rebar-mcp 2.4.0 → 2.4.2

package/.claude/settings.json

@@ -30,6 +30,15 @@
       }
     ],
     "PreToolCall": [
+      {
+        "matcher": "Write|Edit|Bash",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "rebar prereview"
+          }
+        ]
+      },
       {
         "matcher": "Bash",
         "hooks": [

package/.claude/skills/bmmovop8dxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/SKILL.md

@@ -0,0 +1,21 @@
+---
+name: bmmovop8dxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
+description: A test skill
+invocation: undefined
+context: undefined
+---
+
+# bmmovop8dxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
+
+A test skill
+
+## Instructions
+
+<!-- Replace this with your skill instructions.
+Good skill instructions:
+1. Define the agent's role clearly
+2. Specify the exact output format
+3. List what to check/do step by step
+4. Include examples of good output
+-->
+

package/.claude/skills/bmmxlvoqnxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/SKILL.md

@@ -0,0 +1,21 @@
+---
+name: bmmxlvoqnxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
+description: A test skill
+invocation: undefined
+context: undefined
+---
+
+# bmmxlvoqnxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
+
+A test skill
+
+## Instructions
+
+<!-- Replace this with your skill instructions.
+Good skill instructions:
+1. Define the agent's role clearly
+2. Specify the exact output format
+3. List what to check/do step by step
+4. Include examples of good output
+-->
+

package/.claude/skills/bnd-mmovop8h/SKILL.md

@@ -0,0 +1,21 @@
+---
+name: bnd-mmovop8h
+description: aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+invocation: undefined
+context: undefined
+---
+
+# bnd-mmovop8h
+
+aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+
+## Instructions
+
+<!-- Replace this with your skill instructions.
+Good skill instructions:
+1. Define the agent's role clearly
+2. Specify the exact output format
+3. List what to check/do step by step
+4. Include examples of good output
+-->
+

package/.claude/skills/bnd-mmxlvoqs/SKILL.md

@@ -0,0 +1,21 @@
+---
+name: bnd-mmxlvoqs
+description: aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+invocation: undefined
+context: undefined
+---
+
+# bnd-mmxlvoqs
+
+aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+
+## Instructions
+
+<!-- Replace this with your skill instructions.
+Good skill instructions:
+1. Define the agent's role clearly
+2. Specify the exact output format
+3. List what to check/do step by step
+4. Include examples of good output
+-->
+

package/.claude/skills/nl-mmovop8r/SKILL.md

@@ -0,0 +1,25 @@
+---
+name: nl-mmovop8r
+description: Line one
+Line two
+Line three
+invocation: undefined
+context: undefined
+---
+
+# nl-mmovop8r
+
+Line one
+Line two
+Line three
+
+## Instructions
+
+<!-- Replace this with your skill instructions.
+Good skill instructions:
+1. Define the agent's role clearly
+2. Specify the exact output format
+3. List what to check/do step by step
+4. Include examples of good output
+-->
+

package/.claude/skills/nl-mmxlvor0/SKILL.md

@@ -0,0 +1,25 @@
+---
+name: nl-mmxlvor0
+description: Line one
+Line two
+Line three
+invocation: undefined
+context: undefined
+---
+
+# nl-mmxlvor0
+
+Line one
+Line two
+Line three
+
+## Instructions
+
+<!-- Replace this with your skill instructions.
+Good skill instructions:
+1. Define the agent's role clearly
+2. Specify the exact output format
+3. List what to check/do step by step
+4. Include examples of good output
+-->
+

package/.dockerignore

@@ -0,0 +1,7 @@
+node_modules
+.git
+.github
+.claude
+.rebar
+*.md
+!README.md

package/.rebar/decisions/2026-03-19/001_write__tmp_test-secret.ts.json

@@ -0,0 +1,13 @@
+{
+  "id": "prereview_2026-03-19_001",
+  "timestamp": "2026-03-19T14:04:30.725Z",
+  "operation": "write",
+  "target": "/tmp/test-secret.ts",
+  "decision": "approve",
+  "severity": "info",
+  "tier": "pro",
+  "engine": "local",
+  "latencyMs": 0,
+  "patterns": [],
+  "reasoning": "No issues detected"
+}

