ctxloom-pro 1.2.1 → 1.2.3

package/apps/dashboard/dist/server/index.js

@@ -11323,7 +11323,7 @@ function resolveTelemetryLevel() {
 }
 var TELEMETRY_LEVEL = resolveTelemetryLevel();
 var TELEMETRY_DISABLED = TELEMETRY_LEVEL === "off";
-var CTXLOOM_VERSION = "1.2.1".length > 0 ? "1.2.1" : "dev";
+var CTXLOOM_VERSION = "1.2.3".length > 0 ? "1.2.3" : "dev";
 var POSTHOG_HOST = "https://eu.i.posthog.com";
 var POSTHOG_KEY = process.env["POSTHOG_API_KEY"] ?? (true ? "phc_CiDkmFLcZ2K6uCpcoSUQLmFrnnUvsyXGhSxopX5TVKE6" : "");
 var SENTRY_DSN = process.env["SENTRY_DSN"] ?? (true ? "https://81c94a0f04a8e242dee493ac1e17f733@o4508531702497280.ingest.de.sentry.io/4511256875368528" : "");

package/dist/{chunk-3MA5KZYI.js → chunk-AJJYAZNH.js}

@@ -8855,7 +8855,7 @@ var TELEMETRY_DISABLED = TELEMETRY_LEVEL === "off";
 function getTelemetryLevel() {
   return TELEMETRY_LEVEL;
 }
-var CTXLOOM_VERSION = "1.2.1".length > 0 ? "1.2.1" : "dev";
+var CTXLOOM_VERSION = "1.2.3".length > 0 ? "1.2.3" : "dev";
 var POSTHOG_HOST = "https://eu.i.posthog.com";
 var POSTHOG_KEY = process.env["POSTHOG_API_KEY"] ?? (true ? "phc_CiDkmFLcZ2K6uCpcoSUQLmFrnnUvsyXGhSxopX5TVKE6" : "");
 var SENTRY_DSN = process.env["SENTRY_DSN"] ?? (true ? "https://81c94a0f04a8e242dee493ac1e17f733@o4508531702497280.ingest.de.sentry.io/4511256875368528" : "");
@@ -9446,4 +9446,4 @@ export {
   FirstTouchTracker,
   EmittedOnceTracker
 };
-//# sourceMappingURL=chunk-3MA5KZYI.js.map
+//# sourceMappingURL=chunk-AJJYAZNH.js.map

package/dist/index.js

@@ -47,7 +47,7 @@ import {
   validateDefaultRoot,
   wrapWithIndexingEnvelope,
   writeCODEOWNERS
-} from "./chunk-3MA5KZYI.js";
+} from "./chunk-AJJYAZNH.js";
 import {
   VectorStore
 } from "./chunk-DVI2RWJR.js";
@@ -547,6 +547,91 @@ async function startServer(opts = {}) {
   }
 }
 
