revdeck 0.0.0-stage → 0.1.0

package/CHANGELOG.md

@@ -0,0 +1,33 @@
+# Changelog
+
+All notable changes to this project are documented here. The format is based on
+[Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and
+[Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [0.1.0] - 2026-11-11
+
+First public release.
+
+### Added
+
+- Daemon-first architecture: local daemon over a unix socket, SQLite state, multiple reviews.
+- Providers for GitLab and GitHub via `glab`/`gh`: MR/PR info, unified diff, threads, replies,
+  resolve, reactions, line comments, general comments.
+- Approval-gated, idempotent publishing: preview → plan hash → approve → commit.
+- CLI: `init`, `doctor`, `daemon`, `list`, `open`, `context`, `diff`, `threads`, `summary`,
+  `findings`, `reply`, `notes`, `publish`, `rules`, `checks`, `export`, `import`, `ui`, `mcp`.
+- MCP server with 13 tools, `review-mr` and `close-feedback` prompts.
+- Svelte 5 UI: review queue, summary, threads with autosave, findings triage, virtualized-free diff
+  with line comments, rules, publish dialog, command palette, SSE updates.
+- Configurable per-project rules: path → document/section mapping, auto-discovery, checks.
+- Harness adapters for Claude Code, Cursor, Codex, Gemini CLI, OpenCode, Copilot and DSH (MCP).
+- Bilingual product: Russian and English UI with a switch, localized CLI/MCP/context, and separate
+  Russian/English skill packs selected by `revdeck init --lang`.
+- `output.language: auto | ru | en` for review output, independent of the interface language.
+- English documentation as the canonical set under `docs/`, with Russian translations under `docs/ru/`.
+- Security: token scrubbing, redaction, publish sanitizer, loopback-only UI, one-time launch token,
+  cookie/Origin/Host checks, CSP.
+- Docs: architecture, configuration, protocol, threat model, integrations, ADR.
+- Tests: diff parser, core helpers, providers with recorded responses, service with a fake provider.

package/CONTRIBUTING.md

@@ -0,0 +1,98 @@
+# Contributing to revdeck
+
+Thanks for taking the time to contribute. revdeck is a small, dependency-light project: a review
+procedure, a local daemon, platform providers, an MCP server, a CLI and a Svelte UI.
+
+## Good first issues
+
+- A new `Provider` (Bitbucket, Forgejo, Azure DevOps).
+- A harness adapter (Gemini, Zed, JetBrains, a DSH host command).
+- Native drafts for GitLab/GitHub.
+- English translations of `docs/` and `skills/`.
+- UI: reactions panel, review opening dialog, virtualized diff.
+
+## Setup
+
+```bash
+git clone https://github.com/katrov/revdeck.git
+cd revdeck
+npm ci
+npm run typecheck    # tsc + svelte-check
+npm test
+npm run build
+```
+
+For manual testing, `npm run dev:daemon` starts the daemon from source; `npm run dev:ui` starts Vite.
+The daemon serves the built UI from `dist/ui`, so run `npm run build:ui` before checking the full app.
+
+`glab`/`gh` are optional for development: provider tests use recorded CLI responses. To test against a
+real platform, authenticate the CLI and run `revdeck doctor`.
+
+## Project layout
+
+| Path | Responsibility |
+|---|---|
+| `src/core` | Pure functions: diff parser, config, rules, findings, sanitizer, redaction, exec |
+| `src/providers` | Platform-specific code; the only place that knows GitLab/GitHub JSON |
+| `src/daemon` | SQLite store, review service, approvals, RPC, HTTP/SSE |
+| `src/cli` | Commands and installers |
+| `src/mcp` | MCP tools and prompts |
+| `ui` | Svelte 5 SPA |
+| `skills/revdeck` | Review procedures shipped to user projects |
+
+Rules of thumb:
+
+- Keep `src/core` free of network and platform assumptions.
+- A provider returns normalized types from `src/core/types.ts`; no UI or CLI concerns.
+- Publishing must stay approval-gated: never add a path that posts without an `approval_id`.
+- Untrusted text (comments, diff, MR description) never becomes an instruction or a shell command.
+
+## Adding a provider
+
+1. Implement `Provider` from `src/providers/provider.ts`.
