@probelabs/visor 0.1.106 → 0.1.107

package/dist/examples/project-with-tools.yaml

@@ -0,0 +1,174 @@
+version: "1.0"
+
+# This configuration extends the tools library to reuse tool definitions
+extends: ./tools-library.yaml
+
+# Additional project-specific tools can be defined here
+tools:
+  # Project-specific tool for checking API endpoints
+  check-api-endpoints:
+    name: check-api-endpoints
+    description: Verify all API endpoints are documented
+    inputSchema:
+      type: object
+      properties:
+        source_dir:
+          type: string
+          description: Directory containing API source code
+        docs_file:
+          type: string
+          description: API documentation file
+    exec: |
+      echo "Checking endpoints in {{ args.source_dir }} against {{ args.docs_file }}"
+      grep -r "router\.\(get\|post\|put\|delete\|patch\)" {{ args.source_dir }} |
+      sed 's/.*router\.\([a-z]*\).*"\([^"]*\)".*/\1 \2/' |
+      sort -u
+    transform_js: |
+      const endpoints = output.trim().split('\n').filter(l => l);
+      return endpoints.map(ep => {
+        const [method, path] = ep.split(' ');
+        return { method: method.toUpperCase(), path };
+      });
+
+# Use both imported and local tools in checks
+steps:
+  # Use imported git tool
+  check-git-status:
+    type: mcp
+    transport: custom
+    method: git-status
+    fail_if: "output.length > 10"
+    transform_js: |
+      if (output.length > 10) {
+        return [{
+          file: 'repository',
+          line: 0,
+          message: `Too many uncommitted changes: ${output.length} files`,
+          severity: 'warning',
+          category: 'style',
+          ruleId: 'uncommitted-changes'
+        }];
+      }
+      return [];
+
+  # Use imported git diff stats
+  analyze-pr-size:
+    type: mcp
+    transport: custom
+    method: git-diff-stats
+    methodArgs:
+      base: "{{ pr.base | default: 'main' }}"
+    fail_if: "output.filesChanged > 50 || output.insertions > 1000"
+    transform_js: |
+      const issues = [];
+      if (output.filesChanged > 50) {
+        issues.push({
+          file: 'pull-request',
+          line: 0,
+          message: `Large PR: ${output.filesChanged} files changed. Consider breaking into smaller PRs.`,
+          severity: 'warning',
+          category: 'style',
+          ruleId: 'large-pr'
+        });
+      }
+      if (output.insertions > 1000) {
+        issues.push({
+          file: 'pull-request',
+          line: 0,
+          message: `Too many lines added: ${output.insertions}. This may be difficult to review.`,
+          severity: 'warning',
+          category: 'style',
+          ruleId: 'too-many-lines'
+        });
+      }
+      return issues;
+
+  # Use imported npm audit tool
+  security-audit:
+    type: mcp
+    transport: custom
+    method: npm-audit
+    if: "files.some(f => f.filename === 'package.json')"
+    fail_if: "output.some(i => i.severity === 'error')"
+
+  # Use imported Docker linting tool
+  lint-dockerfiles:
+    type: mcp
+    transport: custom
+    method: docker-lint
+    forEach: "{{ files | where: 'filename', 'match', 'Dockerfile' }}"
+    methodArgs:
+      file: "{{ item.filename }}"
+
+  # Use imported ESLint tool
+  lint-javascript:
+    type: mcp
+    transport: custom
+    method: eslint-check
+    if: "files.some(f => f.filename.endsWith('.js') || f.filename.endsWith('.ts'))"
+    methodArgs:
+      files: "{{ files | where: 'filename', 'match', '\\.(js|ts)$' | map: 'filename' }}"
+
+  # Use local project-specific tool
+  verify-api-docs:
+    type: mcp
+    transport: custom
+    method: check-api-endpoints
+    methodArgs:
+      source_dir: "./src/routes"
+      docs_file: "./docs/api.md"
+    transform_js: |
+      // Check if all endpoints are documented
+      const documented = ['GET /users', 'POST /users', 'GET /posts']; // Would parse from docs_file
+      const undocumented = output.filter(ep =>
+        !documented.includes(`${ep.method} ${ep.path}`)
+      );
+
+      return undocumented.map(ep => ({
+        file: 'docs/api.md',
+        line: 0,
+        message: `Undocumented endpoint: ${ep.method} ${ep.path}`,
+        severity: 'warning',
+        category: 'documentation',
+        ruleId: 'missing-api-docs'
+      }));
+
+  # Chain multiple tools together
+  comprehensive-check:
+    type: mcp
+    transport: custom
+    method: run-tests
+    methodArgs:
+      command: "npm test"
+      format: "jest"
+    on_success:
+      - type: mcp
+        transport: custom
+        method: check-outdated
+        methodArgs:
+          manager: "npm"
+        transform_js: |
+          // Only warn about major version updates
+          return output
+            .filter(pkg => pkg.current.split('.')[0] !== pkg.latest.split('.')[0])
+            .map(pkg => ({
+              file: 'package.json',
+              line: 0,
+              message: `Major update available for ${pkg.package}: ${pkg.current} → ${pkg.latest}`,
+              severity: 'info',
+              category: 'documentation',
+              ruleId: 'major-update-available'
+            }));
+
+# You can also import tools from remote URLs
+# extends: https://example.com/shared-tools.yaml
+
+# Or import multiple tool libraries
+# extends:
+#   - ./tools-library.yaml
+#   - ./security-tools.yaml
+#   - https://example.com/quality-tools.yaml
+
+output:
+  format: markdown
+  groupBy: category

