@probelabs/visor 0.1.127 → 0.1.129

package/dist/sdk/{chunk-CNX7V5JK.mjs → chunk-25IC7KXZ.mjs}

@@ -1,6 +1,6 @@
 import {
   __esm
-} from "./chunk-WMJKH4XE.mjs";
+} from "./chunk-J7LXIPZS.mjs";
 
 // src/utils/author-permissions.ts
 function getPermissionLevel(association) {
@@ -86,4 +86,4 @@ export {
   resolveAssociationFromEvent,
   init_author_permissions
 };
-//# sourceMappingURL=chunk-CNX7V5JK.mjs.map
+//# sourceMappingURL=chunk-25IC7KXZ.mjs.map

package/dist/sdk/{chunk-IHZOSIF4.mjs → chunk-2KB35MB7.mjs}

@@ -1,11 +1,11 @@
 import {
   init_logger,
   logger
-} from "./chunk-3NMLT3YS.mjs";
+} from "./chunk-PO7X5XI7.mjs";
 import {
   __esm,
   __export
-} from "./chunk-WMJKH4XE.mjs";
+} from "./chunk-J7LXIPZS.mjs";
 
 // src/memory-store.ts
 var memory_store_exports = {};
@@ -479,4 +479,4 @@ export {
   memory_store_exports,
   init_memory_store
 };
-//# sourceMappingURL=chunk-IHZOSIF4.mjs.map
+//# sourceMappingURL=chunk-2KB35MB7.mjs.map

package/dist/sdk/{chunk-HQL734ZI.mjs → chunk-6W75IMDC.mjs}

@@ -1,10 +1,10 @@
 import {
   init_logger,
   logger
-} from "./chunk-3NMLT3YS.mjs";
+} from "./chunk-PO7X5XI7.mjs";
 import {
   __esm
-} from "./chunk-WMJKH4XE.mjs";
+} from "./chunk-J7LXIPZS.mjs";
 
 // src/slack/prompt-state.ts
 function getPromptStateManager(ttlMs) {
@@ -154,4 +154,4 @@ export {
   resetPromptStateManager,
   init_prompt_state
 };
-//# sourceMappingURL=chunk-HQL734ZI.mjs.map
+//# sourceMappingURL=chunk-6W75IMDC.mjs.map

package/dist/sdk/{chunk-XWJPT5KQ.mjs → chunk-7YSOINAQ.mjs}

@@ -2,21 +2,21 @@ import {
   ConfigMerger,
   config_merger_exports,
   init_config_merger
-} from "./chunk-O5EZDNYL.mjs";
+} from "./chunk-NCWIZVOT.mjs";
 import {
   init_sandbox,
   validateJsSyntax
-} from "./chunk-BOVFH3LI.mjs";
+} from "./chunk-VF6XIUE4.mjs";
 import {
   init_logger,
   logger
-} from "./chunk-3NMLT3YS.mjs";
+} from "./chunk-PO7X5XI7.mjs";
 import {
   __esm,
   __export,
   __require,
   __toCommonJS
-} from "./chunk-WMJKH4XE.mjs";
+} from "./chunk-J7LXIPZS.mjs";
 