+2. Add a branch to `createProvider`.
+3. Add fixture-based tests in `tests/providers.test.ts` using a fake `Runner`.
+4. Document platform quirks (resolve, drafts, line comments) in `docs/architecture.md`.
+
+## Adding a harness adapter
+
+Add a `SPECS` entry in `src/cli/init.ts` with the skill target, MCP config path or command file, then
+document it in `docs/integrations.md`. `init` must never overwrite files it does not own.
+
+## Translations
+
+- UI strings live next to their components: `t('русский', 'English')` in `ui/src/lib/i18n.svelte.ts`'s
+  `t` helper. Keep both languages in the same edit.
+- CLI strings use `tr('русский', 'English')` from `src/core/locale.ts`.
+- The skill has two human-maintained packs: `skills/revdeck/ru/` and `skills/revdeck/en/`. They must
+  keep the same structure and semantics; do not machine-translate the review procedure.
+- Tests that assert message text should pin the locale with `setLocale('ru')` or be language-agnostic.
+- Docs: `docs/` is English and canonical, `docs/ru/` is Russian. Keep headings, commands, code blocks
+  and file paths identical between the two; translate prose only.
+
+## Pull requests
+
+- One logical change per PR; include tests for behavior changes.
+- `npm run typecheck`, `npm test` and `npm run build` must pass.
+- Do not commit secrets, `.env` files, tokens, or generated `dist/` artifacts.
+- UI changes: include a screenshot and check light/dark themes.
+- Commits: imperative mood, short subject, explain the *why* in the body. Conventional Commits
+  prefixes (`feat:`, `fix:`, `docs:`, `test:`, `refactor:`) are welcome but not required.
+- By contributing you agree to the [Code of Conduct](CODE_OF_CONDUCT.md).
+
+## Release (maintainers)
+
+```bash
+npm version minor
+git push --follow-tags
+```
+
+The `release` workflow publishes to npm with provenance and creates a GitHub release. It needs an
+`NPM_TOKEN` repository secret: a granular npm token with read/write access to `revdeck` and
+**Bypass 2FA** enabled (or a classic Automation token). Without it the publish step fails with
+`ENEEDAUTH`; the workflow now reports that explicitly before publishing. The version in
+`src/version.ts` must match `package.json`. `prepublishOnly` re-runs build, typecheck and tests.
+
+## Security
+
+Please do not open a public issue for a vulnerability. See [SECURITY.md](SECURITY.md).

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 revdeck contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,224 @@
-# Temporary Holding Version
+# revdeck
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+[![npm](https://img.shields.io/npm/v/revdeck.svg)](https://www.npmjs.com/package/revdeck)
+[![CI](https://github.com/katrov/revdeck/actions/workflows/ci.yml/badge.svg)](https://github.com/katrov/revdeck/actions/workflows/ci.yml)
+[![license](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
+[![node](https://img.shields.io/node/v/revdeck.svg)](https://nodejs.org)
+
+**Agent-first code review for GitLab and GitHub.**
+
+revdeck gives an agent the review context and the project's own rules, lets it write findings and
+replies, and keeps publishing under human control. It runs as a local daemon with a CLI, an MCP server
+and a web UI. Platform tokens stay on the host.
+
+![revdeck UI](docs/screenshot.png)
+
+[Русская версия](README.ru.md) · [Documentation](docs/README.md) (English and Russian)
+
+## Why
+
+- **Rules, not vibes.** For every changed path revdeck selects the repository documents and the exact
+  sections (`AGENTS.md`, architecture, style guides, ADRs). The agent gets a deterministic, size-limited
+  context instead of generic “review this PR” instructions.
+- **Humans publish.** The agent writes drafts. The UI shows exactly what will be posted; publishing is
+  bound to a hash of the plan and is idempotent. There is no “agent approved its own comment” path.
+- **Tokens never reach the agent.** The daemon calls `glab`/`gh` on the host and scrubs platform tokens
+  from child environments. A sandboxed agent only gets an RPC.
+- **GitLab and GitHub.** One model: MR/PR, threads, diff, resolve, reactions, line comments.
+- **Many reviews.** The daemon keeps them in SQLite; the UI is a triage queue with keyboard shortcuts.
