@nxuss/lemma 0.9.1 → 0.9.2

package/dist/esm/pr-review/analyzers/SecurityScanner.js

@@ -0,0 +1,107 @@
+const SECRET_PATTERNS = [
+    { ruleId: "sec-api-key", pattern: /(?:sk-|pk-|api[_-]?key|apikey)[\s"':=]+([A-Za-z0-9_\-]{20,})/gi, label: "API key", severity: "CRITICAL" },
+    { ruleId: "sec-password", pattern: /(?:password|passwd|pwd)[\s"':=]+([A-Za-z0-9!@#$%^&*()_+\-={}|;:',.<>?]{8,})/gi, label: "Password", severity: "CRITICAL" },
+    { ruleId: "sec-token", pattern: /(?:token|secret|auth)[\s"':=]+([A-Za-z0-9_\-\.]{16,})/gi, label: "Token/Secret", severity: "CRITICAL" },
+    { ruleId: "sec-private-key", pattern: /-----BEGIN\s+(RSA|EC|DSA|OPENSSH)\s+PRIVATE\s+KEY-----/, label: "Private key", severity: "CRITICAL" },
+    { ruleId: "sec-connection-string", pattern: /(?:mongodb|postgresql|mysql|redis):\/\/[^\s"']+/gi, label: "Connection string", severity: "CRITICAL" },
+];
+const SQL_INJECTION_PATTERNS = [
+    { ruleId: "sec-sql-concat", pattern: /(?:SELECT|INSERT|UPDATE|DELETE)\s+.*?["'`]\s*\+\s*(?:req\.|params|body|query|input|userInput|variable)/is, label: "SQL concatenation" },
+    { ruleId: "sec-sql-template", pattern: /(?:query|execute|run)\s*\(\s*`[^`]*\$\{/gi, label: "SQL template injection" },
+];
+const CI_PATTERNS = [
+    { ruleId: "sec-exec-user-input", pattern: /(?:exec|execSync|spawn|execFile)\s*\(\s*(?:`[^`]*\$\{|["'][^"']*["']\s*\+)/gi, label: "Command injection via exec/spawn", severity: "CRITICAL" },
+    { ruleId: "sec-eval", pattern: /\beval\s*\(\s*(?:req\.|params|body|query|input|userInput)/gi, label: "eval() with user input", severity: "CRITICAL" },
+];
+const XSS_PATTERNS = [
+    { ruleId: "sec-inner-html", pattern: /\.innerHTML\s*=\s*(?:`[^`]*\$\{|["'][^"']*["']\s*\+)/gi, label: "innerHTML assignment", severity: "HIGH" },
+    { ruleId: "sec-dangerously-set", pattern: /dangerouslySetInnerHTML/gi, label: "dangerouslySetInnerHTML", severity: "MEDIUM" },
+];
+const PT_PATTERNS = [
+    { ruleId: "sec-path-traversal", pattern: /(?:readFile|readFileSync|writeFile|writeFileSync|unlink|unlinkSync|existsSync)\s*\(\s*(?:`[^`]*\$\{|["'][^"']*["']\s*\+)/gi, label: "Path traversal risk", severity: "HIGH" },
+];
+const PROTO_PATTERNS = [
+    { ruleId: "sec-proto-pollution", pattern: /\[["']__proto__["']\]|\.__proto__\s*=|Object\.assign\s*\(\s*\{\}/gi, label: "Prototype pollution", severity: "HIGH" },
+];
+export function analyzeSecurity(diffFiles) {
+    const findings = [];
+    let totalScore = 100;
+    for (const df of diffFiles) {
+        if (!df.content || df.status === "deleted")
+            continue;
+        const lines = df.content.split("\n");
+        const allPatterns = [
+            ...SECRET_PATTERNS,
+            ...CI_PATTERNS,
+            ...XSS_PATTERNS,
+            ...PT_PATTERNS,
+            ...PROTO_PATTERNS,
+        ];
+        for (const p of allPatterns) {
+            const matches = df.content.match(p.pattern);
+            if (matches) {
+                const lineNum = lines.findIndex(l => l.match(p.pattern)) + 1;
+                findings.push({
+                    ruleId: p.ruleId,
+                    severity: p.severity,
+                    category: "security",
+                    filePath: df.path,
+                    line: lineNum > 0 ? lineNum : undefined,
+                    message: `${p.label} detected`,
+                    detail: `Security vulnerability: ${p.label} found in changed code.`,
+                    suggestion: p.ruleId === "sec-api-key" ? `Remove hardcoded credentials. Use environment variables or a secrets manager.` :
+                        p.ruleId === "sec-sql-concat" ? `Use parameterized queries or an ORM instead of string concatenation.` :
+                            p.ruleId === "sec-exec-user-input" ? `Avoid executing user input. Use exec only with sanitized, hardcoded commands.` :
+                                p.ruleId === "sec-inner-html" ? `Use textContent or safely sanitize HTML before assigning innerHTML.` :
+                                    `Review this code for security implications.`,
+                    score: p.severity === "CRITICAL" ? -15 : -10,
+                });
+            }
+        }
+        for (const p of SQL_INJECTION_PATTERNS) {
+            const matches = df.content.match(p.pattern);
+            if (matches) {
+                const lineNum = lines.findIndex(l => l.match(p.pattern)) + 1;
+                findings.push({
+                    ruleId: p.ruleId,
+                    severity: "CRITICAL",
+                    category: "security",
+                    filePath: df.path,
+                    line: lineNum > 0 ? lineNum : undefined,
+                    message: `${p.label} detected`,
+                    detail: `SQL injection vulnerability: building queries via string interpolation allows attackers to modify query logic.`,
+                    suggestion: `Use parameterized queries (prepared statements) or an ORM. Never concatenate user input into SQL strings.`,
+                    score: -15,
+                });
+            }
+        }
+        const routePattern = /router\.(get|post|put|delete|patch)\s*\(["'][^"']+["']\s*,/g;
+        const hasAuthMiddleware = /(?:auth|authenticate|authorize|authMiddleware|requireAuth)/.test(df.content);
+        const routeMatches = df.content.match(routePattern);
+        if (routeMatches && !hasAuthMiddleware) {
+            for (const rm of routeMatches) {
+                const isHealth = rm.includes("/health") || rm.includes("/webhook");
+                if (!isHealth) {
+                    const lineNum = lines.findIndex(l => l.includes(rm.substring(0, 30))) + 1;
+                    if (lineNum > 0) {
+                        findings.push({
+                            ruleId: "sec-no-auth",
+                            severity: "HIGH",
+                            category: "security",
+                            filePath: df.path,
+                            line: lineNum,
+                            message: `New route may lack authentication middleware`,
+                            detail: `Routes that handle user data or mutations should have auth middleware.`,
+                            suggestion: `Add authentication middleware to this route handler.`,
+                            score: -10,
+                        });
+                    }
+                }
+            }
+        }
+    }
+    const deduction = findings.reduce((sum, f) => sum + Math.abs(f.score), 0);
+    totalScore = Math.max(0, Math.min(100, totalScore - deduction));
+    return { findings, score: totalScore };
+}
+//# sourceMappingURL=SecurityScanner.js.map

