@probelabs/visor 0.1.130 → 0.1.131

package/dist/sdk/{chunk-S6CD7GFM.mjs → chunk-MQ57AB4U.mjs}

@@ -28,7 +28,7 @@ import {
 import {
   config_exports,
   init_config
-} from "./chunk-UCNT3PDT.mjs";
+} from "./chunk-LQ5B4T6L.mjs";
 import {
   ExecutionJournal,
   checkLoopBudget,
@@ -37,11 +37,11 @@ import {
   init_routing,
   init_snapshot_store,
   snapshot_store_exports
-} from "./chunk-VMLORODQ.mjs";
+} from "./chunk-2GCSK3PD.mjs";
 import {
   FailureConditionEvaluator,
   init_failure_condition_evaluator
-} from "./chunk-HOKQOO3G.mjs";
+} from "./chunk-EBTD2D4L.mjs";
 import {
   addEvent,
   emitNdjsonFallback,
@@ -52,7 +52,7 @@ import {
   setSpanAttributes,
   trace_helpers_exports,
   withActiveSpan
-} from "./chunk-YJRBN3XS.mjs";
+} from "./chunk-N4I6ZDCJ.mjs";
 import {
   addDiagramBlock,
   init_metrics
@@ -60,7 +60,7 @@ import {
 import {
   createExtendedLiquid,
   init_liquid_extensions
-} from "./chunk-V2IV3ILA.mjs";
+} from "./chunk-XJQKTK6V.mjs";
 import {
   createPermissionHelpers,
   detectLocalMode,
@@ -681,6 +681,8 @@ var init_ai_review_service = __esm({
         const isCodeReviewSchema = schema === "code-review";
         const prContext = skipPRContext ? "" : await this.formatPRContext(prInfo, isCodeReviewSchema);
         const slackContextXml = skipSlackContext === true ? "" : this.formatSlackContextFromPRInfo(prInfo);
+        const traceIdXml = prInfo.otelTraceId ? `
+    <trace_id>${this.escapeXml(String(prInfo.otelTraceId))}</trace_id>` : "";
         const isIssue = prInfo.isIssue === true;
         if (isIssue) {
           if (skipPRContext && !slackContextXml) {
@@ -694,7 +696,7 @@ ${customInstructions}
   </instructions>
 
   <context>
-    ${getCurrentDateXml()}
+    ${getCurrentDateXml()}${traceIdXml}
 ${prContext}${slackContextXml}
   </context>
 
@@ -736,7 +738,7 @@ ${customInstructions}
   </instructions>
 
   <context>
-    ${getCurrentDateXml()}
+    ${getCurrentDateXml()}${traceIdXml}
 ${prContext}${slackContextXml}
   </context>
 
@@ -764,7 +766,7 @@ ${customInstructions}
 </instructions>
 
 <context>
-  ${getCurrentDateXml()}
+  ${getCurrentDateXml()}${traceIdXml}
 ${prContext}${slackContextXml}
 </context>`;
       }
@@ -2997,7 +2999,7 @@ async function executeWorkflowAsTool(workflowId, args, context2, argsOverrides)
     ...args,
     ...argsOverrides
   };
-  const { WorkflowCheckProvider: WorkflowCheckProvider2 } = await import("./workflow-check-provider-HB4XTD4Z.mjs");
+  const { WorkflowCheckProvider: WorkflowCheckProvider2 } = await import("./workflow-check-provider-57KAR4Y4.mjs");
   const provider = new WorkflowCheckProvider2();
   const checkConfig = {
     type: "workflow",
@@ -3996,7 +3998,7 @@ function formatScheduleList(schedules) {
   if (schedules.length === 0) {
     return `You don't have any active schedules.
 