 // src/utils/config-loader.ts
 import * as fs from "fs";
@@ -279,7 +279,7 @@ var init_config_loader = __esm({
           const parentConfig = await this.fetchConfig(source, this.loadedConfigs.size);
           parentConfigs.push(parentConfig);
         }
-        const { ConfigMerger: ConfigMerger2 } = await import("./config-merger-PX3WIT57.mjs");
+        const { ConfigMerger: ConfigMerger2 } = await import("./config-merger-RKCZJQ44.mjs");
         const merger = new ConfigMerger2();
         let mergedParents = {};
         for (const parentConfig of parentConfigs) {
@@ -564,6 +564,10 @@ var init_config_schema = __esm({
             slack: {
               $ref: "#/definitions/SlackConfig",
               description: "Slack configuration"
+            },
+            scheduler: {
+              $ref: "#/definitions/SchedulerConfig",
+              description: "Scheduler configuration for scheduled workflow execution"
             }
           },
           required: ["version"],
@@ -849,6 +853,10 @@ var init_config_schema = __esm({
               $ref: "#/definitions/Record%3Cstring%2CMcpServerConfig%3E",
               description: "MCP servers for this AI check - overrides global setting"
             },
+            ai_mcp_servers_js: {
+              type: "string",
+              description: 'JavaScript expression to dynamically compute MCP servers for this AI check. Expression has access to: outputs, inputs, pr, files, env, memory Must return an object mapping server names to McpServerConfig objects.\n\nExample: ``` const servers = {}; const tags = outputs[\'route-intent\']?.tags || []; if (tags.includes(\'jira\')) {   servers.jira = {     command: "npx",     args: ["-y", "@aashari/mcp-server-atlassian-jira"],     env: { ATLASSIAN_SITE_NAME: "mysite" }   }; } return servers; ```'
+            },
             ai_custom_tools: {
               type: "array",
               items: {
@@ -856,6 +864,10 @@ var init_config_schema = __esm({
               },
               description: "List of custom tool names to expose to this AI check via ephemeral SSE MCP server"
             },
+            ai_custom_tools_js: {
+              type: "string",
+              description: "JavaScript expression to dynamically compute custom tools for this AI check. Expression has access to: outputs, inputs, pr, files, env, memory Must return an array of tool names (strings) or WorkflowToolReference objects ({ workflow: string, args?: Record<string, unknown> })\n\nExample: ``` const tools = []; if (outputs['route-intent'].intent === 'engineer') {   tools.push({ workflow: 'engineer', args: { projects: ['tyk'] } }); } return tools; ```"
+            },
             claude_code: {
               $ref: "#/definitions/ClaudeCodeConfig",
               description: "Claude Code configuration (for claude-code type checks)"
@@ -1120,7 +1132,7 @@ var init_config_schema = __esm({
               description: "Arguments/inputs for the workflow"
             },
             overrides: {
-              $ref: "#/definitions/Record%3Cstring%2CPartial%3Cinterface-src_types_config.ts-11434-23754-src_types_config.ts-0-41453%3E%3E",
+              $ref: "#/definitions/Record%3Cstring%2CPartial%3Cinterface-src_types_config.ts-12605-26099-src_types_config.ts-0-46407%3E%3E",
               description: "Override specific step configurations in the workflow"
             },
             output_mapping: {
@@ -1136,7 +1148,7 @@ var init_config_schema = __esm({
               description: "Config file path - alternative to workflow ID (loads a Visor config file as workflow)"
             },
             workflow_overrides: {
-              $ref: "#/definitions/Record%3Cstring%2CPartial%3Cinterface-src_types_config.ts-11434-23754-src_types_config.ts-0-41453%3E%3E",
+              $ref: "#/definitions/Record%3Cstring%2CPartial%3Cinterface-src_types_config.ts-12605-26099-src_types_config.ts-0-46407%3E%3E",
               description: "Alias for overrides - workflow step overrides (backward compatibility)"
             },
             ref: {
@@ -1308,6 +1320,10 @@ var init_config_schema = __esm({
               type: "boolean",
               description: "Enable the delegate tool for task distribution to subagents"
             },
+            enableTasks: {
+              type: "boolean",
+              description: "Enable task management for tracking multi-goal requests"
+            },
             retry: {
               $ref: "#/definitions/AIRetryConfig",
               description: "Retry configuration for this provider"
@@ -1361,7 +1377,7 @@ var init_config_schema = __esm({
           properties: {
