superkit-mcp-server 1.1.3 → 1.2.0

package/commands/review-pr.toml

@@ -0,0 +1,64 @@
+description = "Review a Pull Request from GitHub"
+
+prompt = """
+# 🔍 PR Review Agent
+
+Review the specified Pull Request.
+
+**PR:** {{args}}
+
+---
+
+## Workflow
+
+### Step 1: Get PR Details
+Use the `kit_github_get_pr` tool to get PR information:
+- Title, description
+- Changed files
+- Diff content
+
+### Step 2: Analyze Code
+Review code in the PR:
+- **Bugs**: Find logic errors, edge cases
+- **Security**: Check for security issues
+- **Performance**: Identify performance problems
+- **Style**: Code style and best practices
+
+### Step 3: Generate Review
+Create review with:
+- **Summary**: PR summary
+- **Issues**: Issues found (if any)
+- **Suggestions**: Improvement suggestions
+- **Verdict**: APPROVE / REQUEST_CHANGES / COMMENT
+
+---
+
+## Output Format
+
+```markdown
+## 🔍 PR Review
+
+### Summary
+[Summary of changes]
+
+### ✅ Good
+- [Good point 1]
+- [Good point 2]
+
+### ⚠️ Issues
+- [Issue 1]
+- [Issue 2]
+
+### 💡 Suggestions
+- [Suggestion 1]
+
+### Verdict: [APPROVE/REQUEST_CHANGES/COMMENT]
+```
+
+---
+
+## Guidelines
+- Objective, constructive review
+- Explain the reason for each comment
+- Propose specific fix if there is an issue
+"""

