@probelabs/visor 0.1.106 → 0.1.111

package/dist/examples/github-workflow-with-tags.yml

@@ -0,0 +1,163 @@
+# GitHub Actions Workflow - Progressive Code Review with Tags
+# This workflow demonstrates different tag strategies for various scenarios
+#
+# NOTE: For fork PR support with check runs, change pull_request to pull_request_target
+# See docs/GITHUB_CHECKS.md#fork-pr-support for details
+
+name: Progressive Code Review
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+  issue_comment:
+    types: [created]
+
+jobs:
+  # ============================================
+  # STAGE 1: Quick validation (runs always)
+  # ============================================
+  quick-validation:
+    name: Fast Critical Checks
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0  # Full history for better analysis
+
+      - name: Run critical fast checks
+        uses: gates-ai/visor-action@v1
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          tags: "critical,fast"
+          fail-fast: "true"  # Stop immediately on critical issues
+          max-parallelism: "5"  # Run checks in parallel
+        env:
+          GOOGLE_API_KEY: ${{ secrets.GOOGLE_API_KEY }}
+
+  # ============================================
+  # STAGE 2: Security scan (parallel with Stage 1)
+  # ============================================
+  security-scan:
+    name: Security Analysis
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Run all security checks
+        uses: gates-ai/visor-action@v1
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          tags: "security"
+          exclude-tags: "experimental"
+        env:
+          GOOGLE_API_KEY: ${{ secrets.GOOGLE_API_KEY }}
+
+  # ============================================
+  # STAGE 3: Full review (only for main branch)
+  # ============================================
+  comprehensive-review:
+    name: Comprehensive Analysis
+    runs-on: ubuntu-latest
+    if: github.base_ref == 'main' || github.base_ref == 'master'
+    needs: [quick-validation]  # Only run if quick checks pass
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Run comprehensive checks
+        uses: gates-ai/visor-action@v1
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          tags: "comprehensive,remote"
+          exclude-tags: "experimental,fast"  # Skip fast checks (already ran)
+        env:
+          GOOGLE_API_KEY: ${{ secrets.GOOGLE_API_KEY }}
+          # Use more powerful model for comprehensive checks
+          AI_MODEL: "gemini-1.5-pro"
+
+  # ============================================
+  # STAGE 4: Performance profiling (for performance PRs)
+  # ============================================
+  performance-analysis:
+    name: Performance Profiling
+    runs-on: ubuntu-latest
+    if: contains(github.event.pull_request.labels.*.name, 'performance') || contains(github.event.pull_request.title, 'perf')
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Run performance checks
+        uses: gates-ai/visor-action@v1
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          tags: "performance"
+        env:
+          GOOGLE_API_KEY: ${{ secrets.GOOGLE_API_KEY }}
+
+  # ============================================
+  # STAGE 5: Frontend checks (for frontend changes)
+  # ============================================
+  frontend-checks:
+    name: Frontend Analysis
+    runs-on: ubuntu-latest
+    if: |
+      contains(github.event.pull_request.files.*.filename, '.tsx') ||
+      contains(github.event.pull_request.files.*.filename, '.jsx') ||
+      contains(github.event.pull_request.files.*.filename, '.css')
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Run frontend-specific checks
+        uses: gates-ai/visor-action@v1
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          tags: "frontend,accessibility,style"
+        env:
+          GOOGLE_API_KEY: ${{ secrets.GOOGLE_API_KEY }}
+
+  # ============================================
+  # OPTIONAL: Experimental features (manual trigger)
+  # ============================================
+  experimental-features:
+    name: Experimental Analysis
+    runs-on: ubuntu-latest
+    if: contains(github.event.comment.body, '/experimental')
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Run experimental checks
+        uses: gates-ai/visor-action@v1
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          tags: "experimental"
+          debug: "true"  # Enable debug for experimental features
+        env:
+          CLAUDE_CODE_API_KEY: ${{ secrets.CLAUDE_CODE_API_KEY }}
+          # Use Claude for experimental features
+          AI_PROVIDER: "claude-code"
+
+  # ============================================
+  # NIGHTLY: Deep analysis (scheduled)
