secondpair 0.1.0

package/README.md

@@ -0,0 +1,119 @@
+# secondpair — the second pair of eyes
+
+LLM-powered PR reviewer with whole-repo context. Reviews a diff (local,
+staged, or a GitHub/GitLab/Bitbucket PR), posts inline comments, gates CI
+on severity. Uses sibling package [`codengram`](../codengram/README.md) as
+its repo memory so review isn't diff-blind — it sees callers, related
+files, and project context, not just the patch.
+
+## Install
+
+```bash
+npm install --save-dev secondpair
+```
+
+Needs an LLM API key (same resolution as `codengram` — set one):
+
+```bash
+export ANTHROPIC_API_KEY=sk-ant-...      # default, recommended
+# or: OPENAI_API_KEY / OPENROUTER_API_KEY / CODENGRAM_API_KEY+CODENGRAM_BASE_URL+CODENGRAM_MODEL
+```
+
+## Quick start
+
+```bash
+cd your-repo
+npx codengram init          # one-time: builds repo memory, installs git hooks
+npx secondpair review --staged           # review staged changes, print report
+npx secondpair review --base main        # review branch vs main
+```
+
+Nothing to configure to get useful output — defaults are sane
+(`fail_on: high`, `min_confidence: 0.5`). Add `.pr-review.yml` only when you
+want to change them (see [Config](#config)).
+
+## Reviewing a real PR (posting comments + CI gate)
+
+Pick your platform, set its token, run with `--post`:
+
+**GitHub** (GitHub Actions: `GITHUB_TOKEN` is provided automatically)
+```bash
+export GITHUB_TOKEN=ghp_...
+npx secondpair review --pr 123 --repo owner/name --post --fail-on high
+```
+
+**GitLab** (in GitLab CI, `CI_SERVER_URL`/`CI_PROJECT_ID`/`CI_MERGE_REQUEST_IID`
+are auto-detected; set a token as `GITLAB_TOKEN` or `GL_TOKEN`)
+```bash
+export GITLAB_TOKEN=glpat-...
+npx secondpair review --post --fail-on high     # host auto-detected via GITLAB_CI env
+```
+
+**Bitbucket** (`BITBUCKET_WORKSPACE`/`BITBUCKET_PR_ID` auto-detected in
+Bitbucket Pipelines; auth via token or app password)
+```bash
+export BITBUCKET_TOKEN=...                      # or BITBUCKET_USERNAME + BITBUCKET_APP_PASSWORD
+npx secondpair review --post --fail-on high
+```
+
+`--host` overrides auto-detection if you're running somewhere the CI env
+vars aren't set. Exit code is 1 when any active finding is at/above
+`fail_on` — wire that into your pipeline as the merge gate.
+
+### Example: GitHub Actions
+
+```yaml
+- run: npx secondpair review --pr ${{ github.event.pull_request.number }} --repo ${{ github.repository }} --post
+  env:
+    GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+    ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
+```
+
+Re-running on the same PR (new commit, or CI re-triggered) never
+double-posts — each platform re-checks live existing comment ids right
+before posting, on top of run-to-run fingerprint reconciliation.
+
+## Config (`.pr-review.yml`, optional)
+
+```yaml
+fail_on: high              # critical|high|medium|low|info — CI exit-1 threshold
+min_confidence: 0.5
+ignore: ["**/*.generated.ts", "vendor/**"]
+context_token_budget: 8000 # codengram context injected per chunk
+context_snippets: 3
+categories:                # turn any off
+  bug: true
+  security: true
+  missing-tests: true
+  naming: true
+  complexity: true
+  custom: true
+limits:
+  max_findings_per_file: 5
+  max_total: 30
+self_critique: false       # extra LLM pass that only drops findings, never adds
+redact_secrets: true       # strip secrets from diff/context before they reach the LLM
+redact_patterns: []        # extra regexes, on top of built-in AWS/GitHub-token/PEM/etc
+write_suppressions: false  # persist "won't fix" replies to .pr-review-suppressions.yml
+custom_instructions: ""
+```
+
+Suppress a finding permanently: reply "won't fix" (or react 👎) on its PR
+comment, or hand-edit `.pr-review-suppressions.yml` with the finding id
+from the report.
+
+## `secondpair index`
+
+Alias for `codengram index` — kept so a repo can adopt `secondpair` without
+also depending on `codengram` directly for this one command. Same
+incremental behavior; see [codengram's README](../codengram/README.md#staying-in-sync-after-code-changes)
+for exactly when/how re-indexing happens and why it's cheap on repeated
+runs — short version: git-hook-triggered, hash-incremental, never a full
+rebuild unless you pass `--full`.
