open-code-review-toolkit 0.2.0__tar.gz → 0.3.0__tar.gz

{open_code_review_toolkit-0.2.0 → open_code_review_toolkit-0.3.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: open-code-review-toolkit
-Version: 0.2.0
+Version: 0.3.0
 Summary: Unofficial GitLab CI integration layer for Open Code Review
 Project-URL: Homepage, https://github.com/xeonvs/open-code-review-toolkit
 Project-URL: Repository, https://github.com/xeonvs/open-code-review-toolkit
@@ -243,7 +243,8 @@ ocr --version
 ocr-ci --help
 ```
 
-The current compatibility target is OCR `1.7.14`. CI should pin the release and verify its published checksum before execution.
+The current compatibility target is OCR `1.7.17`. CI should pin the release and verify its published checksum before execution.
+The [versioned compatibility policy](docs/compatibility.md) records tested assets and evidence and describes the conservative Dependabot-like qualification workflow for later upstream releases.
 Review output defaults to English. Set `OCR_REVIEW_LANGUAGE=Russian` to use Russian consistently in both OCR configuration and generated review context.
 
 Stable distributions are published to [PyPI](https://pypi.org/project/open-code-review-toolkit/) and mirrored as checksum-listed, provenance-attested assets in the corresponding [GitHub Release](https://github.com/xeonvs/open-code-review-toolkit/releases). Development snapshots are published only to TestPyPI.
@@ -256,6 +257,14 @@ Suppression uses both the GitLab diff position and a stable finding fingerprint,
 
 Project-wide accepted tradeoffs can be recorded separately in `.opencodereview/accepted-decisions.md`; the context generator supplies them to OCR only when the current merge request is not changing that file. See [Accepted project decisions](docs/configuration.md#accepted-project-decisions) for the entry format, inline marker convention, security boundary, and limitations.
 
+## Project development
+
+The project is evolving from bounded background generation toward a shared Repository Evidence Engine: one deterministic evidence model will support both a compact OCR bootstrap and a built-in read-only MCP server. Development is ordered by outcomes and dependencies rather than speculative dates.
+
+- [Toolkit strategy](docs/engineering/toolkit_strategy.md) - durable product boundaries, architecture, invariants, and non-goals.
+- [Roadmap](ROADMAP.md) - milestone status, dependencies, outcomes, and completion signals.
+- [Backlog](docs/codex/TASKS_BACKLOG.md) - inactive implementation-ready work; active execution remains in `PLANS.md`.
+
 ## GitLab CI quick start
 
 1. Configure protected/masked `GITLAB_API_TOKEN` and LLM variables in GitLab.

{open_code_review_toolkit-0.2.0 → open_code_review_toolkit-0.3.0}/README.md

@@ -15,7 +15,8 @@ ocr --version
 ocr-ci --help
 ```
 
-The current compatibility target is OCR `1.7.14`. CI should pin the release and verify its published checksum before execution.
+The current compatibility target is OCR `1.7.17`. CI should pin the release and verify its published checksum before execution.
+The [versioned compatibility policy](docs/compatibility.md) records tested assets and evidence and describes the conservative Dependabot-like qualification workflow for later upstream releases.
 Review output defaults to English. Set `OCR_REVIEW_LANGUAGE=Russian` to use Russian consistently in both OCR configuration and generated review context.
 
 Stable distributions are published to [PyPI](https://pypi.org/project/open-code-review-toolkit/) and mirrored as checksum-listed, provenance-attested assets in the corresponding [GitHub Release](https://github.com/xeonvs/open-code-review-toolkit/releases). Development snapshots are published only to TestPyPI.
@@ -28,6 +29,14 @@ Suppression uses both the GitLab diff position and a stable finding fingerprint,
 
 Project-wide accepted tradeoffs can be recorded separately in `.opencodereview/accepted-decisions.md`; the context generator supplies them to OCR only when the current merge request is not changing that file. See [Accepted project decisions](docs/configuration.md#accepted-project-decisions) for the entry format, inline marker convention, security boundary, and limitations.
 
