rodin/review-bot

feat(#137): add doc-map input for path-scoped doc injection #138

Merged

rodin merged 7 commits from issue-137 into main

2026-05-15 03:39:37 +00:00

Author	SHA1	Message	Date
claw	60c6bd9f49	test(budget): add DesignDocs tests; replace PLAN-137 with clean design doc PR Ready Gate / clear-labels (pull_request) Successful in 1s Details CI / test (pull_request) Successful in 17s Details CI / review (anthropic--claude-4.6-sonnet, sonnet, SONNET_REVIEW_TOKEN) (pull_request) Successful in 48s Details CI / review (gpt-5, security, ., rodin/security-patterns, SECURITY_REVIEW.md, SECURITY_REVIEW_TOKEN) (pull_request) Successful in 1m52s Details CI / review (gpt-5, gpt, GPT_REVIEW_TOKEN) (pull_request) Failing after 2m8s Details - budget/budget_test.go: add TestFit_DesignDocsInSystemPrompt, TestFit_DesignDocsTrimmedBeforeFileContext, TestFit_DesignDocsEmptyNoHeading to cover the new DesignDocs section through Fit() and buildResult() - Remove PLAN-137.md (contained raw thinking stream, not suitable as repo doc) - Add docs/DESIGN-137-doc-map.md with clean architectural decision record	2026-05-14 20:36:22 -07:00
Rodin	f7815b8778	chore(#137 ): update CHANGELOG with security fixes from review PR Ready Gate / clear-labels (pull_request) Successful in 2s Details CI / test (pull_request) Successful in 17s Details CI / review (anthropic--claude-4.6-sonnet, sonnet, SONNET_REVIEW_TOKEN) (pull_request) Successful in 44s Details CI / review (gpt-5, security, ., rodin/security-patterns, SECURITY_REVIEW.md, SECURITY_REVIEW_TOKEN) (pull_request) Successful in 1m31s Details CI / review (gpt-5, gpt, GPT_REVIEW_TOKEN) (pull_request) Successful in 1m48s Details	2026-05-15 03:32:18 +00:00
Rodin	45e2f5fc1c	docs(#137 ): add doc-map and doc-map-max-bytes to action inputs table (gpt #2 )	2026-05-15 03:32:16 +00:00
Rodin	860dd98415	fix(#137 ): address review findings in budget.go - Update package comment trim order to include design docs (gpt #1) - Add prompt injection guardrail for DesignDocs section (security #2)	2026-05-15 03:32:13 +00:00
Rodin	a80c12355b	test(#137 ): add tests for validateDocPath and path traversal rejection	2026-05-15 03:32:10 +00:00
Rodin	a24edeee89	fix(#137 ): address review findings in docmap.go - Fix package comment collision: convert to file comment (not package doc) - Add debug log for directory expansion failure before single-file fallback - Add validateDocPath: reject absolute paths and '..' segments (security #3) - Update globMatch comment to say 'filepath.Match' not 'path.Match' (gpt nit #3) - Add duplication note to truncateUTF8 explaining why it's kept separate (sonnet #2)	2026-05-15 03:32:07 +00:00
Rodin	9670a5fda3	feat(#137 ): add doc-map input for path-scoped doc injection CI / test (pull_request) Successful in 18s Details CI / review (anthropic--claude-4.6-sonnet, sonnet, SONNET_REVIEW_TOKEN) (pull_request) Successful in 40s Details CI / review (gpt-5, security, ., rodin/security-patterns, SECURITY_REVIEW.md, SECURITY_REVIEW_TOKEN) (pull_request) Successful in 1m26s Details CI / review (gpt-5, gpt, GPT_REVIEW_TOKEN) (pull_request) Successful in 1m27s Details - New --doc-map flag (DOC_MAP_FILE env var): path to YAML config mapping source path globs to governing design docs - New --doc-map-max-bytes flag (DOC_MAP_MAX_BYTES env var): cap on total injected doc content, default 100KB - review/docmap.go: DocMapConfig parsing, glob matching with ** support, doc loading via VCS with directory expansion and size guard - budget.Sections: new DesignDocs field, trimmed after conventions - budget.buildResult: injects DesignDocs under ## Design Documents heading - action.yml: doc-map and doc-map-max-bytes inputs wired to env vars - CHANGELOG.md: created with unreleased entry - Tests: ParseDocMapConfig, MatchDocs, globMatch, LoadMatchingDocs	2026-05-15 03:25:54 +00:00