open-azdo 0.3.4 → 0.3.5

package/README.md

@@ -130,6 +130,7 @@ Key requirements:
 
 Attach the pipeline as a branch build-validation policy. Findings are posted as PR comments by default and do not fail the build.
 `open-azdo` does not install language-specific prerequisites itself. LSP prerequisites are provided by the pipeline environment, and the pnpm example enables OpenCode's experimental LSP tool while provisioning `.NET` plus `dotnet restore` for C# projects.
+For nested JS or TS packages, install dependencies in the package directory that owns the lockfile before running `open-azdo`. `open-azdo` keeps the review workspace at the checkout root and relies on workspace-local TypeScript resolution.
 
 ```yaml
 trigger: none

package/dist/open-azdo.js

@@ -70723,6 +70723,7 @@ var OpenCodeSdkRuntimeLive = exports_Layer.effect(OpenCodeSdkRuntime, makeOpenCo
 
 // ../../packages/core/src/opencode/Layers/OpenCodeRunner.ts
 var OPEN_CODE_CONFIG_SCHEMA = "https://opencode.ai/config.json";
+var OPEN_CODE_TYPESCRIPT_LSP_COMMAND = [process.execPath, "x", "typescript-language-server", "--stdio"];
 var openCodePermission = {
   edit: "deny",
   read: "allow",
@@ -70753,6 +70754,11 @@ var buildOpenCodeConfig = (agentName) => ({
   share: "disabled",
   autoupdate: false,
   default_agent: agentName,
+  lsp: {
+    typescript: {
+      command: OPEN_CODE_TYPESCRIPT_LSP_COMMAND
+    }
+  },
   permission: openCodePermission,
   agent: {
     [agentName]: {
@@ -71686,7 +71692,8 @@ var buildReviewPrompt = (promptFile, reviewContext) => exports_Effect.gen(functi
     "If LSP access is available for the current file, use it selectively to validate symbol resolution, references, implementations, hover details, and diagnostics when that is faster or more reliable than manual file tracing.",
     "Treat LSP results as supporting evidence, not authority on their own; confirm findings against the changed code and nearby repository context before reporting them.",
     "Build an internal checklist containing every path in scoped changedFiles and review the files one by one until the checklist is exhausted.",
-    "For each scoped changed file, inspect the diff with `git diff <baseRef> <headRef> -- <path>` before deciding whether there is a finding.",
+    "For each scoped changed file, inspect the diff with `git diff '<baseRef>' '<headRef>' -- '<path>'` before deciding whether there is a finding.",
+    "Always shell-quote file paths and refs when you run read-only commands.",
     "Read nearby code and directly related files only when needed to validate behavior.",
     "Do not perform broad repository sweeps or unrelated searches.",
     "Use connected work items as supplemental product context only. Acceptance criteria, repro steps, and comments can explain intent, but they are not standalone evidence for a finding.",
@@ -73149,7 +73156,7 @@ var sandboxCaptureCommand = make34("capture", sandboxCaptureCommandConfig).pipe(
 var sandboxCommand = make34("sandbox").pipe(withDescription3("Sandbox tooling for live capture and local preview."), withSubcommands([sandboxCaptureCommand]));
 var openAzdoCli = make34("open-azdo").pipe(withDescription3("Secure Azure DevOps pull-request review CLI powered by OpenCode."), withSubcommands([reviewCommand, sandboxCommand]));
 // package.json
-var version2 = "0.3.4";
+var version2 = "0.3.5";
 
 // src/Main.ts
 var cliProgram = run3(openAzdoCli, { version: version2 }).pipe(exports_Effect.scoped, exports_Effect.provide(BaseRuntimeLayer));
@@ -73158,4 +73165,4 @@ var main = () => runMain2(cliProgram, { disableErrorReporting: true });
 // bin/open-azdo.ts
 main();
 
-//# debugId=2B0BDD0B7FAF788564756E2164756E21
+//# debugId=BA409C50A45DF5C664756E2164756E21