+## Project development
+
+The project is evolving from bounded background generation toward a shared Repository Evidence Engine: one deterministic evidence model will support both a compact OCR bootstrap and a built-in read-only MCP server. Development is ordered by outcomes and dependencies rather than speculative dates.
+
+- [Toolkit strategy](docs/engineering/toolkit_strategy.md) - durable product boundaries, architecture, invariants, and non-goals.
+- [Roadmap](ROADMAP.md) - milestone status, dependencies, outcomes, and completion signals.
+- [Backlog](docs/codex/TASKS_BACKLOG.md) - inactive implementation-ready work; active execution remains in `PLANS.md`.
+
 ## GitLab CI quick start
 
 1. Configure protected/masked `GITLAB_API_TOKEN` and LLM variables in GitLab.

{open_code_review_toolkit-0.2.0 → open_code_review_toolkit-0.3.0}/pyproject.toml

@@ -38,6 +38,7 @@ ocr-ci = "ocr_toolkit.cli:main"
 
 [dependency-groups]
 dev = [
+  "bandit==1.9.4",
   "build>=1.2.2",
   "coverage[toml]>=7.6",
   "hatch-vcs>=0.4",
@@ -60,19 +61,7 @@ version-file = "src/ocr_toolkit/_version.py"
 packages = ["src/ocr_toolkit"]
 
 [tool.hatch.build.targets.sdist]
-include = [
-  "/src",
-  "/tests",
-  "/examples",
-  "/docs",
-  "/changelog.d",
-  "/README.md",
-  "/CONTRIBUTING.md",
-  "/SECURITY.md",
-  "/LICENSE",
-  "/CHANGELOG.md",
-  "/pyproject.toml",
-]
+only-include = ["src", "README.md", "LICENSE", "pyproject.toml"]
 
 [tool.hatch.version.raw-options]
 fallback_version = "0.3.0.dev0"
@@ -101,6 +90,11 @@ exclude = ["src/ocr_toolkit/_version.py"]
 warn_unreachable = false
 disable_error_code = ["arg-type", "assignment", "import-not-found", "index", "name-defined", "no-any-return", "no-redef", "union-attr", "unused-ignore", "var-annotated"]
 
+[tool.bandit]
+exclude_dirs = ["tests"]
+severity = "medium"
+confidence = "medium"
+
 [tool.pytest.ini_options]
 addopts = "--strict-config --strict-markers"
 testpaths = ["tests"]

{open_code_review_toolkit-0.2.0 → open_code_review_toolkit-0.3.0}/src/ocr_toolkit/_version.py

@@ -18,7 +18,7 @@ version_tuple: tuple[int | str, ...]
 commit_id: str | None
 __commit_id__: str | None
 
-__version__ = version = '0.2.0'
-__version_tuple__ = version_tuple = (0, 2, 0)
+__version__ = version = '0.3.0'
+__version_tuple__ = version_tuple = (0, 3, 0)
 
 __commit_id__ = commit_id = None

{open_code_review_toolkit-0.2.0 → open_code_review_toolkit-0.3.0}/src/ocr_toolkit/cli.py

@@ -33,9 +33,17 @@ def build_parser() -> argparse.ArgumentParser:
 
     post_parser = subparsers.add_parser("post", help="Publish an OCR result artifact to GitLab.")
     post_parser.add_argument(
-        "--result", default="/tmp/ocr-result.json", help="OCR JSON result path."
+        # The public GitLab example writes this fixed path inside an isolated CI job.
+        "--result",
+        default="/tmp/ocr-result.json",  # nosec B108
+        help="OCR JSON result path.",
+    )
+    post_parser.add_argument(
+        # The file contains only the current job's OCR stderr and is never shared.
+        "--stderr",
+        default="/tmp/ocr-stderr.log",  # nosec B108
+        help="OCR stderr log path.",
     )
-    post_parser.add_argument("--stderr", default="/tmp/ocr-stderr.log", help="OCR stderr log path.")
     return parser
 
 

{open_code_review_toolkit-0.2.0 → open_code_review_toolkit-0.3.0}/src/ocr_toolkit/context/manifests.py

@@ -196,9 +196,9 @@ def parse_pyproject(path: Path) -> dict[str, Any]:
 
     try:
         try:
-            import tomllib
+            import tomllib  # type: ignore[import-untyped]
         except ModuleNotFoundError:
-            import tomli as tomllib  # type: ignore[import-not-found]
+            import tomli as tomllib
 
         data = tomllib.loads(text)
     except ModuleNotFoundError:
@@ -209,9 +209,12 @@ def parse_pyproject(path: Path) -> dict[str, Any]:
     if not isinstance(data, dict):
         return {"present": True, "parse_error": JSON_OBJECT_PARSE_ERROR}
 