+- **Any harness.** MCP tools for MCP clients, the same capabilities over CLI, and a skill that carries
+  the review procedure.
+
+## How it works
+
+```
+agent (MCP/CLI) ──unix socket──▶ revdeck daemon ──glab/gh──▶ GitLab / GitHub
+                                      │
+                                SQLite + Svelte UI ◀── human
+```
+
+## Install
+
+Requirements: Node.js ≥ 22.13 (Node 24 LTS recommended — `node:sqlite` is experimental in 22.x), `git`, and an authenticated platform CLI
+(`glab auth login` or `gh auth login`). revdeck never reads or stores their tokens.
+
+```bash
+# one-off
+npx revdeck@latest init
+
+# or install globally for daily use
+npm install -g revdeck
+revdeck init
+```
+
+In a repository:
+
+```bash
+cd /path/to/repo
+revdeck init          # .revdeck.yml, skill for your harnesses, MCP config
+revdeck doctor        # node, glab/gh auth, daemon, adapters
+revdeck open 42       # load an MR/PR
+revdeck ui            # open the local UI
+```
+
+`init` never overwrites an existing config without `--force`, and it merges `.mcp.json` instead of
+replacing it. Auto-start on login: `revdeck daemon install` (systemd user unit on Linux, launchd plist
+on macOS). Use a global install for this — an `npx` cache path can be evicted.
+
+## Languages
+
+The product is bilingual (Russian and English), and the two languages are independent:
+
+- **Interface and CLI**: follow `--lang ru|en`, then `REVDECK_LANG`, then the system locale. The UI has
+  a RU/EN switch in the sidebar and remembers your choice.
+- **Review output** (findings, replies, summary): `output.language: auto | ru | en` in `.revdeck.yml`.
+  `auto` follows the language of the MR description and threads, so a Russian team can review an
+  English repo and still get Russian comments (or the other way round).
+- **Skill**: `revdeck init --lang en` installs the English procedure; without the flag init follows
+  `REVDECK_LANG`/the system locale and defaults to English.
+- **Project rules** can be written in any language: revdeck reads UTF-8 documents and matches headings
+  (including Cyrillic) without translation. Rules are quoted as-is.
+
+MCP tool descriptions are English — that is the model-facing layer; prompt text follows
+`REVDECK_LANG`. The daemon reads the language at startup, so restart it after changing the language
+(`revdeck daemon restart`).
+
+Documentation is available in English (`docs/`, canonical) and Russian (`docs/ru/`). English and
+Russian READMEs live in this repository; translation fixes are welcome.
+
+## Commands
+
+| Command | What it does |
+|---|---|
+| `revdeck init` | config, harness adapters, MCP |
+| `revdeck doctor` | environment, `glab`/`gh` auth, daemon, adapters |
+| `revdeck list [--remote]` | tracked reviews or open ones from the platform |
+| `revdeck open <N\|URL>` | load a review |
+| `revdeck context <N>` | agent context: rules, files, threads, findings |
+| `revdeck diff <N> [--file]` | files and hunks |
+| `revdeck threads <N>` | discussions |
+| `revdeck findings <N> set --file f.json` | write findings |
+| `revdeck reply <N> --thread <id> --body …` | draft a reply |
+| `revdeck publish <N> [--yes]` | preview or publish after confirmation |
+| `revdeck notes <N> …` | line comments from the human |
+| `revdeck rules [--explain <path>]` | effective rules |
+| `revdeck checks <N> [--run --yes]` | project checks |
+| `revdeck export/import <N>` | legacy file exchange |
+| `revdeck ui [N]` | local web UI |
+| `revdeck daemon <start\|stop\|status\|logs\|install>` | daemon lifecycle |
+| `revdeck mcp` | MCP server over stdio |
+
+Common flags: `--json`, `--root`, `--review`, `--platform`, `--project`, `--host`, `--lang ru|en`.
