Master

.github/workflows/code-review.yml

@@ -0,0 +1,43 @@
+name: PR Code Reviewer
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+
+jobs:
+  review:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+
+      - name: Install dependencies
+        run: pip install gitpython openai
+
+      - name: Get changed files
+        run: git diff --name-only origin/main > changed.txt
+
+      - name: Run reviewer
+        env:
+          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
+        run: python main.py > report.txt
+
+      - name: Comment PR
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const fs = require('fs');
+            const report = fs.readFileSync('report.txt', 'utf8');
+
+            github.rest.issues.createComment({
+              issue_number: context.issue.number,
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              body: report
+            });

ENDPOINTS.md

@@ -0,0 +1,246 @@
+# API Endpoints
+
+Base URL: `http://localhost:8000`
+
+---
+
+## Authentication
+
+### `POST /register`
+Create a new user account.
+
+**Request:**
+```json
+{ "email": "user@example.com", "password": "yourpassword" }
+```
+**Response:**
+```json
+{ "token": "<jwt>", "email": "user@example.com" }
+```
+**Errors:** `400` — Email already registered.
+
+---
+
+### `POST /login`
+Sign in and receive a JWT token.
+
+**Request:**
+```json
+{ "email": "user@example.com", "password": "yourpassword" }
+```
+**Response:**
+```json
+{ "token": "<jwt>", "email": "user@example.com" }
+```
+**Errors:** `401` — Invalid email or password.
+
+---
+
+## Analysis
+
+### `POST /analyze`
+Analyze a GitHub repository. Saves to history if authenticated.
+
+**Headers (optional):** `Authorization: Bearer <token>`
+
+**Request:**
+```json
+{
+  "url": "https://github.com/user/repo",
+  "branch": "main",
+  "client_id": "client_abc123"
+}
+```
+- `branch` — optional, defaults to repo default branch
+- `client_id` — optional, used for WebSocket progress updates
+
+**Response:**
+```json
+{
+  "repo_url": "...",
+  "branch": "main",
+  "branches": [...],
+  "meta": { "full_name": "...", "stars": 0, "forks": 0, ... },
+  "tags": [...],
+  "commits": [...],
+  "pull_requests": [...],
+  "issues": [...],
+  "summary": { "total": 0, "code": 0, "docs": 0, "other": 0, "issues": 0 },
+  "code": [...],
+  "docs": [...],
+  "other": [...]
+}
+```
+
+---
+
+### `POST /switch-branch`
+Switch to a different branch and re-analyze files. Skips GitHub API calls.
+
+**Request:**
+```json
+{ "url": "https://github.com/user/repo", "branch": "feature-x" }
+```
+**Response:** Same structure as `/analyze`
+
+---
+
+### `POST /branches`
+Get all branches for a repository without full analysis.
+
+**Request:**
+```json
+{ "url": "https://github.com/user/repo" }
+```
+**Response:**
+```json
+{
+  "branches": [
+    { "name": "main", "is_default": true, "merged": true, "sha": "abc1234" }
+  ]
+}
+```
+
+---
+
+### `POST /analyze/pr-diff`
+Analyze only the files changed in a pull request.
+
+**Headers (optional):** `Authorization: Bearer <token>`
+
+**Request:**
+```json
+{
+  "url": "https://github.com/user/repo",
+  "base_branch": "main",
+  "compare_branch": "feature-x",
+  "client_id": "client_abc123"
+}
+```
+**Response:**
+```json
+{
+  "repo_url": "...",
+  "base_branch": "main",
+  "compare_branch": "feature-x",
+  "diff_stats": { "files_changed": 3, "insertions": 45, "deletions": 12 },
+  "summary": { "files_changed": 3, "code_files": 2, "issues": 5 },
+  "files": [...]
+}
+```
+
+---
+
+## History
+
+### `GET /history`
+Get analysis history for the authenticated user.
+
+**Headers:** `Authorization: Bearer <token>`
+
+**Response:**
+```json
+[
+  {
+    "id": "2024-01-01T00:00:00",
+    "repo_url": "https://github.com/user/repo",
+    "branch": "main",
+    "summary": { "total": 100, "code": 80, "docs": 10, "other": 10, "issues": 5 },
+    "meta": { ... }
+  }
+]
+```
+Returns `[]` if not authenticated.
+
+---
+
+### `DELETE /history`
+Clear all history for the authenticated user.
+
+**Headers:** `Authorization: Bearer <token>`
+
+**Response:**
+```json
+{ "status": "cleared" }
+```
+
+---
+
+## Export
+
+### `POST /export/json`
+Export analysis report as a downloadable JSON file.
+
+**Request:** Full analysis result object (from `/analyze` response)
+
+**Response:** `application/json` file download — `analysis-report.json`
+
+---
+
+### `POST /export/pdf`
+Export analysis report as a downloadable PDF file.
+
+**Request:** Full analysis result object (from `/analyze` response)
+
+**Response:** `application/pdf` file download — `analysis-report.pdf`
+
+---
+
+## Cache
+
+### `DELETE /cache`
+Clear all cached file analysis results.
+
+**Response:**
+```json
+{ "status": "cache cleared" }
+```
+
+---
+
+## WebSocket
+
+### `WS /ws/{client_id}`
+Real-time progress updates during analysis.
+
+**Connect:** `ws://localhost:8000/ws/<client_id>`
+
+**Messages received:**
+```json
+{ "stage": "cloning",   "message": "Cloning repository...",      "progress": 0  }
+{ "stage": "scanning",  "message": "Found 1234 files...",         "progress": 5  }
+{ "stage": "analyzing", "message": "Analyzing... 500/1234",       "progress": 45, "total": 1234, "completed": 500 }
+{ "stage": "fetching",  "message": "Fetching repository metadata...", "progress": 90 }
+{ "stage": "complete",  "message": "Analysis complete!",          "progress": 100 }
+```
+
+---
+
+## Other
+
+### `GET /`
+Serve the frontend HTML page.
+
+### `GET /health`
+Health check.
+
+**Response:**
+```json
+{ "status": "ok" }
+```
+
+---
+
+## Authentication Notes
+
+- JWT tokens expire after **30 days**
+- Pass token as: `Authorization: Bearer <token>`
+- All auth-required endpoints return empty/no-op if token is missing (guest mode)
+- Set `JWT_SECRET` env var for persistent sessions across server restarts
+
+## Rate Limiting
+
+GitHub API is used without a token (60 requests/hour limit). For heavy usage, set:
+```bash
+export GITHUB_TOKEN="your_token"
+```