package/dist/examples/prompts/architecture-analysis.liquid

@@ -0,0 +1,116 @@
+# 🏗️ Architecture Analysis for {{ event.repository.fullName }}
+
+## Pull Request Overview
+**PR #{{ pr.number }}**: {{ pr.title }}
+- **Author**: {{ pr.author }}
+- **Changes**: {{ utils.totalFiles }} files with {{ pr.totalAdditions }} additions and {{ pr.totalDeletions }} deletions
+
+{% if pr.body %}
+### Description
+{{ pr.body }}
+{% endif %}
+
+## Previous Analysis Context
+
+{% if outputs.security or outputs.performance or outputs.style %}
+### Related Findings from Previous Checks:
+
+{% if outputs.security %}
+**Security Analysis**: {{ outputs.security.totalIssues }} issues found
+{% if outputs.security.criticalIssues > 0 %}
+- 🚨 {{ outputs.security.criticalIssues }} critical security issues require architectural consideration
+{% endif %}
+{% endif %}
+
+{% if outputs.performance %}
+**Performance Analysis**: {{ outputs.performance.totalIssues }} issues found  
+{% if outputs.performance.errorIssues > 0 %}
+- ⚡ {{ outputs.performance.errorIssues }} performance errors may indicate architectural problems
+{% endif %}
+{% endif %}
+
+{% if outputs.style %}
+**Code Style Analysis**: {{ outputs.style.totalIssues }} issues found
+{% endif %}
+
+{% else %}
+*No previous analysis results available - performing standalone architectural review.*
+{% endif %}
+
+## Component Analysis
+
+### File Organization
+{% for ext, files in utils.filesByExtension %}
+- **{{ ext | upcase }} files**: {{ files.size }}
+  {% for file in files %}
+  - `{{ file.filename }}` ({{ file.status }}{% if file.changes > 100 %}, large change: {{ file.changes }} lines{% endif %})
+  {% endfor %}
+{% endfor %}
+
+### Change Impact Assessment
+
+{% if utils.addedFiles.size > 0 %}
+#### New Components ({{ utils.addedFiles.size }})
+{% for file in utils.addedFiles %}
+- `{{ file.filename }}` - New component requiring integration analysis
+{% endfor %}
+{% endif %}
+
+{% if utils.modifiedFiles.size > 0 %}
+#### Modified Components ({{ utils.modifiedFiles.size }}) 
+{% for file in utils.modifiedFiles %}
+- `{{ file.filename }}` - Changes may affect dependent systems
+{% endfor %}
+{% endif %}
+
+{% if utils.removedFiles.size > 0 %}
+#### Removed Components ({{ utils.removedFiles.size }})
+{% for file in utils.removedFiles %}
+- `{{ file.filename }}` - Removal may break dependent systems
+{% endfor %}
+{% endif %}
+
+## Architecture Review Focus
+
+### 1. System Design Principles
+Evaluate adherence to:
+- **Single Responsibility Principle**: Each module has one clear purpose
+- **Open/Closed Principle**: Code is open for extension, closed for modification
+- **Dependency Inversion**: Depend on abstractions, not concretions
+- **Separation of Concerns**: Clear boundaries between different functionalities
+
+### 2. Module Dependencies
+- Analyze dependency relationships and circular dependencies
+- Evaluate coupling between components
+- Assess cohesion within modules
+- Review dependency injection patterns
+
+### 3. Scalability & Maintainability
+- Code reusability and extensibility
+- Configuration management approach
+- Error handling and logging architecture
+- Documentation and code clarity
+
+### 4. Integration Patterns
+- API design and contracts
+- Database schema changes and migration strategy
+- Event handling and messaging patterns
+- Service boundaries and interfaces
+
+### 5. Technical Debt Assessment
+- Code duplication and refactoring opportunities
+- Legacy code integration concerns
+- Performance architecture implications
+- Testing strategy and coverage architecture
+
+## Deliverables
+
+Please provide a comprehensive architectural analysis in markdown format including:
+
+1. **Architecture Impact Summary** - High-level assessment of changes
+2. **Component Interaction Diagram** - Mermaid diagram showing relationships
+3. **Risk Assessment** - Potential architectural risks and mitigation strategies
+4. **Recommendations** - Specific suggestions for architectural improvements
+5. **Migration Considerations** - Any deployment or database migration concerns
+
+Focus on how these changes fit into the overall system architecture and their long-term maintainability implications.

