@probelabs/visor 0.1.106 → 0.1.111

package/dist/generated/config-schema.json

@@ -1,10 +1,14 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$ref": "#/definitions/VisorConfig",
+  "$ref": "#/definitions/VisorConfigSchema",
   "definitions": {
-    "VisorConfig": {
+    "VisorConfigSchema": {
       "type": "object",
+      "additionalProperties": false,
       "properties": {
+        "hooks": {
+          "$ref": "#/definitions/Record%3Cstring%2Cunknown%3E"
+        },
         "version": {
           "type": "string",
           "description": "Configuration version"
@@ -23,6 +27,45 @@
           ],
           "description": "Extends from other configurations - can be file path, HTTP(S) URL, or \"default\""
         },
+        "include": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            }
+          ],
+          "description": "Alias for extends - include from other configurations (backward compatibility)"
+        },
+        "tools": {
+          "$ref": "#/definitions/Record%3Cstring%2CCustomToolDefinition%3E",
+          "description": "Custom tool definitions that can be used in MCP blocks"
+        },
+        "imports": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Import workflow definitions from external files or URLs"
+        },
+        "inputs": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/WorkflowInput"
+          },
+          "description": "Workflow inputs (for standalone reusable workflows)"
+        },
+        "outputs": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/WorkflowOutput"
+          },
+          "description": "Workflow outputs (for standalone reusable workflows)"
+        },
         "steps": {
           "$ref": "#/definitions/Record%3Cstring%2CCheckConfig%3E",
           "description": "Step configurations (recommended)"
@@ -33,7 +76,7 @@
         },
         "output": {
           "$ref": "#/definitions/OutputConfig",
-          "description": "Output configuration"
+          "description": "Output configuration (optional - defaults provided)"
         },
         "http_server": {
           "$ref": "#/definitions/HttpServerConfig",
@@ -82,14 +125,207 @@
         "routing": {
           "$ref": "#/definitions/RoutingDefaults",
           "description": "Optional routing defaults for retry/goto/run policies"
+        },
+        "limits": {
+          "$ref": "#/definitions/LimitsConfig",
+          "description": "Global execution limits"
+        },
+        "frontends": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "name": {
+                "type": "string",
+                "description": "Frontend name, e.g., 'ndjson-sink', 'github'"
+              },
+              "config": {
+                "description": "Frontend-specific configuration"
+              }
+            },
+            "required": [
+              "name"
+            ],
+            "additionalProperties": false
+          },
+          "description": "Optional integrations: event-driven frontends (e.g., ndjson-sink, github)"
+        },
+        "workspace": {
+          "$ref": "#/definitions/WorkspaceConfig",
+          "description": "Workspace isolation configuration for sandboxed execution"
+        },
+        "slack": {
+          "$ref": "#/definitions/SlackConfig",
+          "description": "Slack configuration"
         }
       },
       "required": [
-        "version",
-        "output"
+        "version"
+      ],
+      "patternProperties": {
+        "^x-": {}
+      }
+    },
+    "Record<string,unknown>": {
+      "type": "object",
+      "additionalProperties": {}
+    },
+    "Record<string,CustomToolDefinition>": {
+      "type": "object",
+      "additionalProperties": {
+        "$ref": "#/definitions/CustomToolDefinition"
+      }
+    },
+    "CustomToolDefinition": {
+      "type": "object",
+      "properties": {
+        "name": {
+          "type": "string",
+          "description": "Tool name - used to reference the tool in MCP blocks"
+        },
+        "description": {
+          "type": "string",
+          "description": "Description of what the tool does"
+        },
+        "inputSchema": {
+          "type": "object",
+          "properties": {
+            "type": {
+              "type": "string",
+              "const": "object"
+            },
+            "properties": {
+              "$ref": "#/definitions/Record%3Cstring%2Cunknown%3E"
+            },
+            "required": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            },
+            "additionalProperties": {
+              "type": "boolean"
+            }
+          },
+          "required": [
+            "type"
+          ],
+          "additionalProperties": false,
+          "description": "Input schema for the tool (JSON Schema format)",
+          "patternProperties": {
+            "^x-": {}
+          }
+        },
+        "exec": {
+          "type": "string",
+          "description": "Command to execute - supports Liquid template"
+        },
+        "stdin": {
+          "type": "string",
+          "description": "Optional stdin input - supports Liquid template"
+        },
+        "transform": {
+          "type": "string",
+          "description": "Transform the raw output - supports Liquid template"
+        },
+        "transform_js": {
+          "type": "string",
+          "description": "Transform the output using JavaScript - alternative to transform"
+        },
+        "cwd": {
+          "type": "string",
+          "description": "Working directory for command execution"
+        },
+        "env": {