             command: {
               type: "string",
-              description: "Command to execute for the MCP server"
+              description: "Command to execute (presence indicates stdio server)"
             },
             args: {
               type: "array",
@@ -1373,11 +1389,45 @@ var init_config_schema = __esm({
             env: {
               $ref: "#/definitions/Record%3Cstring%2Cstring%3E",
               description: "Environment variables for the MCP server"
+            },
+            url: {
+              type: "string",
+              description: "URL endpoint (presence indicates external server)"
+            },
+            transport: {
+              type: "string",
+              enum: ["stdio", "sse", "http"],
+              description: "Transport type"
+            },
+            workflow: {
+              type: "string",
+              description: "Workflow ID or path (presence indicates workflow tool)"
+            },
+            inputs: {
+              $ref: "#/definitions/Record%3Cstring%2Cunknown%3E",
+              description: "Inputs to pass to workflow"
+            },
+            description: {
+              type: "string",
+              description: "Tool description for AI"
+            },
+            allowedMethods: {
+              type: "array",
+              items: {
+                type: "string"
+              },
+              description: 'Whitelist specific methods from this MCP server (supports wildcards like "search_*")'
+            },
+            blockedMethods: {
+              type: "array",
+              items: {
+                type: "string"
+              },
+              description: 'Block specific methods from this MCP server (supports wildcards like "*_delete")'
             }
           },
-          required: ["command"],
           additionalProperties: false,
-          description: "MCP Server configuration",
+          description: "Unified MCP server/tool entry - type detected by which properties are present\n\nDetection logic (priority order): 1. Has `command` \u2192 stdio MCP server (external process) 2. Has `url` \u2192 SSE/HTTP MCP server (external endpoint) 3. Has `workflow` \u2192 workflow tool reference 4. Empty `{}` or just key \u2192 auto-detect from `tools:` section",
           patternProperties: {
             "^x-": {}
           }
@@ -1770,7 +1820,7 @@ var init_config_schema = __esm({
               description: "Custom output name (defaults to workflow name)"
             },
             overrides: {
-              $ref: "#/definitions/Record%3Cstring%2CPartial%3Cinterface-src_types_config.ts-11434-23754-src_types_config.ts-0-41453%3E%3E",
+              $ref: "#/definitions/Record%3Cstring%2CPartial%3Cinterface-src_types_config.ts-12605-26099-src_types_config.ts-0-46407%3E%3E",
               description: "Step overrides"
             },
             output_mapping: {
@@ -1785,13 +1835,13 @@ var init_config_schema = __esm({
             "^x-": {}
           }
         },
-        "Record<string,Partial<interface-src_types_config.ts-11434-23754-src_types_config.ts-0-41453>>": {
+        "Record<string,Partial<interface-src_types_config.ts-12605-26099-src_types_config.ts-0-46407>>": {
           type: "object",
           additionalProperties: {
-            $ref: "#/definitions/Partial%3Cinterface-src_types_config.ts-11434-23754-src_types_config.ts-0-41453%3E"
+            $ref: "#/definitions/Partial%3Cinterface-src_types_config.ts-12605-26099-src_types_config.ts-0-46407%3E"
           }
         },
-        "Partial<interface-src_types_config.ts-11434-23754-src_types_config.ts-0-41453>": {
+        "Partial<interface-src_types_config.ts-12605-26099-src_types_config.ts-0-46407>": {
           type: "object",
           additionalProperties: false
         },
@@ -2431,6 +2481,177 @@ var init_config_schema = __esm({
           patternProperties: {
             "^x-": {}
           }
+        },
+        SchedulerConfig: {
+          type: "object",
+          properties: {
+            enabled: {
+              type: "boolean",
+              description: "Enable/disable the scheduler (default: true)"
+            },
+            storage: {
+              type: "object",
+              properties: {
+                path: {
+                  type: "string",
+                  description: "Path to schedules JSON file (default: .visor/schedules.json)"
+                }
+              },
+              additionalProperties: false,
+              description: "Storage configuration",
+              patternProperties: {
+                "^x-": {}
+              }
