@probelabs/visor 0.1.129 → 0.1.130

package/dist/sdk/{chunk-2KB35MB7.mjs → chunk-VPC3QSPW.mjs}

@@ -1,7 +1,7 @@
 import {
   init_logger,
   logger
-} from "./chunk-PO7X5XI7.mjs";
+} from "./chunk-SZXICFQ3.mjs";
 import {
   __esm,
   __export
@@ -479,4 +479,4 @@ export {
   memory_store_exports,
   init_memory_store
 };
-//# sourceMappingURL=chunk-2KB35MB7.mjs.map
+//# sourceMappingURL=chunk-VPC3QSPW.mjs.map

package/dist/sdk/{chunk-J5RGJQ53.mjs → chunk-YJRBN3XS.mjs}

@@ -3,7 +3,7 @@ import {
   context,
   init_lazy_otel,
   trace
-} from "./chunk-HEX3RL32.mjs";
+} from "./chunk-UCMJJ3IM.mjs";
 import {
   __esm,
   __export,
@@ -214,4 +214,4 @@ export {
   trace_helpers_exports,
   init_trace_helpers
 };
-//# sourceMappingURL=chunk-J5RGJQ53.mjs.map
+//# sourceMappingURL=chunk-YJRBN3XS.mjs.map

package/dist/sdk/{command-executor-DVVXERLR.mjs → command-executor-TOYBBE7S.mjs}

@@ -2,13 +2,13 @@ import {
   CommandExecutor,
   commandExecutor,
   init_command_executor
-} from "./chunk-XDLQ3UNF.mjs";
-import "./chunk-PO7X5XI7.mjs";
-import "./chunk-HEX3RL32.mjs";
+} from "./chunk-GEW6LS32.mjs";
+import "./chunk-SZXICFQ3.mjs";
+import "./chunk-UCMJJ3IM.mjs";
 import "./chunk-J7LXIPZS.mjs";
 init_command_executor();
 export {
   CommandExecutor,
   commandExecutor
 };
-//# sourceMappingURL=command-executor-DVVXERLR.mjs.map
+//# sourceMappingURL=command-executor-TOYBBE7S.mjs.map

package/dist/sdk/{config-7VTT64SQ.mjs → config-OGOS4ZU4.mjs}

@@ -2,15 +2,15 @@ import {
   ConfigManager,
   VALID_EVENT_TRIGGERS,
   init_config
-} from "./chunk-7YSOINAQ.mjs";
+} from "./chunk-UCNT3PDT.mjs";
 import "./chunk-NCWIZVOT.mjs";
 import "./chunk-VF6XIUE4.mjs";
-import "./chunk-PO7X5XI7.mjs";
-import "./chunk-HEX3RL32.mjs";
+import "./chunk-SZXICFQ3.mjs";
+import "./chunk-UCMJJ3IM.mjs";
 import "./chunk-J7LXIPZS.mjs";
 init_config();
 export {
   ConfigManager,
   VALID_EVENT_TRIGGERS
 };
-//# sourceMappingURL=config-7VTT64SQ.mjs.map
+//# sourceMappingURL=config-OGOS4ZU4.mjs.map

package/dist/sdk/failure-condition-evaluator-HC3M5377.mjs

@@ -0,0 +1,17 @@
+import {
+  FailureConditionEvaluator,
+  init_failure_condition_evaluator
+} from "./chunk-HOKQOO3G.mjs";
+import "./chunk-YJRBN3XS.mjs";
+import "./chunk-JL7JXCET.mjs";
+import "./chunk-25IC7KXZ.mjs";
+import "./chunk-VF6XIUE4.mjs";
+import "./chunk-VPC3QSPW.mjs";
+import "./chunk-SZXICFQ3.mjs";
+import "./chunk-UCMJJ3IM.mjs";
+import "./chunk-J7LXIPZS.mjs";
+init_failure_condition_evaluator();
+export {
+  FailureConditionEvaluator
+};
+//# sourceMappingURL=failure-condition-evaluator-HC3M5377.mjs.map