+          "$ref": "#/definitions/Record%3Cstring%2Cstring%3E",
+          "description": "Environment variables for the command"
+        },
+        "timeout": {
+          "type": "number",
+          "description": "Timeout in milliseconds"
+        },
+        "parseJson": {
+          "type": "boolean",
+          "description": "Whether to parse output as JSON automatically"
+        },
+        "outputSchema": {
+          "$ref": "#/definitions/Record%3Cstring%2Cunknown%3E",
+          "description": "Expected output schema for validation"
+        }
+      },
+      "required": [
+        "name",
+        "exec"
       ],
       "additionalProperties": false,
-      "description": "Main Visor configuration",
+      "description": "Custom tool definition for use in MCP blocks",
+      "patternProperties": {
+        "^x-": {}
+      }
+    },
+    "Record<string,string>": {
+      "type": "object",
+      "additionalProperties": {
+        "type": "string"
+      }
+    },
+    "WorkflowInput": {
+      "type": "object",
+      "properties": {
+        "name": {
+          "type": "string",
+          "description": "Input parameter name"
+        },
+        "schema": {
+          "$ref": "#/definitions/Record%3Cstring%2Cunknown%3E",
+          "description": "JSON Schema for the input"
+        },
+        "required": {
+          "type": "boolean",
+          "description": "Whether this input is required"
+        },
+        "default": {
+          "description": "Default value if not provided"
+        },
+        "description": {
+          "type": "string",
+          "description": "Human-readable description"
+        }
+      },
+      "required": [
+        "name"
+      ],
+      "additionalProperties": false,
+      "description": "Workflow input definition for standalone reusable workflows",
+      "patternProperties": {
+        "^x-": {}
+      }
+    },
+    "WorkflowOutput": {
+      "type": "object",
+      "properties": {
+        "name": {
+          "type": "string",
+          "description": "Output name"
+        },
+        "description": {
+          "type": "string",
+          "description": "Human-readable description"
+        },
+        "value": {
+          "type": "string",
+          "description": "Value using Liquid template syntax (references step outputs)"
+        },
+        "value_js": {
+          "type": "string",
+          "description": "Value using JavaScript expression (alternative to value)"
+        }
+      },
+      "required": [
+        "name"
+      ],
+      "additionalProperties": false,
+      "description": "Workflow output definition for standalone reusable workflows",
       "patternProperties": {
         "^x-": {}
       }
@@ -151,6 +387,10 @@
           "type": "string",
           "description": "Transform using JavaScript expressions (evaluated in secure sandbox) - optional"
         },
+        "content": {
+          "type": "string",
+          "description": "Script content to execute for script checks"
+        },
         "schedule": {
           "type": "string",
           "description": "Cron schedule expression (e.g., \"0 2 * * *\") - optional for any check type"
@@ -189,10 +429,33 @@
           "type": "string",
           "description": "AI provider to use for this check - overrides global setting"
         },
+        "ai_persona": {
+          "type": "string",
+          "description": "Optional persona hint, prepended to the prompt as 'Persona: <value>'"
+        },
+        "ai_prompt_type": {
+          "type": "string",
+          "description": "Probe promptType for this check (underscore style)"
+        },
+        "ai_system_prompt": {
+          "type": "string",
+          "description": "System prompt for this check (underscore style)"
+        },
+        "ai_custom_prompt": {
+          "type": "string",
+          "description": "Legacy customPrompt (underscore style) — deprecated, use ai_system_prompt"
+        },
         "ai_mcp_servers": {
           "$ref": "#/definitions/Record%3Cstring%2CMcpServerConfig%3E",
           "description": "MCP servers for this AI check - overrides global setting"
         },
+        "ai_custom_tools": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "List of custom tool names to expose to this AI check via ephemeral SSE MCP server"
+        },
         "claude_code": {
           "$ref": "#/definitions/ClaudeCodeConfig",
           "description": "Claude Code configuration (for claude-code type checks)"
@@ -206,11 +469,18 @@
           "description": "Timeout in seconds for command execution (default: 60)"
         },
         "depends_on": {
-          "type": "array",
-          "items": {
-            "type": "string"
-          },
-          "description": "Check IDs that this check depends on (optional)"
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            }
+          ],
+          "description": "Check IDs that this check depends on (optional). Accepts single string or array."
         },
         "group": {
           "type": "string",
@@ -227,6 +497,10 @@
           ],
           "description": "Schema type for template rendering (e.g., \"code-review\", \"markdown\") or inline JSON schema object - optional"
         },
+        "output_schema": {
+          "$ref": "#/definitions/Record%3Cstring%2Cunknown%3E",
+          "description": "Optional JSON Schema to validate the produced output. If omitted and `schema` is an object, the engine will treat that object as the output_schema for validation purposes while still using string schemas (e.g., 'code-review') for template selection."
