secondpair 0.1.0

package/dist/config.js

@@ -0,0 +1,87 @@
+import { readFile } from "node:fs/promises";
+import { existsSync } from "node:fs";
+import path from "node:path";
+import YAML from "yaml";
+import { z } from "zod";
+import { isIgnored as matchesIgnorePatterns, matchesGlob } from "codengram";
+import { compileRedactPatterns } from "./redact.js";
+import { CATEGORIES, SEVERITIES } from "./types.js";
+export { matchesGlob };
+const defaultCategories = Object.fromEntries(CATEGORIES.map((c) => [c, true]));
+export const DEFAULT_CONFIG = {
+    fail_on: "high",
+    min_confidence: 0.5,
+    ignore: [],
+    context_token_budget: 8000,
+    context_snippets: 3,
+    custom_instructions: "",
+    categories: defaultCategories,
+    temperature: null,
+    limits: { max_findings_per_file: 5, max_total: 30 },
+    self_critique: false,
+    redact_secrets: true,
+    redact_patterns: [],
+    write_suppressions: false,
+};
+const configSchema = z
+    .object({
+    fail_on: z.enum(SEVERITIES).optional(),
+    min_confidence: z.number().min(0).max(1).optional(),
+    ignore: z.array(z.string()).optional(),
+    context_token_budget: z.number().int().positive().optional(),
+    context_snippets: z.number().int().min(0).optional(),
+    custom_instructions: z.string().optional(),
+    categories: z.partialRecord(z.enum(CATEGORIES), z.boolean()).optional(),
+    temperature: z.number().min(0).max(2).optional(),
+    limits: z
+        .object({
+        max_findings_per_file: z.number().int().positive().optional(),
+        max_total: z.number().int().positive().optional(),
+    })
+        .strict()
+        .optional(),
+    self_critique: z.boolean().optional(),
+    redact_secrets: z.boolean().optional(),
+    redact_patterns: z.array(z.string()).optional(),
+    write_suppressions: z.boolean().optional(),
+})
+    .strict();
+export const CONFIG_FILENAME = ".pr-review.yml";
+/** Load .pr-review.yml from the repo root, merged over defaults. */
+export async function loadConfig(cwd, configPath) {
+    const file = configPath ?? path.join(cwd, CONFIG_FILENAME);
+    if (!existsSync(file)) {
+        if (configPath)
+            throw new Error(`Config file not found: ${configPath}`);
+        return { ...DEFAULT_CONFIG };
+    }
+    const raw = YAML.parse(await readFile(file, "utf8")) ?? {};
+    const parsed = configSchema.safeParse(raw);
+    if (!parsed.success) {
+        const issues = parsed.error.issues
+            .map((i) => `  ${i.path.join(".") || "(root)"}: ${i.message}`)
+            .join("\n");
+        throw new Error(`Invalid ${path.basename(file)}:\n${issues}`);
+    }
+    compileRedactPatterns(parsed.data.redact_patterns ?? []);
+    return mergeConfig(parsed.data);
+}
+export function mergeConfig(partial) {
+    return {
+        ...DEFAULT_CONFIG,
+        ...partial,
+        fail_on: (partial.fail_on ?? DEFAULT_CONFIG.fail_on),
+        ignore: partial.ignore ?? [],
+        categories: { ...defaultCategories, ...(partial.categories ?? {}) },
+        temperature: partial.temperature ?? DEFAULT_CONFIG.temperature,
+        limits: { ...DEFAULT_CONFIG.limits, ...(partial.limits ?? {}) },
+        redact_secrets: partial.redact_secrets ?? DEFAULT_CONFIG.redact_secrets,
+        redact_patterns: partial.redact_patterns ?? DEFAULT_CONFIG.redact_patterns,
+        write_suppressions: partial.write_suppressions ?? DEFAULT_CONFIG.write_suppressions,
+    };
+}
+/** True when the path matches codengram's built-in ignores or this config's patterns. */
+export function isIgnored(filePath, config) {
+    return matchesIgnorePatterns(filePath, config.ignore);
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,IAAI,qBAAqB,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAoC,MAAM,YAAY,CAAC;AAEtF,OAAO,EAAE,WAAW,EAAE,CAAC;AAEvB,MAAM,iBAAiB,GAAG,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAG5E,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAiB;IAC1C,OAAO,EAAE,MAAM;IACf,cAAc,EAAE,GAAG;IACnB,MAAM,EAAE,EAAE;IACV,oBAAoB,EAAE,IAAI;IAC1B,gBAAgB,EAAE,CAAC;IACnB,mBAAmB,EAAE,EAAE;IACvB,UAAU,EAAE,iBAAiB;IAC7B,WAAW,EAAE,IAAI;IACjB,MAAM,EAAE,EAAE,qBAAqB,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE;IACnD,aAAa,EAAE,KAAK;IACpB,cAAc,EAAE,IAAI;IACpB,eAAe,EAAE,EAAE;IACnB,kBAAkB,EAAE,KAAK;CAC1B,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC;KACnB,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,UAAmC,CAAC,CAAC,QAAQ,EAAE;IAC/D,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnD,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtC,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5D,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpD,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1C,UAAU,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,UAAmC,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAChG,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChD,MAAM,EAAE,CAAC;SACN,MAAM,CAAC;QACN,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QAC7D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KAClD,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACrC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtC,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC/C,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,eAAe,GAAG,gBAAgB,CAAC;AAEhD,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,UAAmB;IAC/D,MAAM,IAAI,GAAG,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAC3D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,IAAI,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,UAAU,EAAE,CAAC,CAAC;QACxE,OAAO,EAAE,GAAG,cAAc,EAAE,CAAC;IAC/B,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3D,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;aAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC7D,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;IACzD,OAAO,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAqC;IAC/D,OAAO;QACL,GAAG,cAAc;QACjB,GAAG,OAAO;QACV,OAAO,EAAE,CAAC,OAAO,CAAC,OAAO,IAAI,cAAc,CAAC,OAAO,CAA4B;QAC/E,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;QAC5B,UAAU,EAAE,EAAE,GAAG,iBAAiB,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE;QACnE,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,cAAc,CAAC,WAAW;QAC9D,MAAM,EAAE,EAAE,GAAG,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE;QAC/D,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,cAAc,CAAC,cAAc;QACvE,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,cAAc,CAAC,eAAe;QAC1E,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,IAAI,cAAc,CAAC,kBAAkB;KACpF,CAAC;AACJ,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,SAAS,CAAC,QAAgB,EAAE,MAAoB;IAC9D,OAAO,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;AACxD,CAAC"}

