@probelabs/visor 0.1.106 → 0.1.107

package/dist/examples/http-integration-config.yaml

@@ -0,0 +1,240 @@
+version: "1.0"
+
+# Complete example of HTTP integration features
+# Demonstrates http, http_input, and http_client check types
+
+# HTTP server for receiving webhooks (disabled in GitHub Actions)
+http_server:
+  enabled: true
+  port: 8080
+  host: "0.0.0.0"
+  auth:
+    type: bearer_token
+    secret: "${HTTP_SERVER_SECRET}"  # Environment variable
+  endpoints:
+    - path: "/github/webhook"
+      name: "github-events"
+    - path: "/monitoring/health"
+      name: "health-checks"
+
+steps:
+  # === HTTP CLIENT: Fetch data from external APIs ===
+
+  # Fetch repository statistics from GitHub API
+  github-stats:
+    type: http_client
+    url: "https://api.github.com/repos/{{ pr.base | split: '/' | last }}/stats/contributors"
+    headers:
+      Authorization: "token ${GITHUB_TOKEN}"
+      Accept: "application/vnd.github.v3+json"
+    transform: |
+      {
+        "total_contributors": {{ response | size }},
+        "top_contributor": "{{ response | first | map: 'author.login' }}",
+        "total_commits": {{ response | map: 'total' | sum }}
+      }
+    schedule: "0 0 * * 0"  # Weekly on Sunday
+
+  # Fetch build status from CI/CD system
+  ci-status:
+    type: http_client
+    url: "${CI_API_URL}/builds/{{ pr.head }}"
+    method: GET
+    headers:
+      X-API-Key: "${CI_API_KEY}"
+    transform: |
+      {
+        "build_status": "{{ response.status }}",
+        "test_coverage": {{ response.coverage }},
+        "failed_tests": {{ response.failed_tests | default: 0 }}
+      }
+
+  # Poll external service with POST request
+  vulnerability-check:
+    type: http_client
+    url: "${SECURITY_API_URL}/scan"
+    method: POST
+    body: |
+      {
+        "repository": "{{ pr.base }}",
+        "commit": "{{ pr.head }}",
+        "files": {{ pr.files | map: 'filename' | json }}
+      }
+    headers:
+      Content-Type: "application/json"
+      Authorization: "Bearer ${SECURITY_API_TOKEN}"
+    transform: |
+      {
+        "vulnerabilities": {{ response.vulnerabilities | default: [] | json }},
+        "risk_score": {{ response.risk_score | default: 0 }}
+      }
+
+  # === HTTP INPUT: Receive webhook data ===
+
+  # Receive GitHub webhook events
+  github-webhook-receiver:
+    type: http_input
+    endpoint: "/github/webhook"
+    on: [webhook_received]
+    transform: |
+      {
+        "event": "{{ webhook.action }}",
+        "repository": "{{ webhook.repository.full_name }}",
+        "sender": "{{ webhook.sender.login }}"
+      }
+
+  # Receive monitoring health checks
+  health-check-receiver:
+    type: http_input
+    endpoint: "/monitoring/health"
+    on: [webhook_received]
+
+  # === AI ANALYSIS: Process fetched/received data ===
+
+  # Analyze GitHub statistics
+  contributor-analysis:
+    type: ai
+    depends_on: [github-stats]
+    prompt: |
+      Analyze the repository contributor statistics:
+      - Total contributors: {{ outputs['github-stats'].suggestions | first | parse_json: 'total_contributors' }}
+      - Top contributor: {{ outputs['github-stats'].suggestions | first | parse_json: 'top_contributor' }}
+      - Total commits: {{ outputs['github-stats'].suggestions | first | parse_json: 'total_commits' }}
+
+      Provide insights on:
+      1. Contribution patterns
+      2. Bus factor risks
+      3. Recommendations for improving collaboration
+    group: analytics
+
+  # Analyze CI/CD status
+  build-analysis:
+    type: ai
+    depends_on: [ci-status]
+    prompt: |
+      CI/CD Build Analysis:
+      {{ outputs['ci-status'].suggestions | first }}
+
+      Evaluate:
+      1. Build health and stability
+      2. Test coverage adequacy
+      3. Failed test patterns
+      4. Recommendations for improvement
+    group: ci-cd
+
+  # Security assessment based on vulnerability scan
+  security-assessment:
+    type: ai
+    depends_on: [vulnerability-check]
+    prompt: |
+      Security Vulnerability Assessment:
+      {{ outputs['vulnerability-check'].suggestions | first }}
+
+      Provide:
+      1. Risk assessment summary
+      2. Critical vulnerabilities that need immediate attention
+      3. Remediation priorities
+      4. Security best practices recommendations
+    group: security
+
+  # === HTTP OUTPUT: Send results to external services ===
+
+  # Send analysis to Slack
+  slack-notification:
+    type: http
+    depends_on: [contributor-analysis, build-analysis]
+    url: "${SLACK_WEBHOOK_URL}"
+    method: POST
+    body: |
+      {
+        "text": "Repository Analysis Complete",
+        "attachments": [
+          {
+            "color": "good",
+            "title": "Contributor Analysis",
+            "text": "{{ outputs['contributor-analysis'].suggestions | first | truncate: 200 }}"
+          },
+          {
+            "color": "{{ outputs['ci-status'].suggestions | first | parse_json: 'build_status' == 'passed' ? 'good' : 'danger' }}",
+            "title": "Build Status",
+            "text": "{{ outputs['build-analysis'].suggestions | first | truncate: 200 }}"
+          }
+        ]
+      }
+
+  # Send metrics to monitoring system
+  metrics-export:
+    type: http
+    depends_on: [github-stats, ci-status]
+    url: "${METRICS_ENDPOINT}"
+    method: POST
+    headers:
+      Content-Type: "application/json"
+      X-API-Key: "${METRICS_API_KEY}"
+    body: |
+      {
+        "timestamp": "{{ 'now' | date: '%Y-%m-%dT%H:%M:%S' }}",
+        "metrics": {
+          "contributors": {{ outputs['github-stats'].suggestions | first | parse_json: 'total_contributors' }},
+          "commits": {{ outputs['github-stats'].suggestions | first | parse_json: 'total_commits' }},
+          "test_coverage": {{ outputs['ci-status'].suggestions | first | parse_json: 'test_coverage' }},
+          "failed_tests": {{ outputs['ci-status'].suggestions | first | parse_json: 'failed_tests' }}
+        }
+      }
+
+  # Create JIRA ticket for critical vulnerabilities
+  jira-ticket:
+    type: http
+    depends_on: [vulnerability-check]
+    if: "outputs['vulnerability-check'].suggestions | first | parse_json: 'risk_score' > 7"
+    url: "${JIRA_API_URL}/rest/api/2/issue"
+    method: POST
+    headers:
+      Authorization: "Basic ${JIRA_AUTH}"
+      Content-Type: "application/json"
+    body: |
+      {
+        "fields": {
+          "project": { "key": "SEC" },
+          "summary": "Critical vulnerabilities detected in {{ pr.base }}",
+          "description": "Risk Score: {{ outputs['vulnerability-check'].suggestions | first | parse_json: 'risk_score' }}\n\nVulnerabilities:\n{{ outputs['vulnerability-check'].suggestions | first | parse_json: 'vulnerabilities' | json }}",
+          "issuetype": { "name": "Bug" },
+          "priority": { "name": "Critical" }
+        }
+      }
+
+  # === SCHEDULED AGGREGATION ===
+
+  # Daily summary that combines multiple data sources
+  daily-report:
+    type: http_client
+    schedule: "0 18 * * *"  # 6 PM daily
+    url: "${ANALYTICS_API}/daily-summary"
+    method: GET
+    transform: |
+      {
+        "date": "{{ 'now' | date: '%Y-%m-%d' }}",
+        "summary": {{ response | json }}
+      }
+
+  # Send daily report via email service
+  email-report:
+    type: http
+    depends_on: [daily-report]
+    url: "${EMAIL_SERVICE_URL}/send"
+    method: POST
+    headers:
+      Authorization: "Bearer ${EMAIL_API_KEY}"
+    body: |
+      {
+        "to": ["team@example.com"],
+        "subject": "Daily Visor Report - {{ 'now' | date: '%Y-%m-%d' }}",
+        "html": "<h1>Daily Summary</h1><pre>{{ outputs['daily-report'].suggestions | first }}</pre>"
+      }
+
+output:
+  pr_comment:
+    format: markdown
+    group_by: check
+    collapse: true
+  suppressionEnabled: true

package/dist/examples/https-server-config.yaml

@@ -0,0 +1,209 @@
+version: "1.0"
+
+# Example of HTTPS server configuration with TLS/SSL
+# Note: This server is automatically disabled when running in GitHub Actions
+
+http_server:
+  enabled: true
+  port: 8443  # Standard HTTPS port
+  host: "0.0.0.0"
+
+  # TLS/SSL Configuration Options
+  tls:
+    enabled: true
+
+    # Option 1: File paths to certificates
+    # cert: "/path/to/server.crt"
+    # key: "/path/to/server.key"
+    # ca: "/path/to/ca.crt"  # Optional: CA certificate
+
+    # Option 2: Environment variables containing certificate content
+    cert: "${TLS_CERT}"  # Certificate content from environment variable
+    key: "${TLS_KEY}"    # Private key content from environment variable
+    ca: "${TLS_CA}"      # Optional: CA cert from environment variable
+
+    # Option 3: Inline certificate content (not recommended for production)
+    # cert: |
+    #   -----BEGIN CERTIFICATE-----
+    #   MIIDXTCCAkWgAwIBAgIJAKLdQVPy90WjMA0GCSqGSIb3DQEBCwUAMEUxCzAJBgNV
+    #   ... certificate content ...
+    #   -----END CERTIFICATE-----
+    # key: |
+    #   -----BEGIN PRIVATE KEY-----
+    #   MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQDYscr5BQJG
+    #   ... key content ...
+    #   -----END PRIVATE KEY-----
+
+    # Reject unauthorized connections (default: true)
+    rejectUnauthorized: true
+
+  # Authentication for webhook endpoints
+  auth:
+    type: bearer_token
+    secret: "${WEBHOOK_SECRET}"
+
+  # Webhook endpoints
+  endpoints:
+    - path: "/webhook/github"
+      name: "github-events"
+    - path: "/webhook/jenkins"
+      name: "jenkins-builds"
+    - path: "/webhook/datadog"
+      name: "monitoring-alerts"
+
+steps:
+  # === Webhook receivers for HTTPS endpoints ===
+
+  github-webhook:
+    type: http_input
+    endpoint: "/webhook/github"
+    on: [webhook_received]
+    transform: |
+      {
+        "event": "{{ webhook.action }}",
+        "repository": "{{ webhook.repository.full_name }}",
+        "sender": "{{ webhook.sender.login }}",
+        "signature": "{{ headers['x-hub-signature-256'] }}"
+      }
+
+  jenkins-webhook:
+    type: http_input
+    endpoint: "/webhook/jenkins"
+    on: [webhook_received]
+    transform: |
+      {
+        "job": "{{ webhook.name }}",
+        "build": "{{ webhook.build.number }}",
+        "status": "{{ webhook.build.status }}",
+        "url": "{{ webhook.build.url }}"
+      }
+
+  datadog-alert:
+    type: http_input
+    endpoint: "/webhook/datadog"
+    on: [webhook_received]
+    transform: |
+      {
+        "alert": "{{ webhook.title }}",
+        "priority": "{{ webhook.priority }}",
+        "tags": {{ webhook.tags | json }},
+        "event_msg": "{{ webhook.event_msg }}"
+      }
+
+  # === Process webhook data ===
+
+  github-analysis:
+    type: ai
+    depends_on: [github-webhook]
+    prompt: |
+      Analyze the GitHub webhook event:
+      {{ outputs['github-webhook'].suggestions | first }}
+
+      Determine:
+      1. Security implications
+      2. Required actions
+      3. Impact assessment
