newpr 0.1.3 → 0.3.0

package/src/web/server/routes.ts

@@ -1,10 +1,18 @@
 import type { NewprConfig } from "../../types/config.ts";
-import type { NewprOutput } from "../../types/output.ts";
+import type { NewprOutput, ChatMessage, ChatToolCall, ChatSegment } from "../../types/output.ts";
 import { DEFAULT_CONFIG } from "../../types/config.ts";
-import { listSessions, loadSession } from "../../history/store.ts";
+import { listSessions, loadSession, loadSinglePatch, savePatchesSidecar, loadCommentsSidecar, saveCommentsSidecar, loadChatSidecar, saveChatSidecar, loadPatchesSidecar, saveCartoonSidecar, loadCartoonSidecar } from "../../history/store.ts";
+import type { DiffComment } from "../../types/output.ts";
+import { fetchPrDiff } from "../../github/fetch-diff.ts";
+import { fetchPrBody, fetchPrComments } from "../../github/fetch-pr.ts";
+import { parseDiff } from "../../diff/parser.ts";
+import { parsePrInput } from "../../github/parse-pr.ts";
 import { writeStoredConfig, type StoredConfig } from "../../config/store.ts";
 import { startAnalysis, getSession, cancelAnalysis, subscribe } from "./session-manager.ts";
 import { generateCartoon } from "../../llm/cartoon.ts";
+import { chatWithTools, type ChatTool, type ChatStreamEvent } from "../../llm/client.ts";
+import { detectAgents, runAgent } from "../../workspace/agent.ts";
+import { randomBytes } from "node:crypto";
 
 function json(data: unknown, status = 200): Response {
 	return new Response(JSON.stringify(data), {
@@ -13,11 +21,198 @@ function json(data: unknown, status = 200): Response {
 	});
 }
 
+import type { PreflightResult } from "../../cli/preflight.ts";
+
 interface RouteOptions {
 	cartoon?: boolean;
+	preflight?: PreflightResult;
 }
 
 export function createRoutes(token: string, config: NewprConfig, options: RouteOptions = {}) {
+	const ghHeaders = {
+		Authorization: `token ${token}`,
+		Accept: "application/vnd.github.v3+json",
+		"User-Agent": "newpr-cli",
+		"Content-Type": "application/json",
+	};
+
+	async function resolvePrUrl(sessionId: string): Promise<string | null> {
+		const stored = await loadSession(sessionId);
+		if (stored) return stored.meta.pr_url;
+		const live = getSession(sessionId);
+		if (live?.result?.meta?.pr_url) return live.result.meta.pr_url;
+		if (live?.historyId) {
+			const hist = await loadSession(live.historyId);
+			if (hist) return hist.meta.pr_url;
+		}
+		return null;
+	}
+
+	async function fetchHeadSha(pr: { owner: string; repo: string; number: number }): Promise<string | null> {
+		try {
+			const res = await fetch(`https://api.github.com/repos/${pr.owner}/${pr.repo}/pulls/${pr.number}`, { headers: ghHeaders });
+			if (!res.ok) return null;
+			const data = await res.json() as { head?: { sha?: string } };
+			return data.head?.sha ?? null;
+		} catch {
+			return null;
+		}
+	}
+
+	async function fetchCurrentUser(): Promise<{ login: string; avatar_url?: string }> {
+		try {
+			const res = await fetch("https://api.github.com/user", { headers: ghHeaders });
+			if (res.ok) {
+				const user = await res.json() as Record<string, unknown>;
+				return { login: user.login as string, avatar_url: user.avatar_url as string | undefined };
+			}
+		} catch {}
+		return { login: "anonymous" };
+	}
+
+	function buildChatSystemPrompt(data: NewprOutput): string {
+		const fileSummaries = data.files
+			.map((f) => `- ${f.path} (${f.status}, +${f.additions}/-${f.deletions}): ${f.summary}`)
+			.join("\n");
+		const groupSummaries = data.groups
+			.map((g) => `- [${g.type}] ${g.name}: ${g.description}\n  Files: ${g.files.join(", ")}`)
+			.join("\n");
+
+		return `You are an expert code reviewer assistant for a Pull Request analysis tool called "newpr".
+You have access to the full analysis of PR #${data.meta.pr_number} "${data.meta.pr_title}" in ${data.meta.pr_url}.