+  # ============================================
+  deep-analysis:
+    name: Deep Code Analysis
+    runs-on: ubuntu-latest
+    if: github.event_name == 'schedule'  # Only for scheduled runs
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Run all checks including slow ones
+        uses: gates-ai/visor-action@v1
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          # Run everything except experimental
+          exclude-tags: "experimental"
+          # No tag filter means run all
+        env:
+          GOOGLE_API_KEY: ${{ secrets.GOOGLE_API_KEY }}
+          AI_MODEL: "gemini-1.5-pro"  # Use best model for deep analysis

package/dist/examples/http-integration-config.yaml

@@ -0,0 +1,240 @@
+version: "1.0"
+
+# Complete example of HTTP integration features
+# Demonstrates http, http_input, and http_client check types
+
+# HTTP server for receiving webhooks (disabled in GitHub Actions)
+http_server:
+  enabled: true
+  port: 8080
+  host: "0.0.0.0"
+  auth:
+    type: bearer_token
+    secret: "${HTTP_SERVER_SECRET}"  # Environment variable
+  endpoints:
+    - path: "/github/webhook"
+      name: "github-events"
+    - path: "/monitoring/health"
+      name: "health-checks"
+
+steps:
+  # === HTTP CLIENT: Fetch data from external APIs ===
+
+  # Fetch repository statistics from GitHub API
+  github-stats:
+    type: http_client
+    url: "https://api.github.com/repos/{{ pr.base | split: '/' | last }}/stats/contributors"
+    headers:
+      Authorization: "token ${GITHUB_TOKEN}"
+      Accept: "application/vnd.github.v3+json"
+    transform: |
+      {
+        "total_contributors": {{ response | size }},
+        "top_contributor": "{{ response | first | map: 'author.login' }}",
+        "total_commits": {{ response | map: 'total' | sum }}
+      }
+    schedule: "0 0 * * 0"  # Weekly on Sunday
+
+  # Fetch build status from CI/CD system
+  ci-status:
+    type: http_client
+    url: "${CI_API_URL}/builds/{{ pr.head }}"
+    method: GET
+    headers:
+      X-API-Key: "${CI_API_KEY}"
+    transform: |
+      {
+        "build_status": "{{ response.status }}",
+        "test_coverage": {{ response.coverage }},
+        "failed_tests": {{ response.failed_tests | default: 0 }}
+      }
+
+  # Poll external service with POST request
+  vulnerability-check:
+    type: http_client
+    url: "${SECURITY_API_URL}/scan"
+    method: POST
+    body: |
+      {
+        "repository": "{{ pr.base }}",
+        "commit": "{{ pr.head }}",
+        "files": {{ pr.files | map: 'filename' | json }}
+      }
+    headers:
+      Content-Type: "application/json"
+      Authorization: "Bearer ${SECURITY_API_TOKEN}"
+    transform: |
+      {
+        "vulnerabilities": {{ response.vulnerabilities | default: [] | json }},
+        "risk_score": {{ response.risk_score | default: 0 }}
+      }
+
+  # === HTTP INPUT: Receive webhook data ===
+
+  # Receive GitHub webhook events
+  github-webhook-receiver:
+    type: http_input
+    endpoint: "/github/webhook"
+    on: [webhook_received]
+    transform: |
+      {
+        "event": "{{ webhook.action }}",
+        "repository": "{{ webhook.repository.full_name }}",
+        "sender": "{{ webhook.sender.login }}"
+      }
+
+  # Receive monitoring health checks
+  health-check-receiver:
+    type: http_input
+    endpoint: "/monitoring/health"
+    on: [webhook_received]
+
+  # === AI ANALYSIS: Process fetched/received data ===
+
+  # Analyze GitHub statistics
+  contributor-analysis:
+    type: ai
+    depends_on: [github-stats]
+    prompt: |
+      Analyze the repository contributor statistics:
+      - Total contributors: {{ outputs['github-stats'].suggestions | first | parse_json: 'total_contributors' }}
+      - Top contributor: {{ outputs['github-stats'].suggestions | first | parse_json: 'top_contributor' }}
+      - Total commits: {{ outputs['github-stats'].suggestions | first | parse_json: 'total_commits' }}
+
+      Provide insights on:
+      1. Contribution patterns
+      2. Bus factor risks
+      3. Recommendations for improving collaboration
+    group: analytics
+
+  # Analyze CI/CD status
+  build-analysis:
+    type: ai
+    depends_on: [ci-status]
+    prompt: |
+      CI/CD Build Analysis:
+      {{ outputs['ci-status'].suggestions | first }}
+
+      Evaluate:
+      1. Build health and stability
+      2. Test coverage adequacy
+      3. Failed test patterns
+      4. Recommendations for improvement
+    group: ci-cd
+
+  # Security assessment based on vulnerability scan
+  security-assessment:
+    type: ai
+    depends_on: [vulnerability-check]
+    prompt: |
+      Security Vulnerability Assessment:
+      {{ outputs['vulnerability-check'].suggestions | first }}
+
+      Provide:
+      1. Risk assessment summary
