QACtE,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAEpD,wBAAwB;QACxB,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,YAAY,OAAO,CAAC,IAAI,gBAAgB,OAAO,CAAC,QAAQ,aAAa,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAClG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QAEjC,kCAAkC;QAClC,MAAM,UAAU,GAAiC,OAAO,CAAC,OAAO;YAC9D,CAAC,CAAC,qBAAqB,EAAE;YACzB,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;YAClC,IAAI;YACJ,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ;YACR,OAAO,EAAE;gBACP,YAAY,EAAE,cAAc;gBAC5B,QAAQ,EAAE,CAAC;gBACX,cAAc,EAAE,EAAE;gBAClB,QAAQ,EAAE,EAAE;aACb;YACD,EAAE,EAAE,SAAS;YACb,UAAU;SACX,CAAC,CAAC;QAEH,4BAA4B;QAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5C,CAAC;QAED,oCAAoC;QACpC,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,CAAC,KAAK,CAAC,2BAA2B,OAAO,EAAE,CAAC,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,mEAAmE;AAEnE;;;GAGG;AACH,SAAS,UAAU,CAAC,QAAgB;IAClC,MAAM,QAAQ,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAgB,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;IAE5F,iCAAiC;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;QAClE,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,qCAAqC;IACvC,CAAC;IAED,iCAAiC;IACjC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;QAChE,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,uDAAuD;IACzD,CAAC;IAED,6BAA6B;IAC7B,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,gCAAgC,QAAQ,KAAK;YAC7C,sDAAsD,CACvD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,mEAAmE;AAEnE;;GAEG;AACH,SAAS,cAAc,CAAC,QAAgB,EAAE,UAAmB;IAC3D,MAAM,QAAQ,GAAG,UAAU;QACzB,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QACrB,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IAEnC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAiB,CAAC;IACzC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,CAAC,IAAI,CAAC,8CAA8C,OAAO,EAAE,CAAC,CAAC;QACtE,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,mEAAmE;AAEnE;;;GAGG;AACH,SAAS,aAAa,CACpB,OAAsB,EACtB,UAAwB;IAExB,OAAO;QACL,aAAa,EAAE,OAAO,CAAC,OAAO,IAAI,UAAU,CAAC,aAAa,IAAI,gBAAgB,CAAC,aAAa;QAC5F,WAAW,EAAE,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,WAAW,IAAI,gBAAgB,CAAC,WAAW;QACpF,SAAS,EAAE,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC,SAAS,IAAI,gBAAgB,CAAC,SAAS;QAC5E,YAAY,EAAE,KAAK,EAAE,iCAAiC;QACtD,WAAW,EAAE,UAAU,CAAC,WAAW,IAAI,gBAAgB,CAAC,WAAW;QACnE,cAAc,EAAE,UAAU,CAAC,cAAc,IAAI,gBAAgB,CAAC,cAAc;QAC5E,WAAW,EAAG,UAAU,CAAC,WAA6C,IAAI,gBAAgB,CAAC,WAAW;KACvG,CAAC;AACJ,CAAC;AAED,mEAAmE;AAEnE,gDAAgD;AAChD,MAAM,SAAS,GAA2B;IACxC,UAAU,EAAW,IAAI;IACzB,YAAY,EAAS,IAAI;IACzB,eAAe,EAAM,IAAI;IACzB,cAAc,EAAO,IAAI;IACzB,iBAAiB,EAAI,KAAK;IAC1B,gBAAgB,EAAK,IAAI;IACzB,aAAa,EAAQ,IAAI;IACzB,aAAa,EAAQ,IAAI;IACzB,aAAa,EAAQ,GAAG;IACxB,gBAAgB,EAAK,IAAI;IACzB,oBAAoB,EAAE,IAAI;IAC1B,iBAAiB,EAAI,KAAK;IAC1B,kBAAkB,EAAG,KAAK;CAC3B,CAAC;AAEF;;;;GAIG;AACH,SAAS,qBAAqB;IAC5B,OAAO,CAAC,KAAoB,EAAE,EAAE;QAC9B,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;eAC7B,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;eACzD,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;eACpD,GAAG,CAAC;QAET,MAAM,MAAM,GAAG,KAAK,IAAI,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAE1C,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,sCAAsC;YACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM;iBAC1B,KAAK,CAAC,IAAI,CAAC;iBACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC;iBAC9B,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,mEAAmE;AAEnE,MAAM,YAAY,GAAiC;IACjD,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,eAAe;IACvB,kBAAkB,EAAE,kCAAkC;IACtD,OAAO,EAAE,uBAAuB;CACjC,CAAC;AAEF,MAAM,cAAc,GAAoC;IACtD,QAAQ,EAAE,cAAc;IACxB,IAAI,EAAE,cAAc;IACpB,MAAM,EAAE,cAAc;IACtB,GAAG,EAAE,cAAc;IACnB,IAAI,EAAE,cAAc;CACrB,CAAC;AAEF;;GAEG;AACH,SAAS,oBAAoB,CAAC,MAAoB;IAChD,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC;IAC5D,MAAM,WAAW,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAExE,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,SAAS;IACT,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,uCAAuC,MAAM,EAAE,CAAC,CAAC;IAC5D,KAAK,CAAC,IAAI,CAAC,SAAS,MAAM,CAAC,QAAQ,CAAC,IAAI,aAAa,MAAM,CAAC,QAAQ,CAAC,KAAK,YAAY,WAAW,eAAe,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IAC9I,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,UAAU;IACV,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,WAAW;IACX,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QACtD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtC,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACrD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI;gBAC3B,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE;gBACnC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;YAEjB,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,KAAK,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC/E,KAAK,CAAC,IAAI,CAAC,MAAM,QAAQ,EAAE,CAAC,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YAEpC,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;gBACvB,KAAK,CAAC,IAAI,CAAC,mBAAmB,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;YACtD,CAAC;YAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;QACnD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,0BAA0B;IAC1B,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC;IACnD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnD,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACjC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,qBAAqB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,gCAAgC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;IAEtD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,mEAAmE;AAEnE;;;GAGG;AACH,SAAS,WAAW,CAAC,MAAoB;IACvC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,QAAQ,CAAC;QACd,KAAK,SAAS;YACZ,OAAO,CAAC,CAAC;QACX,KAAK,QAAQ,CAAC;QACd,KAAK,oBAAoB;YACvB,OAAO,CAAC,CAAC;QACX,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,WAAW,GAAU,MAAM,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC,mBAAmB,WAAqB,EAAE,CAAC,CAAC;YACzD,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/commands/review.test.d.ts

@@ -0,0 +1,9 @@
+/**
+ * CLI review command tests.
+ *
+ * Tests argument parsing, config file resolution, output formatting,
+ * and exit code mapping. The reviewPipeline is mocked to avoid
+ * needing an actual LLM API key.
+ */
+export {};
+//# sourceMappingURL=review.test.d.ts.map

package/dist/commands/review.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review.test.d.ts","sourceRoot":"","sources":["../../src/commands/review.test.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}