-    project = data.get("project") if isinstance(data.get("project"), dict) else {}
-    tool = data.get("tool") if isinstance(data.get("tool"), dict) else {}
-    poetry = tool.get("poetry") if isinstance(tool.get("poetry"), dict) else {}
+    raw_project = data.get("project")
+    raw_tool = data.get("tool")
+    project: dict[Any, Any] = raw_project if isinstance(raw_project, dict) else {}
+    tool: dict[Any, Any] = raw_tool if isinstance(raw_tool, dict) else {}
+    raw_poetry = tool.get("poetry")
+    poetry: dict[Any, Any] = raw_poetry if isinstance(raw_poetry, dict) else {}
 
     dependencies: list[str] = []
     if isinstance(project.get("dependencies"), list):
@@ -233,12 +236,14 @@ def parse_pyproject(path: Path) -> dict[str, Any]:
                     f"group.{group_name}: {redact_url_userinfo(str(dep))}" for dep in group_deps
                 )
 
-    poetry_deps = poetry.get("dependencies") if isinstance(poetry.get("dependencies"), dict) else {}
+    raw_poetry_deps = poetry.get("dependencies")
+    poetry_deps: dict[Any, Any] = raw_poetry_deps if isinstance(raw_poetry_deps, dict) else {}
     for name, version in poetry_deps.items():
         if str(name).lower() != "python":
             dependencies.append(f"{name}: {redact_url_userinfo(str(version))}")
 
-    poetry_groups = poetry.get("group") if isinstance(poetry.get("group"), dict) else {}
+    raw_poetry_groups = poetry.get("group")
+    poetry_groups: dict[Any, Any] = raw_poetry_groups if isinstance(raw_poetry_groups, dict) else {}
     for group_name, group_value in poetry_groups.items():
         if not isinstance(group_value, dict):
             continue
@@ -354,10 +359,14 @@ def parse_composer_json(path: Path) -> dict[str, Any]:
     if not isinstance(data, dict):
         return {"present": True, "parse_error": JSON_OBJECT_PARSE_ERROR}
 
-    require = data.get("require") if isinstance(data.get("require"), dict) else {}
-    require_dev = data.get("require-dev") if isinstance(data.get("require-dev"), dict) else {}
-    config = data.get("config") if isinstance(data.get("config"), dict) else {}
-    platform = config.get("platform") if isinstance(config.get("platform"), dict) else {}
+    raw_require = data.get("require")
+    raw_require_dev = data.get("require-dev")
+    raw_config = data.get("config")
+    require: dict[Any, Any] = raw_require if isinstance(raw_require, dict) else {}
+    require_dev: dict[Any, Any] = raw_require_dev if isinstance(raw_require_dev, dict) else {}
+    config: dict[Any, Any] = raw_config if isinstance(raw_config, dict) else {}
+    raw_platform = config.get("platform")
+    platform: dict[Any, Any] = raw_platform if isinstance(raw_platform, dict) else {}
 
     platform_items, platform_omitted = limited_manifest_items(
         [f"{name}: {version}" for name, version in platform.items()]
@@ -433,10 +442,13 @@ def parse_package_json(path: Path) -> dict[str, Any]:
     if not isinstance(data, dict):
         return {"present": True, "parse_error": JSON_OBJECT_PARSE_ERROR}
 
-    engines = data.get("engines") if isinstance(data.get("engines"), dict) else {}
-    dependencies = data.get("dependencies") if isinstance(data.get("dependencies"), dict) else {}
-    dev_dependencies = (
-        data.get("devDependencies") if isinstance(data.get("devDependencies"), dict) else {}
+    raw_engines = data.get("engines")
+    raw_dependencies = data.get("dependencies")
+    raw_dev_dependencies = data.get("devDependencies")
+    engines: dict[Any, Any] = raw_engines if isinstance(raw_engines, dict) else {}
+    dependencies: dict[Any, Any] = raw_dependencies if isinstance(raw_dependencies, dict) else {}
+    dev_dependencies: dict[Any, Any] = (
+        raw_dev_dependencies if isinstance(raw_dev_dependencies, dict) else {}
     )
 
     engines_items, engines_omitted = limited_manifest_items(

{open_code_review_toolkit-0.2.0 → open_code_review_toolkit-0.3.0}/src/ocr_toolkit/context/repo.py

@@ -162,11 +162,13 @@ def resolve_output_path(value: str) -> Path | None:
     requested = Path(value)
     logical_output = requested if requested.is_absolute() else root_lexical / requested
     logical_output = logical_output.absolute()
-    temp_lexical = Path(tempfile.gettempdir()).absolute()
+    # tempfile supplies the platform temp root; containment and symlink checks follow.
+    temp_lexical = Path(tempfile.gettempdir()).absolute()  # nosec B108
     allowed_roots = [(root_lexical, root), (root, root)]
     temp_resolved = temp_lexical.resolve()
     allowed_roots.extend([(temp_lexical, temp_resolved), (temp_resolved, temp_resolved)])
-    tmp_path = Path("/tmp")
+    # POSIX /tmp may be a distinct lexical alias (for example, /private/tmp).
+    tmp_path = Path("/tmp")  # nosec B108
     if tmp_path.exists():
         tmp_lexical = tmp_path.absolute()
         tmp_resolved = tmp_path.resolve()