package/dist/sdk/{github-frontend-3N2NLO66.mjs → github-frontend-E2KJSC3Y.mjs}

@@ -9,17 +9,17 @@ import {
 import {
   failure_condition_evaluator_exports,
   init_failure_condition_evaluator
-} from "./chunk-N7HO6KKC.mjs";
-import "./chunk-J5RGJQ53.mjs";
-import "./chunk-XR7XXGL7.mjs";
+} from "./chunk-HOKQOO3G.mjs";
+import "./chunk-YJRBN3XS.mjs";
+import "./chunk-JL7JXCET.mjs";
 import "./chunk-25IC7KXZ.mjs";
 import "./chunk-VF6XIUE4.mjs";
-import "./chunk-2KB35MB7.mjs";
+import "./chunk-VPC3QSPW.mjs";
 import {
   init_logger,
   logger
-} from "./chunk-PO7X5XI7.mjs";
-import "./chunk-HEX3RL32.mjs";
+} from "./chunk-SZXICFQ3.mjs";
+import "./chunk-UCMJJ3IM.mjs";
 import {
   __esm,
   __export,
@@ -1353,4 +1353,4 @@ init_github_frontend();
 export {
   GitHubFrontend
 };
-//# sourceMappingURL=github-frontend-3N2NLO66.mjs.map
+//# sourceMappingURL=github-frontend-E2KJSC3Y.mjs.map

package/dist/sdk/{host-ONVMEHAA.mjs → host-EE6EJ2FM.mjs}

@@ -21,13 +21,13 @@ var init_host = __esm({
             const { NdjsonSink } = await import("./ndjson-sink-FD2PSXGD.mjs");
             this.frontends.push(new NdjsonSink(spec.config));
           } else if (spec.name === "github") {
-            const { GitHubFrontend } = await import("./github-frontend-3N2NLO66.mjs");
+            const { GitHubFrontend } = await import("./github-frontend-E2KJSC3Y.mjs");
             this.frontends.push(new GitHubFrontend());
           } else if (spec.name === "slack") {
-            const { SlackFrontend } = await import("./slack-frontend-R3M2CACB.mjs");
+            const { SlackFrontend } = await import("./slack-frontend-LAY45IBR.mjs");
             this.frontends.push(new SlackFrontend(spec.config));
           } else if (spec.name === "tui") {
-            const { TuiFrontend } = await import("./tui-frontend-S546M7A7.mjs");
+            const { TuiFrontend } = await import("./tui-frontend-T56PZB67.mjs");
             this.frontends.push(new TuiFrontend(spec.config));
           } else {
             this.log.warn(`[FrontendsHost] Unknown frontend '${spec.name}', skipping`);
@@ -60,4 +60,4 @@ init_host();
 export {
   FrontendsHost
 };
-//# sourceMappingURL=host-ONVMEHAA.mjs.map
+//# sourceMappingURL=host-EE6EJ2FM.mjs.map

package/dist/sdk/lazy-otel-5NH4ZJJM.mjs

@@ -0,0 +1,24 @@
+import {
+  DiagConsoleLogger,
+  DiagLogLevel,
+  SpanKind,
+  SpanStatusCode,
+  context,
+  diag,
+  init_lazy_otel,
+  metrics,
+  trace
+} from "./chunk-UCMJJ3IM.mjs";
+import "./chunk-J7LXIPZS.mjs";
+init_lazy_otel();
+export {
+  DiagConsoleLogger,
+  DiagLogLevel,
+  SpanKind,
+  SpanStatusCode,
+  context,
+  diag,
+  metrics,
+  trace
+};
+//# sourceMappingURL=lazy-otel-5NH4ZJJM.mjs.map

package/dist/sdk/{liquid-extensions-5IZLTFSZ.mjs → liquid-extensions-E4EUOCES.mjs}

