reviuah 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) ReviuAh contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,208 @@
+# ReviuAh
+
+> AI-powered CLI to review Git diffs before commit or push.\
+> Install via **npm**, **yarn**, or **pnpm**; use on your branch with `--base` or `reviewah`.
+
+---
+
+## Install
+
+### Kalau `npm install -g reviuah` error 404
+
+Paket ini **belum dipublish** ke [npm](https://www.npmjs.com/package/reviuah) (atau namanya belum kamu ambil). Pakai salah satu di bawah.
+
+**Dari GitHub (global, build otomatis saat install):**
+
+```bash
+npm install -g git+https://github.com/rsuregar/reviewah.git
+```
+
+**Lokal (clone):**
+
+```bash
+git clone https://github.com/rsuregar/reviewah.git && cd reviewah
+npm install
+npm run build
+npm link
+```
+
+### Setelah publish ke npm
+
+```bash
+npm install -g reviuah
+# atau: yarn global add reviuah / pnpm add -g reviuah
+```
+
+Publish: login `npm login`, lalu di repo `npm publish --access public` (butuh akun npm & nama `reviuah` belum dipakai orang lain).
+
+**Perintah:** `reviuah` atau **`reviewah`** (alias sama).
+
+**Setup API key (disarankan):**
+
+```bash
+reviuah setup
+```
+
+Menyimpan key ke **`~/.reviuah/config.json`** (hanya di mesin kamu). Setelah itu cukup jalankan `reviuah` tanpa export env.
+
+**Atau** set env (mengoverride file): `REVIUAH_API_KEY`, opsional `REVIUAH_PROVIDER`, `REVIUAH_MODEL`, `REVIUAH_PROVIDER_URL`.
+
+```bash
+reviuah config   # cek lokasi file & apakah key sudah tersimpan
+```
+
+---
+
+## Inspirasi: [Commitah](https://github.com/utsmannn/commitah) vs ReviuAh
+
+[Commitah](https://github.com/utsmannn/commitah) pakai satu perintah CLI (`commitah`): analisis **perubahan yang sudah di-stage** → AI menghasilkan **pesan commit** (conventional commits, UI interaktif).
+
+**ReviuAh** memakai pola yang sama untuk input default:
+
+| | Commitah | ReviuAh |
+|---|----------|---------|
+| Perintah | `commitah` | `reviuah` (tanpa opsi) |
+| Sumber diff | Staged (`git add` dulu) | Sama |
+| Output | Saran commit message | **Review** (summary, risiko, security, testing, …) |
+
+Jadi: **Commitah** = “tulis commit message dari diff”; **ReviuAh** = “tinjau diff sebelum commit/push”. Keduanya bisa dipakai berurutan, misalnya `reviuah` dulu (cek kualitas), lalu `commitah` (pesan commit). Detail singkat: [docs/inspirasi-commitah.md](./docs/inspirasi-commitah.md).
+
+---
+
+## Cara pakai (alur branch)
+
+Typical flow: kamu sedang di **branch fitur**, ingin review selisih terhadap `main`:
+
+```bash
+git checkout feature/kerjaan-kamu
+export REVIUAH_API_KEY="sk-..."   # atau key provider lain
+
+# Review branch ini vs main (setara git diff main...HEAD)
+reviuah --base main
+
+# Kalau remote default beda nama branch
+reviuah --base origin/main
+
+# Simpan ke file (buka di editor / share ke PR)
+reviuah --base main --out review.md --lang id
+```
+
+| Skenario | Perintah |
+|----------|----------|
+| Hanya perubahan yang sudah **di-stage** | `reviuah` |
+| Satu **commit** | `reviuah --commit HEAD` |
+| Range manual | `reviuah --range main...HEAD` |
+| **Branch aktif** vs base | `reviuah --base main` |
+| CI: gagal jika risk **high** | `reviuah --base origin/main --strict` |
+
+**Tip:** di shell bisa alias supaya “satu klik” dari terminal:
+
+```bash
+alias reviewah='reviuah --base main --lang id'
+# lalu: reviewah
+```
+
+---
+
+## CLI (English)
+
+```bash
+reviuah --help
+reviuah --version
+
+reviuah                          # staged diff
+reviuah --commit HEAD
+reviuah --range origin/main...HEAD
+reviuah --base main              # branch vs main
+reviuah --out review.md
+reviuah --strict
+reviuah --lang en
+```
+
+---
+
+## Required review output (Markdown)
+
+1. Summary  
+2. Risk Level (low / medium / high / unknown) + reason  
+3. Security Review  
+4. Performance Review  
+5. Testing Suggestions  
+6. Code Quality & Maintainability  
+7. Actionable Suggestions  
+
+---
+
+## Architecture (current)
+
+```
+src/
+  cli.ts
+  commands/review.ts
+  git/diff.ts
+  providers/
+    index.ts
+    openai.ts
+```
+
+---
+
+## Environment variables
+
+| Variable | Description |
+|----------|-------------|
+| `REVIUAH_API_KEY` | Required for API calls |
+| `REVIUAH_PROVIDER` | Default preset: **`agentrouter`** → `https://agentrouter.org/v1`. Lainnya: `openai`, `gemini`, `deepseek`, `ollama`, … |
+| `REVIUAH_PROVIDER_URL` | Override base URL |
+| `REVIUAH_MODEL` | Override model (default untuk agentrouter: `gpt-4o`; sesuaikan di dashboard AgentRouter) |
+
+---
+
+## CI (GitHub Actions)
+
+```yaml
+name: AI Review
+on: [pull_request]
+
+jobs:
+  review:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+      - run: npm install -g reviuah
+      - run: reviuah --range origin/${{ github.base_ref }}...HEAD --strict
+        env:
+          REVIUAH_API_KEY: ${{ secrets.REVIUAH_API_KEY }}
+```
+
+Untuk `pull_request`, checkout default adalah merge commit; untuk diff seperti di lokal, fetch branch dan gunakan `--base origin/main` atau `--range origin/main...HEAD` setelah checkout ke **head** PR (lihat [docs/cara-pakai.md](./docs/cara-pakai.md)).
+
+---
+
+## For AI assistants
+
+- [AGENTS.md](./AGENTS.md) · [CLAUDE.md](./CLAUDE.md) · `.cursor/skills/`
+
+## Development
+
+```bash
+yarn install
+yarn build
+yarn link          # lokal: perintah reviuah / reviewah dari repo ini
+reviuah --help
+```
+
+Publish manual: `npm publish --access public` (setelah `yarn build` dan login npm).
+
+---
+
+## Design philosophy
+
+ReviuAh is a **pre-review** assistant and CI gate (`--strict`), not a replacement for human review.
+
+Lihat juga **[docs/cara-pakai.md](./docs/cara-pakai.md)** (ringkas, Indonesia).