-To create one: "schedule daily-report every Monday at 9am"`;
+To create one: "remind me every Monday at 9am to check PRs" or "schedule %daily-report every Monday at 9am"`;
   }
   const lines = schedules.map((s, i) => `${i + 1}. ${formatSchedule(s)}`);
   return `**Your active schedules:**
@@ -4272,6 +4274,12 @@ function getScheduleToolDefinition() {
 
 YOU (the AI) must extract and structure all scheduling parameters. Do NOT pass natural language time expressions - convert them to cron or ISO timestamps.
 
+CRITICAL WORKFLOW RULE:
+- To schedule a WORKFLOW, the user MUST use a '%' prefix (e.g., "schedule %my-workflow daily").
+- If the '%' prefix is present, extract the word following it as the 'workflow' parameter (without the '%').
+- If the '%' prefix is NOT present, the request is a simple text reminder. The ENTIRE user request (excluding the schedule expression) MUST be placed in the 'reminder_text' parameter.
+- DO NOT guess or infer a workflow name from a user's request without the '%' prefix.
+
 ACTIONS:
 - create: Schedule a new reminder or workflow
 - list: Show user's active schedules
@@ -4279,7 +4287,9 @@ ACTIONS:
 - pause/resume: Temporarily disable/enable a schedule
 
 FOR CREATE ACTION - Extract these from user's request:
-1. WHAT: Either reminder_text (message to send) OR workflow (workflow ID to run)
+1. WHAT:
+   - If user says "schedule %some-workflow ...", populate 'workflow' with "some-workflow".
+   - Otherwise, populate 'reminder_text' with the user's full request text.
 2. WHERE: Use the CURRENT channel from context
    - target_id: The channel ID from context (C... for channels, D... for DMs)
    - target_type: "channel" for public/private channels, "dm" for direct messages
@@ -4314,7 +4324,7 @@ User in DM: "remind me to check builds every day at 9am"
     "original_expression": "every day at 9am"
   }
 
-User in #security channel: "run security-scan every Monday at 10am"
+User in #security channel: "schedule %security-scan every Monday at 10am"
 \u2192 {
     "action": "create",
     "workflow": "security-scan",
@@ -4325,6 +4335,17 @@ User in #security channel: "run security-scan every Monday at 10am"
     "original_expression": "every Monday at 10am"
   }
 
