jinzd-ai-cli 0.4.214 → 0.4.216

package/dist/index.js

@@ -15,7 +15,7 @@ import {
   scanProject,
   sessionHasMeaningfulContent,
   setupProxy
-} from "./chunk-5FG7PSVM.js";
+} from "./chunk-PNTLA3MN.js";
 import {
   buildReviewPrompt,
   buildSecurityReviewPrompt
@@ -47,10 +47,10 @@ import {
   trustHook,
   undoStack,
   untrustHook
-} from "./chunk-R5CJD2AB.js";
+} from "./chunk-TCOC4AUI.js";
 import "./chunk-T2NL5ZIA.js";
 import "./chunk-BXP6YZ2P.js";
-import "./chunk-TR6MSPSS.js";
+import "./chunk-VW7Y27WW.js";
 import {
   SessionManager,
   getContentText
@@ -67,7 +67,7 @@ import {
   getConfigDirUsage,
   listRecentCrashes,
   writeCrashLog
-} from "./chunk-JQC7IATA.js";
+} from "./chunk-6HLKCSB3.js";
 import {
   ProviderRegistry
 } from "./chunk-QMXC327F.js";
@@ -76,7 +76,7 @@ import {
   getTopFailingTools,
   getTopUsedTools,
   installFlushOnExit
-} from "./chunk-YMFGGCUP.js";
+} from "./chunk-77HDCGTN.js";
 import {
   CONTENT_ONLY_STREAM_REMINDER,
   TEE_FINAL_USER_NUDGE,
@@ -98,7 +98,7 @@ import {
 } from "./chunk-XPBEJB27.js";
 import {
   ConfigManager
-} from "./chunk-YFHF3PVB.js";
+} from "./chunk-WAI3WPV2.js";
 import {
   AuthError,
   ProviderError,
@@ -124,7 +124,7 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-DBYMX2ZC.js";
+} from "./chunk-7YWS3JLU.js";
 import {
   formatGitContextForPrompt,
   getGitContext,
@@ -1661,7 +1661,7 @@ No tools match "${filter}".
           const { join: join5 } = await import("path");
           const { existsSync: existsSync5 } = await import("fs");
           const { getGitRoot: getGitRoot2 } = await import("./git-context-EXOEHQSF.js");
-          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-BKR7T3QH.js");
+          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-APSORFOH.js");
           const { approveProject, hashMcpFile } = await import("./project-trust-NKYHL3VZ.js");
           const cwd = process.cwd();
           const projectRoot = getGitRoot2(cwd) ?? cwd;
@@ -2720,7 +2720,7 @@ ${hint}` : "")
       usage: "/test [command|filter]",
       async execute(args, ctx) {
         try {
-          const { executeTests } = await import("./run-tests-F44JA2YW.js");
+          const { executeTests } = await import("./run-tests-ZRK4TQUN.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -7207,7 +7207,7 @@ program.command("web").description("Start Web UI server with browser-based chat
     console.error("Error: Invalid port number. Must be between 1 and 65535.");
     process.exit(1);
   }
-  const { startWebServer } = await import("./server-FXWCSCDZ.js");
+  const { startWebServer } = await import("./server-FXUF5P64.js");
   await startWebServer({ port, host: options.host });
 });
 program.command("user [action] [username]").description("Manage Web UI users (list | create <name> | delete <name> | reset-password <name> | logout-all <name> | migrate <name>)").action(async (action, username) => {
@@ -7374,16 +7374,16 @@ program.command("sessions").description("List recent conversation sessions").opt
   console.log(footer + "\n");
 });
 program.command("usage").description("Show token + cost usage grouped by provider/model (cross-session)").option("--days <n>", "Only the last N days (inclusive of today)").option("--month <ym>", "Only a specific month, format YYYY-MM (e.g. 2026-06)").option("--json", "Output as JSON (for scripting)").action(async (options) => {
-  const { runUsageCli } = await import("./usage-W7J2QA3G.js");
+  const { runUsageCli } = await import("./usage-X7MJX4YD.js");
   await runUsageCli(options);
 });
 program.command("doctor").description("Health check: API keys, config, MCP, recent crashes, tool usage, disk usage").option("--json", "Output as JSON (for scripting)").option("--reset-stats", "Reset accumulated tool usage statistics").action(async (options) => {
-  const { runDoctorCli } = await import("./doctor-cli-TGVSWKDB.js");
+  const { runDoctorCli } = await import("./doctor-cli-GUIX4X5F.js");
   await runDoctorCli({ json: !!options.json, resetStats: !!options.resetStats });
 });
 program.command("batch <action> [arg] [arg2]").description("Anthropic Message Batches: submit | list | status <id> | results <id> [out] | cancel <id>").option("--dry-run", "Parse and validate input without submitting (submit only)").action(async (action, arg, arg2, options) => {