+            },
+            limits: {
+              $ref: "#/definitions/SchedulerLimitsConfig",
+              description: "Limits for dynamic schedules"
+            },
+            default_timezone: {
+              type: "string",
+              description: 'Default timezone (IANA format, e.g., "America/New_York")'
+            },
+            check_interval_ms: {
+              type: "number",
+              description: "Check interval in milliseconds (default: 60000)"
+            },
+            permissions: {
+              $ref: "#/definitions/SchedulerPermissionsConfig",
+              description: "Permissions for dynamic schedule creation (via AI tool)"
+            },
+            cron: {
+              $ref: "#/definitions/Record%3Cstring%2CStaticCronJob%3E",
+              description: "Static cron jobs defined in configuration (always executed)"
+            }
+          },
+          additionalProperties: false,
+          description: "Scheduler configuration for workflow scheduling",
+          patternProperties: {
+            "^x-": {}
+          }
+        },
+        SchedulerLimitsConfig: {
+          type: "object",
+          properties: {
+            max_per_user: {
+              type: "number",
+              description: "Maximum schedules per user (default: 25)"
+            },
+            max_recurring_per_user: {
+              type: "number",
+              description: "Maximum recurring schedules per user (default: 10)"
+            },
+            max_global: {
+              type: "number",
+              description: "Maximum total schedules (default: 1000)"
+            }
+          },
+          additionalProperties: false,
+          description: "Scheduler limits configuration",
+          patternProperties: {
+            "^x-": {}
+          }
+        },
+        SchedulerPermissionsConfig: {
+          type: "object",
+          properties: {
+            allow_personal: {
+              type: "boolean",
+              description: "Allow personal schedules (via DM or CLI)"
+            },
+            allow_channel: {
+              type: "boolean",
+              description: "Allow channel schedules (in Slack channels)"
+            },
+            allow_dm: {
+              type: "boolean",
+              description: "Allow DM schedules (to specific users)"
+            },
+            allowed_workflows: {
+              type: "array",
+              items: {
+                type: "string"
+              },
+              description: 'List of allowed workflow patterns (glob-style, e.g., "report-*")'
+            },
+            denied_workflows: {
+              type: "array",
+              items: {
+                type: "string"
+              },
+              description: "List of denied workflow patterns"
+            }
+          },
+          additionalProperties: false,
+          description: "Scheduler permissions for dynamic schedule creation",
+          patternProperties: {
+            "^x-": {}
+          }
+        },
+        "Record<string,StaticCronJob>": {
+          type: "object",
+          additionalProperties: {
+            $ref: "#/definitions/StaticCronJob"
+          }
+        },
+        StaticCronJob: {
+          type: "object",
+          properties: {
+            schedule: {
+              type: "string",
+              description: 'Cron expression (e.g., "0 9 * * 1" for every Monday at 9am)'
+            },
+            workflow: {
+              type: "string",
+              description: "Workflow/check ID to run"
+            },
+            inputs: {
+              $ref: "#/definitions/Record%3Cstring%2Cunknown%3E",
+              description: "Optional workflow inputs"
+            },
+            output: {
+              type: "object",
+              properties: {
+                type: {
+                  type: "string",
+                  enum: ["slack", "github", "webhook", "none"],
+                  description: "Output type: slack, github, webhook, or none"
+                },
+                target: {
+                  type: "string",
+                  description: "Target (channel name, repo, URL)"
+                },
+                thread_id: {
+                  type: "string",
+                  description: "Thread ID for threaded outputs"
+                }
+              },
+              required: ["type"],
+              additionalProperties: false,
+              description: "Output destination configuration",
+              patternProperties: {
+                "^x-": {}
+              }
+            },
+            description: {