package/.rebar/decisions/2026-03-19/002_write__tmp_test.ts.json

@@ -0,0 +1,13 @@
+{
+  "id": "prereview_2026-03-19_002",
+  "timestamp": "2026-03-19T14:54:17.648Z",
+  "operation": "write",
+  "target": "/tmp/test.ts",
+  "decision": "approve",
+  "severity": "info",
+  "tier": "pro",
+  "engine": "local",
+  "latencyMs": 0,
+  "patterns": [],
+  "reasoning": "No issues detected"
+}

package/.rebar/decisions/2026-03-19/003_write__tmp_test.ts.json

@@ -0,0 +1,13 @@
+{
+  "id": "prereview_2026-03-19_003",
+  "timestamp": "2026-03-19T14:54:53.876Z",
+  "operation": "write",
+  "target": "/tmp/test.ts",
+  "decision": "approve",
+  "severity": "info",
+  "tier": "pro",
+  "engine": "local",
+  "latencyMs": 0,
+  "patterns": [],
+  "reasoning": "No issues detected"
+}

package/.rebar/decisions/2026-03-19/004_write__tmp_test.ts.json

@@ -0,0 +1,20 @@
+{
+  "id": "prereview_2026-03-19_004",
+  "timestamp": "2026-03-19T15:05:54.120Z",
+  "operation": "write",
+  "target": "/tmp/test.ts",
+  "decision": "block",
+  "severity": "critical",
+  "tier": "pro",
+  "engine": "local",
+  "latencyMs": 0,
+  "patterns": [
+    {
+      "id": "secret-0",
+      "name": "Secret Detection",
+      "severity": "critical",
+      "message": "Potential secret or API key detected"
+    }
+  ],
+  "reasoning": "1 critical issue(s): Secret Detection"
+}

package/Dockerfile

@@ -0,0 +1,25 @@
+FROM node:20-slim AS builder
+
+WORKDIR /app
+
+COPY package*.json ./
+RUN npm ci
+
+COPY tsconfig.json ./
+COPY src/ ./src/
+
+RUN npm run build
+
+FROM node:20-slim
+
+WORKDIR /app
+
+COPY package*.json ./
+RUN npm ci --only=production
+
+COPY --from=builder /app/dist ./dist
+COPY templates/ ./templates/
+
+EXPOSE 3000
+
+ENTRYPOINT ["node", "dist/index.js", "--http", "--port", "3000"]

package/README.md

@@ -271,6 +271,193 @@ npx rebar-mcp prereview-rules --add "pattern=TODO" --severity warning
 