+
+## Analysis Context
+
+**Author**: ${data.meta.author}
+**Branches**: ${data.meta.head_branch} → ${data.meta.base_branch}
+**Stats**: ${data.meta.total_files_changed} files, +${data.meta.total_additions} -${data.meta.total_deletions}
+**Risk**: ${data.summary.risk_level}
+
+**Purpose**: ${data.summary.purpose}
+**Scope**: ${data.summary.scope}
+**Impact**: ${data.summary.impact}
+
+## File Changes
+${fileSummaries}
+
+## Change Groups
+${groupSummaries}
+
+## Narrative
+${data.narrative}
+
+${data.meta.pr_body ? `## PR Description\n${data.meta.pr_body}` : ""}
+
+## Anchor Syntax (CRITICAL)
+You MUST use these anchors. They become clickable links in the UI.
+
+1. Group: [[group:Exact Group Name]] — renders as a clickable chip.
+2. File: [[file:exact/path/here.ts]] — renders as a clickable chip.
+3. Line reference: [[line:exact/path/here.ts#L42-L50]](descriptive text) — the "descriptive text" becomes an underlined link that opens the diff scrolled to that line. The line info is NOT shown — only the text is visible.
+
+RULES:
+- Use EXACT paths and names from the lists above.
+- For line references, ALWAYS use [[line:path#L-L]](text). NEVER bare [[line:...]] without (text).
+- The (text) should describe what the code does, NOT show file names or line numbers.
+- Do NOT place [[file:...]] and [[line:...]] adjacent for the same file.
+- Use the get_file_diff tool to find exact line numbers before referencing them.
+- Aim for most statements about code to include at least one line reference.
+
+## Math / LaTeX
+When expressing mathematical formulas, algorithms, or complexity analysis, use LaTeX syntax:
+- Inline: $O(n \\log n)$, $\\sum_{i=1}^{n} x_i$
+- Block:
+$$
+f(x) = \\int_{a}^{b} g(t) \\, dt
+$$
+
+## Instructions
+- Answer questions about this PR thoroughly and precisely.
+- Use your tools to fetch additional context when needed (file diffs, comments, reviews).
+- When referencing code, include relevant snippets from the diff.
+- Be concise but thorough. Use markdown formatting.
+- If the user asks in Korean, respond in Korean. Match the user's language.`;
+	}
+
+	function buildChatTools(): ChatTool[] {
+		return [
+			{
+				type: "function",
+				function: {
+					name: "get_file_diff",
+					description: "Get the full unified diff for a specific file in this PR. Use this to see exact code changes.",
+					parameters: {
+						type: "object",
+						properties: {
+							path: { type: "string", description: "File path (e.g. 'src/index.ts')" },
+						},
+						required: ["path"],
+					},
+				},
+			},
+			{
+				type: "function",
+				function: {
+					name: "list_files",
+					description: "List all changed files in this PR with their status, line counts, and summaries.",
+					parameters: { type: "object", properties: {} },
+				},
+			},
+			{
+				type: "function",
+				function: {
+					name: "get_pr_comments",
+					description: "Get all issue comments (discussion) on this PR from GitHub.",
+					parameters: { type: "object", properties: {} },
+				},
+			},
+			{
+				type: "function",
+				function: {
+					name: "get_review_comments",
+					description: "Get all inline review comments on specific lines of code in this PR from GitHub.",
+					parameters: { type: "object", properties: {} },
+				},
+			},
+			{
+				type: "function",
+				function: {
+					name: "get_pr_details",
+					description: "Get PR metadata from GitHub: state, mergeable status, labels, requested reviewers, etc.",
+					parameters: { type: "object", properties: {} },
+				},
+			},
+			{
+				type: "function",
+				function: {
+					name: "web_search",
+					description: "Search the web for documentation, library references, best practices, or any technical question. Returns top search results with snippets.",
+					parameters: {
+						type: "object",
+						properties: {
+							query: { type: "string", description: "Search query (e.g. 'React useEffect cleanup pattern', 'zod discriminated union')" },
+						},
+						required: ["query"],
+					},
+				},
+			},
+			{
+				type: "function",
+				function: {
+					name: "web_fetch",
+					description: "Fetch the text content of a web page. Use this to read documentation pages, blog posts, or API references found via web_search.",
+					parameters: {
+						type: "object",
+						properties: {
+							url: { type: "string", description: "URL to fetch (must start with https://)" },
