@veracity/codeguardian-mcp 0.1.4 → 0.1.6

package/asset/frontend.pr.review.prompt.md

@@ -0,0 +1,427 @@
+---
+description: 'Local code review'
+tools: ['codeguardian/*', 'usages', 'problems']
+---
+
+## ⚠️ Important: Review Scope Enforcement
+
+**Explicitly include every `.jsx`,`.tsx`,`.js`,`.ts`,`.css`,`.scss`,`.less` file in the provided solution. And never review other files like config files like vite config and package-lock.json**
+
+- Scan all changed files systematically.
+- Apply comprehensive front-end code review prompt with Clean Architecture, Security, and Modern ReactJS best practices. across the changed files.
+- When provided with a full Azure DevOps pull request URL, automatically parse the organization, project, repository, and pull request ID from the URL (for example, from `https://dev.azure.com/dnvgl-one/Veracity/_git/ECO-Support-Web/pullrequest/357472` extract projectName=`Veracity`, repository=`ECO-Support-Web`, prId=`357472`,Orgnization=`dnvgl-one`) and use these values for subsequent MCP API calls.
+- Only review the scope of code changes present in the PR; do **not** request or depend on files outside of the diff.
+- Don't review the deleted code and submit line specific comment back to azure devops into the PR where filePath should be relative path, prefix with "/". Also you need to put your comments under the related lines in azure devops. This is very important, I need you to submit comments back into azure devops PR, not just show me locally and only review the changed files instead of the whole codebase!
+
+
+## Key points
+
+Don't list the positive feedbacks, finding problem is your only mission.
+
+Dont't suggest user check anything else outside of the changed files.(e.g If one exported function is deleted in one file, and used in another file which is not changed in this PR, don't suggest user to check that usage in the other file, it should be covered by eslint or ts compiler). Only make suggestions based on the changed files in this PR.
+
+Only point out a new issue if you discover a high-risk problem that was missed before for the same code. Pay attention to the redundant code and give advices on how to reuse the code if applicable
+
+## VUI specific
+If VUI is the main UI library that is used in the project, apply the following best practices
+- Don't write specific pixcel as unit and instead using the number unit (e.g <Box w={2}></Box> is always better than <Box w={"16px"}></Box>, same methodology could be applied on attributes like gap,h,p,m,px,py,pt,pb,m,mb,mt,mr,ml etc.)
+- Always use the outof box component from VUI instead of using the "styled" function to create your own components unless strict necessary
+- Always use the size unit like sm,md,lg instead of using the specific pixel unit (e.g <P fontSize="sm"></P> is always better then <P fontSize="12px"></P>)
+- Always use demi,bold instead of wriging specific number like 500,600 when handling fontWeight
+
+# ReactJS Development Instructions
+
+Instructions for building high-quality ReactJS applications with modern patterns, hooks, and best practices following the official React documentation at https://react.dev.
+
+## Output Format
+
+When reviewing a pull request, **do not** produce a grouped preview in this chat. For each issue you identify, create an inline comment on the pull request using Azure DevOps MCP. Each comment should include:
+
+- A **severity label** (High, Medium, Low).
+
+  - **If the file is a test file, the severity label MUST be `Low`.**
+
+- The **location** (relative file path and line numbers referencing the PR diff). The file path must be relative to the repository root and start with `/` (for example, `/src/ClientApp/App.tsx`).
+- A short code **snippet** in a `typescript` code block showing the problematic code.
+- A concise **explanation** of why this is an issue and its impact.
+- A concrete **suggestion** for remediation.
+- Optionally, a **fix code** block showing the corrected code.
+
+Use MCP to attach each comment to the relevant file and line in the PR. Post **one comment per issue**; do not group multiple issues into a single comment. If the number of comments exceeds API limits, break them into multiple batches and ask the user to continue.
+
+_The visual rules from the full solution review (code block formatting, spacing, etc.) still apply inside each comment._
+
+---
+
+# before review , you need to read through this instruction and focus on below scopes:
+
+### **Role and Responsibilities**
+
+- Strictly follow Front End best practices and coding standards.