package/dist/examples/prompts/security-comprehensive.liquid

@@ -0,0 +1,107 @@
+# 🔒 Security Review for PR {{ pr.number }}: {{ pr.title }}
+
+## Context Information
+- **Author**: {{ pr.author }}
+- **Branch**: `{{ pr.headBranch }}` → `{{ pr.baseBranch }}`
+- **Files Changed**: {{ files.size }}
+- **Total Changes**: +{{ pr.totalAdditions }}/-{{ pr.totalDeletions }}
+
+{% if event.comment %}
+**Triggered by comment**: "{{ event.comment.body }}" from {{ event.comment.author }}
+{% endif %}
+
+## File Analysis
+
+{% assign tsFiles = utils.filesByExtension.ts %}
+{% assign jsFiles = utils.filesByExtension.js %}
+{% assign configFiles = utils.filesByExtension.json %}
+
+{% if tsFiles.size > 0 %}
+### TypeScript Files to Review ({{ tsFiles.size }})
+{% for file in tsFiles %}
+- `{{ file.filename }}` (+{{ file.additions }}/-{{ file.deletions }}) - {{ file.status }}
+{% endfor %}
+{% endif %}
+
+{% if jsFiles.size > 0 %}
+### JavaScript Files to Review ({{ jsFiles.size }})
+{% for file in jsFiles %}
+- `{{ file.filename }}` (+{{ file.additions }}/-{{ file.deletions }}) - {{ file.status }}
+{% endfor %}
+{% endif %}
+
+{% if configFiles.size > 0 %}
+### Configuration Files ({{ configFiles.size }})
+{% for file in configFiles %}
+- `{{ file.filename }}` - Pay special attention to security configurations
+{% endfor %}
+{% endif %}
+
+## Previous Security Findings
+
+{% if outputs.security %}
+Previous security scan found {{ outputs.security.totalIssues }} issues:
+- 🔴 **Critical**: {{ outputs.security.criticalIssues }}
+- 🟠 **Errors**: {{ outputs.security.errorIssues }}  
+- 🟡 **Warnings**: {{ outputs.security.warningIssues }}
+- 🔵 **Info**: {{ outputs.security.infoIssues }}
+
+{% if outputs.security.securityIssues.size > 0 %}
+### Existing Security Issues to Address:
+{% for issue in outputs.security.securityIssues %}
+- **{{ issue.severity | upcase }}** in `{{ issue.file }}:{{ issue.line }}`: {{ issue.message }}
+  {% if issue.suggestion %}💡 *{{ issue.suggestion }}*{% endif %}
+{% endfor %}
+{% endif %}
+
+{% else %}
+No previous security analysis available - performing fresh security review.
+{% endif %}
+
+## Review Focus Areas
+
+{% if utils.hasLargeChanges %}
+⚠️ **Large Changes Detected** - This PR requires extra careful review due to significant modifications.
+{% endif %}
+
+Please perform a comprehensive security analysis focusing on:
+
+### 1. Authentication & Authorization
+- JWT token handling and validation
+- Session management security
+- Role-based access control implementation
+- Authentication bypass possibilities
+
+### 2. Input Validation & Sanitization  
+- SQL injection vulnerabilities
+- XSS attack vectors
+- Command injection risks
+- File upload security
+
+### 3. Cryptography & Secrets
+- Proper use of cryptographic functions
+- Secret management and storage
+- API key and token security
+- Encryption at rest and in transit
+
+### 4. Infrastructure Security
+- Configuration security
+- Dependency vulnerabilities
+- Environment variable handling
+- Error message information disclosure
+
+### 5. Data Protection
+- Sensitive data exposure
+- Data validation and sanitization
+- Privacy compliance considerations
+- Audit logging security
+
+## Analysis Instructions
+
+Return results in JSON format matching the code-review schema with:
+- Specific file locations and line numbers
+- Clear severity classifications (critical/error/warning/info)
+- Actionable remediation suggestions
+- Reference to security best practices where applicable
+
+Focus on newly added or modified code, but consider how changes interact with existing security measures.

