@probelabs/visor 0.1.177-ee → 0.1.178

package/dist/sdk/{chunk-IYXOLUDJ.mjs → chunk-AK64Y6Y2.mjs}

@@ -43,7 +43,7 @@ import {
 import {
   config_exports,
   init_config
-} from "./chunk-MM3TGVQ4.mjs";
+} from "./chunk-BMXVAJ2M.mjs";
 import {
   ExecutionJournal,
   checkLoopBudget,
@@ -52,11 +52,11 @@ import {
   init_routing,
   init_snapshot_store,
   snapshot_store_exports
-} from "./chunk-OHOBWVPP.mjs";
+} from "./chunk-WZS4ARZB.mjs";
 import {
   FailureConditionEvaluator,
   init_failure_condition_evaluator
-} from "./chunk-OPI632LK.mjs";
+} from "./chunk-CDRKH5HH.mjs";
 import {
   addEvent,
   emitNdjsonFallback,
@@ -67,7 +67,7 @@ import {
   setSpanAttributes,
   trace_helpers_exports,
   withActiveSpan
-} from "./chunk-GVTWESYN.mjs";
+} from "./chunk-KG6PM4OL.mjs";
 import {
   generateHumanId,
   init_human_id
@@ -2891,6 +2891,162 @@ var init_state_capture = __esm({
   }
 });
 
+// src/utils/rate-limiter.ts
+function windowToMs(per) {
+  switch (per) {
+    case "second":
+      return 1e3;
+    case "minute":
+      return 6e4;
+    case "hour":
+      return 36e5;
+  }
+}
+function resolveRateLimitKey(config, fallbackUrl) {
+  if (config.key) {
+    return config.key;
+  }
+  if (fallbackUrl) {
+    try {
+      const url = new URL(fallbackUrl);
+      return url.origin;
+    } catch {
+      return fallbackUrl;
+    }
+  }
+  return "__default__";
+}
+async function rateLimitedFetch(url, options, rateLimitConfig) {
+  if (!rateLimitConfig) {
+    return fetch(url, options);
+  }
+  const key = resolveRateLimitKey(rateLimitConfig, url);
+  const registry = RateLimiterRegistry.getInstance();
+  const bucket = registry.getOrCreate(key, rateLimitConfig);
+  const maxRetries = rateLimitConfig.max_retries ?? 3;
+  const backoff = rateLimitConfig.backoff ?? "exponential";
+  const initialDelay = rateLimitConfig.initial_delay_ms ?? 1e3;
+  for (let attempt = 0; attempt <= maxRetries; attempt++) {
+    await bucket.acquire();
+    const response = await fetch(url, options);
+    if (response.status !== 429) {
+      return response;
+    }
+    if (attempt === maxRetries) {
+      logger.warn(`[rate-limiter] Exhausted ${maxRetries} retries for ${url} (bucket: ${key})`);
+      return response;
+    }
+    let delayMs;
+    const retryAfter = response.headers.get("retry-after");
+    if (retryAfter) {
+      const parsed = Number(retryAfter);
+      if (!isNaN(parsed)) {
+        delayMs = parsed * 1e3;
+      } else {
+        const date = new Date(retryAfter).getTime();
+        delayMs = Math.max(0, date - Date.now());
+      }
+    } else {
+      delayMs = backoff === "exponential" ? initialDelay * Math.pow(2, attempt) : initialDelay;
+    }
+    logger.verbose(
+      `[rate-limiter] 429 on ${url} (bucket: ${key}), retry ${attempt + 1}/${maxRetries} in ${delayMs}ms`
+    );
+    await new Promise((resolve9) => setTimeout(resolve9, delayMs));
+  }
+  return fetch(url, options);
+}
+var TokenBucket, REGISTRY_KEY, RateLimiterRegistry;
+var init_rate_limiter = __esm({
+  "src/utils/rate-limiter.ts"() {
+    "use strict";
+    init_logger();
+    TokenBucket = class {
+      tokens;
+      capacity;
+      refillRate;
+      // tokens per ms
+      lastRefill;
+      waitQueue = [];
+      constructor(capacity, windowMs) {
+        this.capacity = capacity;
+        this.tokens = capacity;
+        this.refillRate = capacity / windowMs;
+        this.lastRefill = Date.now();
+      }
+      refill() {
+        const now = Date.now();
+        const elapsed = now - this.lastRefill;
+        const newTokens = elapsed * this.refillRate;
+        this.tokens = Math.min(this.capacity, this.tokens + newTokens);
+        this.lastRefill = now;
+      }
+      /**
+       * Non-blocking: try to consume one token.
