@probelabs/visor 0.1.180-ee → 0.1.181-ee

package/dist/index.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-process.env.VISOR_VERSION = '0.1.180';
-process.env.PROBE_VERSION = '0.6.0-rc296';
-process.env.VISOR_COMMIT_SHA = '0e962afd62b2d4691e358227ba6b4b585884e526';
-process.env.VISOR_COMMIT_SHORT = '0e962af';
+process.env.VISOR_VERSION = '0.1.181';
+process.env.PROBE_VERSION = '0.6.0-rc297';
+process.env.VISOR_COMMIT_SHA = 'c204877cf5806cf0582397a486599ba83a8e45a0';
+process.env.VISOR_COMMIT_SHORT = 'c204877';
 /******/ (() => { // webpackBootstrap
 /******/ 	var __webpack_modules__ = ({
 
@@ -294716,6 +294716,17 @@ const PROBE_GRACEFUL_MARGIN_MS = 90_000;
  * as-is because there isn't enough room for a meaningful margin.
  */
 const MIN_TIMEOUT_FOR_MARGIN_MS = PROBE_GRACEFUL_MARGIN_MS + 30_000; // 120 000
+/**
+ * Lightweight callback bridge for dynamically extending a withTimeout deadline.
+ * Created per-call, wired to ProbeAgent's `timeout.extended` event so the
+ * parent's Promise.race deadline tracks the child's negotiated extensions.
+ */
+class TimeoutExtender {
+    _listener;
+    extend(extraMs) {
+        this._listener?.(extraMs);
+    }
+}
 /**
  * Helper function to log debug messages using the centralized logger
  */
@@ -295118,9 +295129,14 @@ class AIReviewService {
             }
         }
         try {
-            const call = this.callProbeAgent(prompt, schema, debugInfo, checkName, sessionId);
+            // Create an extender so withTimeout can be dynamically extended when the
+            // agent's negotiated timeout observer grants more time (timeout.extended event).
+            const extender = new TimeoutExtender();
+            const call = this.callProbeAgent(prompt, schema, debugInfo, checkName, sessionId, extender);
             const timeoutMs = Math.max(0, this.config.timeout || 0);
-            const { response, effectiveSchema, sessionId: usedSessionId, } = timeoutMs > 0 ? await this.withTimeout(call, timeoutMs, 'AI review') : await call;
+            const { response, effectiveSchema, sessionId: usedSessionId, } = timeoutMs > 0
+                ? await this.withTimeout(call, timeoutMs, 'AI review', sessionId, extender)
+                : await call;
             const processingTime = Date.now() - startTime;
             if (debugInfo) {
                 debugInfo.rawResponse = response;
@@ -295250,10 +295266,14 @@ class AIReviewService {
             };
         }
         try {
+            // Create an extender so withTimeout tracks agent's negotiated extensions
+            const extender = new TimeoutExtender();
             // Use the determined agent (cloned or original)
-            const call = this.callProbeAgentWithExistingSession(agentToUse, prompt, schema, debugInfo, checkName);
+            const call = this.callProbeAgentWithExistingSession(agentToUse, prompt, schema, debugInfo, checkName, extender);
             const timeoutMs = Math.max(0, this.config.timeout || 0);
-            const { response, effectiveSchema } = timeoutMs > 0 ? await this.withTimeout(call, timeoutMs, 'AI review (session)') : await call;
+            const { response, effectiveSchema } = timeoutMs > 0
+                ? await this.withTimeout(call, timeoutMs, 'AI review (session)', currentSessionId, extender)
+                : await call;
             const processingTime = Date.now() - startTime;
             if (debugInfo) {
                 debugInfo.rawResponse = response;
@@ -295299,19 +295319,110 @@ class AIReviewService {
         }
     }
     /**
-     * Promise timeout helper that rejects after ms if unresolved
+     * Promise timeout helper that rejects after ms if unresolved.
+     * When a sessionId is provided, triggers graceful wind-down on the
+     * ProbeAgent before rejecting, giving it a chance to summarize.
+     *
+     * When an extender is provided, the deadline can be dynamically pushed
+     * forward (e.g. when the agent's negotiated timeout observer grants an
+     * extension and emits a `timeout.extended` event).
      */
-    async withTimeout(p, ms, label = 'operation') {
+    async withTimeout(p, ms, label = 'operation', sessionId, extender) {
         let timer;
+        const startTime = Date.now();
+        let deadlineMs = ms; // total ms from startTime
         try {
             const timeout = new Promise((_, reject) => {
-                timer = setTimeout(() => reject(new Error(`${label} timed out after ${ms}ms`)), ms);
+                const scheduleTimer = () => {
+                    if (timer)
+                        clearTimeout(timer);
+                    const remaining = deadlineMs - (Date.now() - startTime);
+                    if (remaining <= 0) {
+                        fireTimeout(reject);
+                        return;
+                    }
+                    timer = setTimeout(() => fireTimeout(reject), remaining);
+                };
+                const fireTimeout = (rej) => {
+                    // Signal the agent to wind down before the hard kill.
+                    // This gives the agent a chance to produce partial results
+                    // in its bonus wind-down steps before we reject the promise.
+                    if (sessionId) {
+                        try {
+                            const agent = this.sessionRegistry.getSession(sessionId);
+                            if (agent && typeof agent.triggerGracefulWindDown === 'function') {
+                                agent.triggerGracefulWindDown();
+                            }
+                        }
+                        catch {
+                            // Best-effort: don't let registry errors block the timeout
+                        }
+                    }
+                    rej(new Error(`${label} timed out after ${deadlineMs}ms`));
+                };
+                // Allow the deadline to be extended dynamically
+                if (extender) {
+                    extender._listener = (extraMs) => {
+                        deadlineMs += extraMs;
+                        try {
+                            const { addEvent } = __nccwpck_require__(75338);
+                            addEvent('visor.timeout_extended', {
+                                extra_ms: extraMs,
+                                new_deadline_ms: deadlineMs,
+                                elapsed_ms: Date.now() - startTime,
+                            });
+                        }
+                        catch { }
+                        log(`⏱️ Timeout extended by ${Math.round(extraMs / 60000)}min → new deadline ${Math.round(deadlineMs / 60000)}min`);
+                        scheduleTimer(); // Reset the timer with the new deadline
+                    };
+                }
+                scheduleTimer();
             });
             return (await Promise.race([p, timeout]));
         }
         finally {
             if (timer)
                 clearTimeout(timer);
+            if (extender)
+                extender._listener = undefined;
+        }
+    }
+    /**
+     * Wire ProbeAgent's timeout events to a TimeoutExtender so the parent's
+     * withTimeout deadline dynamically tracks the agent's negotiated extensions.
+     *
+     * - `timeout.extended`: observer granted more time → push deadline forward
+     * - `timeout.windingDown`: observer declined → agent is finishing, log it
+     *
+     * Safe to call on older Probe versions that don't emit these events.
+     */
+    wireTimeoutEvents(agent, extender) {
+        try {
+            const events = agent.events;
+            if (!events || typeof events.on !== 'function')
+                return;
+            if (extender) {
+                events.on('timeout.extended', (data) => {
+                    log(`⏱️ Agent extended timeout: +${Math.round(data.grantedMs / 60000)}min (${data.reason || 'work in progress'})`);
+                    extender.extend(data.grantedMs);
+                });
+            }
+            events.on('timeout.windingDown', (data) => {
+                log(`⏱️ Agent winding down: ${data.reason || 'observer declined'} (extensions used: ${data.extensionsUsed ?? 0}, total extra: ${Math.round((data.totalExtraTimeMs ?? 0) / 60000)}min)`);
+                try {
+                    const { addEvent } = __nccwpck_require__(75338);
+                    addEvent('visor.agent_winding_down', {
+                        reason: data.reason || 'observer declined',
+                        extensions_used: data.extensionsUsed ?? 0,
+                        total_extra_time_ms: data.totalExtraTimeMs ?? 0,
+                    });
+                }
+                catch { }
+            });
+        }
+        catch {
+            // Best-effort: older Probe versions may not have events
         }
     }
     /**
@@ -295905,7 +296016,7 @@ ${this.escapeXml(processedFallbackDiff)}
     /**
      * Call ProbeAgent with an existing session
      */
-    async callProbeAgentWithExistingSession(agent, prompt, schema, debugInfo, _checkName) {
+    async callProbeAgentWithExistingSession(agent, prompt, schema, debugInfo, _checkName, extender) {
         // Handle mock model/provider for testing
         if (this.config.model === 'mock' || this.config.provider === 'mock') {
             log('🎭 Using mock AI model/provider for testing (session reuse)');
@@ -295925,7 +296036,10 @@ ${this.escapeXml(processedFallbackDiff)}
         if (reuseAiTimeout > 0) {
             agent.maxOperationTimeout = reuseAiTimeout;
         }
-        // Update negotiated timeout / graceful stop options on session reuse
+        // Update negotiated timeout / graceful stop options on session reuse.
+        // Budget/per-request values are passed through without capping — the agent's
+        // observer now emits `timeout.extended` events and the parent dynamically
+        // extends its withTimeout deadline to stay in sync (Probe #524).
         if (this.config.timeoutBehavior) {
             agent.timeoutBehavior = this.config.timeoutBehavior;
         }
@@ -295941,6 +296055,8 @@ ${this.escapeXml(processedFallbackDiff)}
         if (this.config.gracefulStopDeadline !== undefined) {
             agent.gracefulStopDeadline = this.config.gracefulStopDeadline;
         }
+        // Wire agent timeout events to the extender so withTimeout tracks extensions
+        this.wireTimeoutEvents(agent, extender);
         try {
             log('🚀 Calling existing ProbeAgent with answer()...');
             // Load and pass the actual schema content if provided (skip for plain schema)
@@ -296255,7 +296371,7 @@ ${'='.repeat(60)}
     /**
      * Call ProbeAgent SDK with built-in schema validation
      */
-    async callProbeAgent(prompt, schema, debugInfo, _checkName, providedSessionId) {
+    async callProbeAgent(prompt, schema, debugInfo, _checkName, providedSessionId, extender) {
         // Derive a stable session ID for this call so the engine can reuse it later
         const sessionId = providedSessionId ||
             (() => {
@@ -296393,7 +296509,10 @@ ${'='.repeat(60)}
             if (aiTimeout > 0) {
                 options.maxOperationTimeout = aiTimeout;
             }
-            // Pass negotiated timeout / graceful stop options to ProbeAgent
+            // Pass negotiated timeout / graceful stop options to ProbeAgent.
+            // Budget/per-request values are passed through without capping — the
+            // agent's observer emits `timeout.extended` events and withTimeout
+            // dynamically extends its deadline to stay in sync (Probe #524).
             if (this.config.timeoutBehavior) {
                 options.timeoutBehavior = this.config.timeoutBehavior;
             }
@@ -296527,6 +296646,8 @@ ${'='.repeat(60)}
             if (typeof agent.initialize === 'function') {
                 await agent.initialize();
             }
+            // Wire agent timeout events to the extender so withTimeout tracks extensions
+            this.wireTimeoutEvents(agent, extender);
             log('🚀 Calling ProbeAgent...');
             // Load and pass the actual schema content if provided (skip for plain schema)
             let schemaString = undefined;
@@ -298574,6 +298695,13 @@ async function main() {
                 configPath: getArg('--config'),
                 toolName: getArg('--mcp-tool-name'),
                 toolDescription: getArg('--mcp-tool-description'),
+                transport: getArg('--transport') || 'stdio',
+                port: getArg('--port') ? Number(getArg('--port')) : 8080,
+                host: getArg('--host') || '0.0.0.0',
+                authToken: getArg('--auth-token'),
+                authTokenEnv: getArg('--auth-token-env'),
+                tlsCert: getArg('--tls-cert'),
+                tlsKey: getArg('--tls-key'),
             };
             const { startMcpServer } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(93143)));
             await startMcpServer(mcpOptions);
@@ -298999,111 +299127,38 @@ async function main() {
                 logger_1.logger.warn(`[TaskTracking] Failed to initialize task store: ${err instanceof Error ? err.message : err}`);
             }
         }
-        // ---- A2A Agent Protocol Server ----
-        let a2aFrontendInstance = null;
-        let sharedEngine = null;
-        if (options.a2a || config.agent_protocol?.enabled) {
-            const { StateMachineExecutionEngine: SMEngine } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(39004)));
-            const { A2AFrontend } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(75887)));
-            const { EventBus } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(83864)));
-            const agentConfig = config.agent_protocol;
-            if (!agentConfig) {
-                console.error('Error: agent_protocol configuration is required for --a2a mode');
-                process.exit(1);
+        // ---- Parallel Runner Mode (--slack, --telegram, --a2a, --mcp, etc.) ----
+        const requestedRunners = [];
+        if (options.a2a || config.agent_protocol?.enabled)
+            requestedRunners.push('a2a');
+        if (options.slack)
+            requestedRunners.push('slack');
+        if (options.mcp)
+            requestedRunners.push('mcp');
+        if (options.telegram)
+            requestedRunners.push('telegram');
+        if (options.email)
+            requestedRunners.push('email');
+        if (options.whatsapp)
+            requestedRunners.push('whatsapp');
+        if (options.teams)
+            requestedRunners.push('teams');
+        if (requestedRunners.length > 0) {
+            const { RunnerHost } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(89736)));
+            const { createRunner } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(11866)));
+            const { initTelemetryFromConfig } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(84763)));
+            await initTelemetryFromConfig(config);
+            const engine = new state_machine_execution_engine_1.StateMachineExecutionEngine();
+            const host = new RunnerHost();
+            for (const name of requestedRunners) {
+                host.addRunner(await createRunner(name, engine, config, options));
             }
-            const engine = new SMEngine();
-            const frontend = new A2AFrontend(agentConfig, sharedTaskStore ?? undefined);
-            frontend.setEngine(engine);
-            frontend.setVisorConfig(config);
-            const eventBus = new EventBus();
-            const ctx = {
-                eventBus,
-                logger: logger_1.logger,
-                config,
-                run: { runId: crypto.randomUUID() },
-                engine,
-                visorConfig: config,
-            };
-            await frontend.start(ctx);
-            const port = agentConfig.port ?? 9000;
-            const host = agentConfig.host ?? '0.0.0.0';
-            console.log(`A2A server running on ${host}:${port}`);
-            if (options.slack === true) {
-                // Both --a2a and --slack: keep references and fall through to Slack startup
-                a2aFrontendInstance = frontend;
-                sharedEngine = engine;
-            }
-            else {
-                // Standalone --a2a mode: block here with shutdown handlers
-                let shuttingDown = false;
-                const onShutdown = async (sig) => {
-                    if (shuttingDown) {
-                        process.exit(1);
-                        return;
-                    }
-                    shuttingDown = true;
-                    logger_1.logger.info(`[A2A] Received ${sig}, shutting down gracefully...`);
-                    const forceTimer = setTimeout(() => {
-                        logger_1.logger.error('[A2A] Shutdown timed out, forcing exit');
-                        process.exit(1);
-                    }, 5000);
-                    forceTimer.unref();
-                    try {
-                        await frontend.stop();
-                    }
-                    catch { }
-                    process.exit(0);
-                };
-                process.on('SIGINT', sig => {
-                    onShutdown(sig);
-                });
-                process.on('SIGTERM', sig => {
-                    onShutdown(sig);
-                });
-                process.stdin.resume();
-                return;
-            }
-        }
-        // Socket Mode runner: visor --slack [--config file]
-        if (options.slack === true) {
-            const { SlackSocketRunner } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(45278)));
-            const engine = sharedEngine ?? new state_machine_execution_engine_1.StateMachineExecutionEngine();
-            const slackAny = config.slack || {};
-            const endpoint = slackAny.endpoint || '/bots/slack/support';
-            const mentions = slackAny.mentions || 'direct';
-            const threads = slackAny.threads || 'any';
-            const allow = Array.isArray(slackAny.channel_allowlist) ? slackAny.channel_allowlist : [];
-            const appToken = slackAny.app_token || process.env.SLACK_APP_TOKEN;
-            // Initialize telemetry for Slack mode (normally done later for CLI runs).
