@probelabs/visor 0.1.90 → 0.1.93

package/dist/utils/author-permissions.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Author permission utilities for checking GitHub author associations
+ *
+ * GitHub provides author_association field with these values (in order of privilege):
+ * - OWNER: Repository owner
+ * - MEMBER: Organization member
+ * - COLLABORATOR: Invited collaborator
+ * - CONTRIBUTOR: Has contributed before
+ * - FIRST_TIME_CONTRIBUTOR: First PR to this repo
+ * - FIRST_TIMER: First GitHub contribution ever
+ * - NONE: No association
+ */
+export type AuthorAssociation = 'OWNER' | 'MEMBER' | 'COLLABORATOR' | 'CONTRIBUTOR' | 'FIRST_TIME_CONTRIBUTOR' | 'FIRST_TIMER' | 'NONE';
+/**
+ * Check if author has at least the specified permission level (>= logic)
+ *
+ * @param authorAssociation - The author's association from GitHub API
+ * @param minPermission - Minimum required permission level
+ * @param isLocalMode - Whether running in local/CLI mode (defaults to true for local runs)
+ * @returns true if author has at least the specified permission level
+ *
+ * @example
+ * hasMinPermission('MEMBER', 'MEMBER') // true (exact match)
+ * hasMinPermission('OWNER', 'MEMBER') // true (owner >= member)
+ * hasMinPermission('COLLABORATOR', 'MEMBER') // false (collaborator < member)
+ * hasMinPermission(undefined, 'OWNER', true) // true (local mode)
+ */
+export declare function hasMinPermission(authorAssociation: string | undefined, minPermission: AuthorAssociation, isLocalMode?: boolean): boolean;
+/**
+ * Check if author is exactly the repository owner
+ */
+export declare function isOwner(authorAssociation: string | undefined, isLocalMode?: boolean): boolean;
+/**
+ * Check if author is an organization member or owner
+ */
+export declare function isMember(authorAssociation: string | undefined, isLocalMode?: boolean): boolean;
+/**
+ * Check if author is a collaborator (or higher)
+ */
+export declare function isCollaborator(authorAssociation: string | undefined, isLocalMode?: boolean): boolean;
+/**
+ * Check if author is a contributor (has contributed before)
+ */
+export declare function isContributor(authorAssociation: string | undefined, isLocalMode?: boolean): boolean;
+/**
+ * Check if author is a first-time contributor (to this repo or GitHub)
+ */
+export declare function isFirstTimer(authorAssociation: string | undefined, isLocalMode?: boolean): boolean;
+/**
+ * Create permission helper functions bound to a specific author association
+ * This is used to inject functions into JavaScript execution contexts
+ *
+ * @param authorAssociation - The author's association from PR data
+ * @param isLocalMode - Whether running in local/CLI mode
+ */
+export declare function createPermissionHelpers(authorAssociation: string | undefined, isLocalMode?: boolean): {
+    hasMinPermission: (minPermission: AuthorAssociation) => boolean;
+    isOwner: () => boolean;
+    isMember: () => boolean;
+    isCollaborator: () => boolean;
+    isContributor: () => boolean;
+    isFirstTimer: () => boolean;
+};
+/**
+ * Determine if we're running in local mode (not GitHub Actions)
+ */
+export declare function detectLocalMode(): boolean;
+/**
+ * Resolve the most relevant GitHub author association from an event context.
+ * Prefers commenter association for issue_comment events, then issue/PR author,
+ * and finally falls back to the provided default association.
+ */
+export declare function resolveAssociationFromEvent(eventContext: any | undefined, fallback?: string): string | undefined;
+//# sourceMappingURL=author-permissions.d.ts.map

