@probelabs/visor 0.1.132-ee → 0.1.137

package/dist/config/config-reloader.d.ts

@@ -14,6 +14,7 @@ export declare class ConfigReloader {
     private snapshotStore;
     private onSwap;
     private onError?;
+    private lastConfigHash;
     constructor(options: ConfigReloaderOptions);
     /**
      * Attempt to reload the config file.

package/dist/config/config-reloader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config-reloader.d.ts","sourceRoot":"","sources":["file:///home/runner/work/visor/visor/src/config/config-reloader.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAA4B,MAAM,yBAAyB,CAAC;AAExF,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,aAAa,CAAC;IAC7B,aAAa,EAAE,mBAAmB,CAAC;IACnC,MAAM,EAAE,CAAC,SAAS,EAAE,WAAW,KAAK,IAAI,CAAC;IACzC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,KAAK,KAAK,IAAI,CAAC;CAChC;AAED,qBAAa,cAAc;IACzB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,aAAa,CAAsB;IAC3C,OAAO,CAAC,MAAM,CAAmC;IACjD,OAAO,CAAC,OAAO,CAAC,CAAuB;gBAE3B,OAAO,EAAE,qBAAqB;IAQ1C;;;OAGG;IACG,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC;CA4BjC"}
+{"version":3,"file":"config-reloader.d.ts","sourceRoot":"","sources":["file:///home/runner/work/visor/visor/src/config/config-reloader.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAA4B,MAAM,yBAAyB,CAAC;AAExF,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,aAAa,CAAC;IAC7B,aAAa,EAAE,mBAAmB,CAAC;IACnC,MAAM,EAAE,CAAC,SAAS,EAAE,WAAW,KAAK,IAAI,CAAC;IACzC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,KAAK,KAAK,IAAI,CAAC;CAChC;AAED,qBAAa,cAAc;IACzB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,aAAa,CAAsB;IAC3C,OAAO,CAAC,MAAM,CAAmC;IACjD,OAAO,CAAC,OAAO,CAAC,CAAuB;IACvC,OAAO,CAAC,cAAc,CAAuB;gBAEjC,OAAO,EAAE,qBAAqB;IAQ1C;;;OAGG;IACG,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC;CAkCjC"}

package/dist/config/config-watcher.d.ts

@@ -12,6 +12,7 @@ export declare class ConfigWatcher {
     private watchers;
     private debounceTimer;
     private signalHandler;
+    private lastProcessedMtimes;
     constructor(configPath: string, reloader: ConfigReloader, debounceMs?: number);
     start(): void;
     stop(): void;

package/dist/config/config-watcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config-watcher.d.ts","sourceRoot":"","sources":["file:///home/runner/work/visor/visor/src/config/config-watcher.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAInD;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,CAwE1F;AAED,qBAAa,aAAa;IACxB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,QAAQ,CAAiB;IACjC,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,QAAQ,CAAwC;IACxD,OAAO,CAAC,aAAa,CAA8C;IACnE,OAAO,CAAC,aAAa,CAA6B;gBAEtC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,UAAU,CAAC,EAAE,MAAM;IAM7E,KAAK,IAAI,IAAI;IAyBb,IAAI,IAAI,IAAI;IAqBZ;;;OAGG;IACH,OAAO,CAAC,cAAc;IAsBtB,OAAO,CAAC,mBAAmB;IAO3B,OAAO,CAAC,SAAS;IAiBjB,OAAO,CAAC,eAAe;IAWvB;;;;OAIG;IACH,OAAO,CAAC,UAAU;CAYnB"}
+{"version":3,"file":"config-watcher.d.ts","sourceRoot":"","sources":["file:///home/runner/work/visor/visor/src/config/config-watcher.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAInD;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,CAwE1F;AAED,qBAAa,aAAa;IACxB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,QAAQ,CAAiB;IACjC,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,QAAQ,CAAiD;IACjE,OAAO,CAAC,aAAa,CAA8C;IACnE,OAAO,CAAC,aAAa,CAA6B;IAClD,OAAO,CAAC,mBAAmB,CAA6B;gBAE5C,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,UAAU,CAAC,EAAE,MAAM;IAM7E,KAAK,IAAI,IAAI;IAyBb,IAAI,IAAI,IAAI;IAqBZ;;;OAGG;IACH,OAAO,CAAC,cAAc;IAsBtB,OAAO,CAAC,mBAAmB;IAO3B,OAAO,CAAC,SAAS;IAyCjB,OAAO,CAAC,eAAe;IAqCvB;;;;OAIG;IACH,OAAO,CAAC,UAAU;CAYnB"}

