secondpair 0.1.0 → 0.1.2

package/README.md

@@ -1,119 +1,119 @@
-# secondpair — the second pair of eyes
-
-LLM-powered PR reviewer with whole-repo context. Reviews a diff (local,
-staged, or a GitHub/GitLab/Bitbucket PR), posts inline comments, gates CI
-on severity. Uses sibling package [`codengram`](../codengram/README.md) as
-its repo memory so review isn't diff-blind — it sees callers, related
-files, and project context, not just the patch.
-
-## Install
-
-```bash
-npm install --save-dev secondpair
-```
-
-Needs an LLM API key (same resolution as `codengram` — set one):
-
-```bash
-export ANTHROPIC_API_KEY=sk-ant-...      # default, recommended
-# or: OPENAI_API_KEY / OPENROUTER_API_KEY / CODENGRAM_API_KEY+CODENGRAM_BASE_URL+CODENGRAM_MODEL
-```
-
-## Quick start
-
-```bash
-cd your-repo
-npx codengram init          # one-time: builds repo memory, installs git hooks
-npx secondpair review --staged           # review staged changes, print report
-npx secondpair review --base main        # review branch vs main
-```
-
-Nothing to configure to get useful output — defaults are sane
-(`fail_on: high`, `min_confidence: 0.5`). Add `.pr-review.yml` only when you
-want to change them (see [Config](#config)).
-
-## Reviewing a real PR (posting comments + CI gate)
-
-Pick your platform, set its token, run with `--post`:
-
-**GitHub** (GitHub Actions: `GITHUB_TOKEN` is provided automatically)
-```bash
-export GITHUB_TOKEN=ghp_...
-npx secondpair review --pr 123 --repo owner/name --post --fail-on high
-```
-
-**GitLab** (in GitLab CI, `CI_SERVER_URL`/`CI_PROJECT_ID`/`CI_MERGE_REQUEST_IID`
-are auto-detected; set a token as `GITLAB_TOKEN` or `GL_TOKEN`)
-```bash
-export GITLAB_TOKEN=glpat-...
-npx secondpair review --post --fail-on high     # host auto-detected via GITLAB_CI env
-```
-
-**Bitbucket** (`BITBUCKET_WORKSPACE`/`BITBUCKET_PR_ID` auto-detected in
-Bitbucket Pipelines; auth via token or app password)
-```bash
-export BITBUCKET_TOKEN=...                      # or BITBUCKET_USERNAME + BITBUCKET_APP_PASSWORD
-npx secondpair review --post --fail-on high
-```
-
-`--host` overrides auto-detection if you're running somewhere the CI env
-vars aren't set. Exit code is 1 when any active finding is at/above
-`fail_on` — wire that into your pipeline as the merge gate.
-
-### Example: GitHub Actions
-
-```yaml
-- run: npx secondpair review --pr ${{ github.event.pull_request.number }} --repo ${{ github.repository }} --post
-  env:
-    GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-    ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
-```
-
-Re-running on the same PR (new commit, or CI re-triggered) never
-double-posts — each platform re-checks live existing comment ids right
-before posting, on top of run-to-run fingerprint reconciliation.
-
-## Config (`.pr-review.yml`, optional)
-
-```yaml
-fail_on: high              # critical|high|medium|low|info — CI exit-1 threshold
-min_confidence: 0.5
-ignore: ["**/*.generated.ts", "vendor/**"]
-context_token_budget: 8000 # codengram context injected per chunk
-context_snippets: 3
-categories:                # turn any off
-  bug: true
-  security: true
-  missing-tests: true
-  naming: true
-  complexity: true
-  custom: true
-limits:
-  max_findings_per_file: 5
-  max_total: 30
-self_critique: false       # extra LLM pass that only drops findings, never adds
-redact_secrets: true       # strip secrets from diff/context before they reach the LLM
-redact_patterns: []        # extra regexes, on top of built-in AWS/GitHub-token/PEM/etc
-write_suppressions: false  # persist "won't fix" replies to .pr-review-suppressions.yml
-custom_instructions: ""
-```
-
-Suppress a finding permanently: reply "won't fix" (or react 👎) on its PR
-comment, or hand-edit `.pr-review-suppressions.yml` with the finding id
-from the report.
-
-## `secondpair index`
-
-Alias for `codengram index` — kept so a repo can adopt `secondpair` without
-also depending on `codengram` directly for this one command. Same
-incremental behavior; see [codengram's README](../codengram/README.md#staying-in-sync-after-code-changes)
-for exactly when/how re-indexing happens and why it's cheap on repeated
-runs — short version: git-hook-triggered, hash-incremental, never a full
-rebuild unless you pass `--full`.
-
-## More detail
-
-- Agent-oriented internals reference (pipeline, invariants to preserve when
-  editing): [`AGENTS.md`](./AGENTS.md)
-- Architecture review, requirements scorecard, known gaps:
-  [`docs/architecture-review.md`](./docs/architecture-review.md)