+
+## MCP
+
+```json
+{
+  "mcpServers": {
+    "revdeck": {
+      "command": "npx",
+      "args": ["-y", "revdeck", "mcp"],
+      "env": { "REVDECK_LANG": "en" }
+    }
+  }
+}
+```
+
+Tools: `revdeck_status`, `revdeck_list`, `revdeck_open`, `revdeck_context`, `revdeck_threads`,
+`revdeck_diff`, `revdeck_rules`, `revdeck_draft_reply`, `revdeck_draft_findings`,
+`revdeck_set_summary`, `revdeck_notes`, `revdeck_publish_preview`, `revdeck_publish`.
+
+Publishing requires an `approval_id` that only a human can create (UI or CLI `--yes`). The MCP tool
+does not create one. Prompts `review-mr` and `close-feedback` are available in clients that support
+MCP prompts.
+
+Harness matrix and slash commands: [docs/integrations.md](docs/integrations.md).
+
+## Rules
+
+`.revdeck.yml` at the repository root:
+
+```yaml
+version: 1
+output:
+  language: auto        # auto | ru | en — язык замечаний и ответов
+provider:
+  type: gitlab          # auto | gitlab | github
+  host: gitlab.example.com
+  project: group/project
+  base: develop
+rules:
+  sources: [AGENTS.md, CONTRIBUTING.md]
+  map:
+    - match: "src/**"
+      docs: [docs/Architecture.md, "docs/Styleguide.md#Базовый стиль"]
+    - match: "src/state/**"
+      docs: [docs/StateManagement.md]
+  ignore: ["**/generated/**"]
+checks:
+  - id: lint
+    argv: [npm, run, lint]
+    when: ["src/**"]
+publish:
+  requireApproval: true
+  maxComments: 50
+```
+
+Document selectors: `docs/File.md`, `docs/File.md#Heading`, `docs/File.md#L10-L25`. Without a config,
+revdeck discovers `AGENTS.md`, `CLAUDE.md`, `CONTRIBUTING.md` and `docs/*` and warns when nothing is
+found. Full schema: [docs/configuration.md](docs/configuration.md).
+
+## Security
+
+- The daemon listens on loopback and a unix socket (0600). The UI uses a one-time launch token, an
+  `HttpOnly`/`SameSite=Strict` cookie, `Host`/`Origin` checks and CSP.
+- `glab`/`gh` run without a shell, with `cwd` outside the working copy and a scrubbed environment;
+  secrets are redacted from logs and errors.
+- Comments are checked for GitLab quick actions, HTML, hidden/bidi characters, mass mentions and
+  external images.
+- Review text is untrusted data; agent instructions say so explicitly.
+
+Details: [docs/threat-model.md](docs/threat-model.md). The guarantee is: the token does not cross the
+sandbox boundary and is not returned over RPC. If a process can read the user's home directory, it can
+read the CLI configuration — isolate the agent.
+
+## Architecture
+
+| Path | Contents |
+|---|---|
+| `src/core` | models, diff parser, rules compiler, findings, sanitizer, safe exec |
+| `src/providers` | GitLab and GitHub via `glab`/`gh`, normalized |
+| `src/daemon` | SQLite, service, unix-socket RPC, HTTP/SSE, approvals |
+| `src/cli` | commands, `init`, `doctor`, export/import |
+| `src/mcp` | MCP server over stdio |
+| `ui` | Svelte 5 + Vite |
+| `skills/revdeck` | review procedures (SKILL, Review, Feedback, Criteria, Rules, Sources) |
+
+More: [docs/architecture.md](docs/architecture.md), [docs/protocol.md](docs/protocol.md),
+[ADR-0001](docs/adr/0001-daemon-first.md).
+
+## Development
+
+```bash
+npm ci
+npm run typecheck     # tsc + svelte-check
+npm test              # vitest
+npm run build         # dist/cli.js, dist/daemon.js, dist/mcp.js, dist/ui
+npm run dev:daemon    # daemon from source
+npm run dev:ui        # Vite dev server (the daemon serves dist/ui)
+```
+
+Provider tests use recorded CLI responses and need no network. See [CONTRIBUTING.md](CONTRIBUTING.md).
+
+## Status
+
+- Publishing uses regular comments; native drafts (GitLab draft notes, GitHub pending review) are not
+  used yet, though the provider interface is ready.
+- Project checks are planned by the agent; running them requires `revdeck checks --run --yes`.
+- The UI does not open a new review by number; use the CLI and the review appears in the list.
