with the REPL API](https://github.com/BetterThanTomorrow/calva/issues/3244)`).
* After changing code, run CodeScene's `code_health_review` on the changed files. If Code Health drops, fix the issues, run the review
2.1k11d agoReviewMountCreate a free account to mount
analyzer warnings for XML-related vulnerabilities (CA2327, CA2329, CA2330, CA2328) are treated as errors
- Code changes should contain no files larger than 50 MB (validated by the `check_file_size.yml` workflow)
## Agent
2k26d agoReviewMountCreate a free account to mount
repository.
## Before Committing
Always:
1. Review the files being committed with `git status` or `git diff --cached`
2. Ensure only source code, tests, and documentation are included
3. Check that
2k10mo agoReviewMountCreate a free account to mount
text until they agree.
Keep changes small and reviewable. Do not make broad root-cause claims without verifying the current code and relevant dependencies. Disclose AI assistance in PR descriptions
2k4mo agoReviewMountCreate a free account to mount
produced the initial draft with minimal human authorship
- `ai-usage: ai-assisted` – Human-directed, reviewed, and edited with AI support
- Omit only for purely human-authored legacy content
If missing
General
* Make only high-confidence suggestions when reviewingcode changes.
* Always use the latest version of C#, currently C# 13 features.
* Never change global.json unless explicitly asked to.
* Never change
2k2mo agoReviewMountCreate a free account to mount
Codereview guidelines
When performing a codereview, keep in mind the following.
## Coding standards
- Check that all values of integer type are represented as `igraph_int_t`, except
2k12d agoReviewMountCreate a free account to mount
/PULL_REQUEST_TEMPLATE.md). [`AGENTS.md`](../AGENTS.md) adds agent-behaviour guidance. If anything below contradicts these, prefer them.
## Review priorities
### PR hygiene
- Every required section of the PR template must have content — no empty
2k3mo agoReviewMountCreate a free account to mount
conventions that will not themselves cause CI failures but should still be followed in codereviews.
**Formatting Rules:**
- **Line length:** 132 characters maximum
- **Indentation:** 2 spaces (never tabs)
- **Braces:** Linux
dependency.
- Design code to be easy to change, but do not add extension points or
abstractions for hypothetical requirements.
## Change Discipline
- Avoid over-engineering and review churn. Preserve names
Steady2 mentions in 2 weeks
No other project uses it yet
2k32d agoReviewMountCreate a free account to mount
MicrosoftDeletes or force-pushesCopilot instructions
subtle and needs human review
**Error handling across trust boundaries:**
- Use `thiserror` for typed error enums at library/API boundaries and
protocol-facing code
- Use `anyhow` with `.context("...")` for application-level
Codereview instructions
Repo context lives in [CLAUDE.md](../CLAUDE.md) — read it first.
When reviewing a PR, analyze the changes against these criteria:
| Area | What to check |
| ------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Async error handling | uncaught
No other project uses it yet
2k35d agoReviewMountCreate a free account to mount
package.json` as the source of truth for available scripts when implementing changes or reviewing CI.
```sh
npm ci
npm run dev # Vite development server
npm run typecheck # TypeScript checks
2k42d agoReviewMountCreate a free account to mount
dune fmt # Auto-format code (run before committing)
dune promote # Accept test output changes (ask user first)
make dev # Full build (bootstraps if necessary)
```
## Reviewing PRs
Follow the repository review
1.9k4mo agoReviewMountCreate a free account to mount
AppSec Mode)
- **Context**: Cacti Takes Security Seriously consider the security implications when reviewing current and new code base
- **Vulnerability Checks**:
- **SQL Injection**: STRICTLY enforce prepared statements (`db_*_prepared`). Flag
1.9k59d agoReviewMountCreate a free account to mount
CodeReview
- Focus on bugs, security issues, and correctness. Do not flag style nits.
- Do not suggest adding comments, javadocs, or type annotations to unchanged code.
- Do not flag naming
Steady21 mentions in 2 weeks
1 project uses a version of this
1.9k4mo agoReviewMountCreate a free account to mount
entire module name.
## Generated Code — DO NOT suggest changes
When performing a codereview, if a file contains the header `// Code generated by Microsoft (R) Go Code Generator
1.9k7mo agoReviewMountCreate a free account to mount