package/dist/esm/pr-review/analyzers/SecurityScanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecurityScanner.js","sourceRoot":"","sources":["../../../../src/pr-review/analyzers/SecurityScanner.ts"],"names":[],"mappings":"AAEA,MAAM,eAAe,GAA6F;IAChH,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,gEAAgE,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE;IAC5I,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,+EAA+E,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE;IAC7J,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,yDAAyD,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,EAAE;IACxI,EAAE,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,wDAAwD,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,EAAE;IAC5I,EAAE,MAAM,EAAE,uBAAuB,EAAE,OAAO,EAAE,mDAAmD,EAAE,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,UAAU,EAAE;CACpJ,CAAC;AAEF,MAAM,sBAAsB,GAA8D;IACxF,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,0GAA0G,EAAE,KAAK,EAAE,mBAAmB,EAAE;IAC7K,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,2CAA2C,EAAE,KAAK,EAAE,wBAAwB,EAAE;CACtH,CAAC;AAEF,MAAM,WAAW,GAA6F;IAC5G,EAAE,MAAM,EAAE,qBAAqB,EAAE,OAAO,EAAE,8EAA8E,EAAE,KAAK,EAAE,kCAAkC,EAAE,QAAQ,EAAE,UAAU,EAAE;IAC3L,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,6DAA6D,EAAE,KAAK,EAAE,wBAAwB,EAAE,QAAQ,EAAE,UAAU,EAAE;CACtJ,CAAC;AAEF,MAAM,YAAY,GAA2F;IAC3G,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,wDAAwD,EAAE,KAAK,EAAE,sBAAsB,EAAE,QAAQ,EAAE,MAAM,EAAE;IAChJ,EAAE,MAAM,EAAE,qBAAqB,EAAE,OAAO,EAAE,2BAA2B,EAAE,KAAK,EAAE,yBAAyB,EAAE,QAAQ,EAAE,QAAQ,EAAE;CAC9H,CAAC;AAEF,MAAM,WAAW,GAAgF;IAC/F,EAAE,MAAM,EAAE,oBAAoB,EAAE,OAAO,EAAE,4HAA4H,EAAE,KAAK,EAAE,qBAAqB,EAAE,QAAQ,EAAE,MAAM,EAAE;CACxN,CAAC;AAEF,MAAM,cAAc,GAAgF;IAClG,EAAE,MAAM,EAAE,qBAAqB,EAAE,OAAO,EAAE,oEAAoE,EAAE,KAAK,EAAE,qBAAqB,EAAE,QAAQ,EAAE,MAAM,EAAE;CACjK,CAAC;AAOF,MAAM,UAAU,eAAe,CAAC,SAAqB;IACnD,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,IAAI,UAAU,GAAG,GAAG,CAAC;IAErB,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,MAAM,KAAK,SAAS;YAAE,SAAS;QAErD,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAErC,MAAM,WAAW,GAAG;YAClB,GAAG,eAAe;YAClB,GAAG,WAAW;YACd,GAAG,YAAY;YACf,GAAG,WAAW;YACd,GAAG,cAAc;SAClB,CAAC;QAEF,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAC5C,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC7D,QAAQ,CAAC,IAAI,CAAC;oBACZ,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,QAAQ,EAAE,UAAU;oBACpB,QAAQ,EAAE,EAAE,CAAC,IAAI;oBACjB,IAAI,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;oBACvC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,WAAW;oBAC9B,MAAM,EAAE,2BAA2B,CAAC,CAAC,KAAK,yBAAyB;oBACnE,UAAU,EAAE,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,+EAA+E,CAAC,CAAC;wBAC/G,CAAC,CAAC,MAAM,KAAK,gBAAgB,CAAC,CAAC,CAAC,sEAAsE,CAAC,CAAC;4BACxG,CAAC,CAAC,MAAM,KAAK,qBAAqB,CAAC,CAAC,CAAC,+EAA+E,CAAC,CAAC;gCACtH,CAAC,CAAC,MAAM,KAAK,gBAAgB,CAAC,CAAC,CAAC,qEAAqE,CAAC,CAAC;oCACvG,6CAA6C;oBACxD,KAAK,EAAE,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;iBAC7C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,sBAAsB,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAC5C,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC7D,QAAQ,CAAC,IAAI,CAAC;oBACZ,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,QAAQ,EAAE,UAAU;oBACpB,QAAQ,EAAE,UAAU;oBACpB,QAAQ,EAAE,EAAE,CAAC,IAAI;oBACjB,IAAI,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;oBACvC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,WAAW;oBAC9B,MAAM,EAAE,gHAAgH;oBACxH,UAAU,EAAE,2GAA2G;oBACvH,KAAK,EAAE,CAAC,EAAE;iBACX,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,6DAA6D,CAAC;QACnF,MAAM,iBAAiB,GAAG,4DAA4D,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;QAExG,MAAM,YAAY,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACpD,IAAI,YAAY,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvC,KAAK,MAAM,EAAE,IAAI,YAAY,EAAE,CAAC;gBAC9B,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;gBACnE,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;oBAC1E,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;wBAChB,QAAQ,CAAC,IAAI,CAAC;4BACZ,MAAM,EAAE,aAAa;4BACrB,QAAQ,EAAE,MAAM;4BAChB,QAAQ,EAAE,UAAU;4BACpB,QAAQ,EAAE,EAAE,CAAC,IAAI;4BACjB,IAAI,EAAE,OAAO;4BACb,OAAO,EAAE,8CAA8C;4BACvD,MAAM,EAAE,wEAAwE;4BAChF,UAAU,EAAE,sDAAsD;4BAClE,KAAK,EAAE,CAAC,EAAE;yBACX,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1E,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC;IAEhE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AACzC,CAAC"}