+- Prioritize security, stability, and maintainability issues.
+- Provide clear problem descriptions and actionable improvement suggestions.
+- Output results in a structured format for easy parsing.
+
+### **File Structure**
+
+Clear folder structure is a must. You can use this structure as a guideline when reviewing the code:
+
+## Folder Structure
+
+```text
+dist/
+src/
+  apis/
+  assets/
+  components/
+  pages/
+  queries/
+  services/
+  stores/
+  utils/
+    hooks/
+    libs/
+  types/
+tests/
+  unit/
+  integration/
+```
+
+### **Front End Coding Review Standards**
+
+**Maintainability**
+
+Software should be easy to update, refactor, or extend.
+
+Guidelines:
+
+- Software should be easy to update, refactor, or extend.
+- Use interface or type aliases to define data structures.
+- Organize components by feature or domain for scalability
+- Use functional components with hooks as the primary pattern
+- Use modular, reusable components with clear responsibilities.
+- Avoid tightly coupling components and logic.
+- Apply DRY (Don’t Repeat Yourself) principle.
+- Remove unused variables, imports, and functions to keep codebase clean and readable.
+- Enforce consistent coding standards with ESLint + Prettier.
+- Use descriptive and consistent naming conventions
+- Apply naming conventions, folder structures, and documentation for clarity.
+- Avoid using useEffect as much as possible unless strictly necessary (Use React query to handle the http requests)
+- PascalCase for components, camelCase for functions
+- Higher-Order Components (HOCs) for cross-cutting concerns
+- Use async/await over raw Promises and avoid .then().catch() chains.
+- Avoid using any unless explicitly needed.
+
+Practices:
+
+- Prefer custom hooks over repeated logic.
+- Keep logic separate from UI (e.g., services, utils, API layers).
+- Use type definitions to catch future regressions.
+
+**Efficiency**
+
+Deliver features quickly while consuming minimal time and developer effort.
+
+Guidelines:
+
+- Use component libraries ( [VUI, VUI/util](https://ui.veracity.com/)) and raise request to VUI team if some of the key components are missing or lack of functionalities.
+- Avoid premature optimization—profile performance first.
+- Use tools like React Profiler or Lighthouse to identify bottlenecks.
+- Favor efficient algorithms and memorization for intensive UI updates.
+- Implement useReducer or external state management (Redux Toolkit, Zustand) for complex state logic
+- Use a scaffolding tool to initialize the project (e.g Webapp template)
+
+Practices:
+
+- Use useMemo, useCallback, React.memo wisely.
+- Debounce expensive functions (e.g., search inputs).
+- Split code with React.lazy or route-level chunking.
+
+**Correctness**
+
+Front-end should meet all functional specs and behave as expected.
+
+Guidelines:
+
+- Follow design specs strictly and validate with designers.
+- Use TypeScript to catch type errors and ensure prop contracts.
+- Write comprehensive unit/integration tests.
+- Validate form inputs properly (e.g., using zod, react-hook-form).
+- Having strong mindset of what kind of code should be techdebt.
+- Don’t duplicate logic across controllers and services.
+- Avoid deeply nested callbacks or overly clever code.
+- Do not commit hardcoded secrets or tokens.
+
+Practices:
+
+- Add input sanitization and edge case handling.
+- Treat undefined/null states explicitly.
+
+**Reliability**
+
+UI should behave consistently under valid and invalid conditions.
+
+Guidelines:
+
+- Handle all API states: loading, error, empty, success.
+- Use error boundaries in React to prevent app crashes.
+- Validate user input on both client and server.
+- Retry or back-off strategies for flaky network requests.
+- Hosting resources on CDN
+
+Practices:
+
+- Use try/catch in async calls.
+- Avoid assumptions about data structure (e.g., always check existence).
+
+**Scalability**
+
+Should support growing data, complexity, and users.
+
+Guidelines:
+
+- Use scalable architecture (feature-based folders, hooks, context).
+- Lazy-load components and split bundles.
+- Apply caching strategies with SWR or React Query.
+- Use pagination or virtual lists for large datasets.
+- Use feature flags for unfinished features
+
+Practices:
+
+- Break large monolithic components into atomic units(consider splitting into smaller modules if more then 300 lines).
+- Avoid using single global context/state for everything—partition as needed.
+
+**Security & Performance**
+
+Safeguard the app and its users from malicious behaviors.