+
+## More detail
+
+- Agent-oriented internals reference (pipeline, invariants to preserve when
+  editing): [`AGENTS.md`](./AGENTS.md)
+- Architecture review, requirements scorecard, known gaps:
+  [`docs/architecture-review.md`](./docs/architecture-review.md)

package/dist/bitbucket/comments.d.ts

@@ -0,0 +1,49 @@
+import type { Finding, ReviewResult } from "../types.js";
+export interface BbRef {
+    workspace: string;
+    repoSlug: string;
+    prId: number;
+}
+/**
+ * Resolve Bitbucket Cloud auth from the environment:
+ *   BITBUCKET_TOKEN / BITBUCKET_ACCESS_TOKEN            -> Bearer (repository access token)
+ *   BITBUCKET_USERNAME + BITBUCKET_APP_PASSWORD         -> Basic (app password)
+ */
+export declare function resolveBbAuthHeader(): string;
+/** Resolve workspace/repo/PR id from flags or Bitbucket Pipelines env vars. */
+export declare function resolveBbRef(repoSlug: string | undefined, pr: number | undefined): BbRef;
+/** Fetch the unified diff of a Bitbucket Cloud pull request. */
+export declare function getBbPrDiff(ref: BbRef): Promise<string>;
+interface BbComment {
+    id?: number;
+    content?: {
+        raw?: string;
+    };
+    inline?: {
+        path?: string;
+        to?: number;
+    };
+    parent?: {
+        id?: number;
+    };
+}
+export declare function listBbComments(ref: BbRef): Promise<BbComment[]>;
+export declare function listBbFindingIds(ref: BbRef): Promise<Set<string>>;
+export declare function listBbWontFixFindingIds(ref: BbRef): Promise<Set<string>>;
+/** Bitbucket Cloud exposes no API for resolving pull-request comment threads. */
+export declare function resolveBbCommentsForIds(_ref: BbRef, _ids: Iterable<string>, log?: (msg: string) => void): Promise<number>;
+/** Bitbucket markdown has no GitHub suggestion blocks — render fixes as code fences. */
+export declare function formatBbCommentBody(f: Finding): string;
+export declare function formatBbSummaryBody(result: ReviewResult, failed: boolean): string;
+export interface PostBbReviewOptions {
+    ref: BbRef;
+    result: ReviewResult;
+    failed: boolean;
+    log?: (msg: string) => void;
+}
+/**
+ * Post findings to a Bitbucket Cloud PR: one summary comment plus one inline
+ * comment per *new* finding. Persistent findings (same pr-review-id) are skipped.
+ */
+export declare function postBbReview(opts: PostBbReviewOptions): Promise<void>;
+export {};

package/dist/bitbucket/comments.js

@@ -0,0 +1,198 @@
+import { collectIdsFromBodies, embedFindingId, parseFindingId } from "../finding-id.js";
+import { AGENT_MARKER, SEVERITY_EMOJI } from "../github/comments.js";
+import { collectWontFixIds } from "../suppress-signals.js";
+const API = "https://api.bitbucket.org/2.0";
+/**
+ * Resolve Bitbucket Cloud auth from the environment:
+ *   BITBUCKET_TOKEN / BITBUCKET_ACCESS_TOKEN            -> Bearer (repository access token)
+ *   BITBUCKET_USERNAME + BITBUCKET_APP_PASSWORD         -> Basic (app password)
+ */
+export function resolveBbAuthHeader() {
+    const env = process.env;
+    const token = env.BITBUCKET_TOKEN || env.BITBUCKET_ACCESS_TOKEN;
+    if (token)
+        return `Bearer ${token}`;
+    if (env.BITBUCKET_USERNAME && env.BITBUCKET_APP_PASSWORD) {
+        const basic = Buffer.from(`${env.BITBUCKET_USERNAME}:${env.BITBUCKET_APP_PASSWORD}`).toString("base64");
+        return `Basic ${basic}`;
+    }
+    throw new Error("Bitbucket auth required: set BITBUCKET_TOKEN (repository access token with pullrequest:write) " +
+        "or BITBUCKET_USERNAME + BITBUCKET_APP_PASSWORD.");
+}
+/** Resolve workspace/repo/PR id from flags or Bitbucket Pipelines env vars. */
+export function resolveBbRef(repoSlug, pr) {
+    const env = process.env;
+    let workspace;
+    let slug;
+    if (repoSlug) {
+        [workspace, slug] = repoSlug.split("/");
+    }
+    else {
+        workspace = env.BITBUCKET_WORKSPACE;
+        slug = env.BITBUCKET_REPO_SLUG;
+    }
+    const prId = pr ?? (env.BITBUCKET_PR_ID ? parseInt(env.BITBUCKET_PR_ID, 10) : undefined);
+    if (!workspace || !slug || prId == null || Number.isNaN(prId)) {
+        throw new Error("Bitbucket PR not identified. Pass --repo workspace/repo_slug and --pr <id>, " +
+            "or run inside Bitbucket Pipelines (BITBUCKET_WORKSPACE / BITBUCKET_REPO_SLUG / BITBUCKET_PR_ID).");
+    }
+    return { workspace, repoSlug: slug, prId };
+}
+async function bbFetch(url, init = {}) {
+    const res = await fetch(url, {
+        ...init,
+        headers: {
+            authorization: resolveBbAuthHeader(),
+            accept: "application/json",
+            ...(init.body ? { "content-type": "application/json" } : {}),
+            ...(init.headers ?? {}),
+        },
+    });
+    if (!res.ok) {
+        const text = await res.text();
+        throw new Error(`Bitbucket API ${init.method ?? "GET"} ${url} failed (${res.status}): ${text.slice(0, 400)}`);
+    }
+    return res;
+}
+/** Fetch the unified diff of a Bitbucket Cloud pull request. */
+export async function getBbPrDiff(ref) {
+    const res = await bbFetch(`${API}/repositories/${ref.workspace}/${ref.repoSlug}/pullrequests/${ref.prId}/diff`, { headers: { accept: "text/plain" } });
+    return res.text();
+}
+export async function listBbComments(ref) {
+    const comments = [];
+    let url = `${API}/repositories/${ref.workspace}/${ref.repoSlug}/pullrequests/${ref.prId}/comments?pagelen=100`;
+    while (url) {
+        const res = await bbFetch(url);
+        const page = (await res.json());
+        comments.push(...(page.values ?? []));
+        url = page.next ?? null;
