feat(dependency-impact): implement multi-step analysis with inline review comments

dependency-impact/dist/parsers.d.ts

@@ -8,4 +8,26 @@ export declare function parseDependencyChanges(diff: string, files: {
     filename: string;
     patch?: string;
 }[]): DependencyChange[];
+import { UpgradeType } from "./types";
+/**
+ * Classify a version change as major, minor, patch, or unknown.
+ */
+export declare function classifyUpgrade(from: string, to: string): UpgradeType;
+/**
+ * Find the line number in the new file where a dependency's version appears as
+ * an added line in a diff patch. Returns null if not found.
+ */
+export declare function findDepLineInPatch(patch: string, depName: string): number | null;
 export declare function getImportPatterns(depName: string, ecosystem: string): string[];
+/**
+ * Extract the section of a Dependabot PR body relevant to a specific dependency.
+ *
+ * Dependabot group PRs embed per-dependency release notes inside `<details>`
+ * blocks whose content mentions the package name.  This function returns only
+ * the matching block(s) instead of the full body, avoiding token duplication
+ * when the body is attached to every dependency.
+ *
+ * Falls back to the full body when no per-dep section can be isolated (e.g.
+ * single-dependency Dependabot PRs where the whole body is relevant).
+ */
+export declare function extractDependabotSection(body: string, depName: string): string;

dependency-impact/dist/prompts.d.ts

@@ -0,0 +1,9 @@
+import type { EnrichedDependencyChange, Step1Result, Step2Result } from "./types";
+export declare function buildStep1Prompt(enrichedDeps: EnrichedDependencyChange[]): string;
+export declare function buildStep2Prompt(step1Result: Step1Result, usageSections: string): string;
+export declare function buildStep3Prompt(enrichedDeps: EnrichedDependencyChange[], step1Result: Step1Result, step2Result: Step2Result): string;
+export declare function buildStep3NoUsagePrompt(enrichedDeps: EnrichedDependencyChange[], step1Result: Step1Result): string;
+/**
+ * Legacy single-prompt fallback, used when structured pipeline JSON parsing fails.
+ */
+export declare function buildLegacyPrompt(depChangesList: string, prBodySection: string, hasUsage: boolean, usageSections: string, prDiff: string): string;

dependency-impact/dist/prompts.test.d.ts

@@ -0,0 +1 @@
+export {};

dependency-impact/dist/review.d.ts

@@ -0,0 +1,10 @@
+import type { ReviewComment, PullRequestFile } from "@gemini-actions/shared";
+import type { DependencyAssessment, EnrichedDependencyChange } from "./types";
+/**
+ * Build the review body with a summary table and narrative.
+ */
+export declare function buildReviewBody(assessment: DependencyAssessment): string;
+/**
+ * Build inline review comments for dependency version-change lines in manifest files.
+ */
+export declare function buildInlineComments(assessment: DependencyAssessment, enrichedDeps: EnrichedDependencyChange[], prFiles: PullRequestFile[]): ReviewComment[];

dependency-impact/dist/review.test.d.ts

@@ -0,0 +1 @@
+export {};

dependency-impact/dist/types.d.ts

@@ -0,0 +1,62 @@
+import { DependencyChange } from "./parsers";
+/** Semver upgrade classification */
+export type UpgradeType = "major" | "minor" | "patch" | "unknown";
+/** Risk level for impact assessment */
+export type RiskLevel = "low" | "medium" | "high" | "critical";
+/** A dependency change enriched with upgrade classification and release notes */
+export interface EnrichedDependencyChange extends DependencyChange {
+    upgradeType: UpgradeType;
+    releaseNotes: string | null;
+}
+/** Output of Step 1: breaking change extraction per dependency */
+export interface BreakingChangeEntry {
+    dependency: string;
+    upgradeType: UpgradeType;
+    breakingChanges: string[];
+    deprecations: string[];
+    notableChanges: string[];
+    hasConfirmedBreakingChanges: boolean;
+}
+export interface Step1Result {
+    dependencies: BreakingChangeEntry[];
+}
+/** Output of Step 2: cross-reference of breaking changes with codebase usage */
+export interface UsageImpact {
+    dependency: string;
+    change: string;
+    affectedFiles: string[];
+    affectedCode: string[];
+    requiredAction: string;
+    severity: RiskLevel;
+}
+export interface Step2Result {
+    impacts: UsageImpact[];
+    unaffectedUsages: Array<{
+        dependency: string;
+        fileCount: number;
+    }>;
+}
+/** Output of Step 3: final synthesized assessment */
+export interface DependencyAssessment {
+    overallRisk: RiskLevel;
+    riskJustification: string;
+    dependencySummaries: Array<{
+        dependency: string;
+        fromVersion: string;
+        toVersion: string;
+        upgradeType: UpgradeType;
+        risk: RiskLevel;
+        oneLiner: string;
+    }>;
+    actionItems: Array<{
+        severity: RiskLevel;
+        dependency: string;
+        file: string;
+        description: string;
+    }>;
+    inlineAnnotations: Array<{
+        dependency: string;
+        annotation: string;
+    }>;
+    narrativeSummary: string;
+}