{open_code_review_toolkit-0.2.0 → open_code_review_toolkit-0.3.0}/src/ocr_toolkit/posting/gitlab.py

@@ -125,7 +125,7 @@ def _open_gitlab_request(request: urllib.request.Request) -> Any:
 def _read_limited_response(response: Any) -> bytes:
     """Read a GitLab response body and fail when it exceeds the success budget."""
 
-    body = response.read(MAX_API_RESPONSE_BODY_BYTES)
+    body: bytes = response.read(MAX_API_RESPONSE_BODY_BYTES)
     if len(body) >= MAX_API_RESPONSE_BODY_BYTES and response.read(1):
         raise GitLabResponseTooLarge(f"GitLab response exceeds {MAX_API_RESPONSE_BODY_BYTES} bytes")
     return body
@@ -323,11 +323,13 @@ def fetch_current_user_id(server_url: str, api_token: str, auth_header: str) ->
         return None
 
     raw_user_id = result.get("id")
-    try:
-        return int(raw_user_id)
-    except (TypeError, ValueError):
-        print_user_id_failure_banner("GET /user response has no valid id field")
-        return None
+    if isinstance(raw_user_id, (str, int, float)) and not isinstance(raw_user_id, bool):
+        try:
+            return int(raw_user_id)
+        except ValueError:
+            pass
+    print_user_id_failure_banner("GET /user response has no valid id field")
+    return None
 
 
 def load_gitlab_config() -> GitLabConfig | None:
@@ -481,10 +483,12 @@ def draft_note_id(value: Any) -> int | None:
     if isinstance(raw_id, bool):
         return None
 
-    try:
-        return int(raw_id)
-    except (TypeError, ValueError):
-        return None
+    if isinstance(raw_id, (str, int, float)) and not isinstance(raw_id, bool):
+        try:
+            return int(raw_id)
+        except ValueError:
+            pass
+    return None
 
 
 def created_draft_note(response: Any, context: str) -> DraftNoteCreation | None:

{open_code_review_toolkit-0.2.0 → open_code_review_toolkit-0.3.0}/src/ocr_toolkit/posting/markers.py

@@ -240,10 +240,12 @@ def author_id_from_note(note: dict[str, Any]) -> int | None:
         if isinstance(author, dict):
             raw_author_id = author.get("id")
 
-    try:
-        return int(raw_author_id)
-    except (TypeError, ValueError):
-        return None
+    if isinstance(raw_author_id, (str, int, float)) and not isinstance(raw_author_id, bool):
+        try:
+            return int(raw_author_id)
+        except ValueError:
+            pass
+    return None
 
 
 def is_diff_note(note: dict[str, Any]) -> bool:

{open_code_review_toolkit-0.2.0 → open_code_review_toolkit-0.3.0}/src/ocr_toolkit/posting/workflow.py

@@ -131,7 +131,7 @@ def changed_new_lines(
             timeout=15,
         )
     except (OSError, subprocess.SubprocessError):
-        lines = set()
+        lines: set[int] = set()
         if cache is not None:
             cache[cache_key] = lines
         return lines
@@ -217,7 +217,7 @@ def head_file_lines(
             size_result.returncode != 0
             or int(size_result.stdout.strip() or "0") > MAX_REMAP_FILE_BYTES
         ):
-            lines = []
+            lines: list[tuple[int, str]] = []
             if cache is not None:
                 cache[cache_key] = lines
             return lines
@@ -827,8 +827,9 @@ def main(argv: list[str] | None = None) -> int:
     """CLI entrypoint."""
 
     args = argv if argv is not None else sys.argv[1:]
-    result_path = Path(args[0]) if len(args) >= 1 else Path("/tmp/ocr-result.json")
-    stderr_path = Path(args[1]) if len(args) >= 2 else Path("/tmp/ocr-stderr.log")
+    # Defaults are per-job files in the isolated CI container; callers can override both.
+    result_path = Path(args[0]) if len(args) >= 1 else Path("/tmp/ocr-result.json")  # nosec B108
+    stderr_path = Path(args[1]) if len(args) >= 2 else Path("/tmp/ocr-stderr.log")  # nosec B108
 
     config = load_gitlab_config()
     if config is None:

{open_code_review_toolkit-0.2.0 → open_code_review_toolkit-0.3.0}/src/ocr_toolkit/preflight.py

@@ -24,7 +24,7 @@ DEFAULT_REQUEST_HEADERS = {
     "Accept": "application/json",
     "User-Agent": "open-code-review-ci-preflight/1.0",
 }
-EXPECTED_OCR_VERSION = "1.7.14"
+EXPECTED_OCR_VERSION = "1.7.17"
 
 
 class PreflightError(Exception):

open_code_review_toolkit-0.2.0/CHANGELOG.md

@@ -1,50 +0,0 @@
-## 0.2.0 - 2026-07-21
-
-### Features
-
-- Target Open Code Review 1.7.14 in preflight validation and the checksum-pinned GitLab CI example. ([#11](https://github.com/xeonvs/open-code-review-toolkit/issues/11))
-- Replace the ambiguous `/ocr keep` and `/ocr skip` discussion replies with `/ocr resolve` and `/ocr suppress`, preserve human-owned deduplication, and document the complete GitLab review lifecycle for developers and CI operators. ([#8](https://github.com/xeonvs/open-code-review-toolkit/issues/8))
-
-### Bug fixes
-
-- Allow stable release verification to coexist with previously published development builds of the same base version on TestPyPI. ([#10](https://github.com/xeonvs/open-code-review-toolkit/issues/10))
-- Treat ordinary merged pull requests as a successful no-op in the production release workflow while keeping release-branch authorization fail-closed. ([#7](https://github.com/xeonvs/open-code-review-toolkit/issues/7))
-
-### Security
-
-- Mark every source-distribution smoke install as hash-required while retaining the no-dependency boundary, and document the single-maintainer security posture and Scorecard triage policy. ([#6](https://github.com/xeonvs/open-code-review-toolkit/issues/6))
-
-### Documentation
-
-- Reduce the routine Ubuntu CI matrix to the supported Python 3.10 and 3.14 endpoints, matching the macOS matrix. ([#10](https://github.com/xeonvs/open-code-review-toolkit/issues/10))
-- Document accepted project decisions, their optional `ocr-accept` marker convention, and the guard that prevents a merge request from whitelisting its own findings. ([#11](https://github.com/xeonvs/open-code-review-toolkit/issues/11))
-
-
-## 0.1.0 - 2026-07-20
-
-### Features
-
-- Publish one deterministic, checksum-verified TestPyPI development build after every merge into `main`, with bounded registry downloads and idempotent reruns. ([#4](https://github.com/xeonvs/open-code-review-toolkit/pull/4))
-- Target Open Code Review 1.7.13 in preflight validation and the pinned GitLab CI example. ([#4](https://github.com/xeonvs/open-code-review-toolkit/pull/4))
-- Support and continuously test Python 3.14 while retaining Python 3.10-3.13 compatibility. ([#4](https://github.com/xeonvs/open-code-review-toolkit/pull/4))
-- Publish reproducible 0.1.0 distributions to TestPyPI and PyPI with exact hash verification, provenance attestations, and immutable GitHub Release assets.
-- Introduce the standalone `ocr-ci` toolkit with safe context generation, GitLab posting, runtime configuration, MCP configuration, and preflight checks.
-
-### Bug fixes
-
-- Bind production release smoke tests to the exact reviewed wheel and sdist hashes, with bounded HTTPS downloads from TestPyPI and PyPI. ([#4](https://github.com/xeonvs/open-code-review-toolkit/pull/4))
-- Use `OCR_REVIEW_LANGUAGE` as the single safe language setting for OCR configuration and generated review context, with English as the default and Russian as an explicit option. ([#4](https://github.com/xeonvs/open-code-review-toolkit/pull/4))
-- Preserve bounded context and version discovery with a 7,950-character ceiling, improve provider billing classification, and prevent cross-file remapping of findings that already name a path. ([#3](https://github.com/xeonvs/open-code-review-toolkit/pull/3))
-
-### Security
-
-- Require secure credential endpoints, block unsafe GitLab redirects, redact secret-shaped environment values, and reduce GitHub Actions credential persistence and permissions. ([#3](https://github.com/xeonvs/open-code-review-toolkit/pull/3))
-
-### Documentation
-
-- Document the checksum-verified TestPyPI prerelease path used before the public stable release. ([#2](https://github.com/xeonvs/open-code-review-toolkit/pull/2))
-
-
-# Changelog
-
-Changes for each release are assembled from `changelog.d/` by Towncrier.