package/dist/cli.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/cli.js

@@ -0,0 +1,62 @@
+#!/usr/bin/env node
+import { Command } from "commander";
+import { readFileSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+import { dirname, join } from "node:path";
+import { reviewCommand } from "./commands/review.js";
+import { setupCommand } from "./commands/setup.js";
+import { configStatusCommand } from "./commands/config-status.js";
+function readPkgVersion() {
+    try {
+        const here = dirname(fileURLToPath(import.meta.url));
+        const pkgPath = join(here, "..", "package.json");
+        const pkg = JSON.parse(readFileSync(pkgPath, "utf8"));
+        return pkg.version ?? "0.0.0";
+    }
+    catch {
+        return "0.0.0";
+    }
+}
+const program = new Command();
+program
+    .name("reviuah")
+    .description("AI code review from Git diff (default: staged changes — same diff source idea as commitah, output is review not commit msg)")
+    .version(readPkgVersion());
+program
+    .command("setup")
+    .description("Interactive: simpan API key & provider ke ~/.reviuah/config.json (dipakai jika env tidak diset)")
+    .action(async () => {
+    await setupCommand();
+});
+program
+    .command("config")
+    .description("Tampilkan lokasi file config dan status API key")
+    .action(async () => {
+    await configStatusCommand();
+});
+program
+    .option("--commit <ref>", "review a specific commit")
+    .option("--range <range>", "review a git range, e.g. main...HEAD or origin/main...HEAD")
+    .option("--base <ref>", "review current branch vs base (same as --range <ref>...HEAD), e.g. main or origin/main")
+    .option("--strict", "exit with code 1 when risk level is high", false)
+    .option("--lang <lang>", "output language", "en")
+    .option("--out <file>", "write review markdown to file")
+    .action(async (options) => {
+    const result = await reviewCommand({
+        commit: options.commit,
+        range: options.range,
+        base: options.base,
+        strict: Boolean(options.strict),
+        lang: options.lang ?? "en",
+        out: options.out,
+    });
+    if (options.strict && result.risk === "high") {
+        process.exitCode = 1;
+    }
+});
+program.parseAsync(process.argv).catch((error) => {
+    const message = error instanceof Error ? error.message : "Unknown error";
+    console.error(`Error: ${message}`);
+    process.exitCode = 1;
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAElE,SAAS,cAAc;IACrB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAEnD,CAAC;QACF,OAAO,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,SAAS,CAAC;KACf,WAAW,CACV,6HAA6H,CAC9H;KACA,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;AAE7B,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CACV,iGAAiG,CAClG;KACA,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,MAAM,YAAY,EAAE,CAAC;AACvB,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,iDAAiD,CAAC;KAC9D,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,MAAM,mBAAmB,EAAE,CAAC;AAC9B,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,MAAM,CAAC,gBAAgB,EAAE,0BAA0B,CAAC;KACpD,MAAM,CAAC,iBAAiB,EAAE,4DAA4D,CAAC;KACvF,MAAM,CACL,cAAc,EACd,wFAAwF,CACzF;KACA,MAAM,CAAC,UAAU,EAAE,0CAA0C,EAAE,KAAK,CAAC;KACrE,MAAM,CAAC,eAAe,EAAE,iBAAiB,EAAE,IAAI,CAAC;KAChD,MAAM,CAAC,cAAc,EAAE,+BAA+B,CAAC;KACvD,MAAM,CACL,KAAK,EAAE,OAON,EAAE,EAAE;IACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC;QACjC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;QAC/B,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;QAC1B,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC7C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC,CACF,CAAC;AAEJ,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IACxD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;IACzE,OAAO,CAAC,KAAK,CAAC,UAAU,OAAO,EAAE,CAAC,CAAC;IACnC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/commands/config-status.d.ts

