@nxuss/lemma 0.9.0 → 0.9.2

package/dist/cjs/pr-review/reviewRunner.js

@@ -0,0 +1,97 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getAdapter = getAdapter;
+exports.getTokenForPlatform = getTokenForPlatform;
+exports.runPRReview = runPRReview;
+const PRReviewEngine_1 = require("./PRReviewEngine");
+const ReviewStore_1 = require("./ReviewStore");
+const BrainBridge_1 = require("./bridge/BrainBridge");
+const GitHubAdapter_1 = require("./adapters/GitHubAdapter");
+const AzureDevOpsAdapter_1 = require("./adapters/AzureDevOpsAdapter");
+const GitLabAdapter_1 = require("./adapters/GitLabAdapter");
+const brainBridge = new BrainBridge_1.BrainBridge();
+function getAdapter(platform, token) {
+    switch (platform) {
+        case "github": return new GitHubAdapter_1.GitHubAdapter(token);
+        case "azure": return new AzureDevOpsAdapter_1.AzureDevOpsAdapter(token);
+        case "gitlab": return new GitLabAdapter_1.GitLabAdapter(token);
+        default: throw new Error(`Unsupported platform: ${platform}`);
+    }
+}
+function getTokenForPlatform(platform) {
+    const token = process.env[platform === "github" ? "GITHUB_TOKEN"
+        : platform === "azure" ? "AZURE_DEVOPS_TOKEN"
+            : "GITLAB_TOKEN"] || "";
+    if (!token) {
+        throw new Error(`No ${platform} token found. Set ${platform === "github" ? "GITHUB_TOKEN"
+            : platform === "azure" ? "AZURE_DEVOPS_TOKEN"
+                : "GITLAB_TOKEN"} environment variable.`);
+    }
+    return token;
+}
+async function runPRReview(platform, repo, prNumber, options = {}) {
+    const autoApprove = options.autoApprove !== false;
+    const threshold = options.threshold || 90;
+    const token = getTokenForPlatform(platform);
+    const adapter = getAdapter(platform, token);
+    const [owner, ...repoParts] = repo.split("/");
+    const repoName = repoParts.join("/");
+    const [diffFiles, metadata, baseBranch] = await Promise.all([
+        adapter.getPRDiff(owner, repoName, prNumber),
+        adapter.getPRMetadata(owner, repoName, prNumber),
+        adapter.getBaseBranch(owner, repoName, prNumber),
+    ]);
+    const filePaths = diffFiles.map(df => df.path);
+    const priorBugs = await brainBridge.findPriorBugs(filePaths);
+    let extras = "";
+    if (priorBugs.size > 0) {
+        extras += `\n\n🧠 **Prior bug context from The Brain:**\n`;
+        for (const [file, memories] of priorBugs) {
+            extras += `- ${file}: ${memories.length} related memories\n`;
+        }
+    }
+    const result = (0, PRReviewEngine_1.runAnalysis)(diffFiles, { threshold, autoApprove }, process.cwd(), baseBranch);
+    const review = ReviewStore_1.ReviewStore.create({
+        score: result.score,
+        verdict: result.verdict,
+        findings: result.findings,
+        summary: result.summary,
+        approved: false,
+        metadata,
+    });
+    const commentBody = [
+        `# 🔍 Lemma PR Review — #${prNumber} ${metadata.title}`,
+        ``,
+        `**Score:** ${result.score}/100 | **Verdict:** ${result.verdict}`,
+        `**Files:** ${diffFiles.length} | **Findings:** ${result.findings.length}`,
+        extras,
+        ``,
+        result.summary,
+        ``,
+        `---`,
+        `*Review ID: ${review.reviewId}*`,
+    ].join("\n");
+    await adapter.postComment(owner, repoName, prNumber, commentBody);
+    let approved = false;
+    if (result.verdict === "APPROVED" && autoApprove) {
+        await adapter.submitReview(owner, repoName, prNumber, "APPROVE", `✅ Auto-approved by Lemma PR Review (score: ${result.score}/100, threshold: ${threshold})`);
+        approved = true;
+    }
+    else if (result.verdict === "CHANGES_REQUESTED") {
+        await adapter.submitReview(owner, repoName, prNumber, "REQUEST_CHANGES", `❌ Changes requested by Lemma PR Review (score: ${result.score}/100, threshold: ${threshold})`);
+    }
+    try {
+        await adapter.setStatus(owner, repoName, metadata.headSha, result.score >= threshold ? "success" : "failure", `Lemma PR Review: ${result.score}/100 — ${result.verdict}`);
+    }
+    catch { }
+    await brainBridge.storeReview(review.reviewId, repo, prNumber, result.score, result.verdict, result.findings, filePaths);
+    return {
+        reviewId: review.reviewId,
+        score: result.score,
+        verdict: result.verdict,
+        findingsCount: result.findings.length,
+        approved,
+        summary: result.summary,
+    };
+}
+//# sourceMappingURL=reviewRunner.js.map