+						},
+						required: ["url"],
+					},
+				},
+			},
+		];
+	}
+
 	return {
 		"POST /api/analysis": async (req: Request) => {
 			const body = await req.json() as { pr: string };
@@ -45,6 +240,7 @@ export function createRoutes(token: string, config: NewprConfig, options: RouteO
 				finishedAt: session.finishedAt,
 				error: session.error,
 				result: session.result,
+				historyId: session.historyId,
 			});
 		},
 
@@ -121,6 +317,130 @@ export function createRoutes(token: string, config: NewprConfig, options: RouteO
 			return json(data);
 		},
 
+		"GET /api/sessions/:id/diff": async (req: Request) => {
+			const url = new URL(req.url);
+			const segments = url.pathname.split("/");
+			const id = segments[segments.length - 2]!;
+			const filePath = url.searchParams.get("path");
+			if (!filePath) return json({ error: "Missing 'path' query parameter" }, 400);
+
+			const patch = await loadSinglePatch(id, filePath);
+			if (patch) return json({ patch, path: filePath });
+
+			let prUrl: string | null = null;
+			let storeId = id;
+
+			const storedSession = await loadSession(id);
+			if (storedSession) {
+				prUrl = storedSession.meta.pr_url;
+			} else {
+				const liveSession = getSession(id);
+				if (liveSession?.result?.meta?.pr_url) {
+					prUrl = liveSession.result.meta.pr_url;
+					if (liveSession.historyId) storeId = liveSession.historyId;
+				} else if (liveSession?.historyId) {
+					const histPatch = await loadSinglePatch(liveSession.historyId, filePath);
+					if (histPatch) return json({ patch: histPatch, path: filePath });
+
+					const histSession = await loadSession(liveSession.historyId);
+					if (histSession) {
+						prUrl = histSession.meta.pr_url;
+						storeId = liveSession.historyId;
+					}
+				}
+			}
+
+			if (!prUrl) return json({ error: "Session not found" }, 404);
+
+			try {
+				const pr = parsePrInput(prUrl);
+				const rawDiff = await fetchPrDiff(pr, token);
+				const parsed = parseDiff(rawDiff);
+
+				const allPatches: Record<string, string> = {};
+				for (const file of parsed.files) {
+					allPatches[file.path] = file.raw;
+				}
+				await savePatchesSidecar(storeId, allPatches).catch(() => {});
+
+				const backfilledPatch = allPatches[filePath];
+				if (!backfilledPatch) return json({ error: "File not found in diff" }, 404);
+				return json({ patch: backfilledPatch, path: filePath });
+			} catch (err) {
+				const msg = err instanceof Error ? err.message : String(err);
+				return json({ error: `Failed to fetch diff: ${msg}` }, 500);
+			}
+		},
+
+		"GET /api/sessions/:id/discussion": async (req: Request) => {
+			const url = new URL(req.url);
+			const segments = url.pathname.split("/");
+			const id = segments[segments.length - 2]!;
+
+			let prUrl: string | null = null;
+			let body: string | null = null;
+
+			const storedSession = await loadSession(id);
+			if (storedSession) {
+				prUrl = storedSession.meta.pr_url;
+				body = storedSession.meta.pr_body ?? null;
+			} else {
+				const liveSession = getSession(id);
+				if (liveSession?.result?.meta?.pr_url) {
+					prUrl = liveSession.result.meta.pr_url;
+					body = liveSession.result.meta.pr_body ?? null;
+				} else if (liveSession?.historyId) {
+					const histSession = await loadSession(liveSession.historyId);
+					if (histSession) {
+						prUrl = histSession.meta.pr_url;
+						body = histSession.meta.pr_body ?? null;
+					}
+				}
+			}
+
+			if (!prUrl) return json({ error: "Session not found" }, 404);
+
+			try {
+				const pr = parsePrInput(prUrl);
+				if (body === null) {
+					body = await fetchPrBody(pr, token);
+				}
+				const comments = await fetchPrComments(pr, token);
+				return json({ body, comments });
+			} catch (err) {
+				const msg = err instanceof Error ? err.message : String(err);
+				return json({ error: `Failed to fetch discussion: ${msg}` }, 500);
+			}
+		},
+
+		"GET /api/proxy": async (req: Request) => {
+			const url = new URL(req.url);
+			const target = url.searchParams.get("url");
+			if (!target) return json({ error: "Missing 'url' query parameter" }, 400);
+
+			const allowed = target.startsWith("https://github.com/") || target.startsWith("https://user-images.githubusercontent.com/");
+			if (!allowed) return json({ error: "URL not allowed" }, 403);
+
+			try {
+				const headers: Record<string, string> = { "User-Agent": "newpr-cli" };