package/dist/esm/pr-review/analyzers/StaticAnalyzer.d.ts

@@ -0,0 +1,7 @@
+import { Finding, DiffFile } from "../types";
+export interface StaticAnalysisResult {
+    findings: Finding[];
+    score: number;
+}
+export declare function analyzeStatic(diffFiles: DiffFile[]): StaticAnalysisResult;
+//# sourceMappingURL=StaticAnalyzer.d.ts.map

package/dist/esm/pr-review/analyzers/StaticAnalyzer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"StaticAnalyzer.d.ts","sourceRoot":"","sources":["../../../../src/pr-review/analyzers/StaticAnalyzer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAqF7C,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,oBAAoB,CA2IzE"}

package/dist/esm/pr-review/analyzers/StaticAnalyzer.js

@@ -0,0 +1,201 @@
+import * as ts from "typescript";
+function computeCyclomaticComplexity(node) {
+    let count = 1;
+    function walk(n) {
+        switch (n.kind) {
+            case ts.SyntaxKind.IfStatement:
+            case ts.SyntaxKind.WhileStatement:
+            case ts.SyntaxKind.ForStatement:
+            case ts.SyntaxKind.ForInStatement:
+            case ts.SyntaxKind.ForOfStatement:
+            case ts.SyntaxKind.CaseClause:
+            case ts.SyntaxKind.CatchClause:
+            case ts.SyntaxKind.ConditionalExpression:
+                count++;
+                break;
+            case ts.SyntaxKind.BinaryExpression: {
+                const bin = n;
+                if (bin.operatorToken.kind === ts.SyntaxKind.AmpersandAmpersandToken ||
+                    bin.operatorToken.kind === ts.SyntaxKind.BarBarToken ||
+                    bin.operatorToken.kind === ts.SyntaxKind.QuestionQuestionToken)
+                    count++;
+                break;
+            }
+        }
+        ts.forEachChild(n, walk);
+    }
+    walk(node);
+    return count;
+}
+function computeMaxNesting(node, depth = 0) {
+    const nestingNodes = new Set([
+        ts.SyntaxKind.IfStatement, ts.SyntaxKind.WhileStatement,
+        ts.SyntaxKind.ForStatement, ts.SyntaxKind.ForInStatement,
+        ts.SyntaxKind.ForOfStatement, ts.SyntaxKind.SwitchStatement,
+        ts.SyntaxKind.TryStatement, ts.SyntaxKind.Block,
+    ]);
+    const isNesting = nestingNodes.has(node.kind);
+    const currentDepth = isNesting ? depth + 1 : depth;
+    let max = currentDepth;
+    ts.forEachChild(node, child => {
+        max = Math.max(max, computeMaxNesting(child, currentDepth));
+    });
+    return max;
+}
+const FOSSIL_PATTERNS = [
+    {
+        name: "var vs const/let",
+        fossilPattern: /\bvar\s+\w+/g,
+        modernPattern: /\b(const|let)\s+\w+/g,
+        fossilLabel: "var",
+        modernLabel: "const/let",
+    },
+    {
+        name: "require() vs ESM import",
+        fossilPattern: /\brequire\s*\(/g,
+        modernPattern: /^import\s+/gm,
+        fossilLabel: "require()",
+        modernLabel: "import",
+    },
+    {
+        name: "any vs typed generics",
+        fossilPattern: /:\s*any\b/g,
+        modernPattern: /<[A-Z]\w*>/g,
+        fossilLabel: ": any",
+        modernLabel: "generics",
+    },
+    {
+        name: "string concat vs template literals",
+        fossilPattern: /["']\s*\+\s*\w+\s*\+\s*["']/g,
+        modernPattern: /`[^`]*\$\{/g,
+        fossilLabel: "string concat",
+        modernLabel: "template literal",
+    },
+];
+export function analyzeStatic(diffFiles) {
+    const findings = [];
+    let totalScore = 100;
+    for (const df of diffFiles) {
+        if (!df.content || !df.path.match(/\.(ts|tsx|js|jsx)$/))
+            continue;
+        if (df.status === "deleted")
+            continue;
+        try {
+            const sourceFile = ts.createSourceFile(df.path, df.content, ts.ScriptTarget.Latest, true);
+            let functionCount = 0;
+            let totalCC = 0;
+            let maxNesting = 0;
+            let longFunctions = 0;
+            let anyCount = 0;
+            let typeAnnotations = 0;
+            function visit(node) {
+                const isFn = ts.isFunctionDeclaration(node) ||
+                    ts.isMethodDeclaration(node) ||
+                    ts.isArrowFunction(node) ||
+                    ts.isFunctionExpression(node);
+                if (isFn) {
+                    functionCount++;
+                    const cc = computeCyclomaticComplexity(node);
+                    const nesting = computeMaxNesting(node);
+                    totalCC += cc;
+                    maxNesting = Math.max(maxNesting, nesting);
+                    const nameNode = node.name;
+                    const fnName = nameNode ? nameNode.getText(sourceFile) : "<anonymous>";
+                    const startLine = sourceFile.getLineAndCharacterOfPosition(node.getStart()).line + 1;
+                    const endLine = sourceFile.getLineAndCharacterOfPosition(node.getEnd()).line + 1;
+                    const fnLines = endLine - startLine + 1;