package/dist/cjs/pr-review/reviewRunner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewRunner.js","sourceRoot":"","sources":["../../../src/pr-review/reviewRunner.ts"],"names":[],"mappings":";;AAWA,gCAOC;AAED,kDAgBC;AAwBD,kCA4FC;AAxJD,qDAA+C;AAC/C,+CAA4C;AAC5C,sDAAmD;AACnD,4DAAyD;AACzD,sEAAmE;AACnE,4DAAyD;AAIzD,MAAM,WAAW,GAAG,IAAI,yBAAW,EAAE,CAAC;AAEtC,SAAgB,UAAU,CAAC,QAAgB,EAAE,KAAa;IACxD,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ,CAAC,CAAC,OAAO,IAAI,6BAAa,CAAC,KAAK,CAAC,CAAC;QAC/C,KAAK,OAAO,CAAC,CAAC,OAAO,IAAI,uCAAkB,CAAC,KAAK,CAAC,CAAC;QACnD,KAAK,QAAQ,CAAC,CAAC,OAAO,IAAI,6BAAa,CAAC,KAAK,CAAC,CAAC;QAC/C,OAAO,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED,SAAgB,mBAAmB,CAAC,QAAgB;IAClD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CACvB,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc;QACtC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,oBAAoB;YAC7C,CAAC,CAAC,cAAc,CACjB,IAAI,EAAE,CAAC;IACR,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,MAAM,QAAQ,qBACZ,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc;YACtC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,oBAAoB;gBAC7C,CAAC,CAAC,cACJ,wBAAwB,CACzB,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAwBM,KAAK,UAAU,WAAW,CAC/B,QAAkB,EAClB,IAAY,EACZ,QAAgB,EAChB,UAA2B,EAAE;IAE7B,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,KAAK,KAAK,CAAC;IAClD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAE5C,MAAM,CAAC,KAAK,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAErC,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC1D,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC;QAC5C,OAAO,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC;QAChD,OAAO,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC;KACjD,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IAE7D,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,gDAAgD,CAAC;QAC3D,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,SAAS,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,IAAI,KAAK,QAAQ,CAAC,MAAM,qBAAqB,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,4BAAW,EAAC,SAAS,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,CAAC,CAAC;IAE7F,MAAM,MAAM,GAAG,yBAAW,CAAC,MAAM,CAAC;QAChC,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,KAAK;QACf,QAAQ;KACT,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG;QAClB,2BAA2B,QAAQ,IAAI,QAAQ,CAAC,KAAK,EAAE;QACvD,EAAE;QACF,cAAc,MAAM,CAAC,KAAK,uBAAuB,MAAM,CAAC,OAAO,EAAE;QACjE,cAAc,SAAS,CAAC,MAAM,oBAAoB,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE;QAC1E,MAAM;QACN,EAAE;QACF,MAAM,CAAC,OAAO;QACd,EAAE;QACF,KAAK;QACL,eAAe,MAAM,CAAC,QAAQ,GAAG;KAClC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;IAElE,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,MAAM,CAAC,OAAO,KAAK,UAAU,IAAI,WAAW,EAAE,CAAC;QACjD,MAAM,OAAO,CAAC,YAAY,CACxB,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EACpC,8CAA8C,MAAM,CAAC,KAAK,oBAAoB,SAAS,GAAG,CAC3F,CAAC;QACF,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;SAAM,IAAI,MAAM,CAAC,OAAO,KAAK,mBAAmB,EAAE,CAAC;QAClD,MAAM,OAAO,CAAC,YAAY,CACxB,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,EAC5C,kDAAkD,MAAM,CAAC,KAAK,oBAAoB,SAAS,GAAG,CAC/F,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,SAAS,CACrB,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,EACjC,MAAM,CAAC,KAAK,IAAI,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EACjD,oBAAoB,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,OAAO,EAAE,CAC3D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IAEV,MAAM,WAAW,CAAC,WAAW,CAC3B,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAC/B,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,CACzD,CAAC;IAEF,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;QACrC,QAAQ;QACR,OAAO,EAAE,MAAM,CAAC,OAAO;KACxB,CAAC;AACJ,CAAC"}