+				if (token && target.startsWith("https://github.com/")) {
+					headers.Authorization = `token ${token}`;
+				}
+				const res = await fetch(target, { headers, redirect: "follow" });
+				if (!res.ok) return new Response(null, { status: res.status });
+
+				const contentType = res.headers.get("content-type") ?? "application/octet-stream";
+				return new Response(res.body, {
+					headers: {
+						"Content-Type": contentType,
+						"Cache-Control": "public, max-age=86400, immutable",
+					},
+				});
+			} catch {
+				return new Response(null, { status: 502 });
+			}
+		},
+
 		"GET /api/me": async () => {
 			try {
 				const res = await fetch("https://api.github.com/user", {
@@ -209,6 +529,535 @@ export function createRoutes(token: string, config: NewprConfig, options: RouteO
 			return json({ cartoon: !!options.cartoon });
 		},
 
+		"POST /api/review": async (req: Request) => {
+			const body = await req.json() as { pr_url: string; event: string; body?: string };
+			if (!body.pr_url || !body.event) return json({ error: "Missing pr_url or event" }, 400);
+
+			const validEvents = ["APPROVE", "REQUEST_CHANGES", "COMMENT"];
+			if (!validEvents.includes(body.event)) return json({ error: `Invalid event: ${body.event}` }, 400);
+
+			try {
+				const pr = parsePrInput(body.pr_url);
+				const res = await fetch(
+					`https://api.github.com/repos/${pr.owner}/${pr.repo}/pulls/${pr.number}/reviews`,
+					{
+						method: "POST",
+						headers: ghHeaders,
+						body: JSON.stringify({
+							body: body.body ?? "",
+							event: body.event,
+						}),
+					},
+				);
+				if (!res.ok) {
+					const errBody = await res.json().catch(() => ({})) as { message?: string };
+					return json({ error: errBody.message ?? `GitHub API error: ${res.status}` }, res.status);
+				}
+				const data = await res.json() as { id: number; state: string; html_url: string };
+				return json({ ok: true, id: data.id, state: data.state, html_url: data.html_url });
+			} catch (err) {
+				return json({ error: err instanceof Error ? err.message : String(err) }, 500);
+			}
+		},
+
+		"GET /api/preflight": () => {
+			return json(options.preflight ?? null);
+		},
+
+		"GET /api/sessions/:id/comments": async (req: Request) => {
+			const url = new URL(req.url);
+			const segments = url.pathname.split("/");
+			const id = segments[3]!;
+			const filePath = url.searchParams.get("path");
+
+			const comments = await loadCommentsSidecar(id) ?? [];
+			const filtered = filePath ? comments.filter((c) => c.filePath === filePath) : comments;
+			return json(filtered);
+		},
+
+		"POST /api/sessions/:id/comments": async (req: Request) => {
+			const url = new URL(req.url);
+			const segments = url.pathname.split("/");
+			const sessionId = segments[3]!;
+
+			const body = await req.json() as { filePath?: string; line?: number; startLine?: number; side?: string; body?: string };
+			if (!body.filePath || body.line == null || !body.side || !body.body?.trim()) {
+				return json({ error: "Missing required fields" }, 400);
+			}
+
+			const user = await fetchCurrentUser();
+			const prUrl = await resolvePrUrl(sessionId);
+
+			let githubCommentId: number | undefined;
+			let githubCommentUrl: string | undefined;
+			if (prUrl) {
+				try {
+					const pr = parsePrInput(prUrl);
+					const sha = await fetchHeadSha(pr);
+					if (sha) {
+						const ghSide = body.side === "old" ? "LEFT" : "RIGHT";
+						const ghBody: Record<string, unknown> = {
+							commit_id: sha,
+							path: body.filePath,
+							line: body.line,
+							side: ghSide,
+							body: body.body.trim(),
+						};
+						if (body.startLine != null && body.startLine !== body.line) {
+							ghBody.start_line = body.startLine;
+							ghBody.start_side = ghSide;
+						}
+						const res = await fetch(
+							`https://api.github.com/repos/${pr.owner}/${pr.repo}/pulls/${pr.number}/comments`,
+							{
+								method: "POST",
+								headers: ghHeaders,
+								body: JSON.stringify(ghBody),
+							},
+						);
+						if (res.ok) {
+							const data = await res.json() as { id?: number; html_url?: string };
+							githubCommentId = data.id;
+							githubCommentUrl = data.html_url;
+						}
+					}
+				} catch {}
+			}
+
+			const hasRange = body.startLine != null && body.startLine !== body.line;
+			const comment: DiffComment = {