package/commands/review.toml

@@ -0,0 +1,191 @@
+description = "Review code quality with severity categories (Code Reviewer Agent)"
+
+prompt = """
+# 👁️ CODE REVIEWER AGENT
+
+Review request:
+
+**Scope:** {{args}}
+
+## SCOPE DETECTION
+
+| Scope | Trigger | Mode |
+|-------|---------|------|
+| **Codebase** | "codebase", "full", "all" | Full codebase review |
+| **Directory** | path ends with `/` | Review all files in dir |
+| **Feature** | feature name | Review related files |
+| **Security** | "security", "audit" | OWASP compliance |
+| **Types** | "types", "any" | TypeScript audit |
+| **Performance** | "performance", "slow" | N+1, indexes |
+
+---
+
+## CODEBASE MODE (Full Review)
+
+When triggered with "codebase"/"full"/"all":
+
+### 1. Research Phase
+- Scan entire project structure
+- Identify key files and patterns
+- Detect frameworks and dependencies
+
+### 2. Code Review Phase
+- Check all source files
+- Identify issues, duplicates, vulnerabilities
+- Generate severity-categorized findings
+
+### 3. Planning Phase
+Create improvement plan:
+```
+plans/YYYYMMDD-review/
+├── plan.md           # Overview
+└── phase-XX-name.md  # Detailed fixes
+```
+
+### 4. Final Report
+- Summary of all findings
+- Prioritized fix recommendations
+- Next steps with commands
+
+---
+
+## REVIEW OUTPUT FORMAT
+
+### 📊 Summary
+| Category | Count |
+|----------|-------|
+| 🔴 Critical | X |
+| 🟠 High | X |
+| 🟡 Medium | X |
+| 🟢 Low | X |
+
+**Verdict:** ❌ Block merge / ⚠️ Fix recommended / ✅ Ready
+
+---
+
+### 🔴 CRITICAL (Must Fix Before Merge)
+Issues that can cause security breaches or data loss.
+
+#### Issue 1: [Title]
+- **File:** `path/to/file.ts:42`
+- **Problem:** [Description]
+- **Risk:** [What can go wrong]
+- **Fix:**
+```typescript
+// Before
+[problematic code]
+
+// After
+[fixed code]
+```
+
+---
+
+### 🟠 HIGH (Should Fix)
+Performance, type safety, reliability issues.
+
+#### Issue 1: [Title]
+- **File:** `path/to/file.ts:15`
+- **Problem:** [Description]
+- **Fix:** [Recommendation]
+
+---
+
+### 🟡 MEDIUM (Recommended)
+Maintainability, code smells, patterns.
+
+#### Issue 1: [Title]
+- **Suggestion:** [Improvement]
+
+---
+
+### 🟢 LOW (Optional)
+Style, minor improvements.
+
+- [Item 1]
+- [Item 2]
+
+---
+
+## SECURITY AUDIT (OWASP)
+
+| Check | Status | Details |
+|-------|--------|---------|
+| Injection (SQL/NoSQL) | ✅/❌ | [Details] |
+| Broken Auth | ✅/❌ | [Details] |
+| Sensitive Data Exposure | ✅/❌ | [Details] |
+| XSS | ✅/❌ | [Details] |
+| Insecure Deserialization | ✅/❌ | [Details] |
+| Using Vulnerable Components | ✅/❌ | [Details] |
+| Logging & Monitoring | ✅/❌ | [Details] |
+
+---
+
+## TYPE SAFETY AUDIT
+
+### `any` Type Locations
+| File | Line | Variable | Suggested Type |
+|------|------|----------|----------------|
+| `file.ts` | 42 | `data` | `UserResponse` |
+
+### Strict Mode Violations
+- [ ] `noImplicitAny`
+- [ ] `strictNullChecks`
+- [ ] `strictFunctionTypes`
+
+---
+
+## PERFORMANCE ANALYSIS
+
+### N+1 Query Detection
+```typescript
+// Problem: N+1 in loop
+for (const user of users) {
+  const posts = await getPosts(user.id); // ❌ Query in loop
+}
+
+// Fix: Batch query
+const posts = await getPostsByUserIds(users.map(u => u.id));
+```
+
+### Missing Indexes
+- Table `users`: Add index on `email`
+- Table `orders`: Add composite index on `(user_id, created_at)`
+
+---
+
+## QUALITY GATES
+
+| Gate | Status | Target |
+|------|--------|--------|
+| Test Coverage | X% | 80% |
+| Zero `any` Types | X found | 0 |
+| Security Scan | ✅/❌ | Pass |
+| No Critical Issues | X found | 0 |
+
+---
+
+## NEXT STEPS
+
+```bash
+# Fix critical issues
+/fix [critical security issues]
+
+# Run tests
+/test
+
+# Re-review
+/review [same scope]
+```
+
+> **Key Takeaway:** Code reviewer prevents production incidents by catching security vulnerabilities, type safety violations, and performance issues before merge.
+"""
+
+# ---
+# USAGE:
+# /review src/auth/           - Review directory
+# /review user authentication - Review feature
+# /review security audit      - OWASP compliance
+# /review types check         - Find any types
+# /review performance         - N+1, indexes
+# ---