package/dist/config.d.ts

@@ -13,6 +13,10 @@ export declare class ConfigManager {
     private validEventTriggers;
     private validOutputFormats;
     private validGroupByOptions;
+    /**
+     * Annotate tools with the originating config directory for relative asset resolution.
+     */
+    private annotateToolBaseDirs;
     /**
      * Load configuration from a file
      */

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"","sourceRoot":"","sources":["file:///home/runner/work/visor/visor/src/config.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,WAAW,EAGX,YAAY,EAIZ,oBAAoB,EACpB,YAAY,EACZ,iBAAiB,EAClB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAOzC;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,YAAY,EAS9C,CAAC;AAEX;;GAEG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,eAAe,CAgBrB;IACF,OAAO,CAAC,kBAAkB,CAA6C;IACvE,OAAO,CAAC,kBAAkB,CAAgE;IAC1F,OAAO,CAAC,mBAAmB,CAA2D;IAEtF;;OAEG;IACU,UAAU,CACrB,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,WAAW,CAAC;IAqHvB;;;OAGG;IACU,oBAAoB,CAC/B,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC,EACzB,OAAO,GAAE,iBAAiB,GAAG;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO,GACrD,OAAO,CAAC,WAAW,CAAC;IAkDvB;;OAEG;IACU,iBAAiB,CAAC,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,WAAW,CAAC;IA4CrF;;OAEG;YACW,qBAAqB;IAiBnC;;OAEG;IACU,gBAAgB,IAAI,OAAO,CAAC,WAAW,CAAC;IAgBrD;;OAEG;IACI,wBAAwB,IAAI,WAAW,GAAG,IAAI;IA0FrD;;OAEG;IACH,OAAO,CAAC,eAAe;IAuBvB;;;OAGG;YACW,uBAAuB;IAkFrC;;OAEG;YACW,aAAa;IA6B3B;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IAgC/B;;OAEG;IACI,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,UAAU,GAAG,YAAY;IAqB9F;;OAEG;IACU,0BAA0B,IAAI,OAAO,CAAC;QACjD,MAAM,CAAC,EAAE,WAAW,CAAC;QACrB,oBAAoB,EAAE,oBAAoB,CAAC;KAC5C,CAAC;IA2BF;;;;OAIG;IACI,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,MAAM,UAAQ,GAAG,IAAI;IA+SzE;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAoH7B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IA8T3B;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAmM5B;;OAEG;IACH,OAAO,CAAC,wBAAwB;IA0DhC;;;OAGG;IACH,OAAO,CAAC,qBAAqB;IAiG7B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IA6DzB;;OAEG;IACH,OAAO,CAAC,wBAAwB;IA6EhC;;OAEG;IACH,OAAO,CAAC,oBAAoB;IA+B5B;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAY9B;;OAEG;IACH,OAAO,CAAC,iBAAiB;CA6B1B"}
+{"version":3,"file":"","sourceRoot":"","sources":["file:///home/runner/work/visor/visor/src/config.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,WAAW,EAGX,YAAY,EAIZ,oBAAoB,EACpB,YAAY,EACZ,iBAAiB,EAClB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAOzC;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,YAAY,EAS9C,CAAC;AAEX;;GAEG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,eAAe,CAgBrB;IACF,OAAO,CAAC,kBAAkB,CAA6C;IACvE,OAAO,CAAC,kBAAkB,CAAgE;IAC1F,OAAO,CAAC,mBAAmB,CAA2D;IAEtF;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAU5B;;OAEG;IACU,UAAU,CACrB,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,WAAW,CAAC;IAwHvB;;;OAGG;IACU,oBAAoB,CAC/B,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC,EACzB,OAAO,GAAE,iBAAiB,GAAG;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO,GACrD,OAAO,CAAC,WAAW,CAAC;IAoDvB;;OAEG;IACU,iBAAiB,CAAC,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,WAAW,CAAC;IA4CrF;;OAEG;YACW,qBAAqB;IAiBnC;;OAEG;IACU,gBAAgB,IAAI,OAAO,CAAC,WAAW,CAAC;IAgBrD;;OAEG;IACI,wBAAwB,IAAI,WAAW,GAAG,IAAI;IA0FrD;;OAEG;IACH,OAAO,CAAC,eAAe;IAuBvB;;;OAGG;YACW,uBAAuB;IAkFrC;;OAEG;YACW,aAAa;IA6B3B;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IAgC/B;;OAEG;IACI,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,UAAU,GAAG,YAAY;IAqB9F;;OAEG;IACU,0BAA0B,IAAI,OAAO,CAAC;QACjD,MAAM,CAAC,EAAE,WAAW,CAAC;QACrB,oBAAoB,EAAE,oBAAoB,CAAC;KAC5C,CAAC;IA2BF;;;;OAIG;IACI,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,MAAM,UAAQ,GAAG,IAAI;IA4VzE;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAoH7B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IA8T3B;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAmM5B;;OAEG;IACH,OAAO,CAAC,wBAAwB;IA0DhC;;;OAGG;IACH,OAAO,CAAC,qBAAqB;IAqG7B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IA6DzB;;OAEG;IACH,OAAO,CAAC,wBAAwB;IA6EhC;;OAEG;IACH,OAAO,CAAC,oBAAoB;IA+B5B;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAY9B;;OAEG;IACH,OAAO,CAAC,iBAAiB;CA6B1B"}

