@nxuss/lemma 0.9.1 → 0.9.3

package/README.md

@@ -1,8 +1,8 @@
-# 🧠 Lemma v0.9.1
+# 🧠 Lemma v0.9.3
 
 [![npm version](https://img.shields.io/npm/v/@nxuss/lemma.svg?color=orange&style=flat-square)](https://www.npmjs.com/package/@nxuss/lemma)
 [![License](https://img.shields.io/npm/l/@nxuss/lemma.svg?color=blue&style=flat-square)](https://github.com/Nxusbets/lemma/blob/main/LICENSE)
-[![MCP Tools](https://img.shields.io/badge/MCP%20tools-32-ff69b4?style=flat-square)](https://github.com/Nxusbets/lemma)
+[![MCP Tools](https://img.shields.io/badge/MCP%20tools-38-ff69b4?style=flat-square)](https://github.com/Nxusbets/lemma)
 [![Security](https://img.shields.io/badge/privacy-firewall%20active-blueviolet?style=flat-square)](https://github.com/Nxusbets/lemma)
 [![Caching](https://img.shields.io/badge/semantic%20memory-enabled-success?style=flat-square)](https://github.com/Nxusbets/lemma)
 
@@ -16,7 +16,7 @@
 
 > **The Intelligent local-first AI Gateway — Privacy, Performance, and Static Code Intelligence for the Agentic Era.**
 
-Lemma is a high-performance orchestration layer that sits between your development environment and LLM providers. It transforms the way you build with AI by providing **Shared Semantic Memory**, **Autonomous Cost Optimization**, **Privacy Guardrails**, and a suite of **32 MCP tools** — including zero-token static code intelligence that runs entirely on your machine with no LLM calls required.
+Lemma is a high-performance orchestration layer that sits between your development environment and LLM providers. It transforms the way you build with AI by providing **Shared Semantic Memory**, **Autonomous Cost Optimization**, **Privacy Guardrails**, and a suite of **38 MCP tools** — including zero-token static code intelligence that runs entirely on your machine with no LLM calls required.
 
 ---
 
@@ -31,19 +31,20 @@ Lemma is a high-performance orchestration layer that sits between your developme
 | **Complexity Router** | ✅ | ✅ |
 | **Dashboard** | Basic stats | ✅ Full time-travel |
 | **Proxy requests/month** | 300 | ✅ Unlimited |
-| **MCP Server (all 32 tools)** | ❌ | ✅ |
+| **MCP Server (all 38 tools)** | ❌ | ✅ |
 | **The Brain — Semantic Memory** | ❌ | ✅ |
 | **Zero-Token Static Analysis** | ❌ | ✅ |
 | **Cross-Project Telepathy** | ❌ | ✅ |
 | **AutoPilot & Auto-Heal** | ❌ | ✅ |
+| **`depgraph` — Dependency Graph** | ❌ | ✅ |
+| **`refactor` — Codemod Engine** | ❌ | ✅ |
 
-> **The MCP is Pro.** All 32 tools — The Brain, PreCrime predictor, AST Hologram, Entropy Score, Coupling Radar, workspace control, and every optimization tool — require a Pro license. Activate with `lemma activate <key>` → [Get Pro](https://lemma.nxus.studio/upgrade)
+> **The MCP is Pro.** All 38 tools — The Brain, PreCrime predictor, AST Hologram, Entropy Score, Coupling Radar, `depgraph`, `refactor`, and every optimization tool — require a Pro license. Activate with `lemma activate <key>` → [Get Pro](https://lemma.nxus.studio/upgrade)
 
 ---
 
 ## ⚡ What's in the Pro MCP
 
-
 ### 🧠 Shared Semantic Memory — The Brain
 Lemma maintains a persistent vector database (ChromaDB) that accumulates knowledge across all your projects. Every solution, bug fix, and architecture decision you work through gets stored and semantically indexed. Future sessions can retrieve this knowledge in milliseconds — no cloud, no tokens, no re-explaining.
 
@@ -62,6 +63,48 @@ Mathematical chaos score (0-100) per file using the TS Compiler API. Measures cy
 ### 🗺️ AST Hologram — Zero Tokens
 Scans the entire workspace and returns a dense JSON index of all exported symbols (classes, functions, interfaces, types, consts) with file paths and line numbers. Use this instead of reading individual files — saves up to 90% tokens when navigating large codebases.
 