+# secondpair — the second pair of eyes
+
+LLM-powered PR reviewer with whole-repo context. Reviews a diff (local,
+staged, or a GitHub/GitLab/Bitbucket PR), posts inline comments, gates CI
+on severity. Uses sibling package [`repocairn`](../repocairn/README.md) as
+its repo memory so review isn't diff-blind — it sees callers, related
+files, and project context, not just the patch.
+
+## Install
+
+```bash
+npm install --save-dev secondpair
+```
+
+Needs an LLM API key (same resolution as `repocairn` — set one):
+
+```bash
+export ANTHROPIC_API_KEY=sk-ant-...      # default, recommended
+# or: OPENAI_API_KEY / OPENROUTER_API_KEY / REPOCAIRN_API_KEY+REPOCAIRN_BASE_URL+REPOCAIRN_MODEL
+```
+
+## Quick start
+
+```bash
+cd your-repo
+npx repocairn init          # one-time: builds repo memory, installs git hooks
+npx secondpair review --staged           # review staged changes, print report
+npx secondpair review --base main        # review branch vs main
+```
+
+Nothing to configure to get useful output — defaults are sane
+(`fail_on: high`, `min_confidence: 0.5`). Add `.pr-review.yml` only when you
+want to change them (see [Config](#config)).
+
+## Reviewing a real PR (posting comments + CI gate)
+
+Pick your platform, set its token, run with `--post`:
+
+**GitHub** (GitHub Actions: `GITHUB_TOKEN` is provided automatically)
+```bash
+export GITHUB_TOKEN=ghp_...
+npx secondpair review --pr 123 --repo owner/name --post --fail-on high
+```
+
+**GitLab** (in GitLab CI, `CI_SERVER_URL`/`CI_PROJECT_ID`/`CI_MERGE_REQUEST_IID`
+are auto-detected; set a token as `GITLAB_TOKEN` or `GL_TOKEN`)
+```bash
+export GITLAB_TOKEN=glpat-...
+npx secondpair review --post --fail-on high     # host auto-detected via GITLAB_CI env
+```
+
+**Bitbucket** (`BITBUCKET_WORKSPACE`/`BITBUCKET_PR_ID` auto-detected in
+Bitbucket Pipelines; auth via token or app password)
+```bash
+export BITBUCKET_TOKEN=...                      # or BITBUCKET_USERNAME + BITBUCKET_APP_PASSWORD
+npx secondpair review --post --fail-on high
+```
+
+`--host` overrides auto-detection if you're running somewhere the CI env
+vars aren't set. Exit code is 1 when any active finding is at/above
+`fail_on` — wire that into your pipeline as the merge gate.
+
+### Example: GitHub Actions
+
+```yaml
+- run: npx secondpair review --pr ${{ github.event.pull_request.number }} --repo ${{ github.repository }} --post
+  env:
+    GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+    ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
+```
+
+Re-running on the same PR (new commit, or CI re-triggered) never
+double-posts — each platform re-checks live existing comment ids right
+before posting, on top of run-to-run fingerprint reconciliation.
+
+## Config (`.pr-review.yml`, optional)
+
+```yaml
+fail_on: high              # critical|high|medium|low|info — CI exit-1 threshold
+min_confidence: 0.5
+ignore: ["**/*.generated.ts", "vendor/**"]
+context_token_budget: 8000 # repocairn context injected per chunk
+context_snippets: 3
+categories:                # turn any off
+  bug: true
+  security: true
+  missing-tests: true
+  naming: true
+  complexity: true
+  custom: true
+limits:
+  max_findings_per_file: 5
+  max_total: 30
+self_critique: false       # extra LLM pass that only drops findings, never adds
+redact_secrets: true       # strip secrets from diff/context before they reach the LLM
+redact_patterns: []        # extra regexes, on top of built-in AWS/GitHub-token/PEM/etc
+write_suppressions: false  # persist "won't fix" replies to .pr-review-suppressions.yml
+custom_instructions: ""
+```
+
+Suppress a finding permanently: reply "won't fix" (or react 👎) on its PR
+comment, or hand-edit `.pr-review-suppressions.yml` with the finding id
+from the report.
+
+## `secondpair index`
+
+Alias for `repocairn index` — kept so a repo can adopt `secondpair` without
+also depending on `repocairn` directly for this one command. Same
+incremental behavior; see [repocairn's README](../repocairn/README.md#staying-in-sync-after-code-changes)
+for exactly when/how re-indexing happens and why it's cheap on repeated
+runs — short version: git-hook-triggered, hash-incremental, never a full
+rebuild unless you pass `--full`.
+
+## More detail
+
+- Agent-oriented internals reference (pipeline, invariants to preserve when
+  editing): [`AGENTS.md`](./AGENTS.md)
+- Architecture review, requirements scorecard, known gaps:
+  [`docs/architecture-review.md`](./docs/architecture-review.md)