open_code_review_toolkit-0.2.0/CONTRIBUTING.md

@@ -1,14 +0,0 @@
-# Contributing
-
-Thank you for improving Open Code Review Toolkit. Keep changes focused, add regression tests for behavior changes, and use synthetic examples only.
-
-1. Create a branch from `main`.
-2. Install the locked development environment with `uv sync --frozen`.
-3. Update `PLANS.md` for substantial work.
-4. Add a Towncrier fragment for user-visible changes.
-5. Run the checks in [docs/development.md](docs/development.md).
-6. Open a pull request; protected `main` accepts changes only through green pull requests.
-
-Every non-release merge publishes a `0.2.0.devN` development build to TestPyPI. Stable releases use a repository-owned `release/vX.Y.Z` branch and an exact `Release vX.Y.Z` pull-request title; merging that reviewed PR authorizes the automated TestPyPI, PyPI, and GitHub Release chain.
-
-Do not include real credentials, provider payloads, internal hosts, or private repository details. Security reports should follow [SECURITY.md](SECURITY.md), not public issues.

open_code_review_toolkit-0.2.0/SECURITY.md

@@ -1,13 +0,0 @@
-# Security Policy
-
-## Supported versions
-
-Before 1.0, only the newest published release receives security fixes.
-
-## Reporting a vulnerability
-
-Use [GitHub private vulnerability reporting](https://github.com/xeonvs/open-code-review-toolkit/security/advisories/new) for this repository. Do not open a public issue or attach live credentials, proprietary source, or production provider responses. Include a minimal synthetic reproducer, impact, affected version, and suggested mitigation when available.
-
-Maintainers will acknowledge a report within five business days, privately validate severity and affected versions, and coordinate disclosure only after a fix or documented mitigation is available. Critical fixes are released as soon as practical; reporters receive status updates at least every ten business days while investigation remains open.
-
-The runtime trust model and deployment guidance are documented in [docs/security.md](docs/security.md).

open_code_review_toolkit-0.2.0/changelog.d/README.md

@@ -1,3 +0,0 @@
-# Changelog fragments
-
-Every user-visible 0.x change needs one fragment named `<issue>.<type>.md`, where type is `feature`, `bugfix`, `security`, or `doc`. Use a numeric GitHub issue or pull-request identifier so generated links remain valid.

open_code_review_toolkit-0.2.0/docs/codex/AGENT_EXECUTION_PITFALLS.md

@@ -1,44 +0,0 @@
-# Agent Execution Pitfalls
-
-## Closing a public-contract change after only the feature merge
-
-**Failure mode:** A feature changes a public command or integration contract, its pull request merges, and a TestPyPI `.devN` build succeeds. The plan is then marked completed even though stable PyPI users still receive the old behavior.
-
-**Why it happens:** Implementation, preview publication, and stable delivery are treated as separate mental tasks even when the user asked for one outcome. SCM-derived versions also make the source tree appear ready for the next version without proving that a stable tag or package exists.
-
-**Required prevention:**
-
-1. Classify the work at plan start and write the target stable version into `PLANS.md`.
-2. Treat feature merge and TestPyPI `.devN` verification as intermediate receipts.
-3. When release is required, prepare the version/changelog release PR immediately after the development build is verified.
-4. Keep the objective active until the release workflow publishes and independent readback confirms PyPI, TestPyPI, the signed tag, immutable GitHub Release, hashes, attestations, and supported-Python installs.
-5. If publication is intentionally deferred, record who deferred it, why, and the exact command or PR needed to resume.
-
-**Closure question:** "Can a user installing from production PyPI obtain the promised behavior now?" If not, the stable-release objective is not complete.
-
-This note records recurring execution mistake patterns discovered during real work. Record generalized lessons, not one-off complaints.
-
-## Planning And Context Discipline
-
-- Do not leave durable scope, source boundaries, or resume state only in chat; keep the active plan current.
-- Do not treat a local working specification as publishable documentation; translate its public requirements and keep private audit criteria outside tracked files.
-- Do not silently reduce extraction scope because the source is large; split it into coherent, validated subsystem slices.
-- Do not commit completed work while the active plan still says `planned` or `in_progress`.
-
-## Source And Privacy Boundaries
-
-- Inventory tracked source explicitly and avoid broad copy commands that could include ignored or untracked files.
-- Do not turn one-time private marker criteria into a tracked denylist or test fixture.
-- Do not use real provider payloads, hosts, repositories, or credentials in public fixtures.
-
-## Tooling And Validation Hygiene
-
-- Prefer the narrowest reproducer before broad reruns.
-- Verify both UTF-8 byte limits and Python character limits when changing note formatting.
-- Treat tests, lint, typing, artifact checks, install smoke, privacy scans, and source-integrity checks as distinct gates.
-- Pin third-party Actions by full commit SHA and keep readable version comments beside the pin.
-
-## Learning Loop
-
-- Promote a repeated stable lesson into `docs/engineering/project_principles.md`.
-- Record actionable future work in `docs/codex/TASKS_BACKLOG.md` only when it has an activation trigger and next safe action.