@@ -6,12 +6,12 @@ import {
   sanitizeLabel,
   sanitizeLabelList,
   withPermissionsContext
-} from "./chunk-R5Z7YWPB.mjs";
+} from "./chunk-V2IV3ILA.mjs";
 import "./chunk-25IC7KXZ.mjs";
 import "./chunk-VF6XIUE4.mjs";
-import "./chunk-2KB35MB7.mjs";
-import "./chunk-PO7X5XI7.mjs";
-import "./chunk-HEX3RL32.mjs";
+import "./chunk-VPC3QSPW.mjs";
+import "./chunk-SZXICFQ3.mjs";
+import "./chunk-UCMJJ3IM.mjs";
 import "./chunk-J7LXIPZS.mjs";
 init_liquid_extensions();
 export {
@@ -22,4 +22,4 @@ export {
   sanitizeLabelList,
   withPermissionsContext
 };
-//# sourceMappingURL=liquid-extensions-5IZLTFSZ.mjs.map
+//# sourceMappingURL=liquid-extensions-E4EUOCES.mjs.map

package/dist/sdk/memory-store-AAPL2MTE.mjs

@@ -0,0 +1,12 @@
+import {
+  MemoryStore,
+  init_memory_store
+} from "./chunk-VPC3QSPW.mjs";
+import "./chunk-SZXICFQ3.mjs";
+import "./chunk-UCMJJ3IM.mjs";
+import "./chunk-J7LXIPZS.mjs";
+init_memory_store();
+export {
+  MemoryStore
+};
+//# sourceMappingURL=memory-store-AAPL2MTE.mjs.map

package/dist/sdk/{metrics-GXQ2EDXA.mjs → metrics-I6A7IHG4.mjs}

@@ -10,8 +10,8 @@ import {
   recordForEachDuration,
   recordProviderDuration,
   resetTestMetricsSnapshot
-} from "./chunk-XR7XXGL7.mjs";
-import "./chunk-HEX3RL32.mjs";
+} from "./chunk-JL7JXCET.mjs";
+import "./chunk-UCMJJ3IM.mjs";
 import "./chunk-J7LXIPZS.mjs";
 init_metrics();
 export {
@@ -26,4 +26,4 @@ export {
   recordProviderDuration,
   resetTestMetricsSnapshot
 };
-//# sourceMappingURL=metrics-GXQ2EDXA.mjs.map
+//# sourceMappingURL=metrics-I6A7IHG4.mjs.map

package/dist/sdk/{prompt-state-YHGXB2OA.mjs → prompt-state-VAKKC773.mjs}

@@ -3,9 +3,9 @@ import {
   getPromptStateManager,
   init_prompt_state,
   resetPromptStateManager
-} from "./chunk-6W75IMDC.mjs";
-import "./chunk-PO7X5XI7.mjs";
-import "./chunk-HEX3RL32.mjs";
+} from "./chunk-LG4AUKHB.mjs";
+import "./chunk-SZXICFQ3.mjs";
+import "./chunk-UCMJJ3IM.mjs";
 import "./chunk-J7LXIPZS.mjs";
 init_prompt_state();
 export {
@@ -13,4 +13,4 @@ export {
   getPromptStateManager,
   resetPromptStateManager
 };
-//# sourceMappingURL=prompt-state-YHGXB2OA.mjs.map
+//# sourceMappingURL=prompt-state-VAKKC773.mjs.map

package/dist/sdk/{renderer-schema-CMXOLNIG.mjs → renderer-schema-HXEW6BRJ.mjs}

@@ -1,8 +1,8 @@
 import {
   init_logger,
   logger
-} from "./chunk-PO7X5XI7.mjs";
-import "./chunk-HEX3RL32.mjs";
+} from "./chunk-SZXICFQ3.mjs";
+import "./chunk-UCMJJ3IM.mjs";
 import {
   __esm
 } from "./chunk-J7LXIPZS.mjs";
@@ -48,4 +48,4 @@ init_renderer_schema();
 export {
   loadRendererSchema
 };
-//# sourceMappingURL=renderer-schema-CMXOLNIG.mjs.map
+//# sourceMappingURL=renderer-schema-HXEW6BRJ.mjs.map

