@probelabs/visor 0.1.127 → 0.1.129

package/dist/sdk/sdk.d.mts

@@ -64,9 +64,63 @@ interface ReviewSummary {
 }
 
 /**
- * Types for Visor configuration system
+ * Types for Docker-based sandbox execution environments
  */
 
+/**
+ * Cache configuration for sandbox volumes
+ */
+interface SandboxCacheConfig {
+    /** Liquid template for cache scope prefix (default: git branch) */
+    prefix?: string;
+    /** Fallback prefix when current prefix has no cache */
+    fallback_prefix?: string;
+    /** Paths inside the container to cache */
+    paths: string[];
+    /** Time-to-live for cache volumes (e.g., "7d", "24h") */
+    ttl?: string;
+    /** Maximum number of cache scopes to keep */
+    max_scopes?: number;
+}
+/**
+ * Resource limits for sandbox containers
+ */
+interface SandboxResourceConfig {
+    /** Memory limit (e.g., "512m", "2g") */
+    memory?: string;
+    /** CPU limit (e.g., 1.0, 0.5) */
+    cpu?: number;
+}
+/**
+ * Configuration for a single sandbox environment
+ */
+interface SandboxConfig {
+    /** Docker image to use (e.g., "node:20-alpine") */
+    image?: string;
+    /** Path to Dockerfile (relative to config file or absolute) */
+    dockerfile?: string;
+    /** Inline Dockerfile content */
+    dockerfile_inline?: string;
+    /** Path to docker-compose file */
+    compose?: string;
+    /** Service name within the compose file */
+    service?: string;
+    /** Working directory inside container (default: /workspace) */
+    workdir?: string;
+    /** Glob patterns for host env vars to forward into sandbox */
+    env_passthrough?: string[];
+    /** Enable/disable network access (default: true) */
+    network?: boolean;
+    /** Mount repo as read-only (default: false) */
+    read_only?: boolean;
+    /** Resource limits */
+    resources?: SandboxResourceConfig;
+    /** Where visor is mounted inside container (default: /opt/visor) */
+    visor_path?: string;
+    /** Cache volume configuration */
+    cache?: SandboxCacheConfig;
+}
+
 /**
  * Failure condition severity levels
  */
@@ -250,6 +304,8 @@ interface AIProviderConfig {
     mcpServers?: Record<string, McpServerConfig>;
     /** Enable the delegate tool for task distribution to subagents */
     enableDelegate?: boolean;
+    /** Enable task management for tracking multi-goal requests */
+    enableTasks?: boolean;
     /** Retry configuration for this provider */
     retry?: AIRetryConfig;
     /** Fallback configuration for provider failures */
@@ -266,17 +322,39 @@ interface AIProviderConfig {
     bashConfig?: BashConfig;
     /** Completion prompt for post-completion validation/review (runs after attempt_completion) */
     completion_prompt?: string;
+    /** Enable the schedule tool for scheduling workflow executions (requires scheduler configuration) */
+    enable_scheduler?: boolean;
 }
 /**
- * MCP Server configuration
+ * Unified MCP server/tool entry - type detected by which properties are present
+ *
+ * Detection logic (priority order):
+ * 1. Has `command` → stdio MCP server (external process)
+ * 2. Has `url` → SSE/HTTP MCP server (external endpoint)
+ * 3. Has `workflow` → workflow tool reference
+ * 4. Empty `{}` or just key → auto-detect from `tools:` section
  */
 interface McpServerConfig {
-    /** Command to execute for the MCP server */
-    command: string;
+    /** Command to execute (presence indicates stdio server) */
+    command?: string;
     /** Arguments to pass to the command */