package/dist/docs/ai-custom-tools-usage.md

@@ -55,6 +55,43 @@ When you use either `ai_custom_tools` or `tools: [...]` within an MCP server con
 
 ## Examples
 
+### Example 0: OpenAPI API Bundle Tool
+
+```yaml
+tools:
+  users-api:
+    type: api
+    name: users-api
+    spec: ./openapi/users.yaml
+    headers:
+      Authorization: "Bearer ${USERS_API_BEARER_TOKEN}"
+      X-Tenant-Id: "${USERS_API_TENANT_ID}"
+    overlays:
+      - ./openapi/users-overlay.yaml
+      - actions:
+          - target: "$.paths['/users/{id}'].get.operationId"
+            update: getUserFromInlineOverlay
+    whitelist: [get*]
+    targetUrl: https://api.example.com
+
+steps:
+  api-assistant:
+    type: ai
+    prompt: Use users API tools to answer requests.
+    ai_custom_tools: [users-api]
+```
+
+`users-api` is a reusable tool bundle; each OpenAPI operation becomes an MCP tool exposed to AI.
+`spec` and `overlays` support both inline objects and file/URL references.
+`headers` also supports environment-variable interpolation (for example `Authorization: "Bearer ${USERS_API_BEARER_TOKEN}"`).
+
+Repository examples:
+
+- `examples/api-tools-library.yaml`
+- `examples/api-tools-ai-example.yaml` (embedded tests)
+- `examples/api-tools-mcp-example.yaml` (embedded tests)
+- `examples/api-tools-inline-overlay-example.yaml` (embedded tests)
+
 ### Example 1: Security Scanning
 
 ```yaml

package/dist/docs/ai-custom-tools.md

@@ -2,7 +2,12 @@
 
 ## Overview
 
-This feature allows AI checks to use custom shell-based tools defined in your Visor configuration. Custom tools are automatically exposed to AI via ephemeral SSE (Server-Sent Events) MCP (Model Context Protocol) servers that start on-demand and clean up automatically.
+This feature allows AI checks to use custom tools defined in your Visor configuration:
+
+- shell/command tools (`exec`)
+- OpenAPI-backed API tool bundles (`type: api`)
+
+Custom tools are automatically exposed to AI via ephemeral SSE (Server-Sent Events) MCP (Model Context Protocol) servers that start on-demand and clean up automatically.
 
 ## Key Benefits
 
@@ -120,6 +125,43 @@ steps:
 
 ### Basic Example
 
+### API Bundle Example (`type: api`)
+
+```yaml
+tools:
+  users-api:
+    type: api
+    name: users-api
+    spec: ./openapi/users.yaml
+    headers:
+      Authorization: "Bearer ${USERS_API_BEARER_TOKEN}"
+      X-Tenant-Id: "${USERS_API_TENANT_ID}"
+    overlays:
+      - ./openapi/users-overlay.yaml
+      - actions:
+          - target: "$.paths['/users/{id}'].get.operationId"
+            update: getUserFromInlineOverlay
+    whitelist: [getUser*, GET:/users/*]
+    targetUrl: https://api.example.com
+
+steps:
+  assistant:
+    type: ai
+    prompt: Use the users API tools to answer user questions.
+    ai_custom_tools: [users-api]
+```
+
+Each OpenAPI operation with an `operationId` is exposed as an MCP tool for the AI check.
+`spec` and `overlays` can both be loaded from file/URL or provided inline as YAML objects.
+Custom `headers` are supported, and header values can use env interpolation (for example `${USERS_API_BEARER_TOKEN}`).
+
+See runnable examples:
+
+- `examples/api-tools-library.yaml`
+- `examples/api-tools-ai-example.yaml` (embedded tests)
+- `examples/api-tools-mcp-example.yaml` (embedded tests)
+- `examples/api-tools-inline-overlay-example.yaml` (embedded tests)
+
 ### Advanced Example with Multiple Tools
 
