release: 0.14.0 — Azure DevOps, review rules, ticket scope, replay, CLI backends, cost, size advisory, spec grounding

.env.example

@@ -12,16 +12,23 @@
 # LLM / Pipeline Configuration
 # ------------------------------------------------------------------------------
 
-# LLM backend: openai-compat (aliases: ferry, http) | litellm
+# LLM backend: openai-compat (aliases: ferry, http) | litellm | claude-cli | kiro-cli
+# Read case-insensitively; any other value is a configuration error (exit 2).
 PRXREF_LLM_BACKEND=openai-compat
 
-# Base URL for any OpenAI-compatible /chat/completions endpoint. REQUIRED.
+# Base URL for any OpenAI-compatible /chat/completions endpoint. REQUIRED for
+# openai-compat/ferry/http. Not used by litellm (it resolves each model's own
+# provider endpoint), claude-cli or kiro-cli: a set value is ignored there with
+# one INFO line. A LiteLLM proxy is OpenAI-compatible, so point openai-compat
+# at it.
 PRXREF_LLM_BASE_URL=https://openrouter.ai/api/v1
 
-# API key for that endpoint. Leave empty for a local no-auth server.
+# API key for that endpoint (openai-compat only). Leave empty for a local
+# no-auth server.
 PRXREF_LLM_API_KEY=
 
-# Comma-separated fallback chain, cheapest first. REQUIRED.
+# Fallback chain, cheapest first, comma- or whitespace-separated. REQUIRED by
+# every backend.
 PRXREF_LLM_MODELS=z-ai/glm-5.3-flash
 
 # Reasoning effort for models that cannot disable reasoning (e.g. low|high|max
@@ -52,10 +59,21 @@ PRXREF_LLM_REASONING_EFFORT=
 
 # Optional integer sampling seed, sent as top-level "seed" to
 # OpenAI-compatible backends. Must be >= 0 (0 is a valid seed). Empty or
-# unset omits it from the request entirely, leaving the provider's own
-# seed behaviour in place.
+# unset does not omit it: one random seed is derived per process, sent on
+# every call of the run, and reported as sampling.seed in the run record.
 # PRXREF_LLM_SEED=
 
+# claude-cli / kiro-cli only: the CLI binary to run (~ is expanded). Empty =
+# "claude" or "kiro-cli" found on PATH. The CLI must already be installed and
+# logged in (your own subscription, your own machine: see docs/llm.md). A path
+# that cannot be found is a configuration error (exit 2).
+# PRXREF_LLM_CLI_PATH=
+
+# claude-cli / kiro-cli only: how many CLI processes one client may run at
+# once. Each call is a full CLI process, and subscription limits are per
+# account. Must be > 0.
+# PRXREF_LLM_CLI_CONCURRENCY=2
+
 # Findings below this confidence floor are dropped (default 0.6).
 # A probability: must be within [0.0, 1.0] inclusive.
 PRXREF_CONFIDENCE_FLOOR=0.6
@@ -128,6 +146,92 @@ PRXREF_MAX_CHUNKS=8
 # total-failure notice always names its status regardless.
 # PRXREF_POST_VERDICT=1
 