+        },
         "template": {
           "$ref": "#/definitions/CustomTemplateConfig",
           "description": "Custom template configuration - optional"
@@ -265,10 +539,40 @@
           },
           "description": "Tags for categorizing and filtering checks (e.g., [\"local\", \"fast\", \"security\"])"
         },
+        "criticality": {
+          "type": "string",
+          "enum": [
+            "external",
+            "internal",
+            "policy",
+            "info"
+          ],
+          "description": "Operational criticality of this step. Drives default safety policies (contracts, retries, loop budgets) at load time. Behavior can still be overridden explicitly per step via on_*, fail_if, assume/guarantee, etc.\n\n- 'external': interacts with external systems (side effects). Highest safety.\n- 'internal': modifies CI/config/state but not prod. High safety.\n- 'policy': organizational checks (linting, style, doc). Moderate safety.\n- 'info': informational checks. Lowest safety."
+        },
+        "continue_on_failure": {
+          "type": "boolean",
+          "description": "Allow dependents to run even if this step fails. Defaults to false (dependents are gated when this step fails). Similar to GitHub Actions' continue-on-error."
+        },
         "forEach": {
           "type": "boolean",
           "description": "Process output as array and run dependent checks for each item"
         },
+        "fanout": {
+          "type": "string",
+          "enum": [
+            "map",
+            "reduce"
+          ],
+          "description": "Control scheduling behavior when this check is triggered via routing (run/goto) from a forEach scope.\n- 'map': schedule once per item (fan-out) using item scopes.\n- 'reduce': schedule a single run at the parent scope (aggregation). If unset, the current default is a single run (reduce) for backward compatibility."
+        },
+        "reduce": {
+          "type": "boolean",
+          "description": "Alias for fanout: 'reduce'"
+        },
+        "on_init": {
+          "$ref": "#/definitions/OnInitConfig",
+          "description": "Init routing configuration for this check (runs before execution/preprocessing)"
+        },
         "on_fail": {
           "$ref": "#/definitions/OnFailConfig",
           "description": "Failure routing configuration for this check (retry/goto/run)"
@@ -277,6 +581,42 @@
           "$ref": "#/definitions/OnSuccessConfig",
           "description": "Success routing configuration for this check (post-actions and optional goto)"
         },
+        "on_finish": {
+          "$ref": "#/definitions/OnFinishConfig",
+          "description": "Finish routing configuration for forEach checks (runs after ALL iterations complete)"
+        },
+        "assume": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            }
+          ],
+          "description": "Preconditions that must hold before executing the check. If any expression evaluates to false, the check is skipped (skipReason='assume')."
+        },
+        "guarantee": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            }
+          ],
+          "description": "Postconditions that should hold after executing the check. Expressions are evaluated against the produced result/output; violations are recorded as error issues with ruleId \"contract/guarantee_failed\"."
+        },
+        "max_runs": {
+          "type": "number",
+          "description": "Hard cap on how many times this check may execute within a single engine run. Overrides global limits.max_runs_per_check. Set to 0 or negative to disable for this step."
+        },
         "message": {
           "type": "string",
           "description": "Message template for log checks"
@@ -303,6 +643,14 @@
           "type": "boolean",
           "description": "Include execution metadata in log output"
         },
+        "output_format": {
+          "type": "string",
+          "enum": [
+            "json",
+            "text"
+          ],
+          "description": "Output parsing hint for command provider (optional) When set to 'json', command stdout is expected to be JSON. When 'text', treat as plain text. Note: command provider attempts JSON parsing heuristically; this flag mainly suppresses schema warnings and may be used by providers to alter parsing behavior in the future."
+        },
         "operation": {
           "type": "string",
           "enum": [
@@ -312,10 +660,9 @@
             "increment",
             "delete",
             "clear",
-            "list",
-            "exec_js"
+            "list"
           ],
-          "description": "Memory operation to perform"
+          "description": "Memory operation to perform. Use `type: 'script'` for custom JavaScript."