+
+Guidelines:
+
+- Never store sensitive data (e.g., tokens) in local storage or cookie if possible—prefer HttpOnly cookies.
+- Keep dependencies up to date and audit for security vulnerabilities(npm audit)
+- Avoid unnecessary dependencies; prefer native/browser APIs when possible.
+- Escape or sanitize dynamic HTML and user inputs to prevent XSS.
+- Use strict mode in tsconfig.json for type safety
+- Use HTTPS, CSP headers, and Subresource Integrity (SRI).
+- Use input validation to avoid injection attacks.
+- Don’t generate code without tests.
+- Handle errors with centralized middleware.
+- Avoid global state unless absolutely necessary
+- Avoid CSRF attacks
+- Don’t expose secrets or keys (Use dotenv or similar for config management).
+- Use useEffect with proper dependency arrays to avoid infinite loops and Implement cleanup functions in effects to prevent memory leaks
+- Use useMemo and useCallback for performance optimization when needed
+- Implement code splitting with React.lazy and Suspense
+- Optimize bundle size with tree shaking and dynamic imports
+- Implement virtual scrolling for large lists
+- Profile components with React DevTools to identify performance bottlenecks
+- Handling crucial functions in both FE and BE (e.g Form validation, Permission/Role management)
+- Implement Error Boundaries for component-level error handling
+- Log errors appropriately for debugging
+- Implement proper form validation with libraries like Formik, React Hook Form
+- Provide meaningful error messages to users
+- Implement proper environment configuration for different deployment stages
+
+Practices:
+
+- Disable autocomplete on sensitive fields (autocomplete="off").
+- Sanitize user-generated content (e.g., when rendering rich text).
+- Use helmet on backend, and sanitize error messages.
+- Use rel="noopener noreferrer" when handing links
+
+**Usability & Reusability**
+
+Design UI to be accessible, responsive, and intuitive. Code should be designed to avoid duplication by enabling reuse across different parts of the application.
+
+Guidelines:
+
+- Follow WCAG standards and use semantic HTML.
+- Implement generic components where appropriate
+- Use custom hooks for reusable stateful logic
+- Design components to be testable and reusable
+- Ensure UI elements are keyboard accessible.
+- Implement responsive design with mobile-first approach using flex/grid or utility frameworks.
+- Use tooltips, placeholders, and progressive disclosure (modals, accordions).
+- Prefer readability over clever tricks.
+- Establish and follow common style guide for code and UI (spacing, typography, color etc.).
+- Name components, props, variable , function names and CSS classes predictably.
+- Follow the single responsibility principle for components
+- Keep files small, focused, and well-organized.
+
+Practices:
+
+- Provide meaningful alt texts, labels, and ARIA attributes.
+- Use a consistent design system (font, spacing, button sizes, etc.).
+- Use media queries to support multiple devices.
+- Use consistent formatting, spacing, and bracket styles (Prettier/ESLint).
+- Group related logic together and remove dead code
+- Use relative units (rem, %) instead of fixed px.
+- Use flexible layouts (Flexbox, CSS Grid).
+- Build atomic, composable components.
+- Write custom hooks for shared logic.
+- Store reusable utilities (e.g., formatters, validators) in a common library.
+- Maintain a design system or component library (internal or external).
+- Follow "Separation of Concerns" – split UI, logic, and data.
+- Organize files by feature or domain.
+- Avoid large monolithic components
+
+High Performance
+
+Guidelines:
+
+- Defer non-critical resources
+- Use code splitting and lazy loading.
+- Compress and cache assets.
+- Avoid render-blocking styles and scripts
+
+**Testability**
+
+Code should be easy to test at multiple levels.
+
+Guidelines:
+
+- Write pure functions and stateless components when possible.
+- Prefer named functions and avoid long anonymous closures
+- Separate data fetching and presentation logic.
+- Mock API layers for deterministic tests.
+- Use CI to enforce testing at pull request level.
+- Write unit tests for components using React Testing Library if applicable.
+- Test component behavior, not implementation details
+- Use Jest for unit and integration tests.
+- Prefer test-driven development (TDD) when modifying core logic.
+
+Practices:
+
+- Ensure every new feature has a corresponding test.
+- Aim for test coverage on edge cases and failure states.
+
