feat: on_violation config + --ci mode for hard gating

[ajianaz]

Summary

Closes #149
Ref: #151

Changes

File	Change
src/config/schema.rs	Add on_violation: warn|disallow to HookConfig + HookSection + merge
src/commands/review.rs	CI-aware size check + hard gate on any findings in CI mode
src/main.rs	Add --ci CLI flag
install.sh	New: curl-install script with OS/arch detection
README.md	Rewrite Installation section + document --ci + on_violation

Problem

Pre-commit hook skips review on oversized diffs (262K > 50K limit) with only a warning. Commits pass without code review.

Solution

1. on_violation: disallow — new hook config option

hook:
  max_diff_size: 51200
  on_violation: disallow  # NEW: exit 2 (block commit) instead of exit 1 (warn)

• Default: warn (backward compatible)
• When disallow: oversized diff → exit 2 → hook denies commit
• Escape hatch: git commit --no-verify

2. --ci flag — for CI workflows

# .github/workflows/ci.yml
- run: cora review --ci --base ${{ github.base_ref }}

• Skips max_diff_size check (CI always reviews full PR diff)
• Hard gate: any finding → exit 2 (CI fails)
• Independent of on_violation config

3. install.sh — one-line install

curl -fsSL https://raw.githubusercontent.com/codecoradev/cora-cli/main/install.sh | sh

Tests

• 352 tests pass, 0 failures
• cargo clippy clean (0 warnings)
• cargo fmt clean
• All existing HookConfig struct literals updated

Co-Authored-By: codecoradev noreply@github.com

[github-advanced-security]

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

• The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
• Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
• You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

[github-actions]

🔍 Cora AI Code Review

❌ Blocked — critical issues found.

🔴 Error (1)

• src/commands/review.rs:90 — When opts.ci is true, the diff size check is bypassed entirely (if !opts.ci && diff.len() > max_size). This means a CI job could send an arbitrarily large diff to the LLM API, potentially causing extremely long processing times, high costs, or API rate limit errors. There should at least be a reasonable upper bound even in CI mode.

---

Review powered by cora-cli · BYOK · MIT