         },
         "key": {
           "type": "string",
@@ -328,10 +675,6 @@
           "type": "string",
           "description": "JavaScript expression to compute value dynamically"
         },
-        "memory_js": {
-          "type": "string",
-          "description": "JavaScript code for exec_js operation with full memory access"
-        },
         "namespace": {
           "type": "string",
           "description": "Override namespace for this check"
@@ -375,7 +718,7 @@
           "type": "string",
           "description": "Session ID for HTTP transport (optional, server may generate one)"
         },
-        "args": {
+        "command_args": {
           "type": "array",
           "items": {
             "type": "string"
@@ -385,6 +728,117 @@
         "workingDirectory": {
           "type": "string",
           "description": "Working directory (for stdio transport in MCP checks)"
+        },
+        "placeholder": {
+          "type": "string",
+          "description": "Placeholder text to show in input field"
+        },
+        "allow_empty": {
+          "type": "boolean",
+          "description": "Allow empty input (default: false)"
+        },
+        "multiline": {
+          "type": "boolean",
+          "description": "Support multiline input (default: false)"
+        },
+        "default": {
+          "type": "string",
+          "description": "Default value if timeout occurs or empty input when allow_empty is true"
+        },
+        "workflow": {
+          "type": "string",
+          "description": "Workflow ID or path to workflow file"
+        },
+        "args": {
+          "$ref": "#/definitions/Record%3Cstring%2Cunknown%3E",
+          "description": "Arguments/inputs for the workflow"
+        },
+        "overrides": {
+          "$ref": "#/definitions/Record%3Cstring%2CPartial%3Cinterface-src_types_config.ts-11359-23556-src_types_config.ts-0-40845%3E%3E",
+          "description": "Override specific step configurations in the workflow"
+        },
+        "output_mapping": {
+          "$ref": "#/definitions/Record%3Cstring%2Cstring%3E",
+          "description": "Map workflow outputs to check outputs"
+        },
+        "workflow_inputs": {
+          "$ref": "#/definitions/Record%3Cstring%2Cunknown%3E",
+          "description": "Alias for args - workflow inputs (backward compatibility)"
+        },
+        "config": {
+          "type": "string",
+          "description": "Config file path - alternative to workflow ID (loads a Visor config file as workflow)"
+        },
+        "workflow_overrides": {
+          "$ref": "#/definitions/Record%3Cstring%2CPartial%3Cinterface-src_types_config.ts-11359-23556-src_types_config.ts-0-40845%3E%3E",
+          "description": "Alias for overrides - workflow step overrides (backward compatibility)"
+        },
+        "ref": {
+          "type": "string",
+          "description": "Git reference to checkout (branch, tag, commit SHA) - supports templates"
+        },
+        "repository": {
+          "type": "string",
+          "description": "Repository URL or owner/repo format (defaults to current repository)"
+        },
+        "token": {
+          "type": "string",
+          "description": "GitHub token for private repositories (defaults to GITHUB_TOKEN env)"
+        },
+        "fetch_depth": {
+          "type": "number",
+          "description": "Number of commits to fetch (0 for full history, default: 1)"
+        },
+        "fetch_tags": {
+          "type": "boolean",
+          "description": "Whether to fetch tags (default: false)"
+        },
+        "submodules": {
+          "anyOf": [
+            {
+              "type": "boolean"
+            },
+            {
+              "type": "string",
+              "const": "recursive"
+            }
+          ],
+          "description": "Checkout submodules: false, true, or 'recursive'"
+        },
+        "working_directory": {
+          "type": "string",
+          "description": "Working directory for the checkout (defaults to temp directory)"
+        },
+        "use_worktree": {
+          "type": "boolean",
+          "description": "Use git worktree for efficient parallel checkouts (default: true)"
+        },
+        "clean": {
+          "type": "boolean",
+          "description": "Clean the working directory before checkout (default: true)"
+        },
+        "sparse_checkout": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Sparse checkout paths - only checkout specific directories/files"
+        },
+        "lfs": {
+          "type": "boolean",
+          "description": "Enable Git LFS (Large File Storage)"
+        },
+        "clone_timeout_ms": {
+          "type": "number",
+          "description": "Timeout in ms for cloning the bare repository (default: 300000 = 5 min)"
+        },
+        "cleanup_on_failure": {
+          "type": "boolean",
+          "description": "Clean up worktree on failure (default: true)"
+        },
+        "persist_worktree": {
+          "type": "boolean",
+          "description": "Keep worktree after workflow completion (default: false)"
         }
       },
       "additionalProperties": false,
@@ -398,6 +852,7 @@
       "enum": [
         "ai",
         "command",
+        "script",
         "http",
         "http_input",
         "http_client",
@@ -407,16 +862,12 @@
         "github",
         "claude-code",
         "mcp",
-        "human-input"
+        "human-input",
+        "workflow",
+        "git-checkout"
       ],
       "description": "Valid check types in configuration"
     },
-    "Record<string,string>": {
-      "type": "object",
-      "additionalProperties": {
-        "type": "string"
-      }
-    },
     "EventTrigger": {
       "type": "string",
       "enum": [
@@ -457,51 +908,270 @@
           "type": "number",
           "description": "Request timeout in milliseconds"
         },
-        "debug": {
-          "type": "boolean",
-          "description": "Enable debug mode"
+        "debug": {
+          "type": "boolean",
+          "description": "Enable debug mode"
+        },
+        "prompt_type": {
+          "type": "string",
+          "description": "Probe promptType to use (e.g., engineer, code-review, architect)"
+        },
+        "system_prompt": {
+          "type": "string",
+          "description": "System prompt (baseline preamble). Replaces legacy custom_prompt."
