supipowers 1.5.2 → 2.0.0

package/src/qa/scripts/detect-app-type.sh

@@ -1,68 +0,0 @@
-#!/usr/bin/env bash
-# Detect web app framework, dev command, and port.
-# Usage: detect-app-type.sh <cwd>
-# Output: JSON on stdout
-set -euo pipefail
-
-CWD="${1:-.}"
-
-type="generic"
-devCommand="npm run dev"
-port=3000
-
-# Check for Next.js
-if [ -f "$CWD/next.config.js" ] || [ -f "$CWD/next.config.mjs" ] || [ -f "$CWD/next.config.ts" ]; then
-  if [ -d "$CWD/app" ]; then
-    type="nextjs-app"
-  elif [ -d "$CWD/src/app" ]; then
-    type="nextjs-app"
-  elif [ -d "$CWD/pages" ] || [ -d "$CWD/src/pages" ]; then
-    type="nextjs-pages"
-  else
-    type="nextjs-app"
-  fi
-  port=3000
-
-# Check for Vite
-elif [ -f "$CWD/vite.config.ts" ] || [ -f "$CWD/vite.config.js" ] || [ -f "$CWD/vite.config.mjs" ]; then
-  type="vite"
-  port=5173
-
-# Check for Angular
-elif [ -f "$CWD/angular.json" ]; then
-  type="generic"
-  devCommand="npm start"
-  port=4200
-
-# Check for Express (look for express in dependencies)
-elif [ -f "$CWD/package.json" ]; then
-  if grep -q '"express"' "$CWD/package.json" 2>/dev/null; then
-    type="express"
-    port=3000
-  fi
-fi
-
-# Try to detect dev command from package.json scripts
-if [ -f "$CWD/package.json" ]; then
-  # Check for common dev script names
-  if node -e "const p=JSON.parse(require('fs').readFileSync('$CWD/package.json','utf8')); process.exit(p.scripts?.dev ? 0 : 1)" 2>/dev/null; then
-    devCommand="npm run dev"
-  elif node -e "const p=JSON.parse(require('fs').readFileSync('$CWD/package.json','utf8')); process.exit(p.scripts?.start ? 0 : 1)" 2>/dev/null; then
-    devCommand="npm start"
-  elif node -e "const p=JSON.parse(require('fs').readFileSync('$CWD/package.json','utf8')); process.exit(p.scripts?.serve ? 0 : 1)" 2>/dev/null; then
-    devCommand="npm run serve"
-  fi
-
-  # Try to detect port from scripts
-  devScript=$(node -e "const p=JSON.parse(require('fs').readFileSync('$CWD/package.json','utf8')); console.log(p.scripts?.dev || p.scripts?.start || '')" 2>/dev/null || echo "")
-  portMatch=$(echo "$devScript" | grep -oE '(--port|PORT=)\s*([0-9]+)' | grep -oE '[0-9]+' | head -1 || echo "")
-  if [ -n "$portMatch" ]; then
-    port="$portMatch"
-  fi
-fi
-
-baseUrl="http://localhost:$port"
-
-cat <<EOF
-{"type": "$type", "devCommand": "$devCommand", "port": $port, "baseUrl": "$baseUrl"}
-EOF