package/dist/utils/author-permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"author-permissions.d.ts","sourceRoot":"","sources":["file:///home/runner/work/visor/visor/src/utils/author-permissions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,MAAM,iBAAiB,GACzB,OAAO,GACP,QAAQ,GACR,cAAc,GACd,aAAa,GACb,wBAAwB,GACxB,aAAa,GACb,MAAM,CAAC;AAwBX;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAC9B,iBAAiB,EAAE,MAAM,GAAG,SAAS,EACrC,aAAa,EAAE,iBAAiB,EAChC,WAAW,GAAE,OAAe,GAC3B,OAAO,CAWT;AAED;;GAEG;AACH,wBAAgB,OAAO,CACrB,iBAAiB,EAAE,MAAM,GAAG,SAAS,EACrC,WAAW,GAAE,OAAe,GAC3B,OAAO,CAGT;AAED;;GAEG;AACH,wBAAgB,QAAQ,CACtB,iBAAiB,EAAE,MAAM,GAAG,SAAS,EACrC,WAAW,GAAE,OAAe,GAC3B,OAAO,CAGT;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,iBAAiB,EAAE,MAAM,GAAG,SAAS,EACrC,WAAW,GAAE,OAAe,GAC3B,OAAO,CAGT;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,iBAAiB,EAAE,MAAM,GAAG,SAAS,EACrC,WAAW,GAAE,OAAe,GAC3B,OAAO,CAGT;AAED;;GAEG;AACH,wBAAgB,YAAY,CAC1B,iBAAiB,EAAE,MAAM,GAAG,SAAS,EACrC,WAAW,GAAE,OAAe,GAC3B,OAAO,CAIT;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,iBAAiB,EAAE,MAAM,GAAG,SAAS,EACrC,WAAW,GAAE,OAAe;sCAGQ,iBAAiB;;;;;;EAQtD;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,OAAO,CAEzC;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CACzC,YAAY,EAAE,GAAG,GAAG,SAAS,EAC7B,QAAQ,CAAC,EAAE,MAAM,GAChB,MAAM,GAAG,SAAS,CAYpB"}

package/dist/utils/head-sha.d.ts

@@ -0,0 +1,8 @@
+import type { GitHubContext } from '../action-cli-bridge';
+/**
+ * Resolve the PR head SHA for contexts like issue_comment where payload may not include head.sha.
+ * Falls back to a pulls.get API call when needed.
+ * Note: typed loosely to avoid importing Octokit in tests.
+ */
+export declare function resolveHeadShaFromEvent(octokit: any, owner: string, repo: string, context: GitHubContext): Promise<string>;
+//# sourceMappingURL=head-sha.d.ts.map

package/dist/utils/head-sha.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"head-sha.d.ts","sourceRoot":"","sources":["file:///home/runner/work/visor/visor/src/utils/head-sha.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,GAAG,EACZ,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,MAAM,CAAC,CAiCjB"}

package/dist/utils/mermaid-telemetry.d.ts

@@ -0,0 +1,3 @@
+export type DiagramOrigin = 'content' | 'issue';
+export declare function emitMermaidFromMarkdown(checkName: string, markdown: string, origin: DiagramOrigin): number;
+//# sourceMappingURL=mermaid-telemetry.d.ts.map

package/dist/utils/mermaid-telemetry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mermaid-telemetry.d.ts","sourceRoot":"","sources":["file:///home/runner/work/visor/visor/src/utils/mermaid-telemetry.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,OAAO,CAAC;AAEhD,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,aAAa,GACpB,MAAM,CAoDR"}

package/dist/utils/tracer-init.d.ts

@@ -0,0 +1,12 @@
+import { TelemetryConfig, AppTracer } from '@probelabs/probe';
+/**
+ * Safely initialize a tracer for ProbeAgent with proper path sanitization
+ * Uses full OpenTelemetry integration for hierarchical span relationships
+ * This prevents path traversal vulnerabilities by sanitizing the checkName
+ */
+export declare function initializeTracer(sessionId: string, checkName?: string): Promise<{
+    tracer: AppTracer;
+    telemetryConfig: TelemetryConfig;
+    filePath: string;
+} | null>;
+//# sourceMappingURL=tracer-init.d.ts.map

package/dist/utils/tracer-init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracer-init.d.ts","sourceRoot":"","sources":["file:///home/runner/work/visor/visor/src/utils/tracer-init.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,SAAS,EAAoC,MAAM,kBAAkB,CAAC;AAEhG;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,SAAS,EAAE,MAAM,EACjB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,eAAe,EAAE,eAAe,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAkI3F"}

package/dist/utils/ui-helpers.d.ts

@@ -0,0 +1,3 @@
+import { GroupedCheckResults } from '../reviewer';
+export declare function deriveExecutedCheckNames(groupedResults: GroupedCheckResults): string[];
+//# sourceMappingURL=ui-helpers.d.ts.map

package/dist/utils/ui-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-helpers.d.ts","sourceRoot":"","sources":["file:///home/runner/work/visor/visor/src/utils/ui-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,wBAAgB,wBAAwB,CAAC,cAAc,EAAE,mBAAmB,GAAG,MAAM,EAAE,CAQtF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@probelabs/visor",
-  "version": "0.1.90",
+  "version": "0.1.93",
   "main": "dist/index.js",
   "bin": {
     "visor": "./dist/index.js"
@@ -90,7 +90,7 @@
     "@octokit/auth-app": "^8.1.0",
     "@octokit/core": "^7.0.3",
     "@octokit/rest": "^22.0.0",
-    "@probelabs/probe": "^0.6.0-rc125",
+    "@probelabs/probe": "^0.6.0-rc138",
     "@types/commander": "^2.12.0",
     "@types/uuid": "^10.0.0",
     "ajv": "^8.17.1",