+- Thread resolution is in the thread card; reactions exist in providers but are not exposed in the UI.
+- Auto-start is supported on Linux and macOS; on Windows run the daemon manually.
+
+## License
+
+[MIT](LICENSE)

package/README.ru.md

@@ -0,0 +1,210 @@
+# revdeck
+
+[English](README.md) | Русский · [Документация](docs/ru/README.md)
+
+Локальный код-ревью для GitLab и GitHub, сделанный вокруг агента: агент читает контекст и пишет
+черновики, человек подтверждает и публикует. Работает как MCP-сервер, CLI и веб-интерфейс; токены
+платформ остаются на хосте.
+
+```
+агент (MCP/CLI) ──unix socket──▶ revdeck daemon ──glab/gh──▶ GitLab / GitHub
+                                    │
+                              SQLite + Svelte UI ◀── человек
+```
+
+![Интерфейс revdeck](docs/screenshot.ru.png)
+
+## Зачем
+
+- **Правила вместо догадок.** Для каждого изменённого пути revdeck выбирает документы репозитория и
+  конкретные секции (`AGENTS.md`, архитектура, гайды, ADR). Агент получает детерминированный контекст,
+  а не «отревьюй PR по best practices».
+- **Публикация только человеком.** Агент пишет черновики ответов и замечаний. В UI видно ровно то, что
+  уйдёт в платформу; публикация выполняется по подтверждению, привязанному к хешу плана, и повторно
+  не отправляет уже отправленное.
+- **Токены не уезжают агенту.** Демон вызывает `glab`/`gh` на хосте и вычищает токены из окружения
+  дочерних процессов. Агент в песочнице получает только RPC и не видит ни токена, ни конфигурации
+  платформы.
+- **GitLab и GitHub.** Одна модель: MR/PR, треды, diff, резолв, реакции, комментарии к строкам.
+- **Несколько ревью.** Демон хранит открытые ревью в SQLite; UI — очередь с поиском и горячими
+  клавишами.
+
+## Установка
+
+```bash
+npm install -g revdeck
+# или разово:
+npx revdeck@latest init
+```
+
+Требования: Node.js ≥ 22.13 (рекомендуется Node 24 LTS: в 22.x `node:sqlite` экспериментален), `git`, для GitLab — `glab` с выполненным `glab auth login`, для
+GitHub — `gh` с `gh auth login`. Токены revdeck не читает и не хранит.
+
+В проекте:
+
+```bash
+cd /path/to/repo
+revdeck init          # .revdeck.yml, skill в .agents/.claude, MCP-конфиг
+revdeck doctor        # проверка окружения и адаптеров
+revdeck open 42       # открыть MR/PR по номеру
+revdeck ui            # ссылка на локальный интерфейс
+```
+
+`revdeck init` не перезаписывает существующий конфиг без `--force` и не трогает чужие ключи в
+`.mcp.json`. Автозапуск демона при входе в систему — `revdeck daemon install`: создаёт systemd user unit
+(Linux) или launchd plist (macOS) и печатает команду включения. Для автозапуска ставьте пакет глобально:
+путь в кеше `npx` может быть очищен.
+
+## Языки
+
+Продукт двуязычный (русский и английский), причём языки независимы:
+
+- **Интерфейс и CLI** следуют `--lang ru|en`, затем `REVDECK_LANG`, затем системной локали. В UI есть
+  переключатель RU/EN в сайдбаре, выбор запоминается.
+- **Язык результатов ревью** (замечания, ответы, выжимка) — `output.language: auto | ru | en` в
+  `.revdeck.yml`. `auto` следует языку описания MR и обсуждений: русская команда может ревьюить
+  английский репозиторий и получать русские комментарии (и наоборот).
+- **Skill**: `revdeck init --lang en` ставит английскую процедуру; без флага язык берётся из
+  `REVDECK_LANG`/системной локали, по умолчанию английский.
+- **Правила проекта** могут быть на любом языке: revdeck читает UTF-8 и сопоставляет заголовки
+  (включая кириллицу) без перевода. Правила цитируются как есть.
+- **MCP-описания инструментов** на английском — это машинный слой для модели; тексты промптов
+  следуют `REVDECK_LANG`. Демон читает язык при старте: после смены языка перезапустите его
+  (`revdeck daemon restart`).