+       */
+      tryConsume() {
+        this.refill();
+        if (this.tokens >= 1) {
+          this.tokens -= 1;
+          return true;
+        }
+        return false;
+      }
+      /**
+       * Blocking: wait until a token is available, then consume it.
+       * Requests are served FIFO.
+       */
+      async acquire() {
+        if (this.tryConsume()) {
+          return;
+        }
+        const waitMs = Math.ceil((1 - this.tokens) / this.refillRate);
+        return new Promise((resolve9) => {
+          const entry = { resolve: resolve9 };
+          this.waitQueue.push(entry);
+          setTimeout(() => {
+            const idx = this.waitQueue.indexOf(entry);
+            if (idx >= 0) {
+              this.waitQueue.splice(idx, 1);
+            }
+            this.refill();
+            if (this.tokens >= 1) {
+              this.tokens -= 1;
+            }
+            resolve9();
+          }, waitMs);
+        });
+      }
+    };
+    REGISTRY_KEY = Symbol.for("visor.rateLimiterRegistry");
+    RateLimiterRegistry = class _RateLimiterRegistry {
+      buckets = /* @__PURE__ */ new Map();
+      static getInstance() {
+        const g = globalThis;
+        if (!g[REGISTRY_KEY]) {
+          g[REGISTRY_KEY] = new _RateLimiterRegistry();
+        }
+        return g[REGISTRY_KEY];
+      }
+      getOrCreate(key, config) {
+        let bucket = this.buckets.get(key);
+        if (!bucket) {
+          const windowMs = windowToMs(config.per);
+          bucket = new TokenBucket(config.requests, windowMs);
+          this.buckets.set(key, bucket);
+          logger.verbose(
+            `[rate-limiter] Created bucket "${key}": ${config.requests} req/${config.per}`
+          );
+        }
+        return bucket;
+      }
+      cleanup() {
+        this.buckets.clear();
+      }
+    };
+  }
+});
+
 // src/providers/api-tool-executor.ts
 import fs2 from "fs/promises";
 import path3 from "path";
@@ -3126,7 +3282,8 @@ function getApiToolConfig(tool) {
     apiKey: tool.apiKey ?? tool.api_key,
     securitySchemeName: tool.securitySchemeName ?? tool.security_scheme_name,
     securityCredentials: tool.securityCredentials || tool.security_credentials || {},
-    requestTimeoutMs: tool.requestTimeoutMs ?? tool.request_timeout_ms ?? tool.timeout ?? 3e4
+    requestTimeoutMs: tool.requestTimeoutMs ?? tool.request_timeout_ms ?? tool.timeout ?? 3e4,
+    rateLimitConfig: tool.rate_limit
   };
 }
 function buildOutputSchema(operation) {
@@ -3558,12 +3715,16 @@ async function executeMappedApiTool(mappedTool, args) {
   const controller = new AbortController();
   const timeout = setTimeout(() => controller.abort(), apiToolConfig.requestTimeoutMs);
   try {
-    const response = await fetch(endpoint.toString(), {
-      method,
-      headers,
-      body: requestBodyValue === void 0 ? void 0 : headers["Content-Type"]?.includes("application/json") ? JSON.stringify(requestBodyValue) : String(requestBodyValue),
-      signal: controller.signal
-    });
+    const response = await rateLimitedFetch(
+      endpoint.toString(),
+      {
+        method,
+        headers,
+        body: requestBodyValue === void 0 ? void 0 : headers["Content-Type"]?.includes("application/json") ? JSON.stringify(requestBodyValue) : String(requestBodyValue),
+        signal: controller.signal
+      },
+      apiToolConfig.rateLimitConfig
+    );
     const raw = await response.text();
     let body = raw;
     const contentType = response.headers.get("content-type") || "";
@@ -3600,6 +3761,7 @@ var init_api_tool_executor = __esm({
   "src/providers/api-tool-executor.ts"() {
     "use strict";
     init_logger();
+    init_rate_limiter();
     HTTP_METHODS = /* @__PURE__ */ new Set(["get", "put", "post", "delete", "options", "head", "patch", "trace"]);
     ApiToolRegistry = class {
       bundleCache = /* @__PURE__ */ new Map();
@@ -4042,7 +4204,7 @@ async function executeWorkflowAsTool(workflowId, args, context2, argsOverrides)
     ...args,
     ...argsOverrides
   };
-  const { WorkflowCheckProvider: WorkflowCheckProvider2 } = await import("./workflow-check-provider-JIXZJNV5.mjs");
+  const { WorkflowCheckProvider: WorkflowCheckProvider2 } = await import("./workflow-check-provider-WHZP7BDF.mjs");
   const provider = new WorkflowCheckProvider2();
   const checkConfig = {
     type: "workflow",
@@ -8921,11 +9083,12 @@ async function executeCheckWithForEachItems2(checkId, forEachParent, forEachItem
