threadlines 0.2.18 → 0.2.20

package/dist/commands/check.js

@@ -227,6 +227,14 @@ async function checkCommand(options) {
         console.error(chalk_1.default.bold('ℹ️ No changes detected.'));
         process.exit(0);
     }
+    // Safety limit: prevent expensive API calls on large diffs
+    const MAX_CHANGED_FILES = 20;
+    if (gitDiff.changedFiles.length > MAX_CHANGED_FILES) {
+        console.error(chalk_1.default.red(`❌ Too many changed files: ${gitDiff.changedFiles.length} (max: ${MAX_CHANGED_FILES})`));
+        console.error(chalk_1.default.gray('   This limit prevents expensive API calls on large diffs.'));
+        console.error(chalk_1.default.gray('   Consider reviewing smaller batches of changes.'));
+        process.exit(1);
+    }
     // Check for zero diff (files changed but no actual code changes)
     if (!gitDiff.diff || gitDiff.diff.trim() === '') {
         console.log(chalk_1.default.blue('ℹ️  No code changes detected. Diff contains zero lines added or removed.'));

package/dist/git/diff.js

@@ -190,8 +190,13 @@ async function getPRDiff(repoRoot, targetBranch, logger) {
 /**
  * Get diff for a specific commit (or HEAD if no SHA provided).
  *
- * Uses `git show` which works reliably with shallow clones (depth=1).
- * This is safer than `HEAD~1...HEAD` which requires depth >= 2.
+ * Fetches the parent commit on-demand to ensure git show can generate a proper diff.
+ * This works regardless of CI checkout depth settings (depth=1 or depth=2).
+ *
+ * Strategy:
+ * 1. Get parent SHA from commit metadata (git show --format=%P)
+ * 2. Fetch parent commit if available (git fetch origin <parentSHA> --depth=1)
+ * 3. Use git show to get diff (now parent is available for comparison)
  *
  * Used by:
  * - All CI environments for push/commit context (GitHub, GitLab, Bitbucket, Vercel)
@@ -202,7 +207,40 @@ async function getPRDiff(repoRoot, targetBranch, logger) {
  */
 async function getCommitDiff(repoRoot, sha = 'HEAD') {
     const git = (0, simple_git_1.default)(repoRoot);
-    // Get diff using git show
+    // Fetch parent commit on-demand to ensure git show can generate a proper diff
+    // This works regardless of CI checkout depth settings (depth=1 or depth=2)
+    // If parent is already available, fetch is fast/no-op; if not, we fetch it
+    // Get parent SHA from commit metadata (works even if parent isn't fetched locally)
+    let parentSha;
+    try {
+        parentSha = (0, child_process_1.execSync)(`git show ${sha} --format=%P --no-patch`, {
+            encoding: 'utf-8',
+            cwd: repoRoot
+        }).trim();
+    }
+    catch (error) {
+        const errorMessage = error instanceof Error ? error.message : String(error);
+        throw new Error(`Failed to get parent commit SHA for ${sha}. ` +
+            `This is required to generate a proper diff. ` +
+            `Error: ${errorMessage}`);
+    }
+    // Fetch parent commit if we have a parent (root commits have no parent)
+    if (parentSha && parentSha.length === 40) {
+        try {
+            // Fetch just this one commit (depth=1 is fine, we only need the parent)
+            await git.fetch(['origin', parentSha, '--depth=1']);
+        }
+        catch (error) {
+            const errorMessage = error instanceof Error ? error.message : String(error);
+            throw new Error(`Failed to fetch parent commit ${parentSha} from origin. ` +
+                `This is required to generate a proper diff in shallow clones. ` +
+                `Ensure 'origin' remote is configured and accessible. ` +
+                `Error: ${errorMessage}`);
+        }
+    }
+    // If no parent (root commit), git show will show the full commit content
+    // This is expected behavior for root commits
+    // Get diff using git show (now parent should be available)
     let diff;
     let changedFiles;
     try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "threadlines",
-  "version": "0.2.18",
+  "version": "0.2.20",
   "description": "Threadlines CLI - AI-powered linter based on your natural language documentation",
   "main": "dist/index.js",
   "bin": {