 ---
 
+## LLM-Powered Semantic Analysis (Pro/Team)
+
+Local regex patterns catch obvious issues. LLM review catches the hard stuff:
+
+| Issue Type | Local (Free) | LLM (Paid) |
+|------------|--------------|------------|
+| Hardcoded secrets | ✓ | ✓ |
+| Dangerous commands | ✓ | ✓ |
+| N+1 query patterns | ✗ | ✓ |
+| Race conditions | ✗ | ✓ |
+| Business logic violations | ✗ | ✓ |
+| Architecture drift | ✗ | ✓ |
+| Context-aware review | ✗ | ✓ |
+
+### Setup
+
+```bash
+# Set your Anthropic API key
+export REBAR_API_KEY=sk-ant-...
+
+# Choose your tier
+export REBAR_TIER=pro   # 1,000 LLM reviews/month
+# or
+export REBAR_TIER=team  # 5,000 LLM reviews/month
+```
+
+### How It Works
+
+1. **Context Building** — Extracts CLAUDE.md rules, recent blocks, and project conventions
+2. **Hybrid Review** — Runs local patterns first, then LLM for deeper analysis
+3. **Learning** — Records blocked patterns for future reference
+4. **Fallback** — Gracefully falls back to local if LLM unavailable
+
+```bash
+# Check license status
+npx rebar-mcp license
+```
+
+---
+
+## Cross-Session Memory
+
+Rebar learns from your project's decision history and applies that knowledge to future reviews.
+
+### What Gets Learned
+
+- **Pattern Frequency** — Patterns blocked 5+ times escalate from warning to critical
+- **Project Insights** — Common issues in specific directories
+- **Review Statistics** — Block rates, latency metrics
+
+### Commands
+
+```bash
+# View current memory
+npx rebar-mcp memory show
+
+# Learn from decision history
+npx rebar-mcp memory learn
+
+# Clear memory (start fresh)
+npx rebar-mcp memory clear
+
+# Export memory as JSON
+npx rebar-mcp memory export
+```
+
+### Memory Storage
+
+Memory is persisted to `.rebar/memory.json`:
+
+```json
+{
+  "version": 1,
+  "learnedPatterns": [
+    {
+      "id": "aws-key",
+      "name": "AWS Access Key",
+      "blockCount": 12,
+      "severity": "critical",
+      "lastSeen": "2024-01-15T14:30:00Z"
+    }
+  ],
+  "projectInsights": [
+    {
+      "id": "api-dir-issues",
+      "description": "src/api/ frequently has SQL injection patterns",
+      "affectedFiles": ["src/api/users.ts", "src/api/orders.ts"],
+      "confidence": 0.85
+    }
+  ]
+}
+```
+
+---
+
+## Analytics Dashboard
+
+Analyze trends and generate insights from your pre-review history.
+
+```bash
+# Last 30 days (default)
+npx rebar-mcp analytics
+
+# Last 7 days
+npx rebar-mcp analytics 7
+
+# JSON export for dashboards
+npx rebar-mcp analytics --format json
+```
+
+### Sample Output
+
+```
+Pre-Review Analytics Report
+===========================
+
+Period: 2024-01-01 to 2024-01-31 (30 days)
+
+Summary
+-------
+Total reviews: 247
+Blocked: 23 (9.3%)
+Warned: 41 (16.6%)
+Approved: 183
+
+Performance
+-----------
+Avg latency: 45ms
+P50 latency: 32ms
+P95 latency: 156ms
+
+Top Patterns
+------------
+  ↑ AWS Access Key: 12x (0.4/day)
+  → Empty Catch Block: 8x (0.3/day)
+  ↓ any Type Usage: 5x (0.2/day)
+
+Recent Activity (last 7 days)
+-----------------------------
+  2024-01-25: ████ 4 (1B/0W)
+  2024-01-26: ██████████ 10 (2B/3W)
+  2024-01-27: ████████ 8 (1B/2W)
+
+Insights
+--------
+  • Low block rate (9.3%) - code quality is good!
+  • "AWS Access Key" is trending upward - review recent code
+  • Excellent review speed: 45ms average
+```
+
+---
+
+## Pricing Tiers
+
+| Feature | Free | Pro ($19/mo) | Team ($49/user/mo) |
+|---------|------|--------------|-------------------|
+| Regex patterns | Unlimited | Unlimited | Unlimited |
+| LLM reviews | 0 | 1,000/month | 5,000/month |
+| Cross-session memory | ✗ | ✓ | ✓ |
+| Analytics | Basic | Full | Full |
+| Audit retention | 7 days | 90 days | 1 year |
+| Support | Community | Email | Priority |
+
+---
+
+## CLI Reference
+
+```bash
+rebar init [options]          # Initialize Rebar enforcement
+rebar audit [options]         # Run quality audit
+rebar doctor [options]        # Check setup health
+rebar set-strictness <level>  # Change enforcement level
+rebar metrics [options]       # View quality score history
+rebar badge [options]         # Generate quality badge SVG
+
+# Pre-Review
+rebar prereview [options]     # Run pre-review (invoked by hooks)
+rebar prereview-stats         # View decision statistics
+
+# LLM & Memory
+rebar license                 # View license and usage
+rebar memory [action]         # Manage cross-session memory
+rebar analytics [days]        # View trends and insights
+```
+
+---
+
 ## License
 