-            if (config?.telemetry) {
-                const t = config.telemetry;
-                await (0, opentelemetry_1.initTelemetry)({
-                    enabled: process.env.VISOR_TELEMETRY_ENABLED === 'true' || !!t?.enabled,
-                    sink: process.env.VISOR_TELEMETRY_SINK || t?.sink || 'file',
-                    file: { dir: process.env.VISOR_TRACE_DIR || t?.file?.dir, ndjson: !!t?.file?.ndjson },
-                    autoInstrument: !!t?.tracing?.auto_instrumentations,
-                    traceReport: !!t?.tracing?.trace_report?.enabled,
-                });
-            }
-            else {
-                await (0, opentelemetry_1.initTelemetry)({
-                    enabled: process.env.VISOR_TELEMETRY_ENABLED === 'true',
-                    sink: process.env.VISOR_TELEMETRY_SINK || 'file',
-                    file: { dir: process.env.VISOR_TRACE_DIR },
-                });
-            }
-            const runner = new SlackSocketRunner(engine, config, {
-                appToken,
-                endpoint,
-                mentions,
-                threads,
-                channel_allowlist: allow,
-            });
             if (sharedTaskStore)
-                runner.setTaskStore(sharedTaskStore, options.configPath);
-            await runner.start();
-            console.log('✅ Slack Socket Mode is running. Press Ctrl+C to exit.');
-            // Start config file watcher if --watch is enabled
+                host.setTaskStore(sharedTaskStore, options.configPath);
+            await host.startAll();
+            const names = requestedRunners.join(', ');
+            console.log(`✅ Runner(s) started: ${names}. Press Ctrl+C to exit.`);
+            // Config watcher (shared, broadcasts to all runners)
             let configWatcher;
             let configWatchStore;
             if (options.watch) {
@@ -299123,7 +299178,7 @@ async function main() {
                         snapshotStore: watchStore,
                         onSwap: newConfig => {
                             config = newConfig;
-                            runner.updateConfig(newConfig);
+                            host.broadcastConfigUpdate(newConfig);
                             logger_1.logger.info('[Watch] Config updated');
                         },
                     });
@@ -299134,23 +299189,20 @@ async function main() {
                     logger_1.logger.info('Config watching enabled');
                 }
                 catch (watchErr) {
-                    logger_1.logger.warn(`Config watch setup failed (Slack mode continues without it): ${watchErr}`);
+                    logger_1.logger.warn(`Config watch setup failed (runners continue without it): ${watchErr}`);
                 }
             }
-            // Graceful shutdown: notify active threads before exiting
+            // Unified graceful shutdown
             let shuttingDown = false;
             const onShutdown = async (sig) => {
                 if (shuttingDown) {
-                    // Second signal — force exit immediately
-                    logger_1.logger.warn(`[Slack] Received ${sig} again, forcing exit`);
                     process.exit(1);
                     return;
                 }
                 shuttingDown = true;
-                logger_1.logger.info(`[Slack] Received ${sig}, shutting down gracefully…`);
-                // Force exit after 5s if graceful shutdown hangs
+                logger_1.logger.info(`[RunnerHost] Received ${sig}, shutting down gracefully…`);
                 const forceTimer = setTimeout(() => {
-                    logger_1.logger.error('[Slack] Graceful shutdown timed out after 5s, forcing exit');
+                    logger_1.logger.error('[RunnerHost] Shutdown timed out after 5s, forcing exit');
                     process.exit(1);
                 }, 5000);
                 forceTimer.unref();
@@ -299159,15 +299211,7 @@ async function main() {
                         configWatcher.stop();
                     if (configWatchStore)
                         configWatchStore.shutdown().catch(() => { });
-                    if (a2aFrontendInstance) {
-                        try {
-                            await a2aFrontendInstance.stop();
-                        }
-                        catch {
-                            /* ignore */
-                        }
-                    }
-                    await runner.stop();
+                    await host.stopAll();
                     if (sharedTaskStore) {
                         try {
                             await sharedTaskStore.shutdown();
@@ -299176,444 +299220,8 @@ async function main() {
                     }
                 }
                 catch (err) {
-                    logger_1.logger.warn(`[Slack] Error during shutdown: ${err}`);
-                }
-                process.exit(0);
-            };
-            process.on('SIGINT', sig => {
-                onShutdown(sig);
-            });
-            process.on('SIGTERM', sig => {
-                onShutdown(sig);
-            });
-            process.stdin.resume();
-            return;
-        }
-        // Long-polling runner: visor --telegram [--config file]
-        if (options.telegram === true) {
-            const { TelegramPollingRunner } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(33519)));
-            const engine = sharedEngine ?? new state_machine_execution_engine_1.StateMachineExecutionEngine();
-            const telegramAny = config.telegram || {};
-            // Initialize telemetry for Telegram mode
-            if (config?.telemetry) {
-                const t = config.telemetry;
-                await (0, opentelemetry_1.initTelemetry)({
-                    enabled: process.env.VISOR_TELEMETRY_ENABLED === 'true' || !!t?.enabled,
-                    sink: process.env.VISOR_TELEMETRY_SINK || t?.sink || 'file',
-                    file: { dir: process.env.VISOR_TRACE_DIR || t?.file?.dir, ndjson: !!t?.file?.ndjson },
-                    autoInstrument: !!t?.tracing?.auto_instrumentations,
-                    traceReport: !!t?.tracing?.trace_report?.enabled,
-                });
-            }
-            else {
-                await (0, opentelemetry_1.initTelemetry)({
-                    enabled: process.env.VISOR_TELEMETRY_ENABLED === 'true',
-                    sink: process.env.VISOR_TELEMETRY_SINK || 'file',
-                    file: { dir: process.env.VISOR_TRACE_DIR },
-                });
-            }
-            const runner = new TelegramPollingRunner(engine, config, {
-                botToken: telegramAny.bot_token || process.env.TELEGRAM_BOT_TOKEN,
-                pollingTimeout: telegramAny.polling_timeout || 30,
-                chatAllowlist: telegramAny.chat_allowlist,
-                requireMention: telegramAny.require_mention ?? true,
-                workflow: telegramAny.workflow,
-            });
-            if (sharedTaskStore)
-                runner.setTaskStore(sharedTaskStore, options.configPath);
-            await runner.start();
-            console.log('✅ Telegram long-polling is running. Press Ctrl+C to exit.');
-            // Config watcher (same pattern as Slack)
-            let configWatcher;
-            let configWatchStore;
-            if (options.watch) {
-                if (!options.configPath) {
-                    console.error('❌ --watch requires --config <path>');
-                    process.exit(1);
-                }
-                try {
-                    const { ConfigSnapshotStore } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(23147)));
-                    const { ConfigReloader } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(75773)));
-                    const { ConfigWatcher } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(39995)));
-                    const watchStore = new ConfigSnapshotStore();
-                    await watchStore.initialize();
-                    const reloader = new ConfigReloader({
-                        configPath: options.configPath,
-                        configManager,
-                        snapshotStore: watchStore,
-                        onSwap: newConfig => {
-                            config = newConfig;
-                            runner.updateConfig(newConfig);
-                            logger_1.logger.info('[Watch] Config updated');
-                        },
-                    });
-                    const watcher = new ConfigWatcher(options.configPath, reloader);
-                    watcher.start();
-                    configWatcher = watcher;
-                    configWatchStore = watchStore;
-                    logger_1.logger.info('Config watching enabled');
-                }
-                catch (watchErr) {
-                    logger_1.logger.warn(`Config watch setup failed (Telegram mode continues without it): ${watchErr}`);
-                }
-            }
-            // Graceful shutdown
-            let shuttingDown = false;
-            const onShutdown = async (sig) => {
-                if (shuttingDown) {
-                    process.exit(1);
-                    return;
+                    logger_1.logger.warn(`[RunnerHost] Error during shutdown: ${err}`);
                 }
-                shuttingDown = true;
-                logger_1.logger.info(`[Telegram] Received ${sig}, shutting down gracefully…`);
-                const forceTimer = setTimeout(() => {
-                    logger_1.logger.error('[Telegram] Shutdown timed out, forcing exit');
-                    process.exit(1);
-                }, 5000);
-                forceTimer.unref();
-                try {
-                    if (configWatcher)
-                        configWatcher.stop();
-                    if (configWatchStore)
-                        configWatchStore.shutdown().catch(() => { });
-                    await runner.stop();
-                    if (sharedTaskStore) {
-                        try {
-                            await sharedTaskStore.shutdown();
-                        }
-                        catch { }
-                    }
-                }
-                catch { }
-                process.exit(0);
-            };
-            process.on('SIGINT', sig => {
-                onShutdown(sig);
-            });
-            process.on('SIGTERM', sig => {
-                onShutdown(sig);
-            });
-            process.stdin.resume();
-            return;
-        }
-        // Email polling runner: visor --email [--config file]
-        if (options.email === true) {
-            const { EmailPollingRunner } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(66550)));
-            const engine = sharedEngine ?? new state_machine_execution_engine_1.StateMachineExecutionEngine();
-            const emailAny = config.email || {};
-            // Initialize telemetry for Email mode
-            if (config?.telemetry) {
-                const t = config.telemetry;
-                await (0, opentelemetry_1.initTelemetry)({
-                    enabled: process.env.VISOR_TELEMETRY_ENABLED === 'true' || !!t?.enabled,
-                    sink: process.env.VISOR_TELEMETRY_SINK || t?.sink || 'file',
-                    file: { dir: process.env.VISOR_TRACE_DIR || t?.file?.dir, ndjson: !!t?.file?.ndjson },
-                    autoInstrument: !!t?.tracing?.auto_instrumentations,
-                    traceReport: !!t?.tracing?.trace_report?.enabled,
-                });
-            }
-            else {
-                await (0, opentelemetry_1.initTelemetry)({
-                    enabled: process.env.VISOR_TELEMETRY_ENABLED === 'true',
-                    sink: process.env.VISOR_TELEMETRY_SINK || 'file',
-                    file: { dir: process.env.VISOR_TRACE_DIR },
-                });
-            }
-            const runner = new EmailPollingRunner(engine, config, {
-                receive: emailAny.receive || {},
-                send: emailAny.send || {},
-                allowlist: emailAny.allowlist,
-                workflow: emailAny.workflow,
-            });
-            if (sharedTaskStore)
-                runner.setTaskStore(sharedTaskStore, options.configPath);
-            await runner.start();
-            const receiveType = emailAny.receive?.type || 'imap';
-            console.log(`✅ Email runner (${receiveType}) is running. Press Ctrl+C to exit.`);
-            // Config watcher (same pattern as Telegram)
-            let configWatcher;
-            let configWatchStore;
-            if (options.watch) {
-                if (!options.configPath) {
-                    console.error('❌ --watch requires --config <path>');
-                    process.exit(1);
-                }
-                try {
-                    const { ConfigSnapshotStore } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(23147)));
-                    const { ConfigReloader } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(75773)));
-                    const { ConfigWatcher } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(39995)));
-                    const watchStore = new ConfigSnapshotStore();
-                    await watchStore.initialize();
-                    const reloader = new ConfigReloader({
-                        configPath: options.configPath,
-                        configManager,
-                        snapshotStore: watchStore,
-                        onSwap: newConfig => {
-                            config = newConfig;
-                            runner.updateConfig(newConfig);
-                            logger_1.logger.info('[Watch] Config updated');
-                        },
-                    });
-                    const watcher = new ConfigWatcher(options.configPath, reloader);
-                    watcher.start();
-                    configWatcher = watcher;
-                    configWatchStore = watchStore;
-                    logger_1.logger.info('Config watching enabled');
-                }
-                catch (watchErr) {
-                    logger_1.logger.warn(`Config watch setup failed (Email mode continues without it): ${watchErr}`);
-                }
-            }
-            // Graceful shutdown
-            let shuttingDown = false;
-            const onShutdown = async (sig) => {
-                if (shuttingDown) {
-                    process.exit(1);
-                    return;
-                }
-                shuttingDown = true;
-                logger_1.logger.info(`[Email] Received ${sig}, shutting down gracefully…`);
-                const forceTimer = setTimeout(() => {
-                    logger_1.logger.error('[Email] Shutdown timed out, forcing exit');
-                    process.exit(1);
-                }, 5000);
-                forceTimer.unref();
-                try {
-                    if (configWatcher)
-                        configWatcher.stop();
-                    if (configWatchStore)
-                        configWatchStore.shutdown().catch(() => { });
-                    await runner.stop();
-                    if (sharedTaskStore) {
-                        try {
-                            await sharedTaskStore.shutdown();
-                        }
-                        catch { }
-                    }
-                }
-                catch { }
-                process.exit(0);
-            };
-            process.on('SIGINT', sig => {
-                onShutdown(sig);