   try {
-    const batch = await import("./batch-NPUUDETK.js");
+    const batch = await import("./batch-C6HCXZIG.js");
     switch (action) {
       case "submit":
         if (!arg) {
@@ -7426,7 +7426,7 @@ program.command("batch <action> [arg] [arg2]").description("Anthropic Message Ba
   }
 });
 program.command("mcp-serve").description("Start an MCP server over STDIO, exposing aicli's built-in tools to Claude Desktop / Cursor / other MCP clients").option("--allow-destructive", "Allow bash / run_interactive / task_create (always destructive in MCP mode)").option("--allow-outside-cwd", "Allow tool path arguments to escape the sandbox root \u2014 disabled by default").option("--tools <list>", "Comma-separated whitelist of tools to expose (default: all eligible tools)").option("--cwd <path>", "Working directory AND sandbox root (default: current directory)").action(async (options) => {
-  const { startMcpServer } = await import("./server-GQXC46R5.js");
+  const { startMcpServer } = await import("./server-O3XHT56X.js");
   await startMcpServer({
     allowDestructive: !!options.allowDestructive,
     allowOutsideCwd: !!options.allowOutsideCwd,
@@ -7434,8 +7434,39 @@ program.command("mcp-serve").description("Start an MCP server over STDIO, exposi
     cwd: options.cwd
   });
 });
-program.command("ci").description("Headless PR review (code + security) \u2014 reads git/gh diff, optionally posts to PR. Designed for GitHub Actions.").option("--pr <num>", "PR number; diff fetched via `gh pr diff <num>`", (v) => parseInt(v, 10)).option("--base <ref>", "Base ref for `git diff <ref>...HEAD` (ignored when --pr set)").option("--post", "Post review as a PR comment (requires gh CLI + GH_TOKEN, needs --pr)").option("--no-update", "Always create a new comment instead of updating the previous aicli review").option("--skip-code", "Skip the code review section").option("--skip-security", "Skip the security review section").option("--detailed", "Use the detailed code-review prompt").option("--max-diff <n>", "Max diff chars sent to the model (default 30000)", (v) => parseInt(v, 10)).option("--provider <id>", "Override provider (default: config.defaultProvider)").option("--model <id>", "Override model").option("--dry-run", "Print result to stdout instead of posting (overrides --post)").action(async (options) => {
-  const { runCi } = await import("./ci-3TU7WCY4.js");
+program.command("pr <action> [target]").description("PR review helpers: review | security-review | summarize. Defaults to git diff main...HEAD.").option("--base <ref>", "Base ref for git diff <ref>...HEAD (ignored when --pr set)").option("--head <ref>", "Head ref for local git diff (default: HEAD)").option("--post", "Post/update a PR comment; only when target is a GitHub PR number or URL").option("--no-update", "Always create a new PR comment instead of updating the previous aicli review").option("--detailed", "Use the detailed code-review prompt").option("--agents <list>", "Comma-separated review lenses: security,bugs,tests,maintainability").option("--max-diff <n>", "Max diff chars sent to the model (default 30000)", (v) => parseInt(v, 10)).option("--provider <id>", "Override provider (default: config.defaultProvider)").option("--model <id>", "Override model").option("--dry-run", "Print result to stdout instead of posting (overrides --post)").action(async (action, target, options) => {
+  if (!["review", "security-review", "summarize"].includes(action)) {
+    console.error(`Unknown pr action: ${action}. Use review | security-review | summarize.`);
+    process.exit(1);
+  }
+  const { runPrCli } = await import("./pr-JOL3IAGV.js");
+  const result = await runPrCli({
+    action,
+    target,
+    base: options.base,
+    head: options.head,
+    post: !!options.post,
+    update: options.update !== false,
+    detailed: !!options.detailed,
+    agents: options.agents,
+    maxDiffChars: options.maxDiff,
+    provider: options.provider,
+    model: options.model,
+    dryRun: !!options.dryRun
+  });
+  process.stdout.write(result.markdown + "\n");
+  if (result.posted) process.stderr.write("\n\u2705 Posted PR review comment\n");
+  process.exit(result.exitCode);
+});