     args?: string[];
     /** Environment variables for the MCP server */
     env?: Record<string, string>;
+    /** URL endpoint (presence indicates external server) */
+    url?: string;
+    /** Transport type */
+    transport?: 'stdio' | 'sse' | 'http';
+    /** Workflow ID or path (presence indicates workflow tool) */
+    workflow?: string;
+    /** Inputs to pass to workflow */
+    inputs?: Record<string, unknown>;
+    /** Tool description for AI */
+    description?: string;
+    /** Whitelist specific methods from this MCP server (supports wildcards like "search_*") */
+    allowedMethods?: string[];
+    /** Block specific methods from this MCP server (supports wildcards like "*_delete") */
+    blockedMethods?: string[];
 }
 /**
  * Claude Code configuration
@@ -362,8 +440,44 @@ interface CheckConfig {
     ai_custom_prompt?: string;
     /** MCP servers for this AI check - overrides global setting */
     ai_mcp_servers?: Record<string, McpServerConfig>;
+    /**
+     * JavaScript expression to dynamically compute MCP servers for this AI check.
+     * Expression has access to: outputs, inputs, pr, files, env, memory
+     * Must return an object mapping server names to McpServerConfig objects.
+     *
+     * Example:
+     * ```
+     * const servers = {};
+     * const tags = outputs['route-intent']?.tags || [];
+     * if (tags.includes('jira')) {
+     *   servers.jira = {
+     *     command: "npx",
+     *     args: ["-y", "@aashari/mcp-server-atlassian-jira"],
+     *     env: { ATLASSIAN_SITE_NAME: "mysite" }
+     *   };
+     * }
+     * return servers;
+     * ```
+     */
+    ai_mcp_servers_js?: string;
     /** List of custom tool names to expose to this AI check via ephemeral SSE MCP server */
     ai_custom_tools?: string[];
+    /**
+     * JavaScript expression to dynamically compute custom tools for this AI check.
+     * Expression has access to: outputs, inputs, pr, files, env, memory
+     * Must return an array of tool names (strings) or WorkflowToolReference objects
+     * ({ workflow: string, args?: Record<string, unknown> })
+     *
+     * Example:
+     * ```
+     * const tools = [];
+     * if (outputs['route-intent'].intent === 'engineer') {
+     *   tools.push({ workflow: 'engineer', args: { projects: ['tyk'] } });
+     * }
+     * return tools;
+     * ```
+     */
+    ai_custom_tools_js?: string;
     /** Claude Code configuration (for claude-code type checks) */
     claude_code?: ClaudeCodeConfig;
     /** Environment variables for this check */
@@ -566,6 +680,8 @@ interface CheckConfig {
     cleanup_on_failure?: boolean;
     /** Keep worktree after workflow completion (default: false) */
     persist_worktree?: boolean;
+    /** Sandbox name to use for this check (overrides workspace-level default) */
+    sandbox?: string;
 }
 /**
  * Backoff policy for retries
@@ -968,6 +1084,85 @@ interface WorkflowOutput {
     /** Value using JavaScript expression (alternative to value) */
     value_js?: string;
 }
+interface SandboxDefaults {
+    /** Base env var patterns for all sandboxes (replaces hardcoded defaults when set) */
+    env_passthrough?: string[];
+}
+/**
+ * Static cron job defined in YAML configuration
+ * These are always executed by the scheduler daemon
+ */
+interface StaticCronJob {
+    /** Cron expression (e.g., "0 9 * * 1" for every Monday at 9am) */
+    schedule: string;
+    /** Workflow/check ID to run */
+    workflow: string;