+// src/setup/install-pr-bot.ts
+import fs2 from "fs";
+import path2 from "path";
+import { execFileSync } from "child_process";
+var WORKFLOW_RELATIVE_PATH = ".github/workflows/ctxloom-review.yml";
+function isGitRepo(cwd) {
+  try {
+    execFileSync("git", ["rev-parse", "--is-inside-work-tree"], {
+      cwd,
+      stdio: "ignore"
+    });
+    return true;
+  } catch {
+    return false;
+  }
+}
+function detectDefaultBranch(cwd) {
+  try {
+    const out = execFileSync(
+      "git",
+      ["symbolic-ref", "--short", "refs/remotes/origin/HEAD"],
+      { cwd, encoding: "utf8" }
+    ).trim();
+    if (out) return out.replace(/^origin\//, "");
+  } catch {
+  }
+  try {
+    const out = execFileSync("git", ["symbolic-ref", "--short", "HEAD"], {
+      cwd,
+      encoding: "utf8"
+    }).trim();
+    if (out) return out;
+  } catch {
+  }
+  return "main";
+}
+function renderWorkflow(ref, defaultBranch) {
+  return `# ctxloom PR review \u2014 risk-scored summary + inline notes on every PR.
+# Runs entirely inside this repo's CI; no hosted service, no LLM calls.
+# Default branch for this repo: ${defaultBranch}
+# Docs: https://github.com/kodiii/ctxloom/blob/main/apps/pr-bot/README.md
+
+name: ctxloom review
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+
+permissions:
+  contents: read
+  pull-requests: write
+  checks: write
+
+jobs:
+  review:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0   # required: pr-bot reads git history for co-change overlay
+
+      - uses: kodiii/ctxloom/apps/pr-bot@${ref}
+`;
+}
+function installPrBotWorkflow(opts = {}) {
+  const cwd = opts.cwd ?? process.cwd();
+  const force = opts.force ?? false;
+  const ref = opts.ref ?? "v1";
+  if (!isGitRepo(cwd)) {
+    return {
+      status: "aborted-not-git",
+      reason: `${cwd} is not inside a git repository. GitHub Actions only fire in repos with a remote, so this command needs one.`
+    };
+  }
+  const target = path2.resolve(cwd, WORKFLOW_RELATIVE_PATH);
+  if (fs2.existsSync(target) && !force) {
+    return { status: "skipped-exists", path: target };
+  }
+  const defaultBranch = detectDefaultBranch(cwd);
+  const contents = renderWorkflow(ref, defaultBranch);
+  fs2.mkdirSync(path2.dirname(target), { recursive: true });
+  fs2.writeFileSync(target, contents, { mode: 420 });
+  return { status: "installed", path: target, defaultBranch };
+}
+
 // src/setup/setup-wizard.ts
 import { createInterface } from "readline";
 var C = {
@@ -698,8 +783,45 @@ async function runSetupWizard(options) {
     console.log(`  ${C.red}${failCount} tool${failCount > 1 ? "s" : ""} failed \u2014 see errors above.${C.reset}`);
   }
   console.log("");
+  if (!options?.nonInteractive) {
+    await offerPrBotInstall();
+  }
   printNextSteps();
 }
+async function offerPrBotInstall() {
+  console.log(`  ${C.bold}GitHub PR review${C.reset}`);
+  console.log(
+    `  ${C.dim}Optionally drop .github/workflows/ctxloom-review.yml into${C.reset}`
+  );
+  console.log(
+    `  ${C.dim}this repo so every PR gets an automated risk-scored review.${C.reset}`
+  );
+  console.log("");
+  const answer = await ask(`  Install the PR-review workflow here? [y/N]: `);
+  if (answer.toLowerCase() !== "y" && answer.toLowerCase() !== "yes") {
+    console.log(`  ${ICON_SKIP} Skipped. Run ${C.cyan}ctxloom install-pr-bot${C.reset} later if you change your mind.`);
+    console.log("");
+    return;
+  }
+  const result = installPrBotWorkflow();
+  console.log("");
+  switch (result.status) {
+    case "installed":
+      console.log(`  ${ICON_SUCCESS} Created ${C.cyan}${result.path}${C.reset}`);
+      console.log(`    ${C.dim}Default branch: ${result.defaultBranch}${C.reset}`);
+      console.log(`    ${C.dim}Commit + push it, then the next PR will trigger the bot.${C.reset}`);
+      break;
+    case "skipped-exists":
+      console.log(`  ${ICON_SKIP} A workflow already exists at ${result.path}.`);
+      console.log(`    ${C.dim}Pass --force to ${C.cyan}ctxloom install-pr-bot${C.reset}${C.dim} to overwrite.${C.reset}`);
+      break;
+    case "aborted-not-git":
+      console.log(`  ${ICON_FAIL} ${result.reason}`);
+      console.log(`    ${C.dim}Run ${C.cyan}git init${C.reset}${C.dim} (and connect a remote) first, then ${C.cyan}ctxloom install-pr-bot${C.reset}${C.dim}.${C.reset}`);
+      break;
+  }
+  console.log("");
+}
 function printNextSteps() {
   console.log(`  ${C.bold}Next steps:${C.reset}`);
   console.log("");
@@ -713,16 +835,16 @@ function printNextSteps() {
 }
 