+User in #security channel: "run security-scan every Monday at 10am" (NO % prefix!)
+\u2192 {
+    "action": "create",
+    "reminder_text": "run security-scan every Monday at 10am",
+    "is_recurring": true,
+    "cron": "0 10 * * 1",
+    "target_type": "channel",
+    "target_id": "<channel ID from context, e.g., C05ABC123>",
+    "original_expression": "every Monday at 10am"
+  }
+
 User in DM: "remind me in 2 hours to review the PR"
 \u2192 {
     "action": "create",
@@ -4368,7 +4389,7 @@ User: "cancel schedule abc123"
         },
         workflow: {
           type: "string",
-          description: "For create: workflow/check ID to run (use instead of reminder_text for workflow execution)"
+          description: 'For create: workflow ID to run. ONLY populate this if the user used the % prefix (e.g., "%my-workflow"). Extract the name without the % symbol. If no % prefix, use reminder_text instead.'
         },
         workflow_inputs: {
           type: "object",
@@ -5978,7 +5999,7 @@ var init_dependency_gating = __esm({
 // src/state-machine/dispatch/template-renderer.ts
 async function renderTemplateContent(checkId, checkConfig, reviewSummary) {
   try {
-    const { createExtendedLiquid: createExtendedLiquid2 } = await import("./liquid-extensions-E4EUOCES.mjs");
+    const { createExtendedLiquid: createExtendedLiquid2 } = await import("./liquid-extensions-YDIIH33Q.mjs");
     const fs11 = await import("fs/promises");
     const path14 = await import("path");
     const schemaRaw = checkConfig.schema || "plain";
@@ -8690,7 +8711,7 @@ async function executeCheckWithForEachItems2(checkId, forEachParent, forEachItem
           }
         }
         try {
-          const { evaluateTransitions } = await import("./routing-OZQWAGAI.mjs");
+          const { evaluateTransitions } = await import("./routing-OXQKETSA.mjs");
           const transTarget = await evaluateTransitions(
             onFinish.transitions,
             forEachParent,
@@ -8750,7 +8771,7 @@ async function executeCheckWithForEachItems2(checkId, forEachParent, forEachItem
             `[LevelDispatch] Error evaluating on_finish transitions for ${forEachParent}: ${e instanceof Error ? e.message : String(e)}`
           );
         }
-        const { evaluateGoto: evaluateGoto2 } = await import("./routing-OZQWAGAI.mjs");
+        const { evaluateGoto: evaluateGoto2 } = await import("./routing-OXQKETSA.mjs");
         if (context2.debug) {
           logger.info(
             `[LevelDispatch] Evaluating on_finish.goto_js for forEach parent: ${forEachParent}`
@@ -10002,7 +10023,7 @@ function updateStats2(results, state, isForEachIteration = false) {
 }
 async function renderTemplateContent2(checkId, checkConfig, reviewSummary) {
   try {
-    const { createExtendedLiquid: createExtendedLiquid2 } = await import("./liquid-extensions-E4EUOCES.mjs");
+    const { createExtendedLiquid: createExtendedLiquid2 } = await import("./liquid-extensions-YDIIH33Q.mjs");
     const fs11 = await import("fs/promises");
     const path14 = await import("path");
     const schemaRaw = checkConfig.schema || "plain";
@@ -10233,6 +10254,9 @@ var init_runner = __esm({
               break;
             }
           }
+          if (this.state.currentState === "Completed" && !this.context._parentContext && !process.env.VISOR_TEST_MODE) {
+            logger.info("All workflows finished \u2014 waiting for events");
+          }
           return this.buildExecutionResult();
         } catch (error) {
           const errorMsg = error instanceof Error ? error.message : String(error);
@@ -11899,7 +11923,7 @@ var init_state_machine_execution_engine = __esm({
           try {
             const map = options?.webhookContext?.webhookData;
             if (map) {
-              const { CheckProviderRegistry: CheckProviderRegistry2 } = await import("./check-provider-registry-PANIXYRB.mjs");
+              const { CheckProviderRegistry: CheckProviderRegistry2 } = await import("./check-provider-registry-ZOLEYDKM.mjs");
               const reg = CheckProviderRegistry2.getInstance();
               const p = reg.getProvider("http_input");
               if (p && typeof p.setWebhookContext === "function") p.setWebhookContext(map);
@@ -12012,7 +12036,7 @@ var init_state_machine_execution_engine = __esm({
           logger.info("[StateMachine] Using state machine engine");
         }