-            });
-            process.on('SIGTERM', sig => {
-                onShutdown(sig);
-            });
-            process.stdin.resume();
-            return;
-        }
-        // WhatsApp webhook runner: visor --whatsapp [--config file]
-        if (options.whatsapp === true) {
-            const { WhatsAppWebhookRunner } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(21718)));
-            const engine = sharedEngine ?? new state_machine_execution_engine_1.StateMachineExecutionEngine();
-            const waAny = config.whatsapp || {};
-            // Initialize telemetry for WhatsApp mode
-            if (config?.telemetry) {
-                const t = config.telemetry;
-                await (0, opentelemetry_1.initTelemetry)({
-                    enabled: process.env.VISOR_TELEMETRY_ENABLED === 'true' || !!t?.enabled,
-                    sink: process.env.VISOR_TELEMETRY_SINK || t?.sink || 'file',
-                    file: { dir: process.env.VISOR_TRACE_DIR || t?.file?.dir, ndjson: !!t?.file?.ndjson },
-                    autoInstrument: !!t?.tracing?.auto_instrumentations,
-                    traceReport: !!t?.tracing?.trace_report?.enabled,
-                });
-            }
-            else {
-                await (0, opentelemetry_1.initTelemetry)({
-                    enabled: process.env.VISOR_TELEMETRY_ENABLED === 'true',
-                    sink: process.env.VISOR_TELEMETRY_SINK || 'file',
-                    file: { dir: process.env.VISOR_TRACE_DIR },
-                });
-            }
-            const runner = new WhatsAppWebhookRunner(engine, config, {
-                accessToken: waAny.access_token || process.env.WHATSAPP_ACCESS_TOKEN,
-                phoneNumberId: waAny.phone_number_id || process.env.WHATSAPP_PHONE_NUMBER_ID,
-                appSecret: waAny.app_secret || process.env.WHATSAPP_APP_SECRET,
-                verifyToken: waAny.verify_token || process.env.WHATSAPP_VERIFY_TOKEN,
-                apiVersion: waAny.api_version || 'v21.0',
-                port: waAny.port || parseInt(process.env.WHATSAPP_WEBHOOK_PORT || '8443'),
-                host: waAny.host || '0.0.0.0',
-                phoneAllowlist: waAny.phone_allowlist,
-                workflow: waAny.workflow,
-            });
-            if (sharedTaskStore)
-                runner.setTaskStore(sharedTaskStore, options.configPath);
-            await runner.start();
-            const port = waAny.port || parseInt(process.env.WHATSAPP_WEBHOOK_PORT || '8443');
-            console.log(`✅ WhatsApp webhook server running on port ${port}. Press Ctrl+C to exit.`);
-            // Config watcher (same pattern as Telegram/Email)
-            let configWatcher;
-            let configWatchStore;
-            if (options.watch) {
-                if (!options.configPath) {
-                    console.error('❌ --watch requires --config <path>');
-                    process.exit(1);
-                }
-                try {
-                    const { ConfigSnapshotStore } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(23147)));
-                    const { ConfigReloader } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(75773)));
-                    const { ConfigWatcher } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(39995)));
-                    const watchStore = new ConfigSnapshotStore();
-                    await watchStore.initialize();
-                    const reloader = new ConfigReloader({
-                        configPath: options.configPath,
-                        configManager,
-                        snapshotStore: watchStore,
-                        onSwap: newConfig => {
-                            config = newConfig;
-                            runner.updateConfig(newConfig);
-                            logger_1.logger.info('[Watch] Config updated');
-                        },
-                    });
-                    const watcher = new ConfigWatcher(options.configPath, reloader);
-                    watcher.start();
-                    configWatcher = watcher;
-                    configWatchStore = watchStore;
-                    logger_1.logger.info('Config watching enabled');
-                }
-                catch (watchErr) {
-                    logger_1.logger.warn(`Config watch setup failed (WhatsApp mode continues without it): ${watchErr}`);
-                }
-            }
-            // Graceful shutdown
-            let shuttingDown = false;
-            const onShutdown = async (sig) => {
-                if (shuttingDown) {
-                    process.exit(1);
-                    return;
-                }
-                shuttingDown = true;
-                logger_1.logger.info(`[WhatsApp] Received ${sig}, shutting down gracefully…`);
-                const forceTimer = setTimeout(() => {
-                    logger_1.logger.error('[WhatsApp] Shutdown timed out, forcing exit');
-                    process.exit(1);
-                }, 5000);
-                forceTimer.unref();
-                try {
-                    if (configWatcher)
-                        configWatcher.stop();
-                    if (configWatchStore)
-                        configWatchStore.shutdown().catch(() => { });
-                    await runner.stop();
-                    if (sharedTaskStore) {
-                        try {
-                            await sharedTaskStore.shutdown();
-                        }
-                        catch { }
-                    }
-                }
-                catch { }
-                process.exit(0);
-            };
-            process.on('SIGINT', sig => {
-                onShutdown(sig);
-            });
-            process.on('SIGTERM', sig => {
-                onShutdown(sig);
-            });
-            process.stdin.resume();
-            return;
-        }
-        // ── Microsoft Teams webhook runner ──────────────────────────────
-        if (options.teams === true) {
-            const { TeamsWebhookRunner } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(86710)));
-            const engine = sharedEngine ?? new state_machine_execution_engine_1.StateMachineExecutionEngine();
-            const teamsAny = config.teams || {};
-            // Initialize telemetry for Teams mode
-            if (config?.telemetry) {
-                const t = config.telemetry;
-                await (0, opentelemetry_1.initTelemetry)({
-                    enabled: process.env.VISOR_TELEMETRY_ENABLED === 'true' || !!t?.enabled,
-                    sink: process.env.VISOR_TELEMETRY_SINK || t?.sink || 'file',
-                    file: { dir: process.env.VISOR_TRACE_DIR || t?.file?.dir, ndjson: !!t?.file?.ndjson },
-                    autoInstrument: !!t?.tracing?.auto_instrumentations,
-                    traceReport: !!t?.tracing?.trace_report?.enabled,
-                });
-            }
-            else {
-                await (0, opentelemetry_1.initTelemetry)({
-                    enabled: process.env.VISOR_TELEMETRY_ENABLED === 'true',
-                    sink: process.env.VISOR_TELEMETRY_SINK || 'file',
-                    file: { dir: process.env.VISOR_TRACE_DIR },
-                });
-            }
-            const runner = new TeamsWebhookRunner(engine, config, {
-                appId: teamsAny.app_id || process.env.TEAMS_APP_ID,
-                appPassword: teamsAny.app_password || process.env.TEAMS_APP_PASSWORD,
-                tenantId: teamsAny.tenant_id || process.env.TEAMS_TENANT_ID,
-                port: teamsAny.port || parseInt(process.env.TEAMS_WEBHOOK_PORT || '3978'),
-                host: teamsAny.host || '0.0.0.0',
-                userAllowlist: teamsAny.user_allowlist,
-                workflow: teamsAny.workflow,
-            });
-            if (sharedTaskStore)
-                runner.setTaskStore(sharedTaskStore, options.configPath);
-            await runner.start();
-            const port = teamsAny.port || parseInt(process.env.TEAMS_WEBHOOK_PORT || '3978');
-            console.log(`✅ Teams webhook server running on port ${port}. Press Ctrl+C to exit.`);
-            // Config watcher (same pattern as WhatsApp/Telegram/Email)
-            let configWatcher;
-            let configWatchStore;
-            if (options.watch) {
-                if (!options.configPath) {
-                    console.error('❌ --watch requires --config <path>');
-                    process.exit(1);
-                }
-                try {
-                    const { ConfigSnapshotStore } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(23147)));
-                    const { ConfigReloader } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(75773)));
-                    const { ConfigWatcher } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(39995)));
-                    const watchStore = new ConfigSnapshotStore();
-                    await watchStore.initialize();
-                    const reloader = new ConfigReloader({
-                        configPath: options.configPath,
-                        configManager,
-                        snapshotStore: watchStore,
-                        onSwap: newConfig => {
-                            config = newConfig;
-                            runner.updateConfig(newConfig);
-                            logger_1.logger.info('[Watch] Config updated');
-                        },
-                    });
-                    const watcher = new ConfigWatcher(options.configPath, reloader);
-                    watcher.start();
-                    configWatcher = watcher;
-                    configWatchStore = watchStore;
-                    logger_1.logger.info('Config watching enabled');
-                }
-                catch (watchErr) {
-                    logger_1.logger.warn(`Config watch setup failed (Teams mode continues without it): ${watchErr}`);
-                }
-            }
-            // Graceful shutdown
-            let shuttingDown = false;
-            const onShutdown = async (sig) => {
-                if (shuttingDown) {
-                    process.exit(1);
-                    return;
-                }
-                shuttingDown = true;
-                logger_1.logger.info(`[Teams] Received ${sig}, shutting down gracefully…`);
-                const forceTimer = setTimeout(() => {
-                    logger_1.logger.error('[Teams] Shutdown timed out, forcing exit');
-                    process.exit(1);
-                }, 5000);
-                forceTimer.unref();
-                try {
-                    if (configWatcher)
-                        configWatcher.stop();
-                    if (configWatchStore)
-                        configWatchStore.shutdown().catch(() => { });
-                    await runner.stop();
-                    if (sharedTaskStore) {
-                        try {
-                            await sharedTaskStore.shutdown();
-                        }
-                        catch { }
-                    }
-                }
-                catch { }
                 process.exit(0);
             };
             process.on('SIGINT', sig => {
@@ -300502,6 +300110,9 @@ class CLI {
             .option('--whatsapp', 'Enable WhatsApp webhook runner (uses WHATSAPP_ACCESS_TOKEN)')
             .option('--teams', 'Enable Microsoft Teams webhook runner (uses TEAMS_APP_ID)')
             .option('--a2a', 'Enable A2A Agent Protocol server mode')
+            .option('--mcp', 'Enable MCP HTTP server runner (composable, requires --mcp-auth-token)')
+            .option('--mcp-port <port>', 'Port for MCP HTTP server (default: 8080)', value => parseInt(value, 10))
+            .option('--mcp-auth-token <token>', 'Bearer token for MCP HTTP server authentication')
             .option('-c, --check <type>', 'Specify check type (can be used multiple times)', this.collectChecks, [])
             .option('-o, --output <format>', 'Output format (table, json, markdown, sarif)', 'table')
             .option('--output-file <path>', 'Write formatted output to a file instead of stdout')
@@ -300639,6 +300250,9 @@ class CLI {
                 whatsapp: Boolean(options.whatsapp),
                 teams: Boolean(options.teams),
                 a2a: Boolean(options.a2a),
+                mcp: Boolean(options.mcp),
+                mcpPort: options.mcpPort,
+                mcpAuthToken: options.mcpAuthToken,
                 tui: Boolean(options.tui),
                 keepWorkspace: Boolean(options.keepWorkspace),
                 workspacePath: options.workspacePath,
@@ -300784,7 +300398,9 @@ Examples:
   visor --check all --fail-fast --output json                # Stop on first failure
   visor --tags local,fast --output table                      # Run checks tagged as 'local' or 'fast'
   visor --exclude-tags slow,experimental --output json        # Skip checks tagged as 'slow' or 'experimental'
-  visor --tags security --exclude-tags slow                   # Run security checks but skip slow ones`;
+  visor --tags security --exclude-tags slow                   # Run security checks but skip slow ones
+  visor --slack --mcp --mcp-auth-token secret                 # Run Slack + MCP HTTP in parallel
+  visor --slack --a2a --telegram                              # Run multiple frontends in parallel`;
     }
     /**
      * Display help
@@ -302566,6 +302182,7 @@ class ConfigManager {
                         const allowedTopLevelKeys = new Set([
                             'tests',
                             'slack',
+                            'mcp_server',
                             'sandboxes',
                             'sandbox',
                             'sandbox_defaults',
@@ -305334,6 +304951,7 @@ const adapter_1 = __nccwpck_require__(8611);
 const crypto_1 = __nccwpck_require__(76982);
 const workspace_manager_1 = __nccwpck_require__(6134);
 class EmailPollingRunner {
+    name = 'email';
     client;
     adapter;
     engine;
@@ -308595,9 +308213,12 @@ class GitHubFrontend {
                         ? failureResults.some((r) => r && r.failed)
                         : false;
                     const group = this.getGroupForCheck(ctx, ev.checkId);
-                    // Extract text from JSON-like content if template didn't unwrap it properly
+                    // Extract text from JSON-like content if template didn't unwrap it properly.
+                    // Fall back to output.text / output.response when template rendering failed
+                    // (e.g., template file not found in ncc bundle) — this is the primary path
+                    // for schema-based checks like comment-assistant / issue-assistant.
                     const rawContent = ev?.result?.content;
-                    const extractedContent = (0, json_text_extractor_1.extractTextFromJson)(rawContent);
+                    const extractedContent = (0, json_text_extractor_1.extractTextFromJson)(rawContent) ?? (0, json_text_extractor_1.extractTextFromJson)(ev?.result?.output);
                     this.upsertSectionState(group, ev.checkId, {
                         status: 'completed',
                         conclusion: failed ? 'failure' : 'success',
@@ -318484,13 +318105,13 @@ function configureLoggerFromCli(options) {
  * MCP Server for Visor
  *
  * Exposes Visor workflows as MCP tools, allowing Claude Code and other
- * MCP clients to execute workflows programmatically via stdio transport.
