v0.3.0: Interactive wizard, parallel reviews, BitBucket API tokens, V…

[simion]

…PS support

Features:

• Interactive setup wizard (questionary) with repo detection, token validation
• reviewd init --sample for non-interactive VPS/CI setup
• Parallel PR processing with ThreadPoolExecutor (configurable concurrency)
• Thread-safe SQLite (WAL mode) with per-repo git locks
• Graceful shutdown with subprocess tracking and SIGTERM handling
• BitBucket API tokens with Basic auth (email:token), replacing App Passwords
• GIT_TERMINAL_PROMPT=0 on all git operations for headless environments
• Auto-launch wizard when config missing from any command

Fixes:

• BitBucket null source commit crash on deleted branches
• GitHub slug regex not matching dots in repo names (e.g. simion.cv)
• BitBucket approve_pr now uses shared client instead of standalone request
• Directory names used as repo display names instead of remote slug

Tests:

• BitBucket Basic auth and null commit handling
• JSON extraction edge cases (multiple blocks, malformed, unknown severity)
• Config env var substitution and max_concurrent_reviews parsing
• Concurrent StateDB access (20 threads)
• GIT_TERMINAL_PROMPT=0 verification

Docs:

• README: VPS/headless deployment guide with systemd example
• README: Updated GitHub/BitBucket setup instructions
• README: Parallel reviews documented, roadmap updated

[simion]

review'd by Claude

🟡 Suggestion (1)

• Manual YAML builder produces unquoted values that can break with special characters — src/reviewd/wizard.py (line 256)
  Repo paths are interpolated into YAML without quoting. Paths containing #, :, {, [, or other YAML-significant characters would produce an invalid or incorrectly parsed config file. For example, /home/user/my#project would be truncated at the # (treated as a comment). Same applies to repo names on line 255.

🟢 Good (4)

• Thread-safe SQLite with WAL mode and per-method locking — src/reviewd/state.py (line 12)
  Using check_same_thread=False, WAL journal mode for concurrent readers/writers, and a threading.Lock around every method is the correct approach for multi-threaded SQLite access. The added indexes on (repo_slug, pr_id) will help query performance as the review history grows.
• Per-repo git locks prevent concurrent git operations from corrupting state — src/reviewd/reviewer.py (line 32)
  Using defaultdict(threading.Lock) keyed by repo path ensures that git fetch/worktree operations on the same repo are serialized while different repos can proceed in parallel. Combined with _active_procs tracking for graceful termination, this is a clean concurrency design.
• Defensive double-check of PR eligibility in worker thread — src/reviewd/daemon.py (line 130)
  Re-checking _should_skip, has_review, and cooldown inside _process_pr (after the initial check in _collect_eligible_prs) is good practice for concurrent systems — state may have changed between collection and execution.
• BitBucket approve_pr fixed to use self.client instead of raw httpx — src/reviewd/providers/bitbucket.py (line 129)
  Previously approve_pr created a standalone httpx.post() call, bypassing the client's auth configuration. Now correctly uses self.client.post(), ensuring both Basic and Bearer auth work consistently.

Bottom line: Clean, well-architected release. The one actionable item is quoting values in the wizard's YAML builder to handle edge-case paths. The concurrency design (locks, WAL, shutdown coordination) is solid.

Automated review by reviewd. Findings are AI-generated — use your judgment.
Replies to this comment are not monitored.