analyzer/__init__.py

@@ -0,0 +1,12 @@
+from .python_analyzer import PythonAnalyzer
+from .go_analyzer import GoAnalyzer
+from .generic import GenericAnalyzer
+
+def get_analyzer(language):
+    """Return appropriate analyzer instance based on detected language."""
+    if language == "python":
+        return PythonAnalyzer()
+    elif language == "go":
+        return GoAnalyzer()
+    else:
+        return GenericAnalyzer()

analyzer/detector.py

@@ -0,0 +1,74 @@
+import os
+
+EXTENSION_MAP = {
+    ".py": "python",
+    ".ipynb": "python",
+    ".go": "go",
+    ".js": "javascript",
+    ".ts": "typescript",
+    ".java": "java",
+    ".cpp": "cpp",
+    ".c": "c",
+    ".rs": "rust",
+    ".php": "php",
+    ".rb": "ruby",
+    ".kt": "kotlin",
+    ".swift": "swift",
+    ".sh": "bash",
+    ".bash": "bash",
+    ".zsh": "bash",
+    ".html": "html",
+    ".htm": "html",
+    ".css": "css",
+}
+
+SPECIAL_FILES = {
+    "Dockerfile": "docker",
+    "dockerfile": "docker",
+    "Makefile": "make",
+    "CMakeLists.txt": "cmake",
+}
+
+
+def detect_language(file_path, ext_hint: str = ""):
+    """Detect programming language from file path and content."""
+    filename = os.path.basename(file_path)
+
+    # Layer 1: special filenames
+    if filename in SPECIAL_FILES:
+        return SPECIAL_FILES[filename]
+
+    # Layer 2: use pre-computed ext hint if provided, else extract from path
+    ext = (ext_hint or os.path.splitext(file_path)[1]).lower()
+    if ext in EXTENSION_MAP:
+        return EXTENSION_MAP[ext]
+
+    # Layer 3: content-based fallback
+    return detect_by_content(file_path)
+
+
+def detect_by_content(file_path):
+    """Fallback language detection by analyzing file content."""
+    try:
+        # Only read first 512 bytes for speed
+        with open(file_path, "r", encoding="utf-8", errors="ignore") as f:
+            content = f.read(512)
+
+        # Quick substring checks (faster than regex)
+        if "package main" in content or "func main()" in content:
+            return "go"
+        if content.startswith("#!/bin/bash") or content.startswith("#!/bin/sh") or content.startswith("#!/usr/bin/env bash"):
+            return "bash"
+        if "def " in content or "import " in content:
+            return "python"
+        if "public class" in content or "private class" in content:
+            return "java"
+        if "console.log" in content or "function(" in content:
+            return "javascript"
+        if "#include" in content:
+            return "cpp"
+
+    except:
+        pass
+
+    return "unknown"