📋 Add command to intelligently triage and address PR review comments

Automates the PR review feedback loop by intelligently triaging bot
comments against project standards, distinguishing between actionable
issues (security, bugs, maintainability) and noise (edge cases,
over-engineering). Reduces manual review burden while maintaining code
quality standards.

Author: Nick Sullivan

.claude/commands/address-pr-comments.md

@@ -0,0 +1,104 @@
+---
+description: Triage and address PR comments from code review bots intelligently
+argument-hint: [pr-number]
+---
+
+# Address PR Comments
+
+<objective>
+Get a PR to "ready to merge" by intelligently triaging bot feedback. You have context
+bots lack - use judgment, not compliance. Declining feedback is as valid as accepting
+it. The goal is "ready to merge," not "zero comments."
+
+Read @rules/code-review-standards.mdc for triage principles:
+
+- Fix critical bugs, ensure security, validate core behavior
+- Skip theoretical edge cases, minor polish, over-engineering suggestions
+- Trust runtime validation over compile-time perfection
+- Constants for DRY, not to avoid "magic strings"
+- Target 90% coverage, not 100%
+- Optimize when metrics show problems, not preemptively </objective>
+
+<usage>
+/address-pr-comments - Auto-detect PR from current branch
+/address-pr-comments 123 - Address comments on PR #123
+</usage>
+
+<pr-detection>
+Use provided PR number, or detect from current branch. Exit if no PR exists.
+</pr-detection>
+
+<comment-sources>
+Code review bots comment in different places. Fetch both:
+- PR comments (general feedback on the PR itself)
+- Review comments (inline on specific code lines)
+- Reviews (approval status with body text)
+
+Identify bot comments by author - automated usernames like cursor-bot,
+claude-code-review, greptile-bot. Human comments require different handling.
+</comment-sources>
+
+<autonomous-wait-loop>
+This command runs autonomously - no user prompts, just do the work.
+
+Review bots (Claude, Cursor Bot) register as GitHub checks. Use `gh pr checks --watch`
+to wait for them to complete, then fetch and triage comments.
+
+After fixes are pushed, wait for checks again - bots re-analyze new commits. Exit only
+when checks pass with no new actionable feedback.
+
+While waiting, give feedback on existing bot comments (reactions for good/bad
+suggestions) and narrate what you're seeing. Share interesting findings:
+
+- "Cursor Bot found a real bug - if the user's session expires mid-request, we'd hit a
+  null pointer at auth.ts:47. Good catch, will fix."
+- "Greptile wants me to extract `timeout: 30000` into a constant. It's used once and the
+  meaning is obvious. Declining with thumbs-down."
+- "Claude flagged SQL injection risk in the search query - we're interpolating user
+  input directly. Legit security issue, addressing."
+- "Three comments about adding try-catch to already-safe operations. Bots are being
+  paranoid today."
+
+Share what the bots found when it's interesting. Make the wait informative.
+</autonomous-wait-loop>
+
+<triage-process>
+For each bot comment, evaluate against code-review-standards.mdc:
+
+Address immediately:
+
+- Security vulnerabilities
+- Actual bugs that could cause runtime failures
+- Core functionality issues
+- Clear improvements to maintainability
+
+Decline with explanation:
+
+- Theoretical race conditions without demonstrated impact
+- Magic number/string extraction for single-use values
+- Accessibility improvements (not current priority)
+- Minor type safety refinements when runtime handles it
+- Edge case tests for unlikely scenarios
+- Performance micro-optimizations without profiling data
+- Documentation enhancements beyond core docs
+
+Show triage summary, then proceed autonomously. </triage-process>
+
+<addressing-comments>
+For addressable items: make the fix, commit, reply acknowledging the change.
+
+For declined items: reply with brief, professional explanation referencing project
+standards. Thumbs down for incorrect suggestions. </addressing-comments>
+
+<human-comments>
+Human reviewer comments get flagged for user attention, not auto-handled. Present
+separately from bot comments.
+</human-comments>
+
+<completion>
+Push changes, wait for checks to pass, handle any new bot comments on the updated code.
+Repeat until stable with no new actionable feedback.
+
+When the PR is ready to merge: celebrate! Share the joy of clean code shipping. Express
+genuine delight that this work is ready to land. A well-triaged PR is a beautiful thing.
+</completion>