package/dist/sdk/{routing-S3Y7T2X3.mjs → routing-OZQWAGAI.mjs}

@@ -4,15 +4,16 @@ import {
   evaluateTransitions,
   handleRouting,
   init_routing
-} from "./chunk-SGS2VMEL.mjs";
-import "./chunk-N7HO6KKC.mjs";
-import "./chunk-J5RGJQ53.mjs";
-import "./chunk-XR7XXGL7.mjs";
+} from "./chunk-VMLORODQ.mjs";
+import "./chunk-HOKQOO3G.mjs";
+import "./chunk-YJRBN3XS.mjs";
+import "./chunk-JL7JXCET.mjs";
+import "./chunk-V2IV3ILA.mjs";
 import "./chunk-25IC7KXZ.mjs";
 import "./chunk-VF6XIUE4.mjs";
-import "./chunk-2KB35MB7.mjs";
-import "./chunk-PO7X5XI7.mjs";
-import "./chunk-HEX3RL32.mjs";
+import "./chunk-VPC3QSPW.mjs";
+import "./chunk-SZXICFQ3.mjs";
+import "./chunk-UCMJJ3IM.mjs";
 import "./chunk-J7LXIPZS.mjs";
 init_routing();
 export {
@@ -21,4 +22,4 @@ export {
   evaluateTransitions,
   handleRouting
 };
-//# sourceMappingURL=routing-S3Y7T2X3.mjs.map
+//# sourceMappingURL=routing-OZQWAGAI.mjs.map

package/dist/sdk/schedule-tool-handler-B7TMSG6A.mjs

@@ -0,0 +1,38 @@
+import {
+  createScheduleToolWithContext,
+  ensureReminderStoreInitialized,
+  ensureScheduleStoreInitialized,
+  executeScheduleTool,
+  extractSlackContext,
+  init_schedule_tool_handler,
+  isScheduleToolCall
+} from "./chunk-S6CD7GFM.mjs";
+import "./chunk-LG4AUKHB.mjs";
+import "./chunk-KFKHU6CM.mjs";
+import "./chunk-B7BVQM5K.mjs";
+import "./chunk-XXAEN5KU.mjs";
+import "./chunk-GEW6LS32.mjs";
+import "./chunk-DIND4ZCV.mjs";
+import "./chunk-UCNT3PDT.mjs";
+import "./chunk-NCWIZVOT.mjs";
+import "./chunk-VMLORODQ.mjs";
+import "./chunk-HOKQOO3G.mjs";
+import "./chunk-YJRBN3XS.mjs";
+import "./chunk-JL7JXCET.mjs";
+import "./chunk-V2IV3ILA.mjs";
+import "./chunk-25IC7KXZ.mjs";
+import "./chunk-VF6XIUE4.mjs";
+import "./chunk-VPC3QSPW.mjs";
+import "./chunk-SZXICFQ3.mjs";
+import "./chunk-UCMJJ3IM.mjs";
+import "./chunk-J7LXIPZS.mjs";
+init_schedule_tool_handler();
+export {
+  createScheduleToolWithContext,
+  ensureReminderStoreInitialized,
+  ensureScheduleStoreInitialized,
+  executeScheduleTool,
+  extractSlackContext,
+  isScheduleToolCall
+};
+//# sourceMappingURL=schedule-tool-handler-B7TMSG6A.mjs.map

package/dist/sdk/schedule-tool-handler-IEB2VS7O.mjs

@@ -0,0 +1,38 @@
+import {
+  createScheduleToolWithContext,
+  ensureReminderStoreInitialized,
+  ensureScheduleStoreInitialized,
+  executeScheduleTool,
+  extractSlackContext,
+  init_schedule_tool_handler,
+  isScheduleToolCall
+} from "./chunk-EUUAQBTW.mjs";
+import "./chunk-LG4AUKHB.mjs";
+import "./chunk-KFKHU6CM.mjs";
+import "./chunk-B7BVQM5K.mjs";
+import "./chunk-XXAEN5KU.mjs";
+import "./chunk-GEW6LS32.mjs";
+import "./chunk-DIND4ZCV.mjs";
+import "./chunk-UCNT3PDT.mjs";
+import "./chunk-NCWIZVOT.mjs";
+import "./chunk-VMLORODQ.mjs";
+import "./chunk-HOKQOO3G.mjs";
+import "./chunk-YJRBN3XS.mjs";
+import "./chunk-JL7JXCET.mjs";
+import "./chunk-V2IV3ILA.mjs";
+import "./chunk-25IC7KXZ.mjs";
+import "./chunk-VF6XIUE4.mjs";
+import "./chunk-VPC3QSPW.mjs";
+import "./chunk-SZXICFQ3.mjs";
+import "./chunk-UCMJJ3IM.mjs";
+import "./chunk-J7LXIPZS.mjs";
+init_schedule_tool_handler();
+export {
+  createScheduleToolWithContext,
+  ensureReminderStoreInitialized,
+  ensureScheduleStoreInitialized,
+  executeScheduleTool,
+  extractSlackContext,
+  isScheduleToolCall
+};
+//# sourceMappingURL=schedule-tool-handler-IEB2VS7O.mjs.map

package/dist/sdk/sdk.d.mts

@@ -121,6 +121,45 @@ interface SandboxConfig {
     cache?: SandboxCacheConfig;
 }
 