         if (!config) {
-          const { ConfigManager } = await import("./config-OGOS4ZU4.mjs");
+          const { ConfigManager } = await import("./config-4EG7IQIU.mjs");
           const configManager = new ConfigManager();
           config = await configManager.getDefaultConfig();
           logger.debug("[StateMachine] Using default configuration (no config provided)");
@@ -12077,7 +12101,7 @@ var init_state_machine_execution_engine = __esm({
           try {
             const webhookData = this.executionContext?.webhookContext?.webhookData;
             if (webhookData instanceof Map) {
-              const { extractSlackContext: extractSlackContext2 } = await import("./schedule-tool-handler-B7TMSG6A.mjs");
+              const { extractSlackContext: extractSlackContext2 } = await import("./schedule-tool-handler-PJVKWSYX.mjs");
               const slackCtx = extractSlackContext2(webhookData);
               if (slackCtx) {
                 const payload = Array.from(webhookData.values())[0];
@@ -12106,7 +12130,7 @@ var init_state_machine_execution_engine = __esm({
         if (Array.isArray(configWithTagFilter.frontends) && configWithTagFilter.frontends.length > 0) {
           try {
             const { EventBus } = await import("./event-bus-5K3Y2FCS.mjs");
-            const { FrontendsHost } = await import("./host-EE6EJ2FM.mjs");
+            const { FrontendsHost } = await import("./host-VA3ET7N6.mjs");
             const bus = new EventBus();
             context2.eventBus = bus;
             frontendsHost = new FrontendsHost(bus, logger);
@@ -12456,9 +12480,9 @@ var init_state_machine_execution_engine = __esm({
        * @returns Array of failure condition evaluation results
        */
       async evaluateFailureConditions(checkName, reviewSummary, config, previousOutputs, authorAssociation) {
-        const { FailureConditionEvaluator: FailureConditionEvaluator2 } = await import("./failure-condition-evaluator-HC3M5377.mjs");
+        const { FailureConditionEvaluator: FailureConditionEvaluator2 } = await import("./failure-condition-evaluator-GLHZZF47.mjs");
         const evaluator = new FailureConditionEvaluator2();
-        const { addEvent: addEvent3 } = await import("./trace-helpers-PP3YHTAM.mjs");
+        const { addEvent: addEvent3 } = await import("./trace-helpers-R2ETIEC2.mjs");
         const { addFailIfTriggered } = await import("./metrics-I6A7IHG4.mjs");
         const checkConfig = config.checks?.[checkName];
         if (!checkConfig) {
@@ -13507,16 +13531,13 @@ var init_mcp_custom_sse_server = __esm({
           logger.error(
             `[CustomToolsSSEServer:${this.sessionId}] Tool execution failed: ${toolName} - ${errorMsg}`
           );
+          const isValidationError = errorMsg.startsWith("Invalid workflow inputs:");
           return {
             jsonrpc: "2.0",
             id,
             error: {
-              code: -32603,
-              message: "Internal error",
-              data: {
-                tool: toolName,
-                error: errorMsg
-              }
+              code: isValidationError ? -32602 : -32603,
+              message: isValidationError ? `Invalid tool parameters: ${errorMsg}` : `Internal error during tool execution: ${errorMsg}`
             }
           };
         } finally {
@@ -14513,13 +14534,13 @@ ${preview}`);
                   `[AICheckProvider] Started custom tools SSE server '${customToolsServerName}' on port ${port} for ${customTools.size} tools`
                 );
               }
+              const workflowToolTimeout = config.ai?.timeout || 18e5;
               mcpServers[customToolsServerName] = {
                 command: "",
                 args: [],
                 url: `http://localhost:${port}/sse`,
                 transport: "sse",
-                timeout: 6e5
-                // 10 minutes for workflow tools
+                timeout: workflowToolTimeout
               };
             }
           } catch (error) {
@@ -14532,6 +14553,37 @@ ${preview}`);
           aiConfig.mcpServers = mcpServers;
         } else if (config.ai?.disableTools) {
         }
+        const bashConfigJsExpr = config.ai_bash_config_js;
+        if (bashConfigJsExpr && _dependencyResults) {
+          try {
+            const dynamicBashConfig = this.evaluateBashConfigJs(
+              bashConfigJsExpr,
+              prInfo,
