internal/

Package app is the composition root: it wires configuration, logging, state, clients, and the service layer together, and exposes lifecycle entrypoints used by the CLI commands.

Package cli is the thin urfave/cli v3 launcher.

Package config defines the ai-reviewer configuration schema and loading.

Package coverage measures test coverage of an MR's changed lines: it runs the repository's own test toolchains (opt-in — this executes repository code), collects per-line coverage profiles, and intersects them with the diff's added lines.

Package git manages the local repository cache: a bare mirror per project and disposable worktrees per MR head sha, used for agent-mode deep analysis.

Package gitlab is a hand-written client for the GitLab API v4, plus the API data models.

Package index builds a local file index (with FTS5 content) of a repository worktree, used for relevance retrieval during review.

Package jobs is the durable background worker: the SQLite `jobs` table is the source of truth, a bounded pool of goroutines claims and runs jobs, and a scheduler enqueues review jobs when an MR's head sha changes.

Package llm defines the provider-agnostic LLM client interface and the Claude CLI implementation.

Package review implements the AI review engine: context building, diff parsing, GitLab position mapping, finding validation, dedupe, and the orchestrator that drives the LLM pipeline.

Package security provides secret redaction for logs, job output, and any text that might reach the user or the LLM.

Package server implements the local web UI: a localhost-only HTTP server that renders HTMX/Alpine pages backed by the shared service layer.

Package service holds the application service layer: UI-agnostic business logic that the web server and CLI both call.

Package skills discovers Claude Code "skills" installed on the machine so the web UI can offer them per review.

Package state owns the SQLite database: schema migrations, row models, and the repository layer.

Package toolchain provides language/toolchain project-root discovery and path classification shared by coverage providers, review verifiers, and the risk builder.

Package ui holds the embedded web assets: HTML templates and static files.

Package version holds build-time version metadata, overridable via -ldflags.