package/dist/diff/github.d.ts

@@ -0,0 +1,14 @@
+import { Octokit } from "@octokit/rest";
+export interface PrRef {
+    owner: string;
+    repo: string;
+    pull_number: number;
+}
+export declare function parseRepoSlug(slug: string): {
+    owner: string;
+    repo: string;
+};
+export declare function makeOctokit(token: string | undefined): Octokit;
+/** Fetch the unified diff of a pull request. */
+export declare function getPrDiff(octokit: Octokit, pr: PrRef): Promise<string>;
+export declare function getPrHeadSha(octokit: Octokit, pr: PrRef): Promise<string>;

package/dist/diff/github.js

@@ -0,0 +1,27 @@
+import { Octokit } from "@octokit/rest";
+export function parseRepoSlug(slug) {
+    const [owner, repo] = slug.split("/");
+    if (!owner || !repo)
+        throw new Error(`Invalid repo slug "${slug}" — expected owner/name.`);
+    return { owner, repo };
+}
+export function makeOctokit(token) {
+    if (!token) {
+        throw new Error("A GitHub token is required (GITHUB_TOKEN env var).");
+    }
+    return new Octokit({ auth: token });
+}
+/** Fetch the unified diff of a pull request. */
+export async function getPrDiff(octokit, pr) {
+    const res = await octokit.pulls.get({
+        ...pr,
+        mediaType: { format: "diff" },
+    });
+    // With the diff media type the payload is the raw diff string.
+    return res.data;
+}
+export async function getPrHeadSha(octokit, pr) {
+    const res = await octokit.pulls.get({ ...pr });
+    return res.data.head.sha;
+}
+//# sourceMappingURL=github.js.map