+**Documentation**
+
+Code should be self-explanatory, and supported by formal documentation and only for complex components or functions.
+
+Guidelines:
+
+- Write JSDoc or TSDoc for complex utilities or hooks.
+- Use Storybook to document UI components if applicable.
+- Document API interfaces and response shapes.
+
+Practices:
+
+- Comment _why_, not _what_.
+- Keep code clean and descriptive to reduce documentation burden.
+
+## Iteration & Review
+
+- Always review and refine Copilot output.
+- Use comments to clarify intent.
+- When generating summary, please specify how many files you have scanned and how many files are with issues at the meantime have been given with suggestions
+- If the token is not enough, always ask me whether to continue so that you can keep scanning the rest parts
+
+## Giude to Comment Thread Creation
+
+1. **Include Required Parameters**  
+   When creating a comment thread, always include:
+
+   - `rightFileStartLine`
+   - `rightFileEndLine`
+   - `rightFileStartOffset`
+   - `rightFileEndOffset`
+
+2. **Offsets and Line Range Rules**
+
+   - `rightFileStartOffset` is always **1** (first character of the start line).
+   - `rightFileEndOffset` is the position of the last character of `rightFileEndLine`.  
+     If unavailable, set `rightFileEndOffset = 1` and increment `rightFileEndLine` by **1** as a fallback.
+
+3. **Enable “Apply change” in Azure DevOps**
+
+   - The comment `content` **must include a fenced code block starting with ` ```suggestion `**
+   - This block should contain the **full replacement code** for the selected range.
+
+4. **Anchor Correct Lines**
+
+   - Ensure `rightFileStartLine` and `rightFileEndLine` cover **all lines to be replaced**.  
+     If your suggestion spans multiple lines, do **not** anchor only one line.
+
+5. **Restrictions**
+   - Suggestions only work on the **right (new) file** in the PR.
+   - File-level comments or comments on deleted lines cannot use “Apply change.”
+
+### Severity Classification
+
+- **High**: Architecture violations, security vulnerabilities, critical correctness errors, severe performance degradation.
+- **Medium**: Significant maintainability/design concerns, minor architectural misalignments.
+- **Low**: Stylistic inconsistencies, minor optimization suggestions.
+
+### ** Output Format**
+
+When generating code review results, present them in a **human-readable, preview-like structure** while strictly following these rules for clarity but always met AI policies :
+
+#### 1. Severity Order
+
+Sort issues by priority: **High → Medium → Low** (one group per severity).
+
+#### 2. Structure for Each Issue
+
+Key Visual Rules
+
+- Use **headers** (e.g., `### High Issues`) to group severities.
+- Use emojis or symbols (📍, 💡, 🔧) for visual section separation.
+- Keep code blocks in `typescript` for syntax highlighting (but present as a “preview” would — highlighted, not raw syntax focus).
+- Ensure **one blank line** between all sections (title ↵ location, location ↵ explanation, explanation ↵ suggestion, suggestion ↵ fix code, fix code ↵ next issue).
+
+Each issue should be a **self-contained, visually distinct block** with clear sections. Use this layout (no raw Markdown syntax shown *as syntax* — focus on readability):
+
+---
+
+**Issue {Number}: {Title}**
+📍 **Location:**
+
+```typescript
+// Lines {StartLine}-{EndLine} in [{ClassName}.{MethodName}]
+{Relevant code snippet with line numbers}
+```
+
+💡 **Explanation**:
+{Detailed reason why the code violates standards, including context and impact}
+🔧 **Suggestion**:
+{Actionable steps to fix the issue}
+🔄 **Fix Code**:
+
+```typescript
+{Corrected code using proper typescript syntax}
+```
+
+#### 3. Key Visual Rules
+
+- Use **headers** (e.g., `### High Issues`) to group severities.
+- Use emojis or symbols (📍, 💡, 🔧) for visual section separation.
+- Keep code blocks in `typescript` for syntax highlighting (but present as a “preview” would — highlighted, not raw syntax focus).
+- Ensure **one blank line** between all sections (title ↵ location, location ↵ explanation, explanation ↵ suggestion, suggestion ↵ fix code, fix code ↵ next issue).
+
+#### Example (Human-Friendly Preview Style)
+
+### High Issues
+
+**Issue 1: Use === instead of ==**
+📍 **Location:**
+
+```typescript
+// Lines 42-45 in [Home/HomePage.tsx]
+const num = 1;
+if (num == true) {
+}
+```
+
+💡 **Explanation**:
+Using == will cause unexpected behavior
+🔧 **Suggestion**:
+We hould use === instead
+
+🔄 **Fix Code**:
+
+```typescript
+const num = 1;
+if (num === 1) {
+}
+```