package/dist/cjs/pr-review/types.d.ts

@@ -0,0 +1,80 @@
+export type Severity = "CRITICAL" | "HIGH" | "MEDIUM" | "LOW";
+export type Verdict = "APPROVED" | "NEUTRAL" | "CHANGES_REQUESTED";
+export type Platform = "github" | "azure" | "gitlab";
+export type ReviewEvent = "APPROVE" | "REQUEST_CHANGES" | "COMMENT";
+export type StatusState = "pending" | "success" | "failure" | "error";
+export interface Finding {
+    ruleId: string;
+    severity: Severity;
+    category: "security" | "regression" | "static" | "quality";
+    filePath: string;
+    line?: number;
+    message: string;
+    detail?: string;
+    suggestion?: string;
+    score: number;
+}
+export interface DiffFile {
+    path: string;
+    status: "added" | "modified" | "deleted" | "renamed";
+    additions: number;
+    deletions: number;
+    content?: string;
+    patch?: string;
+}
+export interface PRMetadata {
+    owner: string;
+    repo: string;
+    prNumber: number;
+    title: string;
+    description?: string;
+    baseBranch: string;
+    headBranch: string;
+    headSha: string;
+    author: string;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface AnalyzeResult {
+    score: number;
+    verdict: Verdict;
+    findings: Finding[];
+    summary: string;
+}
+export interface PRReviewResult {
+    reviewId: string;
+    score: number;
+    verdict: Verdict;
+    findings: Finding[];
+    summary: string;
+    approved: boolean;
+    timestamp: string;
+    metadata?: PRMetadata;
+}
+export interface AnalyzerConfig {
+    threshold: number;
+    autoApprove: boolean;
+}
+export interface DiffAnalysisRequest {
+    diff: string;
+    baseBranch?: string;
+    workspaceRoot?: string;
+}
+export interface PRReviewRequest {
+    platform: Platform;
+    repo: string;
+    prNumber: number;
+    autoApprove?: boolean;
+    threshold?: number;
+    context?: string;
+}
+export interface WorkflowConfig {
+    platform: Platform;
+    autoApprove: boolean;
+    threshold: number;
+}
+export interface AdapterConfig {
+    token?: string;
+    baseUrl?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/cjs/pr-review/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/pr-review/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAC9D,MAAM,MAAM,OAAO,GAAG,UAAU,GAAG,SAAS,GAAG,mBAAmB,CAAC;AACnE,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC;AACrD,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,iBAAiB,GAAG,SAAS,CAAC;AACpE,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;AAEtE,MAAM,WAAW,OAAO;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,QAAQ,CAAC;IACnB,QAAQ,EAAE,UAAU,GAAG,YAAY,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC3D,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,UAAU,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,QAAQ,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,QAAQ,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB"}