+                    if (fnLines > 50) {
+                        longFunctions++;
+                        findings.push({
+                            ruleId: "static-fn-length",
+                            severity: "MEDIUM",
+                            category: "static",
+                            filePath: df.path,
+                            line: startLine,
+                            message: `Function "${fnName}" is ${fnLines} lines long (max: 50)`,
+                            detail: `Long functions are harder to test and maintain. Consider breaking it into smaller functions.`,
+                            suggestion: `Extract logic into smaller helper functions (target < 30 lines each)`,
+                            score: -5,
+                        });
+                    }
+                    if (cc > 10) {
+                        findings.push({
+                            ruleId: "static-cyclomatic",
+                            severity: "HIGH",
+                            category: "static",
+                            filePath: df.path,
+                            line: startLine,
+                            message: `Function "${fnName}" has cyclomatic complexity of ${cc} (max: 10)`,
+                            detail: `High complexity makes code hard to test and prone to bugs.`,
+                            suggestion: `Reduce conditional branches, extract switch cases into separate functions, use early returns.`,
+                            score: -10,
+                        });
+                    }
+                    if (nesting > 4) {
+                        findings.push({
+                            ruleId: "static-nesting",
+                            severity: "MEDIUM",
+                            category: "static",
+                            filePath: df.path,
+                            line: startLine,
+                            message: `Function "${fnName}" has nesting depth of ${nesting} (max: 4)`,
+                            detail: `Deep nesting reduces readability and increases cognitive load.`,
+                            suggestion: `Use early returns, guard clauses, and extract nested blocks into separate functions.`,
+                            score: -5,
+                        });
+                    }
+                }
+                ts.forEachChild(node, visit);
+            }
+            visit(sourceFile);
+            const srcText = df.content;
+            anyCount = (srcText.match(/:\s*any\b/g) || []).length;
+            typeAnnotations = (srcText.match(/:\s*\w+/g) || []).length;
+            if (typeAnnotations > 0) {
+                const anyRatio = anyCount / typeAnnotations;
+                if (anyRatio > 0.3) {
+                    findings.push({
+                        ruleId: "static-any-ratio",
+                        severity: "MEDIUM",
+                        category: "static",
+                        filePath: df.path,
+                        message: `High ": any" usage ratio (${Math.round(anyRatio * 100)}% of type annotations)`,
+                        detail: `Excessive "any" defeats TypeScript's type checking.`,
+                        suggestion: `Replace "any" with proper types or generics. Use "unknown" if the type is truly uncertain.`,
+                        score: -5,
+                    });
+                }
+            }
+            for (const fp of FOSSIL_PATTERNS) {
+                const fossilMatches = (srcText.match(fp.fossilPattern) || []).length;
+                if (fossilMatches > 0) {
+                    findings.push({
+                        ruleId: `static-fossil-${fp.name.replace(/\s+/g, "-")}`,
+                        severity: "LOW",
+                        category: "static",
+                        filePath: df.path,
+                        message: `Uses ${fp.fossilLabel} (${fossilMatches}x) — prefer ${fp.modernLabel}`,
+                        detail: `This legacy pattern was found in new/modified code.`,
+                        suggestion: `Replace ${fp.fossilLabel} with ${fp.modernLabel} for consistency with modern codebase standards.`,
+                        score: -2,
+                    });
+                }
+            }
+        }
+        catch {
+            findings.push({
+                ruleId: "static-parse-error",
+                severity: "LOW",
+                category: "static",
+                filePath: df.path,
+                message: `Could not parse file for static analysis`,
+                detail: `This may indicate syntax errors or unsupported syntax.`,
+                score: -2,
+            });
+        }
+    }
+    const deduction = findings.reduce((sum, f) => sum + Math.abs(f.score), 0);
+    totalScore = Math.max(0, Math.min(100, totalScore - deduction));
+    return { findings, score: totalScore };
+}
+//# sourceMappingURL=StaticAnalyzer.js.map