+              _dependencyResults,
+              config
+            );
+            if (!aiConfig.bashConfig) aiConfig.bashConfig = {};
+            if (dynamicBashConfig.allow?.length) {
+              aiConfig.bashConfig.allow = [
+                ...aiConfig.bashConfig.allow || [],
+                ...dynamicBashConfig.allow
+              ];
+            }
+            if (dynamicBashConfig.deny?.length) {
+              aiConfig.bashConfig.deny = [
+                ...aiConfig.bashConfig.deny || [],
+                ...dynamicBashConfig.deny
+              ];
+            }
+            if (dynamicBashConfig.allow?.length || dynamicBashConfig.deny?.length) {
+              aiConfig.allowBash = true;
+            }
+          } catch (error) {
+            logger.error(
+              `[AICheckProvider] Failed to evaluate ai_bash_config_js: ${error instanceof Error ? error.message : "Unknown error"}`
+            );
+          }
+        }
         const templateContext = {
           pr: {
             number: prInfo.number,
@@ -14553,6 +14605,10 @@ ${preview}`);
           const span = trace.getSpan(context.active());
           if (span) {
             captureCheckInputContext(span, templateContext);
+            const spanTraceId = span.spanContext()?.traceId;
+            if (spanTraceId) {
+              prInfo.otelTraceId = spanTraceId;
+            }
           }
         } catch {
         }
@@ -14957,6 +15013,80 @@ ${processedPrompt}` : processedPrompt;
           return {};
         }
       }
+      /**
+       * Evaluate ai_bash_config_js expression to dynamically compute bash configuration.
+       * Returns a partial BashConfig object with optional allow/deny arrays.
+       */
+      evaluateBashConfigJs(expression, prInfo, dependencyResults, config) {
+        if (!this.sandbox) {
+          this.sandbox = createSecureSandbox();
+        }
+        const outputs = {};
+        for (const [checkId, result] of dependencyResults.entries()) {
+          const summary = result;
+          outputs[checkId] = summary.output !== void 0 ? summary.output : summary;
+        }
+        const jsContext = {
+          outputs,
+          inputs: config.inputs || {},
+          pr: {
+            number: prInfo.number,
+            title: prInfo.title,
+            description: prInfo.body,
+            author: prInfo.author,
+            branch: prInfo.head,
+            base: prInfo.base,
+            authorAssociation: prInfo.authorAssociation
+          },
+          files: prInfo.files?.map((f) => ({
+            filename: f.filename,
+            status: f.status,
+            additions: f.additions,
+            deletions: f.deletions,
+            changes: f.changes
+          })) || [],
+          env: this.buildSafeEnv(),
+          memory: config.__memoryAccessor || {}
+        };
+        try {
+          const result = compileAndRun(this.sandbox, expression, jsContext, {
+            injectLog: true,
+            wrapFunction: true,
+            logPrefix: "[ai_bash_config_js]"
+          });
+          if (typeof result !== "object" || result === null || Array.isArray(result)) {
+            logger.warn(
+              `[AICheckProvider] ai_bash_config_js must return an object, got ${Array.isArray(result) ? "array" : typeof result}`
+            );
+            return {};
+          }
+          const cfg = result;
+          const validConfig = {};
+          if (cfg.allow !== void 0) {
+            if (Array.isArray(cfg.allow) && cfg.allow.every((item) => typeof item === "string")) {
+              validConfig.allow = cfg.allow;
+            } else {
+              logger.warn(`[AICheckProvider] ai_bash_config_js: 'allow' must be a string array`);
+            }
+          }
+          if (cfg.deny !== void 0) {
+            if (Array.isArray(cfg.deny) && cfg.deny.every((item) => typeof item === "string")) {
+              validConfig.deny = cfg.deny;
+            } else {
+              logger.warn(`[AICheckProvider] ai_bash_config_js: 'deny' must be a string array`);
+            }
+          }
+          logger.debug(
+            `[AICheckProvider] ai_bash_config_js evaluated: allow=${validConfig.allow?.length ?? 0}, deny=${validConfig.deny?.length ?? 0}`
+          );
+          return validConfig;
+        } catch (error) {
+          logger.error(