package/dist/diff/github.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.js","sourceRoot":"","sources":["../../src/diff/github.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAQxC,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,0BAA0B,CAAC,CAAC;IAC3F,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAyB;IACnD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,IAAI,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACtC,CAAC;AAED,gDAAgD;AAChD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAgB,EAAE,EAAS;IACzD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;QAClC,GAAG,EAAE;QACL,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;KAC9B,CAAC,CAAC;IACH,+DAA+D;IAC/D,OAAO,GAAG,CAAC,IAAyB,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAgB,EAAE,EAAS;IAC5D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAC/C,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;AAC3B,CAAC"}

package/dist/diff/local.d.ts

@@ -0,0 +1,10 @@
+export declare function detectBaseRef(cwd: string): Promise<string>;
+export interface LocalDiffOptions {
+    cwd: string;
+    /** Diff staged changes instead of branch-vs-base. */
+    staged?: boolean;
+    /** Base ref; auto-detected when omitted. */
+    base?: string;
+}
+/** Produce a unified diff from the local repository. */
+export declare function getLocalDiff(opts: LocalDiffOptions): Promise<string>;

package/dist/diff/local.js

@@ -0,0 +1,39 @@
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+const exec = promisify(execFile);
+const MAX_DIFF_BUFFER = 64 * 1024 * 1024;
+async function git(args, cwd) {
+    const { stdout } = await exec("git", args, { cwd, maxBuffer: MAX_DIFF_BUFFER });
+    return stdout;
+}
+async function refExists(ref, cwd) {
+    try {
+        await git(["rev-parse", "--verify", "--quiet", ref], cwd);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export async function detectBaseRef(cwd) {
+    for (const ref of ["origin/main", "origin/master", "main", "master"]) {
+        if (await refExists(ref, cwd))
+            return ref;
+    }
+    throw new Error("Could not detect a base branch (tried origin/main, origin/master, main, master). Pass --base <ref>.");
+}
+/** Produce a unified diff from the local repository. */
+export async function getLocalDiff(opts) {
+    if (opts.staged) {
+        return git(["diff", "--staged", "--no-color"], opts.cwd);
+    }
+    const base = opts.base ?? (await detectBaseRef(opts.cwd));
+    // Triple-dot: diff against the merge-base, matching what a PR would show.
+    const diff = await git(["diff", "--no-color", `${base}...HEAD`], opts.cwd);
+    if (diff.trim() !== "")
+        return diff;
+    // Fall back to uncommitted working-tree changes so `pr-review review` is
+    // useful before anything is committed.
+    return git(["diff", "--no-color", base], opts.cwd);
+}
+//# sourceMappingURL=local.js.map

package/dist/diff/local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local.js","sourceRoot":"","sources":["../../src/diff/local.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAEjC,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEzC,KAAK,UAAU,GAAG,CAAC,IAAc,EAAE,GAAW;IAC5C,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC,CAAC;IAChF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,GAAW;IAC/C,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAW;IAC7C,KAAK,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;QACrE,IAAI,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;IAC5C,CAAC;IACD,MAAM,IAAI,KAAK,CACb,qGAAqG,CACtG,CAAC;AACJ,CAAC;AAUD,wDAAwD;AACxD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAsB;IACvD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,YAAY,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,0EAA0E;IAC1E,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3E,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACpC,yEAAyE;IACzE,uCAAuC;IACvC,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;AACrD,CAAC"}

package/dist/diff/parse.d.ts

@@ -0,0 +1,9 @@
+import type { FileDiff } from "../types.js";
+/**
+ * Parse a unified diff (git diff / GitHub PR diff) into structured FileDiff entries.
+ * Tracks, per file, the set of new-file line numbers that were added — these are
+ * the lines the LLM may comment on and the lines GitHub accepts review comments on.
+ */
+export declare function parseDiff(diffText: string): FileDiff[];
+/** Render a FileDiff back to annotated text with explicit new-file line numbers for the prompt. */
+export declare function renderDiffForPrompt(file: FileDiff): string;

