Merge pull request #10 from dedev-llc/feat/update-notifier

Fix npm version import and bump to v0.1.4

Author: lionuncle

README.md

@@ -39,6 +39,14 @@ rpr 42 --comment-only                    # Post as single comment (no inline)
 rpr 42 --repo owner/repo                 # Specify repo explicitly
 rpr 42 --model claude-sonnet-4-6         # Override model
 rpr 42 -v                                # Verbose mode (debug)
+
+# Review depth:
+rpr 42 --depth quick                     # Blockers & security only (fast)
+rpr 42 --depth thorough                  # Deep: architecture, edge cases, scale
+rpr 42                                   # Default depth (balanced)
+
+# Self-update:
+rpr update                               # Update to latest version
 ```
 
 ### Recommended Workflow
@@ -55,6 +63,22 @@ rpr 42 -v                                # Verbose mode (debug)
 
 3. Optionally tweak a word or two in the posted review for your personal touch.
 
+### Review Depth
+
+Control how deep the review goes with `--depth` / `-d`:
+
+| Depth | Flag | What gets flagged |
+|---|---|---|
+| **quick** | `-d quick` | Production bugs, security vulnerabilities, data loss risks, major architectural violations. Skips nits and style. |
+| **default** | *(omit flag)* | Bugs, security, performance, error handling, concurrency, resource leaks. Skips style preferences and obvious suggestions. |
+| **thorough** | `-d thorough` | Everything in default, plus architecture fit, edge cases, naming clarity, API design, testability, and performance at scale. |
+
+```bash
+rpr 42 -d quick      # Quick scan before a fast merge
+rpr 42               # Standard review (default)
+rpr 42 -d thorough   # Critical code path — go deep
+```
+
 ## Configuration
 
 `rpr` ships with sensible defaults. To override them, drop a config file at one of these paths (first match wins):

npm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dedev-llc/rpr",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "Stealth PR reviewer — looks like you wrote every word.",
   "keywords": [
     "pr",

pyproject.toml

@@ -6,7 +6,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "rpr"
-version = "0.1.3"
+version = "0.1.4"
 description = "Stealth PR reviewer — looks like you wrote every word."
 readme = "README.md"
 license = { file = "LICENSE" }

src/rpr/__init__.py

@@ -1,3 +1,3 @@
 """rpr — stealth PR reviewer."""
 
-__version__ = "0.1.3"
+__version__ = "0.1.4"

src/rpr/cli.py

@@ -11,6 +11,7 @@
     rpr 42 --dry-run                # Print review to terminal, don't post
     rpr 42 --approve                # Post review + approve the PR
     rpr 42 --request-changes        # Post review + request changes
+    rpr update                      # Self-update to latest version
 """
 
 # Postpones evaluation of annotations so PEP 604 syntax (e.g. `str | None`)
@@ -28,6 +29,22 @@
 import urllib.request
 from pathlib import Path
 
+
+def _get_version() -> str:
+    """Return the package version, with a fallback for npm-installed layout."""
+    try:
+        from rpr import __version__
+        return __version__
+    except ImportError:
+        # npm shim runs cli.py directly; __init__.py sits alongside it in lib/
+        init_file = Path(__file__).parent / "__init__.py"
+        if init_file.exists():
+            for line in init_file.read_text().splitlines():
+                if line.startswith("__version__"):
+                    return line.split("=", 1)[1].strip().strip('"').strip("'")
+        return "unknown"
+
+
 # ---------------------------------------------------------------------------
 # Config
 # ---------------------------------------------------------------------------
@@ -106,7 +123,7 @@ def check_for_update() -> str | None:
     Results are cached for UPDATE_CHECK_INTERVAL seconds so most runs
     hit a local file instead of the network.
     """
-    from rpr import __version__
+    __version__ = _get_version()
 
     cache_path = _update_cache_path()
     latest = None
@@ -152,7 +169,7 @@ def check_for_update() -> str | None:
 
 def _update_msg(current: str, latest: str) -> str:
     line1 = f" Update available: {current} → {latest} "
-    line2 = " pip install -U rpr "
+    line2 = " Run: rpr update "
     width = max(len(line1), len(line2))
     return (
         f"\n╭{'─' * width}╮\n"
@@ -162,6 +179,88 @@ def _update_msg(current: str, latest: str) -> str:
     )
 
 
+def _detect_update_command() -> list[str]:
+    """Detect how rpr was installed and return the appropriate update command."""
+    # Check pipx
+    try:
+        result = subprocess.run(
+            ["pipx", "list", "--short"],
+            capture_output=True, text=True,
+        )
+        if result.returncode == 0 and "rpr " in result.stdout:
+            return ["pipx", "upgrade", "rpr"]
+    except (FileNotFoundError, PermissionError):
+        pass
+
+    # Check brew
+    try:
+        result = subprocess.run(
+            ["brew", "list", "rpr"],
+            capture_output=True, text=True,
+        )
+        if result.returncode == 0:
+            return ["brew", "upgrade", "rpr"]
+    except (FileNotFoundError, PermissionError):
+        pass
+
+    # Check npm (script lives inside node_modules or npm prefix)
+    script_path = str(Path(sys.argv[0]).resolve())
+    if "node_modules" in script_path or "/npm/" in script_path:
+        return ["npm", "update", "-g", "@dedev-llc/rpr"]
+
+    # Default to pip
+    return [sys.executable, "-m", "pip", "install", "-U", "rpr"]
+
+
+def _fetch_latest_version() -> str:
+    """Fetch latest version string from PyPI. Raises on failure."""
+    req = urllib.request.Request(
+        "https://pypi.org/pypi/rpr/json",
+        headers={"Accept": "application/json"},
+    )
+    with urllib.request.urlopen(req, timeout=10) as resp:
+        data = json.loads(resp.read().decode("utf-8"))
+    return data["info"]["version"]
+
+
+def handle_update():
+    """Self-update rpr to the latest version."""
+    __version__ = _get_version()
+
+    print(f"rpr v{__version__}", file=sys.stderr)
+    print("Checking for updates...", file=sys.stderr)
+
+    try:
+        latest = _fetch_latest_version()
+    except Exception as e:
+        print(f"❌ Failed to check PyPI: {e}", file=sys.stderr)
+        sys.exit(1)
+
+    if _version_tuple(latest) <= _version_tuple(__version__):
+        print(f"✅ Already up to date.", file=sys.stderr)
+        return
+
+    print(f"Updating: {__version__} → {latest}", file=sys.stderr)
+
+    cmd = _detect_update_command()
+    print(f"Running: {' '.join(cmd)}\n", file=sys.stderr)
+
+    result = subprocess.run(cmd)
+    if result.returncode != 0:
+        print(f"\n❌ Update failed (exit code {result.returncode})", file=sys.stderr)
+        sys.exit(1)
+
+    print(f"\n✅ Updated to v{latest}", file=sys.stderr)
+
+    # Clear the update cache so the notification doesn't linger
+    try:
+        cache = _update_cache_path()
+        if cache.exists():
+            cache.unlink()
+    except OSError:
+        pass
+
+
 # ---------------------------------------------------------------------------
 # Review depth modes
 # ---------------------------------------------------------------------------
@@ -851,6 +950,11 @@ def parse_review(raw: str) -> dict:
 
 
 def main():
+    # Handle `rpr update` before argparse (which expects an int positional)
+    if len(sys.argv) >= 2 and sys.argv[1] == "update":
+        handle_update()
+        return
+
     parser = argparse.ArgumentParser(
         prog="rpr",
         description="Stealth PR Reviewer — looks like you wrote every word.",