+				id: randomBytes(8).toString("hex"),
+				sessionId,
+				filePath: body.filePath,
+				line: body.line,
+				...(hasRange ? { startLine: body.startLine } : {}),
+				side: body.side as "old" | "new",
+				body: body.body.trim(),
+				author: user.login,
+				authorAvatar: user.avatar_url,
+				createdAt: new Date().toISOString(),
+				githubUrl: githubCommentUrl,
+				githubCommentId,
+			};
+
+			const existing = await loadCommentsSidecar(sessionId) ?? [];
+			existing.push(comment);
+			await saveCommentsSidecar(sessionId, existing);
+
+			return json(comment, 201);
+		},
+
+		"PATCH /api/sessions/:id/comments/:commentId": async (req: Request) => {
+			const url = new URL(req.url);
+			const segments = url.pathname.split("/");
+			const sessionId = segments[3]!;
+			const commentId = segments[5]!;
+
+			const body = await req.json() as { body?: string };
+			if (!body.body?.trim()) return json({ error: "Missing body" }, 400);
+
+			const existing = await loadCommentsSidecar(sessionId) ?? [];
+			const comment = existing.find((c) => c.id === commentId);
+			if (!comment) return json({ error: "Comment not found" }, 404);
+
+			comment.body = body.body.trim();
+
+			if (comment.githubCommentId) {
+				const prUrl = await resolvePrUrl(sessionId);
+				if (prUrl) {
+					try {
+						const pr = parsePrInput(prUrl);
+						await fetch(
+							`https://api.github.com/repos/${pr.owner}/${pr.repo}/pulls/comments/${comment.githubCommentId}`,
+							{
+								method: "PATCH",
+								headers: ghHeaders,
+								body: JSON.stringify({ body: comment.body }),
+							},
+						);
+					} catch {}
+				}
+			}
+
+			await saveCommentsSidecar(sessionId, existing);
+			return json(comment);
+		},
+
+		"DELETE /api/sessions/:id/comments/:commentId": async (req: Request) => {
+			const url = new URL(req.url);
+			const segments = url.pathname.split("/");
+			const sessionId = segments[3]!;
+			const commentId = segments[5]!;
+
+			const existing = await loadCommentsSidecar(sessionId) ?? [];
+			const idx = existing.findIndex((c) => c.id === commentId);
+			if (idx === -1) return json({ error: "Comment not found" }, 404);
+
+			const removed = existing[idx]!;
+			if (removed.githubCommentId) {
+				const prUrl = await resolvePrUrl(sessionId);
+				if (prUrl) {
+					try {
+						const pr = parsePrInput(prUrl);
+						await fetch(
+							`https://api.github.com/repos/${pr.owner}/${pr.repo}/pulls/comments/${removed.githubCommentId}`,
+							{ method: "DELETE", headers: ghHeaders },
+						);
+					} catch {}
+				}
+			}
+
+			existing.splice(idx, 1);
+			await saveCommentsSidecar(sessionId, existing);
+
+			return json({ ok: true });
+		},
+
+		"GET /api/sessions/:id/chat": async (req: Request) => {
+			const url = new URL(req.url);
+			const segments = url.pathname.split("/");
+			const id = segments[3]!;
+			const messages = await loadChatSidecar(id) ?? [];
+			return json(messages);
+		},
+
+		"POST /api/sessions/:id/chat/undo": async (req: Request) => {
+			const url = new URL(req.url);
+			const segments = url.pathname.split("/");
+			const sessionId = segments[3]!;
+			const chatHistory = await loadChatSidecar(sessionId) ?? [];
+			if (chatHistory.length === 0) return json({ ok: true, removed: 0 });
+			const lastAssistantIdx = chatHistory.findLastIndex((m) => m.role === "assistant");
+			if (lastAssistantIdx === -1) return json({ ok: true, removed: 0 });
+			const lastUserIdx = chatHistory.slice(0, lastAssistantIdx).findLastIndex((m) => m.role === "user");
+			const removeFrom = lastUserIdx >= 0 ? lastUserIdx : lastAssistantIdx;
+			const removed = chatHistory.length - removeFrom;
+			const updated = chatHistory.slice(0, removeFrom);
+			await saveChatSidecar(sessionId, updated);
+			return json({ ok: true, removed });
+		},
+
+		"POST /api/sessions/:id/chat": async (req: Request) => {
+			const url = new URL(req.url);
+			const segments = url.pathname.split("/");
+			const sessionId = segments[3]!;
+
+			if (!config.openrouter_api_key) {
+				return json({ error: "OpenRouter API key required for chat" }, 400);
+			}
+
+			const body = await req.json() as { message: string };
+			if (!body.message?.trim()) return json({ error: "Missing message" }, 400);
+
+			const sessionData = await loadSession(sessionId);
+			if (!sessionData) return json({ error: "Session not found" }, 404);
+
+			const chatHistory = await loadChatSidecar(sessionId) ?? [];