+program.command("ci").description("Headless PR review (code + security) \u2014 reads git/gh diff, optionally posts to PR. Designed for GitHub Actions.").option("--pr <num>", "PR number or URL; diff fetched via gh pr diff <value>", (v) => /^#?\d+$/.test(v) ? parseInt(v.replace(/^#/, ""), 10) : v).option("--base <ref>", "Base ref for git diff <ref>...HEAD (ignored when --pr set)").option("--post", "Post review as a PR comment (requires gh CLI + GH_TOKEN, needs --pr)").option("--no-update", "Always create a new comment instead of updating the previous aicli review").option("--skip-code", "Skip the code review section").option("--skip-security", "Skip the security review section").option("--detailed", "Use the detailed code-review prompt").option("--max-diff <n>", "Max diff chars sent to the model (default 30000)", (v) => parseInt(v, 10)).option("--provider <id>", "Override provider (default: config.defaultProvider)").option("--model <id>", "Override model").option("--dry-run", "Print result to stdout instead of posting (overrides --post)").option("--json", "Output a structured JSON report").option("--markdown", "Output Markdown report (default)").option("--sarif", "Output SARIF 2.1.0 for code scanning artifacts").option("--fail-on-security-high", "Fail when the security review contains HIGH/CRITICAL findings (default)").option("--no-fail-on-security-high", "Do not fail on security HIGH/CRITICAL findings").option("--fail-on-test-failure", "Fail when the report mentions test failures (default)").option("--no-fail-on-test-failure", "Do not fail on test failure findings").option("--fail-on-lint-failure", "Fail when the report mentions lint/typecheck failures (default)").option("--no-fail-on-lint-failure", "Do not fail on lint/typecheck failure findings").action(async (options) => {
+  const { runCi } = await import("./ci-6ZTFO3LX.js");
+  const { formatCiResult } = await import("./ci-format-CLZ6QJRL.js");
+  const formats = [options.json, options.markdown, options.sarif].filter(Boolean).length;
+  if (formats > 1) {
+    console.error("Choose only one output format: --json, --markdown, or --sarif.");
+    process.exit(2);
+  }
+  const outputFormat = options.json ? "json" : options.sarif ? "sarif" : "markdown";
   const result = await runCi({
     pr: options.pr,
     base: options.base,
@@ -7447,13 +7478,16 @@ program.command("ci").description("Headless PR review (code + security) \u2014 r
     maxDiffChars: options.maxDiff,
     provider: options.provider,
     model: options.model,
-    dryRun: !!options.dryRun
+    dryRun: !!options.dryRun,
+    thresholds: {
+      securityHigh: options.failOnSecurityHigh !== false,
+      testFailure: options.failOnTestFailure !== false,
+      lintFailure: options.failOnLintFailure !== false
+    }
   });
-  process.stdout.write(result.markdown + "\n");
+  process.stdout.write(formatCiResult({ version: VERSION, ...result }, outputFormat) + "\n");
   if (result.posted) {
-    process.stderr.write(`
-\u2705 Posted review to PR #${options.pr}${result.updatedCommentId ? " (updated existing comment)" : ""}
-`);
+    process.stderr.write("\n\u2705 Posted review to PR #" + options.pr + (result.updatedCommentId ? " (updated existing comment)" : "") + "\n");
   }
   process.exit(result.exitCode);
 });
@@ -7484,6 +7518,8 @@ program.command("help").description("Show a comprehensive guide to all aicli fea
     `    ${G}aicli usage${R}                    Token + cost usage by provider/model (--days/--month/--json)`,
     `    ${G}aicli user <action>${R}            User management (list/create/delete)`,
     `    ${G}aicli batch <action>${R}           Anthropic Batches API (50% off, 24h): submit/list/status/results/cancel`,
+    `    ${G}aicli pr <action>${R}             Local PR review/summarize commands`,
+    `    ${G}aicli ci [options]${R}            Headless PR review for GitHub Actions`,
     `    ${G}aicli mcp-serve${R}               MCP server over STDIO (expose tools to Claude Desktop / Cursor)`,
     "",
     `${B}${C}  \u25A0 STARTUP OPTIONS${R}`,
@@ -7581,7 +7617,7 @@ program.command("hub [topic]").description("Start multi-agent hub (discuss / bra
     }),
     config.get("customProviders")
   );
-  const { startHub } = await import("./hub-GURYEW6F.js");
+  const { startHub } = await import("./hub-ZGHQWNWE.js");
   await startHub(
     {
       topic: topic ?? "",