+interface PolicyConfig {
+    /** Policy engine mode */
+    engine: 'local' | 'remote' | 'disabled';
+    /** Path to .rego files or .wasm bundle (local mode) */
+    rules?: string | string[];
+    /** Path to a JSON file to load as OPA data document */
+    data?: string;
+    /** OPA server URL (remote mode) */
+    url?: string;
+    /** Default decision when policy evaluation fails */
+    fallback?: 'allow' | 'deny' | 'warn';
+    /** Evaluation timeout in ms (default: 5000) */
+    timeout?: number;
+    /** Role definitions: map role names to conditions */
+    roles?: Record<string, PolicyRoleConfig>;
+}
+interface PolicyRoleConfig {
+    /** GitHub author associations that map to this role */
+    author_association?: string[];
+    /** GitHub team slugs (requires GitHub API) */
+    teams?: string[];
+    /** Explicit GitHub usernames */
+    users?: string[];
+    /** Slack user IDs (e.g., ["U0123ABC"]) */
+    slack_users?: string[];
+    /** Email addresses for identity matching (e.g., ["alice@co.com"]) */
+    emails?: string[];
+    /** Slack channel IDs — role only applies when triggered from these channels */
+    slack_channels?: string[];
+}
+interface StepPolicyOverride {
+    /** Required role(s) - any of these roles suffices */
+    require?: string | string[];
+    /** Explicit deny for roles */
+    deny?: string[];
+    /** Custom OPA rule path for this step */
+    rule?: string;
+}
+
 /**
  * Failure condition severity levels
  */
@@ -682,6 +721,8 @@ interface CheckConfig {
     persist_worktree?: boolean;
     /** Sandbox name to use for this check (overrides workspace-level default) */
     sandbox?: string;
+    /** Per-step policy override (enterprise) */
+    policy?: StepPolicyOverride;
 }
 /**
  * Backoff policy for retries
@@ -724,12 +765,16 @@ interface OnFailConfig {
      */
     transitions?: TransitionRule[];
 }
+/**
+ * Success routing run item - can be step name, step with args, or workflow with args
+ */
+type OnSuccessRunItem = string | OnInitStepInvocation | OnInitWorkflowInvocation;
 /**
  * Success routing configuration per check
  */
 interface OnSuccessConfig {
-    /** Post-success steps to run */
-    run?: string[];
+    /** Post-success steps to run - can be step names or rich invocations with arguments */
+    run?: OnSuccessRunItem[];
     /** Optional jump back to ancestor step (by id) */
     goto?: string;
     /** Simulate a different event when performing goto (e.g., 'pr_updated') */
@@ -1141,6 +1186,60 @@ interface SchedulerPermissionsConfig {
     /** List of denied workflow patterns */
     denied_workflows?: string[];
 }
+/**
+ * SSL/TLS configuration for scheduler database connections
+ */
+interface SchedulerSslConfig {
+    /** Enable SSL (default: true when SslConfig object is provided) */
+    enabled?: boolean;
+    /** Reject unauthorized certificates (default: true) */
+    reject_unauthorized?: boolean;
+    /** Path to CA certificate PEM file */
+    ca?: string;
+    /** Path to client certificate PEM file */
+    cert?: string;
+    /** Path to client key PEM file */
+    key?: string;
+}
+/**
+ * Scheduler storage connection configuration
+ */
+interface SchedulerStorageConnectionConfig {
+    /** SQLite database file path (default: '.visor/schedules.db') */
+    filename?: string;
+    /** Database host (PostgreSQL/MySQL/MSSQL) */
+    host?: string;
+    /** Database port (PostgreSQL/MySQL/MSSQL) */
+    port?: number;
+    /** Database name (PostgreSQL/MySQL/MSSQL) */
+    database?: string;
+    /** Database user (PostgreSQL/MySQL/MSSQL) */
+    user?: string;