+
+			const userMsg: ChatMessage = {
+				role: "user",
+				content: body.message.trim(),
+				timestamp: new Date().toISOString(),
+			};
+			chatHistory.push(userMsg);
+			await saveChatSidecar(sessionId, chatHistory);
+
+			const systemPrompt = buildChatSystemPrompt(sessionData);
+
+			const apiMessages: Array<{ role: string; content?: string | null; tool_calls?: unknown[]; tool_call_id?: string }> = [
+				{ role: "system", content: systemPrompt },
+			];
+			for (const msg of chatHistory) {
+				if (msg.role === "user") {
+					apiMessages.push({ role: "user", content: msg.content });
+				} else if (msg.role === "assistant") {
+					if (msg.toolCalls && msg.toolCalls.length > 0) {
+						apiMessages.push({
+							role: "assistant",
+							content: msg.content || null,
+							tool_calls: msg.toolCalls.map((tc) => ({
+								id: tc.id,
+								type: "function",
+								function: { name: tc.name, arguments: JSON.stringify(tc.arguments) },
+							})),
+						});
+						for (const tc of msg.toolCalls) {
+							if (tc.result !== undefined) {
+								apiMessages.push({
+									role: "tool",
+									content: tc.result,
+									tool_call_id: tc.id,
+								});
+							}
+						}
+					} else {
+						apiMessages.push({ role: "assistant", content: msg.content });
+					}
+				}
+			}
+
+			const chatTools = buildChatTools();
+
+			const patches = await loadPatchesSidecar(sessionId);
+
+			const executeTool = async (name: string, args: Record<string, unknown>): Promise<string> => {
+				switch (name) {
+					case "get_file_diff": {
+						const filePath = args.path as string;
+						if (!filePath) return "Error: path argument required";
+						if (patches?.[filePath]) return patches[filePath];
+						const patch = await loadSinglePatch(sessionId, filePath);
+						if (patch) return patch;
+						try {
+							const pr = parsePrInput(sessionData.meta.pr_url);
+							const rawDiff = await fetchPrDiff(pr, token);
+							const parsed = parseDiff(rawDiff);
+							const file = parsed.files.find((f) => f.path === filePath);
+							return file?.raw ?? `File "${filePath}" not found in diff`;
+						} catch (err) {
+							return `Error fetching diff: ${err instanceof Error ? err.message : String(err)}`;
+						}
+					}
+					case "list_files": {
+						return sessionData.files
+							.map((f) => `${f.path} (${f.status}, +${f.additions}/-${f.deletions}): ${f.summary}`)
+							.join("\n");
+					}
+					case "get_pr_comments": {
+						try {
+							const pr = parsePrInput(sessionData.meta.pr_url);
+							const comments = await fetchPrComments(pr, token);
+							if (comments.length === 0) return "No comments on this PR.";
+							return comments.map((c) => `@${c.author} (${c.created_at}):\n${c.body}`).join("\n\n---\n\n");
+						} catch (err) {
+							return `Error: ${err instanceof Error ? err.message : String(err)}`;
+						}
+					}
+					case "get_review_comments": {
+						try {
+							const pr = parsePrInput(sessionData.meta.pr_url);
+							const res = await fetch(
+								`https://api.github.com/repos/${pr.owner}/${pr.repo}/pulls/${pr.number}/comments?per_page=100`,
+								{ headers: ghHeaders },
+							);
+							if (!res.ok) return `GitHub API error: ${res.status}`;
+							const reviews = await res.json() as Array<{ user?: { login?: string }; path?: string; body?: string; created_at?: string; line?: number }>;
+							if (reviews.length === 0) return "No review comments on this PR.";
+							return reviews.map((r) =>
+								`@${r.user?.login ?? "unknown"} on ${r.path ?? "?"}${r.line ? `:${r.line}` : ""} (${r.created_at}):\n${r.body ?? ""}`,
+							).join("\n\n---\n\n");
+						} catch (err) {
+							return `Error: ${err instanceof Error ? err.message : String(err)}`;
+						}
+					}
+					case "get_pr_details": {
+						try {
+							const pr = parsePrInput(sessionData.meta.pr_url);
+							const res = await fetch(
+								`https://api.github.com/repos/${pr.owner}/${pr.repo}/pulls/${pr.number}`,
+								{ headers: ghHeaders },
+							);
+							if (!res.ok) return `GitHub API error: ${res.status}`;
+							const data = await res.json() as Record<string, unknown>;
+							return JSON.stringify({
+								title: data.title,
+								body: data.body,
+								state: data.state,
+								merged: data.merged,
+								mergeable: data.mergeable,