+    group: github
+
+  jenkins-build-analysis:
+    type: ai
+    depends_on: [jenkins-webhook]
+    prompt: |
+      Jenkins build notification:
+      {{ outputs['jenkins-webhook'].suggestions | first }}
+
+      Analyze:
+      1. Build failure patterns
+      2. Performance trends
+      3. Recommended fixes
+    group: ci-cd
+
+  monitoring-response:
+    type: ai
+    depends_on: [datadog-alert]
+    prompt: |
+      Datadog monitoring alert:
+      {{ outputs['datadog-alert'].suggestions | first }}
+
+      Provide:
+      1. Root cause analysis
+      2. Immediate remediation steps
+      3. Long-term prevention strategies
+    group: monitoring
+
+  # === Send secure notifications ===
+
+  # Send to secure internal API using HTTPS
+  internal-api-notification:
+    type: http
+    depends_on: [github-analysis, jenkins-build-analysis]
+    url: "https://internal-api.example.com/notifications"
+    method: POST
+    headers:
+      Content-Type: "application/json"
+      Authorization: "Bearer ${INTERNAL_API_TOKEN}"
+      X-TLS-Client-Cert: "${CLIENT_CERT}"  # Client certificate for mTLS
+    body: |
+      {
+        "source": "visor",
+        "timestamp": "{{ 'now' | date: '%Y-%m-%dT%H:%M:%S' }}",
+        "github_analysis": {{ outputs['github-analysis'] | json }},
+        "jenkins_analysis": {{ outputs['jenkins-build-analysis'] | json }},
+        "secure": true,
+        "protocol": "https"
+      }
+
+  # Fetch from secure API endpoint
+  secure-api-fetch:
+    type: http_client
+    url: "https://secure-api.example.com/data"
+    method: GET
+    headers:
+      Authorization: "Bearer ${SECURE_API_TOKEN}"
+      X-Client-Id: "${CLIENT_ID}"
+    # Note: http_client automatically handles HTTPS connections
+    transform: |
+      {
+        "fetched_at": "{{ 'now' | date: '%Y-%m-%dT%H:%M:%S' }}",
+        "data": {{ response | json }}
+      }
+    schedule: "*/30 * * * *"  # Every 30 minutes
+
+# Production TLS Setup Examples:
+
+# 1. Let's Encrypt with Certbot:
+#    tls:
+#      cert: "/etc/letsencrypt/live/example.com/fullchain.pem"
+#      key: "/etc/letsencrypt/live/example.com/privkey.pem"
+
+# 2. Self-signed for development:
+#    Generate: openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365 -nodes
+#    tls:
+#      cert: "./cert.pem"
+#      key: "./key.pem"
+#      rejectUnauthorized: false  # Allow self-signed in dev
+
+# 3. Kubernetes secrets:
+#    tls:
+#      cert: "${TLS_CERT}"  # Mounted from K8s secret
+#      key: "${TLS_KEY}"    # Mounted from K8s secret
+
+# 4. AWS Certificate Manager:
+#    Use AWS ALB/NLB for TLS termination, then:
+#    tls:
+#      enabled: false  # TLS handled by load balancer
+#    auth:
+#      type: bearer_token  # Still authenticate requests
+
+# 5. Mutual TLS (mTLS):
+#    tls:
+#      cert: "${SERVER_CERT}"
+#      key: "${SERVER_KEY}"
+#      ca: "${CLIENT_CA}"  # CA to verify client certificates
+#      rejectUnauthorized: true
+
+output:
+  pr_comment:
+    format: markdown
+    group_by: check
+    collapse: true

package/dist/examples/human-input-example.yaml

@@ -0,0 +1,63 @@
+version: "1.0"
+
+# Example configuration demonstrating human-input check type
+# This shows various ways to use human-in-the-loop interactions
+
+checks:
+  # Example 1: Simple approval gate
+  approval-gate:
+    type: human-input
+    prompt: "Do you approve this change? (yes/no)"
+    allow_empty: false
+    timeout: 300  # 5 minutes in seconds
+
+  # Example 2: Context collection
+  gather-context:
+    type: human-input
+    prompt: |
+      Please provide additional context about this change:
+      - What problem does it solve?