package/dist/cli.js

@@ -2,7 +2,7 @@
 import { Command } from "commander";
 import path from "node:path";
 import pc from "picocolors";
-import { getModel, runIndex } from "codengram";
+import { getModel, runIndex } from "repocairn";
 import { getBbPrDiff, listBbFindingIds, listBbWontFixFindingIds, postBbReview, resolveBbRef, } from "./bitbucket/comments.js";
 import { getGlMrDiff, listGlFindingIds, listGlWontFixFindingIds, postGlReview, resolveGlRef, } from "./gitlab/comments.js";
 import { loadConfig } from "./config.js";
@@ -18,11 +18,11 @@ const program = new Command();
 const log = (msg) => console.error(pc.dim(msg));
 program
     .name("secondpair")
-    .description("secondpair — the second pair of eyes: LLM PR reviewer with a persistent repo memory (codengram) for whole-project context")
+    .description("secondpair — the second pair of eyes: LLM PR reviewer with a persistent repo memory (repocairn) for whole-project context")
     .version("0.1.0");
 program
     .command("index")
-    .description("Build or incrementally update the repo memory (.codengram/index.json)")
+    .description("Build or incrementally update the repo memory (.repocairn/index.json)")
     .option("--full", "re-index every file regardless of content hash", false)
     .option("--no-llm", "skip LLM summaries (symbols + import graph only; no API key needed)")
     .option("--dir <path>", "repository root", process.cwd())

package/dist/config.d.ts

@@ -1,5 +1,5 @@
 import { z } from "zod";
-import { matchesGlob } from "codengram";
+import { matchesGlob } from "repocairn";
 import { type ReviewConfig } from "./types.js";
 export { matchesGlob };
 export declare const DEFAULT_CONFIG: ReviewConfig;
@@ -29,5 +29,5 @@ export declare const CONFIG_FILENAME = ".pr-review.yml";
 /** Load .pr-review.yml from the repo root, merged over defaults. */
 export declare function loadConfig(cwd: string, configPath?: string): Promise<ReviewConfig>;
 export declare function mergeConfig(partial: z.infer<typeof configSchema>): ReviewConfig;
-/** True when the path matches codengram's built-in ignores or this config's patterns. */
+/** True when the path matches repocairn's built-in ignores or this config's patterns. */
 export declare function isIgnored(filePath: string, config: ReviewConfig): boolean;

package/dist/config.js

@@ -3,7 +3,7 @@ import { existsSync } from "node:fs";
 import path from "node:path";
 import YAML from "yaml";
 import { z } from "zod";
-import { isIgnored as matchesIgnorePatterns, matchesGlob } from "codengram";
+import { isIgnored as matchesIgnorePatterns, matchesGlob } from "repocairn";
 import { compileRedactPatterns } from "./redact.js";
 import { CATEGORIES, SEVERITIES } from "./types.js";
 export { matchesGlob };
@@ -80,7 +80,7 @@ export function mergeConfig(partial) {
         write_suppressions: partial.write_suppressions ?? DEFAULT_CONFIG.write_suppressions,
     };
 }
-/** True when the path matches codengram's built-in ignores or this config's patterns. */
+/** True when the path matches repocairn's built-in ignores or this config's patterns. */
 export function isIgnored(filePath, config) {
     return matchesIgnorePatterns(filePath, config.ignore);
 }