+								additions: data.additions,
+								deletions: data.deletions,
+								changed_files: data.changed_files,
+								labels: (data.labels as Array<{ name: string }>)?.map((l) => l.name),
+								requested_reviewers: (data.requested_reviewers as Array<{ login: string }>)?.map((r) => r.login),
+							}, null, 2);
+						} catch (err) {
+							return `Error: ${err instanceof Error ? err.message : String(err)}`;
+						}
+					}
+					case "web_search": {
+						const query = args.query as string;
+						if (!query) return "Error: query argument required";
+						const agents = await detectAgents();
+						if (agents.length > 0) {
+							try {
+								const result = await runAgent(agents[0]!, process.cwd(), `Search the web for: "${query}"\n\nReturn the top results with titles, URLs, and brief descriptions. Be concise.`, { timeout: 30_000 });
+								if (result.answer.trim()) return result.answer;
+							} catch {}
+						}
+						try {
+							const encoded = encodeURIComponent(query);
+							const res = await fetch(`https://html.duckduckgo.com/html/?q=${encoded}`, {
+								headers: { "User-Agent": "newpr-cli/0.2.0" },
+							});
+							if (!res.ok) return `Search failed: HTTP ${res.status}`;
+							const html = await res.text();
+							const results: string[] = [];
+							const resultRe = /<a[^>]+class="result__a"[^>]*href="([^"]*)"[^>]*>([\s\S]*?)<\/a>[\s\S]*?<a[^>]+class="result__snippet"[^>]*>([\s\S]*?)<\/a>/g;
+							let m;
+							while ((m = resultRe.exec(html)) !== null && results.length < 8) {
+								const href = m[1]?.replace(/&amp;/g, "&") ?? "";
+								const title = (m[2] ?? "").replace(/<[^>]+>/g, "").trim();
+								const snippet = (m[3] ?? "").replace(/<[^>]+>/g, "").trim();
+								if (title && href) results.push(`${title}\n${href}\n${snippet}`);
+							}
+							if (results.length === 0) return `No results found for "${query}"`;
+							return results.join("\n\n---\n\n");
+						} catch (err) {
+							return `Search error: ${err instanceof Error ? err.message : String(err)}`;
+						}
+					}
+					case "web_fetch": {
+						const url = args.url as string;
+						if (!url?.startsWith("https://")) return "Error: url must start with https://";
+						const agents = await detectAgents();
+						if (agents.length > 0) {
+							try {
+								const result = await runAgent(agents[0]!, process.cwd(), `Fetch and summarize the content of this URL: ${url}\n\nReturn the key information from the page. Be thorough but concise.`, { timeout: 30_000 });
+								if (result.answer.trim()) return result.answer;
+							} catch {}
+						}
+						try {
+							const controller = new AbortController();
+							const t = setTimeout(() => controller.abort(), 15000);
+							const res = await fetch(url, {
+								signal: controller.signal,
+								headers: { "User-Agent": "newpr-cli/0.2.0", Accept: "text/html,text/plain,application/json" },
+								redirect: "follow",
+							});
+							clearTimeout(t);
+							if (!res.ok) return `Fetch failed: HTTP ${res.status}`;
+							const contentType = res.headers.get("content-type") ?? "";
+							const text = await res.text();
+							if (contentType.includes("json")) return text.slice(0, 15000);
+							const stripped = text
+								.replace(/<script[\s\S]*?<\/script>/gi, "")
+								.replace(/<style[\s\S]*?<\/style>/gi, "")
+								.replace(/<nav[\s\S]*?<\/nav>/gi, "")
+								.replace(/<footer[\s\S]*?<\/footer>/gi, "")
+								.replace(/<header[\s\S]*?<\/header>/gi, "")
+								.replace(/<[^>]+>/g, " ")
+								.replace(/\s+/g, " ")
+								.trim();
+							return stripped.slice(0, 15000) + (stripped.length > 15000 ? "\n\n... (truncated)" : "");
+						} catch (err) {
+							return `Fetch error: ${err instanceof Error ? err.message : String(err)}`;
+						}
+					}
+					default:
+						return `Unknown tool: ${name}`;
+				}
+			};
+
+			const encoder = new TextEncoder();
+			const stream = new ReadableStream({
+				async start(controller) {
+					const send = (eventType: string, data: string) => {
+						controller.enqueue(encoder.encode(`event: ${eventType}\ndata: ${data}\n\n`));
+					};
+
+					let fullText = "";
+					const collectedToolCalls: ChatToolCall[] = [];
+					const orderedSegments: ChatSegment[] = [];
+					let lastSegmentWasText = false;
+
+					try {
+						await chatWithTools(
+							{