package/dist/esm/pr-review/analyzers/StaticAnalyzer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"StaticAnalyzer.js","sourceRoot":"","sources":["../../../../src/pr-review/analyzers/StaticAnalyzer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,YAAY,CAAC;AAGjC,SAAS,2BAA2B,CAAC,IAAa;IAChD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,SAAS,IAAI,CAAC,CAAU;QACtB,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;YACf,KAAK,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;YAC/B,KAAK,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC;YAClC,KAAK,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;YAChC,KAAK,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC;YAClC,KAAK,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC;YAClC,KAAK,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;YAC9B,KAAK,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;YAC/B,KAAK,EAAE,CAAC,UAAU,CAAC,qBAAqB;gBACtC,KAAK,EAAE,CAAC;gBACR,MAAM;YACR,KAAK,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC;gBACpC,MAAM,GAAG,GAAG,CAAwB,CAAC;gBACrC,IACE,GAAG,CAAC,aAAa,CAAC,IAAI,KAAK,EAAE,CAAC,UAAU,CAAC,uBAAuB;oBAChE,GAAG,CAAC,aAAa,CAAC,IAAI,KAAK,EAAE,CAAC,UAAU,CAAC,WAAW;oBACpD,GAAG,CAAC,aAAa,CAAC,IAAI,KAAK,EAAE,CAAC,UAAU,CAAC,qBAAqB;oBAC9D,KAAK,EAAE,CAAC;gBACV,MAAM;YACR,CAAC;QACH,CAAC;QACD,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC3B,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,CAAC;IACX,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAa,EAAE,KAAK,GAAG,CAAC;IACjD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;QAC3B,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC,UAAU,CAAC,cAAc;QACvD,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE,EAAE,CAAC,UAAU,CAAC,cAAc;QACxD,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,EAAE,CAAC,UAAU,CAAC,eAAe;QAC3D,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK;KAChD,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,YAAY,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACnD,IAAI,GAAG,GAAG,YAAY,CAAC;IACvB,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE;QAC5B,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,iBAAiB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,eAAe,GAMhB;IACH;QACE,IAAI,EAAE,kBAAkB;QACxB,aAAa,EAAE,cAAc;QAC7B,aAAa,EAAE,sBAAsB;QACrC,WAAW,EAAE,KAAK;QAClB,WAAW,EAAE,WAAW;KACzB;IACD;QACE,IAAI,EAAE,yBAAyB;QAC/B,aAAa,EAAE,iBAAiB;QAChC,aAAa,EAAE,cAAc;QAC7B,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,QAAQ;KACtB;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,aAAa,EAAE,YAAY;QAC3B,aAAa,EAAE,aAAa;QAC5B,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,UAAU;KACxB;IACD;QACE,IAAI,EAAE,oCAAoC;QAC1C,aAAa,EAAE,8BAA8B;QAC7C,aAAa,EAAE,aAAa;QAC5B,WAAW,EAAE,eAAe;QAC5B,WAAW,EAAE,kBAAkB;KAChC;CACF,CAAC;AAOF,MAAM,UAAU,aAAa,CAAC,SAAqB;IACjD,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,IAAI,UAAU,GAAG,GAAG,CAAC;IAErB,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC;YAAE,SAAS;QAClE,IAAI,EAAE,CAAC,MAAM,KAAK,SAAS;YAAE,SAAS;QAEtC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAE1F,IAAI,aAAa,GAAG,CAAC,CAAC;YACtB,IAAI,OAAO,GAAG,CAAC,CAAC;YAChB,IAAI,UAAU,GAAG,CAAC,CAAC;YACnB,IAAI,aAAa,GAAG,CAAC,CAAC;YACtB,IAAI,QAAQ,GAAG,CAAC,CAAC;YACjB,IAAI,eAAe,GAAG,CAAC,CAAC;YAExB,SAAS,KAAK,CAAC,IAAa;gBAC1B,MAAM,IAAI,GACR,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC;oBAC9B,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC;oBAC5B,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC;oBACxB,