+    }
+    return comments;
+}
+export async function listBbFindingIds(ref) {
+    const existing = await listBbComments(ref);
+    return collectIdsFromBodies(existing.filter((c) => c.content?.raw?.includes(AGENT_MARKER)).map((c) => c.content?.raw ?? ""));
+}
+export async function listBbWontFixFindingIds(ref) {
+    const comments = await listBbComments(ref);
+    const byId = new Map(comments.flatMap((comment) => (comment.id == null ? [] : [[comment.id, comment]])));
+    return collectWontFixIds(comments.map((comment) => {
+        let parent = comment.parent?.id == null ? undefined : byId.get(comment.parent.id);
+        while (parent) {
+            const body = parent.content?.raw ?? "";
+            if (body.includes(AGENT_MARKER)) {
+                return { body: comment.content?.raw ?? "", parentAgentId: parseFindingId(body) };
+            }
+            parent = parent.parent?.id == null ? undefined : byId.get(parent.parent.id);
+        }
+        const body = comment.content?.raw ?? "";
+        return { body, isAgent: body.includes(AGENT_MARKER), parentAgentId: null };
+    }));
+}
+/** Bitbucket Cloud exposes no API for resolving pull-request comment threads. */
+export async function resolveBbCommentsForIds(_ref, _ids, log = () => { }) {
+    log("Bitbucket: soft-resolve not supported; skipping");
+    return 0;
+}
+/** Bitbucket markdown has no GitHub suggestion blocks — render fixes as code fences. */
+export function formatBbCommentBody(f) {
+    const parts = [
+        `${SEVERITY_EMOJI[f.severity]} **${f.severity.toUpperCase()}** · \`${f.category}\` · confidence ${Math.round(f.confidence * 100)}%`,
+        "",
+        `**${f.title}**`,
+        "",
+        f.body.trim(),
+    ];
+    if (f.suggestion) {
+        parts.push("", "Suggested fix:", "```", f.suggestion.replace(/\n$/, ""), "```");
+    }
+    parts.push("", AGENT_MARKER);
+    let body = parts.join("\n");
+    if (f.id)
+        body = embedFindingId(body, f.id);
+    return body;
+}
+export function formatBbSummaryBody(result, failed) {
+    const counts = {};
+    for (const f of result.findings)
+        counts[f.severity] = (counts[f.severity] ?? 0) + 1;
+    const countLine = result.findings.length === 0
+        ? "No findings."
+        : Object.entries(counts)
+            .map(([sev, n]) => `${SEVERITY_EMOJI[sev]} ${n} ${sev}`)
+            .join(" · ");
+    const recon = result.reconciliation;
+    const reconLine = recon
+        ? `\n_Lifecycle:_ ${recon.new.length} new · ${recon.persistent.length} persistent · ${recon.resolved.length} resolved · ${recon.suppressed.length} suppressed`
+        : "";
+    return [
+        "## PR Review Agent",
+        "",
+        result.summary.trim(),
+        "",
+        countLine,
+        reconLine,
+        failed ? "\n❌ **Check failed**: findings at or above the configured severity threshold." : "",
+        AGENT_MARKER,
+    ].join("\n");
+}
+/**
+ * Post findings to a Bitbucket Cloud PR: one summary comment plus one inline
+ * comment per *new* finding. Persistent findings (same pr-review-id) are skipped.
+ */
+export async function postBbReview(opts) {
+    const { ref, result, log = () => { } } = opts;
+    const commentsUrl = `${API}/repositories/${ref.workspace}/${ref.repoSlug}/pullrequests/${ref.prId}/comments`;
+    const existing = await listBbComments(ref);
+    const mine = existing.filter((c) => c.content?.raw?.includes(AGENT_MARKER));
+    const existingIds = collectIdsFromBodies(mine.map((c) => c.content?.raw ?? ""));
+    const alreadySummarized = mine.some((c) => c.inline == null);
+    if (!alreadySummarized || result.findings.length === 0) {
+        await bbFetch(commentsUrl, {
+            method: "POST",
+            body: JSON.stringify({ content: { raw: formatBbSummaryBody(result, opts.failed) } }),
+        });
+    }
+    const toPost = result.findingsToPost ?? result.findings;
+    let posted = 0;
+    let skipped = 0;
+    const failedInline = [];
+    for (const f of toPost) {
+        if (f.id && existingIds.has(f.id)) {
+            skipped++;
+            continue;
+        }
+        try {
+            await bbFetch(commentsUrl, {
+                method: "POST",
+                body: JSON.stringify({
+                    content: { raw: formatBbCommentBody(f) },
+                    inline: { path: f.file, to: f.end_line },
+                }),
+            });
+            posted++;
+        }
+        catch {
+            failedInline.push(f);
+        }
+    }
+    if (failedInline.length > 0) {
+        const body = [
+            "### Findings that could not be placed inline",
+            ...failedInline.map((f) => `- ${SEVERITY_EMOJI[f.severity]} **${f.severity}** \`${f.file}:${f.start_line}-${f.end_line}\` — ${f.title}\n\n  ${f.body.split("\n").join("\n  ")}`),
+            "",
+            AGENT_MARKER,
+        ].join("\n");
+        await bbFetch(commentsUrl, { method: "POST", body: JSON.stringify({ content: { raw: body } }) });
+    }
+    log(`Bitbucket: posted ${posted} inline comment(s)` +
+        (skipped ? `, skipped ${skipped} duplicate(s)` : "") +
+        (failedInline.length ? `, ${failedInline.length} moved to a summary comment` : "") +
+        ".");
+    const resolvedIds = result.reconciliation?.resolved ?? [];
+    if (resolvedIds.length > 0) {
+        await resolveBbCommentsForIds(ref, resolvedIds, log);
+    }
+}
+//# sourceMappingURL=comments.js.map

