@probelabs/visor 0.1.96 → 0.1.98

package/README.md

@@ -56,7 +56,7 @@ jobs:
 
 ```yaml
 version: "1.0"
-checks:
+steps:  # or 'checks' (legacy, both work identically)
   security:
     type: ai
     schema: code-review
@@ -130,7 +130,7 @@ Additional guides:
 - Schema – JSON shape checks return (e.g., `code-review`).
 - Template – renders results (tables/markdown).
 - Group – which comment a check is posted into.
-- Provider – how a check runs (`ai`, `http`, `http_client`, `command`, `log`, `github`, `claude-code`).
+- Provider – how a check runs (`ai`, `mcp`, `http`, `http_client`, `command`, `log`, `github`, `claude-code`).
 - Dependencies – `depends_on` controls order; independents run in parallel.
 - Tags – label checks (`fast`, `local`, `comprehensive`) and filter with `--tags`.
 - Events – PRs, issues, `/review` comments, webhooks, or cron schedules.
@@ -188,11 +188,11 @@ Visor is a general SDLC automation framework:
 - Config‑first: One `.visor.yaml` defines checks, prompts, schemas, and templates — no hidden logic.
 - Structured outputs: JSON Schema validation drives deterministic rendering, annotations, and SARIF.
 - Orchestrated pipelines: Dependencies, parallelism, and tag‑based profiles; run in Actions or any CI.
-- Multi‑provider AI: Google Gemini, Anthropic Claude, OpenAI, AWS Bedrock — plus MCP tools and Claude Code SDK.
+- Multi‑provider AI: Google Gemini, Anthropic Claude, OpenAI, AWS Bedrock — plus MCP tools, standalone MCP provider, and Claude Code SDK.
 - Author permissions: Built-in functions to customize workflows based on contributor trust level (owner, member, collaborator, etc).
 - Assistants & commands: `/review` to rerun checks, `/visor …` for Q&A, predictable comment groups.
 - HTTP & schedules: Receive webhooks, call external APIs, and run cron‑scheduled audits and reports.
-- Extensible providers: `ai`, `http`, `http_client`, `log`, `command`, `github`, `claude-code` — or add your own.
+- Extensible providers: `ai`, `mcp`, `http`, `http_client`, `log`, `command`, `github`, `claude-code` — or add your own.
 - Security by default: GitHub App support, scoped tokens, remote‑extends allowlist, opt‑in network usage.
 - Observability & control: JSON/SARIF outputs, fail‑fast and timeouts, parallelism and cost control.
 
@@ -221,7 +221,7 @@ Run subsets of checks (e.g., `local`, `fast`, `security`) and select them per en
 
 Example:
 ```yaml
-checks:
+steps:
   security-quick:
     type: ai
     prompt: "Quick security scan"
@@ -253,7 +253,7 @@ Learn more: [docs/commands.md](docs/commands.md)
 Customize workflows based on PR author's permission level using built-in functions in JavaScript expressions:
 
 ```yaml
-checks:
+steps:
   # Run security scan only for external contributors
   security-scan:
     type: command
@@ -391,7 +391,7 @@ Define `depends_on` to enforce order; independent checks run in parallel.
 
 Example:
 ```yaml
-checks:
+steps:
   security:   { type: ai }
   performance:{ type: ai, depends_on: [security] }
 ```
@@ -416,7 +416,7 @@ Example (retry + goto on failure):
 version: "2.0"
 routing:
   max_loops: 5
-checks:
+steps:
   setup: { type: command, exec: "echo setup" }
   build:
     type: command
@@ -431,7 +431,7 @@ checks:
 
 Example (on_success jump‑back once):
 ```yaml
-checks:
+steps:
   unit: { type: command, exec: "echo unit" }
   build:
     type: command
@@ -453,7 +453,7 @@ Use the Claude Code SDK as a provider for deeper analysis.
 
 Example:
 ```yaml
-checks:
+steps:
   claude-review:
     type: claude-code
     prompt: "Analyze code complexity"
@@ -471,7 +471,7 @@ Reuse conversation context between dependent AI checks for smarter follow‑ups.
 
 Example:
 ```yaml
-checks:
+steps:
   security: { type: ai }
   remediation:
     type: ai
@@ -492,7 +492,7 @@ Schemas validate outputs; templates render GitHub‑friendly comments.
 