+    /** Database password (PostgreSQL/MySQL/MSSQL) */
+    password?: string;
+    /** SSL/TLS configuration (PostgreSQL/MySQL/MSSQL) */
+    ssl?: boolean | SchedulerSslConfig;
+    /** Connection string URL (e.g., postgresql://user:pass@host/db) */
+    connection_string?: string;
+    /** Connection pool configuration */
+    pool?: {
+        min?: number;
+        max?: number;
+    };
+}
+/**
+ * Scheduler high-availability configuration
+ */
+interface SchedulerHAConfig {
+    /** Enable distributed locking for multi-node deployments (default: false) */
+    enabled?: boolean;
+    /** Unique node identifier (default: hostname-pid) */
+    node_id?: string;
+    /** Lock time-to-live in seconds (default: 60) */
+    lock_ttl?: number;
+    /** Heartbeat interval for lock renewal in seconds (default: 15) */
+    heartbeat_interval?: number;
+}
 /**
  * Scheduler configuration for workflow scheduling
  */
@@ -1149,9 +1248,15 @@ interface SchedulerConfig {
     enabled?: boolean;
     /** Storage configuration */
     storage?: {
-        /** Path to schedules JSON file (default: .visor/schedules.json) */
+        /** Path to schedules JSON file (legacy, triggers auto-migration) */
         path?: string;
+        /** Database driver (default: 'sqlite') */
+        driver?: 'sqlite' | 'postgresql' | 'mysql' | 'mssql';
+        /** Database connection configuration */
+        connection?: SchedulerStorageConnectionConfig;
     };
+    /** High-availability configuration for multi-node deployments */
+    ha?: SchedulerHAConfig;
     /** Limits for dynamic schedules */
     limits?: SchedulerLimitsConfig;
     /** Default timezone (IANA format, e.g., "America/New_York") */
@@ -1234,6 +1339,8 @@ interface VisorConfig {
     slack?: SlackConfig;
     /** Scheduler configuration for scheduled workflow execution */
     scheduler?: SchedulerConfig;
+    /** Enterprise policy engine configuration */
+    policy?: PolicyConfig;
 }
 /**
  * Workspace isolation configuration
@@ -1286,7 +1393,7 @@ interface CheckExecutionStats {
     failedRuns: number;
     skippedRuns: number;
     skipped: boolean;
-    skipReason?: 'if_condition' | 'fail_fast' | 'dependency_failed' | 'forEach_empty' | 'assume';
+    skipReason?: 'if_condition' | 'fail_fast' | 'dependency_failed' | 'forEach_empty' | 'assume' | 'policy_denied';
     skipCondition?: string;
     totalDuration: number;
     providerDurationMs?: number;
@@ -1395,6 +1502,27 @@ declare class EventBus {
     emit(event: AnyEvent | EventEnvelope): Promise<void>;
 }
 
+/** Bot transport types (trimmed for Slack v1) */
+type BotTransportType = 'slack' | string;
+interface NormalizedMessage {
+    role: 'user' | 'bot';
+    text: string;
+    timestamp: string;
+    origin?: string;
+    /** Optional user identifier (e.g., Slack user id, GitHub login) */
+    user?: string;
+}
+interface ConversationContext {
+    transport: BotTransportType;
+    thread: {
+        id: string;
+        url?: string;
+    };
+    messages: NormalizedMessage[];
+    current: NormalizedMessage;
+    attributes: Record<string, string>;
+}
+
 /**
  * Execution context passed to check providers
  */
@@ -1404,6 +1532,8 @@ interface ExecutionContext {
     reuseSession?: boolean;
     /** CLI message value (from --message argument) */
     cliMessage?: string;
+    /** Conversation context - unified access to user message across transports (CLI, Slack, etc.) */
+    conversation?: ConversationContext;
     /**
      * Stage-local baseline of output history lengths per check name.
      * When present, providers should expose an `outputs_history_stage` object in