package/dist/auth.js

@@ -2,8 +2,11 @@ import { PublicClientApplication } from "@azure/msal-node";
 import open from "open";
 const scopes = ["499b84ac-1321-427f-aa17-267ca6975798/.default"];
 class OAuthAuthenticator {
+    static clientId = "0d50963b-7bb9-4fe7-94c7-a99af00b5136";
+    static defaultAuthority = "https://login.microsoftonline.com/common";
+    accountId = null;
+    publicClientApp;
     constructor() {
-        this.accountId = null;
         this.publicClientApp = new PublicClientApplication({
             auth: {
                 clientId: OAuthAuthenticator.clientId,
@@ -41,8 +44,6 @@ class OAuthAuthenticator {
         return authResult.accessToken;
     }
 }
-OAuthAuthenticator.clientId = "0d50963b-7bb9-4fe7-94c7-a99af00b5136";
-OAuthAuthenticator.defaultAuthority = "https://login.microsoftonline.com/common";
 function createAuthenticator() {
     const authenticator = new OAuthAuthenticator();
     return () => {

package/dist/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqC,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC9F,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,MAAM,MAAM,GAAG,CAAC,+CAA+C,CAAC,CAAC;AAEjE,MAAM,kBAAkB;IAOtB;QAHQ,cAAS,GAAuB,IAAI,CAAC;QAI3C,IAAI,CAAC,eAAe,GAAG,IAAI,uBAAuB,CAAC;YACjD,IAAI,EAAE;gBACJ,QAAQ,EAAE,kBAAkB,CAAC,QAAQ;gBACrC,SAAS,EAAE,kBAAkB,CAAC,gBAAgB;aAC/C;SACF,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,QAAQ;QACnB,IAAI,UAAU,GAAgC,IAAI,CAAC;QACnD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC;gBACH,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAAC;oBACzD,MAAM;oBACN,OAAO,EAAE,IAAI,CAAC,SAAS;iBACxB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,iEAAiE;gBACjE,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;gBACzD,UAAU,GAAG,IAAI,CAAC;YACpB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,uBAAuB,CAAC;gBAC9D,MAAM;gBACN,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;oBACzB,IAAI,CAAC,GAAG,CAAC,CAAC;gBACZ,CAAC;aACF,CAAC,CAAC;YACH,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC;QACtC,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,UAAU,CAAC,WAAW,CAAC;IAChC,CAAC;;AA3Ce,2BAAQ,GAAG,sCAAsC,AAAzC,CAA0C;AAClD,mCAAgB,GAAG,0CAA0C,AAA7C,CAA8C;AA6ChF,SAAS,mBAAmB;IAC1B,MAAM,aAAa,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAC/C,OAAO,GAAG,EAAE;QACV,OAAO,aAAa,CAAC,QAAQ,EAAE,CAAC;IAClC,CAAC,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,mBAAmB,EAAE,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqC,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC9F,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,MAAM,MAAM,GAAG,CAAC,+CAA+C,CAAC,CAAC;AAEjE,MAAM,kBAAkB;IACtB,MAAM,CAAU,QAAQ,GAAG,sCAAsC,CAAC;IAClE,MAAM,CAAU,gBAAgB,GAAG,0CAA0C,CAAC;IAEtE,SAAS,GAAuB,IAAI,CAAC;IAC5B,eAAe,CAA0B;IAE1D;QACE,IAAI,CAAC,eAAe,GAAG,IAAI,uBAAuB,CAAC;YACjD,IAAI,EAAE;gBACJ,QAAQ,EAAE,kBAAkB,CAAC,QAAQ;gBACrC,SAAS,EAAE,kBAAkB,CAAC,gBAAgB;aAC/C;SACF,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,QAAQ;QACnB,IAAI,UAAU,GAAgC,IAAI,CAAC;QACnD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC;gBACH,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAAC;oBACzD,MAAM;oBACN,OAAO,EAAE,IAAI,CAAC,SAAS;iBACxB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,iEAAiE;gBACjE,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;gBACzD,UAAU,GAAG,IAAI,CAAC;YACpB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,uBAAuB,CAAC;gBAC9D,MAAM;gBACN,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;oBACzB,IAAI,CAAC,GAAG,CAAC,CAAC;gBACZ,CAAC;aACF,CAAC,CAAC;YACH,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC;QACtC,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,UAAU,CAAC,WAAW,CAAC;IAChC,CAAC;;AAGH,SAAS,mBAAmB;IAC1B,MAAM,aAAa,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAC/C,OAAO,GAAG,EAAE;QACV,OAAO,aAAa,CAAC,QAAQ,EAAE,CAAC;IAClC,CAAC,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,mBAAmB,EAAE,CAAC"}