 MIT

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAshCA,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAgI5D"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AA2mCA,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAqJ5D"}

package/dist/cli.js

@@ -19,12 +19,57 @@ import { generateCursorConfig } from "./services/cursor-generator.js";
 import { generateWindsurfConfig } from "./services/windsurf-generator.js";
 import { generateCodexConfig } from "./services/codex-generator.js";
 import { atomicWrite } from "./services/file-ops.js";
+import { createInterface } from "node:readline";
 import { CONTEXT_WINDOW_TOKENS } from "./constants.js";
 import { runPrereview, loadPrereviewConfig, } from "./services/prereview-engine.js";
 import { runHybridPrereview } from "./services/prereview-llm.js";
 import { loadLicense, loadUsage, canUseLLMReview } from "./services/license.js";
 import { loadMemory, clearMemory, learnFromHistory, exportMemorySummary, } from "./services/prereview-memory.js";
-const VERSION = "2.4.0";
+import { analyzeDecisionHistory, formatAnalyticsReport, exportAnalyticsJSON, generateBlockRateChart, } from "./services/prereview-analytics.js";
+const VERSION = "2.4.2";
+/**
+ * Read stdin if available (non-blocking check)
+ * Returns the parsed JSON if it's a valid hook input, null otherwise
+ */
+async function readStdinHookInput() {
+    // Check if stdin has data (is a pipe, not a TTY)
+    if (process.stdin.isTTY) {
+        return null;
+    }
+    return new Promise((resolve) => {
+        let data = "";
+        const rl = createInterface({
+            input: process.stdin,
+            terminal: false,
+        });
+        const timeout = setTimeout(() => {
+            rl.close();
+            resolve(null);
+        }, 100); // 100ms timeout for stdin
+        rl.on("line", (line) => {
+            data += line;
+        });
+        rl.on("close", () => {
+            clearTimeout(timeout);
+            if (!data) {
+                resolve(null);
+                return;
+            }
+            try {
+                const parsed = JSON.parse(data);
+                if (parsed.tool_name && parsed.tool_input) {
+                    resolve(parsed);
+                }
+                else {
+                    resolve(null);
+                }
+            }
+            catch {
+                resolve(null);
+            }
+        });
+    });
+}
 function parseArgs(args) {
     const options = {
         path: ".",
@@ -528,10 +573,10 @@ async function cmdMetrics(options) {
         return 1;
     }
 }
-async function cmdPrereview(options, operation, filePath, command) {
+async function cmdPrereview(options, operation, filePath, command, stdinContent) {
     const projectPath = resolveProjectPath(options.path);
     // Load config
-    let config = await loadPrereviewConfig(projectPath);
+    const config = await loadPrereviewConfig(projectPath);
     if (!config) {
         // Pre-review not enabled, pass through
         return 0;
@@ -549,9 +594,12 @@ async function cmdPrereview(options, operation, filePath, command) {
     if (op === "bash") {
         content = command || "";
     }
+    else if (stdinContent) {
+        // Use content from stdin (PreToolCall hook provides this)
+        content = stdinContent;
+    }
     else if (filePath) {
-        // For write/edit, we'd ideally get the content being written
-        // For now, read the file if it exists (for edit operations)
+        // Fallback: read existing file (only useful for Edit, not Write)
         const existing = await readFileSafe(filePath);
         content = existing || "";
     }
@@ -838,6 +886,23 @@ async function cmdMemory(options, action) {
             return 1;
     }
 }
+async function cmdAnalytics(options, daysBack) {
+    const projectPath = resolveProjectPath(options.path);
+    console.error("Analyzing decision history...");
+    const analysis = await analyzeDecisionHistory(projectPath, daysBack);
+    if (options.format === "json") {
+        console.log(exportAnalyticsJSON(analysis));
+    }
+    else {
+        console.log(formatAnalyticsReport(analysis));
+        // Add block rate chart if we have data
+        if (analysis.daily.length > 0) {
+            console.log();
+            console.log(generateBlockRateChart(analysis.daily));
+        }
+    }
+    return 0;
+}
 async function cmdBadge(options) {
     const projectPath = resolveProjectPath(options.path);
     // Run audit to get current score