+        },
+        "custom_prompt": {
+          "type": "string",
+          "description": "Probe customPrompt (baseline/system prompt) — deprecated, use system_prompt"
+        },
+        "skip_code_context": {
+          "type": "boolean",
+          "description": "Skip adding code context (diffs, files, PR info) to the prompt"
+        },
+        "skip_slack_context": {
+          "type": "boolean",
+          "description": "Skip adding Slack conversation context to the prompt (when running under Slack)"
+        },
+        "skip_transport_context": {
+          "type": "boolean",
+          "description": "Skip adding transport-specific context (e.g., GitHub PR/issue XML, Slack conversation XML) to the prompt. When true, this behaves like setting both skip_code_context and skip_slack_context to true, unless those are explicitly overridden."
+        },
+        "mcpServers": {
+          "$ref": "#/definitions/Record%3Cstring%2CMcpServerConfig%3E",
+          "description": "MCP servers configuration"
+        },
+        "enableDelegate": {
+          "type": "boolean",
+          "description": "Enable the delegate tool for task distribution to subagents"
+        },
+        "retry": {
+          "$ref": "#/definitions/AIRetryConfig",
+          "description": "Retry configuration for this provider"
+        },
+        "fallback": {
+          "$ref": "#/definitions/AIFallbackConfig",
+          "description": "Fallback configuration for provider failures"
+        },
+        "allowEdit": {
+          "type": "boolean",
+          "description": "Enable Edit and Create tools for file modification (disabled by default for security)"
+        },
+        "allowedTools": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Filter allowed tools - supports whitelist, exclusion (!prefix), or raw AI mode (empty array)"
+        },
+        "disableTools": {
+          "type": "boolean",
+          "description": "Disable all tools for raw AI mode (alternative to allowedTools: [])"
+        },
+        "allowBash": {
+          "type": "boolean",
+          "description": "Enable bash command execution (shorthand for bashConfig.enabled)"
+        },
+        "bashConfig": {
+          "$ref": "#/definitions/BashConfig",
+          "description": "Advanced bash command execution configuration"
+        },
+        "completion_prompt": {
+          "type": "string",
+          "description": "Completion prompt for post-completion validation/review (runs after attempt_completion)"
+        }
+      },
+      "additionalProperties": false,
+      "description": "AI provider configuration",
+      "patternProperties": {
+        "^x-": {}
+      }
+    },
+    "Record<string,McpServerConfig>": {
+      "type": "object",
+      "additionalProperties": {
+        "$ref": "#/definitions/McpServerConfig"
+      }
+    },
+    "McpServerConfig": {
+      "type": "object",
+      "properties": {
+        "command": {
+          "type": "string",
+          "description": "Command to execute for the MCP server"
+        },
+        "args": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Arguments to pass to the command"
+        },
+        "env": {
+          "$ref": "#/definitions/Record%3Cstring%2Cstring%3E",
+          "description": "Environment variables for the MCP server"
+        }
+      },
+      "required": [
+        "command"
+      ],
+      "additionalProperties": false,
+      "description": "MCP Server configuration",
+      "patternProperties": {
+        "^x-": {}
+      }
+    },
+    "AIRetryConfig": {
+      "type": "object",
+      "properties": {
+        "maxRetries": {
+          "type": "number",
+          "description": "Maximum retry attempts (0-50)"
+        },
+        "initialDelay": {
+          "type": "number",
+          "description": "Initial delay in milliseconds (0-60000)"
+        },
+        "maxDelay": {
+          "type": "number",
+          "description": "Maximum delay cap in milliseconds (0-300000)"
+        },
+        "backoffFactor": {
+          "type": "number",
+          "description": "Exponential backoff multiplier (1-10)"
+        },
+        "retryableErrors": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Custom error patterns to retry on"
+        }
+      },
+      "additionalProperties": false,
+      "description": "Retry configuration for AI provider calls",
+      "patternProperties": {
+        "^x-": {}
+      }
+    },
+    "AIFallbackConfig": {
+      "type": "object",
+      "properties": {
+        "strategy": {
+          "type": "string",
+          "enum": [
+            "same-model",
+            "same-provider",
+            "any",
+            "custom"
+          ],
+          "description": "Fallback strategy: 'same-model', 'same-provider', 'any', or 'custom'"
+        },
+        "providers": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/AIFallbackProviderConfig"
+          },
+          "description": "Array of fallback provider configurations"
+        },
+        "maxTotalAttempts": {
+          "type": "number",
