🐼 PandaOps — AI-Powered Pull Request Reviewer

PandaOps is a TypeScript-based CLI tool that automatically analyzes Pull Requests using heuristics and AI (via OpenAI models). It fetches PR diffs, runs intelligent reviews, and posts actionable feedback directly to GitHub, Bitbucket, or Azure DevOps.

---

🚀 Features

• Multi-platform support — Works with GitHub, Bitbucket, and Azure DevOps.
• AI-driven code reviews — Uses OpenAI models (default: gpt-5-mini) to produce clear, concise feedback.
• Heuristic scanning — Detects common issues like TODOs, console.log, debugger, or large diffs.
• Inline and summary comments — Posts detailed code-level feedback directly to PRs.
• Dry-run & JSON output modes — Preview or integrate with other tools.
• Configurable behavior — Focus AI on errors, warnings, tips, notes, or grammar.
• Fail-on flags — Enforce stricter CI/CD pipelines with --fail-on-comments or --fail-on-warnings.

---

🧩 Installation

npm install -g @omnedia/panda-ops

Or use locally:

npm install @omnedia/panda-ops --save-dev

Build from source:

git clone https://github.com/omnedia/panda-ops.git
cd panda-ops
npm install
npm run build

---

⚙️ Usage

CLI Example

panda-ops \
  --provider github \
  --repository owner/repo \
  --pull-request-id 123 \
  --token $GITHUB_TOKEN \
  --openai-api-key $OPENAI_API_KEY

---

🧠 GitHub Actions Integration

You can run PandaOps automatically on pull requests using GitHub Actions.

Add this workflow to .github/workflows/panda-ops.yml:

name: AI PR Review

on:
  pull_request:
    types: [opened, synchronize, reopened]

jobs:
  review:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      pull-requests: write

    steps:
      - uses: actions/checkout@v4

      - uses: omnedia/panda-ops@v1
        with:
          github_token: ${{ secrets.GITHUB_TOKEN }}
          openai_api_key: ${{ secrets.OPENAI_API_KEY }}
          fail_on_warnings: true

Full input list (for customization):

Input	Description	Default
github_token	GitHub token (required)	—
openai_api_key	OpenAI API key (required)	—
provider	VCS provider (github, bitbucket, azure)	github
repository	Repository identifier (owner/name)	${{ github.repository }}
pull_request_id	PR number	${{ github.event.pull_request.number }}
dry_run	Log output only, no posting	false
output_json	Output machine-readable JSON	false
fail_on_comments	Exit with code 2 if comments found	false
fail_on_warnings	Request changes if warnings found	false
ai_enabled	Enable AI processing	true
max_comments	Max number of comments	50
openai_model	Model name	gpt-5-mini
openai_temperature	Sampling temperature	1
ai_focus_errors	Detect critical/breaking issues	true
ai_focus_warn	Detect risky logic	true
ai_focus_tips	Suggest maintainability improvements	true
ai_focus_notes	Add design/architecture notes	false
ai_focus_grammar	Grammar/naming checks	false

---

Other CLI Options

Option	Description
--dry-run	Console-only output.
--output-json	Emit JSON report.
--fail-on-comments	Exit code 2 if comments found.
--fail-on-warnings	Mark PR as Changes Requested.
--openai-model <model>	Specify model (default: gpt-5-mini).
--max-comments <n>	Limit total AI + heuristic comments.

---

🧱 Project Structure

src/
├── main.ts              # CLI entrypoint
├── config.ts            # Configuration and schema validation
├── core/
│   ├── reviewEngine.ts  # AI + heuristic analysis logic
│   ├── diffFetcher.ts   # Unified diff retrieval
│   ├── commentPoster.ts # Review posting logic
│   └── logger.ts        # Pino-based logging
├── adapters/
│   ├── github.ts        # GitHub API integration
│   ├── bitbucket.ts     # Bitbucket API integration
│   └── azure.ts         # Azure DevOps API integration

---

🛠 Development

npm install
npm run dev

Build:

npm run build

Lint:

npm run lint

---

🔒 Permissions

PandaOps requires read access to PR diffs and write access to post review comments.

For GitHub, recommended scopes:

• repo
• pull_requests

---

🧭 Exit Codes

Code	Meaning
0	Success / Approved
1	Configuration or execution error
2	Comments found (--fail-on-comments)

---

🪄 Example Output

[PandaOps] --- DRY RUN ---
Comments: 5 (Heuristic 2 + AI 3)

- src/app.ts:24 [ERROR] Missing null check for user input.
- src/utils/db.ts:10 [WARN] Missing transaction rollback on error.
- src/routes/api.ts:3 [TIP] Avoid using console.log in production.

✅ Summary: 5 issues detected — review before merging.

---

📜 License

MIT © 2025 Omnedia

---

🤝 Contributing

Pull requests and suggestions are welcome!

• Fork the repo
• Create a feature branch (git checkout -b feature-name)
• Commit changes and open a PR

---

Automate code reviews. Catch bugs before they merge. Let the Panda do the work. 🐼