package/commands/scout-ext.toml

@@ -0,0 +1,97 @@
+description = "Parallel external search cho large codebases (Scout External Agent)"
+
+prompt = """
+# 🔍 SCOUT EXTERNAL AGENT
+
+Large-scale parallel search:
+
+**Query:** {{args}}
+
+## WHEN TO USE
+- Codebase **500+ files**
+- Feature work **spanning multiple directories**
+- Need **3-5x faster** than internal Scout
+- **Semantic search** beyond pattern matching
+
+---
+
+## PARALLEL EXECUTION STRATEGY
+
+### Tool Selection
+| Directories | Strategy |
+|-------------|----------|
+| ≤3 | Gemini only |
+| >3 | Gemini + parallel agents |
+
+### Execution Plan
+1. **Identify target directories** - List all relevant dirs
+2. **Launch parallel searches** - One per major area
+3. **Set timeout** - 3 min per search
+4. **Synthesize results** - Merge findings
+
+---
+
+## OUTPUT FORMAT
+
+### 📊 Execution Summary
+| Area | Status | Files Found | Time |
+|------|--------|-------------|------|
+| `lib/` | ✅ Complete | 12 | 45s |
+| `app/api/` | ✅ Complete | 8 | 32s |
+| `components/` | ⚠️ Partial | 5 | 180s (timeout) |
+
+**Total:** X files in Y seconds
+**Coverage:** ~85%
+
+---
+
+### 📂 Consolidated Findings
+
+#### 🔷 Core Logic
+- `lib/auth/...` - Authentication logic
+- `lib/payment/...` - Payment processing
+
+#### 🔷 API Layer
+- `app/api/auth/...` - Auth endpoints
+- `app/api/payment/...` - Payment routes
+
+#### 🔷 UI Components
+- `components/auth/...` - Login forms
+
+#### 🔷 Configuration
+- `config/...` - Environment settings
+
+---
+
+### ⚠️ Coverage Gaps
+Files/areas NOT searched (timeout or exclusion):
+- `node_modules/` (excluded)
+- `components/legacy/` (partial - timeout)
+
+---
+
+### 💡 Large File Strategy
+For files >25K tokens:
+```bash
+# Summarize large file
+echo "Summarize auth logic in app/middleware/auth.ts" | gemini
+```
+
+---
+
+## PRO TIPS
+- **Parallel = speed** - Launch all searches together
+- **Timeout OK** - Partial results still useful
+- **Quality > Quantity** - 2-5 directories optimal
+- **Chain with /plan** - After discovery, plan implementation
+
+> **Key Takeaway:** Scout External parallelizes search for 3-5x speed. Use for large codebases when internal Scout is too slow.
+"""
+
+# ---
+# USAGE:
+# /scout-ext "Find all auth files across lib, api, components"
+# /scout-ext "Locate payment processing in frontend + backend"
+# /scout-ext "Search for all files importing @/lib/old-api"
+# /scout-ext "Analyze API routes >500 lines for bottlenecks"
+# ---

package/commands/scout.toml

@@ -0,0 +1,80 @@
+description = "Explore codebase with Structure Analysis & Scale (Scout Agent)"
+
+prompt = """
+# 🔍 SCOUT AGENT
+
+Exploration task:
+
+**Query:** {{args}}
+
+## SCALE & SCOPE
+Default scale: 5 (Medium)
+
+| Scale | Files | Use Case |
+|-------|-------|----------|
+| **1-3** | <100 | Targeted search, small feature |
+| **4-6** | 100-500 | Feature discovery, debugging |
+| **7-10** | 500+ | Full architecture map, monorepo |
+
+---
+
+## OUTPUT REPORT FORMAT
+
+### 🗺️ Landscape Overview
+- **Domain:** [Affected business domain]
+- **Tech Stack:** [Languages/Frameworks detected]
+- **Scale:** [Number of files found]
+
+### 📂 Categorized Findings
+Organize files by role:
+
+#### 🏗️ Core Services / Logic
+- `src/services/...`
+- `src/lib/...`
+
+#### 🛣️ Middleware & Routes
+- `src/api/...`
+- `src/middleware/...`
+
+#### 💾 Data Layer
+- `src/models/...`
+- `src/db/...`
+
+#### ⚙️ Configuration
+- `config/...`
+- `package.json`
+
+#### 🧪 Tests
+- `tests/...`
+
+---
+
+### 🔗 Integration Points
+Identify files that connect different parts:
+- [File A] imports [File B]
+- [Service X] uses [Model Y]
+
+---
+
+### 💡 Pro Tips for this Context
+- **Reading Order:** Start with [File A], then [File B].
+- **Key Patterns:** [Observed patterns e.g. Repository pattern, Adapter pattern]
+- **Dependencies:** [Key external libs used]
+
+---
+
+## USAGE TIPS
+- **Specific:** "auth middleware and JWT" (Better than "auth")
+- **Scale:** Append number 1-10 to control depth
+- **Constraint:** "only in src/api" to narrow down
+
+> **Key Takeaway:** Scout maps the terrain so you don't get lost. 5 minutes of scouting saves hours of debugging.
+"""
+
+# ---
+# USAGE:
+# /scout "locate all auth files" 5
+# /scout "find Stripe webhook handling" 4
+# /scout "data models and migrations" 3
+# /scout "security related files" 8
+# ---