+### 📡 `depgraph` — Real-Time Dependency Graph *(NEW in v0.9.3)*
+**Architecture-aware blast radius analysis.** Builds a real-time, bidirectional dependency graph for any file in the workspace using the TypeScript Compiler API — zero LLM calls, zero tokens. Shows exactly what a file imports, what imports it (reverse dependencies), and what symbols it exports.
+
+```
+📦 src/services/pantry.ts
+├── importa:
+│   ├── src/lib/utils/ingredient-parser.ts  → parseIngredientString, normalizeUnit
+│   └── src/db/prisma.ts                    → PrismaClient
+├── es importado por:
+│   ├── src/app/actions/generate-recipe.ts
+│   └── src/components/PantryWidget.tsx
+└── exporta:
+    ├── applyRecipeDeductions
+    └── getPantryBalance
+```
+
+Supports `--depth` (1-5), `--format text|mermaid|json`, `--reverse`, `--circular` (cycle detection), and `--external` (include node_modules).
+
+### 🔧 `refactor` — Declarative Codemod Engine *(NEW in v0.9.3)*
+**Multi-file refactoring with surgical precision.** Rename any symbol across the entire workspace or move files updating all importers — using the TypeScript Compiler API for accurate AST-based reference detection. Zero LLM calls.
+
+**`rename`** — Finds every reference to a symbol (via AST, not text search) and renames it everywhere:
+```bash
+# Preview first
+lemma refactor --operation rename --from "applyRecipeDeductions" --to "deductPantryIngredients" \
+  --file src/services/pantry.ts --dryRun
+
+# Apply with TypeScript verification
+lemma refactor --operation rename --from "applyRecipeDeductions" --to "deductPantryIngredients" \
+  --file src/services/pantry.ts --tscCheck
+```
+
+**`move`** — Moves a file physically and rewires every import path in the workspace:
+```bash
+lemma refactor --operation move \
+  --from src/lib/validation/recipe.schema.ts \
+  --to src/lib/schemas/recipe.ts \
+  --tscCheck
+```
+
+Supports `--dryRun` (unified diff preview), `--tscCheck` (post-refactor type verification), and `--backup` (`.bak` files).
+
 ### 🚦 Complexity Router
 Intelligently evaluates each prompt and routes it to the most cost-effective model. Reserves premium models for complex reasoning, uses smaller models for simple tasks. Slashes your AI bill without sacrificing quality.
 
@@ -95,7 +138,7 @@ lemma start
 
 | Command | Action |
 | :--- | :--- |
-| `lemma init` | Bootstraps config and auto-configures MCP for Claude Desktop, Cursor, Windsurf, Kiro, VS Code. |
+| `lemma init` | Bootstraps config and auto-configures MCP for OpenCode, Claude Desktop, Cursor, Windsurf, Kiro, VS Code. |
 | `lemma start` | Launches proxy, cache engine, and dashboard at `http://localhost:8081`. |
 | `lemma stop` | Gracefully shuts down the background proxy. |
 | `lemma status` | Health of all modules and active connections. |
@@ -123,6 +166,9 @@ lemma start
 
 Add Lemma to any MCP-compatible IDE in seconds:
 
