PR/MR Opened or New Commits Pushed
         |
         v
+------------------+
| CI/CD Triggers   |     GitHub Actions / GitLab CI / Bitbucket Pipelines
+------------------+
         |
         v
+------------------+
| Detect Platform  |     Auto-detects from CI environment variables
| & Init Client    |     (GITHUB_ACTIONS / GITLAB_CI / BITBUCKET_PIPELINE_UUID)
+------------------+
         |
         v
+------------------+
| Fetch PR Diff    |     Platform API: changed files with patches
| & Changed Files  |     Returns: filename, status, unified diff per file
+------------------+
         |
         v
+------------------+
| Filter Files     |     Skip: *.lock, dist/**, generated code
|                  |     Limit: max_files (default 20)
+------------------+
         |
         v
+-------------------------------------------+
| Run Review Tracks in Parallel             |
|                                           |
|  +-------------+  +----------+  +-------+ |
|  | Code Quality|  | Security |  | Cross | |
|  | Track       |  | Track    |  | File  | |
|  | (Claude API)|  | (Claude) |  | Track | |
|  +-------------+  +----------+  +-------+ |
+-------------------------------------------+
         |
         v
+------------------+
| Filter Pipeline  |     1. Severity threshold (>= medium)
|                  |     2. Diff-only (changed lines only)
|                  |     3. Deduplication (skip existing bot comments)
|                  |     4. Limit (max_comments, sorted by severity)
+------------------+
         |
         v
+------------------+
| Post Review      |     - Inline comments on file:line
| to PR/MR         |     - Summary comment with verdict
+------------------+

ai-pr-reviewer/
├── src/                          # TypeScript source code
│   ├── index.ts                  # GitHub Action entry point — orchestrates full review flow
│   ├── cli.ts                    # Dry-run CLI — review local changes before pushing
│   ├── platform-client.ts        # Abstract interface for GitHub/GitLab/Bitbucket clients
│   ├── github-client.ts          # GitHub API client — fetch PR diff, post reviews
│   ├── gitlab-client.ts          # GitLab API client — fetch MR diff, post discussion notes
│   ├── bitbucket-client.ts       # Bitbucket API client — Cloud + Server support
│   ├── ai-reviewer.ts            # Claude API integration — runs parallel review tracks
│   ├── diff-parser.ts            # Unified diff parser — extracts file/line/hunk mappings
│   ├── review-filter.ts          # Filter pipeline — severity, diff-only, limit
│   ├── comment-formatter.ts      # Formats findings into branded review comments
│   ├── deduplication.ts          # Prevents re-posting existing bot comments
│   └── config.ts                 # Configuration from action inputs / env vars
├── prompts/                      # AI system prompts (customizable)
│   ├── code-quality.md           # Track 1: code quality & efficiency rules
│   ├── security-review.md        # Track 2: OWASP Top 10 security checks
│   └── cross-file-impact.md      # Track 3: cross-file/API impact analysis
├── templates/                    # CI/CD templates for each platform
│   ├── github-workflow.yml       # GitHub Actions workflow template
│   ├── gitlab-ci.yml             # GitLab CI job template
│   └── bitbucket-pipelines.yml   # Bitbucket Pipelines step template
├── docs/
│   └── PLAN.md                   # Implementation plan and architecture decisions
├── dist/                         # Compiled GitHub Action (built with ncc)
│   └── index.js                  # Bundled entry point
├── action.yml                    # GitHub Action metadata — inputs, outputs, branding
├── package.json                  # Dependencies and scripts
├── tsconfig.json                 # TypeScript configuration
├── .env.example                  # Required environment variables template
├── .gitignore                    # Git ignore rules
└── README.md                     # This file

AI PR Reviewer -- Dry Run
   Model: claude-sonnet-4-5-20250929
   Base: main
   Tracks: code-quality, security
   Severity: >= medium

Getting git diff...
   Found 3 changed files

Running AI review...
   Raw findings: 4

======================================================================
  REVIEW RESULTS: 2 finding(s)
======================================================================

  Critical: 1
  Medium: 1

----------------------------------------------------------------------
  CRITICAL | Injection | SQL query built with string concatenation
  src/db/users.ts:42

  User input is directly interpolated into SQL query without parameterization.

  Suggestion: Use parameterized queries: db.query('SELECT * FROM users WHERE id = $1', [userId])

----------------------------------------------------------------------
  MEDIUM | Code Quality | Empty catch block swallows errors
  src/services/auth.ts:87

  Exception is caught but neither logged nor rethrown.

  Suggestion: Add logging: catch (e) { logger.error('Auth failed', e); throw e; }

======================================================================