package/dist/examples/quick-start-tags.yaml

@@ -0,0 +1,53 @@
+# Quick Start: Visor with Tags
+# Simple configuration showing basic tag usage
+
+version: "1.0"
+
+# Define your checks with appropriate tags
+steps:
+  # Fast check for local development
+  quick-review:
+    type: ai
+    prompt: |
+      Quick code review focusing on:
+      - Obvious bugs and errors
+      - Security issues (SQL injection, XSS)
+      - Performance problems (N+1 queries, infinite loops)
+      Keep it brief and actionable.
+    tags: ["local", "fast"]
+    on: [pr_opened, pr_updated]
+
+  # Comprehensive check for CI/CD
+  thorough-review:
+    type: ai
+    prompt: |
+      Comprehensive code review including:
+      - Security vulnerabilities (OWASP Top 10)
+      - Performance optimization opportunities
+      - Code quality and maintainability
+      - Architecture and design patterns
+      - Test coverage gaps
+      Provide detailed feedback with examples.
+    tags: ["remote", "comprehensive"]
+    on: [pr_opened]
+
+  # Optional style check
+  style-review:
+    type: ai
+    prompt: "Check code style, formatting, and naming conventions"
+    tags: ["style", "optional", "fast"]
+    on: [pr_opened, pr_updated]
+
+# Usage Examples:
+#
+# Local development (pre-commit hook):
+#   visor --tags local,fast
+#
+# CI pipeline:
+#   visor --tags remote,comprehensive
+#
+# Everything except optional:
+#   visor --exclude-tags optional
+#
+# Just style checks:
+#   visor --tags style

package/dist/examples/routing-basic.yaml

@@ -0,0 +1,35 @@
+version: "2.0"
+
+# Basic failure routing: retry + goto ancestor
+routing:
+  max_loops: 5
+  defaults:
+    on_fail:
+      retry:
+        max: 1
+        backoff: { mode: exponential, delay_ms: 400 }
+
+steps:
+  setup-env:
+    type: command
+    exec: "echo '[setup] preparing environment'"
+
+  flaky:
+    type: command
+    depends_on: [setup-env]
+    exec: |
+      FLAG=".visor_demo_flaky"
+      if [ ! -f "$FLAG" ]; then
+        echo "first attempt failing" >&2
+        touch "$FLAG"
+        exit 1
+      fi
+      echo "second attempt OK"
+    on_fail:
+      goto: setup-env
+
+  cleanup:
+    type: command
+    depends_on: [flaky]
+    exec: "rm -f .visor_demo_flaky && echo '[cleanup] done'"
+