+    /** Optional workflow inputs */
+    inputs?: Record<string, unknown>;
+    /** Output destination configuration */
+    output?: {
+        /** Output type: slack, github, webhook, or none */
+        type: 'slack' | 'github' | 'webhook' | 'none';
+        /** Target (channel name, repo, URL) */
+        target?: string;
+        /** Thread ID for threaded outputs */
+        thread_id?: string;
+    };
+    /** Description for logging/display */
+    description?: string;
+    /** Enable/disable this job (default: true) */
+    enabled?: boolean;
+    /** Timezone for schedule (default: UTC or scheduler default) */
+    timezone?: string;
+}
+/**
+ * Scheduler limits configuration
+ */
+interface SchedulerLimitsConfig {
+    /** Maximum schedules per user (default: 25) */
+    max_per_user?: number;
+    /** Maximum recurring schedules per user (default: 10) */
+    max_recurring_per_user?: number;
+    /** Maximum total schedules (default: 1000) */
+    max_global?: number;
+}
+/**
+ * Scheduler permissions for dynamic schedule creation
+ */
+interface SchedulerPermissionsConfig {
+    /** Allow personal schedules (via DM or CLI) */
+    allow_personal?: boolean;
+    /** Allow channel schedules (in Slack channels) */
+    allow_channel?: boolean;
+    /** Allow DM schedules (to specific users) */
+    allow_dm?: boolean;
+    /** List of allowed workflow patterns (glob-style, e.g., "report-*") */
+    allowed_workflows?: string[];
+    /** List of denied workflow patterns */
+    denied_workflows?: string[];
+}
+/**
+ * Scheduler configuration for workflow scheduling
+ */
+interface SchedulerConfig {
+    /** Enable/disable the scheduler (default: true) */
+    enabled?: boolean;
+    /** Storage configuration */
+    storage?: {
+        /** Path to schedules JSON file (default: .visor/schedules.json) */
+        path?: string;
+    };
+    /** Limits for dynamic schedules */
+    limits?: SchedulerLimitsConfig;
+    /** Default timezone (IANA format, e.g., "America/New_York") */
+    default_timezone?: string;
+    /** Check interval in milliseconds (default: 60000) */
+    check_interval_ms?: number;
+    /** Permissions for dynamic schedule creation (via AI tool) */
+    permissions?: SchedulerPermissionsConfig;
+    /** Static cron jobs defined in configuration (always executed) */
+    cron?: Record<string, StaticCronJob>;
+}
 /**
  * Main Visor configuration
  */
@@ -1029,8 +1224,16 @@ interface VisorConfig {
     }>;
     /** Workspace isolation configuration for sandboxed execution */
     workspace?: WorkspaceConfig;
+    /** Workspace-level default sandbox name (all checks use this unless overridden) */
+    sandbox?: string;
+    /** Named sandbox environment definitions */
+    sandboxes?: Record<string, SandboxConfig>;
+    /** Workspace-level sandbox defaults (env allowlist, etc.) */
+    sandbox_defaults?: SandboxDefaults;
     /** Slack configuration */
     slack?: SlackConfig;
+    /** Scheduler configuration for scheduled workflow execution */
+    scheduler?: SchedulerConfig;
 }
 /**
  * Workspace isolation configuration
@@ -1258,6 +1461,11 @@ interface ExecutionContext {
         webhookData?: Map<string, unknown>;
         eventType?: string;
     };
+    /**
+     * Callback for capturing AI responses - used by scheduler to store previousResponse
+     * for recurring reminders. The text passed is the AI response before mrkdwn formatting.
+     */
+    responseCapture?: (text: string) => void;
 }
 