package/dist/pr-JOL3IAGV.js

@@ -0,0 +1,267 @@
+#!/usr/bin/env node
+import {
+  countSeverity,
+  runCi
+} from "./chunk-GY3C3C2Y.js";
+import "./chunk-TJ6GGN4B.js";
+import {
+  buildReviewPrompt,
+  buildSecurityReviewPrompt,
+  truncateDiff
+} from "./chunk-HLWUDRBO.js";
+import {
+  ProviderRegistry
+} from "./chunk-QMXC327F.js";
+import "./chunk-XPBEJB27.js";
+import {
+  ConfigManager
+} from "./chunk-WAI3WPV2.js";
+import "./chunk-TZQHYZKT.js";
+import {
+  VERSION
+} from "./chunk-7YWS3JLU.js";
+import "./chunk-IW3Q7AE5.js";
+
+// src/cli/pr.ts
+import { execFileSync } from "child_process";
+var ALLOWED_AGENTS = /* @__PURE__ */ new Set(["security", "bugs", "tests", "maintainability"]);
+function parsePrTarget(input) {
+  if (!input) return {};
+  const s = input.trim();
+  if (/^https:\/\/github\.com\/[^/]+\/[^/]+\/pull\/\d+(?:[/?#].*)?$/.test(s)) return { pr: s };
+  if (/^#?\d+$/.test(s)) return { pr: parseInt(s.replace(/^#/, ""), 10) };
+  const range = s.match(/^([^\s.][^\s]*?)\.\.\.([^\s]+)$/);
+  if (range) return { base: range[1], head: range[2] };
+  return { base: s, head: "HEAD" };
+}
+function parseAgentList(input) {
+  if (!input) return [];
+  const agents = input.split(",").map((s) => s.trim()).filter(Boolean);
+  const invalid = agents.filter((a) => !ALLOWED_AGENTS.has(a));
+  if (invalid.length) throw new Error(`unknown PR review agent(s): ${invalid.join(", ")}. Allowed: ${Array.from(ALLOWED_AGENTS).join(", ")}`);
+  return [...new Set(agents)];
+}
+function validateGitRef(ref) {
+  if (!/^[A-Za-z0-9._/\-]+$/.test(ref)) throw new Error(`unsafe ref: ${ref}`);
+}
+function hasGitHubToken() {
+  return !!(process.env.GH_TOKEN || process.env.GITHUB_TOKEN);
+}
+function fetchPrMetadata(pr) {
+  if (!hasGitHubToken()) return null;
+  try {
+    const out = execFileSync("gh", ["pr", "view", String(pr), "--json", "number,url,title,author,state,baseRefName,headRefName"], {
+      encoding: "utf-8",
+      maxBuffer: 5 * 1024 * 1024,
+      timeout: 3e4
+    });
+    const parsed = JSON.parse(out);
+    return {
+      number: parsed.number,
+      url: parsed.url,
+      title: parsed.title,
+      state: parsed.state,
+      baseRefName: parsed.baseRefName,
+      headRefName: parsed.headRefName,
+      author: parsed.author?.login
+    };
+  } catch {
+    return null;
+  }
+}
+function fetchDiffSource(opts) {
+  const target = parsePrTarget(opts.target);
+  if (opts.diffOverride != null) {
+    const isPr = target.pr != null;
+    return {
+      kind: isPr ? "github-pr" : "git",
+      label: isPr ? `PR ${String(target.pr)}` : opts.base ? `${opts.base}...${opts.head || "HEAD"}` : "injected diff",
+      diff: opts.diffOverride,
+      metadata: opts.metadataOverride ?? null
+    };
+  }
+  const pr = target.pr;
+  const base = opts.base ?? target.base ?? "main";
+  const head = opts.head ?? target.head ?? "HEAD";
+  if (pr != null) {
+    try {
+      const diff = execFileSync("gh", ["pr", "diff", String(pr)], {
+        encoding: "utf-8",
+        maxBuffer: 50 * 1024 * 1024,
+        timeout: 6e4
+      });
+      return { kind: "github-pr", label: `PR ${String(pr)}`, diff, metadata: fetchPrMetadata(pr) };
+    } catch (err) {
+      const msg = err.stderr?.toString() ?? err.message;
+      throw new Error(`gh pr diff ${String(pr)} failed: ${msg.trim() || "unknown error"}. For local review without GitHub auth, use --base/--head instead.`);
+    }
+  }
+  validateGitRef(base);
+  validateGitRef(head);
+  try {
+    const diff = execFileSync("git", ["diff", `${base}...${head}`], {
+      encoding: "utf-8",
+      maxBuffer: 50 * 1024 * 1024,
+      timeout: 3e4
+    });
+    return { kind: "git", label: `${base}...${head}`, diff, metadata: null };
+  } catch (err) {
+    throw new Error(`git diff ${base}...${head} failed: ${err.message}`);