package/commands/screenshot.toml

@@ -0,0 +1,65 @@
+# Screenshot to Code
+# Usage: /screenshot <image-path> [framework]
+# Convert UI screenshot to HTML/CSS code
+
+description = "Take screenshot for visual debugging"
+
+
+
+prompt = """
+{{#if args}}
+# 📸 Screenshot to Code
+
+Convert this UI screenshot to code:
+
+**Image:** {{args}}
+
+## Instructions:
+
+1. FIRST, read the image file using your vision capabilities
+2. Analyze the UI elements, layout, colors, spacing
+3. Generate clean, responsive code
+
+## Requirements:
+- Framework: HTML + Tailwind CSS (default) 
+- Make it responsive (mobile-first)
+- Use semantic HTML5 elements
+- Match colors, fonts, spacing as closely as possible
+- Include all visible elements (buttons, text, images, etc.)
+
+## Output Format:
+1. Brief description of what you see
+2. Complete HTML code with inline Tailwind classes
+3. Save to `generated/<filename>.html`
+
+Start by analyzing the image, then generate the complete code.
+{{else}}
+# 📸 Screenshot to Code
+
+Convert any UI screenshot to HTML/CSS code.
+
+## Usage:
+```
+/screenshot <image-path> [framework]
+```
+
+## Examples:
+```
+/screenshot landing-page.png
+/screenshot mockup.jpg react
+/screenshot ~/Desktop/design.png vue
+```
+
+## Supported Frameworks:
+- `html` (default) - HTML + Tailwind CSS
+- `react` - React + Tailwind
+- `vue` - Vue 3 + Tailwind
+
+## Tips:
+- Use clear, high-resolution screenshots
+- Crop to just the UI you want to convert
+- Simpler UIs convert better
+
+Provide an image path to get started!
+{{/if}}
+"""

package/commands/session.toml

@@ -0,0 +1,98 @@
+# Session - Session Management
+# Usage: /session [action] [name/id]
+# Save, load, and manage work sessions
+
+description = "Save, load, and manage work sessions"
+
+
+
+prompt = """
+{{#if args}}
+# 💾 Session Management
+
+**Action:** {{args}}
+
+## Parse Action:
+
+Check the first word of "{{args}}":
+
+### If "save" or "s":
+Save current session:
+1. Capture current context:
+   - Current task/goal
+   - Files being worked on
+   - Recent changes
+   - Conversation context
+2. Generate session ID
+3. Save to `.gemini-kit/sessions/`
+4. Report success with session ID
+
+### If "load" or "l":
+Load a saved session:
+1. Find session by ID or name (second word)
+2. If no ID given, show list to choose
+3. Load and display session context
+4. Resume from where left off
+
+### If "list" or "ls":
+List all saved sessions:
+1. Read `.gemini-kit/sessions/`
+2. Display each session with:
+   - ID
+   - Name/Task
+   - Date
+   - Summary
+
+### If "info" or "i":
+Show current session info:
+1. Current task
+2. Files in context
+3. Progress
+4. Time elapsed
+
+### If "delete" or "rm":
+Delete a session:
+1. Find session by ID (second word)
+2. Confirm deletion
+3. Remove from storage
+
+---
+
+Now process: "{{args}}"
+{{else}}
+# 💾 Session Management
+
+Save and resume your work sessions.
+
+## Usage:
+```
+/session <action> [name/id]
+```
+
+## Actions:
+
+| Action | Description |
+|--------|-------------|
+| `/session` | Show current session info |
+| `/session save [name]` | Save current session |
+| `/session list` | List all saved sessions |
+| `/session load [id]` | Load a session |
+| `/session delete <id>` | Delete a session |
+
+## Examples:
+```
+/session save "Working on auth"
+/session list
+/session load abc123
+/session info
+/session delete abc123
+```
+
+## Use Cases:
+- Switching between tasks
+- Resuming work next day
+- Sharing context with team
+
+What would you like to do?
+{{/if}}
+"""