+          "description": "Maximum total attempts across all providers"
+        },
+        "auto": {
+          "type": "boolean",
+          "description": "Enable automatic fallback using available environment variables"
+        }
+      },
+      "additionalProperties": false,
+      "description": "Fallback configuration for AI providers",
+      "patternProperties": {
+        "^x-": {}
+      }
+    },
+    "AIFallbackProviderConfig": {
+      "type": "object",
+      "properties": {
+        "provider": {
+          "type": "string",
+          "enum": [
+            "google",
+            "anthropic",
+            "openai",
+            "bedrock"
+          ],
+          "description": "AI provider to use"
+        },
+        "model": {
+          "type": "string",
+          "description": "Model name to use"
+        },
+        "apiKey": {
+          "type": "string",
+          "description": "API key for this provider"
+        },
+        "maxRetries": {
+          "type": "number",
+          "description": "Per-provider retry override"
+        },
+        "region": {
+          "type": "string",
+          "description": "AWS region (for Bedrock)"
+        },
+        "accessKeyId": {
+          "type": "string",
+          "description": "AWS access key ID (for Bedrock)"
         },
-        "mcpServers": {
-          "$ref": "#/definitions/Record%3Cstring%2CMcpServerConfig%3E",
-          "description": "MCP servers configuration"
+        "secretAccessKey": {
+          "type": "string",
+          "description": "AWS secret access key (for Bedrock)"
         }
       },
+      "required": [
+        "provider",
+        "model"
+      ],
       "additionalProperties": false,
-      "description": "AI provider configuration",
+      "description": "Fallback provider configuration",
       "patternProperties": {
         "^x-": {}
       }
     },
-    "Record<string,McpServerConfig>": {
-      "type": "object",
-      "additionalProperties": {
-        "$ref": "#/definitions/McpServerConfig"
-      }
-    },
-    "McpServerConfig": {
+    "BashConfig": {
       "type": "object",
       "properties": {
-        "command": {
-          "type": "string",
-          "description": "Command to execute for the MCP server"
+        "allow": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Array of permitted command patterns (e.g., ['ls', 'git status'])"
         },
-        "args": {
+        "deny": {
           "type": "array",
           "items": {
             "type": "string"
           },
-          "description": "Arguments to pass to the command"
+          "description": "Array of blocked command patterns (e.g., ['rm -rf', 'sudo'])"
         },
-        "env": {
-          "$ref": "#/definitions/Record%3Cstring%2Cstring%3E",
-          "description": "Environment variables for the MCP server"
+        "noDefaultAllow": {
+          "type": "boolean",
+          "description": "Disable default safe command list (use with caution)"
+        },
+        "noDefaultDeny": {
+          "type": "boolean",
+          "description": "Disable default dangerous command blocklist (use with extreme caution)"
+        },
+        "timeout": {
+          "type": "number",
+          "description": "Execution timeout in milliseconds"
+        },
+        "workingDirectory": {
+          "type": "string",
+          "description": "Default working directory for command execution"
         }
       },
-      "required": [
-        "command"
-      ],
       "additionalProperties": false,
-      "description": "MCP Server configuration",
+      "description": "Bash command execution configuration for ProbeAgent Note: Use 'allowBash: true' in AIProviderConfig to enable bash execution",
       "patternProperties": {
         "^x-": {}
       }
@@ -532,6 +1202,10 @@
           "type": "string",
           "description": "Path to subagent script"
         },
+        "enableDelegate": {
+          "type": "boolean",
+          "description": "Enable the delegate tool for task distribution to subagents"
+        },
         "hooks": {
           "type": "object",
           "properties": {
@@ -572,10 +1246,6 @@
       },
       "description": "Environment variable reference configuration"
     },
-    "Record<string,unknown>": {
-      "type": "object",
-      "additionalProperties": {}
-    },
     "CustomTemplateConfig": {
       "type": "object",
       "properties": {
@@ -654,6 +1324,172 @@
       ],
       "description": "Failure condition severity levels"
     },
+    "OnInitConfig": {
+      "type": "object",
+      "properties": {
+        "run": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/OnInitRunItem"
+          },
+          "description": "Items to run before this check executes"
+        },
+        "run_js": {
+          "type": "string",
+          "description": "Dynamic init items: JS expression returning OnInitRunItem[]"
+        },
+        "transitions": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/TransitionRule"
+          },
+          "description": "Declarative transitions (optional, for advanced use cases)"
