fix(review): run AI review for every PR author by default, not just confirmed contributors

[JSONbored]

Summary

• AI review was silently skipped by default for any PR author who wasn't a confirmed Gittensor contributor, leaving new/unconfirmed contributors with LESS scrutiny than established ones -- backwards from the intended security posture.
• AI review now runs for every author once a repo has aiReviewMode set to something other than off. A new opt-in aiReviewConfirmedContributorsOnly setting lets a self-hoster deliberately narrow back down to confirmed-contributors-only (to bound AI spend); aiReviewAllAuthors still widens back out within that narrowed mode, unchanged.
• Extracted the eligibility check into a single shared resolveAiReviewableAuthor helper used by both the "should we start a review" gate and the execution-time guard, so the two can no longer drift out of sync.

Test plan

• npx tsc --noEmit
• npx tsx scripts/check-docs-drift.mjs
• npm run ui:openapi:settings-parity / npm run ui:openapi:check
• npm run test:ci (full local gate, green)
• New invariant tests for resolveAiReviewableAuthor (default-runs-for-everyone + opt-in-narrows) in test/unit/ai-review-advisory.test.ts
• Updated two queue-3.test.ts tests whose aiCalls === 0 assertion was only ever true as a side effect of the bug being fixed (verified the deterministic screenshot-table/contributor-cap gates were never actually wired to suppress AI review -- only authorBlacklisted is, and that test still passes unaffected)
• Added a settings-preview.test.ts case covering both branches of the new field's nullish fallback

[superagent-security]

Superagent didn't find any vulnerabilities or security issues in this PR.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	loopover-ui	56c4742	Commit Preview URL Branch Preview URL	Jul 14 2026, 09:35 AM

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 95.06%. Comparing base (634e121) to head (56c4742).
⚠️ Report is 1 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #5732   +/-   ##
=======================================
  Coverage   95.06%   95.06%           
=======================================
  Files         581      581           
  Lines       46179    46181    +2     
  Branches    14811    14811           
=======================================
+ Hits        43902    43904    +2     
  Misses       1516     1516           
  Partials      761      761           

Flag	Coverage Δ
shard-1	43.95% <42.85%> (-0.01%)	⬇️
shard-2	35.71% <42.85%> (-0.01%)	⬇️
shard-3	32.27% <42.85%> (+<0.01%)	⬆️
shard-4	33.01% <42.85%> (+<0.01%)	⬆️
shard-5	31.76% <100.00%> (+<0.01%)	⬆️
shard-6	44.63% <57.14%> (+0.16%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

Files with missing lines	Coverage Δ
packages/gittensory-engine/src/focus-manifest.ts	99.10% <100.00%> (ø)
src/openapi/schemas.ts	100.00% <ø> (ø)
src/queue/ai-review-orchestration.ts	100.00% <100.00%> (ø)
src/signals/settings-preview.ts	98.64% <100.00%> (+<0.01%)	⬆️
src/types.ts	100.00% <ø> (ø)

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.