package/dist/diff/parse.js

@@ -0,0 +1,141 @@
+const HUNK_HEADER = /^@@ -(\d+)(?:,(\d+))? \+(\d+)(?:,(\d+))? @@/;
+/**
+ * Parse a unified diff (git diff / GitHub PR diff) into structured FileDiff entries.
+ * Tracks, per file, the set of new-file line numbers that were added — these are
+ * the lines the LLM may comment on and the lines GitHub accepts review comments on.
+ */
+export function parseDiff(diffText) {
+    const files = [];
+    const lines = diffText.split("\n");
+    let current = null;
+    let currentHunk = null;
+    let newLineNo = 0;
+    const flushFile = () => {
+        if (current)
+            files.push(current);
+        current = null;
+        currentHunk = null;
+    };
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        if (line.startsWith("diff --git ")) {
+            flushFile();
+            const paths = parseDiffGitLine(line);
+            current = {
+                path: paths.newPath,
+                oldPath: paths.oldPath !== paths.newPath ? paths.oldPath : undefined,
+                status: "modified",
+                hunks: [],
+                changedLines: [],
+            };
+            continue;
+        }
+        if (!current)
+            continue;
+        if (line.startsWith("new file mode")) {
+            current.status = "added";
+            continue;
+        }
+        if (line.startsWith("deleted file mode")) {
+            current.status = "deleted";
+            current.path = current.oldPath ?? current.path;
+            current.oldPath = undefined;
+            continue;
+        }
+        if (line.startsWith("rename from ")) {
+            current.status = "renamed";
+            current.oldPath = line.slice("rename from ".length);
+            continue;
+        }
+        if (line.startsWith("rename to ")) {
+            current.path = line.slice("rename to ".length);
+            continue;
+        }
+        if (line.startsWith("--- ") || line.startsWith("+++ ")) {
+            // Path info already derived from the diff --git / rename lines.
+            continue;
+        }
+        const hunkMatch = HUNK_HEADER.exec(line);
+        if (hunkMatch) {
+            currentHunk = {
+                oldStart: parseInt(hunkMatch[1], 10),
+                oldLines: hunkMatch[2] !== undefined ? parseInt(hunkMatch[2], 10) : 1,
+                newStart: parseInt(hunkMatch[3], 10),
+                newLines: hunkMatch[4] !== undefined ? parseInt(hunkMatch[4], 10) : 1,
+                lines: [],
+            };
+            current.hunks.push(currentHunk);
+            newLineNo = currentHunk.newStart;
+            continue;
+        }
+        if (!currentHunk)
+            continue;
+        if (line.startsWith("+")) {
+            currentHunk.lines.push(line);
+            current.changedLines.push(newLineNo);
+            newLineNo++;
+        }
+        else if (line.startsWith("-")) {
+            currentHunk.lines.push(line);
+        }
+        else if (line.startsWith(" ") || line === "") {
+            currentHunk.lines.push(line);
+            newLineNo++;
+        }
+        else if (line.startsWith("\\")) {
+            // ""
+            currentHunk.lines.push(line);
+        }
+        else {
+            // Anything else ends the hunk (e.g. next file header handled above).
+            currentHunk = null;
+        }
+    }
+    flushFile();
+    return files;
+}
+function parseDiffGitLine(line) {
+    // diff --git a/src/foo.ts b/src/foo.ts  (paths with spaces may be quoted)
+    const rest = line.slice("diff --git ".length);
+    const quoted = /^"a\/(.+)" "b\/(.+)"$/.exec(rest);
+    if (quoted)
+        return { oldPath: unescapeGitPath(quoted[1]), newPath: unescapeGitPath(quoted[2]) };
+    // Unquoted: split on " b/" — handles the common case; paths containing " b/" must be quoted by git anyway.
+    const idx = rest.lastIndexOf(" b/");
+    if (idx === -1)
+        return { oldPath: rest, newPath: rest };
+    const oldPath = rest.slice(0, idx).replace(/^a\//, "");
+    const newPath = rest.slice(idx + 3);
+    return { oldPath, newPath };
+}
+function unescapeGitPath(p) {
+    return p.replace(/\\(.)/g, "$1");
+}
+/** Render a FileDiff back to annotated text with explicit new-file line numbers for the prompt. */
+export function renderDiffForPrompt(file) {
+    const out = [`### ${file.status.toUpperCase()}: ${file.path}`];
+    if (file.oldPath)
+        out.push(`(renamed from ${file.oldPath})`);
+    for (const hunk of file.hunks) {
+        out.push(`@@ -${hunk.oldStart},${hunk.oldLines} +${hunk.newStart},${hunk.newLines} @@`);
+        let newNo = hunk.newStart;
+        for (const l of hunk.lines) {
+            if (l.startsWith("+")) {
+                out.push(`${String(newNo).padStart(5)} + ${l.slice(1)}`);
+                newNo++;
+            }
+            else if (l.startsWith("-")) {
+                out.push(`      - ${l.slice(1)}`);
+            }
+            else if (l.startsWith("\\")) {
+                out.push(`        ${l}`);
+            }
+            else {
+                out.push(`${String(newNo).padStart(5)}   ${l.slice(1)}`);
+                newNo++;
+            }
+        }
+    }
+    return out.join("\n");
+}
+//# sourceMappingURL=parse.js.map