+      - Are there any risks?
+      - Any special deployment considerations?
+    placeholder: "Enter context here..."
+    multiline: true
+    allow_empty: true
+    default: "No additional context provided"
+
+  # Example 3: Conditional workflow
+  choose-review-type:
+    type: human-input
+    prompt: "Select review type: (1) Quick check or (2) Full analysis?"
+    allow_empty: false
+
+  quick-check:
+    type: log
+    depends_on: [choose-review-type]
+    if: "outputs['choose-review-type'] === '1'"
+    message: "Running quick check... (selected option: {{ outputs['choose-review-type'] }})"
+
+  full-analysis:
+    type: log
+    depends_on: [choose-review-type]
+    if: "outputs['choose-review-type'] === '2'"
+    message: "Running full analysis... (selected option: {{ outputs['choose-review-type'] }})"
+
+  # Example 4: Using human input in subsequent checks
+  deployment-confirmation:
+    type: human-input
+    prompt: "Are you ready to deploy? Enter deployment target (staging/production):"
+    allow_empty: false
+
+  deploy:
+    type: log
+    depends_on: [deployment-confirmation]
+    message: |
+      Deploying to: {{ outputs['deployment-confirmation'] }}
+
+      This is where you would trigger your deployment script
+
+output:
+  pr_comment:
+    format: markdown
+    group_by: check
+    collapse: false

package/dist/examples/if-conditions.yaml

@@ -0,0 +1,173 @@
+version: "1.0"
+
+# Example configuration showing how to use if conditions to control check execution
+# The if condition determines whether a check should run based on context
+
+steps:
+  # Run only on main branch
+  production-check:
+    type: ai
+    schema: code-review
+    prompt: "Check production readiness and deployment safety"
+    on: [pr_opened, pr_updated]
+    if: 'branch == "main" || baseBranch == "main"'
+    fail_if: "output.issues.some(i => i.severity === 'critical')"
+
+  # Run only when there are file changes
+  incremental-review:
+    type: ai
+    schema: code-review
+    prompt: "Review changed files for issues"
+    on: [pr_opened, pr_updated]
+    if: "filesCount > 0"
+    fail_if: "output.issues.some(i => i.severity === 'error')"
+
+  # Run only on feature branches
+  feature-validation:
+    type: ai
+    schema: code-review
+    prompt: "Validate feature implementation"
+    on: [pr_opened, pr_updated]
+    if: 'startsWith(branch, "feature/")'
+    fail_if: "output.issues.some(i => i.severity === 'critical')"
+
+  # Run only in CI environment
+  ci-only-check:
+    type: ai
+    schema: security
+    prompt: "Comprehensive security scan"
+    on: [pr_opened, pr_updated]
+    if: 'env.CI == "true"'
+    fail_if: "output.issues.length > 0"
+
+  # Run when specific files are changed
+  auth-security-check:
+    type: ai
+    schema: security
+    prompt: "Security review for authentication changes"
+    on: [pr_opened, pr_updated]
+    # Run when auth-related files are modified
+    if: 'contains(filesChanged, "auth") || contains(filesChanged, "login") || contains(filesChanged, "session")'
+    fail_if: "output.issues.length > 0"
+
+  # Complex condition - run on main or when many files changed
+  comprehensive-review:
+    type: ai
+    schema: code-review
+    prompt: "Comprehensive code review"
+    on: [pr_opened, pr_updated]
+    # Run on main branch OR when more than 10 files changed
+    if: 'branch == "main" || filesCount > 10'
+    fail_if: "output.issues.some(i => i.severity === 'critical')"
+
+  # Always run (default behavior)
+  standard-check:
+    type: ai
+    schema: code-review
+    prompt: "Standard code review"
+    on: [pr_opened, pr_updated]
+    if: "always()"  # Explicitly always run
+    fail_if: "output.issues.some(i => i.severity === 'critical')"
+
+  # Never run (can be enabled by removing/changing condition)
+  disabled-check:
+    type: ai