package/dist/cjs/pr-review/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/cjs/pr-review/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/pr-review/types.ts"],"names":[],"mappings":""}

package/dist/cjs/pr-review/webhook/WebhookServer.d.ts

@@ -0,0 +1,3 @@
+import { Router } from "express";
+export declare function createWebhookRouter(): Router;
+//# sourceMappingURL=WebhookServer.d.ts.map

package/dist/cjs/pr-review/webhook/WebhookServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"WebhookServer.d.ts","sourceRoot":"","sources":["../../../../src/pr-review/webhook/WebhookServer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAqB,MAAM,SAAS,CAAC;AAUpD,wBAAgB,mBAAmB,IAAI,MAAM,CA+G5C"}

package/dist/cjs/pr-review/webhook/WebhookServer.js

@@ -0,0 +1,114 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createWebhookRouter = createWebhookRouter;
+const express_1 = require("express");
+const crypto_1 = __importDefault(require("crypto"));
+const reviewRunner_1 = require("../reviewRunner");
+function verifyGitHubSignature(payload, signature, secret) {
+    const sig = `sha256=${crypto_1.default.createHmac("sha256", secret).update(payload).digest("hex")}`;
+    if (signature.length !== sig.length)
+        return false;
+    return crypto_1.default.timingSafeEqual(Buffer.from(sig), Buffer.from(signature));
+}
+function createWebhookRouter() {
+    const router = (0, express_1.Router)();
+    router.post("/github", async (req, res) => {
+        const signature = req.headers["x-hub-signature-256"];
+        const event = req.headers["x-github-event"];
+        const webhookSecret = process.env.GITHUB_WEBHOOK_SECRET || "";
+        if (webhookSecret && signature) {
+            const rawBody = JSON.stringify(req.body);
+            if (!verifyGitHubSignature(rawBody, signature, webhookSecret)) {
+                res.status(401).json({ error: "Invalid signature" });
+                return;
+            }
+        }
+        if (event !== "pull_request") {
+            res.status(200).json({ status: "ignored", event });
+            return;
+        }
+        const action = req.body.action;
+        if (action !== "opened" && action !== "synchronize") {
+            res.status(200).json({ status: "ignored", action });
+            return;
+        }
+        const pr = req.body.pull_request;
+        const repo = req.body.repository;
+        const owner = repo.owner.login;
+        const repoName = repo.name;
+        const prNumber = pr.number;
+        const fullRepo = `${owner}/${repoName}`;
+        if (!process.env.GITHUB_TOKEN) {
+            res.status(500).json({ error: "GITHUB_TOKEN not set" });
+            return;
+        }
+        try {
+            const result = await (0, reviewRunner_1.runPRReview)("github", fullRepo, prNumber, {
+                threshold: parseInt(process.env.LEMMA_THRESHOLD || "90", 10),
+                autoApprove: process.env.LEMMA_AUTO_APPROVE !== "false",
+            });
+            res.json({ status: "ok", ...result });
+        }
+        catch (err) {
+            console.error("[Webhook] GitHub review failed:", err.message);
+            res.status(500).json({ error: err.message });
+        }
+    });
+    router.post("/azure", async (req, res) => {
+        const eventType = req.body.eventType;
+        if (eventType !== "git.pullrequest.created" && eventType !== "git.pullrequest.updated") {
+            res.status(200).json({ status: "ignored", eventType });
+            return;
+        }
+        const resource = req.body.resource;
+        const prNumber = resource?.pullRequestId;
+        const repoName = resource?.repository?.name;
+        const projectName = resource?.repository?.project?.name;
+        if (!prNumber || !repoName || !projectName || !process.env.AZURE_DEVOPS_TOKEN) {
+            res.status(500).json({ error: "Missing required Azure DevOps webhook fields or AZURE_DEVOPS_TOKEN" });
+            return;
+        }
+        const fullRepo = `${projectName}/${repoName}`;
+        try {
+            const result = await (0, reviewRunner_1.runPRReview)("azure", fullRepo, prNumber, {
+                threshold: parseInt(process.env.LEMMA_THRESHOLD || "90", 10),
+                autoApprove: process.env.LEMMA_AUTO_APPROVE !== "false",
+            });
+            res.json({ status: "ok", ...result });
+        }
+        catch (err) {
+            console.error("[Webhook] Azure review failed:", err.message);
+            res.status(500).json({ error: err.message });
+        }
+    });
+    router.post("/gitlab", async (req, res) => {
+        const objectKind = req.body.object_kind;
+        if (objectKind !== "merge_request") {
+            res.status(200).json({ status: "ignored", object_kind: objectKind });
+            return;
+        }
+        const mr = req.body.object_attributes;
+        const prNumber = mr?.iid;
+        const projectPath = req.body.project?.path_with_namespace;
+        if (!prNumber || !projectPath || !process.env.GITLAB_TOKEN) {
+            res.status(500).json({ error: "Missing required GitLab webhook fields or GITLAB_TOKEN" });
+            return;
+        }
+        try {
+            const result = await (0, reviewRunner_1.runPRReview)("gitlab", projectPath, prNumber, {
+                threshold: parseInt(process.env.LEMMA_THRESHOLD || "90", 10),
+                autoApprove: process.env.LEMMA_AUTO_APPROVE !== "false",
+            });
+            res.json({ status: "ok", ...result });
+        }
+        catch (err) {
+            console.error("[Webhook] GitLab review failed:", err.message);
+            res.status(500).json({ error: err.message });
+        }
+    });
+    return router;
+}
+//# sourceMappingURL=WebhookServer.js.map

