@probelabs/visor 0.1.165 → 0.1.166

package/dist/sdk/{chunk-MYROK4LB.mjs → chunk-ZQR4AGS3.mjs}

@@ -42,11 +42,11 @@ import {
   init_routing,
   init_snapshot_store,
   snapshot_store_exports
-} from "./chunk-GMHSXC5K.mjs";
+} from "./chunk-OQ3CML4F.mjs";
 import {
   FailureConditionEvaluator,
   init_failure_condition_evaluator
-} from "./chunk-EO4IJNM7.mjs";
+} from "./chunk-KBTFMYZQ.mjs";
 import {
   addEvent,
   emitNdjsonFallback,
@@ -57,7 +57,7 @@ import {
   setSpanAttributes,
   trace_helpers_exports,
   withActiveSpan
-} from "./chunk-LDE33FGE.mjs";
+} from "./chunk-HFCOZPAS.mjs";
 import {
   addDiagramBlock,
   init_metrics
@@ -3965,7 +3965,7 @@ async function executeWorkflowAsTool(workflowId, args, context2, argsOverrides)
     ...args,
     ...argsOverrides
   };
-  const { WorkflowCheckProvider: WorkflowCheckProvider2 } = await import("./workflow-check-provider-RBYA6ZGU.mjs");
+  const { WorkflowCheckProvider: WorkflowCheckProvider2 } = await import("./workflow-check-provider-UTNO6XN6.mjs");
   const provider = new WorkflowCheckProvider2();
   const checkConfig = {
     type: "workflow",
@@ -9261,7 +9261,7 @@ async function executeCheckWithForEachItems2(checkId, forEachParent, forEachItem
           }
         }
         try {
-          const { evaluateTransitions } = await import("./routing-QCDX43XD.mjs");
+          const { evaluateTransitions } = await import("./routing-QHWSMAIH.mjs");
           const transTarget = await evaluateTransitions(
             onFinish.transitions,
             forEachParent,
@@ -9321,7 +9321,7 @@ async function executeCheckWithForEachItems2(checkId, forEachParent, forEachItem
             `[LevelDispatch] Error evaluating on_finish transitions for ${forEachParent}: ${e instanceof Error ? e.message : String(e)}`
           );
         }
-        const { evaluateGoto: evaluateGoto2 } = await import("./routing-QCDX43XD.mjs");
+        const { evaluateGoto: evaluateGoto2 } = await import("./routing-QHWSMAIH.mjs");
         if (context2.debug) {
           logger.info(
             `[LevelDispatch] Evaluating on_finish.goto_js for forEach parent: ${forEachParent}`
@@ -13033,7 +13033,7 @@ var init_state_machine_execution_engine = __esm({
           try {
             const map = options?.webhookContext?.webhookData;
             if (map) {
-              const { CheckProviderRegistry: CheckProviderRegistry2 } = await import("./check-provider-registry-4SHN3GSH.mjs");
+              const { CheckProviderRegistry: CheckProviderRegistry2 } = await import("./check-provider-registry-WXEBJWXY.mjs");
               const reg = CheckProviderRegistry2.getInstance();
               const p = reg.getProvider("http_input");
               if (p && typeof p.setWebhookContext === "function") p.setWebhookContext(map);
@@ -13156,7 +13156,7 @@ var init_state_machine_execution_engine = __esm({
           tag_filter: tagFilter
         } : config;
         try {
-          const { CheckProviderRegistry: CheckProviderRegistry2 } = await import("./check-provider-registry-4SHN3GSH.mjs");
+          const { CheckProviderRegistry: CheckProviderRegistry2 } = await import("./check-provider-registry-WXEBJWXY.mjs");
           const registry = CheckProviderRegistry2.getInstance();
           registry.setCustomTools(configWithTagFilter.tools || {});
         } catch (error) {
@@ -13220,7 +13220,7 @@ var init_state_machine_execution_engine = __esm({
           try {
             const webhookData = this.executionContext?.webhookContext?.webhookData;
             if (webhookData instanceof Map) {
-              const { extractSlackContext: extractSlackContext2 } = await import("./schedule-tool-handler-ZUMPNAVY.mjs");
+              const { extractSlackContext: extractSlackContext2 } = await import("./schedule-tool-handler-4NCS4ARE.mjs");
               const slackCtx = extractSlackContext2(webhookData);
               if (slackCtx) {
                 const payload = Array.from(webhookData.values())[0];
@@ -13249,7 +13249,7 @@ var init_state_machine_execution_engine = __esm({
         if (Array.isArray(configWithTagFilter.frontends) && configWithTagFilter.frontends.length > 0) {
           try {
             const { EventBus } = await import("./event-bus-5K3Y2FCS.mjs");
-            const { FrontendsHost } = await import("./host-JROON6IT.mjs");
+            const { FrontendsHost } = await import("./host-753E6PKF.mjs");
             const bus = new EventBus();
             context2.eventBus = bus;
             frontendsHost = new FrontendsHost(bus, logger);
@@ -13599,9 +13599,9 @@ var init_state_machine_execution_engine = __esm({
        * @returns Array of failure condition evaluation results
        */
       async evaluateFailureConditions(checkName, reviewSummary, config, previousOutputs, authorAssociation) {