package/src/qa/scripts/discover-routes.sh

@@ -1,143 +0,0 @@
-#!/usr/bin/env bash
-# Scan project for routes, pages, forms, and auth flows.
-# Usage: discover-routes.sh <cwd> <app_type>
-# Output: JSONL on stdout (one JSON object per line)
-set -euo pipefail
-
-CWD="${1:-.}"
-APP_TYPE="${2:-generic}"
-
-cd "$CWD"
-
-# Helper: output a route as JSONL
-emit() {
-  local routePath="$1" file="$2" type="$3" hasForm="${4:-false}" methods="${5:-}"
-  if [ -n "$methods" ]; then
-    echo "{\"path\": \"$routePath\", \"file\": \"$file\", \"type\": \"$type\", \"hasForm\": $hasForm, \"methods\": $methods}"
-  else
-    echo "{\"path\": \"$routePath\", \"file\": \"$file\", \"type\": \"$type\", \"hasForm\": $hasForm}"
-  fi
-}
-
-# Check if file likely contains a form
-has_form() {
-  local file="$1"
-  grep -qE '(<form|onSubmit|handleSubmit|useForm|formik|react-hook-form)' "$file" 2>/dev/null && echo "true" || echo "false"
-}
-
-case "$APP_TYPE" in
-  nextjs-app)
-    # Scan app/ directory for page.tsx/page.jsx/page.ts/page.js files
-    for dir in "app" "src/app"; do
-      if [ -d "$dir" ]; then
-        find "$dir" -name 'page.tsx' -o -name 'page.jsx' -o -name 'page.ts' -o -name 'page.js' 2>/dev/null | while read -r file; do
-          # Convert file path to route: app/login/page.tsx -> /login
-          route=$(echo "$file" | sed "s|^$dir||" | sed 's|/page\.\(tsx\|jsx\|ts\|js\)$||' | sed 's|^$|/|')
-          # Skip route groups (parenthesized segments)
-          if echo "$route" | grep -qE '\([^)]+\)'; then
-            route=$(echo "$route" | sed 's|/([^)]*)||g')
-          fi
-          [ -z "$route" ] && route="/"
-          formFlag=$(has_form "$file")
-          emit "$route" "$file" "page" "$formFlag"
-        done
-
-        # Scan for API routes
-        find "$dir" -name 'route.tsx' -o -name 'route.ts' -o -name 'route.js' 2>/dev/null | while read -r file; do
-          route=$(echo "$file" | sed "s|^$dir||" | sed 's|/route\.\(tsx\|ts\|js\)$||')
-          methods=$(grep -oE '(GET|POST|PUT|PATCH|DELETE)' "$file" 2>/dev/null | sort -u | awk 'BEGIN{ORS=""} NR>1{printf ","} {printf "\"%s\"", $0}' || echo "")
-          [ -n "$methods" ] && methods="[$methods]" || methods='["GET"]'
-          emit "$route" "$file" "api" "false" "$methods"
-        done
-      fi
-    done
-    ;;
-
-  nextjs-pages)
-    # Scan pages/ directory
-    for dir in "pages" "src/pages"; do
-      if [ -d "$dir" ]; then
-        find "$dir" -name '*.tsx' -o -name '*.jsx' -o -name '*.ts' -o -name '*.js' 2>/dev/null | while read -r file; do
-          # Skip _app, _document, _error, api files
-          basename=$(basename "$file")
-          case "$basename" in _app.* | _document.* | _error.*) continue;; esac
-
-          route=$(echo "$file" | sed "s|^$dir||" | sed 's|\.\(tsx\|jsx\|ts\|js\)$||' | sed 's|/index$|/|')
-          [ -z "$route" ] && route="/"
-
-          # Check if it's an API route
-          if echo "$file" | grep -q '/api/'; then
-            methods=$(grep -oE '(GET|POST|PUT|PATCH|DELETE)' "$file" 2>/dev/null | sort -u | awk 'BEGIN{ORS=""} NR>1{printf ","} {printf "\"%s\"", $0}' || echo "")
-            [ -n "$methods" ] && methods="[$methods]" || methods='["GET"]'