 // src/setup/init.ts
-import fs2 from "fs";
-import path2 from "path";
+import fs3 from "fs";
+import path3 from "path";
 function runInit(cwd = process.cwd()) {
-  const root = path2.resolve(cwd);
-  const stat = fs2.statSync(root);
+  const root = path3.resolve(cwd);
+  const stat = fs3.statSync(root);
   if (!stat.isDirectory()) {
     throw new Error(`ctxloom init: ${root} is not a directory`);
   }
   const warnings = [];
-  if (!fs2.existsSync(path2.join(root, ".git"))) {
+  if (!fs3.existsSync(path3.join(root, ".git"))) {
     warnings.push(
       "No .git directory found here. ctxloom init still works, but most graph features (git coupling, risk overlay, churn) require git history."
     );
@@ -739,14 +861,14 @@ function buildCtxloomEntry(projectRoot) {
   };
 }
 function writeMcpJson(projectRoot) {
-  const mcpPath = path2.join(projectRoot, ".mcp.json");
+  const mcpPath = path3.join(projectRoot, ".mcp.json");
   const entry = buildCtxloomEntry(projectRoot);
-  if (!fs2.existsSync(mcpPath)) {
+  if (!fs3.existsSync(mcpPath)) {
     const payload = { mcpServers: { ctxloom: entry } };
-    fs2.writeFileSync(mcpPath, JSON.stringify(payload, null, 2) + "\n", "utf-8");
+    fs3.writeFileSync(mcpPath, JSON.stringify(payload, null, 2) + "\n", "utf-8");
     return { path: mcpPath, created: true, merged: false, alreadyCorrect: false };
   }
-  const raw = fs2.readFileSync(mcpPath, "utf-8");
+  const raw = fs3.readFileSync(mcpPath, "utf-8");
   let parsed2;
   try {
     parsed2 = JSON.parse(raw);
@@ -765,18 +887,18 @@ function writeMcpJson(projectRoot) {
     return { path: mcpPath, created: false, merged: false, alreadyCorrect: true };
   }
   servers["ctxloom"] = entry;
-  fs2.writeFileSync(mcpPath, JSON.stringify(parsed2, null, 2) + "\n", "utf-8");
+  fs3.writeFileSync(mcpPath, JSON.stringify(parsed2, null, 2) + "\n", "utf-8");
   return { path: mcpPath, created: false, merged: true, alreadyCorrect: false };
 }
 var GITIGNORE_BANNER = "# ctxloom local index (machine-specific, do not commit)";
 var GITIGNORE_PATTERN = ".ctxloom/";
 function appendGitignore(projectRoot) {
-  const gitignorePath = path2.join(projectRoot, ".gitignore");
-  if (!fs2.existsSync(gitignorePath)) {
+  const gitignorePath = path3.join(projectRoot, ".gitignore");
+  if (!fs3.existsSync(gitignorePath)) {
     const content = `${GITIGNORE_BANNER}
 ${GITIGNORE_PATTERN}
 `;
-    fs2.writeFileSync(gitignorePath, content, "utf-8");
+    fs3.writeFileSync(gitignorePath, content, "utf-8");
     return {
       path: gitignorePath,
       created: true,
@@ -784,7 +906,7 @@ ${GITIGNORE_PATTERN}
       alreadyPresent: false
     };
   }
-  const raw = fs2.readFileSync(gitignorePath, "utf-8");
+  const raw = fs3.readFileSync(gitignorePath, "utf-8");
   const alreadyPresent = raw.split("\n").some((line) => {
     const trimmed = line.trim();
     if (trimmed.startsWith("#") || trimmed.startsWith("!")) return false;
@@ -803,7 +925,7 @@ ${GITIGNORE_PATTERN}
 ${GITIGNORE_BANNER}
 ${GITIGNORE_PATTERN}
 `;
-  fs2.appendFileSync(gitignorePath, addition, "utf-8");
+  fs3.appendFileSync(gitignorePath, addition, "utf-8");
   return {
     path: gitignorePath,
     created: false,
@@ -883,7 +1005,7 @@ ${body}
 import { execSync } from "child_process";
 import * as readline from "readline";
 import os from "os";
-import path3 from "path";
+import path4 from "path";
 try {
   const proc = process;
   if (typeof proc.getrlimit === "function" && typeof proc.setrlimit === "function") {
@@ -894,7 +1016,7 @@ try {
 } catch {
 }
 var args = process.argv.slice(2);
-var ctxloomVersion = "1.2.1".length > 0 ? "1.2.1" : "dev";
+var ctxloomVersion = "1.2.3".length > 0 ? "1.2.3" : "dev";
 if (args.includes("--version") || args.includes("-v")) {
   process.stdout.write(`ctxloom ${ctxloomVersion}
 `);
@@ -967,7 +1089,7 @@ async function checkLicense() {
   if (command !== void 0 && LICENSE_GATE_BYPASS_COMMANDS.has(command)) return;