@@ -0,0 +1 @@
+export declare function configStatusCommand(): Promise<void>;

package/dist/commands/config-status.js

@@ -0,0 +1,20 @@
+import { getUserConfigPath, maskApiKey, readUserConfig, } from "../config/user-config.js";
+export async function configStatusCommand() {
+    const path = getUserConfigPath();
+    const cfg = await readUserConfig();
+    console.log(`Config file: ${path}`);
+    if (!cfg?.apiKey) {
+        console.log("API key: (belum diset — jalankan: reviuah setup)");
+    }
+    else {
+        console.log(`API key: ${maskApiKey(cfg.apiKey)} (tersimpan)`);
+    }
+    if (cfg?.provider)
+        console.log(`Provider: ${cfg.provider}`);
+    if (cfg?.model)
+        console.log(`Model: ${cfg.model}`);
+    if (cfg?.providerUrl)
+        console.log(`Base URL: ${cfg.providerUrl}`);
+    console.log("\nEnv REVIUAH_API_KEY / REVIUAH_PROVIDER / … mengoverride file ini.");
+}
+//# sourceMappingURL=config-status.js.map

package/dist/commands/config-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-status.js","sourceRoot":"","sources":["../../src/commands/config-status.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,UAAU,EACV,cAAc,GACf,MAAM,0BAA0B,CAAC;AAElC,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,MAAM,cAAc,EAAE,CAAC;IAEnC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;IAClE,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,YAAY,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,GAAG,EAAE,QAAQ;QAAE,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5D,IAAI,GAAG,EAAE,KAAK;QAAE,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IACnD,IAAI,GAAG,EAAE,WAAW;QAAE,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,qEAAqE,CAAC,CAAC;AACrF,CAAC"}

package/dist/commands/review.d.ts

@@ -0,0 +1,12 @@
+import type { ReviewResponse } from "../providers/index.js";
+export interface ReviewCommandOptions {
+    commit?: string;
+    range?: string;
+    /** Base ref vs current HEAD (e.g. main → diff main...HEAD). */
+    base?: string;
+    strict: boolean;
+    lang: string;
+    /** Write review markdown to this path instead of only stdout. */
+    out?: string;
+}
+export declare function reviewCommand(options: ReviewCommandOptions): Promise<ReviewResponse>;

package/dist/commands/review.js

@@ -0,0 +1,94 @@
+import { writeFile } from "node:fs/promises";
+import { execa } from "execa";
+import { getCommitDiff, getRangeDiff, getStagedDiff } from "../git/diff.js";
+import { OpenAIProvider } from "../providers/openai.js";
+import { resolveReviewCredentials } from "../config/user-config.js";
+const MAX_DIFF_SIZE = 120000;
+export async function reviewCommand(options) {
+    await ensureGitRepository();
+    const diff = await resolveDiff(options);
+    if (!diff) {
+        const emptyMarkdown = [
+            "## Summary",
+            "No changes detected in the selected diff scope.",
+            "",
+            "## Risk Level",
+            "Unknown",
+            "Reason: No diff content to review.",
+            "",
+            "## Security Review",
+            "No changes to analyze.",
+            "",
+            "## Performance Review",
+            "No changes to analyze.",
+            "",
+            "## Testing Suggestions",
+            "No testing required.",
+            "",
+            "## Code Quality & Maintainability",
+            "No changes to assess.",
+            "",
+            "## Actionable Suggestions",
+            "- Stage or select changes before running ReviuAh.",
+        ].join("\n");
+        await outputReview(emptyMarkdown, options.out);
+        return { markdown: emptyMarkdown, risk: "unknown" };
+    }
+    const trimmedDiff = trimDiff(diff, MAX_DIFF_SIZE);
+    const { apiKey, baseURL, model } = await resolveReviewCredentials();
+    const provider = new OpenAIProvider({
+        apiKey,
+        baseURL,
+        model,
+    });
+    const result = await provider.review({
+        diff: trimmedDiff,
+        language: options.lang,
+    });
+    await outputReview(result.markdown, options.out);
+    return result;
+}
+async function outputReview(markdown, outPath) {
+    if (outPath) {
+        await writeFile(outPath, markdown, "utf8");
+        console.error(`ReviuAh: review written to ${outPath}`);
+    }
+    else {
+        console.log(markdown);
+    }
+}
+async function ensureGitRepository() {
+    const check = await execa("git", ["rev-parse", "--is-inside-work-tree"], {
+        reject: false,
+    });
+    if (check.exitCode !== 0 || check.stdout.trim() !== "true") {
+        throw new Error("ReviuAh must be run inside a git repository.");
+    }
+}
+async function resolveDiff(options) {
+    const modes = [
+        Boolean(options.commit),
+        Boolean(options.range),
+        Boolean(options.base),
+    ].filter(Boolean).length;
+    if (modes > 1) {
+        throw new Error("Use only one of: default (staged), --commit, --range, or --base.");
+    }
+    if (options.commit) {
+        return getCommitDiff(options.commit);
+    }
+    if (options.range) {
+        return getRangeDiff(options.range);
+    }
+    if (options.base) {
+        return getRangeDiff(`${options.base}...HEAD`);
+    }
+    return getStagedDiff();
+}
+function trimDiff(diff, maxSize) {
+    if (diff.length <= maxSize) {
+        return diff;
+    }
+    return `${diff.slice(0, maxSize)}\n\n[Diff truncated to ${maxSize} characters]`;
+}
+//# sourceMappingURL=review.js.map