-            emit "$route" "$file" "api" "false" "$methods"
-          else
-            formFlag=$(has_form "$file")
-            emit "$route" "$file" "page" "$formFlag"
-          fi
-        done
-      fi
-    done
-    ;;
-
-  react-router)
-    # Grep for Route path= patterns
-    grep -rn --include='*.tsx' --include='*.jsx' --include='*.ts' --include='*.js' \
-      -E '<Route\s+.*path=' "$CWD/src" 2>/dev/null | while read -r line; do
-      file=$(echo "$line" | cut -d: -f1)
-      routePath=$(echo "$line" | grep -oE 'path="[^"]*"' | head -1 | sed 's/path="//;s/"//')
-      [ -z "$routePath" ] && continue
-      formFlag=$(has_form "$file")
-      emit "$routePath" "$file" "page" "$formFlag"
-    done || true
-
-    # Also check for createBrowserRouter patterns
-    grep -rn --include='*.tsx' --include='*.jsx' --include='*.ts' --include='*.js' \
-      -E 'path:\s*["\x27]' "$CWD/src" 2>/dev/null | while read -r line; do
-      file=$(echo "$line" | cut -d: -f1)
-      routePath=$(echo "$line" | grep -oE "path:\s*[\"'][^\"']*[\"']" | head -1 | sed "s/path:\s*[\"']//;s/[\"']//")
-      [ -z "$routePath" ] && continue
-      formFlag=$(has_form "$file")
-      emit "$routePath" "$file" "page" "$formFlag"
-    done || true
-    ;;
-
-  express)
-    # Grep for app.get/post/put/delete/use patterns
-    grep -rn --include='*.ts' --include='*.js' \
-      -E '\.(get|post|put|patch|delete|use)\s*\(\s*["\x27/]' "$CWD/src" "$CWD/routes" "$CWD/server" 2>/dev/null | while read -r line; do
-      file=$(echo "$line" | cut -d: -f1)
-      method=$(echo "$line" | grep -oE '\.(get|post|put|patch|delete)' | head -1 | tr -d '.')
-      routePath=$(echo "$line" | grep -oE "[\"'][/][^\"']*[\"']" | head -1 | tr -d "\"'")
-      [ -z "$routePath" ] && continue
-      [ -z "$method" ] && method="GET"
-      methods="[\"$(echo "$method" | tr '[:lower:]' '[:upper:]')\"]"
-      emit "$routePath" "$file" "api" "false" "$methods"
-    done || true
-    ;;
-
-  vite|generic)
-    # Generic: look for common patterns
-    if [ -d "src" ]; then
-      # Check for React Router in any form
-      grep -rln --include='*.tsx' --include='*.jsx' --include='*.ts' --include='*.js' \
-        -E '(<Route|createBrowserRouter|useRoutes)' src/ 2>/dev/null | while read -r file; do
-        grep -oE 'path[=:]\s*["\x27][^"\x27]*["\x27]' "$file" 2>/dev/null | while read -r match; do
-          routePath=$(echo "$match" | sed "s/path[=:]\s*[\"']//;s/[\"']//")
-          [ -z "$routePath" ] && continue
-          formFlag=$(has_form "$file")
-          emit "$routePath" "$file" "page" "$formFlag"
-        done
-      done || true
-    fi
-    ;;
-esac
-
-# Always scan for auth-related files regardless of framework
-find "$CWD/src" -type f \( -name '*auth*' -o -name '*login*' -o -name '*signup*' -o -name '*register*' \) \
-  -not -path '*/node_modules/*' -not -path '*/.next/*' -not -name '*.test.*' -not -name '*.spec.*' 2>/dev/null | while read -r file; do
-  # Only emit if not already covered by framework-specific scan
-  formFlag=$(has_form "$file")
-  # Use filename as hint for route
-  basename=$(basename "$file" | sed 's/\.\(tsx\|jsx\|ts\|js\)$//')
-  emit "/$basename" "$file" "auth" "$formFlag"
-done || true