       };
       {
         const assumeExpr = checkConfig?.assume;
-        if (assumeExpr) {
+        if (assumeExpr !== void 0 && assumeExpr !== null) {
           let ok = true;
           try {
             const evaluator = new FailureConditionEvaluator();
-            const exprs = Array.isArray(assumeExpr) ? assumeExpr : [assumeExpr];
+            const rawExprs = Array.isArray(assumeExpr) ? assumeExpr : [assumeExpr];
+            const exprs = rawExprs.map((e) => typeof e === "string" ? e : String(e));
             const conversation = context2.executionContext?.conversation || providerConfig?.eventContext?.conversation;
             for (const ex of exprs) {
               const res = await evaluator.evaluateIfCondition(checkId, ex, {
@@ -9366,7 +9529,7 @@ async function executeCheckWithForEachItems2(checkId, forEachParent, forEachItem
           }
         }
         try {
-          const { evaluateTransitions } = await import("./routing-SFP4D6O3.mjs");
+          const { evaluateTransitions } = await import("./routing-QHXBQS6X.mjs");
           const transTarget = await evaluateTransitions(
             onFinish.transitions,
             forEachParent,
@@ -9426,7 +9589,7 @@ async function executeCheckWithForEachItems2(checkId, forEachParent, forEachItem
             `[LevelDispatch] Error evaluating on_finish transitions for ${forEachParent}: ${e instanceof Error ? e.message : String(e)}`
           );
         }
-        const { evaluateGoto: evaluateGoto2 } = await import("./routing-SFP4D6O3.mjs");
+        const { evaluateGoto: evaluateGoto2 } = await import("./routing-QHXBQS6X.mjs");
         if (context2.debug) {
           logger.info(
             `[LevelDispatch] Evaluating on_finish.goto_js for forEach parent: ${forEachParent}`
@@ -9993,11 +10156,12 @@ async function executeSingleCheck2(checkId, context2, state, emitEvent, transiti
     };
     {
       const assumeExpr = checkConfig2?.assume;
-      if (assumeExpr) {
+      if (assumeExpr !== void 0 && assumeExpr !== null) {
         let ok = true;
         try {
           const evaluator = new FailureConditionEvaluator();
-          const exprs = Array.isArray(assumeExpr) ? assumeExpr : [assumeExpr];
+          const rawExprs = Array.isArray(assumeExpr) ? assumeExpr : [assumeExpr];
+          const exprs = rawExprs.map((e) => typeof e === "string" ? e : String(e));
           const conversation = context2.executionContext?.conversation || providerConfig?.eventContext?.conversation;
           for (const ex of exprs) {
             const res = await evaluator.evaluateIfCondition(checkId, ex, {
@@ -13177,7 +13341,8 @@ function buildEngineContextForRun(workingDirectory, config, prInfo, debug, maxPa
     sharedConcurrencyLimiter = {
       async acquire(parentSessionId, _dbg, queueTimeout) {
         const sid = parentSessionId || sessionId;
-        return fairLimiter.acquire(sid, _dbg, queueTimeout);
+        const effectiveQueueTimeout = queueTimeout ?? 0;
+        return fairLimiter.acquire(sid, _dbg, effectiveQueueTimeout);
       },
       release(parentSessionId, _dbg) {
         const sid = parentSessionId || sessionId;
@@ -13410,7 +13575,7 @@ var init_state_machine_execution_engine = __esm({
           try {
             const map = options?.webhookContext?.webhookData;
             if (map) {
-              const { CheckProviderRegistry: CheckProviderRegistry2 } = await import("./check-provider-registry-G64PWDCZ.mjs");
+              const { CheckProviderRegistry: CheckProviderRegistry2 } = await import("./check-provider-registry-3DZOXYIA.mjs");
               const reg = CheckProviderRegistry2.getInstance();
               const p = reg.getProvider("http_input");
               if (p && typeof p.setWebhookContext === "function") p.setWebhookContext(map);
@@ -13523,7 +13688,7 @@ var init_state_machine_execution_engine = __esm({
           logger.info("[StateMachine] Using state machine engine");
         }
         if (!config) {
-          const { ConfigManager } = await import("./config-OOUMTCEA.mjs");
+          const { ConfigManager } = await import("./config-DFOF7LP4.mjs");
           const configManager = new ConfigManager();
           config = await configManager.getDefaultConfig();
           logger.debug("[StateMachine] Using default configuration (no config provided)");
@@ -13533,7 +13698,7 @@ var init_state_machine_execution_engine = __esm({