+# Fallback price table, used only when the backend reports no dollar cost
+# (OpenRouter's usage.cost, a LiteLLM gateway's x-litellm-response-cost
+# header, litellm's response_cost, claude-cli's total_cost_usd). Inline JSON
+# (starting with "{") or a path to a JSON file; USD per MILLION tokens, keyed
+# on the exact model name prxref reports (model=). A run priced from it is
+# flagged cost_estimated. A malformed table is a configuration error (exit 2).
+# Local or free models behind a gateway that reports nothing: give them a zero
+# entry, or the run reads "cost unknown" (null), never $0.
+# PRXREF_PRICE_TABLE={"openai/gpt-4o-mini": {"input": 0.15, "output": 0.60}}
+# PRXREF_PRICE_TABLE=./prxref-prices.json
+
+# Set to exactly 1 to append the run's cost to the posted summary attribution
+# line ("… · 3.1s · $0.0007"; "~$0.0007 (est.)" when estimated, else
+# "$0.0007 (API-equivalent)" when every reported cost came from claude-cli;
+# "cost unknown"). Default off; the cost is always in the run record and the JSON.
+# PRXREF_POST_COST=0
+
+# Advisory-only threshold on lines changed (added + removed, excluding
+# lock/generated files): above it, the summary gets one non-blocking heads-up
+# line at the top. Unset (default) disables it. Must be >= 0; 0 is a legal,
+# extreme value, distinct from unset, not the "off" spelling. Never affects
+# the verdict or the exit code.
+# PRXREF_SIZE_WARN_LINES=
+
+# Same contract as PRXREF_SIZE_WARN_LINES, thresholding files instead.
+# PRXREF_SIZE_WARN_FILES=
+
+# Extra glob patterns (fnmatch, case-sensitive, matched against the full diff
+# path; * crosses /) excluded from both size counts above, ADDED to the
+# built-in lock/generated-file detection. Comma- or whitespace-separated, so
+# a literal space in a glob is written ?. Empty (default) adds nothing.
+# PRXREF_SIZE_IGNORE_GLOBS=
+
+# Spec/ticket sources to review against: web URLs, local file or directory
+# paths, or Jira ticket URLs. Comma- or whitespace-separated when set here;
+# repeatable `--spec` flags replace this list entirely (no merge). In CI, a
+# local path inside the PR's checkout is content the PR itself controls.
+# PRXREF_SPEC_SOURCES=
+
+# Raw fetched characters kept per spec source before pruning. Must be > 0.
+# Truncation at the cap is announced in the fetched text, never silent.
+# PRXREF_SPEC_MAX_CHARS=120000
+
+# Token budget for the spec digest injected into worker prompts. Must be > 0.
+# PRXREF_SPEC_DIGEST_TOKENS=3000
+
+# Team review-rules file (Markdown, optional front matter with a severity:
+# map) added to every review prompt. A missing, unreadable or malformed file
+# is a configuration error (exit 2). `--rules-file PATH` wins for one run;
+# `--rules-file ""` turns it off. Read it from a trusted checkout: in CI the
+# workspace is usually the PR's own code, so a rules file inside it lets the
+# PR rewrite its own review rules. See docs/review-rules.md.
+# PRXREF_REVIEW_RULES=
+
+# Characters of the rules body (after the front matter) kept in the prompt;
+# a longer body is truncated with a warning. Must be > 0.
+# PRXREF_REVIEW_RULES_MAX_CHARS=12000
+
+# Plain-text or Markdown file holding the ticket this PR implements. When set,
+# every finding is marked in, out of, or of unknown ticket scope. An empty
+# file means "this PR has no ticket". A missing or non-UTF-8 file is a
+# configuration error (exit 2). Ignored by `prxref serve`.
+# `--context-file PATH` wins for one run; `--context-file ""` turns it off.
+# PRXREF_TICKET_CONTEXT_FILE=
+
+# Characters of ticket text kept in the prompt; longer text is truncated with
+# a visible marker. Must be > 0.
+# PRXREF_TICKET_CONTEXT_MAX_CHARS=6000
+
+# Jira base URL (scheme://host plus any context path) that ticket fetches are
+# looked up on, overriding a ticket URL's own base (a self-hosted board often
+# sits behind a different REST host than its browse URL). Jira credentials
+# are only ever sent here. Empty uses the ticket URL's own base, anonymously.
+# PRXREF_JIRA_BASE_URL=
+
+# Jira account email for HTTP basic auth on ticket fetches, used only together
+# with PRXREF_JIRA_BASE_URL: set without it, the fetch stays anonymous and a
+# warning is logged. Leave empty for anonymous access to public boards.
+# Missing credentials are a fetch failure (the review proceeds un-grounded
+# with a note), never a configuration error.
+# PRXREF_JIRA_EMAIL=
+
+# Jira API token paired with PRXREF_JIRA_EMAIL for HTTP basic auth, sent only
+# to PRXREF_JIRA_BASE_URL.
+# PRXREF_JIRA_API_TOKEN=
+
 # ------------------------------------------------------------------------------
 # Per-Forge Authentication Tokens
 # ------------------------------------------------------------------------------
@@ -159,6 +263,12 @@ PRXREF_MAX_CHUNKS=8
 # GitLab token (Personal, project, or group access token with API access)
 # PRXREF_GITLAB_TOKEN=
 
+# Azure DevOps personal access token (Code (Read) to review; Code (Read & write)
+# to post). Sent as Basic ":PAT". When empty, the Pipelines SYSTEM_ACCESSTOKEN
+# is used as a Bearer token; when both are empty, requests are anonymous
+# (public projects, read-only).
+# PRXREF_AZURE_DEVOPS_TOKEN=
+
 # ------------------------------------------------------------------------------
 # Webhooks Configuration
 # ------------------------------------------------------------------------------
@@ -172,6 +282,11 @@ PRXREF_MAX_CHUNKS=8
 # Secret token / HMAC secret for GitLab webhook payloads (X-Gitlab-Token)
 # PRXREF_GITLAB_WEBHOOK_SECRET=
 
+# Azure DevOps service-hook secret: compared in constant time with the
+# PASSWORD of the hook's Basic auth (the user name is ignored). Empty rejects
+# Azure DevOps webhooks with 401 unless PRXREF_ALLOW_UNSIGNED=1.
+# PRXREF_AZURE_DEVOPS_WEBHOOK_SECRET=
+
 # Set to exactly 1 to accept unsigned webhooks (default off; insecure).
 # Only the literal "1" works — true/yes/on are intentionally NOT accepted.
 PRXREF_ALLOW_UNSIGNED=0

.gitignore

@@ -11,3 +11,4 @@ dist/
 docs/superpowers/
 docs/configurability/
 docs/release-hardening/
+docs/issues/