Feat: PR diff viewer, finding verification pass, and account settings with timezone-aware stats by devarshishimpi · Pull Request #55 · devarshishimpi/codra

devarshishimpi · 2026-08-01T15:44:28Z

Description

Files-changed diff viewer. Real diff view on job detail with syntax highlighting, findings inline, and overview / files / logs tabs. diff_input is no longer persisted; GET /api/jobs/:id/diffs rebuilds it from KV or GitHub using the job's own base and head commits. Returns the full PR diff so it matches GitHub mid-review. Migration 003_diff_accounts.sql clears the old values.

Verification pass. The accuracy fix. One extra model call re-checks the top 40 findings against their diff and drops false positives. Best effort, so a model error can't block a review. Findings are deduped too.

Account settings. New account_settings table, /account page, and GET/PATCH /api/auth/account for display name and IANA timezone. Timestamps stay TIMESTAMPTZ; the zone only affects rendering.

Telemetry fix. Token and model totals now count done reviews only (null counts from failed ones were deflating them). Added concurrencyLevel, prTotalLinesChanged, retryCount.

UI. Radix to @base-ui/react, reworked primitives, redesigned stats, repos, jobs, settings, landing, and app shell. Plus session caching in useJobDetail, GraphQL in the GitHub client, PR-number filtering on jobs.

Chores. Dependency bumps, CI actions to v7 / CodeQL v4, Dependabot cooldown, docs point at main not dev.

Closes #42 #44
Part of #40 #43

Type of change

Bug fix (non-breaking change which fixes an issue)
New feature (non-breaking change which adds functionality)
Documentation update
Chore (refactoring, dependency updates, etc.)

How Has This Been Tested?

New tests for the verification pass, timezone formatting, and finding dedupe. test/api.spec.ts reworked to cover the new diffs and account routes. Dashboard e2e updated for Base UI.

Unit Tests
Integration Tests
Manual Dashboard Verification
Manual GitHub Webhook Verification

Checklist:

I have starred Codra on GitHub
I have performed a self-review of my own code
I have commented my code, particularly in hard-to-understand areas
My changes generate no new warnings
New and existing unit tests pass locally with my changes
I have signed the CLA

…nhance utility functions

…stats page

- Updated button styles for primary variant to include border and hover effects. - Implemented session-scoped caching in `useJobDetail` hook to improve performance by reading from sessionStorage. - Added a new `highlight` utility for syntax highlighting in the diff viewer, supporting multiple languages. - Refactored dashboard and job detail pages to improve UI and user experience, including tab navigation for job details. - Replaced icons in the dashboard and jobs pages for better visual representation. - Updated job logs page to enhance file status representation with badges. - Introduced GraphQL support in GitHub client for more efficient data fetching. - Enhanced database queries to support filtering by pull request number. - Updated shared schema to include new query parameters. - Added tests to ensure UI flows are functioning correctly.

Conflicts were limited to package.json / package-lock.json, where main's Dependabot bumps overlapped this branch's own dependency changes. Resolution takes the newer of each side: - wrangler ^4.114.0 (main) over ^4.110.0 - @cloudflare/vitest-pool-workers ^0.18.8, concurrently ^9.2.4 (main) - vitest ^4.1.10 (this branch) so it stays in lockstep with @vitest/browser and @vitest/browser-playwright, which pin an exact peer - Base UI retained and the Radix packages stay removed package-lock.json was regenerated from scratch rather than hand-merged. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

…ssing

…ions

…base queries

…proving omission reasons in review summary

Findings must quote the diff line they describe; unmatched quotes are dropped as hallucinations and the quote becomes the comment anchor. Response schemas are now per call, fixing a verification pass that was silently a no-op. Fingerprint + anchor hash stop re-posting findings on later commits, and webhook feedback suppresses ones humans delete. Adds nit priority, min_severity default P3, and consolidates migrations 003-008.

Cap quota 429s at 2 per file and defer the rest instead of walking the whole fallback chain; honor Google's body-stated cool-off. Size the per-file subrequest estimate from the chain length, and yield 8s (was 2s) so chunks stop sharing one invocation's budget. Move max_files to an instance-wide setting (1-500, default 200) and report files left over the cap in the review summary.

Add claim_type per finding, a disposition column recording which stage dropped it (was just posted=false), and shadow-eval logging for candidate filter rules. Drop the merged React language entry, which was double- checklisting .tsx files and causing hook-dependency false positives.

…an labels Enforce grounding on every provider, deny risky claim types by default, and rework verification into a subtractive pass with per-drop reasons. Add dashboard right/wrong labels on findings. Also fix temperature-0 sampling, migration lock scoping, and quote-folding for evidence matches.

…d JSONB encoding fixes Extract review.ts into focused modules (review-budget, review-diff-cache, review-request, verify-findings) and add a regex-based rule channel (rules/detect.ts, rules/table.ts) alongside the LLM, tagged via new source/rule_id columns for per-channel precision tracking. Add Google Vertex as a distinct provider (OAuth2 vs API keys) and a centralized SSRF guard for operator-supplied provider base URLs. Fix a jsonb encoding bug where JSON.stringify() bound to $n::jsonb stored a string scalar instead of an object across six columns; writers now bind $n::text::jsonb. Also adds fingerprint_v2 for recurrence detection. Client: PR diff UI additions (file-tree, prompt-diff, selection helpers) and removal of unused sparkline/card/dropdown-menu/meter components.

devarshishimpi added 9 commits July 16, 2026 02:28

chore: update dependencies and improve error logging

7e41598

add: redesign stats and about component, update theme handling, and e…

993af70

…nhance utility functions

add: migrate to base ui with new look on llm provider job tables and …

9ebc5cd

…stats page

fix: telemetry and repos ui

f93be3f

refactor: update contributing guidelines and improve UI components

6eb0808

fix: improve issues accuracy and files reviewed ui changes

75136c7

add: accounts settings route

3115e19

feat: refresh job review UI and add timezone-aware account stats

59a5ce2