package/src/qa/scripts/run-e2e-tests.sh

@@ -1,131 +0,0 @@
-#!/usr/bin/env bash
-# Run playwright tests and produce a compact JSON summary.
-# Requires playwright-cli installed globally (npm install -g @playwright/cli@latest).
-# Usage: run-e2e-tests.sh <test_dir> <base_url> [test_filter]
-# Output: Compact JSON summary on stdout
-# Exit: 0 = all tests passed, 2 = test failures, 1 = script/playwright error
-set -euo pipefail
-
-TEST_DIR="$1"
-BASE_URL="$2"
-TEST_FILTER="${3:-}"
-RESULTS_DIR="${TEST_DIR}/../results"
-
-mkdir -p "$RESULTS_DIR"
-
-# Resolve playwright-cli binary
-if command -v playwright-cli &>/dev/null; then
-  PW_BIN="$(command -v playwright-cli)"
-elif [ -x "./node_modules/.bin/playwright-cli" ]; then
-  PW_BIN="./node_modules/.bin/playwright-cli"
-else
-  cat <<EOF
-{"total": 0, "passed": 0, "failed": 0, "skipped": 0, "duration": 0, "failures": [], "error": "playwright not found. Install with: npm install -g @playwright/cli@latest"}
-EOF
-  exit 1
-fi
-
-# Build playwright-cli command
-PW_ARGS=(
-  test
-  "$TEST_DIR"
-  --reporter=json
-  --output="$RESULTS_DIR"
-)
-
-if [ -n "$TEST_FILTER" ]; then
-  PW_ARGS+=(--grep "$TEST_FILTER")
-fi
-
-# Run playwright, capture JSON output and stderr separately
-RAW_OUTPUT="$RESULTS_DIR/raw-results.json"
-PW_STDERR="$RESULTS_DIR/playwright-stderr.log"
-set +e
-BASE_URL="$BASE_URL" "$PW_BIN" "${PW_ARGS[@]}" > "$RAW_OUTPUT" 2>"$PW_STDERR"
-PW_EXIT=$?
-set -e
-
-# If no JSON output was produced, emit error summary and exit
-if [ ! -s "$RAW_OUTPUT" ]; then
-  cat <<EOF
-{"total": 0, "passed": 0, "failed": 0, "skipped": 0, "duration": 0, "failures": [], "error": "playwright produced no output (exit code: $PW_EXIT). See $PW_STDERR for details."}
-EOF
-  exit 1
-fi
-
-# Parse the JSON output into compact summary using node.
-# Writes summary to file, prints to stdout, exits non-zero if tests failed.
-SUMMARY_OUTPUT="$RESULTS_DIR/summary.json"
-NODE_STDERR="$RESULTS_DIR/node-parse-stderr.log"
-set +e
-RAW_OUTPUT="$RAW_OUTPUT" SUMMARY_OUTPUT="$SUMMARY_OUTPUT" node -e "
-const fs = require('fs');
-const raw = JSON.parse(fs.readFileSync(process.env.RAW_OUTPUT, 'utf-8'));
-
-const suites = raw.suites || [];
-const results = [];
-
-function collectTests(suite, parentTitle) {
-  const title = parentTitle ? parentTitle + ' > ' + suite.title : suite.title;
-  for (const spec of (suite.specs || [])) {
-    for (const test of (spec.tests || [])) {
-      for (const result of (test.results || [])) {
-        results.push({
-          test: title + ' > ' + spec.title,
-          file: spec.file + (spec.line ? ':' + spec.line : ''),
-          status: result.status,
-          duration: result.duration || 0,
-          error: result.error?.message || null,
-        });
-      }
-    }
-  }
-  for (const child of (suite.suites || [])) {
-    collectTests(child, title);
-  }
-}
-
-for (const suite of suites) {
-  collectTests(suite, '');
-}
-
-const passed = results.filter(r => r.status === 'passed').length;
-const failed = results.filter(r => r.status === 'failed' || r.status === 'timedOut').length;
-const skipped = results.filter(r => r.status === 'skipped').length;
-const totalDuration = results.reduce((sum, r) => sum + r.duration, 0);
-
-const failures = results
-  .filter(r => r.status === 'failed' || r.status === 'timedOut')
-  .map(r => ({
-    test: r.test,
-    file: r.file,
-    error: r.error || 'Unknown error',
-  }));
-
-const summary = {
-  total: results.length,
-  passed,
-  failed,
-  skipped,
-  duration: totalDuration,
-  failures,
-};
-
-const json = JSON.stringify(summary);
-fs.writeFileSync(process.env.SUMMARY_OUTPUT, json);
-console.log(json);
-process.exit(failed > 0 ? 2 : 0);
-" 2>"$NODE_STDERR"
-NODE_EXIT=$?
-set -e
-
-# If parsing failed (not a test-failure exit), emit error and exit
-if [ ! -s "$SUMMARY_OUTPUT" ]; then
-  cat <<EOF
-{"total": 0, "passed": 0, "failed": 0, "skipped": 0, "duration": 0, "failures": [], "error": "Failed to parse playwright output. See $NODE_STDERR for details."}
-EOF
-  exit 1
-fi
-
-# Propagate the node exit code (0 = all passed, 2 = test failures)
-exit "$NODE_EXIT"

package/src/qa/scripts/start-dev-server.sh

@@ -1,46 +0,0 @@
-#!/usr/bin/env bash
-# Start the dev server in the background and wait for it to be ready.
-# Usage: start-dev-server.sh <cwd> <dev_command> <port> <timeout_seconds> <session_dir>
-# Output: JSON on stdout
-set -euo pipefail
-
-CWD="$1"
-DEV_COMMAND="$2"
-PORT="$3"
-TIMEOUT="${4:-60}"
-SESSION_DIR="${5:-.}"
-
-cd "$CWD"
-
-# Check if port is already in use
-if curl -s -o /dev/null -w "%{http_code}" "http://localhost:$PORT" 2>/dev/null | grep -qE '^[0-9]'; then
-  echo "{\"pid\": null, \"url\": \"http://localhost:$PORT\", \"ready\": true, \"note\": \"Server already running\"}"
-  exit 0
-fi
-
-# Start dev server in background
-eval "$DEV_COMMAND" > "$SESSION_DIR/dev-server.log" 2>&1 &
-PID=$!
-echo "$PID" > "$SESSION_DIR/dev-server.pid"
-
-# Wait for server to be ready
-for i in $(seq 1 "$TIMEOUT"); do
-  # Check if process is still alive
-  if ! kill -0 "$PID" 2>/dev/null; then
-    echo "{\"pid\": $PID, \"url\": \"http://localhost:$PORT\", \"ready\": false, \"error\": \"Server process exited\"}"
-    exit 1
-  fi
-
-  # Check if port responds
-  if curl -s -o /dev/null "http://localhost:$PORT" 2>/dev/null; then
-    echo "{\"pid\": $PID, \"url\": \"http://localhost:$PORT\", \"ready\": true}"
-    exit 0
-  fi
-
-  sleep 1
-done
-
-# Timeout — kill the server
-kill "$PID" 2>/dev/null || true
-echo "{\"pid\": $PID, \"url\": \"http://localhost:$PORT\", \"ready\": false, \"error\": \"Timeout after ${TIMEOUT}s\"}"
-exit 1