+  }
+}
+function metadataMarkdown(meta) {
+  if (!meta) return "";
+  const parts = [
+    meta.number != null ? `#${meta.number}` : void 0,
+    meta.title,
+    meta.state,
+    meta.author ? `by @${meta.author}` : void 0,
+    meta.baseRefName && meta.headRefName ? `${meta.baseRefName} \u2190 ${meta.headRefName}` : void 0,
+    meta.url
+  ].filter(Boolean);
+  return parts.length ? `
+PR metadata: ${parts.join(" \xB7 ")}` : "";
+}
+function buildGitContext(src) {
+  const parts = [`Source: ${src.label}`, `Reviewer: aicli v${VERSION}`];
+  if (src.metadata?.number != null) parts.push(`PR: #${src.metadata.number}`);
+  if (src.metadata?.title) parts.push(`Title: ${src.metadata.title}`);
+  if (src.metadata?.baseRefName && src.metadata?.headRefName) parts.push(`Base/Head: ${src.metadata.baseRefName}...${src.metadata.headRefName}`);
+  return parts.join(" | ");
+}
+function buildSummaryPrompt(diff, gitContext) {
+  return `# Pull Request Summary Request
+
+Summarize this pull request for maintainers. Focus on what changed, why it matters, risk areas, tests implied by the diff, and release-note worthy behavior.
+
+## Git Context
+${gitContext}
+
+## Code Changes (diff)
+\`\`\`diff
+${diff}
+\`\`\`
+
+## Output Format
+1. **Summary**: 2-4 bullets
+2. **Key Files**: important files and why they changed
+3. **Risk / Review Focus**: areas reviewers should inspect
+4. **Testing Notes**: tests present or missing
+5. **Suggested PR Description**: concise markdown description`;
+}
+function buildAgentPrompt(agent, diff, gitContext) {
+  const focus = {
+    security: "security vulnerabilities, secret handling, authz/authn, injection, unsafe network/file behavior",
+    bugs: "logic bugs, edge cases, race conditions, incorrect assumptions, regressions",
+    tests: "missing tests, weak assertions, CI breakage risk, testability gaps",
+    maintainability: "complexity, naming, duplication, API shape, future maintenance risk"
+  };
+  return `# PR Review Agent: ${agent}
+
+Review the diff only from this lens: ${focus[agent]}. Be concise and cite file paths/lines when possible.
+
+## Git Context
+${gitContext}
+
+## Diff
+\`\`\`diff
+${diff}
+\`\`\`
+
+## Output Format
+- Findings first, ordered by severity
+- If no material findings, say so clearly
+- Keep recommendations actionable`;
+}
+async function getProvider(opts) {
+  const config = new ConfigManager();
+  const registry = new ProviderRegistry();
+  await registry.initialize(
+    (id) => config.getApiKey(id),
+    (id) => ({ baseUrl: config.get("customBaseUrls")[id], timeout: config.get("timeouts")[id], proxy: config.get("proxy") }),
+    config.get("customProviders")
+  );
+  const providerId = opts.provider ?? config.getDefaultProvider();
+  if (!registry.has(providerId)) throw new Error(`Provider '${providerId}' is not configured. Set the right AICLI_API_KEY_* env var or pass --provider.`);
+  const info = registry.get(providerId).info;
+  return { registry, providerId, modelId: opts.model ?? config.get("defaultModels")[providerId] ?? info.defaultModel };
+}
+async function runPrompt(registry, providerId, modelId, prompt) {
+  const provider = registry.get(providerId);
+  const resp = await provider.chat({
+    messages: [{ role: "user", content: prompt, timestamp: /* @__PURE__ */ new Date() }],
+    model: modelId,
+    stream: false,
+    temperature: 0.3,
+    maxTokens: 8192
+  });
+  return resp.content?.trim() ?? "";
+}
+async function runPrCli(opts) {
+  let source;
+  try {
+    source = fetchDiffSource(opts);
+  } catch (err) {
+    return { exitCode: 2, markdown: `\u274C ${err.message}`, posted: false, severity: { critical: 0, high: 0, warning: 0, info: 0 } };
+  }
+  const diff = source.diff.trim();