open_code_review_toolkit-0.2.0/docs/codex/TASKS_BACKLOG.md

@@ -1,87 +0,0 @@
-# Tasks Backlog
-
-This file tracks future work that is not active. Active extraction work is owned by `PLANS.md`.
-
-## Backlog Item: Native fuzzing campaign
-
-Status: parked
-Priority: medium
-
-### Activation Trigger
-
-- A supported Python fuzzing backend is selected with reproducible local execution, bounded CI resources, and corpus ownership.
-
-### Goal
-
-Fuzz the untrusted-input boundaries with meaningful targets for result normalization, context rendering, GitLab payload parsing, and registry metadata validation. Integrate a public fuzzing service only after the targets demonstrate useful coverage and stable crash minimization.
-
-### Next Safe Action
-
-1. Compare Atheris with property-based alternatives across Python 3.10-3.14 and design a small synthetic seed corpus without adding a runtime dependency.
-
-### Exit Criteria
-
-- Native targets run locally and in bounded CI, retain minimized synthetic regressions, publish no repository or provider secrets, and are recognized by the selected fuzzing service.
-
-## Backlog Item: OpenSSF Best Practices registration
-
-Status: owner action
-Priority: low
-
-### Activation Trigger
-
-- The owner is ready to authenticate at `bestpractices.dev` and attest every passing-level criterion truthfully.
-
-### Goal
-
-Register the public repository for an OpenSSF Best Practices badge without guessing owner-only governance or project-usage answers.
-
-### Next Safe Action
-
-1. Complete the passing-level questionnaire with evidence links to the public repository and leave unsupported criteria unmet.
-
-### Exit Criteria
-
-- The public badge record exists, all answers have current evidence, and the README displays only the earned status.
-
-## Backlog Item: Additional provider adapters
-
-Status: parked
-Priority: low
-
-### Activation Trigger
-
-- A provider-neutral core has shipped and a concrete provider integration has an owner and testable API contract.
-
-### Goal
-
-Add another code-hosting adapter without weakening the provider-neutral core or GitLab behavior.
-
-### Next Safe Action
-
-1. Write an adapter contract proposal based on the shipped GitLab boundary and validate it against synthetic fixtures.
-
-### Exit Criteria
-
-- The new adapter has isolated tests, documentation, and no provider-specific leakage into core modules.
-
-## Backlog Item: File-based user configuration
-
-Status: parked
-Priority: low
-
-### Activation Trigger
-
-- Environment-only configuration becomes a demonstrated usability constraint after v0.1.
-
-### Goal
-
-Evaluate a versioned user configuration file without silently changing environment precedence or secret handling.
-
-### Next Safe Action
-
-1. Draft a schema and threat model; do not implement until compatibility and migration behavior are agreed.
-
-### Exit Criteria
-
-- Schema, precedence, migration, secret handling, and validation behavior are documented and tested.