package/src/qa/scripts/stop-dev-server.sh

@@ -1,36 +0,0 @@
-#!/usr/bin/env bash
-# Stop the dev server started by start-dev-server.sh.
-# Usage: stop-dev-server.sh <session_dir>
-set -euo pipefail
-
-SESSION_DIR="${1:-.}"
-PID_FILE="$SESSION_DIR/dev-server.pid"
-
-if [ ! -f "$PID_FILE" ]; then
-  echo '{"stopped": false, "error": "No PID file found"}'
-  exit 0
-fi
-
-PID=$(cat "$PID_FILE")
-
-if [ -z "$PID" ]; then
-  echo '{"stopped": false, "error": "Empty PID file"}'
-  exit 0
-fi
-
-# Kill the process and its children
-if kill -0 "$PID" 2>/dev/null; then
-  # Kill process group if possible
-  kill -- -"$PID" 2>/dev/null || kill "$PID" 2>/dev/null || true
-  # Wait briefly for cleanup
-  sleep 1
-  # Force kill if still alive
-  if kill -0 "$PID" 2>/dev/null; then
-    kill -9 "$PID" 2>/dev/null || true
-  fi
-  rm -f "$PID_FILE"
-  echo "{\"stopped\": true, \"pid\": $PID}"
-else
-  rm -f "$PID_FILE"
-  echo "{\"stopped\": true, \"pid\": $PID, \"note\": \"Process was already dead\"}"
-fi

package/src/review/prompts/fix-output-schema.md

@@ -1,18 +0,0 @@
-{
-  "fixes": [
-    {
-      "findingIds": ["F001"],
-      "file": "src/auth.ts",
-      "status": "applied",
-      "summary": "Added a null guard before dereferencing the user object."
-    },
-    {
-      "findingIds": ["F002"],
-      "file": null,
-      "status": "skipped",
-      "summary": "Skipped because the finding does not identify a concrete file to edit."
-    }
-  ],
-  "summary": "Applied 1 fix and skipped 1 finding.",
-  "status": "partial"
-}

package/src/review/prompts/review-output-schema.md

@@ -1,38 +0,0 @@
-{
-  "findings": [
-    {
-      "id": "F001",
-      "title": "Missing null check on user input",
-      "severity": "error",
-      "priority": "P1",
-      "confidence": 0.85,
-      "file": "src/auth.ts",
-      "lineStart": 42,
-      "lineEnd": 45,
-      "body": "The code dereferences `userId` without validating that it exists.",
-      "suggestion": "Add a guard that rejects nullish `userId` before use.",
-      "agent": "correctness",
-      "validation": {
-        "verdict": "confirmed",
-        "reasoning": "The null guard is missing at the referenced call site.",
-        "validatedBy": "validator",
-        "validatedAt": "2026-04-11T14:30:22.000Z"
-      }
-    },
-    {
-      "id": "F002",
-      "title": "Location could not be determined confidently",
-      "severity": "warning",
-      "priority": "P3",
-      "confidence": 0.32,
-      "file": null,
-      "lineStart": null,
-      "lineEnd": null,
-      "body": "Use null for unknown location fields instead of guessing.",
-      "suggestion": null,
-      "agent": "correctness"
-    }
-  ],
-  "summary": "Found 2 review findings.",
-  "status": "failed"
-}

package/src/review/template.ts

@@ -1,15 +0,0 @@
-import Handlebars from "handlebars";
-
-const handlebars = Handlebars.create();
-
-handlebars.registerHelper("json", (value: unknown): string => JSON.stringify(value, null, 2));
-handlebars.registerHelper("joinLines", (value: unknown): string => {
-  if (!Array.isArray(value)) {
-    return "";
-  }
-  return value.join("\n");
-});
-
-export function renderReviewTemplate(template: string, context: Record<string, unknown> = {}): string {
-  return handlebars.compile(template, { noEscape: true })(context);
-}