+ * MCP clients to execute workflows programmatically via stdio or HTTP transport.
  *
  * Usage:
- *   # Generic mode - workflow is a tool parameter
+ *   # Generic mode - workflow is a tool parameter (stdio)
  *   visor mcp-server
  *
- *   # Fixed workflow mode - workflow is pre-configured
+ *   # Fixed workflow mode - workflow is pre-configured (stdio)
  *   visor mcp-server --config defaults/code-review.yaml
  *
  *   # Custom tool name and description
@@ -318498,6 +318119,17 @@ function configureLoggerFromCli(options) {
  *     --mcp-tool-name "code_review" \
  *     --mcp-tool-description "Run a code review for current uncommitted changes"
  *
+ *   # Remote HTTP mode with Bearer token auth
+ *   visor mcp-server --transport http --port 8080 --auth-token "my-secret"
+ *
+ *   # HTTP with token from environment variable
+ *   VISOR_MCP_TOKEN=secret visor mcp-server --transport http --auth-token-env VISOR_MCP_TOKEN
+ *
+ *   # HTTPS with TLS certificates
+ *   visor mcp-server --transport http --port 443 \
+ *     --tls-cert /path/to/cert.pem --tls-key /path/to/key.pem \
+ *     --auth-token-env VISOR_MCP_TOKEN
+ *
  * Claude Code config example (~/.claude/claude_desktop_config.json):
  *   {
  *     "mcpServers": {
@@ -318547,13 +318179,19 @@ exports.resolveWorkflowPath = resolveWorkflowPath;
 exports.formatResults = formatResults;
 exports.executeWorkflow = executeWorkflow;
 exports.executeFixedWorkflow = executeFixedWorkflow;
+exports.validateBearerToken = validateBearerToken;
+exports.createHttpMcpServer = createHttpMcpServer;
 exports.startMcpServer = startMcpServer;
 const mcp_js_1 = __nccwpck_require__(23886);
 const stdio_js_1 = __nccwpck_require__(64239);
+const streamableHttp_js_1 = __nccwpck_require__(1048);
 const zod_1 = __nccwpck_require__(50924);
 const sdk_1 = __nccwpck_require__(1091);
 const path = __importStar(__nccwpck_require__(16928));
 const fs = __importStar(__nccwpck_require__(79896));
+const http = __importStar(__nccwpck_require__(58611));
+const https = __importStar(__nccwpck_require__(65692));
+const crypto = __importStar(__nccwpck_require__(76982));
 /**
  * Available default workflows bundled with Visor.
  */
@@ -318563,12 +318201,31 @@ exports.DEFAULT_WORKFLOWS = [
     'task-refinement',
     'code-refiner',
 ];
+/**
+ * Resolve the Visor version from package.json or environment.
+ */
+function getVisorVersion() {
+    if (process.env.VISOR_VERSION)
+        return process.env.VISOR_VERSION;
+    try {
+        const pkgPath = path.join(__dirname, '..', 'package.json');
+        if (fs.existsSync(pkgPath)) {
+            const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8'));
+            if (pkg.version)
+                return pkg.version;
+        }
+    }
+    catch { }
+    return 'unknown';
+}
 /**
  * Server metadata for MCP protocol.
  */
 exports.SERVER_INFO = {
     name: 'visor',
-    version: '1.0.0',
+    get version() {
+        return getVisorVersion();
+    },
     description: 'Visor is an AI-powered code review and workflow automation tool. ' +
         'It analyzes code for security vulnerabilities, performance issues, architectural problems, ' +
         'and style violations. Visor can also orchestrate complex multi-step workflows with AI agents, ' +
@@ -318882,15 +318539,233 @@ async function executeFixedWorkflow(args, workflowPath) {
         };
     }
 }
+/**
+ * Validate a Bearer token from an HTTP request using timing-safe comparison.
+ */
+function validateBearerToken(req, expectedToken) {
+    const header = req.headers['authorization'];
+    if (!header || !header.startsWith('Bearer '))
+        return false;
+    const token = header.slice(7);
+    if (token.length !== expectedToken.length)
+        return false;
+    try {
+        return crypto.timingSafeEqual(Buffer.from(token), Buffer.from(expectedToken));
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Read and parse JSON body from an HTTP request.
+ */
+function readBody(req) {
+    return new Promise((resolve, reject) => {
+        let data = '';
+        req.on('data', (chunk) => (data += chunk));
+        req.on('end', () => {
+            if (!data.trim()) {
+                resolve(undefined);
+                return;
+            }
+            try {
+                resolve(JSON.parse(data));
+            }
+            catch {
+                reject(new Error('Invalid JSON'));
+            }
+        });
+        req.on('error', reject);
+    });
+}
+/**
+ * Create and start an MCP HTTP/HTTPS server, returning a handle for lifecycle control.
+ *
+ * Unlike startHttpMcpServer (used internally by startMcpServer), this function
+ * does NOT register process signal handlers — the caller is responsible for
+ * calling handle.close() during shutdown.
+ */
+async function createHttpMcpServer(options) {
+    // If fixed workflow mode, validate config path at startup
+    let resolvedWorkflowPath;
+    if (options.configPath) {
+        resolvedWorkflowPath = resolveWorkflowPath(options.configPath);
+    }
+    const server = new mcp_js_1.McpServer({ name: exports.SERVER_INFO.name, version: exports.SERVER_INFO.version }, { capabilities: { tools: {} } });
+    const toolName = options.toolName || 'run_workflow';
+    const toolDescription = options.toolDescription || exports.RUN_WORKFLOW_DESCRIPTION;
+    if (resolvedWorkflowPath) {
+        server.tool(toolName, toolDescription, {
+            message: exports.FixedWorkflowSchema.shape.message,
+            checks: exports.FixedWorkflowSchema.shape.checks,
+            format: exports.FixedWorkflowSchema.shape.format,
+        }, async (args) => executeFixedWorkflow(args, resolvedWorkflowPath));
+    }
+    else {
+        server.tool(toolName, toolDescription, {
+            workflow: exports.RunWorkflowSchema.shape.workflow,
+            message: exports.RunWorkflowSchema.shape.message,
+            checks: exports.RunWorkflowSchema.shape.checks,
+            format: exports.RunWorkflowSchema.shape.format,
+        }, async (args) => executeWorkflow(args));
+    }
+    return startHttpMcpServerInternal(server, options);
+}
+/**
+ * Start the MCP server over HTTP/HTTPS with StreamableHTTPServerTransport.
+ * Returns a handle for non-blocking shutdown.
+ */
+async function startHttpMcpServerInternal(server, options) {
+    const port = options.port || 8080;
+    const host = options.host || '0.0.0.0';
+    // Resolve auth token
+    const authToken = options.authToken || (options.authTokenEnv ? process.env[options.authTokenEnv] : undefined);
+    if (!authToken) {
+        throw new Error('HTTP transport requires --auth-token or --auth-token-env for security. ' +
+            'Refusing to start an unauthenticated remote MCP endpoint.');
+    }
+    // Per-session transport map
+    const transports = new Map();
+    const handleRequest = async (req, res) => {
+        try {
+            await handleRequestInner(req, res);
+        }
+        catch (err) {
+            console.error(`[MCP] Request handler error: ${err}`);
+            if (!res.headersSent) {
+                res.writeHead(500, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ error: 'Internal server error' }));
+            }
+        }
+    };
+    const handleRequestInner = async (req, res) => {
+        // CORS preflight
+        if (req.method === 'OPTIONS') {
+            res.writeHead(204, {
+                'Access-Control-Allow-Origin': '*',
+                'Access-Control-Allow-Methods': 'GET, POST, DELETE, OPTIONS',
+                'Access-Control-Allow-Headers': 'Content-Type, Authorization, mcp-session-id',
+            });
+            res.end();
+            return;
+        }
+        // Auth check on all requests (per MCP spec → OAuth 2.1 § 5.3 → RFC 6750 § 3)
+        if (!validateBearerToken(req, authToken)) {
+            const hasAuthHeader = !!req.headers['authorization'];
+            // RFC 6750 §3.1: invalid_token when a token is present but wrong;
+            // omit error param when no credentials are provided at all.
+            const wwwAuth = hasAuthHeader
+                ? 'Bearer error="invalid_token", error_description="The access token is invalid or expired"'
+                : 'Bearer';
+            res.writeHead(401, {
+                'WWW-Authenticate': wwwAuth,
+                'Content-Type': 'application/json',
+            });
+            res.end(JSON.stringify({
+                error: hasAuthHeader ? 'invalid_token' : 'unauthorized',
+                error_description: hasAuthHeader
+                    ? 'The access token is invalid or expired'
+                    : 'Authentication required. Provide a Bearer token in the Authorization header.',
+            }));
+            return;
+        }
+        // Only serve /mcp endpoint
+        const url = new URL(req.url || '/', `http://${req.headers.host || 'localhost'}`);
+        if (url.pathname !== '/mcp') {
+            res.writeHead(404);
+            res.end('Not found');
+            return;
+        }
+        const sessionId = req.headers['mcp-session-id'];
+        if (req.method === 'POST' && !sessionId) {
+            // New session — sessionId is assigned during handleRequest (not connect)
+            const transport = new streamableHttp_js_1.StreamableHTTPServerTransport({
+                sessionIdGenerator: () => crypto.randomUUID(),
+            });
+            transport.onclose = () => {
+                if (transport.sessionId) {
+                    console.error(`[MCP] Session closed: ${transport.sessionId}`);
+                    transports.delete(transport.sessionId);
+                }
+            };
+            await server.connect(transport);
+            const body = await readBody(req);
+            await transport.handleRequest(req, res, body);
+            if (transport.sessionId) {
+                transports.set(transport.sessionId, transport);
+                console.error(`[MCP] New session created: ${transport.sessionId}`);
+            }
+            return;
+        }
+        if (sessionId) {
+            const transport = transports.get(sessionId);
+            if (!transport) {
+                console.error(`[MCP] Session ${sessionId} not found, active: [${[...transports.keys()].join(', ')}]`);
+                res.writeHead(404, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ error: 'Session not found' }));
+                return;
+            }
+            if (req.method === 'DELETE') {
+                await transport.handleRequest(req, res);
+                return;
+            }
+            const body = await readBody(req);
+            await transport.handleRequest(req, res, body);
+            return;
+        }
+        // GET without session (standalone SSE stream)
+        if (req.method === 'GET') {
+            const transport = new streamableHttp_js_1.StreamableHTTPServerTransport({
+                sessionIdGenerator: () => crypto.randomUUID(),
+            });
+            transport.onclose = () => {
+                if (transport.sessionId)
+                    transports.delete(transport.sessionId);
+            };
+            await server.connect(transport);
+            if (transport.sessionId)
+                transports.set(transport.sessionId, transport);
+            await transport.handleRequest(req, res);
+            return;
+        }
+        res.writeHead(405);
+        res.end('Method not allowed');
+    };
+    // Create HTTP or HTTPS server
+    let httpServer;
+    if (options.tlsCert && options.tlsKey) {
+        const cert = fs.readFileSync(options.tlsCert);
+        const key = fs.readFileSync(options.tlsKey);
+        httpServer = https.createServer({ cert, key }, handleRequest);
+        console.error(`Visor MCP server (HTTPS) listening on ${host}:${port}`);
+    }
+    else {
+        httpServer = http.createServer(handleRequest);
+        console.error(`Visor MCP server (HTTP) listening on ${host}:${port}`);
+        if (host !== '127.0.0.1' && host !== 'localhost') {
+            console.error('⚠️  WARNING: Running without TLS on a non-localhost address. Use --tls-cert and --tls-key for production.');
+        }
+    }
+    httpServer.listen(port, host);
+    return {
+        close() {
+            console.error('Shutting down MCP server...');
+            for (const transport of transports.values()) {
+                transport.close();
+            }
+            httpServer.close();
+        },
+    };
+}
 /**
  * Start the MCP server with Visor tools.
  *
  * The server exposes the following tools:
  * - run_workflow (or custom name): Execute a Visor workflow and return results
  *
- * Communication is via stdio transport (stdin/stdout for JSON-RPC messages).
+ * Supports stdio (default) and HTTP transports.
  *
- * @param options - Optional configuration for fixed workflow mode
+ * @param options - Optional configuration for fixed workflow mode and transport
  */
 async function startMcpServer(options = {}) {
     try {
@@ -318934,9 +318809,18 @@ async function startMcpServer(options = {}) {
             });
             console.error('Visor MCP server started');
         }
-        // Connect via stdio transport
-        const transport = new stdio_js_1.StdioServerTransport();
-        await server.connect(transport);
+        // Connect via selected transport
+        if (options.transport === 'http') {
+            const handle = await startHttpMcpServerInternal(server, options);
+            // Register signal handlers for standalone mode (visor mcp-server subcommand)
+            const shutdown = () => handle.close();
+            process.on('SIGINT', shutdown);
+            process.on('SIGTERM', shutdown);
+        }
+        else {
+            const transport = new stdio_js_1.StdioServerTransport();
+            await server.connect(transport);
+        }
     }
     catch (error) {
         const errorMessage = error instanceof Error ? error.message : String(error);
@@ -331230,6 +331114,16 @@ class CustomToolsSSEServer {
                     const registry = SessionRegistry.getInstance();
                     const activeIds = registry.getActiveSessionIds();
                     for (const sid of activeIds) {
+                        // Skip the parent/caller session — it must wait for child tool
+                        // responses before winding down, otherwise it has empty history
+                        // and produces a generic timeout message instead of summarizing
+                        // the actual work done by child workflows.