+### OpenCode (Terminal AI)
+Just run `lemma init`. Lemma automatically registers its MCP server in your `~/.opencode.json` and injects its autonomous rules so OpenCode works with zero configuration.
+
 ### Cursor / Windsurf / Kiro / Antigravity
 1. Go to **Settings → MCP**
 2. Add new server: **Command** = `lemma mcp`
@@ -139,11 +185,11 @@ Add Lemma to any MCP-compatible IDE in seconds:
 }
 ```
 
-Once connected, your IDE gains access to all **32 MCP tools** and Lemma auto-injects the TurboMode system prompt on handshake.
+Once connected, your IDE gains access to all **38 MCP tools** and Lemma auto-injects the TurboMode system prompt on handshake.
 
 ---
 
-## 🛠️ MCP Tools Reference (v0.9.0 — 32 Tools)
+## 🛠️ MCP Tools Reference (v0.9.3 — 38 Tools)
 
 ### 🗂️ Workspace Tools
 
@@ -190,7 +236,7 @@ Once connected, your IDE gains access to all **32 MCP tools** and Lemma auto-inj
 | `auto_heal` | Diagnose and auto-heal the latest crash from Lemma's live context logs. |
 | `batch_tool_calls` | Execute multiple tool calls in parallel via `Promise.all`. High-throughput operations in a single MCP round-trip. |
 
-### 🔮 Zero-Token Static Intelligence Tools (NEW in v0.9.0)
+### 🔮 Zero-Token Static Intelligence Tools
 
 > All tools in this section use **zero LLM tokens, zero Ollama, zero cloud**. Pure local computation via TypeScript Compiler API, git, and math.
 
@@ -204,6 +250,24 @@ Once connected, your IDE gains access to all **32 MCP tools** and Lemma auto-inj
 | `semantic_dedup_guard` | **Brain dedup firewall.** Before calling `store_memory`, pass content through here. If similarity ≥ 92% → rejects as duplicate. If 75–91% → warns and shows the similar entry. Keeps The Brain lean and dense. |
 | `dead_export_necromancer` | **Dead code auditor.** Maps every `export` in the workspace against every `import`. Symbols exported but never imported anywhere = zombie code inflating your context. Reports dead exports by file with estimated token waste. |
 
+### 🏗️ Architecture & Refactoring Tools *(NEW in v0.9.3)*
+
+> Architecture-aware tools that combine dependency analysis with surgical code transformation. **Zero LLM calls.**
+
+| Tool | Description |
+| :--- | :--- |
+| `depgraph` | **Real-time dependency graph.** Builds a bidirectional import/export map for any file. Shows what a file imports, what imports it (reverse deps with `--reverse`), and what symbols it exports. Supports `--depth` 1-5, `--format text\|mermaid\|json`, `--circular` (cycle detection), and `--external` (include node_modules). Use before any refactor to measure blast radius. |
+| `refactor` | **Declarative codemod engine.** `rename` renames a symbol across all files using AST-based reference detection (no false positives from string search). `move` relocates a file and rewires every import path in the workspace. Both support `--dryRun` (unified diff preview), `--tscCheck` (post-apply type verification), and `--backup` (`.bak` files). |
+
+### 🔍 PR Review Agent Tools
+
+| Tool | Description |
+| :--- | :--- |
+| `review_diff` | Analyze a raw diff for bugs, security issues, and best practices before committing. |
+| `review_pr` | Full PR review against a Git platform (GitHub, Azure DevOps, GitLab). Runs all 4 analyzers (Static, Security, Regression, Quality) and stores results in The Brain. |
+| `pr_status` | Query the last review status and report for a given PR number and platform. |
+| `generate_pr_workflow` | Generate a CI/CD workflow YAML (GitHub Actions or Azure Pipelines) that runs `lemma pr-review` as a step. |
+
 ### ⚡ TurboMode Auto-Injection
 
 When connected via `lemma mcp`, Lemma auto-injects 7 rules into the agent's system prompt on handshake:

package/dist/cjs/cli/lemma-proxy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lemma-proxy.d.ts","sourceRoot":"","sources":["../../../src/cli/lemma-proxy.ts"],"names":[],"mappings":";AAsbA,wBAAgB,+BAA+B,CAAC,OAAO,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CA4DvF;AAmgED,wBAAsB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA6KhL"}
+{"version":3,"file":"lemma-proxy.d.ts","sourceRoot":"","sources":["../../../src/cli/lemma-proxy.ts"],"names":[],"mappings":";AA2cA,wBAAgB,+BAA+B,CAAC,OAAO,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CA4DvF;AAugED,wBAAsB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA6KhL"}

package/dist/cjs/cli/lemma-proxy.js

@@ -43,6 +43,7 @@ function ask(query) {
 const ComplexityRouter_1 = __importDefault(require("../proxy/ComplexityRouter"));
 const SemanticScrubber_1 = __importDefault(require("../security/SemanticScrubber"));
 const CloudSyncClient_1 = __importDefault(require("../cloud/CloudSyncClient"));