           tag_filter: tagFilter
         } : config;
         try {
-          const { CheckProviderRegistry: CheckProviderRegistry2 } = await import("./check-provider-registry-G64PWDCZ.mjs");
+          const { CheckProviderRegistry: CheckProviderRegistry2 } = await import("./check-provider-registry-3DZOXYIA.mjs");
           const registry = CheckProviderRegistry2.getInstance();
           registry.setCustomTools(configWithTagFilter.tools || {});
         } catch (error) {
@@ -13574,7 +13739,7 @@ var init_state_machine_execution_engine = __esm({
             logger.debug(
               `[PolicyEngine] Loading enterprise policy engine (engine=${configWithTagFilter.policy.engine})`
             );
-            const { loadEnterprisePolicyEngine } = await import("./loader-Q7K76ZIY.mjs");
+            const { loadEnterprisePolicyEngine } = await import("./enterprise/loader");
             context2.policyEngine = await loadEnterprisePolicyEngine(configWithTagFilter.policy);
             logger.debug(
               `[PolicyEngine] Initialized: ${context2.policyEngine?.constructor?.name || "unknown"}`
@@ -13597,7 +13762,7 @@ var init_state_machine_execution_engine = __esm({
           try {
             const webhookData = this.executionContext?.webhookContext?.webhookData;
             if (webhookData instanceof Map) {
-              const { extractSlackContext: extractSlackContext2 } = await import("./schedule-tool-handler-KYDXJ2ZL.mjs");
+              const { extractSlackContext: extractSlackContext2 } = await import("./schedule-tool-handler-MPJFLH4J.mjs");
               const slackCtx = extractSlackContext2(webhookData);
               if (slackCtx) {
                 const payload = Array.from(webhookData.values())[0];
@@ -13626,7 +13791,7 @@ var init_state_machine_execution_engine = __esm({
         if (Array.isArray(configWithTagFilter.frontends) && configWithTagFilter.frontends.length > 0) {
           try {
             const { EventBus } = await import("./event-bus-5K3Y2FCS.mjs");
-            const { FrontendsHost } = await import("./host-HFOJQIOF.mjs");
+            const { FrontendsHost } = await import("./host-SE3MQHWG.mjs");
             const bus = new EventBus();
             context2.eventBus = bus;
             frontendsHost = new FrontendsHost(bus, logger);
@@ -13978,9 +14143,9 @@ var init_state_machine_execution_engine = __esm({
        * @returns Array of failure condition evaluation results
        */
       async evaluateFailureConditions(checkName, reviewSummary, config, previousOutputs, authorAssociation) {
-        const { FailureConditionEvaluator: FailureConditionEvaluator2 } = await import("./failure-condition-evaluator-HL33X7MH.mjs");
+        const { FailureConditionEvaluator: FailureConditionEvaluator2 } = await import("./failure-condition-evaluator-MMPKQGUA.mjs");
         const evaluator = new FailureConditionEvaluator2();
-        const { addEvent: addEvent3 } = await import("./trace-helpers-L3EOYW5P.mjs");
+        const { addEvent: addEvent3 } = await import("./trace-helpers-4ADQ4GB3.mjs");
         const { addFailIfTriggered } = await import("./metrics-JTOG2HNO.mjs");
         const checkConfig = config.checks?.[checkName];
         if (!checkConfig) {
@@ -16146,6 +16311,7 @@ var init_mcp_custom_sse_server = __esm({
     init_schedule_tool();
     init_schedule_tool_handler();
     init_env_resolver();
+    init_rate_limiter();
     CustomToolsSSEServer = class _CustomToolsSSEServer {
       server = null;
       port = 0;
@@ -16902,7 +17068,8 @@ var init_mcp_custom_sse_server = __esm({
               resolvedHeaders["Content-Type"] = "application/json";
             }
           }
-          const response = await fetch(url, requestOptions);
+          const rateLimitConfig = tool.rate_limit;
+          const response = await rateLimitedFetch(url, requestOptions, rateLimitConfig);
           clearTimeout(timeoutId);
           if (!response.ok) {
             let errorBody = "";
@@ -19547,6 +19714,7 @@ var init_http_client_provider = __esm({
     init_template_context();
     init_oauth2_token_cache();
     init_logger();
+    init_rate_limiter();
     HttpClientProvider = class extends CheckProvider {
       liquid;
       sandbox;
@@ -19701,6 +19869,7 @@ var init_http_client_provider = __esm({
               `[http_client] Body: ${requestBody.substring(0, 500)}${requestBody.length > 500 ? "..." : ""}`
             );