open_code_review_toolkit-0.2.0/docs/configuration.md

@@ -1,67 +0,0 @@
-# Environment configuration
-
-Open Code Review Toolkit uses environment variables only in v0.1. Empty values are generally treated as absent. Exact defaults and safety caps are enforced by the runtime modules.
-
-## OCR and LLM
-
-| Variable | Purpose |
-| --- | --- |
-| `OCR_LLM_URL` | OpenAI-compatible chat or responses endpoint. |
-| `OCR_LLM_MODEL` | Exact model identifier passed to OCR. |
-| `OCR_REVIEW_LANGUAGE` | Single review language used by OCR config and generated context. Defaults to `English`; set `Russian` for Russian review output. |
-| `OCR_LLM_TOKEN` | LLM credential. Never written into generated context. |
-| `OCR_LLM_AUTH_HEADER` | Optional authorization header name; defaults to `Authorization`. |
-| `OCR_LLM_EXTRA_HEADERS` | Optional JSON object of additional string headers. |
-| `OCR_LLM_SUPPORTS_FUNCTION_CALLING` | Boolean capability flag. |
-| `OCR_LLM_SUPPORTS_REASONING` | Boolean capability flag. |
-| `OCR_LLM_MAX_TOKENS` | Optional positive completion-token limit. |
-| `OCR_LLM_VALIDATE_MODEL` | `true`, `false`, or `auto`; defaults to `false`. |
-| `OCR_LLM_MODELS_URL` | Explicit `/models` metadata URL. |
-| `OCR_LLM_ALLOWED_MODELS` | Optional comma-separated offline allowlist for `auto` validation. |
-| `OCR_CONFIG_PATH` | Override the OCR JSON config path. |
-
-## MCP
-
-| Variable | Purpose |
-| --- | --- |
-| `OCR_MCP_SERVERS_JSON` | JSON object mapping server names to command, arguments, environment, and optional tool allowlists. |
-| `OCR_MCP_REPLACE` | Replace configured MCP servers when true; otherwise merge by server name. |
-
-MCP commands run as child processes of OCR. Treat their executable, arguments, environment, output, and tool access as privileged configuration.
-
-## GitLab CI inputs
-
-Posting requires `GITLAB_API_TOKEN`, `CI_SERVER_URL`, `CI_PROJECT_ID`, and `CI_MERGE_REQUEST_IID`. Inline discussions additionally use GitLab diff refs and merge-request source/base SHA variables. `CI_COMMIT_SHA` remains distinct from the merge-request source SHA and is never assumed to identify the reviewed branch head.
-
-## Posting controls
-
-`OCR_POST_MODE`, `OCR_STRICT_POSTING`, `OCR_EXIT_CODE`, `OCR_MAX_POST_COMMENTS`, `OCR_MAX_RESULT_BYTES`, and `OCR_POST_ERROR_DETAILS` control write behavior and bounded error reporting. Invalid numeric or boolean values fail closed or fall back to conservative defaults as documented in command output. Human replies to bot-created discussions prevent automated ownership actions on that discussion.
-
-## Context controls
-
-The `OCR_CONTEXT_*` family bounds files, bytes, changed paths, instructions, manifest content, dependency output, and generated background size. `OCR_BACKGROUND_MAX_CHARS` defaults to and is capped at `7950`; `OCR_BACKGROUND_MAX_BYTES` independently enforces the UTF-8 byte budget. The default output is `.review-context/dependencies.md`. The generator rejects symlink escapes and prunes common vendor/build directories.
-
-### Accepted project decisions
-
-Use `.opencodereview/accepted-decisions.md` for a reviewed, project-wide decision that OCR would otherwise report repeatedly. Each entry should have a stable slug, a concise rationale, an explicit scope, and an inline marker that ties the decision to the relevant code or configuration:
-
-```markdown
-## generated-client-timeout
-
-The generated client keeps the provider's 90-second timeout so regenerated
-code remains reproducible. Do not report that timeout in `src/client/generated.py`.
-
-Look for `# ocr-accept: generated-client-timeout` at the configured value.
-```
-
-```python
-REQUEST_TIMEOUT = 90  # ocr-accept: generated-client-timeout
-```
-
-`ocr-accept` is a human-readable convention, not a source-code parser or blanket linter suppression. The complete, byte-bounded Markdown file is sanitized, redacted, and included under `Accepted project decisions` in the generated review background; OCR is instructed not to raise matching findings. Keep the rationale narrow and name the affected paths or behavior so unrelated findings remain reviewable.
-
-The decision file must already exist on the target branch and pass normal review. If the current merge request changes `.opencodereview/accepted-decisions.md`, or changed-file discovery fails, the toolkit omits all accepted decisions for that run to prevent self-whitelisting. A decision reduces repeated model findings but is not a deterministic static-analysis exemption: reviewers should still use `/ocr suppress` or `/ocr resolve` for a concrete GitLab discussion, and should update or remove stale decisions when the underlying tradeoff changes.
-
-Use the default `OCR_POST_MODE=draft` for normal CI so all current notes are created as drafts before they are published and replaceable notes from the previous run are removed. Draft publication is sequential rather than atomic; the previous review is preserved unless every current draft publishes. Set `OCR_STRICT_POSTING=true` when the review job is a required merge gate; keep the default `false` only for advisory pipelines where GitLab posting availability must not block the pipeline. Reviewer commands and the complete repeated-run contract are documented in [GitLab review operations](operations.md).
-
-Run `ocr-ci --help` and each subcommand's help for command arguments. Secret values are redacted from operational error text.