package/dist/commands/review.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review.js","sourceRoot":"","sources":["../../src/commands/review.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,MAAM,aAAa,GAAG,MAAM,CAAC;AAa7B,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAA6B;IAE7B,MAAM,mBAAmB,EAAE,CAAC;IAE5B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;IAExC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,aAAa,GAAG;YACpB,YAAY;YACZ,iDAAiD;YACjD,EAAE;YACF,eAAe;YACf,SAAS;YACT,oCAAoC;YACpC,EAAE;YACF,oBAAoB;YACpB,wBAAwB;YACxB,EAAE;YACF,uBAAuB;YACvB,wBAAwB;YACxB,EAAE;YACF,wBAAwB;YACxB,sBAAsB;YACtB,EAAE;YACF,mCAAmC;YACnC,uBAAuB;YACvB,EAAE;YACF,2BAA2B;YAC3B,mDAAmD;SACpD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,MAAM,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/C,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACtD,CAAC;IAED,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAElD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,wBAAwB,EAAE,CAAC;IAEpE,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAC;QAClC,MAAM;QACN,OAAO;QACP,KAAK;KACN,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;QACnC,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,OAAO,CAAC,IAAI;KACvB,CAAC,CAAC;IAEH,MAAM,YAAY,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAEjD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,QAAgB,EAAE,OAAgB;IAC5D,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC3C,OAAO,CAAC,KAAK,CAAC,8BAA8B,OAAO,EAAE,CAAC,CAAC;IACzD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB;IAChC,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,uBAAuB,CAAC,EAAE;QACvE,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,OAA6B;IACtD,MAAM,KAAK,GAAG;QACZ,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;QACvB,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;QACtB,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;KACtB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IACzB,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,YAAY,CAAC,GAAG,OAAO,CAAC,IAAI,SAAS,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,aAAa,EAAE,CAAC;AACzB,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,OAAe;IAC7C,IAAI,IAAI,CAAC,MAAM,IAAI,OAAO,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,0BAA0B,OAAO,cAAc,CAAC;AAClF,CAAC"}

package/dist/commands/setup.d.ts

@@ -0,0 +1 @@
+export declare function setupCommand(): Promise<void>;

package/dist/commands/setup.js

@@ -0,0 +1,70 @@
+import * as readline from "node:readline/promises";
+import { stdin as input, stdout as output } from "node:process";
+import { getUserConfigPath, maskApiKey, readUserConfig, writeUserConfig, } from "../config/user-config.js";
+import { readSecretLine } from "../lib/read-secret.js";
+import { listProviderIds, resolveProviderDefaults } from "../providers/openai.js";
+async function question(defaultLabel, def) {
+    const rl = readline.createInterface({ input, output });
+    try {
+        const hint = def !== undefined ? `${defaultLabel} [${def}]: ` : `${defaultLabel}: `;
+        const line = (await rl.question(hint)).trim();
+        return line || def || "";
+    }
+    finally {
+        rl.close();
+    }
+}
+export async function setupCommand() {
+    const existing = await readUserConfig();
+    const path = getUserConfigPath();
+    console.error("ReviuAh setup — menyimpan konfigurasi di:");
+    console.error(`  ${path}`);
+    console.error("(File hanya di komputer kamu; jangan di-commit. Env REVIUAH_* tetap mengoverride.)\n");
+    let apiKey;
+    if (existing?.apiKey) {
+        const keep = (await question(`Pertahankan API key saat ini (${maskApiKey(existing.apiKey)})? ketik y atau n`, "y")).toLowerCase();
+        if (keep === "n" || keep === "no") {
+            apiKey = await readSecretLine("API key baru: ");
+            while (!apiKey.trim()) {
+                console.error("API key wajib diisi.");
+                apiKey = await readSecretLine("API key baru: ");
+            }
+        }
+        else {
+            apiKey = existing.apiKey;
+        }
+    }
+    else {
+        apiKey = await readSecretLine("API key: ");
+        while (!apiKey.trim()) {
+            console.error("API key wajib diisi.");
+            apiKey = await readSecretLine("API key: ");
+        }
+    }
+    const ids = listProviderIds().join(", ");
+    const defaultProv = existing?.provider?.trim() || "agentrouter";
+    const provInput = await question(`Provider (${ids})`, defaultProv);
+    const provider = provInput.toLowerCase() || defaultProv;
+    const defaults = resolveProviderDefaults(provider);
+    const rl2 = readline.createInterface({ input, output });
+    let modelLine;
+    let urlLine;
+    try {
+        modelLine = (await rl2.question(`Model (Enter = ${defaults.defaultModel}): `)).trim();
+        urlLine = (await rl2.question(`Base URL (Enter = ${defaults.baseURL}): `)).trim();
+    }
+    finally {
+        rl2.close();
+    }
+    const model = modelLine || defaults.defaultModel;
+    const providerUrl = urlLine || defaults.baseURL;
+    const next = {
+        apiKey: apiKey.trim(),
+        provider,
+        model,
+        providerUrl,
+    };
+    await writeUserConfig(next);
+    console.error("\nSelesai. Coba: reviuah (review staged) atau reviuah --base main");
+}
+//# sourceMappingURL=setup.js.map