-        const { FailureConditionEvaluator: FailureConditionEvaluator2 } = await import("./failure-condition-evaluator-M6SIUQF4.mjs");
+        const { FailureConditionEvaluator: FailureConditionEvaluator2 } = await import("./failure-condition-evaluator-5EAESM44.mjs");
         const evaluator = new FailureConditionEvaluator2();
-        const { addEvent: addEvent3 } = await import("./trace-helpers-KFQJ7IAG.mjs");
+        const { addEvent: addEvent3 } = await import("./trace-helpers-CTHTK6V5.mjs");
         const { addFailIfTriggered } = await import("./metrics-I6A7IHG4.mjs");
         const checkConfig = config.checks?.[checkName];
         if (!checkConfig) {
@@ -18763,6 +18763,112 @@ var init_template_context = __esm({
   }
 });
 
+// src/utils/oauth2-token-cache.ts
+var OAuth2TokenCache;
+var init_oauth2_token_cache = __esm({
+  "src/utils/oauth2-token-cache.ts"() {
+    "use strict";
+    init_logger();
+    init_env_resolver();
+    OAuth2TokenCache = class _OAuth2TokenCache {
+      static instance;
+      cache = /* @__PURE__ */ new Map();
+      static getInstance() {
+        if (!_OAuth2TokenCache.instance) {
+          _OAuth2TokenCache.instance = new _OAuth2TokenCache();
+        }
+        return _OAuth2TokenCache.instance;
+      }
+      /** Visible for testing */
+      static resetInstance() {
+        _OAuth2TokenCache.instance = void 0;
+      }
+      /**
+       * Get a valid Bearer token for the given config.
+       * Returns a cached token if still valid, otherwise fetches a new one.
+       */
+      async getToken(config) {
+        const clientId = String(EnvironmentResolver.resolveValue(config.client_id));
+        const clientSecret = String(EnvironmentResolver.resolveValue(config.client_secret));
+        const tokenUrl = String(EnvironmentResolver.resolveValue(config.token_url));
+        const bufferMs = (config.token_ttl_buffer ?? 300) * 1e3;
+        const cacheKey = `${tokenUrl}|${clientId}`;
+        const cached = this.cache.get(cacheKey);
+        if (cached && cached.expires_at - bufferMs > Date.now()) {
+          logger.verbose("[oauth2] Using cached token");
+          return cached.access_token;
+        }
+        if (cached?.refreshPromise) {
+          logger.verbose("[oauth2] Awaiting in-flight token refresh");
+          return cached.refreshPromise;
+        }
+        const refreshPromise = this.fetchToken(tokenUrl, clientId, clientSecret, config.scopes);
+        if (cached) {
+          cached.refreshPromise = refreshPromise;
+        } else {
+          this.cache.set(cacheKey, {
+            access_token: "",
+            expires_at: 0,
+            refreshPromise
+          });
+        }
+        try {
+          const token = await refreshPromise;
+          return token;
+        } finally {
+          const entry = this.cache.get(cacheKey);
+          if (entry) {
+            entry.refreshPromise = void 0;
+          }
+        }
+      }
+      async fetchToken(tokenUrl, clientId, clientSecret, scopes) {
+        logger.verbose(`[oauth2] Fetching token from ${tokenUrl}`);
+        const credentials = Buffer.from(`${clientId}:${clientSecret}`).toString("base64");
+        const bodyParams = new URLSearchParams({ grant_type: "client_credentials" });
+        if (scopes?.length) {
+          bodyParams.set("scope", scopes.join(" "));
+        }
+        const response = await fetch(tokenUrl, {
+          method: "POST",
+          headers: {
+            "Content-Type": "application/x-www-form-urlencoded",
+            Authorization: `Basic ${credentials}`
+          },
+          body: bodyParams.toString()
+        });
+        if (!response.ok) {
+          let errorDetail = "";
+          try {
+            errorDetail = await response.text();
+          } catch {
+          }
+          throw new Error(
+            `OAuth2 token request failed: HTTP ${response.status} ${response.statusText}${errorDetail ? ` - ${errorDetail.substring(0, 200)}` : ""}`
+          );
+        }
+        const data = await response.json();
+        if (!data.access_token) {
+          throw new Error("OAuth2 token response missing access_token");
+        }
+        const expiresIn = data.expires_in ?? 3600;
+        const expiresAt = Date.now() + expiresIn * 1e3;
+        const cacheKey = `${tokenUrl}|${clientId}`;
+        this.cache.set(cacheKey, {
+          access_token: data.access_token,
+          expires_at: expiresAt
+        });
+        logger.verbose(`[oauth2] Token acquired, expires in ${expiresIn}s`);
+        return data.access_token;
+      }
+      /** Clear all cached tokens (for testing or credential rotation) */
+      clear() {
+        this.cache.clear();
+      }
+    };
+  }
+});
+
 // src/providers/http-client-provider.ts
 import * as fs8 from "fs";
 import * as path10 from "path";
@@ -18775,6 +18881,7 @@ var init_http_client_provider = __esm({
     init_env_resolver();
     init_sandbox();