 Example:
 ```yaml
-checks:
+steps:
   security:
     type: ai
     schema: code-review
@@ -507,7 +507,7 @@ Write prompts inline or in files; Liquid variables provide PR context.
 
 Example:
 ```yaml
-checks:
+steps:
   overview:
     type: ai
     prompt: ./prompts/overview.liquid
@@ -566,7 +566,7 @@ Comprehensive debugging tools help troubleshoot configurations and data flows:
 
 **Use `log()` in JavaScript expressions:**
 ```yaml
-checks:
+steps:
   conditional-check:
     if: |
       log("Outputs:", outputs);
@@ -579,7 +579,7 @@ checks:
 
 **Use `json` filter in Liquid templates:**
 ```yaml
-checks:
+steps:
   debug-check:
     type: logger
     message: |
@@ -614,7 +614,7 @@ Receive webhooks, call APIs, and schedule checks.
 Examples:
 ```yaml
 http_server: { enabled: true, port: 8080 }
-checks:
+steps:
   nightly: { type: ai, schedule: "0 2 * * *" }
 ```
 
@@ -622,10 +622,11 @@ Learn more: [docs/http.md](docs/http.md)
 
 ## 🔧 Pluggable Architecture
 
-Mix providers (`ai`, `http`, `http_client`, `log`, `command`, `claude-code`) or add your own.
+Mix providers (`ai`, `mcp`, `http`, `http_client`, `log`, `command`, `github`, `claude-code`) or add your own.
 
 - **Command Provider**: Execute shell commands with templating and security - [docs/command-provider.md](docs/command-provider.md)
-- **MCP Tools**: Leverage the Model Context Protocol for external tools - [docs/mcp.md](docs/mcp.md)
+- **MCP Provider**: Call MCP tools directly via stdio, SSE, or HTTP transports - [docs/mcp-provider.md](docs/mcp-provider.md)
+- **MCP Tools for AI**: Enhance AI providers with MCP context - [docs/mcp.md](docs/mcp.md)
 - **Custom Providers**: Build your own providers - [docs/pluggable.md](docs/pluggable.md)
 