package/dist/commands/setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.js","sourceRoot":"","sources":["../../src/commands/setup.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,KAAK,IAAI,KAAK,EAAE,MAAM,IAAI,MAAM,EAAE,MAAM,cAAc,CAAC;AAChE,OAAO,EACL,iBAAiB,EACjB,UAAU,EACV,cAAc,EACd,eAAe,GAEhB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAElF,KAAK,UAAU,QAAQ,CAAC,YAAoB,EAAE,GAAY;IACxD,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,YAAY,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,YAAY,IAAI,CAAC;QACpF,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,OAAO,IAAI,IAAI,GAAG,IAAI,EAAE,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,QAAQ,GAAG,MAAM,cAAc,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;IAEjC,OAAO,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC3D,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC3B,OAAO,CAAC,KAAK,CAAC,sFAAsF,CAAC,CAAC;IAEtG,IAAI,MAAc,CAAC;IAEnB,IAAI,QAAQ,EAAE,MAAM,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,CACX,MAAM,QAAQ,CACZ,iCAAiC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,mBAAmB,EAC/E,GAAG,CACJ,CACF,CAAC,WAAW,EAAE,CAAC;QAChB,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClC,MAAM,GAAG,MAAM,cAAc,CAAC,gBAAgB,CAAC,CAAC;YAChD,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;gBACtB,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;gBACtC,MAAM,GAAG,MAAM,cAAc,CAAC,gBAAgB,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC3B,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,CAAC;QAC3C,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YACtB,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACtC,MAAM,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,eAAe,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,WAAW,GAAG,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,aAAa,CAAC;IAChE,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,aAAa,GAAG,GAAG,EAAE,WAAW,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,SAAS,CAAC,WAAW,EAAE,IAAI,WAAW,CAAC;IACxD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAEnD,MAAM,GAAG,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACxD,IAAI,SAAiB,CAAC;IACtB,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,SAAS,GAAG,CACV,MAAM,GAAG,CAAC,QAAQ,CAChB,kBAAkB,QAAQ,CAAC,YAAY,KAAK,CAC7C,CACF,CAAC,IAAI,EAAE,CAAC;QACT,OAAO,GAAG,CACR,MAAM,GAAG,CAAC,QAAQ,CAAC,qBAAqB,QAAQ,CAAC,OAAO,KAAK,CAAC,CAC/D,CAAC,IAAI,EAAE,CAAC;IACX,CAAC;YAAS,CAAC;QACT,GAAG,CAAC,KAAK,EAAE,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,SAAS,IAAI,QAAQ,CAAC,YAAY,CAAC;IACjD,MAAM,WAAW,GAAG,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC;IAEhD,MAAM,IAAI,GAAe;QACvB,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;QACrB,QAAQ;QACR,KAAK;QACL,WAAW;KACZ,CAAC;IAEF,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IAC5B,OAAO,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAC;AACrF,CAAC"}

package/dist/config/user-config.d.ts

@@ -0,0 +1,16 @@
+export interface UserConfig {
+    apiKey?: string;
+    provider?: string;
+    providerUrl?: string;
+    model?: string;
+}
+export declare function getUserConfigPath(): string;
+export declare function readUserConfig(): Promise<UserConfig | null>;
+export declare function writeUserConfig(config: UserConfig): Promise<void>;
+export declare function maskApiKey(key: string): string;
+/** Env wins over file (CI-friendly). */
+export declare function resolveReviewCredentials(): Promise<{
+    apiKey: string;
+    baseURL: string;
+    model: string;
+}>;

package/dist/config/user-config.js

@@ -0,0 +1,52 @@
+import { mkdir, readFile, writeFile, chmod } from "node:fs/promises";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { resolveProviderDefaults } from "../providers/openai.js";
+const CONFIG_DIR = join(homedir(), ".reviuah");
+const CONFIG_FILE = join(CONFIG_DIR, "config.json");
+export function getUserConfigPath() {
+    return CONFIG_FILE;
+}
+export async function readUserConfig() {
+    try {
+        const raw = await readFile(CONFIG_FILE, "utf8");
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+export async function writeUserConfig(config) {
+    await mkdir(CONFIG_DIR, { recursive: true, mode: 0o700 });
+    const body = `${JSON.stringify(config, null, 2)}\n`;
+    await writeFile(CONFIG_FILE, body, { mode: 0o600 });
+    try {
+        await chmod(CONFIG_FILE, 0o600);
+    }
+    catch {
+        /* Windows may ignore */
+    }
+}
+export function maskApiKey(key) {
+    if (key.length <= 8)
+        return "****";
+    return `${key.slice(0, 4)}…${key.slice(-4)}`;
+}
+/** Env wins over file (CI-friendly). */
+export async function resolveReviewCredentials() {
+    const file = await readUserConfig();
+    const apiKey = process.env.REVIUAH_API_KEY?.trim() || file?.apiKey?.trim();
+    if (!apiKey) {
+        throw new Error("No API key. Run: reviuah setup\nOr set REVIUAH_API_KEY in your environment.");
+    }
+    const providerName = process.env.REVIUAH_PROVIDER?.trim() || file?.provider?.trim();
+    const defaults = resolveProviderDefaults(providerName);
+    const baseURL = process.env.REVIUAH_PROVIDER_URL?.trim() ||
+        file?.providerUrl?.trim() ||
+        defaults.baseURL;
+    const model = process.env.REVIUAH_MODEL?.trim() ||
+        file?.model?.trim() ||
+        defaults.defaultModel;
+    return { apiKey, baseURL, model };
+}
+//# sourceMappingURL=user-config.js.map

package/dist/config/user-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-config.js","sourceRoot":"","sources":["../../src/config/user-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AASjE,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAC;AAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;AAEpD,MAAM,UAAU,iBAAiB;IAC/B,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAe,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAkB;IACtD,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IACpD,MAAM,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;IAC1B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACnC,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,wCAAwC;AACxC,MAAM,CAAC,KAAK,UAAU,wBAAwB;IAK5C,MAAM,IAAI,GAAG,MAAM,cAAc,EAAE,CAAC;IAEpC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC3E,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAChB,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjE,MAAM,QAAQ,GAAG,uBAAuB,CAAC,YAAY,CAAC,CAAC;IAEvD,MAAM,OAAO,GACX,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE;QACxC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;QACzB,QAAQ,CAAC,OAAO,CAAC;IACnB,MAAM,KAAK,GACT,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE;QACjC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;QACnB,QAAQ,CAAC,YAAY,CAAC;IAExB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACpC,CAAC"}