package/dist/diff/parse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse.js","sourceRoot":"","sources":["../../src/diff/parse.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,GAAG,6CAA6C,CAAC;AAElE;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,QAAgB;IACxC,MAAM,KAAK,GAAe,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAEnC,IAAI,OAAO,GAAoB,IAAI,CAAC;IACpC,IAAI,WAAW,GAAgB,IAAI,CAAC;IACpC,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,MAAM,SAAS,GAAG,GAAG,EAAE;QACrB,IAAI,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,OAAO,GAAG,IAAI,CAAC;QACf,WAAW,GAAG,IAAI,CAAC;IACrB,CAAC,CAAC;IAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAEtB,IAAI,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YACnC,SAAS,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACrC,OAAO,GAAG;gBACR,IAAI,EAAE,KAAK,CAAC,OAAO;gBACnB,OAAO,EAAE,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;gBACpE,MAAM,EAAE,UAAU;gBAClB,KAAK,EAAE,EAAE;gBACT,YAAY,EAAE,EAAE;aACjB,CAAC;YACF,SAAS;QACX,CAAC;QAED,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,IAAI,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YACrC,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC;YACzB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;YACzC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;YAC3B,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;YAC/C,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YACpC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;YAC3B,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YACpD,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAC/C,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACvD,gEAAgE;YAChE,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,SAAS,EAAE,CAAC;YACd,WAAW,GAAG;gBACZ,QAAQ,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBACpC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrE,QAAQ,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBACpC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrE,KAAK,EAAE,EAAE;aACV,CAAC;YACF,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAChC,SAAS,GAAG,WAAW,CAAC,QAAQ,CAAC;YACjC,SAAS;QACX,CAAC;QAED,IAAI,CAAC,WAAW;YAAE,SAAS;QAE3B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7B,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACrC,SAAS,EAAE,CAAC;QACd,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YAC/C,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7B,SAAS,EAAE,CAAC;QACd,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,gCAAgC;YAChC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,qEAAqE;YACrE,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;IACH,CAAC;IACD,SAAS,EAAE,CAAC;IAEZ,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,0EAA0E;IAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChG,2GAA2G;IAC3G,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACxD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACpC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,eAAe,CAAC,CAAS;IAChC,OAAO,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,mBAAmB,CAAC,IAAc;IAChD,MAAM,GAAG,GAAa,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACzE,IAAI,IAAI,CAAC,OAAO;QAAE,GAAG,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;IAC7D,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,CAAC,CAAC;QACxF,IAAI,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC1B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3B,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtB,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACzD,KAAK,EAAE,CAAC;YACV,CAAC;iBAAM,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACpC,CAAC;iBAAM,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9B,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YAC3B,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACzD,KAAK,EAAE,CAAC;YACV,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC"}

package/dist/finding-id.d.ts

@@ -0,0 +1,28 @@
+import type { Finding } from "./types.js";
+export declare const FINDING_ID_MARKER_PREFIX = "<!-- pr-review-id:";
+export declare const FINDING_ID_RE: RegExp;
+/** Normalize title so minor wording churn still often matches. */
+export declare function normalizeTitle(title: string): string;
+/** Significant tokens from a title (lowercase, no stopwords, len ≥ 3). */
+export declare function titleTokens(title: string): string[];
+/**
+ * Stable fingerprint: file + category + sorted significant title tokens.
+ * Line numbers are excluded (they drift). Token set ignores filler words so
+ * "Off-by-one loop reads past end" ≈ "Off-by-one loop includes xs length".
+ */
+export declare function fingerprintFinding(f: Pick<Finding, "file" | "category" | "title">): string;
+export declare function withFindingId<T extends Finding>(f: T): T & {
+    id: string;
+};
+export declare function embedFindingId(body: string, id: string): string;
+export declare function parseFindingId(body: string): string | null;
+export declare function collectIdsFromBodies(bodies: string[]): Set<string>;
+/** Jaccard similarity of significant title tokens (0..1). */
+export declare function titleSimilarity(a: string, b: string): number;
+/** True when line ranges overlap or sit within `slack` lines of each other. */
+export declare function linesNear(a: Pick<Finding, "start_line" | "end_line">, b: Pick<Finding, "start_line" | "end_line">, slack?: number): boolean;
+/**
+ * Soft match for re-runs where the model rephrases the title.
+ * Same file + category + nearby lines + enough title-token overlap.
+ */
+export declare function findingsSoftMatch(a: Pick<Finding, "file" | "category" | "title" | "start_line" | "end_line">, b: Pick<Finding, "file" | "category" | "title" | "start_line" | "end_line">, minTitleSimilarity?: number): boolean;