 ```yaml

package/dist/docs/custom-tools.md

@@ -297,6 +297,75 @@ tools:
       {% endcase %}
 ```
 
+### 5. OpenAPI Tool Bundle (`type: api`)
+
+You can expose an OpenAPI spec as MCP tools by defining a single reusable API bundle.
+Both `spec` and `overlays` support file/URL and inline object forms:
+
+```yaml
+tools:
+  petstore-api:
+    type: api
+    name: petstore-api
+    description: Petstore API as MCP tools
+    spec: ./petstore-openapi.yaml
+    overlays:
+      - ./petstore-overlay.yaml
+    whitelist:
+      - "get*"
+      - "POST:/pets*"
+    targetUrl: https://petstore.example.com
+    headers:
+      X-Api-Version: "2026-01"
+      Authorization: "Bearer ${PETSTORE_BEARER_TOKEN}"
+      X-Tenant-Id: "${PETSTORE_TENANT_ID}"
+    apiKey: "${{ env.PETSTORE_API_KEY }}"
+
+  profiles-api:
+    type: api
+    name: profiles-api
+    spec:
+      openapi: "3.0.0"
+      info: { title: Profiles API, version: "1.0.0" }
+      servers: [{ url: "https://api.example.com" }]
+      paths:
+        /profiles/{id}:
+          get:
+            operationId: getProfile
+            parameters:
+              - name: id
+                in: path
+                required: true
+                schema: { type: string }
+            responses:
+              "200":
+                description: OK
+    overlays:
+      - ./profiles-overlay.yaml
+      - actions:
+          - target: "$.paths['/profiles/{id}'].get.operationId"
+            update: getProfileFromInlineOverlay
+```
+
+Behavior:
+
+- Each OpenAPI operation with an `operationId` is exposed as an MCP tool.
+- Tool names/descriptions come from OpenAPI and support `x-mcp` overrides.
+- Inputs include path/query/header parameters and `requestBody`.
+- Security schemes from OpenAPI are applied at call time using `apiKey` / `securityCredentials`.
+- `whitelist`/`blacklist` supports glob patterns for `operationId` and `METHOD:/path`.
+- Overlay behavior matches `api-to-mcp`: action-based overlays (`actions[].target/update/remove`) plus deep-merge overlays when `actions` is omitted.
+- `headers` values can reference environment variables (for example, `${PETSTORE_BEARER_TOKEN}` or `${{ env.PETSTORE_BEARER_TOKEN }}`).
+
+This works with `ai_custom_tools`, `ai_mcp_servers.<name>.tools`, and `transport: custom` MCP execution.
+
+Runnable examples in this repo:
+
+- `examples/api-tools-library.yaml` (reusable API bundle in a separate file)
+- `examples/api-tools-mcp-example.yaml` (includes embedded tests)
+- `examples/api-tools-ai-example.yaml` (includes embedded tests)
+- `examples/api-tools-inline-overlay-example.yaml` (includes embedded tests)
+
 ## Tool Libraries and Extends
 
 ### Creating a Tool Library
@@ -452,4 +521,4 @@ For JavaScript transform issues:
 1. Ensure valid JavaScript syntax
 2. Always return a value
 3. Handle undefined/null cases
-4. Use try-catch for error handling
+4. Use try-catch for error handling