+                        if (sid === this.sessionId) {
+                            if (this.debug) {
+                                logger_1.logger.debug(`[CustomToolsSSEServer:${this.sessionId}] Skipping parent session ${sid} during graceful stop`);
+                            }
+                            continue;
+                        }
                         const agent = registry.getSession(sid);
                         if (agent && typeof agent.triggerGracefulWindDown === 'function') {
                             agent.triggerGracefulWindDown();
@@ -333544,6 +333438,36 @@ class WorkflowCheckProvider extends check_provider_interface_1.CheckProvider {
                 }
             }
         }
+        // Resolve `extends` on inline array items (e.g. skills defined directly in args).
+        // loadConfig() already handles extends internally, but inline arrays bypass it.
+        // This allows skills to use `extends: "visor://skills/..."` without loadConfig.
+        for (const [key, value] of Object.entries(inputs)) {
+            if (!Array.isArray(value))
+                continue;
+            let resolved = false;
+            const resolvedArray = value.map((item) => {
+                if (item &&
+                    typeof item === 'object' &&
+                    !Array.isArray(item) &&
+                    typeof item.extends === 'string') {
+                    try {
+                        const baseConfig = loadConfig(item.extends);
+                        const overrideObj = { ...item };
+                        delete overrideObj.extends;
+                        resolved = true;
+                        return deepMerge(baseConfig, overrideObj);
+                    }
+                    catch (err) {
+                        logger_1.logger.warn(`[WorkflowProvider] Failed to resolve extends '${item.extends}' in input '${key}': ${err}`);
+                        return item;
+                    }
+                }
+                return item;
+            });
+            if (resolved) {
+                inputs[key] = resolvedArray;
+            }
+        }
         // Debug: log all input keys and types for troubleshooting
         const inputSummary = Object.entries(inputs)
             .map(([k, v]) => `${k}:${Array.isArray(v) ? `array[${v.length}]` : typeof v}`)
@@ -334720,6 +334644,768 @@ class PRReviewer {
 exports.PRReviewer = PRReviewer;
 
 
+/***/ }),
+
+/***/ 31458:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.McpServerRunner = void 0;
+const mcp_js_1 = __nccwpck_require__(23886);
+const streamableHttp_js_1 = __nccwpck_require__(1048);
+const zod_1 = __nccwpck_require__(50924);
+const http = __importStar(__nccwpck_require__(58611));
+const https = __importStar(__nccwpck_require__(65692));
+const fs = __importStar(__nccwpck_require__(79896));
+const crypto = __importStar(__nccwpck_require__(76982));
+const mcp_server_1 = __nccwpck_require__(93143);
+const trace_helpers_1 = __nccwpck_require__(75338);
+/**
+ * Read and parse JSON body from an HTTP request.
+ */
+function readBody(req) {
+    return new Promise((resolve, reject) => {
+        let data = '';
+        req.on('data', (chunk) => (data += chunk));
+        req.on('end', () => {
+            if (!data.trim()) {
+                resolve(undefined);
+                return;
+            }
+            try {
+                resolve(JSON.parse(data));
+            }
+            catch {
+                reject(new Error('Invalid JSON'));
+            }
+        });
+        req.on('error', reject);
+    });
+}
+/**
+ * MCP Frontend Runner — exposes the Visor assistant as an MCP tool.
+ *
+ * Unlike the standalone `visor mcp-server` (which calls runChecks from the SDK),
+ * this runner dispatches messages through the StateMachineExecutionEngine just like
+ * the Slack/Telegram runners do. This means `{{ conversation.current.text }}` works,
+ * the full workflow config is used, and responses flow back through the engine.
+ */
+class McpServerRunner {
+    engine;
+    cfg;
+    options;
+    name = 'mcp';
+    httpServer = null;
+    transports = new Map();
+    taskStore;
+    configPath;
+    constructor(engine, cfg, options) {
+        this.engine = engine;
+        this.cfg = cfg;
+        this.options = options;
+    }
+    async start() {
+        const port = this.options.port || 8080;
+        const host = this.options.host || '0.0.0.0';
+        // Resolve auth token
+        const authToken = this.options.authToken ||
+            (this.options.authTokenEnv ? process.env[this.options.authTokenEnv] : undefined);
+        if (!authToken) {
+            throw new Error('MCP HTTP transport requires an auth token (--mcp-auth-token or VISOR_MCP_AUTH_TOKEN). ' +
+                'Refusing to start an unauthenticated remote MCP endpoint.');
+        }
+        // Create MCP server with send_message tool
+        const mcpServer = new mcp_js_1.McpServer({ name: mcp_server_1.SERVER_INFO.name, version: mcp_server_1.SERVER_INFO.version }, { capabilities: { tools: {} } });
+        const toolName = this.options.toolName || 'send_message';
+        const toolDescription = this.options.toolDescription ||
+            'Send a message to the Visor assistant. The assistant will process your message ' +
+                'through the configured workflow and return a response. Use this for conversations, ' +
+                'questions, task requests, and any interaction with the assistant.';
+        mcpServer.tool(toolName, toolDescription, {
+            message: zod_1.z.string().describe('The message to send to the assistant.'),
+            session_id: zod_1.z
+                .string()
+                .optional()
+                .describe('Optional conversation session ID for maintaining context across messages. ' +
+                'If omitted, a new session is created. Re-use the same session_id for follow-up messages.'),
+        }, async (args) => {
+            return this.handleMessage(args.message, args.session_id);
+        });
+        const { transports } = this;
+        const handleRequest = async (req, res) => {
+            try {
+                // CORS preflight
+                if (req.method === 'OPTIONS') {
+                    res.writeHead(204, {
+                        'Access-Control-Allow-Origin': '*',
+                        'Access-Control-Allow-Methods': 'GET, POST, DELETE, OPTIONS',
+                        'Access-Control-Allow-Headers': 'Content-Type, Authorization, mcp-session-id',
+                    });
+                    res.end();
+                    return;
+                }
+                // Auth check (per MCP spec → OAuth 2.1 § 5.3 → RFC 6750 § 3)
+                if (!(0, mcp_server_1.validateBearerToken)(req, authToken)) {
+                    const hasAuthHeader = !!req.headers['authorization'];
+                    const wwwAuth = hasAuthHeader
+                        ? 'Bearer error="invalid_token", error_description="The access token is invalid or expired"'
+                        : 'Bearer';
+                    res.writeHead(401, {
+                        'WWW-Authenticate': wwwAuth,
+                        'Content-Type': 'application/json',
+                    });
+                    res.end(JSON.stringify({
+                        error: hasAuthHeader ? 'invalid_token' : 'unauthorized',
+                        error_description: hasAuthHeader
+                            ? 'The access token is invalid or expired'
+                            : 'Authentication required. Provide a Bearer token in the Authorization header.',
+                    }));
+                    return;
+                }
+                // Only serve /mcp endpoint
+                const url = new URL(req.url || '/', `http://${req.headers.host || 'localhost'}`);
+                if (url.pathname !== '/mcp') {
+                    res.writeHead(404);
+                    res.end('Not found');
+                    return;
+                }
+                const sessionId = req.headers['mcp-session-id'];
+                if (req.method === 'POST' && !sessionId) {
+                    // New session
+                    const transport = new streamableHttp_js_1.StreamableHTTPServerTransport({
+                        sessionIdGenerator: () => crypto.randomUUID(),
+                    });
+                    transport.onclose = () => {
+                        if (transport.sessionId)
+                            transports.delete(transport.sessionId);
+                    };
+                    await mcpServer.connect(transport);
+                    const body = await readBody(req);
+                    await transport.handleRequest(req, res, body);
+                    if (transport.sessionId)
+                        transports.set(transport.sessionId, transport);
+                    return;
+                }
+                if (sessionId) {
+                    const transport = transports.get(sessionId);
+                    if (!transport) {
+                        if (req.method === 'DELETE') {
+                            // Nothing to close after restart; just acknowledge
+                            res.writeHead(200, { 'Content-Type': 'application/json' });
+                            res.end(JSON.stringify({ ok: true }));
+                            return;
+                        }
+                        // Session lost (e.g. server restart). Return 404 per MCP spec
+                        // so the client re-initializes with a fresh session. Also include
+                        // a JSON-RPC error response so clients that parse the body can
+                        // detect the "session expired" condition and auto-reconnect.
+                        const body = await readBody(req);
+                        const requestId = body?.id ?? null;
+                        res.writeHead(404, { 'Content-Type': 'application/json' });
+                        res.end(JSON.stringify({
+                            jsonrpc: '2.0',
+                            id: requestId,
+                            error: {
+                                code: -32000,
+                                message: 'Session expired. Please reconnect with a new session.',
+                            },
+                        }));
+                        return;
+                    }
+                    if (req.method === 'DELETE') {
+                        await transport.handleRequest(req, res);
+                        return;
+                    }
+                    const body = await readBody(req);
+                    await transport.handleRequest(req, res, body);
+                    return;
+                }
+                // GET without session (standalone SSE stream)
+                if (req.method === 'GET') {
+                    const transport = new streamableHttp_js_1.StreamableHTTPServerTransport({
+                        sessionIdGenerator: () => crypto.randomUUID(),
+                    });
+                    transport.onclose = () => {
+                        if (transport.sessionId)
+                            transports.delete(transport.sessionId);
+                    };
+                    await mcpServer.connect(transport);
+                    await transport.handleRequest(req, res);
+                    if (transport.sessionId)
+                        transports.set(transport.sessionId, transport);
+                    return;
+                }
+                res.writeHead(405);
+                res.end('Method not allowed');
+            }
+            catch (err) {
+                console.error(`[MCP] Request handler error: ${err}`);
+                if (!res.headersSent) {
+                    res.writeHead(500, { 'Content-Type': 'application/json' });
+                    res.end(JSON.stringify({ error: 'Internal server error' }));
+                }
+            }
+        };
+        // Create HTTP or HTTPS server
+        if (this.options.tlsCert && this.options.tlsKey) {
+            const cert = fs.readFileSync(this.options.tlsCert);
+            const key = fs.readFileSync(this.options.tlsKey);
+            this.httpServer = https.createServer({ cert, key }, handleRequest);
+            console.error(`Visor MCP frontend (HTTPS) listening on ${host}:${port}`);
+        }
+        else {
+            this.httpServer = http.createServer(handleRequest);
+            console.error(`Visor MCP frontend (HTTP) listening on ${host}:${port}`);
+            if (host !== '127.0.0.1' && host !== 'localhost') {
+                console.error('⚠️  WARNING: Running without TLS on a non-localhost address. Use TLS for production.');
+            }
+        }
+        this.httpServer.listen(port, host);
+    }
+    async stop() {
+        for (const transport of this.transports.values()) {
+            transport.close();
+        }
+        this.transports.clear();
+        if (this.httpServer) {
+            this.httpServer.close();
+            this.httpServer = null;
+        }
+    }
+    updateConfig(cfg) {
+        this.cfg = cfg;
+    }
+    setTaskStore(store, configPath) {
+        this.taskStore = store;
+        this.configPath = configPath;
+    }
+    /**
+     * Handle an incoming message by dispatching it through the engine,
+     * following the same pattern as Slack/Telegram runners.
+     */
+    async handleMessage(message, sessionId) {
+        try {
+            const { StateMachineExecutionEngine: SMEngine } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(39004)));
+            const { createHash } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(76982)));
+            // Create a dedicated engine for this run (same pattern as Slack)
+            const runEngine = new SMEngine();
+            // Propagate execution context from parent engine
+            try {
+                const parentCtx = this.engine.getExecutionContext?.() || {};
+                const prevCtx = runEngine.getExecutionContext?.() || {};
+                runEngine.setExecutionContext?.({
+                    ...parentCtx,
+                    ...prevCtx,
+                });
+            }
+            catch { }
+            // Build conversation context (same structure as Slack/Telegram)
+            const convSessionId = sessionId || crypto.randomUUID();
+            const now = Date.now();
+            const conversationContext = {
+                transport: 'mcp',
+                thread: { id: convSessionId },
+                current: {
+                    user: 'mcp-client',
+                    text: message,
+                    timestamp: now,
+                },
+                messages: [
+                    {
+                        role: 'user',
+                        text: message,
+                        timestamp: now,
+                    },
+                ],
+            };
+            // Build webhook payload (same pattern as Slack's payloadForContext)
+            const endpoint = '/bots/mcp/message';
+            const payload = {
+                event: {
+                    type: 'message',
+                    text: message,
+                    user: 'mcp-client',
+                    timestamp: now,
+                },
+                mcp_conversation: conversationContext,
+            };
+            const webhookData = new Map();
+            webhookData.set(endpoint, payload);
+            // Get all checks from config
+            const allChecks = Object.keys(this.cfg.checks || {});
+            if (allChecks.length === 0) {
+                return {
+                    content: [{ type: 'text', text: 'No checks configured in workflow.' }],
+                    isError: true,
+                };
+            }
+            // Prepare config for run
+            const cfgForRun = (() => {
+                try {
+                    const cfg = JSON.parse(JSON.stringify(this.cfg));
+                    return cfg;
+                }
+                catch {
+                    return this.cfg;
+                }
+            })();
+            // Derive stable workspace name from session
+            const hash = createHash('sha256').update(convSessionId).digest('hex').slice(0, 8);
+            if (!cfgForRun.workspace) {
+                cfgForRun.workspace = {};
+            }
+            cfgForRun.workspace.name = `mcp-${hash}`;
+            cfgForRun.workspace.cleanup_on_exit = false;
+            // Execute through the engine, wrapped in OTel tracing
+            const execFn = () => runEngine.executeChecks({
+                checks: allChecks,
+                showDetails: true,
+                outputFormat: 'json',
+                config: cfgForRun,
+                webhookContext: { webhookData, eventType: 'manual' },
+                debug: process.env.VISOR_DEBUG === 'true',
+            });
+            const result = await (0, trace_helpers_1.withVisorRun)({
+                ...(0, trace_helpers_1.getVisorRunAttributes)(),
+                'visor.run.source': 'mcp',
+                'mcp.session_id': convSessionId,
+                'mcp.message_length': message.length,
+            }, {
+                source: 'mcp',
+                workflowId: allChecks.join(','),
+            }, async () => {
+                if (this.taskStore) {
+                    const { trackExecution } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(7628)));
+                    return trackExecution({
+                        taskStore: this.taskStore,
+                        source: 'mcp',
+                        workflowId: allChecks.join(','),
+                        configPath: this.configPath,
+                        messageText: message,
+                        metadata: { mcp_session: convSessionId },
+                    }, execFn);
+                }
+                return execFn();
+            });
+            // Extract response text from results
+            // trackExecution wraps the result in { task, result } — unwrap if needed
+            const rawResult = result?.result ?? result;
+            const responseText = this.extractResponseText(rawResult);
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: responseText,
+                    },
+                ],
+            };
+        }
+        catch (error) {
+            const errorMessage = error instanceof Error ? error.message : String(error);
+            return {
+                content: [{ type: 'text', text: `Error: ${errorMessage}` }],
+                isError: true,
+            };
+        }
+    }
+    /**
+     * Extract a human-readable response from engine execution results.