package/dist/git/diff.d.ts

@@ -0,0 +1,3 @@
+export declare function getStagedDiff(): Promise<string>;
+export declare function getCommitDiff(ref: string): Promise<string>;
+export declare function getRangeDiff(range: string): Promise<string>;

package/dist/git/diff.js

@@ -0,0 +1,19 @@
+import { execa } from "execa";
+async function runGitDiff(args) {
+    const result = await execa("git", args, { reject: false });
+    if (result.exitCode !== 0) {
+        const message = result.stderr.trim() || "Unknown git error";
+        throw new Error(`Failed to run git ${args.join(" ")}: ${message}`);
+    }
+    return result.stdout.trim();
+}
+export async function getStagedDiff() {
+    return runGitDiff(["diff", "--cached"]);
+}
+export async function getCommitDiff(ref) {
+    return runGitDiff(["show", "--format=", ref]);
+}
+export async function getRangeDiff(range) {
+    return runGitDiff(["diff", range]);
+}
+//# sourceMappingURL=diff.js.map

package/dist/git/diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.js","sourceRoot":"","sources":["../../src/git/diff.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAE9B,KAAK,UAAU,UAAU,CAAC,IAAc;IACtC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAE3D,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,mBAAmB,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,OAAO,UAAU,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAW;IAC7C,OAAO,UAAU,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAa;IAC9C,OAAO,UAAU,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AACrC,CAAC"}

package/dist/lib/read-secret.d.ts

@@ -0,0 +1,4 @@
+/**
+ * Reads a line without echoing characters (TTY). Falls back to visible input if raw mode fails.
+ */
+export declare function readSecretLine(prompt: string): Promise<string>;

package/dist/lib/read-secret.js

@@ -0,0 +1,69 @@
+import * as readline from "node:readline/promises";
+import { createInterface } from "node:readline";
+/**
+ * Reads a line without echoing characters (TTY). Falls back to visible input if raw mode fails.
+ */
+export async function readSecretLine(prompt) {
+    const stdin = process.stdin;
+    const stdout = process.stdout;
+    if (!stdin.isTTY) {
+        const rl = readline.createInterface({ input: stdin, output: stdout });
+        try {
+            stdout.write(`${prompt}(piped input — key will be visible)\n`);
+            return (await rl.question("API key: ")).trim();
+        }
+        finally {
+            rl.close();
+        }
+    }
+    return new Promise((resolve, reject) => {
+        stdout.write(prompt);
+        try {
+            stdin.setRawMode(true);
+        }
+        catch {
+            stdin.setRawMode(false);
+            const rl = createInterface({ input: stdin, output: stdout });
+            rl.question("API key (visible): ", (answer) => {
+                rl.close();
+                resolve(answer.trim());
+            });
+            return;
+        }
+        stdin.resume();
+        stdin.setEncoding("utf8");
+        let secret = "";
+        const onData = (ch) => {
+            if (ch === "\n" || ch === "\r" || ch === "\u0004") {
+                cleanup();
+                stdout.write("\n");
+                resolve(secret);
+                return;
+            }
+            if (ch === "\u0003") {
+                cleanup();
+                process.exit(0);
+            }
+            if (ch === "\u007f" || ch === "\b") {
+                if (secret.length) {
+                    secret = secret.slice(0, -1);
+                    stdout.write("\b \b");
+                }
+                return;
+            }
+            secret += ch;
+            stdout.write("*");
+        };
+        const cleanup = () => {
+            stdin.setRawMode(false);
+            stdin.pause();
+            stdin.removeListener("data", onData);
+        };
+        stdin.on("data", onData);
+        stdin.on("error", (err) => {
+            cleanup();
+            reject(err);
+        });
+    });
+}
+//# sourceMappingURL=read-secret.js.map

package/dist/lib/read-secret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-secret.js","sourceRoot":"","sources":["../../src/lib/read-secret.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAc;IACjD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAE9B,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACtE,IAAI,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,uCAAuC,CAAC,CAAC;YAC/D,OAAO,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACjD,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;IACH,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACrB,IAAI,CAAC;YACH,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACxB,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YAC7D,EAAE,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC,MAAc,EAAE,EAAE;gBACpD,EAAE,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACzB,CAAC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,KAAK,CAAC,MAAM,EAAE,CAAC;QACf,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,MAAM,MAAM,GAAG,CAAC,EAAU,EAAE,EAAE;YAC5B,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;gBAClD,OAAO,EAAE,CAAC;gBACV,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACnB,OAAO,CAAC,MAAM,CAAC,CAAC;gBAChB,OAAO;YACT,CAAC;YACD,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;gBACpB,OAAO,EAAE,CAAC;gBACV,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,IAAI,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;gBACnC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;oBAClB,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;oBAC7B,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBACxB,CAAC;gBACD,OAAO;YACT,CAAC;YACD,MAAM,IAAI,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC,CAAC;QAEF,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACxB,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC,CAAC;QAEF,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACzB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/providers/index.d.ts