package/dist/index.js

@@ -3,7 +3,9 @@ import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { createAuthenticator } from "./auth.js";
 import { configureAllTools } from "./tools.js";
-const packageVersion = "0.1.4";
+import { configurePrompts } from "./prompts.js";
+import { configureResources } from "./resources.js";
+const packageVersion = "0.1.6";
 try {
     const server = new McpServer({
         name: "CodeGuardian MCP Server",
@@ -15,6 +17,10 @@ try {
     const authenticator = createAuthenticator();
     // Configure all tools with the authenticator
     configureAllTools(server, authenticator);
+    // Configure prompts
+    configurePrompts(server, authenticator);
+    // Configure resources
+    configureResources(server, authenticator);
     // Connect using stdio transport
     const transport = new StdioServerTransport();
     await server.connect(transport);

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,cAAc,GAAG,aAAa,CAAC;AAErC,IAAI,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,cAAc;KACxB,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,4BAA4B,cAAc,EAAE,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IAEjD,uBAAuB;IACvB,MAAM,aAAa,GAAG,mBAAmB,EAAE,CAAC;IAE5C,6CAA6C;IAC7C,iBAAiB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAEzC,gCAAgC;IAChC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEhC,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;AAC1D,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpD,MAAM,cAAc,GAAG,aAAa,CAAC;AAErC,IAAI,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,cAAc;KACxB,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,4BAA4B,cAAc,EAAE,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IAEjD,uBAAuB;IACvB,MAAM,aAAa,GAAG,mBAAmB,EAAE,CAAC;IAE5C,6CAA6C;IAC7C,iBAAiB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAEzC,oBAAoB;IACpB,gBAAgB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAExC,sBAAsB;IACtB,kBAAkB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAE1C,gCAAgC;IAChC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEhC,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;AAC1D,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}

package/dist/prompts.d.ts

@@ -0,0 +1,3 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function configurePrompts(server: McpServer, tokenProvider?: () => Promise<string>): void;
+//# sourceMappingURL=prompts.d.ts.map

package/dist/prompts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompts.d.ts","sourceRoot":"","sources":["../src/prompts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAUpE,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,SAAS,EAAE,aAAa,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,QAyLxF"}