package/dist/bitbucket/comments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"comments.js","sourceRoot":"","sources":["../../src/bitbucket/comments.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACxF,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAG3D,MAAM,GAAG,GAAG,+BAA+B,CAAC;AAQ5C;;;;GAIG;AACH,MAAM,UAAU,mBAAmB;IACjC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,MAAM,KAAK,GAAG,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,sBAAsB,CAAC;IAChE,IAAI,KAAK;QAAE,OAAO,UAAU,KAAK,EAAE,CAAC;IACpC,IAAI,GAAG,CAAC,kBAAkB,IAAI,GAAG,CAAC,sBAAsB,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,kBAAkB,IAAI,GAAG,CAAC,sBAAsB,EAAE,CAAC,CAAC,QAAQ,CAC3F,QAAQ,CACT,CAAC;QACF,OAAO,SAAS,KAAK,EAAE,CAAC;IAC1B,CAAC;IACD,MAAM,IAAI,KAAK,CACb,gGAAgG;QAC9F,iDAAiD,CACpD,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAAC,QAA4B,EAAE,EAAsB;IAC/E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,IAAI,SAA6B,CAAC;IAClC,IAAI,IAAwB,CAAC;IAC7B,IAAI,QAAQ,EAAE,CAAC;QACb,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1C,CAAC;SAAM,CAAC;QACN,SAAS,GAAG,GAAG,CAAC,mBAAmB,CAAC;QACpC,IAAI,GAAG,GAAG,CAAC,mBAAmB,CAAC;IACjC,CAAC;IACD,MAAM,IAAI,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACzF,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CACb,8EAA8E;YAC5E,kGAAkG,CACrG,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,GAAW,EAAE,OAAoB,EAAE;IACxD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,GAAG,IAAI;QACP,OAAO,EAAE;YACP,aAAa,EAAE,mBAAmB,EAAE;YACpC,MAAM,EAAE,kBAAkB;YAC1B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;SACxB;KACF,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,iBAAiB,IAAI,CAAC,MAAM,IAAI,KAAK,IAAI,GAAG,YAAY,GAAG,CAAC,MAAM,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAC7F,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gEAAgE;AAChE,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAU;IAC1C,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,GAAG,GAAG,iBAAiB,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,QAAQ,iBAAiB,GAAG,CAAC,IAAI,OAAO,EACpF,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,CACtC,CAAC;IACF,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAU;IAC7C,MAAM,QAAQ,GAAgB,EAAE,CAAC;IACjC,IAAI,GAAG,GACL,GAAG,GAAG,iBAAiB,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,QAAQ,iBAAiB,GAAG,CAAC,IAAI,uBAAuB,CAAC;IACvG,OAAO,GAAG,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4C,CAAC;QAC3E,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;QACtC,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;IAC1B,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAU;IAC/C,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;IAC3C,OAAO,oBAAoB,CACzB,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC,CAChG,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,GAAU;IACtD,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAU,CAAC,CAAC,CAAC,CAC5F,CAAC;IACF,OAAO,iBAAiB,CACtB,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACvB,IAAI,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClF,OAAO,MAAM,EAAE,CAAC;YACd,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;YACvC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;gBAChC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,aAAa,EAAE,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YACnF,CAAC;YACD,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;QACxC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IAC7E,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAW,EACX,IAAsB,EACtB,MAA6B,GAAG,EAAE,GAAE,CAAC;IAErC,GAAG,CAAC,iDAAiD,CAAC,CAAC;IACvD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,mBAAmB,CAAC,CAAU;IAC5C,MAAM,KAAK,GAAG;QACZ,GAAG,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,QAAQ,mBAAmB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG;QACnI,EAAE;QACF,KAAK,CAAC,CAAC,KAAK,IAAI;QAChB,EAAE;QACF,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE;KACd,CAAC;IACF,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAClF,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;IAC7B,IAAI,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,CAAC,CAAC,EAAE;QAAE,IAAI,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAoB,EAAE,MAAe;IACvE,MAAM,MAAM,GAAsC,EAAE,CAAC;IACrD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ;QAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACpF,MAAM,SAAS,GACb,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC1B,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;aACnB,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,cAAc,CAAC,GAAe,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;aACnE,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC;IACpC,MAAM,SAAS,GAAG,KAAK;QACrB,CAAC,CAAC,kBAAkB,KAAK,CAAC,GAAG,CAAC,MAAM,UAAU,KAAK,CAAC,UAAU,CAAC,MAAM,iBAAiB,KAAK,CAAC,QAAQ,CAAC,MAAM,eAAe,KAAK,CAAC,UAAU,CAAC,MAAM,aAAa;QAC9J,CAAC,CAAC,EAAE,CAAC;IACP,OAAO;QACL,oBAAoB;QACpB,EAAE;QACF,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE;QACrB,EAAE;QACF,SAAS;QACT,SAAS;QACT,MAAM,CAAC,CAAC,CAAC,+EAA+E,CAAC,CAAC,CAAC,EAAE;QAC7F,YAAY;KACb,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AASD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAyB;IAC1D,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,GAAG,GAAG,EAAE,GAAE,CAAC,EAAE,GAAG,IAAI,CAAC;IAC7C,MAAM,WAAW,GAAG,GAAG,GAAG,iBAAiB,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,QAAQ,iBAAiB,GAAG,CAAC,IAAI,WAAW,CAAC;IAE7G,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;IAC5E,MAAM,WAAW,GAAG,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;IAChF,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC;IAE7D,IAAI,CAAC,iBAAiB,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvD,MAAM,OAAO,CAAC,WAAW,EAAE;YACzB