 interface VisorOptions {

package/dist/sdk/sdk.d.ts

@@ -64,9 +64,63 @@ interface ReviewSummary {
 }
 
 /**
- * Types for Visor configuration system
+ * Types for Docker-based sandbox execution environments
  */
 
+/**
+ * Cache configuration for sandbox volumes
+ */
+interface SandboxCacheConfig {
+    /** Liquid template for cache scope prefix (default: git branch) */
+    prefix?: string;
+    /** Fallback prefix when current prefix has no cache */
+    fallback_prefix?: string;
+    /** Paths inside the container to cache */
+    paths: string[];
+    /** Time-to-live for cache volumes (e.g., "7d", "24h") */
+    ttl?: string;
+    /** Maximum number of cache scopes to keep */
+    max_scopes?: number;
+}
+/**
+ * Resource limits for sandbox containers
+ */
+interface SandboxResourceConfig {
+    /** Memory limit (e.g., "512m", "2g") */
+    memory?: string;
+    /** CPU limit (e.g., 1.0, 0.5) */
+    cpu?: number;
+}
+/**
+ * Configuration for a single sandbox environment
+ */
+interface SandboxConfig {
+    /** Docker image to use (e.g., "node:20-alpine") */
+    image?: string;
+    /** Path to Dockerfile (relative to config file or absolute) */
+    dockerfile?: string;
+    /** Inline Dockerfile content */
+    dockerfile_inline?: string;
+    /** Path to docker-compose file */
+    compose?: string;
+    /** Service name within the compose file */
+    service?: string;
+    /** Working directory inside container (default: /workspace) */
+    workdir?: string;
+    /** Glob patterns for host env vars to forward into sandbox */
+    env_passthrough?: string[];
+    /** Enable/disable network access (default: true) */
+    network?: boolean;
+    /** Mount repo as read-only (default: false) */
+    read_only?: boolean;
+    /** Resource limits */
+    resources?: SandboxResourceConfig;
+    /** Where visor is mounted inside container (default: /opt/visor) */
+    visor_path?: string;
+    /** Cache volume configuration */
+    cache?: SandboxCacheConfig;
+}
+
 /**
  * Failure condition severity levels
  */
@@ -250,6 +304,8 @@ interface AIProviderConfig {
     mcpServers?: Record<string, McpServerConfig>;
     /** Enable the delegate tool for task distribution to subagents */
     enableDelegate?: boolean;
+    /** Enable task management for tracking multi-goal requests */
+    enableTasks?: boolean;
     /** Retry configuration for this provider */
     retry?: AIRetryConfig;
     /** Fallback configuration for provider failures */
@@ -266,17 +322,39 @@ interface AIProviderConfig {
     bashConfig?: BashConfig;
     /** Completion prompt for post-completion validation/review (runs after attempt_completion) */
     completion_prompt?: string;
+    /** Enable the schedule tool for scheduling workflow executions (requires scheduler configuration) */
+    enable_scheduler?: boolean;
 }
 /**
- * MCP Server configuration
+ * Unified MCP server/tool entry - type detected by which properties are present
+ *
+ * Detection logic (priority order):
+ * 1. Has `command` → stdio MCP server (external process)
+ * 2. Has `url` → SSE/HTTP MCP server (external endpoint)
+ * 3. Has `workflow` → workflow tool reference
+ * 4. Empty `{}` or just key → auto-detect from `tools:` section
  */
 interface McpServerConfig {
-    /** Command to execute for the MCP server */
-    command: string;
+    /** Command to execute (presence indicates stdio server) */
+    command?: string;
     /** Arguments to pass to the command */
     args?: string[];
     /** Environment variables for the MCP server */
     env?: Record<string, string>;
+    /** URL endpoint (presence indicates external server) */
+    url?: string;
+    /** Transport type */
+    transport?: 'stdio' | 'sse' | 'http';
+    /** Workflow ID or path (presence indicates workflow tool) */
+    workflow?: string;
+    /** Inputs to pass to workflow */
+    inputs?: Record<string, unknown>;
+    /** Tool description for AI */
+    description?: string;
+    /** Whitelist specific methods from this MCP server (supports wildcards like "search_*") */
+    allowedMethods?: string[];
+    /** Block specific methods from this MCP server (supports wildcards like "*_delete") */
+    blockedMethods?: string[];
 }
 /**
  * Claude Code configuration
@@ -362,8 +440,44 @@ interface CheckConfig {
     ai_custom_prompt?: string;
     /** MCP servers for this AI check - overrides global setting */
     ai_mcp_servers?: Record<string, McpServerConfig>;
+    /**
+     * JavaScript expression to dynamically compute MCP servers for this AI check.
+     * Expression has access to: outputs, inputs, pr, files, env, memory
+     * Must return an object mapping server names to McpServerConfig objects.
+     *
+     * Example:
+     * ```
+     * const servers = {};
+     * const tags = outputs['route-intent']?.tags || [];
+     * if (tags.includes('jira')) {
+     *   servers.jira = {
+     *     command: "npx",
+     *     args: ["-y", "@aashari/mcp-server-atlassian-jira"],
+     *     env: { ATLASSIAN_SITE_NAME: "mysite" }
+     *   };
+     * }
+     * return servers;
+     * ```
+     */
+    ai_mcp_servers_js?: string;
     /** List of custom tool names to expose to this AI check via ephemeral SSE MCP server */