package/dist/cjs/pr-review/webhook/WebhookServer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WebhookServer.js","sourceRoot":"","sources":["../../../../src/pr-review/webhook/WebhookServer.ts"],"names":[],"mappings":";;;;;AAUA,kDA+GC;AAzHD,qCAAoD;AACpD,oDAA4B;AAC5B,kDAA8C;AAE9C,SAAS,qBAAqB,CAAC,OAAe,EAAE,SAAiB,EAAE,MAAc;IAC/E,MAAM,GAAG,GAAG,UAAU,gBAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAC1F,IAAI,SAAS,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAClD,OAAO,gBAAM,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,SAAgB,mBAAmB;IACjC,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAC;IAExB,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAC3D,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,qBAAqB,CAAW,CAAC;QAC/D,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAW,CAAC;QACtD,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE,CAAC;QAE9D,IAAI,aAAa,IAAI,SAAS,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,CAAC,qBAAqB,CAAC,OAAO,EAAE,SAAS,EAAE,aAAa,CAAC,EAAE,CAAC;gBAC9D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBACrD,OAAO;YACT,CAAC;QACH,CAAC;QAED,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;YAC7B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;QAC/B,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;YACpD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QAED,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC;QACjC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;QAC3B,MAAM,QAAQ,GAAG,EAAE,CAAC,MAAM,CAAC;QAC3B,MAAM,QAAQ,GAAG,GAAG,KAAK,IAAI,QAAQ,EAAE,CAAC;QAExC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;YAC9B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAA,0BAAW,EAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE;gBAC7D,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,EAAE,EAAE,CAAC;gBAC5D,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,OAAO;aACxD,CAAC,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAC9D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAC1D,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;QACrC,IAAI,SAAS,KAAK,yBAAyB,IAAI,SAAS,KAAK,yBAAyB,EAAE,CAAC;YACvF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;QACnC,MAAM,QAAQ,GAAG,QAAQ,EAAE,aAAa,CAAC;QACzC,MAAM,QAAQ,GAAG,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC;QAC5C,MAAM,WAAW,GAAG,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;QAExD,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,IAAI,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC;YAC9E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oEAAoE,EAAE,CAAC,CAAC;YACtG,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,WAAW,IAAI,QAAQ,EAAE,CAAC;QAE9C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAA,0BAAW,EAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE;gBAC5D,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,EAAE,EAAE,CAAC;gBAC5D,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,OAAO;aACxD,CAAC,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAC7D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAC3D,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;QACxC,IAAI,UAAU,KAAK,eAAe,EAAE,CAAC;YACnC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QAED,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC;QACtC,MAAM,QAAQ,GAAG,EAAE,EAAE,GAAG,CAAC;QACzB,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,mBAAmB,CAAC;QAE1D,IAAI,CAAC,QAAQ,IAAI,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;YAC3D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wDAAwD,EAAE,CAAC,CAAC;YAC1F,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAA,0BAAW,EAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE;gBAChE,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,EAAE,EAAE,CAAC;gBAC5D,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,OAAO;aACxD,CAAC,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAC9D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/cjs/pr-review/webhook/index.d.ts