package/dist/prompts.js

@@ -0,0 +1,156 @@
+import { z } from "zod";
+import { readFile } from "node:fs/promises";
+import { join, dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+import { streamToString } from './utils.js';
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+export function configurePrompts(server, tokenProvider) {
+    server.prompt("dotnet-pr-review", "Professional .NET code reviewer instructions", {
+        prUrl: z.string().describe("The URL of the Pull Request to review"),
+    }, async ({ prUrl }) => {
+        const promptPath = join(__dirname, "..", "asset", "dotnet.pr.review.prompt.md");
+        const content = await readFile(promptPath, "utf-8");
+        return {
+            messages: [
+                {
+                    role: "user",
+                    content: {
+                        type: "resource",
+                        resource: {
+                            uri: "prompt://dotnet-pr-review",
+                            mimeType: "text/markdown",
+                            text: content
+                        }
+                    }
+                },
+                {
+                    role: "user",
+                    content: {
+                        type: "text",
+                        text: `Please read the instructions above to review the PR at ${prUrl}. Then perform the review.`
+                    }
+                }
+            ]
+        };
+    });
+    server.prompt("frontend-pr-review", "Professional Frontend code reviewer instructions", {
+        prUrl: z.string().describe("The URL of the Pull Request to review"),
+    }, async ({ prUrl }) => {
+        const promptPath = join(__dirname, "..", "asset", "frontend.pr.review.prompt.md");
+        const content = await readFile(promptPath, "utf-8");
+        return {
+            messages: [
+                {
+                    role: "user",
+                    content: {
+                        type: "resource",
+                        resource: {
+                            uri: "prompt://frontend-pr-review",
+                            mimeType: "text/markdown",
+                            text: content
+                        }
+                    }
+                },
+                {
+                    role: "user",
+                    content: {
+                        type: "text",
+                        text: `Please read the instructions above to review the PR at ${prUrl}. Then perform the review.`
+                    }
+                }
+            ]
+        };
+    });
+    // server.prompt(
+    //   "assa-pipeline-task",
+    //   "Instructions for adding ASSA task to Azure DevOps build pipelines",
+    //   {},
+    //   async () => {
+    //     const promptPath = join(__dirname, "..", "asset", "assa.pipeline.task.prompt.md");
+    //     const content = await readFile(promptPath, "utf-8");
+    //     return {
+    //       messages: [
+    //         {
+    //           role: "user",
+    //           content: {
+    //             type: "resource",
+    //             resource: {
+    //               uri: "prompt://assa-pipeline-task",
+    //               mimeType: "text/markdown",
+    //               text: content
+    //             }
+    //           }
+    //         },
+    //         {
+    //           role: "user",
+    //           content: {
+    //             type: "text",
+    //             text: "Please read the instructions above to add the ASSA task to Azure DevOps build pipelines."
+    //           }
+    //         }
+    //       ]
+    //     };
+    //   }
+    // );
+    // ASSA Review prompt - loads instructions from Azure DevOps
+    if (tokenProvider) {
+        server.prompt("assa-review", "Automated Security and Standards Analysis review instructions", {}, async () => {
+            try {
+                const accessToken = await tokenProvider();
+                const authHandler = (await import('azure-devops-node-api')).getBearerHandler(accessToken);
+                const orgUrl = 'https://dev.azure.com/dnvgl-one';
+                const connection = new (await import('azure-devops-node-api')).WebApi(orgUrl, authHandler);
+                const gitApi = await connection.getGitApi();
+                const project = 'Innersource';
+                const repositoryId = 'code-guardian';
+                const filePath = '/assa/assa.instructions.md';
+                const versionDescriptor = {
+                    version: 'main',
+                    versionType: 0 // GitVersionType.Branch
+                };
+                const stream = await gitApi.getItemContent(repositoryId, filePath, project, undefined, undefined, false, false, false, versionDescriptor);
+                if (!stream) {
+                    throw new Error('Failed to retrieve ASSA instructions from Azure DevOps');
+                }
+                const content = await streamToString(stream);
+                const messages = [
+                    {
+                        role: "user",
+                        content: {
+                            type: "resource",
+                            resource: {
+                                uri: "instructions://assa",
+                                mimeType: "text/markdown",
+                                text: content
+                            }
+                        }
+                    }
+                ];
+                messages.push({
+                    role: "user",
+                    content: {
+                        type: "text",
+                        text: "Please read the ASSA instructions above and perform an ASSA review."
+                    }
+                });
+                return { messages };
+            }
+            catch (error) {
+                const errorMessage = error instanceof Error ? error.message : String(error);
+                return {
+                    messages: [
+                        {
+                            role: "user",
+                            content: {
+                                type: "text",
+                                text: `Error loading ASSA instructions from Azure DevOps: ${errorMessage}`
+                            }
+                        }
+                    ]
+                };
+            }
+        });
+    }
+}
+//# sourceMappingURL=prompts.js.map

