dingdawg-code-review 1.0.0

package/README.md

@@ -0,0 +1,95 @@
+# dingdawg-code-review
+
+AI Code Review Agent with governance receipts. Scan code for security vulnerabilities, quality issues, performance problems, and best practice violations.
+
+Every review is governed and receipted for audit compliance.
+
+## Install
+
+```bash
+npx dingdawg-code-review
+```
+
+### Claude Code
+
+```bash
+claude mcp add dingdawg-code-review npx dingdawg-code-review
+```
+
+### Cursor / Claude Desktop
+
+Add to your MCP config:
+
+```json
+{
+  "mcpServers": {
+    "dingdawg-code-review": {
+      "command": "npx",
+      "args": ["dingdawg-code-review"]
+    }
+  }
+}
+```
+
+## Tools
+
+### review_code
+
+Scan a code snippet or file for issues.
+
+- Security vulnerabilities (eval, SQL injection, XSS, hardcoded secrets, command injection)
+- Code quality (empty catch blocks, console statements, any types, var usage)
+- Performance (async forEach, await in loops, JSON clone, DOM queries in loops)
+- Best practices (too many params, long files, deep promise chains, hard exits)
+
+**Free tier:** 10 reviews/day
+
+### review_pr
+
+Review a pull request diff.
+
+- Breaking change detection (removed exports, removed endpoints, schema drops)
+- Security scan on all added lines
+- Test coverage gap detection
+- Approve / request-changes decision
+
+**Free tier:** 5 PR reviews/day
+
+### suggest_fix
+
+Get a detailed fix suggestion for any finding.
+
+- Pass the finding ID from review_code or review_pr (e.g., SEC-001, QUAL-003)
+- Returns fix recommendation with explanation
+
+**Free tier:** 20 suggestions/day
+
+## Governance
+
+Every response includes:
+
+- `receipt_id` — Unique receipt (rcpt_xxxx format) for audit trail
+- `timestamp` — ISO 8601 timestamp of when the review was performed
+- `governance_policy` — Policy version applied
+- `rules_checked` — What rule categories were evaluated
+- `findings_by_severity` — Count of findings per severity level
+
+## Severity Levels
+
+| Level | Meaning |
+|-------|---------|
+| critical | Must fix before merge. Security risk or data loss. |
+| high | Should fix before merge. Significant quality or performance issue. |
+| medium | Fix recommended. Code smell or moderate concern. |
+| low | Nice to fix. Minor improvement opportunity. |
+| info | Informational. No action required. |
+
+## Also Available
+
+- **dingdawg-compliance** — AI compliance reports (EU AI Act, Colorado AI Act, SOC2, GDPR)
+- **dingdawg-shield** — AI security scanning and vulnerability detection
+- **dingdawg-governance** — AI agent governance with capability checks and policy enforcement
+
+## License
+
+MIT

package/dist/index.d.ts

@@ -0,0 +1,10 @@
+#!/usr/bin/env node
+/**
+ * dingdawg-code-review — AI Code Review Agent MCP Server
+ *
+ * Governed. Receipted. Production-ready.
+ *
+ * Install: npx dingdawg-code-review
+ * Claude Code: claude mcp add dingdawg-code-review npx dingdawg-code-review
+ */
+export {};