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;gBAEhC,IAAI,IAAI,EAAE,CAAC;oBACT,aAAa,EAAE,CAAC;oBAChB,MAAM,EAAE,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC;oBAC7C,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;oBACxC,OAAO,IAAI,EAAE,CAAC;oBACd,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;oBAE3C,MAAM,QAAQ,GAAI,IAAY,CAAC,IAAI,CAAC;oBACpC,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;oBACvE,MAAM,SAAS,GAAG,UAAU,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;oBACrF,MAAM,OAAO,GAAG,UAAU,CAAC,6BAA6B,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;oBACjF,MAAM,OAAO,GAAG,OAAO,GAAG,SAAS,GAAG,CAAC,CAAC;oBAExC,IAAI,OAAO,GAAG,EAAE,EAAE,CAAC;wBACjB,aAAa,EAAE,CAAC;wBAChB,QAAQ,CAAC,IAAI,CAAC;4BACZ,MAAM,EAAE,kBAAkB;4BAC1B,QAAQ,EAAE,QAAQ;4BAClB,QAAQ,EAAE,QAAQ;4BAClB,QAAQ,EAAE,EAAE,CAAC,IAAI;4BACjB,IAAI,EAAE,SAAS;4BACf,OAAO,EAAE,aAAa,MAAM,QAAQ,OAAO,uBAAuB;4BAClE,MAAM,EAAE,8FAA8F;4BACtG,UAAU,EAAE,sEAAsE;4BAClF,KAAK,EAAE,CAAC,CAAC;yBACV,CAAC,CAAC;oBACL,CAAC;oBAED,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;wBACZ,QAAQ,CAAC,IAAI,CAAC;4BACZ,MAAM,EAAE,mBAAmB;4BAC3B,QAAQ,EAAE,MAAM;4BAChB,QAAQ,EAAE,QAAQ;4BAClB,QAAQ,EAAE,EAAE,CAAC,IAAI;4BACjB,IAAI,EAAE,SAAS;4BACf,OAAO,EAAE,aAAa,MAAM,kCAAkC,EAAE,YAAY;4BAC5E,MAAM,EAAE,4DAA4D;4BACpE,UAAU,EAAE,+FAA+F;4BAC3G,KAAK,EAAE,CAAC,EAAE;yBACX,CAAC,CAAC;oBACL,CAAC;oBAED,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;wBAChB,QAAQ,CAAC,IAAI,CAAC;4BACZ,MAAM,EAAE,gBAAgB;4BACxB,QAAQ,EAAE,QAAQ;4BAClB,QAAQ,EAAE,QAAQ;4BAClB,QAAQ,EAAE,EAAE,CAAC,IAAI;4BACjB,IAAI,EAAE,SAAS;4BACf,OAAO,EAAE,aAAa,MAAM,0BAA0B,OAAO,WAAW;4BACxE,MAAM,EAAE,gEAAgE;4BACxE,UAAU,EAAE,sFAAsF;4BAClG,KAAK,EAAE,CAAC,CAAC;yBACV,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAED,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC/B,CAAC;YAED,KAAK,CAAC,UAAU,CAAC,CAAC;YAElB,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC;YAC3B,QAAQ,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YACtD,eAAe,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YAE3D,IAAI,eAAe,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,QAAQ,GAAG,QAAQ,GAAG,eAAe,CAAC;gBAC5C,IAAI,QAAQ,GAAG,GAAG,EAAE,CAAC;oBACnB,QAAQ,CAAC,IAAI,CAAC;wBACZ,MAAM,EAAE,kBAAkB;wBAC1B,QAAQ,EAAE,QAAQ;wBAClB,QAAQ,EAAE,QAAQ;wBAClB,QAAQ,EAAE,EAAE,CAAC,IAAI;wBACjB,OAAO,EAAE,6BAA6B,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC,wBAAwB;wBACxF,MAAM,EAAE,qDAAqD;wBAC7D,UAAU,EAAE,4FAA4F;wBACxG,KAAK,EAAE,CAAC,CAAC;qBACV,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,KAAK,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC;gBACjC,MAAM,aAAa,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;gBACrE,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;oBACtB,QAAQ,CAAC,IAAI,CAAC;wBACZ,MAAM,EAAE,iBAAiB,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE;wBACvD,QAAQ,EAAE,KAAK;wBACf,QAAQ,EAAE,QAAQ;wBAClB,QAAQ,EAAE,EAAE,CAAC,IAAI;wBACjB,OAAO,EAAE,QAAQ,EAAE,CAAC,WAAW,KAAK,aAAa,eAAe,EAAE,CAAC,WAAW,EAAE;wBAChF,MAAM,EAAE,qDAAqD;wBAC7D,UAAU,EAAE,WAAW,EAAE,CAAC,WAAW,SAAS,EAAE,CAAC,WAAW,kDAAkD;wBAC9G,KAAK,EAAE,CAAC,CAAC;qBACV,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,oBAAoB;gBAC5B,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE,QAAQ;gBAClB,QAAQ,EAAE,EAAE,CAAC,IAAI;gBACjB,OAAO,EAAE,0CAA0C;gBACnD,MAAM,EAAE,wDAAwD;gBAChE,KAAK,EAAE,CAAC,CAAC;aACV,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1E,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC;IAEhE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AACzC,CAAC"}