package/dist/finding-id.js

@@ -0,0 +1,96 @@
+import { createHash } from "node:crypto";
+export const FINDING_ID_MARKER_PREFIX = "<!-- pr-review-id:";
+export const FINDING_ID_RE = /<!--\s*pr-review-id:\s*([a-f0-9]+)\s*-->/i;
+/** Words that add churn without distinguishing the finding. */
+const STOPWORDS = new Set([
+    "a", "an", "the", "to", "of", "in", "on", "for", "and", "or", "is", "are", "be",
+    "this", "that", "with", "from", "by", "at", "as", "it", "its", "into", "via",
+    "when", "which", "who", "whom", "what", "how", "than", "then", "also", "just",
+    "not", "no", "can", "could", "should", "would", "may", "might", "will", "does",
+    "do", "did", "has", "have", "had", "been", "being", "was", "were", "using", "use",
+    "used", "new", "old", "same", "such", "so", "too", "very", "more", "most",
+]);
+/** Normalize title so minor wording churn still often matches. */
+export function normalizeTitle(title) {
+    return titleTokens(title).join(" ");
+}
+/** Significant tokens from a title (lowercase, no stopwords, len ≥ 3). */
+export function titleTokens(title) {
+    return title
+        .toLowerCase()
+        .replace(/[^a-z0-9\s]/g, " ")
+        .split(/\s+/)
+        .map((t) => t.trim())
+        .filter((t) => t.length >= 3 && !STOPWORDS.has(t));
+}
+/**
+ * Stable fingerprint: file + category + sorted significant title tokens.
+ * Line numbers are excluded (they drift). Token set ignores filler words so
+ * "Off-by-one loop reads past end" ≈ "Off-by-one loop includes xs length".
+ */
+export function fingerprintFinding(f) {
+    const tokens = [...new Set(titleTokens(f.title))].sort();
+    const key = `${f.file}|${f.category}|${tokens.join(" ")}`;
+    return createHash("sha1").update(key).digest("hex").slice(0, 16);
+}
+export function withFindingId(f) {
+    return { ...f, id: f.id ?? fingerprintFinding(f) };
+}
+export function embedFindingId(body, id) {
+    if (FINDING_ID_RE.test(body)) {
+        return body.replace(FINDING_ID_RE, `${FINDING_ID_MARKER_PREFIX} ${id} -->`);
+    }
+    return `${body.trimEnd()}\n\n${FINDING_ID_MARKER_PREFIX} ${id} -->\n`;
+}
+export function parseFindingId(body) {
+    return FINDING_ID_RE.exec(body)?.[1] ?? null;
+}
+export function collectIdsFromBodies(bodies) {
+    const ids = new Set();
+    for (const b of bodies) {
+        const id = parseFindingId(b);
+        if (id)
+            ids.add(id);
+    }
+    return ids;
+}
+/** Jaccard similarity of significant title tokens (0..1). */
+export function titleSimilarity(a, b) {
+    const ta = new Set(titleTokens(a));
+    const tb = new Set(titleTokens(b));
+    if (ta.size === 0 && tb.size === 0)
+        return 1;
+    if (ta.size === 0 || tb.size === 0)
+        return 0;
+    let inter = 0;
+    for (const t of ta)
+        if (tb.has(t))
+            inter++;
+    return inter / (ta.size + tb.size - inter);
+}
+/** True when line ranges overlap or sit within `slack` lines of each other. */
+export function linesNear(a, b, slack = 3) {
+    const a0 = a.start_line - slack;
+    const a1 = a.end_line + slack;
+    return a0 <= b.end_line && b.start_line <= a1;
+}
+/**
+ * Soft match for re-runs where the model rephrases the title.
+ * Same file + category + nearby lines + enough title-token overlap.
+ */
+export function findingsSoftMatch(a, b, minTitleSimilarity = 0.3) {
+    if (a.file !== b.file || a.category !== b.category)
+        return false;
+    if (!linesNear(a, b))
+        return false;
+    const ta = new Set(titleTokens(a.title));
+    const tb = new Set(titleTokens(b.title));
+    let inter = 0;
+    for (const t of ta)
+        if (tb.has(t))
+            inter++;
+    if (inter >= 2)
+        return true;
+    return titleSimilarity(a.title, b.title) >= minTitleSimilarity;
+}
+//# sourceMappingURL=finding-id.js.map