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 export { runReview } from "./review.js";
-export { runIndex, selectContext, loadIndex } from "codengram";
+export { runIndex, selectContext, loadIndex } from "repocairn";
 export { loadConfig, DEFAULT_CONFIG } from "./config.js";
 export { parseDiff, renderDiffForPrompt } from "./diff/parse.js";
 export { validateFindings, reviewOutputSchema, findingSchema } from "./llm/schema.js";

package/dist/index.js

@@ -1,5 +1,5 @@
 export { runReview } from "./review.js";
-export { runIndex, selectContext, loadIndex } from "codengram";
+export { runIndex, selectContext, loadIndex } from "repocairn";
 export { loadConfig, DEFAULT_CONFIG } from "./config.js";
 export { parseDiff, renderDiffForPrompt } from "./diff/parse.js";
 export { validateFindings, reviewOutputSchema, findingSchema } from "./llm/schema.js";

package/dist/review.js

@@ -1,7 +1,7 @@
 import { readFile } from "node:fs/promises";
 import path from "node:path";
 import { z } from "zod";
-import { estimateTokens, getModel, loadIndex, selectContext, structuredCall } from "codengram";
+import { estimateTokens, getModel, loadIndex, selectContext, structuredCall } from "repocairn";
 import { isIgnored } from "./config.js";
 import { parseDiff } from "./diff/parse.js";
 import { withFindingId } from "./finding-id.js";
@@ -66,7 +66,7 @@ export async function runReview(opts) {
             log(`Injecting context from ${selection.entries.length} codemap entries.`);
         }
         else {
-            log("No codengram index found (.codengram/index.json) — reviewing diff-only. Run `codengram init` (or `codengram index`) and commit the index for whole-repo context.");
+            log("No repocairn index found (.repocairn/index.json) — reviewing diff-only. Run `repocairn init` (or `repocairn index`) and commit the index for whole-repo context.");
         }
     }
     context = maybeRedact(context);

package/package.json

@@ -1,49 +1,49 @@
-{
-  "name": "secondpair",
-  "version": "0.1.0",
-  "description": "LLM-powered pull request reviewer with whole-repo context from a persistent codengram codemap",
-  "type": "module",
-  "bin": {
-    "secondpair": "./dist/cli.js",
-    "pr-review": "./dist/cli.js"
-  },
-  "main": "./dist/index.js",
-  "types": "./dist/index.d.ts",
-  "license": "MIT",
-  "author": "rv-ranbir",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/rv-ranbir/ai-tools.git",
-    "directory": "packages/secondpair"
-  },
-  "homepage": "https://github.com/rv-ranbir/ai-tools/tree/main/packages/secondpair#readme",
-  "bugs": "https://github.com/rv-ranbir/ai-tools/issues",
-  "keywords": [
-    "ai",
-    "llm",
-    "pr-review",
-    "code-review",
-    "github-actions",
-    "gitlab-ci",
-    "bitbucket",
-    "claude"
-  ],
-  "files": [
-    "dist"
-  ],
-  "scripts": {
-    "build": "tsc -b",
-    "dev": "tsx src/cli.ts"
-  },
-  "engines": {
-    "node": ">=20"
-  },
-  "dependencies": {
-    "@octokit/rest": "^21.0.0",
-    "commander": "^12.1.0",
-    "picocolors": "^1.1.0",
-    "codengram": "^0.1.0",
-    "yaml": "^2.5.0",
-    "zod": "^4.4.3"
-  }
-}
+{
+  "name": "secondpair",
+  "version": "0.1.2",
+  "description": "LLM-powered pull request reviewer with whole-repo context from a persistent repocairn codemap",
+  "type": "module",
+  "bin": {
+    "secondpair": "./dist/cli.js",
+    "pr-review": "./dist/cli.js"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "license": "MIT",
+  "author": "rv-ranbir",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/rv-ranbir/ai-tools.git",
+    "directory": "packages/secondpair"
+  },
+  "homepage": "https://github.com/rv-ranbir/ai-tools/tree/main/packages/secondpair#readme",
+  "bugs": "https://github.com/rv-ranbir/ai-tools/issues",
+  "keywords": [
+    "ai",
+    "llm",
+    "pr-review",
+    "code-review",
+    "github-actions",
+    "gitlab-ci",
+    "bitbucket",
+    "claude"
+  ],
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc -b",
+    "dev": "tsx src/cli.ts"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "dependencies": {
+    "@octokit/rest": "^21.0.0",
+    "commander": "^12.1.0",
+    "picocolors": "^1.1.0",
+    "repocairn": "^0.1.2",
+    "yaml": "^2.5.0",
+    "zod": "^4.4.3"
+  }
+}