repopilot 0.15.0

Local-first CLI for repository audit, architecture risk detection, baseline tracking, and CI-friendly code review.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73

# Local Feedback

RepoPilot can read local suppressions from:

```text
.repopilot/feedback.yml
```

Minimal example:

```yaml
suppressions:
  - rule_id: architecture.large-file
    path: "src/generated/schema.rs"
    reason: generated schema boundary
```

Run normally. RepoPilot applies matching suppressions before rendering console,
Markdown, JSON, review, and receipt output:

```bash
repopilot scan .
repopilot review .
```

Inspect local feedback before committing it:

```bash
repopilot inspect feedback .
repopilot inspect feedback . --format json
repopilot inspect feedback . --evaluate --format json
```

By default, `inspect feedback` only validates `.repopilot/feedback.yml` and
renders diagnostics. Use `--evaluate` when you need matched and unmatched
suppression results against current findings. Evaluation is heavier because it
runs a repository scan before applying local feedback.

Ignore local feedback when you want the raw report:

```bash
repopilot scan . --ignore-feedback
repopilot review . --ignore-feedback
```

RepoPilot validates feedback as structured YAML. Malformed YAML and entries
without `rule_id` or `path` are reported as diagnostics during validation.
Suppressions that do not match current findings are reported when feedback is
evaluated by `inspect feedback --evaluate`, `scan`, or `review`. Matching
suppressions are counted in `local_feedback`:

```json
{
  "local_feedback": {
    "feedback_path": ".repopilot/feedback.yml",
    "suppressions_loaded": 1,
    "suppressed_findings_count": 1,
    "unmatched_suppressions_count": 0,
    "invalid_suppressions_count": 0,
    "unmatched_suppressions": [],
    "parse_error": null
  }
}
```

This is repository-local calibration, not remote learning. RepoPilot does not
upload feedback files, source code, or suppression history.

## Commit policy

Do not commit `.repopilot/feedback.yml` by default. Commit it only when the
suppressions are intentionally team-reviewed and part of repository policy.
Personal or temporary suppressions should stay uncommitted.