+      2. Critical vulnerabilities that need immediate attention
+      3. Remediation priorities
+      4. Security best practices recommendations
+    group: security
+
+  # === HTTP OUTPUT: Send results to external services ===
+
+  # Send analysis to Slack
+  slack-notification:
+    type: http
+    depends_on: [contributor-analysis, build-analysis]
+    url: "${SLACK_WEBHOOK_URL}"
+    method: POST
+    body: |
+      {
+        "text": "Repository Analysis Complete",
+        "attachments": [
+          {
+            "color": "good",
+            "title": "Contributor Analysis",
+            "text": "{{ outputs['contributor-analysis'].suggestions | first | truncate: 200 }}"
+          },
+          {
+            "color": "{{ outputs['ci-status'].suggestions | first | parse_json: 'build_status' == 'passed' ? 'good' : 'danger' }}",
+            "title": "Build Status",
+            "text": "{{ outputs['build-analysis'].suggestions | first | truncate: 200 }}"
+          }
+        ]
+      }
+
+  # Send metrics to monitoring system
+  metrics-export:
+    type: http
+    depends_on: [github-stats, ci-status]
+    url: "${METRICS_ENDPOINT}"
+    method: POST
+    headers:
+      Content-Type: "application/json"
+      X-API-Key: "${METRICS_API_KEY}"
+    body: |
+      {
+        "timestamp": "{{ 'now' | date: '%Y-%m-%dT%H:%M:%S' }}",
+        "metrics": {
+          "contributors": {{ outputs['github-stats'].suggestions | first | parse_json: 'total_contributors' }},
+          "commits": {{ outputs['github-stats'].suggestions | first | parse_json: 'total_commits' }},
+          "test_coverage": {{ outputs['ci-status'].suggestions | first | parse_json: 'test_coverage' }},
+          "failed_tests": {{ outputs['ci-status'].suggestions | first | parse_json: 'failed_tests' }}
+        }
+      }
+
+  # Create JIRA ticket for critical vulnerabilities
+  jira-ticket:
+    type: http
+    depends_on: [vulnerability-check]
+    if: "outputs['vulnerability-check'].suggestions | first | parse_json: 'risk_score' > 7"
+    url: "${JIRA_API_URL}/rest/api/2/issue"
+    method: POST
+    headers:
+      Authorization: "Basic ${JIRA_AUTH}"
+      Content-Type: "application/json"
+    body: |
+      {
+        "fields": {
+          "project": { "key": "SEC" },
+          "summary": "Critical vulnerabilities detected in {{ pr.base }}",
+          "description": "Risk Score: {{ outputs['vulnerability-check'].suggestions | first | parse_json: 'risk_score' }}\n\nVulnerabilities:\n{{ outputs['vulnerability-check'].suggestions | first | parse_json: 'vulnerabilities' | json }}",
+          "issuetype": { "name": "Bug" },
+          "priority": { "name": "Critical" }
+        }
+      }
+
+  # === SCHEDULED AGGREGATION ===
+
+  # Daily summary that combines multiple data sources
+  daily-report:
+    type: http_client
+    schedule: "0 18 * * *"  # 6 PM daily
+    url: "${ANALYTICS_API}/daily-summary"
+    method: GET
+    transform: |
+      {
+        "date": "{{ 'now' | date: '%Y-%m-%d' }}",
+        "summary": {{ response | json }}
+      }
+
+  # Send daily report via email service
+  email-report:
+    type: http
+    depends_on: [daily-report]
+    url: "${EMAIL_SERVICE_URL}/send"
+    method: POST
+    headers:
+      Authorization: "Bearer ${EMAIL_API_KEY}"
+    body: |
+      {
+        "to": ["team@example.com"],
+        "subject": "Daily Visor Report - {{ 'now' | date: '%Y-%m-%d' }}",
+        "html": "<h1>Daily Summary</h1><pre>{{ outputs['daily-report'].suggestions | first }}</pre>"
+      }
+
+output:
+  pr_comment:
+    format: markdown
+    group_by: check
+    collapse: true
+  suppressionEnabled: true

package/dist/examples/https-server-config.yaml

@@ -0,0 +1,209 @@
+version: "1.0"
+
+# Example of HTTPS server configuration with TLS/SSL
+# Note: This server is automatically disabled when running in GitHub Actions
+
+http_server:
+  enabled: true
+  port: 8443  # Standard HTTPS port
+  host: "0.0.0.0"
+
+  # TLS/SSL Configuration Options
+  tls:
+    enabled: true
+
+    # Option 1: File paths to certificates
+    # cert: "/path/to/server.crt"
+    # key: "/path/to/server.key"
+    # ca: "/path/to/ca.crt"  # Optional: CA certificate
+
+    # Option 2: Environment variables containing certificate content
+    cert: "${TLS_CERT}"  # Certificate content from environment variable
+    key: "${TLS_KEY}"    # Private key content from environment variable
+    ca: "${TLS_CA}"      # Optional: CA cert from environment variable
+
+    # Option 3: Inline certificate content (not recommended for production)
+    # cert: |
+    #   -----BEGIN CERTIFICATE-----
+    #   MIIDXTCCAkWgAwIBAgIJAKLdQVPy90WjMA0GCSqGSIb3DQEBCwUAMEUxCzAJBgNV
+    #   ... certificate content ...