+        }
+      },
+      "additionalProperties": false,
+      "description": "Init routing configuration per check Runs BEFORE the check executes (preprocessing/setup)",
+      "patternProperties": {
+        "^x-": {}
+      }
+    },
+    "OnInitRunItem": {
+      "anyOf": [
+        {
+          "$ref": "#/definitions/OnInitToolInvocation"
+        },
+        {
+          "$ref": "#/definitions/OnInitStepInvocation"
+        },
+        {
+          "$ref": "#/definitions/OnInitWorkflowInvocation"
+        },
+        {
+          "type": "string"
+        }
+      ],
+      "description": "Unified on_init run item - can be tool, step, workflow, or plain string"
+    },
+    "OnInitToolInvocation": {
+      "type": "object",
+      "properties": {
+        "tool": {
+          "type": "string",
+          "description": "Tool name (must exist in tools: section)"
+        },
+        "with": {
+          "$ref": "#/definitions/Record%3Cstring%2Cunknown%3E",
+          "description": "Arguments to pass to the tool (Liquid templates supported)"
+        },
+        "as": {
+          "type": "string",
+          "description": "Custom output name (defaults to tool name)"
+        }
+      },
+      "required": [
+        "tool"
+      ],
+      "additionalProperties": false,
+      "description": "Invoke a custom tool (from tools: section)",
+      "patternProperties": {
+        "^x-": {}
+      }
+    },
+    "OnInitStepInvocation": {
+      "type": "object",
+      "properties": {
+        "step": {
+          "type": "string",
+          "description": "Step name (must exist in steps: section)"
+        },
+        "with": {
+          "$ref": "#/definitions/Record%3Cstring%2Cunknown%3E",
+          "description": "Arguments to pass to the step (Liquid templates supported)"
+        },
+        "as": {
+          "type": "string",
+          "description": "Custom output name (defaults to step name)"
+        }
+      },
+      "required": [
+        "step"
+      ],
+      "additionalProperties": false,
+      "description": "Invoke a helper step (regular check)",
+      "patternProperties": {
+        "^x-": {}
+      }
+    },
+    "OnInitWorkflowInvocation": {
+      "type": "object",
+      "properties": {
+        "workflow": {
+          "type": "string",
+          "description": "Workflow ID or path"
+        },
+        "with": {
+          "$ref": "#/definitions/Record%3Cstring%2Cunknown%3E",
+          "description": "Workflow inputs (Liquid templates supported)"
+        },
+        "as": {
+          "type": "string",
+          "description": "Custom output name (defaults to workflow name)"
+        },
+        "overrides": {
+          "$ref": "#/definitions/Record%3Cstring%2CPartial%3Cinterface-src_types_config.ts-11359-23556-src_types_config.ts-0-40845%3E%3E",
+          "description": "Step overrides"
+        },
+        "output_mapping": {
+          "$ref": "#/definitions/Record%3Cstring%2Cstring%3E",
+          "description": "Output mapping"
+        }
+      },
+      "required": [
+        "workflow"
+      ],
+      "additionalProperties": false,
+      "description": "Invoke a reusable workflow",
+      "patternProperties": {
+        "^x-": {}
+      }
+    },
+    "Record<string,Partial<interface-src_types_config.ts-11359-23556-src_types_config.ts-0-40845>>": {
+      "type": "object",
+      "additionalProperties": {
+        "$ref": "#/definitions/Partial%3Cinterface-src_types_config.ts-11359-23556-src_types_config.ts-0-40845%3E"
+      }
+    },
+    "Partial<interface-src_types_config.ts-11359-23556-src_types_config.ts-0-40845>": {
+      "type": "object",
+      "additionalProperties": false
+    },
+    "TransitionRule": {
+      "type": "object",
+      "properties": {
+        "when": {
+          "type": "string",
+          "description": "JavaScript expression evaluated in the same sandbox as goto_js; truthy enables the rule."
+        },
+        "to": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "description": "Target step ID, or null to explicitly prevent goto."
+        },
+        "goto_event": {
+          "$ref": "#/definitions/EventTrigger",
+          "description": "Optional event override when performing goto."
+        }
+      },
+      "required": [
+        "when"
+      ],
+      "additionalProperties": false,
+      "description": "Declarative transition rule for on_* blocks.",
+      "patternProperties": {
+        "^x-": {}
+      }
+    },
     "OnFailConfig": {
       "type": "object",
       "properties": {
@@ -683,6 +1519,13 @@
         "run_js": {
           "type": "string",
           "description": "Dynamic remediation list: JS expression returning string[]"
+        },
+        "transitions": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/TransitionRule"
+          },
+          "description": "Declarative transitions. Evaluated in order; first matching rule wins. If a rule's `to` is null, no goto occurs. When omitted or none match, the engine falls back to goto_js/goto for backward compatibility."