@@ -0,0 +1,12 @@
+export type RiskLevel = "low" | "medium" | "high" | "unknown";
+export interface ReviewRequest {
+    diff: string;
+    language: string;
+}
+export interface ReviewResponse {
+    markdown: string;
+    risk: RiskLevel;
+}
+export interface Provider {
+    review(request: ReviewRequest): Promise<ReviewResponse>;
+}

package/dist/providers/index.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.js.map

package/dist/providers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/providers/index.ts"],"names":[],"mappings":""}

package/dist/providers/openai.d.ts

@@ -0,0 +1,20 @@
+import type { Provider, ReviewRequest, ReviewResponse } from "./index.js";
+export interface OpenAIProviderOptions {
+    apiKey: string;
+    baseURL?: string;
+    model: string;
+}
+interface ProviderTemplate {
+    baseURL: string;
+    defaultModel: string;
+}
+export declare function listProviderIds(): string[];
+export declare function resolveProviderDefaults(providerName?: string): ProviderTemplate;
+export declare class OpenAIProvider implements Provider {
+    private readonly client;
+    private readonly model;
+    constructor(options: OpenAIProviderOptions);
+    review(request: ReviewRequest): Promise<ReviewResponse>;
+    private buildPrompt;
+}
+export {};

package/dist/providers/openai.js

@@ -0,0 +1,124 @@
+import OpenAI from "openai";
+const PROVIDER_TEMPLATES = {
+    openai: { baseURL: "https://api.openai.com/v1", defaultModel: "gpt-4o" },
+    anthropic: {
+        baseURL: "https://api.anthropic.com/v1",
+        defaultModel: "claude-sonnet-4-5",
+    },
+    gemini: {
+        baseURL: "https://generativelanguage.googleapis.com/v1beta/openai/",
+        defaultModel: "gemini-2.5-flash",
+    },
+    deepseek: {
+        baseURL: "https://api.deepseek.com",
+        defaultModel: "deepseek-chat",
+    },
+    groq: {
+        baseURL: "https://api.groq.com/openai/v1",
+        defaultModel: "llama-3.3-70b-versatile",
+    },
+    mistral: {
+        baseURL: "https://api.mistral.ai/v1",
+        defaultModel: "mistral-large-latest",
+    },
+    together: {
+        baseURL: "https://api.together.xyz/v1",
+        defaultModel: "meta-llama/Llama-3.3-70B-Instruct-Turbo",
+    },
+    fireworks: {
+        baseURL: "https://api.fireworks.ai/inference/v1",
+        defaultModel: "accounts/fireworks/models/llama-v3p3-70b-instruct",
+    },
+    openrouter: {
+        baseURL: "https://openrouter.ai/api/v1",
+        defaultModel: "anthropic/claude-3.5-sonnet",
+    },
+    cerebras: {
+        baseURL: "https://api.cerebras.ai/v1",
+        defaultModel: "llama-3.3-70b",
+    },
+    glm: {
+        baseURL: "https://api.z.ai/api/coding/paas/v4",
+        defaultModel: "glm-4.7",
+    },
+    ollama: { baseURL: "http://localhost:11434/v1", defaultModel: "llama3.1" },
+    /** OpenAI-compatible: https://agentrouter.org/v1 */
+    agentrouter: {
+        baseURL: "https://agentrouter.org/v1",
+        defaultModel: "gpt-4o",
+    },
+};
+/** Default bila env/config tidak menyebut provider (AgentRouter). */
+const DEFAULT_PROVIDER = "agentrouter";
+export function listProviderIds() {
+    return Object.keys(PROVIDER_TEMPLATES).sort();
+}
+export function resolveProviderDefaults(providerName) {
+    if (!providerName) {
+        return PROVIDER_TEMPLATES[DEFAULT_PROVIDER];
+    }
+    return (PROVIDER_TEMPLATES[providerName.toLowerCase()] ??
+        PROVIDER_TEMPLATES[DEFAULT_PROVIDER]);
+}
+export class OpenAIProvider {
+    client;
+    model;
+    constructor(options) {
+        this.client = new OpenAI({
+            apiKey: options.apiKey,
+            baseURL: options.baseURL,
+        });
+        this.model = options.model;
+    }
+    async review(request) {
+        const prompt = this.buildPrompt(request);
+        const response = await this.client.chat.completions.create({
+            model: this.model,
+            temperature: 0.2,
+            messages: [
+                {
+                    role: "system",
+                    content: "You are ReviuAh, a senior software reviewer. You MUST output valid Markdown and strictly follow the required headings and order.",
+                },
+                {
+                    role: "user",
+                    content: prompt,
+                },
+            ],
+        });
+        const markdown = response.choices[0]?.message?.content?.trim() ?? "";
+        const risk = extractRiskLevel(markdown);
+        return { markdown, risk };
+    }
+    buildPrompt(request) {
+        return [
+            "Review the following git diff.",
+            `Output language: ${request.language}.`,
+            "Return Markdown with EXACTLY these sections and order:",
+            "## Summary",
+            "## Risk Level",
+            "Low | Medium | High | Unknown",
+            "Reason:",
+            "## Security Review",
+            "## Performance Review",
+            "## Testing Suggestions",
+            "## Code Quality & Maintainability",
+            "## Actionable Suggestions",
+            "Keep the review concise and practical.",
+            "\nGit diff:\n",
+            request.diff,
+        ].join("\n");
+    }
+}
+function extractRiskLevel(markdown) {
+    const match = markdown.match(/##\s*Risk Level[\s\S]*?\b(low|medium|high|unknown)\b/i);
+    const risk = match?.[1]?.toLowerCase();
+    if (risk === "low" ||
+        risk === "medium" ||
+        risk === "high" ||
+        risk === "unknown") {
+        return risk;
+    }
+    return "unknown";
+}
+//# sourceMappingURL=openai.js.map