@@ -0,0 +1,2 @@
+export { createWebhookRouter } from "./WebhookServer";
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/pr-review/webhook/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/pr-review/webhook/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/cjs/pr-review/webhook/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createWebhookRouter = void 0;
+var WebhookServer_1 = require("./WebhookServer");
+Object.defineProperty(exports, "createWebhookRouter", { enumerable: true, get: function () { return WebhookServer_1.createWebhookRouter; } });
+//# sourceMappingURL=index.js.map

package/dist/cjs/pr-review/webhook/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/pr-review/webhook/index.ts"],"names":[],"mappings":";;;AAAA,iDAAsD;AAA7C,oHAAA,mBAAmB,OAAA"}

package/dist/esm/cli/lemma-proxy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lemma-proxy.d.ts","sourceRoot":"","sources":["../../../src/cli/lemma-proxy.ts"],"names":[],"mappings":";AAsbA,wBAAgB,+BAA+B,CAAC,OAAO,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CA4DvF;AAmgED,wBAAsB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA6KhL"}
+{"version":3,"file":"lemma-proxy.d.ts","sourceRoot":"","sources":["../../../src/cli/lemma-proxy.ts"],"names":[],"mappings":";AA2cA,wBAAgB,+BAA+B,CAAC,OAAO,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CA4DvF;AAugED,wBAAsB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA6KhL"}