package/dist/examples/routing-dynamic-js.yaml

@@ -0,0 +1,46 @@
+version: "2.0"
+
+# Dynamic routing using *_js hooks
+routing:
+  max_loops: 6
+
+steps:
+  setup:
+    type: command
+    exec: "echo '[setup] install deps'"
+
+  lint-fix:
+    type: command
+    exec: "echo '[lint-fix] apply fixes'"
+
+  target:
+    type: command
+    depends_on: [setup]
+    exec: |
+      # Simulate a missing module error on first try
+      FLAG=".visor_demo_dynamic"
+      if [ ! -f "$FLAG" ]; then
+        echo "module not found: axios" >&2
+        touch "$FLAG"
+        exit 1
+      fi
+      echo "[target] succeeded"
+    on_fail:
+      goto_js: |
+        // If we see a missing module message, jump back to setup
+        if ((error.message||'').toLowerCase().includes('module not found')) return 'setup';
+        if ((error.stderr||'').toLowerCase().includes('module not found')) return 'setup';
+        return null;
+      run_js: |
+        // If lint is mentioned, add lint-fix dynamically
+        const out = [];
+        const s = (error.stderr||'').toLowerCase();
+        if (s.includes('lint')) out.push('lint-fix');
+        return out;
+      retry: { max: 1, backoff: { mode: fixed, delay_ms: 200 } }
+
+  cleanup:
+    type: command
+    depends_on: [target]
+    exec: "rm -f .visor_demo_dynamic && echo '[cleanup] done'"
+

package/dist/examples/routing-foreach.yaml

@@ -0,0 +1,34 @@
+version: "2.0"
+
+# forEach + failure routing: remediate missing markers, then retry
+routing:
+  max_loops: 6
+
+steps:
+  list:
+    type: command
+    exec: "echo '[\"alpha\",\"beta\"]'"
+    forEach: true
+
+  mark:
+    type: command
+    depends_on: [list]
+    exec: "touch .visor_demo_marker_{{ outputs.list }} && echo '[mark] {{ outputs.list }}'"
+
+  process:
+    type: command
+    depends_on: [list]
+    exec: |
+      FILE=".visor_demo_marker_{{ outputs.list }}"
+      if [ -f "$FILE" ]; then echo "[process] {{ outputs.list }} ready"; exit 0; fi
+      echo "[process] missing marker for {{ outputs.list }}" >&2
+      exit 1
+    on_fail:
+      run: [mark]
+      retry: { max: 1, backoff: { mode: fixed, delay_ms: 200 } }
+
+  cleanup:
+    type: command
+    depends_on: [process]
+    exec: "rm -f .visor_demo_marker_* && echo '[cleanup] done'"
+

package/dist/examples/routing-goto-event.yaml

@@ -0,0 +1,34 @@
+version: "2.0"
+
+steps:
+  # A typical PR overview step that runs on PR events
+  overview:
+    type: ai
+    on: [pr_opened, pr_updated]
+    schema: overview
+    prompt: |
+      Return JSON matching the `overview` schema with a concise markdown summary.
+
+  # A downstream check that, after succeeding, wants to refresh overview as if a PR update occurred
+  quality:
+    type: ai
+    depends_on: [overview]
+    on: [pr_opened, pr_updated]
+    prompt: |
+      Analyze code quality aspects.
+    on_success:
+      goto: overview        # Jump to ancestor
+      goto_event: pr_updated
+
+  # A command demonstrating conditional jumps based on state
+  validate:
+    type: command
+    depends_on: [quality]
+    exec: |
+      echo "validate"
+    on_fail:
+      goto_js: |
+        // Demonstration: dynamically pick an ancestor once
+        return attempt === 1 ? 'overview' : null
+      goto_event: pr_updated
+

package/dist/examples/routing-on-success.yaml

@@ -0,0 +1,25 @@
+version: "2.0"
+
+# Success routing: run post-steps and jump back once to re-validate
+routing:
+  max_loops: 5
+
+steps:
+  unit-tests:
+    type: command
+    exec: "echo '[unit] ok'"
+
+  build:
+    type: command
+    depends_on: [unit-tests]
+    exec: "echo '[build] ok'"
+    on_success:
+      run: [notify]
+      goto_js: |
+        // Jump back only once to re-run unit-tests after build
+        return attempt === 1 ? 'unit-tests' : null;
+
+  notify:
+    type: command
+    exec: "echo '[notify] sent'"
+