   const ciKey = process.env["CTXLOOM_LICENSE_KEY"];
   if (ciKey) {
-    const { ApiClient } = await import("./src-Z4U6JJBW.js");
+    const { ApiClient } = await import("./src-ETJVZARU.js");
     const client = new ApiClient(process.env["CTXLOOM_API_BASE"]);
     try {
       const result = await client.validate(ciKey, "ci-ephemeral");
@@ -1280,6 +1402,36 @@ async function main() {
       await runSetupWizard();
       break;
     }
+    case "install-pr-bot": {
+      const force = hasFlag("--force") || hasFlag("-f");
+      const ref = getFlagValue("--ref") ?? "v1";
+      const result = installPrBotWorkflow({ force, ref });
+      if (result.status === "aborted-not-git") {
+        process.stdout.write(error(result.reason));
+        process.exit(1);
+      }
+      if (result.status === "skipped-exists") {
+        process.stdout.write(
+          warn(
+            `Workflow already present at ${result.path}. Pass --force to overwrite.`
+          )
+        );
+        break;
+      }
+      process.stdout.write(success(`Created ${result.path}`));
+      process.stdout.write(`  ${style.dim(`Default branch: ${result.defaultBranch}`)}
+`);
+      process.stdout.write(`  ${style.dim(`Pinned to:      kodiii/ctxloom/apps/pr-bot@${ref}`)}
+
+`);
+      process.stdout.write(
+        nextStep(
+          "Commit and push the workflow",
+          'git add .github/workflows/ctxloom-review.yml && git commit -m "ci: enable ctxloom pr-bot" && git push'
+        )
+      );
+      break;
+    }
     case "init": {
       process.stdout.write(header("Init"));
       const initRoot = process.cwd();
@@ -1327,7 +1479,7 @@ async function main() {
         registerArgs.splice(aliasIdx, 2);
       }
       const repoPath = registerArgs[0] ?? ".";
-      const absPath = path3.resolve(repoPath);
+      const absPath = path4.resolve(repoPath);
       try {
         const stat = await import("fs").then((m) => m.statSync(absPath));
         if (!stat.isDirectory()) {
@@ -1339,15 +1491,15 @@ async function main() {
         process.exit(1);
       }
       if (alias !== void 0) {
-        const { validateAlias } = await import("./src-Z4U6JJBW.js");
+        const { validateAlias } = await import("./src-ETJVZARU.js");
         const v = validateAlias(alias);
         if (!v.ok) {
           console.error(`[ctxloom] Invalid alias: ${v.reason}`);
           process.exit(1);
         }
       }
-      const dbPath = path3.join(absPath, ".ctxloom", "vectors.lancedb");
-      const registryPath = path3.join(os.homedir(), ".ctxloom", "repos.json");
+      const dbPath = path4.join(absPath, ".ctxloom", "vectors.lancedb");
+      const registryPath = path4.join(os.homedir(), ".ctxloom", "repos.json");
       const reg = new RepoRegistry(registryPath);
       try {
         reg.register(absPath, dbPath, alias !== void 0 ? { alias } : {});
@@ -1367,7 +1519,7 @@ async function main() {
       break;
     }
     case "repos": {
-      const registryPath = path3.join(os.homedir(), ".ctxloom", "repos.json");
+      const registryPath = path4.join(os.homedir(), ".ctxloom", "repos.json");
       const reg = new RepoRegistry(registryPath);
       const repos = reg.list();
       if (repos.length === 0) {
@@ -1424,7 +1576,7 @@ async function main() {
     }
     case "review-suggest": {
       const root = process.cwd();
-      const ctxloomDir = path3.join(root, ".ctxloom");
+      const ctxloomDir = path4.join(root, ".ctxloom");
       const max = parseInt(getFlagValue("--max=") ?? "3", 10);
       if (isNaN(max) || max <= 0) {
         console.error("[ctxloom] --max must be a positive integer.");
@@ -1458,7 +1610,7 @@ async function main() {
         const allFiles = store.ownership.allNodes();
         const ruleMap = /* @__PURE__ */ new Map();
         for (const file of allFiles) {
-          const dir = path3.dirname(file);
+          const dir = path4.dirname(file);
           const stats = store.ownership.statsFor(file);