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;SACrF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,QAAQ,CAAC;IACxD,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,MAAM,YAAY,GAAc,EAAE,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,EAAE,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAClC,OAAO,EAAE,CAAC;YACV,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,WAAW,EAAE;gBACzB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,OAAO,EAAE,EAAE,GAAG,EAAE,mBAAmB,CAAC,CAAC,CAAC,EAAE;oBACxC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;iBACzC,CAAC;aACH,CAAC,CAAC;YACH,MAAM,EAAE,CAAC;QACX,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG;YACX,8CAA8C;YAC9C,GAAG,YAAY,CAAC,GAAG,CACjB,CAAC,CAAC,EAAE,EAAE,CACJ,KAAK,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,QAAQ,QAAQ,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,QAAQ,QAAQ,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CACvJ;YACD,EAAE;YACF,YAAY;SACb,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,OAAO,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACnG,CAAC;IAED,GAAG,CACD,qBAAqB,MAAM,oBAAoB;QAC7C,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,OAAO,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC,MAAM,6BAA6B,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,GAAG,CACN,CAAC;IAEF,MAAM,WAAW,GAAG,MAAM,CAAC,cAAc,EAAE,QAAQ,IAAI,EAAE,CAAC;IAC1D,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,uBAAuB,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;IACvD,CAAC;AACH,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/cli.js

@@ -0,0 +1,208 @@
+#!/usr/bin/env node
+import { Command } from "commander";
+import path from "node:path";
+import pc from "picocolors";
+import { getModel, runIndex } from "codengram";
+import { getBbPrDiff, listBbFindingIds, listBbWontFixFindingIds, postBbReview, resolveBbRef, } from "./bitbucket/comments.js";
+import { getGlMrDiff, listGlFindingIds, listGlWontFixFindingIds, postGlReview, resolveGlRef, } from "./gitlab/comments.js";
+import { loadConfig } from "./config.js";
+import { getPrDiff, getPrHeadSha, makeOctokit, parseRepoSlug } from "./diff/github.js";
+import { getLocalDiff } from "./diff/local.js";
+import { listPostedFindingIds, listWontFixFindingIds, postReview } from "./github/comments.js";
+import { formatReport, shouldFail } from "./report/cli.js";
+import { buildJsonReport, formatRunSummaryLine, loadPreviousFindings, loadPreviousIds, writeJsonReport, } from "./report/json.js";
+import { runReview } from "./review.js";
+import { appendSuppressionIds, loadSuppressions } from "./suppressions.js";
+import { SEVERITIES } from "./types.js";
+const program = new Command();
+const log = (msg) => console.error(pc.dim(msg));
+program
+    .name("secondpair")
+    .description("secondpair — the second pair of eyes: LLM PR reviewer with a persistent repo memory (codengram) for whole-project context")
+    .version("0.1.0");
+program
+    .command("index")
+    .description("Build or incrementally update the repo memory (.codengram/index.json)")
+    .option("--full", "re-index every file regardless of content hash", false)
+    .option("--no-llm", "skip LLM summaries (symbols + import graph only; no API key needed)")
+    .option("--dir <path>", "repository root", process.cwd())
+    .option("--config <path>", "path to .pr-review.yml")
+    .action(async (opts) => {
+    const cwd = path.resolve(opts.dir);
+    const config = await loadConfig(cwd, opts.config);
+    const stats = await runIndex({
+        cwd,
+        full: opts.full,
+        llm: opts.llm,
+        ignore: config.ignore,
+        log,
+    });
+    console.log(pc.green(`Codemap updated: ${stats.indexed} indexed, ${stats.unchanged} unchanged, ${stats.removed} removed (${stats.total} files).`));
+});
+program
+    .command("review")
+    .description("Review a diff (local branch, staged changes, or a GitHub/Bitbucket/GitLab PR)")
+    .option("--staged", "review staged changes instead of branch vs base", false)
+    .option("--base <ref>", "base ref for the local diff (default: auto-detected origin/main)")
+    .option("--pr <number>", "pull request number/id to review", (v) => parseInt(v, 10))
+    .option("--repo <owner/name>", "repository (GitHub owner/name, Bitbucket workspace/repo_slug, or GitLab group/project; default from CI env vars)")
+    .option("--host <host>", "github | bitbucket | gitlab (default: detected from CI env vars, else github)")
+    .option("--json <path>", "write findings JSON to this path", "pr-review-report.json")
+    .option("--post", "post findings as inline PR review comments", false)
+    .option("--fail-on <severity>", `exit 1 at/above this severity (${SEVERITIES.join("|")}); overrides config`)
+    .option("--no-context", "review the diff without codemap context")
+    .option("--dir <path>", "repository root", process.cwd())
+    .option("--config <path>", "path to .pr-review.yml")
+    .option("--suppressions <path>", "path to .pr-review-suppressions.yml")
+    .option("--write-suppressions", "append won’t-fix finding ids to .pr-review-suppressions.yml", false)
+    .action(async (opts) => {
+    const cwd = path.resolve(opts.dir);
+    const config = await loadConfig(cwd, opts.config);
+    if (opts.writeSuppressions)
+        config.write_suppressions = true;
+    if (opts.failOn) {
+        if (!SEVERITIES.includes(opts.failOn)) {
+            throw new Error(`--fail-on must be one of: ${SEVERITIES.join(", ")}`);
+        }
+        config.fail_on = opts.failOn;
+    }
+    const env = process.env;
+    const host = opts.host ??