package/dist/sdk/check-execution-engine-Z2USLMN5.mjs

@@ -1,9 +0,0 @@
-import {
-  CheckExecutionEngine
-} from "./chunk-N2PPFOSF.mjs";
-import "./chunk-FIL2OGF6.mjs";
-import "./chunk-WMJKH4XE.mjs";
-export {
-  CheckExecutionEngine
-};
-//# sourceMappingURL=check-execution-engine-Z2USLMN5.mjs.map

package/dist/sdk/chunk-FIL2OGF6.mjs

@@ -1,68 +0,0 @@
-// src/liquid-extensions.ts
-import { Liquid, Tag, Value } from "liquidjs";
-import fs from "fs/promises";
-import path from "path";
-var ReadFileTag = class extends Tag {
-  filepath;
-  constructor(token, remainTokens, liquid) {
-    super(token, remainTokens, liquid);
-    this.filepath = new Value(token.args, liquid);
-  }
-  *render(ctx, emitter) {
-    const filePath = yield this.filepath.value(ctx, false);
-    if (!filePath || typeof filePath !== "string") {
-      emitter.write("[Error: Invalid file path]");
-      return;
-    }
-    const projectRoot = process.cwd();
-    const resolvedPath = path.resolve(projectRoot, filePath.toString());
-    if (!resolvedPath.startsWith(projectRoot)) {
-      emitter.write("[Error: File path escapes project directory]");
-      return;
-    }
-    try {
-      const content = yield fs.readFile(resolvedPath, "utf-8");
-      emitter.write(content);
-    } catch (error) {
-      const errorMessage = error instanceof Error ? error.message : error?.code || "Unknown error";
-      emitter.write(`[Error reading file: ${errorMessage}]`);
-    }
-  }
-};
-function configureLiquidWithExtensions(liquid) {
-  liquid.registerTag("readfile", ReadFileTag);
-  liquid.registerFilter("parse_json", (value) => {
-    if (typeof value !== "string") {
-      return value;
-    }
-    try {
-      return JSON.parse(value);
-    } catch {
-      return value;
-    }
-  });
-  liquid.registerFilter("to_json", (value) => {
-    try {
-      return JSON.stringify(value);
-    } catch {
-      return "[Error: Unable to serialize to JSON]";
-    }
-  });
-}
-function createExtendedLiquid(options = {}) {
-  const liquid = new Liquid({
-    cache: false,
-    strictFilters: false,
-    strictVariables: false,
-    ...options
-  });
-  configureLiquidWithExtensions(liquid);
-  return liquid;
-}
-
-export {
-  ReadFileTag,
-  configureLiquidWithExtensions,
-  createExtendedLiquid
-};
-//# sourceMappingURL=chunk-FIL2OGF6.mjs.map