           if (!stats) continue;
           const topOwners = stats.owners.filter((o) => o.share >= minShare).slice(0, 2);
@@ -1472,7 +1624,7 @@ async function main() {
           }
         }
         const rules = Array.from(ruleMap.entries()).map(([pattern, handles]) => ({ pattern, handles: Array.from(handles) })).sort((a, b) => a.pattern.localeCompare(b.pattern));
-        const codeownersPath = path3.join(root, ".github", "CODEOWNERS");
+        const codeownersPath = path4.join(root, ".github", "CODEOWNERS");
         const content = await generateCODEOWNERS(codeownersPath, rules);
         if (writeFlag) {
           await writeCODEOWNERS(codeownersPath, content);
@@ -1528,7 +1680,7 @@ Suggested reviewers for ${files.length} file(s):`);
     }
     case "authors-sync": {
       const root = process.cwd();
-      const ctxloomDir = path3.join(root, ".ctxloom");
+      const ctxloomDir = path4.join(root, ".ctxloom");
       const token = process.env.GITHUB_TOKEN;
       if (!token) {
         console.error("[ctxloom] GITHUB_TOKEN env var required for authors-sync.");
@@ -1583,7 +1735,7 @@ Suggested reviewers for ${files.length} file(s):`);
         process.stderr.write("[ctxloom] --limit must be a non-negative integer (0 for unlimited)\n");
         process.exit(2);
       }
-      const { loadRulesConfig, RulesChecker, formatText, formatJson, RulesConfigError } = await import("./src-Z4U6JJBW.js");
+      const { loadRulesConfig, RulesChecker, formatText, formatJson, RulesConfigError } = await import("./src-ETJVZARU.js");
       let config;
       try {
         config = await loadRulesConfig(root);
@@ -1607,7 +1759,7 @@ Suggested reviewers for ${files.length} file(s):`);
       }
       let graph;
       if (useSnapshot) {
-        const { DependencyGraph: DG } = await import("./src-Z4U6JJBW.js");
+        const { DependencyGraph: DG } = await import("./src-ETJVZARU.js");
         graph = new DG();
         const loaded = await graph.loadSnapshotOnly(root);
         if (!loaded) {
@@ -1616,7 +1768,7 @@ Suggested reviewers for ${files.length} file(s):`);
         }
       } else {
         process.stderr.write("[ctxloom] Building dependency graph...\n");
-        const { ASTParser: ASTParser2, DependencyGraph: DependencyGraph2 } = await import("./src-Z4U6JJBW.js");
+        const { ASTParser: ASTParser2, DependencyGraph: DependencyGraph2 } = await import("./src-ETJVZARU.js");
         let parser;
         try {
           parser = new ASTParser2();
@@ -1659,6 +1811,8 @@ Usage:
   ctxloom init                 Scaffold .mcp.json + .gitignore for this project
   ctxloom index                Index the current directory and build dependency graph
   ctxloom setup                Detect and configure MCP-compatible AI tools (global)
+  ctxloom install-pr-bot       Drop .github/workflows/ctxloom-review.yml into this repo
+                                (use --force to overwrite, --ref <tag> to pin a version)
   ctxloom grammars             Show grammar cache status
   ctxloom grammars --download  Pre-download all language grammars
   ctxloom register [path]      Register a repo for cross-repo search (defaults to cwd)

package/dist/{src-Z4U6JJBW.js → src-ETJVZARU.js}

@@ -101,7 +101,7 @@ import {
   validateDefaultRoot,
   wrapWithIndexingEnvelope,
   writeCODEOWNERS
-} from "./chunk-3MA5KZYI.js";
+} from "./chunk-AJJYAZNH.js";
 import {
   VectorStore
 } from "./chunk-DVI2RWJR.js";
@@ -224,4 +224,4 @@ export {
   wrapWithIndexingEnvelope,
   writeCODEOWNERS
 };
-//# sourceMappingURL=src-Z4U6JJBW.js.map
+//# sourceMappingURL=src-ETJVZARU.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ctxloom-pro",
-  "version": "1.2.1",
+  "version": "1.2.3",
   "description": "ctxloom — The Universal Code Context Engine. A local-first MCP server providing intelligent code context via hybrid Vector + AST + Graph search with Skeletonization (92% token reduction).",
   "type": "module",
   "main": "dist/index.js",