+            `[AICheckProvider] Failed to evaluate ai_bash_config_js: ${error instanceof Error ? error.message : "Unknown error"}`
+          );
+          return {};
+        }
+      }
       /**
        * Build a safe subset of environment variables for sandbox access.
        * Excludes sensitive keys like API keys, secrets, tokens.
@@ -15053,6 +15183,7 @@ ${processedPrompt}` : processedPrompt;
           "ai_mcp_servers_js",
           "ai_custom_tools",
           "ai_custom_tools_js",
+          "ai_bash_config_js",
           "env"
         ];
       }
@@ -39395,6 +39526,31 @@ var init_workflow_check_provider = __esm({
             `[WorkflowProvider]   NO WORKSPACE from parent - nested checkouts won't be added to workspace!`
           );
         }
+        const stepPrefix = config.checkName || workflow.id;
+        const parentExecCtx = parentContext?.executionContext;
+        let childExecCtx = parentExecCtx;
+        if (parentExecCtx?.hooks) {
+          const parentHooks = parentExecCtx.hooks;
+          childExecCtx = {
+            ...parentExecCtx,
+            hooks: {
+              ...parentHooks,
+              // Wrap onPromptCaptured: emit with prefixed step name so parent sees "route-intent.classify"
+              onPromptCaptured: parentHooks.onPromptCaptured ? (info) => {
+                parentHooks.onPromptCaptured({
+                  ...info,
+                  step: `${stepPrefix}.${info.step}`
+                });
+              } : void 0,
+              // Wrap mockForStep: try prefixed name first, fall back to unprefixed for backward compat
+              mockForStep: parentHooks.mockForStep ? (step) => {
+                const prefixed = parentHooks.mockForStep(`${stepPrefix}.${step}`);
+                if (prefixed !== void 0) return prefixed;
+                return parentHooks.mockForStep(step);
+              } : void 0
+            }
+          };
+        }
         const childContext = {
           mode: "state-machine",
           config: workflowConfig,
@@ -39416,9 +39572,9 @@ var init_workflow_check_provider = __esm({
           debug: parentContext?.debug || false,
           maxParallelism: parentContext?.maxParallelism,
           failFast: parentContext?.failFast,
-          // Propagate execution hooks (mocks, octokit, etc.) into the child so
-          // nested steps can be mocked/observed by the YAML test runner.
-          executionContext: parentContext?.executionContext,
+          // Propagate wrapped execution hooks (mocks, octokit, etc.) into the child so
+          // nested steps can be mocked/observed by the YAML test runner with dotted prefixes.
+          executionContext: childExecCtx,
           // Ensure all workflow steps are considered requested to avoid tag/event filtering surprises
           requestedChecks: Object.keys(checksMetadata)
         };
@@ -39432,6 +39588,26 @@ var init_workflow_check_provider = __esm({
           `[WorkflowProvider] Executing nested workflow '${workflow.id}' at depth ${currentDepth + 1}`
         );
         const result = await runner.run();
+        if (parentContext?.journal && parentContext?.sessionId) {
+          const parentJournal = parentContext.journal;
+          const childSnapshot = childJournal.beginSnapshot();
+          const childSessionId = childContext.sessionId;
+          const childEntries = childJournal.readVisible(childSessionId, childSnapshot, void 0);
+          for (const entry of childEntries) {
+            parentJournal.commitEntry({
+              sessionId: parentContext.sessionId,
+              scope: entry.scope,
+              checkId: `${stepPrefix}.${entry.checkId}`,
+              result: entry.result,
+              event: entry.event
+            });
+          }
+          if (childEntries.length > 0) {
+            logger.debug(
+              `[WorkflowProvider] Propagated ${childEntries.length} child journal entries to parent with prefix '${stepPrefix}.'`
+            );
+          }
+        }
         const bubbledEvents = childContext._bubbledEvents || [];
         if (bubbledEvents.length > 0 && parentContext) {
           if (parentContext.debug) {
@@ -39717,4 +39893,4 @@ undici/lib/fetch/body.js:
 undici/lib/websocket/frame.js:
   (*! ws. MIT License. Einar Otto Stangvik <einaros@gmail.com> *)
 */
-//# sourceMappingURL=chunk-S6CD7GFM.mjs.map
+//# sourceMappingURL=chunk-MQ57AB4U.mjs.map