+        (env.BITBUCKET_WORKSPACE || env.BITBUCKET_PR_ID
+            ? "bitbucket"
+            : env.GITLAB_CI
+                ? "gitlab"
+                : "github");
+    if (host !== "github" && host !== "bitbucket" && host !== "gitlab") {
+        throw new Error(`--host must be github, bitbucket, or gitlab, got "${opts.host}".`);
+    }
+    const bbPrAvailable = host === "bitbucket" && (opts.pr != null || env.BITBUCKET_PR_ID);
+    const glMrAvailable = host === "gitlab" && (opts.pr != null || env.CI_MERGE_REQUEST_IID);
+    let diffText;
+    let changeDescription;
+    let prRef = null;
+    let octokit = null;
+    let bbRef = null;
+    let glRef = null;
+    let glDiffRefs = null;
+    if (glMrAvailable) {
+        glRef = resolveGlRef(opts.repo, opts.pr);
+        log(`Fetching diff for project ${decodeURIComponent(glRef.projectId)} MR !${glRef.mrIid} (GitLab)…`);
+        const mr = await getGlMrDiff(glRef);
+        diffText = mr.diffText;
+        glDiffRefs = mr.diffRefs;
+        changeDescription = `MR !${glRef.mrIid} in ${decodeURIComponent(glRef.projectId)}`;
+    }
+    else if (bbPrAvailable) {
+        bbRef = resolveBbRef(opts.repo, opts.pr);
+        log(`Fetching diff for ${bbRef.workspace}/${bbRef.repoSlug} PR #${bbRef.prId} (Bitbucket)…`);
+        diffText = await getBbPrDiff(bbRef);
+        changeDescription = `PR #${bbRef.prId} in ${bbRef.workspace}/${bbRef.repoSlug}`;
+    }
+    else if (opts.pr != null) {
+        const slug = opts.repo ?? process.env.GITHUB_REPOSITORY;
+        if (!slug)
+            throw new Error("Pass --repo owner/name or set GITHUB_REPOSITORY when using --pr.");
+        octokit = makeOctokit(process.env.GITHUB_TOKEN);
+        prRef = { ...parseRepoSlug(slug), pull_number: opts.pr };
+        log(`Fetching diff for ${slug}#${opts.pr}…`);
+        diffText = await getPrDiff(octokit, prRef);
+        changeDescription = `PR #${opts.pr} in ${slug}`;
+    }
+    else {
+        diffText = await getLocalDiff({ cwd, staged: opts.staged, base: opts.base });
+        changeDescription = opts.staged
+            ? "staged changes"
+            : `local diff vs ${opts.base ?? "auto-detected base"}`;
+    }
+    if (diffText.trim() === "") {
+        console.log(pc.yellow("Nothing to review — the diff is empty."));
+        return;
+    }
+    const jsonPath = path.resolve(cwd, opts.json);
+    const previousIds = await loadPreviousIds(jsonPath);
+    const previousFindings = await loadPreviousFindings(jsonPath);
+    const suppressions = await loadSuppressions(cwd, opts.suppressions);
+    const ephemeral = new Set();
+    try {
+        if (glRef) {
+            for (const id of await listGlWontFixFindingIds(glRef))
+                ephemeral.add(id);
+        }
+        else if (bbRef) {
+            for (const id of await listBbWontFixFindingIds(bbRef))
+                ephemeral.add(id);
+        }
+        else if (prRef && octokit) {
+            for (const id of await listWontFixFindingIds(octokit, prRef))
+                ephemeral.add(id);
+        }
+    }
+    catch (e) {
+        log(`Warning: could not scan won’t-fix replies: ${e instanceof Error ? e.message : e}`);
+    }
+    const suppressedIds = new Set([...suppressions.ids, ...ephemeral]);
+    if (opts.post) {
+        if (glRef) {
+            for (const id of await listGlFindingIds(glRef))
+                previousIds.add(id);
+        }
+        else if (bbRef) {
+            for (const id of await listBbFindingIds(bbRef))
+                previousIds.add(id);
+        }
+        else if (prRef && octokit) {
+            for (const id of await listPostedFindingIds(octokit, prRef))
+                previousIds.add(id);
+        }
+    }
+    const result = await runReview({
+        cwd,
+        diffText,
+        config,
+        changeDescription,
+        useContext: opts.context,
+        previousIds,
+        previousFindings,
+        suppressedIds,
+        log,
+    });
+    if (config.write_suppressions && ephemeral.size) {
+        const n = await appendSuppressionIds(cwd, ephemeral, opts.suppressions);
+        if (n)
+            log(`Wrote ${n} new id(s) to suppressions file.`);
+    }
+    console.log("\n" + formatReport(result) + "\n");
+    await writeJsonReport(jsonPath, buildJsonReport(result, {
+        model: getModel(),
+        changeDescription,
+        usedContext: result.usedContext,
+    }));
+    log(`Wrote ${jsonPath}`);
+    console.error(formatRunSummaryLine(result.stats));
+    const failed = shouldFail(result.findings, config.fail_on);
+    if (opts.post) {
+        if (glRef && glDiffRefs) {
+            await postGlReview({ ref: glRef, diffRefs: glDiffRefs, result, failed, log });
+        }
+        else if (bbRef) {