+    #   -----END CERTIFICATE-----
+    # key: |
+    #   -----BEGIN PRIVATE KEY-----
+    #   MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQDYscr5BQJG
+    #   ... key content ...
+    #   -----END PRIVATE KEY-----
+
+    # Reject unauthorized connections (default: true)
+    rejectUnauthorized: true
+
+  # Authentication for webhook endpoints
+  auth:
+    type: bearer_token
+    secret: "${WEBHOOK_SECRET}"
+
+  # Webhook endpoints
+  endpoints:
+    - path: "/webhook/github"
+      name: "github-events"
+    - path: "/webhook/jenkins"
+      name: "jenkins-builds"
+    - path: "/webhook/datadog"
+      name: "monitoring-alerts"
+
+steps:
+  # === Webhook receivers for HTTPS endpoints ===
+
+  github-webhook:
+    type: http_input
+    endpoint: "/webhook/github"
+    on: [webhook_received]
+    transform: |
+      {
+        "event": "{{ webhook.action }}",
+        "repository": "{{ webhook.repository.full_name }}",
+        "sender": "{{ webhook.sender.login }}",
+        "signature": "{{ headers['x-hub-signature-256'] }}"
+      }
+
+  jenkins-webhook:
+    type: http_input
+    endpoint: "/webhook/jenkins"
+    on: [webhook_received]
+    transform: |
+      {
+        "job": "{{ webhook.name }}",
+        "build": "{{ webhook.build.number }}",
+        "status": "{{ webhook.build.status }}",
+        "url": "{{ webhook.build.url }}"
+      }
+
+  datadog-alert:
+    type: http_input
+    endpoint: "/webhook/datadog"
+    on: [webhook_received]
+    transform: |
+      {
+        "alert": "{{ webhook.title }}",
+        "priority": "{{ webhook.priority }}",
+        "tags": {{ webhook.tags | json }},
+        "event_msg": "{{ webhook.event_msg }}"
+      }
+
+  # === Process webhook data ===
+
+  github-analysis:
+    type: ai
+    depends_on: [github-webhook]
+    prompt: |
+      Analyze the GitHub webhook event:
+      {{ outputs['github-webhook'].suggestions | first }}
+
+      Determine:
+      1. Security implications
+      2. Required actions
+      3. Impact assessment
+    group: github
+
+  jenkins-build-analysis:
+    type: ai
+    depends_on: [jenkins-webhook]
+    prompt: |
+      Jenkins build notification:
+      {{ outputs['jenkins-webhook'].suggestions | first }}
+
+      Analyze:
+      1. Build failure patterns
+      2. Performance trends
+      3. Recommended fixes
+    group: ci-cd
+
+  monitoring-response:
+    type: ai
+    depends_on: [datadog-alert]
+    prompt: |
+      Datadog monitoring alert:
+      {{ outputs['datadog-alert'].suggestions | first }}
+
+      Provide:
+      1. Root cause analysis
+      2. Immediate remediation steps
+      3. Long-term prevention strategies
+    group: monitoring
+
+  # === Send secure notifications ===
+
+  # Send to secure internal API using HTTPS
+  internal-api-notification:
+    type: http
+    depends_on: [github-analysis, jenkins-build-analysis]
+    url: "https://internal-api.example.com/notifications"
+    method: POST
+    headers:
+      Content-Type: "application/json"
+      Authorization: "Bearer ${INTERNAL_API_TOKEN}"
+      X-TLS-Client-Cert: "${CLIENT_CERT}"  # Client certificate for mTLS
+    body: |
+      {
+        "source": "visor",
+        "timestamp": "{{ 'now' | date: '%Y-%m-%dT%H:%M:%S' }}",
+        "github_analysis": {{ outputs['github-analysis'] | json }},
+        "jenkins_analysis": {{ outputs['jenkins-build-analysis'] | json }},
+        "secure": true,
+        "protocol": "https"
+      }
+
+  # Fetch from secure API endpoint