+    schema: code-review
+    prompt: "Currently disabled check"
+    on: [pr_opened, pr_updated]
+    if: "!always()"  # Never run
+    fail_if: "output.issues.some(i => i.severity === 'critical')"
+
+  # Dependency-based execution
+  security-check:
+    type: ai
+    schema: security
+    prompt: "Security vulnerability scan"
+    on: [pr_opened, pr_updated]
+    if: "always()"
+    fail_if: "output.issues.some(i => i.severity === 'critical')"
+
+  performance-check:
+    type: ai
+    schema: code-review
+    prompt: "Performance analysis"
+    on: [pr_opened, pr_updated]
+    if: "always()"
+    fail_if: "output.issues.filter(i => i.severity === 'error').length > 2"
+
+  # Run only if security check found issues
+  security-remediation:
+    type: ai
+    schema: code-review
+    prompt: "Suggest security fixes"
+    on: [pr_opened, pr_updated]
+    depends_on: [security-check]
+    # Only run if security check found issues (use length() function)
+    if: 'outputs["security-check"] && length(outputs["security-check"].issues) > 0'
+    fail_if: "output.issues.some(i => i.severity === 'critical')"
+
+  # Run only if all previous checks passed
+  final-validation:
+    type: ai
+    schema: code-review
+    prompt: "Final validation before merge"
+    on: [pr_opened, pr_updated]
+    depends_on: [security-check, performance-check]
+    # Only run if both dependencies passed (check for specific severities)
+    if: |
+      outputs["security-check"] &&
+      !hasIssue(outputs["security-check"].issues, "severity", "critical") &&
+      !hasIssue(outputs["security-check"].issues, "severity", "error") &&
+      outputs["performance-check"] &&
+      !hasIssue(outputs["performance-check"].issues, "severity", "critical") &&
+      !hasIssue(outputs["performance-check"].issues, "severity", "error")
+    fail_if: "output.issues.length > 0"
+
+  # Environment-specific checks
+  staging-check:
+    type: ai
+    schema: code-review
+    prompt: "Staging environment validation"
+    on: [pr_opened, pr_updated]
+    # Run only in staging environment
+    if: 'env.ENVIRONMENT == "staging"'
+    fail_if: "output.issues.some(i => i.severity === 'critical')"
+
+  # Time-based or conditional skip
+  weekend-check:
+    type: ai
+    schema: code-review
+    prompt: "Weekend maintenance check"
+    on: [pr_opened, pr_updated]
+    # Could be used with env vars set by CI to control execution
+    if: 'env.RUN_WEEKEND_CHECKS == "true"'
+    fail_if: "output.issues.some(i => i.severity === 'critical')"
+
+output:
+  pr_comment:
+    format: markdown
+    group_by: check
+    collapse: true
+
+# Available variables in if conditions:
+# - checkName: Name of the current check
+# - branch: Current branch name
+# - baseBranch: Target/base branch name
+# - filesChanged: Array of changed file paths
+# - filesCount: Number of changed files
+# - event: Event that triggered the check (e.g., "pr_opened", "manual")
+# - env: Environment variables
+# - outputs: Raw ReviewSummary objects from previous checks (for dependent checks)
+#   Example: outputs["check-name"].issues, outputs["check-name"].suggestions
+# - metadata: Additional metadata (hasChanges, branch, event, checkName)
+
+# Available functions (GitHub Actions-style):
+# - contains(haystack, needle): Check if string/array contains value
+# - startsWith(str, prefix): Check if string starts with prefix
+# - endsWith(str, suffix): Check if string ends with suffix
+# - always(): Always returns true
+# - length(array|string|object): Get length of array, string, or object keys
+# - hasIssue(issues, field, value): Check if any issue has field matching value
+# - countIssues(issues, field, value): Count issues with field matching value
+# - hasFileMatching(issues, pattern): Check if any issue file contains pattern
+# - Standard operators: ==, !=, >, <, >=, <=, &&, ||, !