package/dist/providers/openai.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai.js","sourceRoot":"","sources":["../../src/providers/openai.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAmB5B,MAAM,kBAAkB,GAAqC;IAC3D,MAAM,EAAE,EAAE,OAAO,EAAE,2BAA2B,EAAE,YAAY,EAAE,QAAQ,EAAE;IACxE,SAAS,EAAE;QACT,OAAO,EAAE,8BAA8B;QACvC,YAAY,EAAE,mBAAmB;KAClC;IACD,MAAM,EAAE;QACN,OAAO,EAAE,0DAA0D;QACnE,YAAY,EAAE,kBAAkB;KACjC;IACD,QAAQ,EAAE;QACR,OAAO,EAAE,0BAA0B;QACnC,YAAY,EAAE,eAAe;KAC9B;IACD,IAAI,EAAE;QACJ,OAAO,EAAE,gCAAgC;QACzC,YAAY,EAAE,yBAAyB;KACxC;IACD,OAAO,EAAE;QACP,OAAO,EAAE,2BAA2B;QACpC,YAAY,EAAE,sBAAsB;KACrC;IACD,QAAQ,EAAE;QACR,OAAO,EAAE,6BAA6B;QACtC,YAAY,EAAE,yCAAyC;KACxD;IACD,SAAS,EAAE;QACT,OAAO,EAAE,uCAAuC;QAChD,YAAY,EAAE,mDAAmD;KAClE;IACD,UAAU,EAAE;QACV,OAAO,EAAE,8BAA8B;QACvC,YAAY,EAAE,6BAA6B;KAC5C;IACD,QAAQ,EAAE;QACR,OAAO,EAAE,4BAA4B;QACrC,YAAY,EAAE,eAAe;KAC9B;IACD,GAAG,EAAE;QACH,OAAO,EAAE,qCAAqC;QAC9C,YAAY,EAAE,SAAS;KACxB;IACD,MAAM,EAAE,EAAE,OAAO,EAAE,2BAA2B,EAAE,YAAY,EAAE,UAAU,EAAE;IAC1E,oDAAoD;IACpD,WAAW,EAAE;QACX,OAAO,EAAE,4BAA4B;QACrC,YAAY,EAAE,QAAQ;KACvB;CACF,CAAC;AAEF,qEAAqE;AACrE,MAAM,gBAAgB,GAAG,aAAa,CAAC;AAEvC,MAAM,UAAU,eAAe;IAC7B,OAAO,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,IAAI,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,YAAqB;IAErB,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,CACL,kBAAkB,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;QAC9C,kBAAkB,CAAC,gBAAgB,CAAC,CACrC,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,cAAc;IACR,MAAM,CAAS;IACf,KAAK,CAAS;IAE/B,YAAY,OAA8B;QACxC,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CAAC;YACvB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAsB;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAEzC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;YACzD,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW,EAAE,GAAG;YAChB,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,QAAQ;oBACd,OAAO,EACL,kIAAkI;iBACrI;gBACD;oBACE,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE,MAAM;iBAChB;aACF;SACF,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACrE,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAExC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IAEO,WAAW,CAAC,OAAsB;QACxC,OAAO;YACL,gCAAgC;YAChC,oBAAoB,OAAO,CAAC,QAAQ,GAAG;YACvC,wDAAwD;YACxD,YAAY;YACZ,eAAe;YACf,+BAA+B;YAC/B,SAAS;YACT,oBAAoB;YACpB,uBAAuB;YACvB,wBAAwB;YACxB,mCAAmC;YACnC,2BAA2B;YAC3B,wCAAwC;YACxC,eAAe;YACf,OAAO,CAAC,IAAI;SACb,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;CACF;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAC1B,uDAAuD,CACxD,CAAC;IACF,MAAM,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;IAEvC,IACE,IAAI,KAAK,KAAK;QACd,IAAI,KAAK,QAAQ;QACjB,IAAI,KAAK,MAAM;QACf,IAAI,KAAK,SAAS,EAClB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/package.json

@@ -0,0 +1,48 @@
+{
+  "name": "reviuah",
+  "version": "0.1.0",
+  "description": "AI-powered Git diff reviewer CLI — staged, branch vs base, CI-friendly",
+  "license": "MIT",
+  "author": "",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/rsuregar/reviewah.git"
+  },
+  "keywords": [
+    "cli",
+    "git",
+    "diff",
+    "code-review",
+    "ai",
+    "llm",
+    "openai",
+    "pre-commit",
+    "ci"
+  ],
+  "type": "module",
+  "bin": {
+    "reviuah": "dist/cli.js",
+    "reviewah": "dist/cli.js"
+  },
+  "files": ["dist", "README.md", "LICENSE"],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "check": "tsc --noEmit",
+    "start": "node dist/cli.js",
+    "prepublishOnly": "npm run build",
+    "prepare": "node -e \"const f=require('fs');const{execSync}=require('child_process');if(f.existsSync('tsconfig.json')&&f.existsSync('src'))execSync('npm run build',{stdio:'inherit'})\""
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "dependencies": {
+    "commander": "^12.1.0",
+    "execa": "^9.3.1",
+    "openai": "^4.67.3"
+  },
+  "devDependencies": {
+    "@types/node": "^25.3.3",
+    "typescript": "^5.6.3"
+  },
+  "packageManager": "yarn@1.22.22+sha512.a6b2f7906b721bba3d67d4aff083df04dad64c399707841b7acf00f6b133b7ac24255f2652fa22ae3534329dc6180534e98d17432037ff6fd140556e2bb3137e"
+}