     ai_custom_tools?: string[];
+    /**
+     * JavaScript expression to dynamically compute custom tools for this AI check.
+     * Expression has access to: outputs, inputs, pr, files, env, memory
+     * Must return an array of tool names (strings) or WorkflowToolReference objects
+     * ({ workflow: string, args?: Record<string, unknown> })
+     *
+     * Example:
+     * ```
+     * const tools = [];
+     * if (outputs['route-intent'].intent === 'engineer') {
+     *   tools.push({ workflow: 'engineer', args: { projects: ['tyk'] } });
+     * }
+     * return tools;
+     * ```
+     */
+    ai_custom_tools_js?: string;
     /** Claude Code configuration (for claude-code type checks) */
     claude_code?: ClaudeCodeConfig;
     /** Environment variables for this check */
@@ -566,6 +680,8 @@ interface CheckConfig {
     cleanup_on_failure?: boolean;
     /** Keep worktree after workflow completion (default: false) */
     persist_worktree?: boolean;
+    /** Sandbox name to use for this check (overrides workspace-level default) */
+    sandbox?: string;
 }
 /**
  * Backoff policy for retries
@@ -968,6 +1084,85 @@ interface WorkflowOutput {
     /** Value using JavaScript expression (alternative to value) */
     value_js?: string;
 }
+interface SandboxDefaults {
+    /** Base env var patterns for all sandboxes (replaces hardcoded defaults when set) */
+    env_passthrough?: string[];
+}
+/**
+ * Static cron job defined in YAML configuration
+ * These are always executed by the scheduler daemon
+ */
+interface StaticCronJob {
+    /** Cron expression (e.g., "0 9 * * 1" for every Monday at 9am) */
+    schedule: string;
+    /** Workflow/check ID to run */
+    workflow: string;
+    /** Optional workflow inputs */
+    inputs?: Record<string, unknown>;
+    /** Output destination configuration */
+    output?: {
+        /** Output type: slack, github, webhook, or none */
+        type: 'slack' | 'github' | 'webhook' | 'none';
+        /** Target (channel name, repo, URL) */
+        target?: string;
+        /** Thread ID for threaded outputs */
+        thread_id?: string;
+    };
+    /** Description for logging/display */
+    description?: string;
+    /** Enable/disable this job (default: true) */
+    enabled?: boolean;
+    /** Timezone for schedule (default: UTC or scheduler default) */
+    timezone?: string;
+}
+/**
+ * Scheduler limits configuration
+ */
+interface SchedulerLimitsConfig {
+    /** Maximum schedules per user (default: 25) */
+    max_per_user?: number;
+    /** Maximum recurring schedules per user (default: 10) */
+    max_recurring_per_user?: number;
+    /** Maximum total schedules (default: 1000) */
+    max_global?: number;
+}
+/**
+ * Scheduler permissions for dynamic schedule creation
+ */
+interface SchedulerPermissionsConfig {
+    /** Allow personal schedules (via DM or CLI) */
+    allow_personal?: boolean;
+    /** Allow channel schedules (in Slack channels) */
+    allow_channel?: boolean;
+    /** Allow DM schedules (to specific users) */
+    allow_dm?: boolean;
+    /** List of allowed workflow patterns (glob-style, e.g., "report-*") */
+    allowed_workflows?: string[];
+    /** List of denied workflow patterns */
+    denied_workflows?: string[];
+}
+/**
+ * Scheduler configuration for workflow scheduling
+ */
+interface SchedulerConfig {
+    /** Enable/disable the scheduler (default: true) */
+    enabled?: boolean;
+    /** Storage configuration */
+    storage?: {
+        /** Path to schedules JSON file (default: .visor/schedules.json) */
+        path?: string;
+    };
+    /** Limits for dynamic schedules */
+    limits?: SchedulerLimitsConfig;
+    /** Default timezone (IANA format, e.g., "America/New_York") */
+    default_timezone?: string;
+    /** Check interval in milliseconds (default: 60000) */
+    check_interval_ms?: number;
+    /** Permissions for dynamic schedule creation (via AI tool) */
+    permissions?: SchedulerPermissionsConfig;
+    /** Static cron jobs defined in configuration (always executed) */
+    cron?: Record<string, StaticCronJob>;
+}
 /**
  * Main Visor configuration
  */
@@ -1029,8 +1224,16 @@ interface VisorConfig {
     }>;
     /** Workspace isolation configuration for sandboxed execution */
     workspace?: WorkspaceConfig;
+    /** Workspace-level default sandbox name (all checks use this unless overridden) */
+    sandbox?: string;
+    /** Named sandbox environment definitions */
+    sandboxes?: Record<string, SandboxConfig>;
+    /** Workspace-level sandbox defaults (env allowlist, etc.) */
+    sandbox_defaults?: SandboxDefaults;
     /** Slack configuration */
     slack?: SlackConfig;
+    /** Scheduler configuration for scheduled workflow execution */
+    scheduler?: SchedulerConfig;
 }
 /**
  * Workspace isolation configuration
@@ -1258,6 +1461,11 @@ interface ExecutionContext {
         webhookData?: Map<string, unknown>;
         eventType?: string;
     };
+    /**
+     * Callback for capturing AI responses - used by scheduler to store previousResponse
+     * for recurring reminders. The text passed is the AI response before mrkdwn formatting.
+     */
+    responseCapture?: (text: string) => void;
 }
 
 interface VisorOptions {