+            await postBbReview({ ref: bbRef, result, failed, log });
+        }
+        else if (prRef && octokit) {
+            const headSha = await getPrHeadSha(octokit, prRef);
+            await postReview({ octokit, pr: prRef, headSha, result, failed, log });
+        }
+        else {
+            throw new Error("--post requires a PR (--pr, or Bitbucket/GitLab CI env vars).");
+        }
+    }
+    if (failed) {
+        console.error(pc.red(`✖ Failing: findings at or above "${config.fail_on}" severity.`));
+        process.exitCode = 1;
+    }
+});
+program.parseAsync().catch((err) => {
+    console.error(pc.red(`Error: ${err instanceof Error ? err.message : String(err)}`));
+    process.exit(2);
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,uBAAuB,EACvB,YAAY,EACZ,YAAY,GAEb,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,uBAAuB,EACvB,YAAY,EACZ,YAAY,GAGb,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAc,MAAM,kBAAkB,CAAC;AACnG,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAC/F,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACpB,eAAe,EACf,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAiB,MAAM,YAAY,CAAC;AAEvD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAC9B,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAExD,OAAO;KACJ,IAAI,CAAC,YAAY,CAAC;KAClB,WAAW,CAAC,2HAA2H,CAAC;KACxI,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,uEAAuE,CAAC;KACpF,MAAM,CAAC,QAAQ,EAAE,gDAAgD,EAAE,KAAK,CAAC;KACzE,MAAM,CAAC,UAAU,EAAE,qEAAqE,CAAC;KACzF,MAAM,CAAC,cAAc,EAAE,iBAAiB,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;KACxD,MAAM,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;KACnD,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC;QAC3B,GAAG;QACH,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG;KACJ,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,KAAK,CACN,oBAAoB,KAAK,CAAC,OAAO,aAAa,KAAK,CAAC,SAAS,eAAe,KAAK,CAAC,OAAO,aAAa,KAAK,CAAC,KAAK,UAAU,CAC5H,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,+EAA+E,CAAC;KAC5F,MAAM,CAAC,UAAU,EAAE,iDAAiD,EAAE,KAAK,CAAC;KAC5E,MAAM,CAAC,cAAc,EAAE,kEAAkE,CAAC;KAC1F,MAAM,CAAC,eAAe,EAAE,kCAAkC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;KACnF,MAAM,CACL,qBAAqB,EACrB,kHAAkH,CACnH;KACA,MAAM,CACL,eAAe,EACf,+EAA+E,CAChF;KACA,MAAM,CAAC,eAAe,EAAE,kCAAkC,EAAE,uBAAuB,CAAC;KACpF,MAAM,CAAC,QAAQ,EAAE,4CAA4C,EAAE,KAAK,CAAC;KACrE,MAAM,CAAC,sBAAsB,EAAE,kCAAkC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC;KAC3G,MAAM,CAAC,cAAc,EAAE,yCAAyC,CAAC;KACjE,MAAM,CAAC,cAAc,EAAE,iBAAiB,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;KACxD,MAAM,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;KACnD,MAAM,CAAC,uBAAuB,EAAE,qCAAqC,CAAC;KACtE,MAAM,CAAC,sBAAsB,EAAE,6DAA6D,EAAE,KAAK,CAAC;KACpG,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,IAAI,CAAC,iBAAiB;QAAE,MAAM,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAC7D,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,6BAA6B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,MAAkB,CAAC;IAC3C,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,MAAM,IAAI,GACR,IAAI,CAAC,IAAI;QACT,CAAC,GAAG,CAAC,mBAAmB,IAAI,GAAG,CAAC,eAAe;YAC7C,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,GAAG,CAAC,SAAS;gBACb,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,QAAQ,CAAC,CAAC;IAClB,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,qDAAqD,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,KAAK,WAAW,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;IACvF,MAAM,aAAa,GAAG,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,IAAI,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAEzF,IAAI,QAAgB,CAAC;IACrB,IAAI,iBAAyB,CAAC;IAC9B,IAAI,KAAK,GAAiB,IAAI,CAAC;IAC/B,IAAI,OAAO,GAA0C,IAAI,CAAC;IAC1D,IAAI,KAAK,GAAiB,IAAI,CAAC;IAC/B,IAAI,KAAK,GAAiB,IAAI,CAAC;IAC/B,IAAI,UAAU,GAAsB,IAAI,CAAC;IAEzC,IAAI,aAAa,EAAE,CAAC;QAClB,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACzC,GAAG,CAAC,6BAA6B,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,KAAK,CAAC,KAAK,YAAY,CAAC,CAAC;QACrG,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC;QACpC,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC;QACvB,UAAU,GAAG,EAAE,CAAC,QAAQ,CAAC;QACzB,iBAAiB,GAAG,OAAO,KAAK,CAAC,KAAK,OAAO,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;IACrF,CAAC;SAAM,IAAI,aAAa,EAAE,CAAC;QACzB,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACzC,GAAG,CAAC,qBAAqB,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,QAAQ,QAAQ,KAAK,CAAC,IAAI,eAAe,CAAC,CAAC;QAC7F,QAAQ,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC;QACpC,iBAAiB,GAAG,OAAO,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;IAClF,CAAC;SAAM,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QACxD,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QAC/F,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAChD,KAAK,GAAG,