+const reviewRunner_1 = require("../pr-review/reviewRunner");
 const ContextSqueezer_1 = require("../utils/ContextSqueezer");
 const AgentMultiplexer_1 = require("../proxy/AgentMultiplexer");
 const SseRelay_1 = require("../proxy/SseRelay");
@@ -373,6 +374,26 @@ enabled = true
         }
     }
     catch { }
+    // Register lemma MCP server in OpenCode user config (~/.opencode.json)
+    const openCodeMcpFile = path_1.default.join(os_1.default.homedir(), '.opencode.json');
+    try {
+        let openCodeConfig = {};
+        if (fs_1.default.existsSync(openCodeMcpFile)) {
+            openCodeConfig = JSON.parse(fs_1.default.readFileSync(openCodeMcpFile, 'utf8'));
+        }
+        if (!openCodeConfig.mcp)
+            openCodeConfig.mcp = {};
+        if (!openCodeConfig.mcp.lemma) {
+            openCodeConfig.mcp.lemma = {
+                command: "npx",
+                args: ["-y", "@nxuss/lemma", "mcp"],
+                enabled: true
+            };
+            fs_1.default.writeFileSync(openCodeMcpFile, JSON.stringify(openCodeConfig, null, 2));
+            console.log('✅ [OpenCode] Registered lemma MCP server in ~/.opencode.json');
+        }
+    }
+    catch { }
     console.log(`✅ Auto-configured Lemma for [${project}]`);
 }
 const EVENT_LOG = [];
@@ -423,6 +444,7 @@ function injectIdeRules(projectName) {
         { name: 'Cursor (v2)', path: path_1.default.join(process.cwd(), '.cursor/rules/lemma.mdc') },
         { name: 'Windsurf', path: path_1.default.join(process.cwd(), '.windsurfrules') },
         { name: 'Cline', path: path_1.default.join(process.cwd(), '.clinerules') },
+        { name: 'OpenCode', path: path_1.default.join(process.cwd(), '.opencode.md') },
     ];
     for (const target of rulesTargets) {
         try {
@@ -1514,6 +1536,9 @@ class LemmaServer {
             });
             this.app.get('/dashboard/*', (req, res) => res.sendFile(path_1.default.join(this.dashboardPath, 'index.html')));
         }
+        // Mount PR Review webhook endpoints
+        const { createWebhookRouter } = require('../pr-review/webhook/WebhookServer');
+        this.app.use('/api/webhook', createWebhookRouter());
     }
     startWorkspaceTimeWatcher() {
         const cwd = process.cwd();
@@ -2338,7 +2363,7 @@ commander_1.program.command('init')
             console.log('\n🧠 \x1b[35mAuto-configuring MCP for AI IDEs...\x1b[0m');
         }
         else {
-            const ans = await ask('\n🧠 Configure MCP servers for your IDEs (Claude, Cursor, Windsurf, VS Code, Kiro, Codex)? (Y/n): ');
+            const ans = await ask('\n🧠 Configure MCP servers for your IDEs (Claude, Cursor, Windsurf, VS Code, OpenCode, Kiro, Codex)? (Y/n): ');
             if (ans.toLowerCase() === 'n' || ans.toLowerCase() === 'no') {
                 opts.configure = false;
                 console.log('⏭️  Skipping IDE auto-configuration');
@@ -2614,6 +2639,32 @@ commander_1.program.command('clipboard')
         process.exit(1);
     }
 });
+commander_1.program.command('pr-review')
+    .description('Run PR review via CLI (reads env vars for CI/CD: LEMMA_PLATFORM, LEMMA_REPO, LEMMA_PR_NUMBER)')
+    .option('-p, --platform <platform>', 'Git platform (github, azure, gitlab)')
+    .option('-r, --repo <repo>', 'Repository (owner/repo)')
+    .option('-n, --pr-number <number>', 'PR number')
+    .option('-t, --threshold <number>', 'Score threshold for auto-approve', '90')
+    .option('--no-auto-approve', 'Skip auto-approve even if score meets threshold')
+    .action(async (opts) => {
+    const platform = opts.platform || process.env.LEMMA_PLATFORM || '';
+    const repo = opts.repo || process.env.LEMMA_REPO || '';
+    const prNumber = opts.prNumber || process.env.LEMMA_PR_NUMBER || '';
+    const threshold = parseInt(opts.threshold, 10);
+    const autoApprove = opts.autoApprove !== false;
+    if (!platform || !repo || !prNumber) {
+        console.error('Error: platform, repo, and pr-number are required.\nSet via args or LEMMA_PLATFORM, LEMMA_REPO, LEMMA_PR_NUMBER env vars.');
+        process.exit(1);
+    }
+    try {
+        const result = await (0, reviewRunner_1.runPRReview)(platform, repo, parseInt(prNumber, 10), { threshold, autoApprove });
+        console.log(JSON.stringify(result, null, 2));
+    }
+    catch (err) {
+        console.error(`PR review failed: ${err.message}`);
+        process.exit(1);
+    }
+});
 if (process.argv[1] && (process.argv[1].includes('lemma') || process.argv[1].endsWith('.cjs') || process.argv[1].endsWith('.js'))) {
     // Bare `lemma` with no args → show welcome screen
     if (process.argv.length <= 2) {