+              type: "string",
+              description: "Description for logging/display"
+            },
+            enabled: {
+              type: "boolean",
+              description: "Enable/disable this job (default: true)"
+            },
+            timezone: {
+              type: "string",
+              description: "Timezone for schedule (default: UTC or scheduler default)"
+            }
+          },
+          required: ["schedule", "workflow"],
+          additionalProperties: false,
+          description: "Static cron job defined in YAML configuration These are always executed by the scheduler daemon",
+          patternProperties: {
+            "^x-": {}
+          }
         }
       }
     };
@@ -2781,7 +3002,7 @@ var init_config = __esm({
        * When a workflow YAML is run standalone, register the workflow and use its tests as checks
        */
       async convertWorkflowToConfig(workflowData, basePath) {
-        const { WorkflowRegistry } = await import("./workflow-registry-KFWSDSLM.mjs");
+        const { WorkflowRegistry } = await import("./workflow-registry-ZAYYXLEP.mjs");
         const registry = WorkflowRegistry.getInstance();
         const workflowId = workflowData.id;
         logger.info(`Detected standalone workflow file: ${workflowId}`);
@@ -2846,7 +3067,7 @@ ${errors}`);
         if (!config.imports || config.imports.length === 0) {
           return;
         }
-        const { WorkflowRegistry } = await import("./workflow-registry-KFWSDSLM.mjs");
+        const { WorkflowRegistry } = await import("./workflow-registry-ZAYYXLEP.mjs");
         const registry = WorkflowRegistry.getInstance();
         for (const source of config.imports) {
           const results = await registry.import(source, { basePath, validate: true });
@@ -3017,6 +3238,49 @@ ${errors}`);
             }
           }
         }
+        if (config.sandboxes) {
+          const sandboxNames = Object.keys(config.sandboxes);
+          for (const [sandboxName, sandboxConfig] of Object.entries(config.sandboxes)) {
+            this.validateSandboxConfig(sandboxName, sandboxConfig, errors);
+          }
+          if (config.sandbox && !sandboxNames.includes(config.sandbox)) {
+            errors.push({
+              field: "sandbox",
+              message: `Top-level sandbox '${config.sandbox}' not found in sandboxes definitions. Available: ${sandboxNames.join(", ")}`,
+              value: config.sandbox
+            });
+          }
+          if (checksToValidate) {
+            for (const [checkName, checkConfig] of Object.entries(checksToValidate)) {
+              if (checkConfig.sandbox && !sandboxNames.includes(checkConfig.sandbox)) {
+                errors.push({
+                  field: `checks.${checkName}.sandbox`,
+                  message: `Check '${checkName}' references sandbox '${checkConfig.sandbox}' which is not defined. Available: ${sandboxNames.join(", ")}`,
+                  value: checkConfig.sandbox
+                });
+              }
+            }
+          }
+        } else {
+          if (config.sandbox) {
+            errors.push({
+              field: "sandbox",
+              message: `Top-level sandbox '${config.sandbox}' is set but no sandboxes are defined`,
+              value: config.sandbox
+            });
+          }
+          if (checksToValidate) {
+            for (const [checkName, checkConfig] of Object.entries(checksToValidate)) {
+              if (checkConfig.sandbox) {
+                errors.push({
+                  field: `checks.${checkName}.sandbox`,
+                  message: `Check '${checkName}' references sandbox '${checkConfig.sandbox}' but no sandboxes are defined`,
+                  value: checkConfig.sandbox
+                });
+              }
+            }
+          }
+        }
         if (config.ai_mcp_servers) {
           this.validateMcpServersObject(config.ai_mcp_servers, "ai_mcp_servers", errors, warnings);
         }
@@ -3053,6 +3317,106 @@ ${errors}`);
           }
         }
       }
+      /**
+       * Validate sandbox configuration
+       */
+      validateSandboxConfig(name, config, errors) {
+        if (!/^[a-zA-Z0-9][a-zA-Z0-9._-]*$/.test(name)) {
+          errors.push({
+            field: `sandboxes.${name}`,
+            message: `Sandbox name '${name}' contains invalid characters. Only letters, numbers, dots, hyphens, underscores allowed.`
+          });
+        }
+        const modes = [
+          config.image ? "image" : null,
+          config.dockerfile || config.dockerfile_inline ? "dockerfile" : null,
+          config.compose ? "compose" : null