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;QACzD,GAAG,CAAC,qBAAqB,IAAI,IAAI,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;QAC7C,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC3C,iBAAiB,GAAG,OAAO,IAAI,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC;IAClD,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7E,iBAAiB,GAAG,IAAI,CAAC,MAAM;YAC7B,CAAC,CAAC,gBAAgB;YAClB,CAAC,CAAC,iBAAiB,IAAI,CAAC,IAAI,IAAI,oBAAoB,EAAE,CAAC;IAC3D,CAAC;IAED,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,wCAAwC,CAAC,CAAC,CAAC;QACjE,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;IACpD,MAAM,gBAAgB,GAAG,MAAM,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,MAAM,EAAE,IAAI,MAAM,uBAAuB,CAAC,KAAK,CAAC;gBAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3E,CAAC;aAAM,IAAI,KAAK,EAAE,CAAC;YACjB,KAAK,MAAM,EAAE,IAAI,MAAM,uBAAuB,CAAC,KAAK,CAAC;gBAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3E,CAAC;aAAM,IAAI,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,KAAK,MAAM,EAAE,IAAI,MAAM,qBAAqB,CAAC,OAAO,EAAE,KAAK,CAAC;gBAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,8CAA8C,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,YAAY,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;IAEnE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,MAAM,EAAE,IAAI,MAAM,gBAAgB,CAAC,KAAK,CAAC;gBAAE,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;aAAM,IAAI,KAAK,EAAE,CAAC;YACjB,KAAK,MAAM,EAAE,IAAI,MAAM,gBAAgB,CAAC,KAAK,CAAC;gBAAE,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;aAAM,IAAI,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,KAAK,MAAM,EAAE,IAAI,MAAM,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC;gBAAE,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC;QAC7B,GAAG;QACH,QAAQ;QACR,MAAM;QACN,iBAAiB;QACjB,UAAU,EAAE,IAAI,CAAC,OAAO;QACxB,WAAW;QACX,gBAAgB;QAChB,aAAa;QACb,GAAG;KACJ,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,kBAAkB,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC;QAChD,MAAM,CAAC,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QACxE,IAAI,CAAC;YAAE,GAAG,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;IAEhD,MAAM,eAAe,CACnB,QAAQ,EACR,eAAe,CAAC,MAAM,EAAE;QACtB,KAAK,EAAE,QAAQ,EAAE;QACjB,iBAAiB;QACjB,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAC,CACH,CAAC;IACF,GAAG,CAAC,SAAS,QAAQ,EAAE,CAAC,CAAC;IACzB,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAElD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAE3D,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,IAAI,KAAK,IAAI,UAAU,EAAE,CAAC;YACxB,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAChF,CAAC;aAAM,IAAI,KAAK,EAAE,CAAC;YACjB,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1D,CAAC;aAAM,IAAI,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACnD,MAAM,UAAU,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACzE,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,oCAAoC,MAAM,CAAC,OAAO,aAAa,CAAC,CAAC,CAAC;QACvF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IAC1C,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACpF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,33 @@
+import { z } from "zod";
+import { matchesGlob } from "codengram";
+import { type ReviewConfig } from "./types.js";
+export { matchesGlob };
+export declare const DEFAULT_CONFIG: ReviewConfig;
+declare const configSchema: z.ZodObject<{
+    fail_on: z.ZodOptional<z.ZodEnum<{
+        [x: string]: string;
+    }>>;
+    min_confidence: z.ZodOptional<z.ZodNumber>;
+    ignore: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    context_token_budget: z.ZodOptional<z.ZodNumber>;
+    context_snippets: z.ZodOptional<z.ZodNumber>;
+    custom_instructions: z.ZodOptional<z.ZodString>;
+    categories: z.ZodOptional<z.ZodRecord<z.ZodEnum<{
+        [x: string]: string;
+    }> & z.core.$partial, z.ZodBoolean>>;
+    temperature: z.ZodOptional<z.ZodNumber>;
+    limits: z.ZodOptional<z.ZodObject<{
+        max_findings_per_file: z.ZodOptional<z.ZodNumber>;
+        max_total: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>;
+    self_critique: z.ZodOptional<z.ZodBoolean>;
+    redact_secrets: z.ZodOptional<z.ZodBoolean>;
+    redact_patterns: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    write_suppressions: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strict>;
+export declare const CONFIG_FILENAME = ".pr-review.yml";
+/** Load .pr-review.yml from the repo root, merged over defaults. */
+export declare function loadConfig(cwd: string, configPath?: string): Promise<ReviewConfig>;
+export declare function mergeConfig(partial: z.infer<typeof configSchema>): ReviewConfig;
+/** True when the path matches codengram's built-in ignores or this config's patterns. */
+export declare function isIgnored(filePath: string, config: ReviewConfig): boolean;