+     *
+     * The result from executeChecks() has this structure:
+     * {
+     *   repositoryInfo, reviewSummary: { issues, history: Record<checkId, output[]> },
+     *   executionStatistics: { checks: [...], groupedResults: { group: CheckResult[] } },
+     *   checksExecuted: string[]
+     * }
+     *
+     * The assistant response text is typically in:
+     * 1. reviewSummary.history.<checkId>[last].text  (output history from journal)
+     * 2. executionStatistics.groupedResults.<group>[].output.text (grouped check results)
+     */
+    extractResponseText(result) {
+        if (!result)
+            return 'No response from workflow.';
+        // The output history (reviewSummary.history) contains outputs keyed by step ID.
+        // For assistant workflows the steps are e.g. chat.route-intent, chat.build-config,
+        // chat.generate-response. The final AI response is the LAST step that has a .text
+        // field with substantial content (not a short routing label).
+        const history = result?.reviewSummary?.history;
+        if (history && typeof history === 'object') {
+            // Collect all candidate text outputs, keeping the last (deepest) one
+            let bestText = '';
+            for (const [, outputs] of Object.entries(history)) {
+                if (!Array.isArray(outputs))
+                    continue;
+                for (const item of outputs) {
+                    const text = item?.text ?? item?.output?.text;
+                    if (typeof text === 'string' && text.length > bestText.length) {
+                        bestText = text;
+                    }
+                }
+            }
+            if (bestText)
+                return bestText;
+        }
+        // Grouped results from execution statistics
+        const grouped = result?.executionStatistics?.groupedResults;
+        if (grouped && typeof grouped === 'object') {
+            let bestText = '';
+            for (const checkResults of Object.values(grouped)) {
+                if (!Array.isArray(checkResults))
+                    continue;
+                for (const cr of checkResults) {
+                    const text = cr?.output?.text ??
+                        (typeof cr?.output === 'string' ? cr.output : null) ??
+                        (typeof cr?.content === 'string' && cr.content.trim() ? cr.content : null);
+                    if (typeof text === 'string' && text.length > bestText.length) {
+                        bestText = text;
+                    }
+                }
+            }
+            if (bestText)
+                return bestText;
+        }
+        // Direct properties on result
+        if (result?.text)
+            return String(result.text);
+        if (result?.output?.text)
+            return String(result.output.text);
+        // Fallback: JSON dump (compact to avoid huge responses)
+        try {
+            const compact = history || grouped || result;
+            return JSON.stringify(compact, null, 2);
+        }
+        catch {
+            return 'Workflow completed but could not format response.';
+        }
+    }
+}
+exports.McpServerRunner = McpServerRunner;
+
+
+/***/ }),
+
+/***/ 11866:
+/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
+
+"use strict";
+
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.createRunner = createRunner;
+/**
+ * Create a Runner instance by name.
+ *
+ * Each case encapsulates the config-extraction logic previously duplicated
+ * in cli-main.ts (reading config sub-objects, env vars, defaults).
+ */
+async function createRunner(name, engine, config, options) {
+    switch (name) {
+        case 'slack': {
+            const { SlackSocketRunner } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(45278)));
+            const slackAny = config.slack || {};
+            return new SlackSocketRunner(engine, config, {
+                appToken: slackAny.app_token || process.env.SLACK_APP_TOKEN,
+                endpoint: slackAny.endpoint || '/bots/slack/support',
+                mentions: slackAny.mentions || 'direct',
+                threads: slackAny.threads || 'any',
+                channel_allowlist: Array.isArray(slackAny.channel_allowlist)
+                    ? slackAny.channel_allowlist
+                    : [],
+            });
+        }
+        case 'telegram': {
+            const { TelegramPollingRunner } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(33519)));
+            const telegramAny = config.telegram || {};
+            return new TelegramPollingRunner(engine, config, {
+                botToken: telegramAny.bot_token || process.env.TELEGRAM_BOT_TOKEN,
+                pollingTimeout: telegramAny.polling_timeout || 30,
+                chatAllowlist: telegramAny.chat_allowlist,
+                requireMention: telegramAny.require_mention ?? true,
+                workflow: telegramAny.workflow,
+            });
+        }
+        case 'email': {
+            const { EmailPollingRunner } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(66550)));
+            const emailAny = config.email || {};
+            return new EmailPollingRunner(engine, config, {
+                receive: emailAny.receive || {},
+                send: emailAny.send || {},
+                allowlist: emailAny.allowlist,
+                workflow: emailAny.workflow,
+            });
+        }
+        case 'whatsapp': {
+            const { WhatsAppWebhookRunner } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(21718)));
+            const waAny = config.whatsapp || {};
+            return new WhatsAppWebhookRunner(engine, config, {
+                accessToken: waAny.access_token || process.env.WHATSAPP_ACCESS_TOKEN,
+                phoneNumberId: waAny.phone_number_id || process.env.WHATSAPP_PHONE_NUMBER_ID,
+                appSecret: waAny.app_secret || process.env.WHATSAPP_APP_SECRET,
+                verifyToken: waAny.verify_token || process.env.WHATSAPP_VERIFY_TOKEN,
+                apiVersion: waAny.api_version || 'v21.0',
+                port: waAny.port || parseInt(process.env.WHATSAPP_WEBHOOK_PORT || '8443'),
+                host: waAny.host || '0.0.0.0',
+                phoneAllowlist: waAny.phone_allowlist,
+                workflow: waAny.workflow,
+            });
+        }
+        case 'teams': {
+            const { TeamsWebhookRunner } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(86710)));
+            const teamsAny = config.teams || {};
+            return new TeamsWebhookRunner(engine, config, {
+                appId: teamsAny.app_id || process.env.TEAMS_APP_ID,
+                appPassword: teamsAny.app_password || process.env.TEAMS_APP_PASSWORD,
+                tenantId: teamsAny.tenant_id || process.env.TEAMS_TENANT_ID,
+                port: teamsAny.port || parseInt(process.env.TEAMS_WEBHOOK_PORT || '3978'),
+                host: teamsAny.host || '0.0.0.0',
+                userAllowlist: teamsAny.user_allowlist,
+                workflow: teamsAny.workflow,
+            });
+        }
+        case 'a2a': {
+            const { A2AFrontend } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(75887)));
+            const { EventBus } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(83864)));
+            const { logger } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(86999)));
+            const crypto = await Promise.resolve().then(() => __importStar(__nccwpck_require__(76982)));
+            const agentConfig = config.agent_protocol;
+            if (!agentConfig) {
+                throw new Error('agent_protocol configuration is required for --a2a mode');
+            }
+            const frontend = new A2AFrontend(agentConfig);
+            frontend.setEngine(engine);
+            frontend.setVisorConfig(config);
+            // Return a thin adapter that bridges A2AFrontend → Runner interface
+            return {
+                name: 'a2a',
+                async start() {
+                    const eventBus = new EventBus();
+                    const ctx = {
+                        eventBus,
+                        logger,
+                        config,
+                        run: { runId: crypto.randomUUID() },
+                        engine,
+                        visorConfig: config,
+                    };
+                    await frontend.start(ctx);
+                    const port = agentConfig.port ?? 9000;
+                    const host = agentConfig.host ?? '0.0.0.0';
+                    console.log(`A2A server running on ${host}:${port}`);
+                },
+                async stop() {
+                    await frontend.stop();
+                },
+                updateConfig(cfg) {
+                    frontend.setVisorConfig(cfg);
+                },
+                setTaskStore(store, _configPath) {
+                    // A2AFrontend receives task store via constructor; update if possible
+                    frontend._taskStore = store;
+                },
+            };
+        }
+        case 'mcp': {
+            const { McpServerRunner } = await Promise.resolve().then(() => __importStar(__nccwpck_require__(31458)));
+            const mcpAny = config.mcp_server || {};
+            return new McpServerRunner(engine, config, {
+                port: options.mcpPort ||
+                    mcpAny.port ||
+                    (process.env.VISOR_MCP_PORT ? parseInt(process.env.VISOR_MCP_PORT) : 8080),
+                host: mcpAny.host || process.env.VISOR_MCP_HOST || '0.0.0.0',
+                authToken: options.mcpAuthToken || mcpAny.auth_token || process.env.VISOR_MCP_AUTH_TOKEN,
+                authTokenEnv: mcpAny.auth_token_env,
+                tlsCert: mcpAny.tls_cert || process.env.VISOR_MCP_TLS_CERT,
+                tlsKey: mcpAny.tls_key || process.env.VISOR_MCP_TLS_KEY,
+                toolName: mcpAny.tool_name || process.env.VISOR_MCP_TOOL_NAME,
+                toolDescription: mcpAny.tool_description || process.env.VISOR_MCP_TOOL_DESCRIPTION,
+            });
+        }
+        default:
+            throw new Error(`Unknown runner type: "${name}"`);
+    }
+}
+
+
+/***/ }),
+
+/***/ 89736:
+/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
+
+"use strict";
+
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.RunnerHost = void 0;
+const logger_1 = __nccwpck_require__(86999);
+/**
+ * Orchestrates the lifecycle of multiple Runner instances running in parallel.
+ *
+ * Handles start/stop ordering, config broadcast, and shared task-store propagation.
+ */
+class RunnerHost {
+    runners = [];
+    /** Register a runner to be managed by this host. */
+    addRunner(runner) {
+        this.runners.push(runner);
+    }
+    /** Return the list of registered runners. */
+    getRunners() {
+        return this.runners;
+    }
+    /**
+     * Start all registered runners concurrently.
+     * If any runner fails to start, previously-started runners are stopped.
+     */
+    async startAll() {
+        const started = [];
+        const results = await Promise.allSettled(this.runners.map(async (runner) => {
+            await runner.start();
+            started.push(runner);
+        }));
+        const failures = results.filter(r => r.status === 'rejected');
+        if (failures.length > 0) {
+            // Rollback: stop successfully-started runners
+            await Promise.allSettled(started.map(r => r.stop()));
+            const msgs = failures.map(f => f.reason?.message ?? String(f.reason));
+            throw new Error(`Failed to start runner(s): ${msgs.join('; ')}`);
+        }
+    }
+    /**
+     * Stop all registered runners concurrently.
+     * Tolerates individual stop failures (logs warnings).
+     */
+    async stopAll() {
+        const results = await Promise.allSettled(this.runners.map(r => r.stop()));
+        for (let i = 0; i < results.length; i++) {
+            if (results[i].status === 'rejected') {
+                const reason = results[i].reason;
+                logger_1.logger.warn(`[RunnerHost] Failed to stop runner "${this.runners[i].name}": ${reason}`);
+            }
+        }
+    }
+    /** Broadcast a config update to all runners. */
+    broadcastConfigUpdate(cfg) {
+        for (const runner of this.runners) {
+            runner.updateConfig(cfg);
+        }
+    }
+    /** Propagate a shared task store to all runners that support it. */
+    setTaskStore(store, configPath) {
+        for (const runner of this.runners) {
+            if (runner.setTaskStore) {
+                runner.setTaskStore(store, configPath);
+            }
+        }
+    }
+}
+exports.RunnerHost = RunnerHost;
+
+
+/***/ }),
+
+/***/ 84763:
+/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
+
+"use strict";
+
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.initTelemetryFromConfig = initTelemetryFromConfig;
+const opentelemetry_1 = __nccwpck_require__(6248);
+/**
+ * Initialize telemetry from a Visor config.
+ *
+ * Extracts the telemetry block (if any) and merges it with environment
+ * variable overrides, then calls the shared `initTelemetry()` helper.
+ * This replaces the ~20-line block that was duplicated per-frontend.