package/dist/finding-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-id.js","sourceRoot":"","sources":["../src/finding-id.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,CAAC,MAAM,wBAAwB,GAAG,oBAAoB,CAAC;AAC7D,MAAM,CAAC,MAAM,aAAa,GAAG,2CAA2C,CAAC;AAEzE,+DAA+D;AAC/D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI;IAC/E,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK;IAC5E,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAC7E,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM;IAC9E,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK;IACjF,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAC1E,CAAC,CAAC;AAEH,kEAAkE;AAClE,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACtC,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO,KAAK;SACT,WAAW,EAAE;SACb,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC;SAC5B,KAAK,CAAC,KAAK,CAAC;SACZ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,CAA+C;IAE/C,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzD,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAC1D,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,aAAa,CAAoB,CAAI;IACnD,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,EAAU;IACrD,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,wBAAwB,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,wBAAwB,IAAI,EAAE,QAAQ,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAgB;IACnD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,EAAE;YAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,eAAe,CAAC,CAAS,EAAE,CAAS;IAClD,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAC7C,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAC7C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,KAAK,EAAE,CAAC;IAC3C,OAAO,KAAK,GAAG,CAAC,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC;AAC7C,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,SAAS,CACvB,CAA2C,EAC3C,CAA2C,EAC3C,KAAK,GAAG,CAAC;IAET,MAAM,EAAE,GAAG,CAAC,CAAC,UAAU,GAAG,KAAK,CAAC;IAChC,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC;IAC9B,OAAO,EAAE,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,CAA2E,EAC3E,CAA2E,EAC3E,kBAAkB,GAAG,GAAG;IAExB,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IACjE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACzC,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACzC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,KAAK,EAAE,CAAC;IAC3C,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5B,OAAO,eAAe,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,kBAAkB,CAAC;AACjE,CAAC"}

package/dist/github/comments.d.ts

@@ -0,0 +1,25 @@
+import type { Octokit } from "@octokit/rest";
+import type { PrRef } from "../diff/github.js";
+import type { Finding, ReviewResult, Severity } from "../types.js";
+export declare const AGENT_MARKER = "<!-- secondpair -->";
+export declare const SEVERITY_EMOJI: Record<Severity, string>;
+export declare function formatCommentBody(f: Finding): string;
+export declare function formatReviewBody(result: ReviewResult, failed: boolean): string;
+export interface PostReviewOptions {
+    octokit: Octokit;
+    pr: PrRef;
+    headSha: string;
+    result: ReviewResult;
+    failed: boolean;
+    log?: (msg: string) => void;
+}
+/** Collect finding ids already posted on this PR by the agent. */
+export declare function listPostedFindingIds(octokit: Octokit, pr: PrRef): Promise<Set<string>>;
+export declare function listWontFixFindingIds(octokit: Octokit, pr: PrRef): Promise<Set<string>>;
+/** Resolve unresolved review threads whose comments contain one of the finding ids. */
+export declare function resolveThreadsForIds(octokit: Octokit, pr: PrRef, ids: Iterable<string>, log?: (msg: string) => void): Promise<number>;
+/**
+ * Post new findings as one PR review with inline comments.
+ * Persistent findings (same id already on the PR) are skipped.
+ */
+export declare function postReview(opts: PostReviewOptions): Promise<void>;