           }
+          const rateLimitConfig = config.rate_limit;
           if (resolvedOutputFile) {
             const fileResult = await this.downloadToFile(
               renderedUrl,
@@ -19708,11 +19877,19 @@ var init_http_client_provider = __esm({
               resolvedHeaders,
               requestBody,
               timeout,
-              resolvedOutputFile
+              resolvedOutputFile,
+              rateLimitConfig
             );
             return fileResult;
           }
-          const data = await this.fetchData(renderedUrl, method, resolvedHeaders, requestBody, timeout);
+          const data = await this.fetchData(
+            renderedUrl,
+            method,
+            resolvedHeaders,
+            requestBody,
+            timeout,
+            rateLimitConfig
+          );
           let processedData = data;
           if (transform) {
             try {
@@ -19795,7 +19972,7 @@ var init_http_client_provider = __esm({
           };
         }
       }
-      async fetchData(url, method, headers, body, timeout = 3e4) {
+      async fetchData(url, method, headers, body, timeout = 3e4, rateLimitConfig) {
         if (typeof fetch === "undefined") {
           throw new Error("HTTP client provider requires Node.js 18+ or node-fetch package");
         }
@@ -19818,7 +19995,7 @@ var init_http_client_provider = __esm({
               };
             }
           }
-          const response = await fetch(url, requestOptions);
+          const response = await rateLimitedFetch(url, requestOptions, rateLimitConfig);
           clearTimeout(timeoutId);
           logger.verbose(`[http_client] Response: ${response.status} ${response.statusText}`);
           if (!response.ok) {
@@ -19850,7 +20027,7 @@ var init_http_client_provider = __esm({
           throw error;
         }
       }
-      async downloadToFile(url, method, headers, body, timeout, outputFile) {
+      async downloadToFile(url, method, headers, body, timeout, outputFile, rateLimitConfig) {
         if (typeof fetch === "undefined") {
           throw new Error("HTTP client provider requires Node.js 18+ or node-fetch package");
         }
@@ -19871,7 +20048,7 @@ var init_http_client_provider = __esm({
               };
             }
           }
-          const response = await fetch(url, requestOptions);
+          const response = await rateLimitedFetch(url, requestOptions, rateLimitConfig);
           clearTimeout(timeoutId);
           if (!response.ok) {
             return {
@@ -41619,8 +41796,8 @@ function buildBuiltinGlobals(opts) {
   const asyncFunctionNames = /* @__PURE__ */ new Set();
   const scheduleFn = async (args = {}) => {
     try {
-      const { handleScheduleAction: handleScheduleAction2, buildScheduleToolContext: buildScheduleToolContext2 } = await import("./schedule-tool-7O7SWSJ4.mjs");
-      const { extractSlackContext: extractSlackContext2 } = await import("./schedule-tool-handler-KYDXJ2ZL.mjs");
+      const { handleScheduleAction: handleScheduleAction2, buildScheduleToolContext: buildScheduleToolContext2 } = await import("./schedule-tool-MKT5FZ6J.mjs");
+      const { extractSlackContext: extractSlackContext2 } = await import("./schedule-tool-handler-MPJFLH4J.mjs");
       const parentCtx = opts.sessionInfo?._parentContext;
       const webhookData = parentCtx?.prInfo?.eventContext?.webhookData;
       const visorCfg = parentCtx?.config;
@@ -44827,6 +45004,14 @@ var init_workflow_check_provider = __esm({
           inputs,
           config.checkName || workflow.id
         );
+        const parentTimeout = config.timeout || config.ai?.timeout;
+        if (parentTimeout && workflowConfig.checks) {
+          for (const stepCfg of Object.values(workflowConfig.checks)) {
+            if (!stepCfg.timeout && !stepCfg.ai?.timeout) {
+              stepCfg.timeout = parentTimeout;
+            }
+          }
+        }
         const parentMemoryCfg = parentContext?.memory && parentContext.memory.getConfig && parentContext.memory.getConfig() || parentContext?.config?.memory;
         const childJournal = new ExecutionJournal2();
         const childMemory = MemoryStore2.createIsolated(parentMemoryCfg);
@@ -45236,4 +45421,4 @@ undici/lib/fetch/body.js:
 undici/lib/websocket/frame.js:
   (*! ws. MIT License. Einar Otto Stangvik <einaros@gmail.com> *)
 */
-//# sourceMappingURL=chunk-IYXOLUDJ.mjs.map
+//# sourceMappingURL=chunk-AK64Y6Y2.mjs.map