+
+## Команды
+
+| Команда | Что делает |
+|---|---|
+| `revdeck init` | конфиг, адаптеры, MCP |
+| `revdeck doctor` | окружение, `glab`/`gh`, демон, адаптеры |
+| `revdeck list [--remote]` | локальные или открытые на платформе ревью |
+| `revdeck open <N│URL>` | загрузить ревью |
+| `revdeck context <N>` | контекст для агента: правила, файлы, треды, замечания |
+| `revdeck diff <N> [--file]` | файлы и hunks |
+| `revdeck threads <N>` | обсуждения |
+| `revdeck findings <N> set --file f.json` | записать замечания |
+| `revdeck reply <N> --thread <id> --body …` | черновик ответа |
+| `revdeck publish <N> [--yes]` | план или публикация после подтверждения |
+| `revdeck notes <N> …` | комментарии человека к строкам |
+| `revdeck rules [--explain <path>]` | эффективные правила |
+| `revdeck checks <N> [--run --yes]` | проверки проекта |
+| `revdeck export/import <N>` | обмен с файловым форматом |
+| `revdeck ui [N]` | локальный интерфейс |
+| `revdeck daemon <start│stop│status│logs│install>` | управление демоном |
+| `revdeck mcp` | MCP-сервер (stdio) |
+
+Общие флаги: `--json`, `--root`, `--review`, `--platform`, `--project`, `--host`, `--lang ru|en`.
+
+## MCP
+
+```json
+{
+  "mcpServers": {
+    "revdeck": {
+      "command": "npx",
+      "args": ["-y", "revdeck", "mcp"],
+      "env": { "REVDECK_LANG": "en" }
+    }
+  }
+}
+```
+
+Инструменты: `revdeck_status`, `revdeck_list`, `revdeck_open`, `revdeck_context`,
+`revdeck_threads`, `revdeck_diff`, `revdeck_rules`, `revdeck_draft_reply`,
+`revdeck_draft_findings`, `revdeck_set_summary`, `revdeck_notes`, `revdeck_publish_preview`,
+`revdeck_publish`. Публикация требует `approval_id`, который агент получить не может: его выдаёт
+человек в UI или CLI с `--yes`.
+
+Промпты `review-mr` и `close-feedback` доступны в клиентах, поддерживающих MCP prompts. В харнессах
+без MCP используйте CLI — возможности те же. Матрица адаптеров и `/`-команд: [docs/ru/integrations.md](docs/ru/integrations.md).
+
+## Правила проекта
+
+`.revdeck.yml` в корне репозитория:
+
+```yaml
+version: 1
+output:
+  language: auto        # auto | ru | en — язык замечаний и ответов
+provider:
+  type: gitlab          # auto | gitlab | github
+  host: gitlab.example.com
+  project: group/project
+  base: develop
+rules:
+  sources: [AGENTS.md, CONTRIBUTING.md]
+  map:
+    - match: "src/**"
+      docs: [docs/Architecture.md, docs/Styleguide.md#Базовый стиль]
+    - match: "src/state/**"
+      docs: [docs/StateManagement.md]
+    - match: "docs/**"
+      docs: [AGENTS.md#Размещение-технических-знаний]
+  ignore: ["**/generated/**"]
+checks:
+  - id: lint
+    argv: [npm, run, lint]
+    when: ["src/**"]
+publish:
+  requireApproval: true
+  maxComments: 50
+```
+
+Селектор документа: `docs/File.md`, `docs/File.md#Заголовок` или `docs/File.md#L10-L25`. Без конфига
+revdeck ищет `AGENTS.md`, `CLAUDE.md`, `CONTRIBUTING.md` и `docs/*` и предупреждает, если правил не
+нашлось. Полная схема — [docs/ru/configuration.md](docs/ru/configuration.md).
+
+## Безопасность
+
+- Демон слушает только loopback и unix-сокет (0600), UI — с одноразовым токеном запуска, cookie
+  `HttpOnly`/`SameSite=Strict`, проверкой `Host`/`Origin` и CSP.
+- `glab`/`gh` вызываются без shell, с `cwd` вне рабочей копии и вычищенным окружением; секреты
+  редактируются в логах и ошибках.