+        ].filter(Boolean);
+        if (modes.length === 0) {
+          errors.push({
+            field: `sandboxes.${name}`,
+            message: `Sandbox '${name}' must specify one of: image, dockerfile, dockerfile_inline, or compose`
+          });
+        } else if (modes.length > 1) {
+          errors.push({
+            field: `sandboxes.${name}`,
+            message: `Sandbox '${name}' has multiple modes (${modes.join(", ")}). Specify exactly one.`
+          });
+        }
+        if (config.compose && !config.service) {
+          errors.push({
+            field: `sandboxes.${name}.service`,
+            message: `Sandbox '${name}' uses compose mode but is missing required 'service' field`
+          });
+        }
+        if (config.dockerfile && /\.\./.test(config.dockerfile)) {
+          errors.push({
+            field: `sandboxes.${name}.dockerfile`,
+            message: `Dockerfile path '${config.dockerfile}' in sandbox '${name}' must not contain '..' path traversal`
+          });
+        }
+        if (config.compose && /\.\./.test(config.compose)) {
+          errors.push({
+            field: `sandboxes.${name}.compose`,
+            message: `Compose file path '${config.compose}' in sandbox '${name}' must not contain '..' path traversal`
+          });
+        }
+        if (config.workdir) {
+          if (!config.workdir.startsWith("/")) {
+            errors.push({
+              field: `sandboxes.${name}.workdir`,
+              message: `Workdir '${config.workdir}' in sandbox '${name}' must be an absolute path (start with /)`
+            });
+          }
+          if (/\.\./.test(config.workdir)) {
+            errors.push({
+              field: `sandboxes.${name}.workdir`,
+              message: `Workdir '${config.workdir}' in sandbox '${name}' must not contain '..' path traversal`
+            });
+          }
+        }
+        if (config.visor_path) {
+          if (!config.visor_path.startsWith("/")) {
+            errors.push({
+              field: `sandboxes.${name}.visor_path`,
+              message: `visor_path '${config.visor_path}' in sandbox '${name}' must be an absolute path (start with /)`
+            });
+          }
+          if (/\.\./.test(config.visor_path)) {
+            errors.push({
+              field: `sandboxes.${name}.visor_path`,
+              message: `visor_path '${config.visor_path}' in sandbox '${name}' must not contain '..' path traversal`
+            });
+          }
+        }
+        if (config.cache?.paths) {
+          for (const p of config.cache.paths) {
+            if (!p.startsWith("/")) {
+              errors.push({
+                field: `sandboxes.${name}.cache.paths`,
+                message: `Cache path '${p}' in sandbox '${name}' must be absolute (start with /)`,
+                value: p
+              });
+            }
+            if (/\.\./.test(p)) {
+              errors.push({
+                field: `sandboxes.${name}.cache.paths`,
+                message: `Cache path '${p}' in sandbox '${name}' must not contain '..' path traversal`,
+                value: p
+              });
+            }
+          }
+        }
+        if (config.resources?.cpu !== void 0) {
+          if (typeof config.resources.cpu !== "number" || config.resources.cpu <= 0) {
+            errors.push({
+              field: `sandboxes.${name}.resources.cpu`,
+              message: `CPU limit in sandbox '${name}' must be a positive number`,
+              value: config.resources.cpu
+            });
+          }
+        }
+      }
       /**
        * Validate individual check configuration
        */
@@ -3400,7 +3764,17 @@ ${errors}`);
                 const addl = e.params && e.params.additionalProperty || "unknown";
                 const fullField = pathStr ? `${pathStr}.${addl}` : addl;
                 const topLevel = !pathStr;
-                if (topLevel && (addl === "tests" || addl === "slack")) {
+                const allowedTopLevelKeys = /* @__PURE__ */ new Set([
+                  "tests",
+                  "slack",
+                  "sandboxes",
+                  "sandbox",
+                  "sandbox_defaults"
+                ]);
+                if (topLevel && allowedTopLevelKeys.has(addl)) {
+                  continue;
+                }
+                if (!topLevel && addl === "sandbox" && pathStr.match(/^(checks|steps)\.[^.]+$/)) {
                   continue;
                 }
                 warnings.push({
@@ -3605,4 +3979,4 @@ export {
   config_exports,
   init_config
 };
-//# sourceMappingURL=chunk-XWJPT5KQ.mjs.map
+//# sourceMappingURL=chunk-7YSOINAQ.mjs.map