package/dist/sdk/chunk-FIL2OGF6.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/liquid-extensions.ts"],"sourcesContent":["import { Liquid, TagToken, Context, TopLevelToken, Tag, Value, Emitter } from 'liquidjs';\nimport fs from 'fs/promises';\nimport path from 'path';\n\n/**\n * Custom ReadFile tag for Liquid templates\n * Usage: {% readfile \"path/to/file.txt\" %}\n * or with variable: {% readfile filename %}\n */\nexport class ReadFileTag extends Tag {\n  private filepath: Value;\n\n  constructor(token: TagToken, remainTokens: TopLevelToken[], liquid: Liquid) {\n    super(token, remainTokens, liquid);\n    this.filepath = new Value(token.args, liquid);\n  }\n\n  *render(ctx: Context, emitter: Emitter): Generator<unknown, void, unknown> {\n    const filePath = yield this.filepath.value(ctx, false);\n\n    // Validate the path\n    if (!filePath || typeof filePath !== 'string') {\n      emitter.write('[Error: Invalid file path]');\n      return;\n    }\n\n    // Security: Resolve path relative to project root to prevent directory traversal\n    const projectRoot = process.cwd();\n    const resolvedPath = path.resolve(projectRoot, filePath.toString());\n\n    // Ensure the resolved path is within the project directory\n    if (!resolvedPath.startsWith(projectRoot)) {\n      emitter.write('[Error: File path escapes project directory]');\n      return;\n    }\n\n    // Read the file content\n    try {\n      const content = yield fs.readFile(resolvedPath, 'utf-8');\n      emitter.write(content);\n    } catch (error) {\n      // Handle file read errors gracefully\n      const errorMessage =\n        error instanceof Error\n          ? error.message\n          : (error as NodeJS.ErrnoException)?.code || 'Unknown error';\n      emitter.write(`[Error reading file: ${errorMessage}]`);\n    }\n  }\n}\n\n/**\n * Configure a Liquid instance with custom extensions\n */\nexport function configureLiquidWithExtensions(liquid: Liquid): void {\n  // Register the readfile tag\n  liquid.registerTag('readfile', ReadFileTag);\n\n  // Register parse_json filter to parse JSON strings into objects\n  liquid.registerFilter('parse_json', (value: string) => {\n    if (typeof value !== 'string') {\n      return value;\n    }\n    try {\n      return JSON.parse(value);\n    } catch {\n      // Return original value if parsing fails\n      return value;\n    }\n  });\n\n  // Register to_json filter as alias for json (for consistency)\n  liquid.registerFilter('to_json', (value: unknown) => {\n    try {\n      return JSON.stringify(value);\n    } catch {\n      return '[Error: Unable to serialize to JSON]';\n    }\n  });\n}\n\n/**\n * Create a new Liquid instance with custom extensions\n */\nexport function createExtendedLiquid(options: Record<string, unknown> = {}): Liquid {\n  const liquid = new Liquid({\n    cache: false,\n    strictFilters: false,\n    strictVariables: false,\n    ...options,\n  });\n\n  configureLiquidWithExtensions(liquid);\n  return liquid;\n}\n"],"mappings":";AAAA,SAAS,QAA0C,KAAK,aAAsB;AAC9E,OAAO,QAAQ;AACf,OAAO,UAAU;AAOV,IAAM,cAAN,cAA0B,IAAI;AAAA,EAC3B;AAAA,EAER,YAAY,OAAiB,cAA+B,QAAgB;AAC1E,UAAM,OAAO,cAAc,MAAM;AACjC,SAAK,WAAW,IAAI,MAAM,MAAM,MAAM,MAAM;AAAA,EAC9C;AAAA,EAEA,CAAC,OAAO,KAAc,SAAqD;AACzE,UAAM,WAAW,MAAM,KAAK,SAAS,MAAM,KAAK,KAAK;AAGrD,QAAI,CAAC,YAAY,OAAO,aAAa,UAAU;AAC7C,cAAQ,MAAM,4BAA4B;AAC1C;AAAA,IACF;AAGA,UAAM,cAAc,QAAQ,IAAI;AAChC,UAAM,eAAe,KAAK,QAAQ,aAAa,SAAS,SAAS,CAAC;AAGlE,QAAI,CAAC,aAAa,WAAW,WAAW,GAAG;AACzC,cAAQ,MAAM,8CAA8C;AAC5D;AAAA,IACF;AAGA,QAAI;AACF,YAAM,UAAU,MAAM,GAAG,SAAS,cAAc,OAAO;AACvD,cAAQ,MAAM,OAAO;AAAA,IACvB,SAAS,OAAO;AAEd,YAAM,eACJ,iBAAiB,QACb,MAAM,UACL,OAAiC,QAAQ;AAChD,cAAQ,MAAM,wBAAwB,YAAY,GAAG;AAAA,IACvD;AAAA,EACF;AACF;AAKO,SAAS,8BAA8B,QAAsB;AAElE,SAAO,YAAY,YAAY,WAAW;AAG1C,SAAO,eAAe,cAAc,CAAC,UAAkB;AACrD,QAAI,OAAO,UAAU,UAAU;AAC7B,aAAO;AAAA,IACT;AACA,QAAI;AACF,aAAO,KAAK,MAAM,KAAK;AAAA,IACzB,QAAQ;AAEN,aAAO;AAAA,IACT;AAAA,EACF,CAAC;AAGD,SAAO,eAAe,WAAW,CAAC,UAAmB;AACnD,QAAI;AACF,aAAO,KAAK,UAAU,KAAK;AAAA,IAC7B,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF,CAAC;AACH;AAKO,SAAS,qBAAqB,UAAmC,CAAC,GAAW;AAClF,QAAM,SAAS,IAAI,OAAO;AAAA,IACxB,OAAO;AAAA,IACP,eAAe;AAAA,IACf,iBAAiB;AAAA,IACjB,GAAG;AAAA,EACL,CAAC;AAED,gCAA8B,MAAM;AACpC,SAAO;AACT;","names":[]}