+- Комментарии проверяются на быстрые команды GitLab, HTML, скрытые/bidi-символы, `@all` и внешние
+  картинки.
+- Текст MR — недоверенные данные; агентские инструкции это оговаривают.
+
+Подробно: [docs/ru/threat-model.md](docs/ru/threat-model.md). Гарантия формулируется так: токен не
+пересекает границу песочницы и не отдаётся по RPC. Если у процесса есть чтение домашнего каталога
+пользователя, он может прочитать конфигурацию `glab`/`gh` — для этого и нужна изоляция агента.
+
+## Архитектура
+
+| Путь | Что внутри |
+|---|---|
+| `src/core` | модели, парсер diff, правила, findings, санитайзер, безопасный exec |
+| `src/providers` | GitLab и GitHub через `glab`/`gh`, нормализация в общую модель |
+| `src/daemon` | SQLite, сервис, RPC по сокету, HTTP/SSE, одобрения |
+| `src/cli` | команды, `init`, `doctor`, экспорт/импорт |
+| `src/mcp` | MCP-сервер (stdio) |
+| `ui` | Svelte 5 + Vite |
+| `skills/revdeck` | процедуры ревью (SKILL, Review, Feedback, Criteria, Rules, Sources) |
+
+Подробно: [docs/ru/architecture.md](docs/ru/architecture.md), [docs/ru/protocol.md](docs/ru/protocol.md),
+[ADR-0001](docs/ru/adr/0001-daemon-first.md).
+
+## Разработка
+
+```bash
+npm install
+npm run typecheck     # tsc + svelte-check
+npm test              # vitest
+npm run build         # dist/cli.js, dist/daemon.js, dist/mcp.js, dist/ui
+```
+
+Демон в разработке: `npm run dev:daemon`, UI: `npm run dev:ui` (сборка UI отдаётся демоном из
+`dist/ui`). Тесты провайдеров работают на записанных ответах CLI и не требуют сети.
+
+## Ограничения текущей версии
+
+- Публикация идёт обычными комментариями; native drafts (GitLab draft notes, GitHub pending review)
+  ещё не используются, хотя провайдеры к этому готовы.
+- Проверки проекта агент только планирует; запуск — `revdeck checks --run --yes`.
+- UI не открывает новое ревью по номеру: это делает CLI, ревью появляется в списке.
+- Резолв тредов есть в карточке треда; реакции реализованы в провайдерах, но пока не выведены в UI.
+- Поддержаны Linux и macOS для автозапуска; Windows — запуск вручную.
+
+## Лицензия
+
+MIT.

package/SECURITY.md

@@ -0,0 +1,45 @@
+# Security policy
+
+## Supported versions
+
+| Version | Supported |
+|---|---|
+| 0.1.x | yes |
+
+Pre-1.0 releases get fixes on the latest minor line.
+
+## Reporting a vulnerability
+
+Please **do not** open a public issue. Use GitHub's private vulnerability reporting:
+
+<https://github.com/katrov/revdeck/security/advisories/new>
+
+Include:
+
+- affected version (`revdeck --version`) and Node.js version;
+- platform (GitLab/GitHub) and, if relevant, the provider configuration;
+- steps to reproduce, expected and actual behavior;
+- whether a token, a published comment, or repository content is involved;
+- logs with secrets removed (`revdeck daemon logs`).
+
+You will get an acknowledgement within a few days. Please give us time to ship a fix before public
+disclosure.
+
+## Scope
+
+In scope:
+
+- token handling and redaction, daemon/socket permissions, UI authentication (launch token, cookie,
+  `Host`/`Origin`, CSP);
+- the approval and idempotency model for publishing;
+- prompt injection in review text that leads to unintended actions;
+- path traversal, symlink handling, unsafe `exec`, malicious repository config;
+- supply-chain issues in the published package.
+
+Out of scope:
+
+- an attacker who already controls the user's OS account or can read `$HOME` — isolate the agent;
+- vulnerabilities in `glab`, `gh`, GitLab or GitHub themselves;
+- denial of service by a local user against their own daemon.
+
+The design assumptions and residual risks are documented in [docs/threat-model.md](docs/threat-model.md).