package/dist/prompts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompts.js","sourceRoot":"","sources":["../src/prompts.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AAEtC,MAAM,UAAU,gBAAgB,CAAC,MAAiB,EAAE,aAAqC;IACvF,MAAM,CAAC,MAAM,CACX,kBAAkB,EAClB,8CAA8C,EAC9C;QACE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;KACpE,EACD,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QAClB,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,4BAA4B,CAAC,CAAC;QAChF,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAEpD,OAAO;YACL,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE;wBACP,IAAI,EAAE,UAAU;wBAChB,QAAQ,EAAE;4BACR,GAAG,EAAE,2BAA2B;4BAChC,QAAQ,EAAE,eAAe;4BACzB,IAAI,EAAE,OAAO;yBACd;qBACF;iBACF;gBACD;oBACE,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE;wBACP,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,0DAA0D,KAAK,4BAA4B;qBAClG;iBACF;aACF;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,MAAM,CACX,oBAAoB,EACpB,kDAAkD,EAClD;QACE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;KACpE,EACD,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QAClB,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,8BAA8B,CAAC,CAAC;QAClF,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAEpD,OAAO;YACL,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE;wBACP,IAAI,EAAE,UAAU;wBAChB,QAAQ,EAAE;4BACR,GAAG,EAAE,6BAA6B;4BAClC,QAAQ,EAAE,eAAe;4BACzB,IAAI,EAAE,OAAO;yBACd;qBACF;iBACF;gBACD;oBACE,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE;wBACP,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,0DAA0D,KAAK,4BAA4B;qBAClG;iBACF;aACF;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,iBAAiB;IACjB,0BAA0B;IAC1B,yEAAyE;IACzE,QAAQ;IACR,kBAAkB;IAClB,yFAAyF;IACzF,2DAA2D;IAE3D,eAAe;IACf,oBAAoB;IACpB,YAAY;IACZ,0BAA0B;IAC1B,uBAAuB;IACvB,gCAAgC;IAChC,0BAA0B;IAC1B,oDAAoD;IACpD,2CAA2C;IAC3C,8BAA8B;IAC9B,gBAAgB;IAChB,cAAc;IACd,aAAa;IACb,YAAY;IACZ,0BAA0B;IAC1B,uBAAuB;IACvB,4BAA4B;IAC5B,+GAA+G;IAC/G,cAAc;IACd,YAAY;IACZ,UAAU;IACV,SAAS;IACT,MAAM;IACN,KAAK;IAEL,4DAA4D;IAC5D,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,CAAC,MAAM,CACX,aAAa,EACb,+DAA+D,EAC/D,EAAE,EACF,KAAK,IAAI,EAAE;YACT,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,aAAa,EAAE,CAAC;gBAC1C,MAAM,WAAW,GAAG,CAAC,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;gBAC1F,MAAM,MAAM,GAAG,iCAAiC,CAAC;gBACjD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;gBAC3F,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,CAAC;gBAE5C,MAAM,OAAO,GAAG,aAAa,CAAC;gBAC9B,MAAM,YAAY,GAAG,eAAe,CAAC;gBACrC,MAAM,QAAQ,GAAG,4BAA4B,CAAC;gBAE9C,MAAM,iBAAiB,GAAG;oBACxB,OAAO,EAAE,MAAM;oBACf,WAAW,EAAE,CAAC,CAAC,wBAAwB;iBACxC,CAAC;gBAEF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,cAAc,CACxC,YAAY,EACZ,QAAQ,EACR,OAAO,EACP,SAAS,EACT,SAAS,EACT,KAAK,EACL,KAAK,EACL,KAAK,EACL,iBAAiB,CAClB,CAAC;gBAEF,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;gBAC5E,CAAC;gBAED,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;gBAE7C,MAAM,QAAQ,GAAU;oBACtB;wBACE,IAAI,EAAE,MAAM;wBACZ,OAAO,EAAE;4BACP,IAAI,EAAE,UAAU;4BAChB,QAAQ,EAAE;gCACR,GAAG,EAAE,qBAAqB;gCAC1B,QAAQ,EAAE,eAAe;gCACzB,IAAI,EAAE,OAAO;6BACd;yBACF;qBACF;iBACF,CAAC;gBAEF,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE;wBACP,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,qEAAqE;qBAC5E;iBACF,CAAC,CAAC;gBAEH,OAAO,EAAE,QAAQ,EAAE,CAAC;YACtB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC5E,OAAO;oBACL,QAAQ,EAAE;wBACR;4BACE,IAAI,EAAE,MAAM;4BACZ,OAAO,EAAE;gCACP,IAAI,EAAE,MAAM;gCACZ,IAAI,EAAE,sDAAsD,YAAY,EAAE;6BAC3E;yBACF;qBACF;iBACF,CAAC;YACJ,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/resources.d.ts

@@ -0,0 +1,3 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function configureResources(server: McpServer, tokenProvider?: () => Promise<string>): void;
+//# sourceMappingURL=resources.d.ts.map

package/dist/resources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../src/resources.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAoB,MAAM,yCAAyC,CAAC;AAStF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,aAAa,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,QA8G1F"}