+								api_key: config.openrouter_api_key,
+								model: config.model,
+								timeout: config.timeout,
+							},
+							apiMessages as Parameters<typeof chatWithTools>[1],
+							chatTools,
+							executeTool,
+							(event: ChatStreamEvent) => {
+								switch (event.type) {
+									case "text":
+										fullText += event.content ?? "";
+										if (lastSegmentWasText && orderedSegments.length > 0) {
+											const last = orderedSegments[orderedSegments.length - 1]!;
+											if (last.type === "text") {
+												last.content += event.content ?? "";
+											}
+										} else {
+											orderedSegments.push({ type: "text", content: event.content ?? "" });
+											lastSegmentWasText = true;
+										}
+										send("text", JSON.stringify({ content: event.content }));
+										break;
+									case "tool_call":
+										if (event.toolCall) {
+											let args: Record<string, unknown> = {};
+											try { args = JSON.parse(event.toolCall.arguments); } catch {}
+											const tc: ChatToolCall = {
+												id: event.toolCall.id,
+												name: event.toolCall.name,
+												arguments: args,
+											};
+											collectedToolCalls.push(tc);
+											orderedSegments.push({ type: "tool_call", toolCall: tc });
+											lastSegmentWasText = false;
+											send("tool_call", JSON.stringify({
+												id: event.toolCall.id,
+												name: event.toolCall.name,
+												arguments: args,
+											}));
+										}
+										break;
+									case "tool_result":
+										if (event.toolResult) {
+											const tc = collectedToolCalls.find((c) => c.id === event.toolResult!.id);
+											if (tc) tc.result = event.toolResult.result;
+											send("tool_result", JSON.stringify(event.toolResult));
+										}
+										break;
+									case "error":
+										send("chat_error", JSON.stringify({ message: event.error }));
+										break;
+									case "done":
+										break;
+								}
+							},
+						);
+
+						const assistantMsg: ChatMessage = {
+							role: "assistant",
+							content: fullText,
+							toolCalls: collectedToolCalls.length > 0 ? collectedToolCalls : undefined,
+							segments: orderedSegments.length > 0 ? orderedSegments : undefined,
+							timestamp: new Date().toISOString(),
+						};
+						chatHistory.push(assistantMsg);
+						await saveChatSidecar(sessionId, chatHistory);
+
+						send("done", JSON.stringify({}));
+					} catch (err) {
+						send("chat_error", JSON.stringify({ message: err instanceof Error ? err.message : String(err) }));
+					} finally {
+						controller.close();
+					}
+				},
+			});
+
+			return new Response(stream, {
+				headers: {
+					"Content-Type": "text/event-stream",
+					"Cache-Control": "no-cache",
+					"Connection": "keep-alive",
+				},
+			});
+		},
+
+		"GET /api/sessions/:id/cartoon": async (req: Request) => {
+			const url = new URL(req.url);
+			const segments = url.pathname.split("/");
+			const id = segments[3]!;
+			const cartoon = await loadCartoonSidecar(id);
+			if (!cartoon) return json(null);
+			return json(cartoon);
+		},
+
 		"POST /api/cartoon": async (req: Request) => {
 			if (!options.cartoon) return json({ error: "Cartoon mode not enabled. Start with --cartoon flag." }, 403);
 			if (!config.openrouter_api_key) return json({ error: "OpenRouter API key required for cartoon generation" }, 400);
@@ -226,18 +1075,11 @@ export function createRoutes(token: string, config: NewprConfig, options: RouteO
 				const result = await generateCartoon(config.openrouter_api_key, data, config.language);
 
 				if (sessionId) {
-					const sessionData = await loadSession(sessionId);
-					if (sessionData) {
-						sessionData.cartoon = {
-							imageBase64: result.imageBase64,
-							mimeType: result.mimeType,
-							generatedAt: new Date().toISOString(),
-						};
-						const { join } = await import("node:path");
-						const { homedir } = await import("node:os");
-						const sessionsDir = join(homedir(), ".newpr", "history", "sessions");
-						await Bun.write(join(sessionsDir, `${sessionId}.json`), JSON.stringify(sessionData, null, 2));
-					}
+					await saveCartoonSidecar(sessionId, {
+						imageBase64: result.imageBase64,
+						mimeType: result.mimeType,
+						generatedAt: new Date().toISOString(),
+					});
 				}
 
 				return json(result);