+  secure-api-fetch:
+    type: http_client
+    url: "https://secure-api.example.com/data"
+    method: GET
+    headers:
+      Authorization: "Bearer ${SECURE_API_TOKEN}"
+      X-Client-Id: "${CLIENT_ID}"
+    # Note: http_client automatically handles HTTPS connections
+    transform: |
+      {
+        "fetched_at": "{{ 'now' | date: '%Y-%m-%dT%H:%M:%S' }}",
+        "data": {{ response | json }}
+      }
+    schedule: "*/30 * * * *"  # Every 30 minutes
+
+# Production TLS Setup Examples:
+
+# 1. Let's Encrypt with Certbot:
+#    tls:
+#      cert: "/etc/letsencrypt/live/example.com/fullchain.pem"
+#      key: "/etc/letsencrypt/live/example.com/privkey.pem"
+
+# 2. Self-signed for development:
+#    Generate: openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365 -nodes
+#    tls:
+#      cert: "./cert.pem"
+#      key: "./key.pem"
+#      rejectUnauthorized: false  # Allow self-signed in dev
+
+# 3. Kubernetes secrets:
+#    tls:
+#      cert: "${TLS_CERT}"  # Mounted from K8s secret
+#      key: "${TLS_KEY}"    # Mounted from K8s secret
+
+# 4. AWS Certificate Manager:
+#    Use AWS ALB/NLB for TLS termination, then:
+#    tls:
+#      enabled: false  # TLS handled by load balancer
+#    auth:
+#      type: bearer_token  # Still authenticate requests
+
+# 5. Mutual TLS (mTLS):
+#    tls:
+#      cert: "${SERVER_CERT}"
+#      key: "${SERVER_KEY}"
+#      ca: "${CLIENT_CA}"  # CA to verify client certificates
+#      rejectUnauthorized: true
+
+output:
+  pr_comment:
+    format: markdown
+    group_by: check
+    collapse: true

package/dist/examples/human-input-example.yaml

@@ -0,0 +1,63 @@
+version: "1.0"
+
+# Example configuration demonstrating human-input check type
+# This shows various ways to use human-in-the-loop interactions
+
+checks:
+  # Example 1: Simple approval gate
+  approval-gate:
+    type: human-input
+    prompt: "Do you approve this change? (yes/no)"
+    allow_empty: false
+    timeout: 300  # 5 minutes in seconds
+
+  # Example 2: Context collection
+  gather-context:
+    type: human-input
+    prompt: |
+      Please provide additional context about this change:
+      - What problem does it solve?
+      - Are there any risks?
+      - Any special deployment considerations?
+    placeholder: "Enter context here..."
+    multiline: true
+    allow_empty: true
+    default: "No additional context provided"
+
+  # Example 3: Conditional workflow
+  choose-review-type:
+    type: human-input
+    prompt: "Select review type: (1) Quick check or (2) Full analysis?"
+    allow_empty: false
+
+  quick-check:
+    type: log
+    depends_on: [choose-review-type]
+    if: "outputs['choose-review-type'] === '1'"
+    message: "Running quick check... (selected option: {{ outputs['choose-review-type'] }})"
+
+  full-analysis:
+    type: log
+    depends_on: [choose-review-type]
+    if: "outputs['choose-review-type'] === '2'"
+    message: "Running full analysis... (selected option: {{ outputs['choose-review-type'] }})"
+
+  # Example 4: Using human input in subsequent checks
+  deployment-confirmation:
+    type: human-input
+    prompt: "Are you ready to deploy? Enter deployment target (staging/production):"
+    allow_empty: false
+
+  deploy:
+    type: log
+    depends_on: [deployment-confirmation]
+    message: |
+      Deploying to: {{ outputs['deployment-confirmation'] }}
+
+      This is where you would trigger your deployment script
+
+output:
+  pr_comment:
+    format: markdown
+    group_by: check
+    collapse: false