     init_template_context();
+    init_oauth2_token_cache();
     init_logger();
     HttpClientProvider = class extends CheckProvider {
       liquid;
@@ -18800,24 +18907,43 @@ var init_http_client_provider = __esm({
         if (cfg.type !== "http_client") {
           return false;
         }
-        if (typeof cfg.url !== "string" || !cfg.url) {
+        const hasUrl = typeof cfg.url === "string" && cfg.url;
+        const hasBaseUrl = typeof cfg.base_url === "string" && cfg.base_url;
+        if (!hasUrl && !hasBaseUrl) {
           return false;
         }
         try {
-          new URL(cfg.url);
+          new URL(hasUrl ? cfg.url : cfg.base_url);
           return true;
         } catch {
           return false;
         }
       }
       async execute(prInfo, config, dependencyResults, context2) {
-        const url = config.url;
+        const baseUrl = config.base_url;
+        const rawPath = config.path;
+        const pathParams = config.params || {};
+        const queryParams = config.query || {};
+        const authConfig = config.auth;
+        let url;
+        if (baseUrl && rawPath) {
+          let resolvedPath = rawPath;
+          for (const [key, value] of Object.entries(pathParams)) {
+            resolvedPath = resolvedPath.replace(`{${key}}`, encodeURIComponent(value));
+          }
+          url = `${baseUrl.replace(/\/+$/, "")}/${resolvedPath.replace(/^\/+/, "")}`;
+          if (Object.keys(queryParams).length > 0) {
+            const qs = new URLSearchParams(queryParams).toString();
+            url += `${url.includes("?") ? "&" : "?"}${qs}`;
+          }
+        } else {
+          url = config.url;
+        }
         const method = config.method || "GET";
         const headers = config.headers || {};
         const timeout = config.timeout || 3e4;
         const transform = config.transform;
         const transformJs = config.transform_js;
-        const bodyTemplate = config.body;
         const outputFileTemplate = config.output_file;
         const skipIfExists = config.skip_if_exists !== false;
         let resolvedUrlForErrors = url;
@@ -18841,7 +18967,11 @@ var init_http_client_provider = __esm({
             resolvedUrlForErrors = renderedUrl;
           }
           let requestBody;
-          if (bodyTemplate) {
+          const rawBody = config.body;
+          const bodyTemplate = typeof rawBody === "string" ? rawBody : void 0;
+          if (rawBody && typeof rawBody === "object") {
+            requestBody = JSON.stringify(rawBody);
+          } else if (bodyTemplate) {
             let resolvedBody = String(EnvironmentResolver.resolveValue(bodyTemplate));
             if (resolvedBody.includes("{{") || resolvedBody.includes("{%")) {
               resolvedBody = await this.liquid.parseAndRender(resolvedBody, templateContext);
@@ -18860,6 +18990,11 @@ var init_http_client_provider = __esm({
               logger.verbose(`[http_client] ${key}: ${maskedValue}`);
             }
           }
+          if (authConfig?.type === "oauth2_client_credentials") {
+            const tokenCache = OAuth2TokenCache.getInstance();
+            const token = await tokenCache.getToken(authConfig);
+            resolvedHeaders["Authorization"] = `Bearer ${token}`;
+          }
           let resolvedOutputFile;
           if (outputFileTemplate) {
             let outputPath = String(EnvironmentResolver.resolveValue(outputFileTemplate));
@@ -19138,6 +19273,11 @@ var init_http_client_provider = __esm({
         return [
           "type",
           "url",
+          "base_url",
+          "path",
+          "params",
+          "query",
+          "auth",
           "method",
           "headers",
           "body",
@@ -40768,8 +40908,8 @@ function buildBuiltinGlobals(opts) {
   const asyncFunctionNames = /* @__PURE__ */ new Set();
   const scheduleFn = async (args = {}) => {
     try {
-      const { handleScheduleAction: handleScheduleAction2, buildScheduleToolContext: buildScheduleToolContext2 } = await import("./schedule-tool-C5QN5OQU.mjs");
-      const { extractSlackContext: extractSlackContext2 } = await import("./schedule-tool-handler-ZUMPNAVY.mjs");
+      const { handleScheduleAction: handleScheduleAction2, buildScheduleToolContext: buildScheduleToolContext2 } = await import("./schedule-tool-ZVOSSFN2.mjs");
+      const { extractSlackContext: extractSlackContext2 } = await import("./schedule-tool-handler-4NCS4ARE.mjs");
       const parentCtx = opts.sessionInfo?._parentContext;
       const webhookData = parentCtx?.prInfo?.eventContext?.webhookData;
       const visorCfg = parentCtx?.config;
@@ -43914,4 +44054,4 @@ undici/lib/fetch/body.js:
 undici/lib/websocket/frame.js:
   (*! ws. MIT License. Einar Otto Stangvik <einaros@gmail.com> *)
 */
-//# sourceMappingURL=chunk-MYROK4LB.mjs.map
+//# sourceMappingURL=chunk-ZQR4AGS3.mjs.map