+  if (!diff) return { exitCode: 0, markdown: `\u2705 No changes to review (${source.label}).`, posted: false, severity: { critical: 0, high: 0, warning: 0, info: 0 } };
+  const parsedTarget = parsePrTarget(opts.target);
+  const requestedAgents = parseAgentList(opts.agents);
+  if (opts.post && source.kind !== "github-pr") {
+    return { exitCode: 2, markdown: "\u274C --post requires a GitHub PR number or URL target.", posted: false, severity: { critical: 0, high: 0, warning: 0, info: 0 } };
+  }
+  if (opts.post && opts.action === "summarize") {
+    return { exitCode: 2, markdown: "\u274C --post is currently supported for pr review and pr security-review only.", posted: false, severity: { critical: 0, high: 0, warning: 0, info: 0 } };
+  }
+  if (opts.post && requestedAgents.length > 0) {
+    return { exitCode: 2, markdown: "\u274C --post is currently not supported together with --agents; run without --agents or post the Markdown manually.", posted: false, severity: { critical: 0, high: 0, warning: 0, info: 0 } };
+  }
+  if ((opts.action === "review" || opts.action === "security-review") && requestedAgents.length === 0) {
+    const ci = await runCi({
+      pr: source.kind === "github-pr" ? parsedTarget.pr : void 0,
+      diffOverride: diff,
+      base: source.kind === "git" ? source.label.split("...")[0] : void 0,
+      post: !!opts.post,
+      update: opts.update !== false,
+      skipCode: opts.action === "security-review",
+      skipSecurity: opts.action === "review",
+      detailed: !!opts.detailed,
+      maxDiffChars: opts.maxDiffChars,
+      provider: opts.provider,
+      model: opts.model,
+      dryRun: !!opts.dryRun
+    });
+    return { exitCode: ci.exitCode, markdown: ci.markdown + metadataMarkdown(source.metadata), posted: ci.posted, severity: ci.severity };
+  }
+  const maxDiff = opts.maxDiffChars ?? 3e4;
+  const { diff: trimmedDiff, truncated } = truncateDiff(diff, maxDiff);
+  const gitContext = buildGitContext(source);
+  let providerBundle;
+  try {
+    providerBundle = await getProvider(opts);
+  } catch (err) {
+    return { exitCode: 2, markdown: `\u274C ${err.message}`, posted: false, severity: { critical: 0, high: 0, warning: 0, info: 0 } };
+  }
+  const sections = [`## \u{1F916} aicli pr ${opts.action}`, `*Provider: \`${providerBundle.providerId}\` \xB7 Model: \`${providerBundle.modelId}\` \xB7 Source: \`${source.label}\` \xB7 aicli v${VERSION}*`, ""];
+  if (source.metadata) sections.push(`> ${metadataMarkdown(source.metadata).trim()}`, "");
+  try {
+    const prompt = opts.action === "security-review" ? buildSecurityReviewPrompt(trimmedDiff, gitContext) : opts.action === "summarize" ? buildSummaryPrompt(trimmedDiff, gitContext) : buildReviewPrompt(trimmedDiff, gitContext, !!opts.detailed);
+    sections.push(await runPrompt(providerBundle.registry, providerBundle.providerId, providerBundle.modelId, prompt), "");
+    if (requestedAgents.length) {
+      const outputs = await Promise.all(requestedAgents.map(async (agent) => ({ agent, output: await runPrompt(providerBundle.registry, providerBundle.providerId, providerBundle.modelId, buildAgentPrompt(agent, trimmedDiff, gitContext)) })));
+      sections.push("### Agent Lenses", "");
+      for (const item of outputs) sections.push(`#### ${item.agent}`, item.output, "");
+    }
+  } catch (err) {
+    return { exitCode: 2, markdown: `\u274C PR review call failed: ${err.message}`, posted: false, severity: { critical: 0, high: 0, warning: 0, info: 0 } };
+  }
+  if (truncated) sections.push(`> \u26A0 Diff was truncated to ${maxDiff} chars (original: ${diff.length}). Consider splitting large PRs.`);
+  const markdown = sections.join("\n");
+  return { exitCode: 0, markdown, posted: false, severity: countSeverity(markdown) };
+}
+export {
+  parseAgentList,
+  parsePrTarget,
+  runPrCli
+};

