CLI and packages

Run or publish your own reviewer packages. This is not the setup for hosted GitHub reviews.

Hosted reviews always run the official signed review/code package with the provider a platform administrator configured. They do not pull a catalog id you choose, and they do not use Private adversaries.

Use this path when you need one of these:

A local doomer run against a working tree.
A workflow you own, with your model provider key and an explicit package list.
A private package published for that CLI or CI run.

The public catalog on registry.doomer.ai is free to pull after doomer login. Sign-in tracks usage. It is not a paywall and it is not how hosted reviews are entitled. Hosted inference is enabled per project by a platform administrator.

Custom training can save a private catalog and history filters. Collection and serving a customer adapter on hosted reviews are not available. doomer train is a local grading workflow for home-built packages, documented in the CLI reference.

CLI reference

Install, login, pull, and run packages on a working tree. Hosted reviews do not require this.

Run locally

How doomer run chooses a scope, applies permissions, and prints findings.

Self-managed CI

GitHub Actions or Depot with OIDC or a service account, and your own model key.

Author adversaries

Package layout and the TypeScript SDK for a reviewer you run yourself.

Publish

Validate, pack, and push to the project namespace or another OCI registry.

Execution trust

Official signatures and when the CLI will run a package on the host.

Also: TypeScript SDK, permissions, distribution, registry authentication, GitHub Actions, Depot, publish with Actions, publish with Depot, and official signatures.