@@ -941,36 +1006,49 @@ export async function runCLI(args) {
         case "badge":
             return cmdBadge(options);
         case "prereview": {
-            // Parse prereview-specific args
+            // Try to read hook input from stdin first (Claude Code PreToolCall format)
+            const hookInput = await readStdinHookInput();
             let op = "";
             let file = "";
             let cmd = "";
-            for (let i = 0; i < positional.length; i++) {
-                const arg = positional[i];
-                if (arg === "--op" && positional[i + 1]) {
-                    op = positional[++i];
-                }
-                else if (arg === "--file" && positional[i + 1]) {
-                    file = positional[++i];
-                }
-                else if (arg === "--cmd" && positional[i + 1]) {
-                    cmd = positional[++i];
-                }
+            let content = "";
+            if (hookInput) {
+                // Extract from stdin JSON (PreToolCall hook format)
+                op = hookInput.tool_name;
+                const toolInput = hookInput.tool_input;
+                file = toolInput.file_path || "";
+                content = toolInput.content || "";
+                cmd = toolInput.command || "";
             }
-            // Also check original args for flags
-            const allArgs = process.argv.slice(2);
-            for (let i = 0; i < allArgs.length; i++) {
-                if (allArgs[i] === "--op" && allArgs[i + 1]) {
-                    op = allArgs[++i];
-                }
-                else if (allArgs[i] === "--file" && allArgs[i + 1]) {
-                    file = allArgs[++i];
+            else {
+                // Fallback to command-line args
+                for (let i = 0; i < positional.length; i++) {
+                    const arg = positional[i];
+                    if (arg === "--op" && positional[i + 1]) {
+                        op = positional[++i];
+                    }
+                    else if (arg === "--file" && positional[i + 1]) {
+                        file = positional[++i];
+                    }
+                    else if (arg === "--cmd" && positional[i + 1]) {
+                        cmd = positional[++i];
+                    }
                 }
-                else if (allArgs[i] === "--cmd" && allArgs[i + 1]) {
-                    cmd = allArgs[++i];
+                // Also check original args for flags
+                const allArgs = process.argv.slice(2);
+                for (let i = 0; i < allArgs.length; i++) {
+                    if (allArgs[i] === "--op" && allArgs[i + 1]) {
+                        op = allArgs[++i];
+                    }
+                    else if (allArgs[i] === "--file" && allArgs[i + 1]) {
+                        file = allArgs[++i];
+                    }
+                    else if (allArgs[i] === "--cmd" && allArgs[i + 1]) {
+                        cmd = allArgs[++i];
+                    }
                 }
             }
-            return cmdPrereview(options, op, file, cmd);
+            return cmdPrereview(options, op, file, cmd, content);
         }
         case "prereview-stats":
             return cmdPrereviewStats(options);
@@ -978,6 +1056,10 @@ export async function runCLI(args) {
             return cmdLicense(options);
         case "memory":
             return cmdMemory(options, positional[0] || "show");
+        case "analytics": {
+            const days = positional[0] ? parseInt(positional[0], 10) : 30;
+            return cmdAnalytics(options, days);
+        }
         case "version":
         case "--version":
         case "-v":
@@ -1000,6 +1082,7 @@ Usage:
   rebar prereview-stats         View pre-review decision statistics
   rebar license                 View license status and LLM usage
   rebar memory [action]         Manage cross-session memory (show|learn|clear|export)
+  rebar analytics [days]        View trend analysis and insights (default: 30 days)
   rebar version                 Print version
   rebar help                    Show this help
 
@@ -1019,6 +1102,8 @@ Examples:
   rebar init --strictness strict --platforms all
   rebar audit --threshold 80 --format json
   rebar doctor
+  rebar analytics 7                     # Last 7 days of trends
+  rebar analytics --format json         # JSON export for dashboards
   rebar prereview-stats
   npx rebar-mcp audit --threshold 70    # CI/CD usage