         }
       },
       "additionalProperties": false,
@@ -756,6 +1599,13 @@
         "run_js": {
           "type": "string",
           "description": "Dynamic post-success steps: JS expression returning string[]"
+        },
+        "transitions": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/TransitionRule"
+          },
+          "description": "Declarative transitions (see OnFailConfig.transitions)."
         }
       },
       "additionalProperties": false,
@@ -764,6 +1614,46 @@
         "^x-": {}
       }
     },
+    "OnFinishConfig": {
+      "type": "object",
+      "properties": {
+        "run": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Post-finish steps to run"
+        },
+        "goto": {
+          "type": "string",
+          "description": "Optional jump back to ancestor step (by id)"
+        },
+        "goto_event": {
+          "$ref": "#/definitions/EventTrigger",
+          "description": "Simulate a different event when performing goto (e.g., 'pr_updated')"
+        },
+        "goto_js": {
+          "type": "string",
+          "description": "Dynamic goto: JS expression returning step id or null"
+        },
+        "run_js": {
+          "type": "string",
+          "description": "Dynamic post-finish steps: JS expression returning string[]"
+        },
+        "transitions": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/TransitionRule"
+          },
+          "description": "Declarative transitions (see OnFailConfig.transitions)."
+        }
+      },
+      "additionalProperties": false,
+      "description": "Finish routing configuration for forEach checks Runs once after ALL iterations of forEach and ALL dependent checks complete",
+      "patternProperties": {
+        "^x-": {}
+      }
+    },
     "OutputConfig": {
       "type": "object",
       "properties": {
@@ -796,6 +1686,10 @@
     "PrCommentOutput": {
       "type": "object",
       "properties": {
+        "enabled": {
+          "type": "boolean",
+          "description": "Whether PR comments are enabled"
+        },
         "format": {
           "$ref": "#/definitions/ConfigOutputFormat",
           "description": "Format of the output"
@@ -1155,6 +2049,89 @@
       "patternProperties": {
         "^x-": {}
       }
+    },
+    "LimitsConfig": {
+      "type": "object",
+      "properties": {
+        "max_runs_per_check": {
+          "type": "number",
+          "description": "Maximum number of executions per check within a single engine run. Applies to each distinct scope independently for forEach item executions. Set to 0 or negative to disable. Default: 50."
+        },
+        "max_workflow_depth": {
+          "type": "number",
+          "description": "Maximum nesting depth for workflows executed by the state machine engine. Nested workflows are invoked by the workflow provider; this limit prevents accidental infinite recursion. Default: 3."
+        }
+      },
+      "additionalProperties": false,
+      "description": "Global engine limits",
+      "patternProperties": {
+        "^x-": {}
+      }
+    },
+    "WorkspaceConfig": {
+      "type": "object",
+      "properties": {
+        "enabled": {
+          "type": "boolean",
+          "description": "Enable workspace isolation (default: true when config present)"
+        },
+        "base_path": {
+          "type": "string",
+          "description": "Base path for workspaces (default: /tmp/visor-workspaces)"
+        },
+        "cleanup_on_exit": {
+          "type": "boolean",
+          "description": "Clean up workspace on exit (default: true)"
+        }
+      },
+      "additionalProperties": false,
+      "description": "Workspace isolation configuration",
+      "patternProperties": {
+        "^x-": {}
+      }
+    },
+    "SlackConfig": {
+      "type": "object",
+      "properties": {
+        "version": {
+          "type": "string",
+          "description": "Slack API version"
+        },
+        "mentions": {
+          "type": "string",
+          "description": "Mention handling: 'all', 'direct', etc."
+        },
+        "threads": {
+          "type": "string",
+          "description": "Thread handling: 'required', 'optional', etc."
+        },
+        "show_raw_output": {
+          "type": "boolean",
+          "description": "Show raw output in Slack responses"
+        },
+        "telemetry": {
+          "$ref": "#/definitions/SlackTelemetryConfig",
+          "description": "Append telemetry identifiers to Slack replies."
+        }
+      },
+      "additionalProperties": false,
+      "description": "Slack configuration",
+      "patternProperties": {
+        "^x-": {}
+      }
+    },
+    "SlackTelemetryConfig": {
+      "type": "object",
+      "properties": {
+        "enabled": {
+          "type": "boolean",
+          "description": "Enable telemetry ID suffix in Slack messages"
+        }
+      },
+      "additionalProperties": false,
+      "patternProperties": {
+        "^x-": {}
+      }
     }
   }
 }