package/dist/{run-tests-R6FL6CQ3.js → run-tests-4PKSIVK5.js}

@@ -1,7 +1,7 @@
 import {
   executeTests,
   runTestsTool
-} from "./chunk-JOJA35RK.js";
+} from "./chunk-OLN7VUZA.js";
 export {
   executeTests,
   runTestsTool

package/dist/{run-tests-F44JA2YW.js → run-tests-ZRK4TQUN.js}

@@ -2,8 +2,8 @@
 import {
   executeTests,
   runTestsTool
-} from "./chunk-TR6MSPSS.js";
-import "./chunk-DBYMX2ZC.js";
+} from "./chunk-VW7Y27WW.js";
+import "./chunk-7YWS3JLU.js";
 export {
   executeTests,
   runTestsTool

package/dist/{server-FXWCSCDZ.js → server-FXUF5P64.js}

@@ -24,7 +24,7 @@ import {
   scanDirTree,
   scanProject,
   setupProxy
-} from "./chunk-5FG7PSVM.js";
+} from "./chunk-PNTLA3MN.js";
 import {
   buildReviewPrompt,
   buildSecurityReviewPrompt
@@ -61,10 +61,10 @@ import {
   spawnAgentContext,
   truncateOutput,
   undoStack
-} from "./chunk-R5CJD2AB.js";
+} from "./chunk-TCOC4AUI.js";
 import "./chunk-T2NL5ZIA.js";
 import "./chunk-BXP6YZ2P.js";
-import "./chunk-TR6MSPSS.js";
+import "./chunk-VW7Y27WW.js";
 import {
   SessionManager,
   getContentText
@@ -78,7 +78,7 @@ import {
 } from "./chunk-QMXC327F.js";
 import {
   runTool
-} from "./chunk-YMFGGCUP.js";
+} from "./chunk-77HDCGTN.js";
 import {
   CONTENT_ONLY_STREAM_REMINDER,
   TEE_FINAL_USER_NUDGE,
@@ -97,7 +97,7 @@ import {
 } from "./chunk-XPBEJB27.js";
 import {
   ConfigManager
-} from "./chunk-YFHF3PVB.js";
+} from "./chunk-WAI3WPV2.js";
 import "./chunk-TZQHYZKT.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
@@ -116,7 +116,7 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-DBYMX2ZC.js";
+} from "./chunk-7YWS3JLU.js";
 import {
   formatGitContextForPrompt,
   getGitContext,
@@ -2755,7 +2755,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
       case "test": {
         this.send({ type: "info", message: "\u{1F9EA} Running tests..." });
         try {
-          const { executeTests } = await import("./run-tests-F44JA2YW.js");
+          const { executeTests } = await import("./run-tests-ZRK4TQUN.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {

package/dist/{server-GQXC46R5.js → server-O3XHT56X.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import {
   ToolRegistry
-} from "./chunk-R5CJD2AB.js";
+} from "./chunk-TCOC4AUI.js";
 import "./chunk-T2NL5ZIA.js";
 import "./chunk-BXP6YZ2P.js";
-import "./chunk-TR6MSPSS.js";
+import "./chunk-VW7Y27WW.js";
 import {
   runTool
-} from "./chunk-YMFGGCUP.js";
+} from "./chunk-77HDCGTN.js";
 import {
   getDangerLevel,
   schemaToJsonSchema
@@ -15,7 +15,7 @@ import {
 import "./chunk-TZQHYZKT.js";
 import {
   VERSION
-} from "./chunk-DBYMX2ZC.js";
+} from "./chunk-7YWS3JLU.js";
 import "./chunk-4BKXL7SM.js";
 import "./chunk-TB4W4Y4T.js";
 import "./chunk-KHYD3WXE.js";

package/dist/{task-orchestrator-6AZD5WSR.js → task-orchestrator-TUMDTOAX.js}

@@ -3,13 +3,13 @@ import {
   ToolRegistry,
   googleSearchContext,
   truncateOutput
-} from "./chunk-R5CJD2AB.js";
+} from "./chunk-TCOC4AUI.js";
 import "./chunk-T2NL5ZIA.js";
 import "./chunk-BXP6YZ2P.js";
-import "./chunk-TR6MSPSS.js";
+import "./chunk-VW7Y27WW.js";
 import {
   runTool
-} from "./chunk-YMFGGCUP.js";
+} from "./chunk-77HDCGTN.js";
 import {
   getDangerLevel,
   runLeanAgentLoop
@@ -17,7 +17,7 @@ import {
 import "./chunk-TZQHYZKT.js";
 import {
   SUBAGENT_ALLOWED_TOOLS
-} from "./chunk-DBYMX2ZC.js";
+} from "./chunk-7YWS3JLU.js";
 import "./chunk-4BKXL7SM.js";
 import "./chunk-TB4W4Y4T.js";
 import "./chunk-KHYD3WXE.js";

package/dist/{usage-W7J2QA3G.js → usage-X7MJX4YD.js}

@@ -8,9 +8,9 @@ import {
 } from "./chunk-E44DTERW.js";
 import {
   ConfigManager
-} from "./chunk-YFHF3PVB.js";
+} from "./chunk-WAI3WPV2.js";
 import "./chunk-TZQHYZKT.js";
-import "./chunk-DBYMX2ZC.js";
+import "./chunk-7YWS3JLU.js";
 import "./chunk-IW3Q7AE5.js";
 
 // src/cli/usage.ts

package/dist/web/client/actions.js

@@ -24,6 +24,7 @@ function handleDeclarativeAction(action, el) {
     case 'batch-deny-response': window.respondBatchDeny(el.dataset.requestId, el); break;
     case 'ask-user-response': window.respondAskUser(el.dataset.requestId); break;
     case 'auto-pause-response': window.respondAutoPause(el.dataset.requestId, el.dataset.pauseAction); break;
+    case 'copy-confirm-diff': window.copyConfirmDiff(el); break;
     case 'use-template': useTemplate(el.closest('[data-tpl-id]')?.dataset.tplId); break;
     case 'edit-template': editTemplate(el.closest('[data-tpl-id]')?.dataset.tplId); break;
     case 'delete-template': deleteTemplate(el.closest('[data-tpl-id]')?.dataset.tplId); break;