package/dist/esm/cli/lemma-proxy.js

@@ -36,6 +36,7 @@ function ask(query) {
 import ComplexityRouter from '../proxy/ComplexityRouter';
 import SemanticScrubber from '../security/SemanticScrubber';
 import CloudSyncClient from '../cloud/CloudSyncClient';
+import { runPRReview } from '../pr-review/reviewRunner';
 import { pruneHistoryMessages, squeezePrompt } from '../utils/ContextSqueezer';
 import { AgentMultiplexer } from '../proxy/AgentMultiplexer';
 import { SseRelay } from '../proxy/SseRelay';
@@ -366,6 +367,26 @@ enabled = true
         }
     }
     catch { }
+    // Register lemma MCP server in OpenCode user config (~/.opencode.json)
+    const openCodeMcpFile = path.join(os.homedir(), '.opencode.json');
+    try {
+        let openCodeConfig = {};
+        if (fs.existsSync(openCodeMcpFile)) {
+            openCodeConfig = JSON.parse(fs.readFileSync(openCodeMcpFile, 'utf8'));
+        }
+        if (!openCodeConfig.mcp)
+            openCodeConfig.mcp = {};
+        if (!openCodeConfig.mcp.lemma) {
+            openCodeConfig.mcp.lemma = {
+                command: "npx",
+                args: ["-y", "@nxuss/lemma", "mcp"],
+                enabled: true
+            };
+            fs.writeFileSync(openCodeMcpFile, JSON.stringify(openCodeConfig, null, 2));
+            console.log('✅ [OpenCode] Registered lemma MCP server in ~/.opencode.json');
+        }
+    }
+    catch { }
     console.log(`✅ Auto-configured Lemma for [${project}]`);
 }
 const EVENT_LOG = [];
@@ -416,6 +437,7 @@ function injectIdeRules(projectName) {
         { name: 'Cursor (v2)', path: path.join(process.cwd(), '.cursor/rules/lemma.mdc') },
         { name: 'Windsurf', path: path.join(process.cwd(), '.windsurfrules') },
         { name: 'Cline', path: path.join(process.cwd(), '.clinerules') },
+        { name: 'OpenCode', path: path.join(process.cwd(), '.opencode.md') },
     ];
     for (const target of rulesTargets) {
         try {
@@ -1507,6 +1529,9 @@ class LemmaServer {
             });
             this.app.get('/dashboard/*', (req, res) => res.sendFile(path.join(this.dashboardPath, 'index.html')));
         }
+        // Mount PR Review webhook endpoints
+        const { createWebhookRouter } = require('../pr-review/webhook/WebhookServer');
+        this.app.use('/api/webhook', createWebhookRouter());
     }
     startWorkspaceTimeWatcher() {
         const cwd = process.cwd();
@@ -2331,7 +2356,7 @@ program.command('init')
             console.log('\n🧠 \x1b[35mAuto-configuring MCP for AI IDEs...\x1b[0m');
         }
         else {
-            const ans = await ask('\n🧠 Configure MCP servers for your IDEs (Claude, Cursor, Windsurf, VS Code, Kiro, Codex)? (Y/n): ');
+            const ans = await ask('\n🧠 Configure MCP servers for your IDEs (Claude, Cursor, Windsurf, VS Code, OpenCode, Kiro, Codex)? (Y/n): ');
             if (ans.toLowerCase() === 'n' || ans.toLowerCase() === 'no') {
                 opts.configure = false;
                 console.log('⏭️  Skipping IDE auto-configuration');
@@ -2607,6 +2632,32 @@ program.command('clipboard')
         process.exit(1);
     }
 });
+program.command('pr-review')
+    .description('Run PR review via CLI (reads env vars for CI/CD: LEMMA_PLATFORM, LEMMA_REPO, LEMMA_PR_NUMBER)')
+    .option('-p, --platform <platform>', 'Git platform (github, azure, gitlab)')
+    .option('-r, --repo <repo>', 'Repository (owner/repo)')
+    .option('-n, --pr-number <number>', 'PR number')
+    .option('-t, --threshold <number>', 'Score threshold for auto-approve', '90')
+    .option('--no-auto-approve', 'Skip auto-approve even if score meets threshold')
+    .action(async (opts) => {
+    const platform = opts.platform || process.env.LEMMA_PLATFORM || '';
+    const repo = opts.repo || process.env.LEMMA_REPO || '';
+    const prNumber = opts.prNumber || process.env.LEMMA_PR_NUMBER || '';
+    const threshold = parseInt(opts.threshold, 10);
+    const autoApprove = opts.autoApprove !== false;
+    if (!platform || !repo || !prNumber) {
+        console.error('Error: platform, repo, and pr-number are required.\nSet via args or LEMMA_PLATFORM, LEMMA_REPO, LEMMA_PR_NUMBER env vars.');
+        process.exit(1);
+    }
+    try {
+        const result = await runPRReview(platform, repo, parseInt(prNumber, 10), { threshold, autoApprove });
+        console.log(JSON.stringify(result, null, 2));
+    }
+    catch (err) {
+        console.error(`PR review failed: ${err.message}`);
+        process.exit(1);
+    }
+});
 if (process.argv[1] && (process.argv[1].includes('lemma') || process.argv[1].endsWith('.cjs') || process.argv[1].endsWith('.js'))) {
     // Bare `lemma` with no args → show welcome screen
     if (process.argv.length <= 2) {