 ## 🎯 GitHub Action Reference
@@ -678,7 +679,7 @@ Use the native GitHub provider for safe labels and comments without invoking the
 Example — apply overview‑derived labels to a PR:
 
 ```yaml
-checks:
+steps:
   apply-overview-labels:
     type: github
     op: labels.add

package/defaults/.visor.yaml

@@ -7,13 +7,14 @@ version: "1.0"
 # Global AI provider settings - users should configure their preferred provider
 # For CI testing, use --provider mock CLI flag instead
 
-# Run up to 4 checks in parallel for faster execution
+# Run up to 4 steps in parallel for faster execution
 max_parallelism: 4
 
 # Global fail condition - fail if critical or error severity issues are found
 fail_if: "output.issues && output.issues.some(i => i.severity === 'critical' || i.severity === 'error')"
 
-checks:
+# Workflow steps (formerly 'checks' - both keys are supported for backward compatibility)
+steps:
   # AI-powered release notes generation - manual execution only for release workflows
   release-notes:
     type: ai

package/dist/{168.index.js → 136.index.js}

@@ -1,9 +1,9 @@
 "use strict";
-exports.id = 168;
-exports.ids = [168];
+exports.id = 136;
+exports.ids = [136];
 exports.modules = {
 
-/***/ 14239:
+/***/ 95023:
 /***/ ((__unused_webpack_module, exports, __webpack_require__) => {
 
 
@@ -31,7 +31,7 @@ exports.execAsync = util.promisify(child_process.exec);
 
 /***/ }),
 
-/***/ 17168:
+/***/ 43136:
 /***/ ((__unused_webpack_module, exports, __webpack_require__) => {
 
 
@@ -52,7 +52,7 @@ exports.execAsync = util.promisify(child_process.exec);
  */
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.getMachineId = void 0;
-const execAsync_1 = __webpack_require__(14239);
+const execAsync_1 = __webpack_require__(95023);
 const api_1 = __webpack_require__(63914);
 async function getMachineId() {
     try {

package/dist/{272.index.js → 146.index.js}

@@ -1,9 +1,9 @@
 "use strict";
-exports.id = 272;
-exports.ids = [272];
+exports.id = 146;
+exports.ids = [146];
 exports.modules = {
 
-/***/ 31223:
+/***/ 67049:
 /***/ ((__unused_webpack_module, exports, __webpack_require__) => {
 
 
@@ -31,7 +31,7 @@ exports.execAsync = util.promisify(child_process.exec);
 
 /***/ }),
 
-/***/ 37272:
+/***/ 29146:
 /***/ ((__unused_webpack_module, exports, __webpack_require__) => {
 
 
@@ -52,7 +52,7 @@ exports.execAsync = util.promisify(child_process.exec);
  */
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.getMachineId = void 0;
-const execAsync_1 = __webpack_require__(31223);
+const execAsync_1 = __webpack_require__(67049);
 const api_1 = __webpack_require__(63914);
 async function getMachineId() {
     try {

package/dist/{13.index.js → 160.index.js}

@@ -1,9 +1,9 @@
 "use strict";
-exports.id = 13;
-exports.ids = [13];
+exports.id = 160;
+exports.ids = [160];
 exports.modules = {
 
-/***/ 31223:
+/***/ 66272:
 /***/ ((__unused_webpack_module, exports, __webpack_require__) => {
 
 
@@ -31,7 +31,7 @@ exports.execAsync = util.promisify(child_process.exec);
 
 /***/ }),
 
-/***/ 80013:
+/***/ 51160:
 /***/ ((__unused_webpack_module, exports, __webpack_require__) => {
 
 
@@ -53,7 +53,7 @@ exports.execAsync = util.promisify(child_process.exec);
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.getMachineId = void 0;
 const process = __webpack_require__(932);
-const execAsync_1 = __webpack_require__(31223);
+const execAsync_1 = __webpack_require__(66272);
 const api_1 = __webpack_require__(63914);
 async function getMachineId() {
     const args = 'QUERY HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography /v MachineGuid';

package/dist/{421.index.js → 179.index.js}

@@ -1,9 +1,9 @@
 "use strict";
-exports.id = 421;
-exports.ids = [421];
+exports.id = 179;
+exports.ids = [179];
 exports.modules = {
 
-/***/ 10421:
+/***/ 70179:
 /***/ ((__unused_webpack_module, exports, __webpack_require__) => {
 
 

package/dist/{85.index.js → 191.index.js}

@@ -1,9 +1,9 @@
 "use strict";
-exports.id = 85;
-exports.ids = [85];
+exports.id = 191;
+exports.ids = [191];
 exports.modules = {
 
-/***/ 14239:
+/***/ 67049:
 /***/ ((__unused_webpack_module, exports, __webpack_require__) => {
 
 
@@ -31,7 +31,7 @@ exports.execAsync = util.promisify(child_process.exec);
 
 /***/ }),
 
-/***/ 36085:
+/***/ 53191:
 /***/ ((__unused_webpack_module, exports, __webpack_require__) => {
 
 
@@ -53,7 +53,7 @@ exports.execAsync = util.promisify(child_process.exec);
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.getMachineId = void 0;
 const process = __webpack_require__(932);
-const execAsync_1 = __webpack_require__(14239);
+const execAsync_1 = __webpack_require__(67049);
 const api_1 = __webpack_require__(63914);
 async function getMachineId() {
     const args = 'QUERY HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography /v MachineGuid';

package/dist/{544.index.js → 384.index.js}

@@ -1,9 +1,9 @@
 "use strict";
-exports.id = 544;
-exports.ids = [544];
+exports.id = 384;
+exports.ids = [384];
 exports.modules = {
 
-/***/ 15544:
+/***/ 5384:
 /***/ ((__unused_webpack_module, exports, __webpack_require__) => {
 
 

package/dist/{861.index.js → 405.index.js}

@@ -1,9 +1,9 @@
 "use strict";
-exports.id = 861;
-exports.ids = [861];
+exports.id = 405;
+exports.ids = [405];
 exports.modules = {
 
-/***/ 44861:
+/***/ 11405:
 /***/ ((__unused_webpack_module, exports, __webpack_require__) => {
 
 

package/dist/{320.index.js → 42.index.js}

@@ -1,9 +1,9 @@
 "use strict";
-exports.id = 320;
-exports.ids = [320];
+exports.id = 42;
+exports.ids = [42];
 exports.modules = {
 
-/***/ 74320:
+/***/ 37042:
 /***/ ((__unused_webpack_module, exports, __webpack_require__) => {
 
 

package/dist/448.index.js

@@ -0,0 +1,48 @@
+"use strict";
+exports.id = 448;
+exports.ids = [448];
+exports.modules = {
+
+/***/ 26448:
+/***/ ((__unused_webpack_module, exports, __webpack_require__) => {
+
+
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.getMachineId = void 0;
+/*
+ * Copyright The OpenTelemetry Authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+const fs_1 = __webpack_require__(79896);
+const api_1 = __webpack_require__(63914);
+async function getMachineId() {
+    const paths = ['/etc/machine-id', '/var/lib/dbus/machine-id'];
+    for (const path of paths) {
+        try {
+            const result = await fs_1.promises.readFile(path, { encoding: 'utf8' });
+            return result.trim();
+        }
+        catch (e) {
+            api_1.diag.debug(`error reading machine id: ${e}`);
+        }
+    }
+    return undefined;
+}
+exports.getMachineId = getMachineId;
+//# sourceMappingURL=getMachineId-linux.js.map
+
+/***/ })
+
+};
+;

package/dist/{878.index.js → 491.index.js}

@@ -1,9 +1,9 @@
 "use strict";
-exports.id = 878;
-exports.ids = [878];
+exports.id = 491;
+exports.ids = [491];
 exports.modules = {
 
-/***/ 31223:
+/***/ 66272:
 /***/ ((__unused_webpack_module, exports, __webpack_require__) => {
 
 
@@ -31,7 +31,7 @@ exports.execAsync = util.promisify(child_process.exec);
 
 /***/ }),
 
-/***/ 30878:
+/***/ 94491:
 /***/ ((__unused_webpack_module, exports, __webpack_require__) => {
 
 
@@ -53,7 +53,7 @@ exports.execAsync = util.promisify(child_process.exec);
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.getMachineId = void 0;
 const fs_1 = __webpack_require__(79896);
-const execAsync_1 = __webpack_require__(31223);
+const execAsync_1 = __webpack_require__(66272);
 const api_1 = __webpack_require__(63914);
 async function getMachineId() {
     try {