+ */
+async function initTelemetryFromConfig(config) {
+    const t = config?.telemetry;
+    if (t) {
+        await (0, opentelemetry_1.initTelemetry)({
+            enabled: process.env.VISOR_TELEMETRY_ENABLED === 'true' || !!t.enabled,
+            sink: process.env.VISOR_TELEMETRY_SINK || t.sink || 'file',
+            file: { dir: process.env.VISOR_TRACE_DIR || t.file?.dir, ndjson: !!t.file?.ndjson },
+            autoInstrument: !!t.tracing?.auto_instrumentations,
+            traceReport: !!t.tracing?.trace_report?.enabled,
+        });
+    }
+    else {
+        await (0, opentelemetry_1.initTelemetry)({
+            enabled: process.env.VISOR_TELEMETRY_ENABLED === 'true',
+            sink: process.env.VISOR_TELEMETRY_SINK || 'file',
+            file: { dir: process.env.VISOR_TRACE_DIR },
+        });
+    }
+}
+
+
 /***/ }),
 
 /***/ 11207:
@@ -342772,6 +343458,7 @@ const workspace_manager_1 = __nccwpck_require__(6134);
 const message_trigger_1 = __nccwpck_require__(71983);
 const types_1 = __nccwpck_require__(83506);
 class SlackSocketRunner {
+    name = 'slack';
     appToken;
     endpoint;
     mentions = 'direct';
@@ -348014,11 +348701,13 @@ async function renderTemplateContent(checkId, checkConfig, reviewSummary) {
         let templateContent;
         if (checkConfig.template && checkConfig.template.content) {
             templateContent = String(checkConfig.template.content);
+            logger_1.logger.debug(`[TemplateRenderer] Using inline template for ${checkId}`);
         }
         else if (checkConfig.template && checkConfig.template.file) {
             const file = String(checkConfig.template.file);
             const resolved = path.resolve(process.cwd(), file);
             templateContent = await fs.readFile(resolved, 'utf-8');
+            logger_1.logger.debug(`[TemplateRenderer] Using template file for ${checkId}: ${resolved}`);
         }
         else if (schema && schema !== 'plain') {
             const sanitized = String(schema).replace(/[^a-zA-Z0-9-]/g, '');
@@ -348034,13 +348723,18 @@ async function renderTemplateContent(checkId, checkConfig, reviewSummary) {
                 for (const p of candidatePaths) {
                     try {
                         templateContent = await fs.readFile(p, 'utf-8');
-                        if (templateContent)
+                        if (templateContent) {
+                            logger_1.logger.debug(`[TemplateRenderer] Using schema template for ${checkId}: ${p}`);
                             break;
+                        }
                     }
                     catch {
                         // try next
                     }
                 }
+                if (!templateContent) {
+                    logger_1.logger.warn(`[TemplateRenderer] No template found for schema '${sanitized}' in ${checkId}. __dirname=${__dirname}, cwd=${process.cwd()}, tried ${candidatePaths.length} paths: ${candidatePaths.join(', ')}`);
+                }
             }
         }
         if (!templateContent)
@@ -348071,8 +348765,13 @@ async function renderTemplateContent(checkId, checkConfig, reviewSummary) {
             checkName: checkId,
             output,
         };
+        logger_1.logger.debug(`[TemplateRenderer] Rendering template for ${checkId} with output type=${typeof output}, keys=${output && typeof output === 'object' ? Object.keys(output).join(',') : 'n/a'}`);
         const rendered = await liquid.parseAndRender(templateContent, templateData);
-        return rendered.trim();
+        const trimmed = rendered.trim();
+        if (!trimmed) {
+            logger_1.logger.warn(`[TemplateRenderer] Template rendered EMPTY for ${checkId}. output=${JSON.stringify(output)?.substring(0, 200)}`);
+        }
+        return trimmed;
     }
     catch (error) {
         const msg = error instanceof Error ? error.message : String(error);
@@ -348561,8 +349260,11 @@ class StateMachineRunner {
             const allIssues = [];
             let debug = undefined;
             if (checkConfig.forEach && entries.length > 1) {
-                // Aggregate all forEach iterations
+                // Aggregate all forEach iterations.
+                // forEach producers have both an unscoped entry (with the full array output)
+                // and scoped per-item entries. Prefer the unscoped entry's output.
                 const contents = [];
+                let unscopedOutput = undefined;
                 for (const entry of entries) {
                     if (entry.result.content) {
                         contents.push(entry.result.content);
@@ -348573,19 +349275,29 @@ class StateMachineRunner {
                     if (entry.result.debug) {
                         debug = entry.result.debug;
                     }
-                    // For forEach, output is typically an array from the last iteration
-                    if (entry.result.output !== undefined) {
+                    // Prefer the unscoped (scope=[]) entry which has the full array output
+                    if (entry.scope.length === 0 && entry.result.output !== undefined) {
+                        unscopedOutput = entry.result.output;
+                    }
+                    if (entry.result.output !== undefined && unscopedOutput === undefined) {
                         output = entry.result.output;
                     }
                 }
+                output = unscopedOutput !== undefined ? unscopedOutput : output;
                 content = contents.join('\n');
             }
             else {
-                // For non-forEach or single-entry forEach, take the latest entry
+                // For non-forEach or single-entry forEach, take the latest entry.
+                // For forEach consumers (aggregated results from executeCheckWithForEachItems),
+                // the aggregated result stores per-item outputs in .forEachItems instead of .output.
                 const latestEntry = entries[entries.length - 1];
                 if (latestEntry) {
                     content = latestEntry.result.content || '';
                     output = latestEntry.result.output;
+                    // Fall back to forEachItems for aggregated forEach consumer results
+                    if (output === undefined && latestEntry.result.forEachItems) {
+                        output = { forEachItems: latestEntry.result.forEachItems };
+                    }
                     if (latestEntry.result.issues) {
                         allIssues.push(...latestEntry.result.issues);
                     }
@@ -349506,11 +350218,12 @@ async function executeCheckWithForEachItems(checkId, forEachParent, forEachItems
                     logger_1.logger.info(`[LevelDispatch] webhookContext: ${webhookCtx ? 'present' : 'absent'}, webhookData size: ${webhookData?.size || 0}`);
                 }
                 if (webhookData && webhookData.size > 0) {
-                    // Find the payload with slack_conversation or telegram_conversation
+                    // Find the payload with slack_conversation, telegram_conversation, or mcp_conversation
                     for (const payload of webhookData.values()) {
                         const slackConv = payload?.slack_conversation;
                         const telegramConv = payload?.telegram_conversation;
-                        const conv = slackConv || telegramConv;
+                        const mcpConv = payload?.mcp_conversation;
+                        const conv = slackConv || telegramConv || mcpConv;
                         if (conv) {
                             const event = payload?.event;
                             const messageCount = Array.isArray(conv?.messages) ? conv.messages.length : 0;
@@ -349520,10 +350233,12 @@ async function executeCheckWithForEachItems(checkId, forEachParent, forEachItems
                             // Build transport-specific context
                             const transportCtx = slackConv
                                 ? { slack: { event: event || {}, conversation: slackConv } }
-                                : {
-                                    telegram: { event: event || {}, conversation: telegramConv },
-                                    webhook: payload,
-                                };
+                                : telegramConv
+                                    ? {
+                                        telegram: { event: event || {}, conversation: telegramConv },
+                                        webhook: payload,
+                                    }
+                                    : { mcp: { event: event || {}, conversation: mcpConv }, webhook: payload };
                             providerConfig.eventContext = {
                                 ...providerConfig.eventContext,
                                 ...transportCtx,
@@ -350744,11 +351459,12 @@ async function executeSingleCheck(checkId, context, state, emitEvent, transition
                 logger_1.logger.info(`[LevelDispatch] webhookContext: ${webhookCtx ? 'present' : 'absent'}, webhookData size: ${webhookData?.size || 0}`);
             }
             if (webhookData && webhookData.size > 0) {
-                // Find the payload with slack_conversation or telegram_conversation
+                // Find the payload with slack_conversation, telegram_conversation, or mcp_conversation
                 for (const payload of webhookData.values()) {
                     const slackConv = payload?.slack_conversation;
                     const telegramConv = payload?.telegram_conversation;
-                    const conv = slackConv || telegramConv;
+                    const mcpConv = payload?.mcp_conversation;
+                    const conv = slackConv || telegramConv || mcpConv;
                     if (conv) {
                         const event = payload?.event;
                         const messageCount = Array.isArray(conv?.messages) ? conv.messages.length : 0;
@@ -354699,6 +355415,7 @@ const client_1 = __nccwpck_require__(55391);
 const adapter_1 = __nccwpck_require__(87917);
 const workspace_manager_1 = __nccwpck_require__(6134);
 class TeamsWebhookRunner {
+    name = 'teams';
     client;
     adapter;
     engine;
@@ -355446,6 +356163,7 @@ const crypto_1 = __nccwpck_require__(76982);
 const runner_1 = __nccwpck_require__(23575);
 const workspace_manager_1 = __nccwpck_require__(6134);
 class TelegramPollingRunner {
+    name = 'telegram';
     client;
     adapter;
     engine;
@@ -372780,6 +373498,7 @@ const client_1 = __nccwpck_require__(73407);
 const adapter_1 = __nccwpck_require__(1421);
 const workspace_manager_1 = __nccwpck_require__(6134);
 class WhatsAppWebhookRunner {
+    name = 'whatsapp';
     client;
     adapter;
     engine;
@@ -494638,7 +495357,22 @@ function mapFlowchartParserError(err, text) {
     const lineContent = allLines[Math.max(0, line - 1)] || "";
     const beforeQuote = lineContent.slice(0, Math.max(0, column - 1));
     const hasLinkBefore = beforeQuote.match(/--\s*$|==\s*$|-\.\s*$|-\.-\s*$|\[\s*$/);
+    const caret0 = Math.max(0, column - 1);
+    const firstBar = lineContent.lastIndexOf("|", caret0);
+    const secondBar = firstBar >= 0 ? lineContent.indexOf("|", caret0 + 1) : -1;
+    const inPipeLabel = firstBar >= 0 && secondBar > firstBar && firstBar < caret0 && secondBar > caret0;
     if (inLinkRule || hasLinkBefore) {
+      if (tokType === "QuotedString" && inPipeLabel) {
+        return {
+          line,
+          column,
+          severity: "error",
+          code: "FL-EDGE-LABEL-QUOTE-IN-PIPES",
+          message: "Quotes are not supported inside pipe-delimited edge labels.",
+          hint: "Use &quot; inside |...|, e.g., --|e.g. &quot;navigate to example.com&quot;|-->",
+          length: len
+        };
+      }
       if (tokType === "DiamondOpen" || tokType === "DiamondClose") {
         return {
           line,
@@ -495240,17 +495974,6 @@ ${br.example}`,
   if (inRule("arrow") && err.name === "NoViableAltException") {
     return { line, column, severity: "error", code: "SE-ARROW-INVALID", message: `Invalid sequence arrow near '${found}'.`, hint: "Use ->, -->, ->>, -->>, -x, --x, -), --), <<->>, or <<-->>", length: len };
   }
-  if ((err.name === "NoViableAltException" || err.name === "MismatchedTokenException") && tokType === "Minus") {
-    return {
-      line,
-      column,
-      severity: "error",
-      code: "SE-BULLET-LINE-UNSUPPORTED",
-      message: "Bullet list lines starting with '-' are not supported in sequence diagrams.",
-      hint: "Wrap free\u2011form text in a note block instead, for example:\nNote over A : Item 1\nNote over A\n  - Item 1\n  - Item 2\nend note",
-      length: len
-    };
-  }
   if (inRule("noteStmt")) {
     if (err.name === "MismatchedTokenException" && exp("Colon")) {
       return { line, column, severity: "error", code: "SE-NOTE-MALFORMED", message: "Malformed note: missing colon before the note text.", hint: "Example: Note right of Alice: Hello", length: len };
@@ -495259,6 +495982,22 @@ ${br.example}`,
       return { line, column, severity: "error", code: "SE-NOTE-MALFORMED", message: "Malformed note statement. Use left|right of X or over X[,Y]: text", hint: "Examples: Note over A,B: hi", length: len };
     }
   }
+  if ((err.name === "NoViableAltException" || err.name === "MismatchedTokenException") && tokType === "Minus") {
+    const nonWs = ltxt.search(/\S/);
+    const minusAtLineStart = nonWs >= 0 && ltxt[nonWs] === "-" && column === nonWs + 1;
+    if (!minusAtLineStart) {
+    } else {
+      return {
+        line,
+        column,
+        severity: "error",
+        code: "SE-BULLET-LINE-UNSUPPORTED",
+        message: "Bullet list lines starting with '-' are not supported in sequence diagrams.",
+        hint: "Wrap free\u2011form text in a note block instead, for example:\nNote over A : Item 1\nNote over A\n  - Item 1\n  - Item 2\nend note",
+        length: len
+      };
+    }
+  }
   if (tokType === "ElseKeyword" && isInRule(err, "criticalBlock")) {
     return {
       line,
@@ -496058,7 +496797,7 @@ var Identifier2, NumberLiteral3, SequenceKeyword, ParticipantKeyword, ActorKeywo
 var init_lexer4 = __esm({
   "node_modules/@probelabs/maid/out/diagrams/sequence/lexer.js"() {
     init_api6();
-    Identifier2 = createToken({ name: "Identifier", pattern: /[A-Za-z_][A-Za-z0-9_]*/ });
+    Identifier2 = createToken({ name: "Identifier", pattern: /[A-Za-z_][A-Za-z0-9_.]*(?:-(?![>x)\s])[A-Za-z0-9_.]+)*/ });
     NumberLiteral3 = createToken({ name: "NumberLiteral", pattern: /[0-9]+/ });
     SequenceKeyword = createToken({ name: "SequenceKeyword", pattern: /sequenceDiagram/, longer_alt: Identifier2 });