package/dist/esm/pr-review/analyzers/index.d.ts

@@ -0,0 +1,9 @@
+export { analyzeStatic } from "./StaticAnalyzer";
+export type { StaticAnalysisResult } from "./StaticAnalyzer";
+export { analyzeQuality } from "./QualityGrader";
+export type { QualityAnalysisResult } from "./QualityGrader";
+export { analyzeSecurity } from "./SecurityScanner";
+export type { SecurityAnalysisResult } from "./SecurityScanner";
+export { analyzeRegression } from "./RegressionDetector";
+export type { RegressionAnalysisResult } from "./RegressionDetector";
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/pr-review/analyzers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/pr-review/analyzers/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,YAAY,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAE7D,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,YAAY,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAE7D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,YAAY,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAEhE,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,YAAY,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/esm/pr-review/analyzers/index.js

@@ -0,0 +1,5 @@
+export { analyzeStatic } from "./StaticAnalyzer";
+export { analyzeQuality } from "./QualityGrader";
+export { analyzeSecurity } from "./SecurityScanner";
+export { analyzeRegression } from "./RegressionDetector";
+//# sourceMappingURL=index.js.map

package/dist/esm/pr-review/analyzers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/pr-review/analyzers/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAGjD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAGjD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/esm/pr-review/bridge/BrainBridge.d.ts

@@ -0,0 +1,23 @@
+import { Finding } from "../types";
+interface BrainMemory {
+    prompt: string;
+    response: string;
+    similarity: number;
+}
+export declare class BrainBridge {
+    searchQuery(query: string, limit?: number): Promise<BrainMemory[]>;
+    findPriorBugs(files: string[]): Promise<Map<string, BrainMemory[]>>;
+    getContextualHints(files: string[], baseBranch: string): Promise<{
+        file: string;
+        hints: string[];
+    }[]>;
+    storeReview(reviewId: string, repo: string, prNumber: number, score: number, verdict: string, findings: Finding[], files: string[]): Promise<boolean>;
+    adjustWeightsFromHistory(files: string[], baseWeights: {
+        static: number;
+        security: number;
+        regression: number;
+        quality: number;
+    }): Promise<typeof baseWeights>;
+}
+export {};
+//# sourceMappingURL=BrainBridge.d.ts.map

package/dist/esm/pr-review/bridge/BrainBridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BrainBridge.d.ts","sourceRoot":"","sources":["../../../../src/pr-review/bridge/BrainBridge.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAEnC,UAAU,WAAW;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,WAAW;IAChB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,GAAE,MAAU,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAYrE,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IAWnE,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,EAAE,CAAC;IAcrG,WAAW,CACf,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,OAAO,EAAE,EACnB,KAAK,EAAE,MAAM,EAAE,GACd,OAAO,CAAC,OAAO,CAAC;IAyBb,wBAAwB,CAC5B,KAAK,EAAE,MAAM,EAAE,EACf,WAAW,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GACrF,OAAO,CAAC,OAAO,WAAW,CAAC;CAkC/B"}

package/dist/esm/pr-review/bridge/BrainBridge.js

@@ -0,0 +1,93 @@
+import axios from "axios";
+import { getProxyPort } from "../../mcp/utils";
+export class BrainBridge {
+    async searchQuery(query, limit = 3) {
+        try {
+            const port = getProxyPort();
+            const res = await axios.get(`http://localhost:${port}/api/search?q=${encodeURIComponent(query)}&limit=${limit}`);
+            return (res.data.results || []).filter((r) => r.similarity >= 0.5);
+        }
+        catch {
+            return [];
+        }
+    }
+    async findPriorBugs(files) {
+        const results = new Map();
+        for (const file of files) {
+            const memories = await this.searchQuery(`bug ${file} error fix regression`, 2);
+            if (memories.length > 0) {
+                results.set(file, memories);
+            }
+        }
+        return results;
+    }
+    async getContextualHints(files, baseBranch) {
+        const hints = [];
+        for (const file of files) {
+            const memories = await this.searchQuery(`${file} ${baseBranch} architecture pattern`, 2);
+            if (memories.length > 0) {
+                hints.push({
+                    file,
+                    hints: memories.map(m => m.prompt.substring(0, 200)),
+                });
+            }
+        }
+        return hints;
+    }
+    async storeReview(reviewId, repo, prNumber, score, verdict, findings, files) {
+        try {
+            const port = getProxyPort();
+            const query = `PR #${prNumber} — ${repo}: ${files.join(", ")}`;
+            const response = JSON.stringify({
+                reviewId,
+                score,
+                verdict,
+                findingCount: findings.length,
+                criticalCount: findings.filter(f => f.severity === "CRITICAL").length,
+                highCount: findings.filter(f => f.severity === "HIGH").length,
+                files,
+                summary: findings.map(f => `[${f.severity}] ${f.filePath}:${f.line || "?"} — ${f.message}`),
+            });
+            await axios.post(`http://localhost:${port}/api/memory/store`, {
+                query,
+                response,
+                provider: "pr-review",
+            });
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    async adjustWeightsFromHistory(files, baseWeights) {
+        const weights = { ...baseWeights };
+        const highRiskModules = [];
+        for (const file of files) {
+            const memories = await this.searchQuery(`high risk bug ${file}`, 2);
+            const hasBugs = memories.some(m => {
+                try {
+                    const data = JSON.parse(typeof m.response === "string" ? m.response : "");
+                    return data.criticalCount > 0 || data.highCount > 2;
+                }
+                catch {
+                    return false;
+                }
+            });
+            if (hasBugs) {
+                highRiskModules.push(file);
+            }
+        }
+        if (highRiskModules.length > 0) {
+            weights.regression += 0.10;
+            weights.security += 0.05;
+            weights.static -= 0.05;
+            weights.quality -= 0.10;
+            const total = Object.values(weights).reduce((s, v) => s + v, 0);
+            for (const key of Object.keys(weights)) {
+                weights[key] = weights[key] / total;
+            }
+        }
+        return weights;
+    }
+}
+//# sourceMappingURL=BrainBridge.js.map

package/dist/esm/pr-review/bridge/BrainBridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BrainBridge.js","sourceRoot":"","sources":["../../../../src/pr-review/bridge/BrainBridge.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAS/C,MAAM,OAAO,WAAW;IACtB,KAAK,CAAC,WAAW,CAAC,KAAa,EAAE,QAAgB,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CACzB,oBAAoB,IAAI,iBAAiB,kBAAkB,CAAC,KAAK,CAAC,UAAU,KAAK,EAAE,CACpF,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC;QAC1E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAAe;QACjC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;QACjD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,IAAI,uBAAuB,EAAE,CAAC,CAAC,CAAC;YAC/E,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,KAAe,EAAE,UAAkB;QAC1D,MAAM,KAAK,GAAwC,EAAE,CAAC;QACtD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,IAAI,IAAI,UAAU,uBAAuB,EAAE,CAAC,CAAC,CAAC;YACzF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,KAAK,CAAC,IAAI,CAAC;oBACT,IAAI;oBACJ,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;iBACrD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,WAAW,CACf,QAAgB,EAChB,IAAY,EACZ,QAAgB,EAChB,KAAa,EACb,OAAe,EACf,QAAmB,EACnB,KAAe;QAEf,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,OAAO,QAAQ,MAAM,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC;gBAC9B,QAAQ;gBACR,KAAK;gBACL,OAAO;gBACP,YAAY,EAAE,QAAQ,CAAC,MAAM;gBAC7B,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM;gBACrE,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM;gBAC7D,KAAK;gBACL,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,IAAI,GAAG,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;aAC5F,CAAC,CAAC;YACH,MAAM,KAAK,CAAC,IAAI,CAAC,oBAAoB,IAAI,mBAAmB,EAAE;gBAC5D,KAAK;gBACL,QAAQ;gBACR,QAAQ,EAAE,WAAW;aACtB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,wBAAwB,CAC5B,KAAe,EACf,WAAsF;QAEtF,MAAM,OAAO,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QACnC,MAAM,eAAe,GAAa,EAAE,CAAC;QAErC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;YACpE,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;gBAChC,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBAC1E,OAAO,IAAI,CAAC,aAAa,GAAG,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;gBACtD,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,IAAI,OAAO,EAAE,CAAC;gBACZ,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC;YAC3B,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC;YACzB,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC;YACvB,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC;YAExB,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YAChE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAA6B,EAAE,CAAC;gBACnE,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACtC,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/esm/pr-review/bridge/index.d.ts

@@ -0,0 +1,2 @@
+export { BrainBridge } from "./BrainBridge";
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/pr-review/bridge/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/pr-review/bridge/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC"}

package/dist/esm/pr-review/bridge/index.js

@@ -0,0 +1,2 @@
+export { BrainBridge } from "./BrainBridge";
+//# sourceMappingURL=index.js.map

package/dist/esm/pr-review/bridge/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/pr-review/bridge/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC"}

package/dist/esm/pr-review/index.d.ts

@@ -0,0 +1,5 @@
+export { runAnalysis, parseDiff } from "./PRReviewEngine";
+export type { AnalyzeResult } from "./types";
+export { analyzeStatic, analyzeQuality, analyzeSecurity, analyzeRegression, } from "./analyzers";
+export type { StaticAnalysisResult, QualityAnalysisResult, SecurityAnalysisResult, RegressionAnalysisResult, } from "./analyzers";
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/pr-review/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/pr-review/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC1D,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7C,OAAO,EACL,aAAa,EACb,cAAc,EACd,eAAe,EACf,iBAAiB,GAClB,MAAM,aAAa,CAAC;AACrB,YAAY,EACV,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,aAAa,CAAC"}

package/dist/esm/pr-review/index.js

@@ -0,0 +1,3 @@
+export { runAnalysis, parseDiff } from "./PRReviewEngine";
+export { analyzeStatic, analyzeQuality, analyzeSecurity, analyzeRegression, } from "./analyzers";
+//# sourceMappingURL=index.js.map

package/dist/esm/pr-review/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/pr-review/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,EACL,aAAa,EACb,cAAc,EACd,eAAe,EACf,iBAAiB,GAClB,MAAM,aAAa,CAAC"}

package/dist/esm/pr-review/reviewRunner.d.ts

@@ -0,0 +1,25 @@
+import type { GitPlatformAdapter } from "./adapters/GitPlatformAdapter";
+import type { Platform, PRMetadata } from "./types";
+export declare function getAdapter(platform: string, token: string): GitPlatformAdapter;
+export declare function getTokenForPlatform(platform: string): string;
+export interface PRReviewOptions {
+    autoApprove?: boolean;
+    threshold?: number;
+    context?: string;
+}
+export interface PRReviewOutput {
+    reviewId: string;
+    score: number;
+    verdict: string;
+    findingsCount: number;
+    approved: boolean;
+    summary: string;
+}
+export interface PRReviewMeta {
+    owner: string;
+    repo: string;
+    prNumber: number;
+    metadata: PRMetadata;
+}
+export declare function runPRReview(platform: Platform, repo: string, prNumber: number, options?: PRReviewOptions): Promise<PRReviewOutput>;
+//# sourceMappingURL=reviewRunner.d.ts.map

package/dist/esm/pr-review/reviewRunner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewRunner.d.ts","sourceRoot":"","sources":["../../../src/pr-review/reviewRunner.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAIpD,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,kBAAkB,CAO9E;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAgB5D;AAED,MAAM,WAAW,eAAe;IAC9B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,UAAU,CAAC;CACtB;AAED,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,QAAQ,EAClB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,cAAc,CAAC,CAuFzB"}