     ParticipantKeyword = createToken({ name: "ParticipantKeyword", pattern: /participant/i, longer_alt: Identifier2 });
@@ -497878,6 +498617,135 @@ var init_validate5 = __esm({
   }
 });
 
+// node_modules/@probelabs/maid/out/core/frontmatter.js
+function parseFrontmatter(input) {
+  const text = input.startsWith("\uFEFF") ? input.slice(1) : input;
+  const lines = text.split(/\r?\n/);
+  if (lines.length < 3 || lines[0].trim() !== "---")
+    return null;
+  let i = 1;
+  const block = [];
+  while (i < lines.length && lines[i].trim() !== "---") {
+    block.push(lines[i]);
+    i++;
+  }
+  if (i >= lines.length)
+    return null;
+  const body = lines.slice(i + 1).join("\n");
+  const bodyStartLine = i + 2;
+  const raw = block.join("\n");
+  const config2 = {};
+  const themeVars = {};
+  let themeUnderConfig = false;
+  let ctx = "root";
+  for (const line of block) {
+    if (!line.trim())
+      continue;
+    const indent = line.match(/^\s*/)?.[0].length ?? 0;
+    const mKey = line.match(/^\s*([A-Za-z0-9_\-]+):\s*(.*)$/);
+    if (!mKey)
+      continue;
+    const key = mKey[1];
+    let value = mKey[2] || "";
+    if (indent === 0) {
+      if (key === "config") {
+        ctx = "config";
+        continue;
+      }
+      if (key === "themeVariables") {
+        ctx = "theme";
+        continue;
+      }
+      ctx = "root";
+      continue;
+    }
+    if (ctx === "config") {
+      if (indent <= 2 && key !== "pie" && key !== "themeVariables")
+        continue;
+      if (key === "pie") {
+        ctx = "config.pie";
+        ensure(config2, "pie", {});
+        continue;
+      }
+      if (key === "themeVariables") {
+        ctx = "theme";
+        themeUnderConfig = true;
+        continue;
+      }
+      continue;
+    }
+    if (ctx === "config.pie") {
+      if (indent < 4) {
+        if (key === "pie") {
+          ctx = "config.pie";
+          ensure(config2, "pie", {});
+          continue;
+        }
+        if (key === "themeVariables") {
+          ctx = "theme";
+          themeUnderConfig = true;
+          continue;
+        }
+        ctx = "config";
+        continue;
+      }
+      setKV(config2.pie, key, value);
+      continue;
+    }
+    if (ctx === "theme") {
+      if (indent < 2) {
+        ctx = "root";
+        continue;
+      }
+      setKV(themeVars, key, value);
+      continue;
+    }
+  }
+  if (themeUnderConfig && Object.keys(themeVars).length) {
+    ensure(config2, "themeVariables", {});
+    Object.assign(config2.themeVariables, themeVars);
+  }
+  return {
+    raw,
+    body,
+    bodyStartLine,
+    config: Object.keys(config2).length ? config2 : void 0,
+    themeVariables: Object.keys(themeVars).length ? themeVars : void 0
+  };
+}
+function ensure(obj, key, def) {
+  if (obj[key] == null)
+    obj[key] = def;
+}
+function unquote(val) {
+  const v = val.trim();
+  if (v.startsWith('"') && v.endsWith('"') || v.startsWith("'") && v.endsWith("'")) {
+    return v.slice(1, -1);
+  }
+  return v;
+}
+function setKV(target, key, rawValue) {
+  const v = unquote(rawValue);
+  if (v === "") {
+    target[key] = "";
+    return;
+  }
+  const num = Number(v);
+  if (!Number.isNaN(num) && /^-?[0-9]+(\.[0-9]+)?$/.test(v)) {
+    target[key] = num;
+    return;
+  }
+  if (/^(true|false)$/i.test(v)) {
+    target[key] = /^true$/i.test(v);
+    return;
+  }
+  target[key] = v;
+}
+var init_frontmatter = __esm({
+  "node_modules/@probelabs/maid/out/core/frontmatter.js"() {
+  }
+});
+
 // node_modules/@probelabs/maid/out/core/router.js
 function firstNonCommentLine(text) {
   const lines = text.split(/\r?\n/);
@@ -497892,7 +498760,8 @@ function firstNonCommentLine(text) {
   return void 0;
 }
 function detectDiagramType(text) {
-  const header = firstNonCommentLine(text);
+  const { content } = stripFrontmatter(text);
+  const header = firstNonCommentLine(content);
   if (!header)
     return "unknown";
   if (/^(flowchart|graph)\b/i.test(header))
@@ -497944,20 +498813,26 @@ function isOtherMermaidDiagram(headerLine) {
   return OTHER.has(t);
 }
 function validate(text, options = {}) {
-  const type = detectDiagramType(text);
+  const { content, lineOffset } = stripFrontmatter(text);
+  const type = detectDiagramType(content);
+  const withOffset = (errors) => {
+    if (lineOffset === 0)
+      return errors;
+    return errors.map((e) => ({ ...e, line: Math.max(1, (e.line || 1) + lineOffset) }));
+  };
   switch (type) {
     case "flowchart":
-      return { type, errors: validateFlowchart(text, options) };
+      return { type, errors: withOffset(validateFlowchart(content, options)) };
     case "pie":
-      return { type, errors: validatePie(text, options) };
+      return { type, errors: withOffset(validatePie(content, options)) };
     case "sequence":
-      return { type, errors: validateSequence(text, options) };
+      return { type, errors: withOffset(validateSequence(content, options)) };
     case "class":
-      return { type, errors: validateClass(text, options) };
+      return { type, errors: withOffset(validateClass(content, options)) };
     case "state":
-      return { type, errors: validateState(text, options) };
+      return { type, errors: withOffset(validateState(content, options)) };
     default:
-      const header = firstNonCommentLine(text);
+      const header = firstNonCommentLine(content);
       if (isOtherMermaidDiagram(header)) {
         return { type, errors: [] };
       }
@@ -497965,7 +498840,7 @@ function validate(text, options = {}) {
         type,
         errors: [
           {
-            line: 1,
+            line: lineOffset + 1,
             column: 1,
             message: 'Diagram must start with "graph", "flowchart", "pie", "sequenceDiagram", "classDiagram" or "stateDiagram[-v2]"',
             severity: "error",
@@ -497976,6 +498851,12 @@ function validate(text, options = {}) {
       };
   }
 }
+function stripFrontmatter(text) {
+  const fm = parseFrontmatter(text);
+  if (!fm)
+    return { content: text, lineOffset: 0 };
+  return { content: fm.body, lineOffset: fm.bodyStartLine - 1 };
+}
 var init_router = __esm({
   "node_modules/@probelabs/maid/out/core/router.js"() {
     init_validate();
@@ -497983,6 +498864,7 @@ var init_router = __esm({
     init_validate3();
     init_validate4();
     init_validate5();
+    init_frontmatter();
   }
 });
 
@@ -498194,16 +499076,18 @@ function computeFixes(text, errors, level = "safe") {
       }
       continue;
     }
-    if (is("FL-EDGE-LABEL-BRACKET", e) || is("FL-EDGE-LABEL-CURLY-IN-PIPES", e)) {
+    if (is("FL-EDGE-LABEL-BRACKET", e) || is("FL-EDGE-LABEL-CURLY-IN-PIPES", e) || is("FL-EDGE-LABEL-QUOTE-IN-PIPES", e)) {
       const lineText = lineTextAt(text, e.line);
-      const firstBar = lineText.indexOf("|");
-      const secondBar = firstBar >= 0 ? lineText.indexOf("|", firstBar + 1) : -1;
+      const col = Math.max(0, e.column - 1);
+      const firstBar = lineText.lastIndexOf("|", col);
+      const secondBar = firstBar >= 0 ? lineText.indexOf("|", col + 1) : -1;
       if (firstBar >= 0 && secondBar > firstBar) {
         const before = lineText.slice(0, firstBar + 1);
         const label = lineText.slice(firstBar + 1, secondBar);
         const after = lineText.slice(secondBar);
         let fixedLabel = label.replace(/\[/g, "&#91;").replace(/\]/g, "&#93;");
         fixedLabel = fixedLabel.replace(/\{/g, "&#123;").replace(/\}/g, "&#125;");
+        fixedLabel = fixedLabel.replace(/\\"/g, "&quot;").replace(/"/g, "&quot;");
         const fixedLine = before + fixedLabel + after;
         const finalLine = fixedLine.replace(/\[([^\]]*)\]/g, (m, seg) => "[" + String(seg).replace(/`/g, "") + "]");
         edits.push({ start: { line: e.line, column: 1 }, end: { line: e.line, column: lineText.length + 1 }, newText: finalLine });
@@ -509593,7 +510477,7 @@ ${overlay}</g>`;
 });
 
 // node_modules/@probelabs/maid/out/renderer/pie-builder.js
-function unquote(s) {
+function unquote2(s) {
   if (!s)
     return s;
   const first2 = s.charAt(0);
@@ -509643,7 +510527,7 @@ function buildPieModel(text) {
       const collect = (k) => {
         const arr = tnode.children?.[k] ?? [];
         for (const tok of arr)
-          parts.push(unquote(tok.image));
+          parts.push(unquote2(tok.image));
       };
       collect("QuotedString");
       collect("Text");
@@ -509656,7 +510540,7 @@ function buildPieModel(text) {
       const labelTok = snode.children?.sliceLabel?.[0]?.children?.QuotedString?.[0];
       const numTok = snode.children?.NumberLiteral?.[0];
       if (labelTok && numTok) {
-        const label = unquote(labelTok.image).trim();
+        const label = unquote2(labelTok.image).trim();
         const value = Number(numTok.image);
         if (!Number.isNaN(value)) {
           model.slices.push({ label, value });
@@ -510812,128 +511696,6 @@ var init_state_renderer = __esm({
   }
 });
 
-// node_modules/@probelabs/maid/out/core/frontmatter.js
-function parseFrontmatter(input) {
-  const text = input.startsWith("\uFEFF") ? input.slice(1) : input;
-  const lines = text.split(/\r?\n/);
-  if (lines.length < 3 || lines[0].trim() !== "---")
-    return null;
-  let i = 1;
-  const block = [];
-  while (i < lines.length && lines[i].trim() !== "---") {
-    block.push(lines[i]);
-    i++;
-  }
-  if (i >= lines.length)
-    return null;
-  const body = lines.slice(i + 1).join("\n");
-  const raw = block.join("\n");
-  const config2 = {};
-  const themeVars = {};
-  let themeUnderConfig = false;
-  let ctx = "root";
-  for (const line of block) {
-    if (!line.trim())
-      continue;
-    const indent = line.match(/^\s*/)?.[0].length ?? 0;
-    const mKey = line.match(/^\s*([A-Za-z0-9_\-]+):\s*(.*)$/);
-    if (!mKey)
-      continue;
-    const key = mKey[1];
-    let value = mKey[2] || "";
-    if (indent === 0) {
-      if (key === "config") {
-        ctx = "config";
-        continue;
-      }
-      if (key === "themeVariables") {
-        ctx = "theme";
-        continue;
-      }
-      ctx = "root";
-      continue;
-    }
-    if (ctx === "config") {
-      if (indent <= 2 && key !== "pie" && key !== "themeVariables")
-        continue;
-      if (key === "pie") {
-        ctx = "config.pie";
-        ensure(config2, "pie", {});
-        continue;
-      }
-      if (key === "themeVariables") {
-        ctx = "theme";
-        themeUnderConfig = true;
-        continue;
-      }
-      continue;
-    }
-    if (ctx === "config.pie") {
-      if (indent < 4) {
-        if (key === "pie") {
-          ctx = "config.pie";
-          ensure(config2, "pie", {});
-          continue;
-        }
-        if (key === "themeVariables") {
-          ctx = "theme";
-          themeUnderConfig = true;
-          continue;
-        }
-        ctx = "config";
-        continue;
-      }
-      setKV(config2.pie, key, value);
-      continue;
-    }
-    if (ctx === "theme") {
-      if (indent < 2) {
-        ctx = "root";
-        continue;
-      }
-      setKV(themeVars, key, value);
-      continue;
-    }
-  }
-  if (themeUnderConfig && Object.keys(themeVars).length) {
-    ensure(config2, "themeVariables", {});
-    Object.assign(config2.themeVariables, themeVars);
-  }
-  return { raw, body, config: Object.keys(config2).length ? config2 : void 0, themeVariables: Object.keys(themeVars).length ? themeVars : void 0 };
-}
-function ensure(obj, key, def) {
-  if (obj[key] == null)
-    obj[key] = def;
-}
-function unquote2(val) {
-  const v = val.trim();
-  if (v.startsWith('"') && v.endsWith('"') || v.startsWith("'") && v.endsWith("'")) {
-    return v.slice(1, -1);
-  }
-  return v;
-}
-function setKV(target, key, rawValue) {
-  const v = unquote2(rawValue);
-  if (v === "") {
-    target[key] = "";
-    return;
-  }
-  const num = Number(v);
-  if (!Number.isNaN(num) && /^-?[0-9]+(\.[0-9]+)?$/.test(v)) {
-    target[key] = num;
-    return;
-  }
-  if (/^(true|false)$/i.test(v)) {
-    target[key] = /^true$/i.test(v);
-    return;
-  }
-  target[key] = v;
-}
-var init_frontmatter = __esm({
-  "node_modules/@probelabs/maid/out/core/frontmatter.js"() {
-  }
-});
-
 // node_modules/@probelabs/maid/out/renderer/class-builder.js
 function textFromTokens3(tokens) {
   if (!tokens || tokens.length === 0)
@@ -520256,6 +521018,7 @@ var init_client = __esm({
         this.debug = options.debug || process.env.DEBUG_MCP === "1";
         this.config = null;
         this.tracer = options.tracer || null;
+        this.agentEvents = options.agentEvents || null;
       }
       /**
        * Record an MCP telemetry event if tracer is available
@@ -520483,11 +521246,21 @@ var init_client = __esm({
           throw new Error(`Server ${tool6.serverName} not connected`);
         }
         const startTime = Date.now();
+        const toolCallId = `mcp-${toolName}-${startTime}`;
         this.recordMcpEvent("tool.call_started", {
           toolName,
           serverName: tool6.serverName,
           originalToolName: tool6.originalName
         });
+        if (this.agentEvents) {
+          this.agentEvents.emit("toolCall", {
+            toolCallId,
+            name: toolName,
+            args,
+            status: "started",
+            timestamp: (/* @__PURE__ */ new Date()).toISOString()
+          });
+        }
         try {
           if (this.debug) {
             console.error(`[MCP DEBUG] Calling ${toolName} with args:`, JSON.stringify(args, null, 2));
@@ -520517,6 +521290,14 @@ var init_client = __esm({
             originalToolName: tool6.originalName,
             durationMs
           });
+          if (this.agentEvents) {
+            this.agentEvents.emit("toolCall", {
+              toolCallId,
+              name: toolName,
+              status: "completed",
+              timestamp: (/* @__PURE__ */ new Date()).toISOString()
+            });
+          }
           return result;
         } catch (error40) {
           const durationMs = Date.now() - startTime;
@@ -520532,6 +521313,14 @@ var init_client = __esm({
             durationMs,
             isTimeout: error40.message.includes("timeout")
           });
+          if (this.agentEvents) {
+            this.agentEvents.emit("toolCall", {
+              toolCallId,
+              name: toolName,
+              status: "error",
+              timestamp: (/* @__PURE__ */ new Date()).toISOString()
+            });
+          }
           throw error40;
         }
       }
@@ -520717,6 +521506,7 @@ var init_xmlBridge = __esm({
       constructor(options = {}) {
         this.debug = options.debug || false;
         this.tracer = options.tracer || null;
+        this.agentEvents = options.agentEvents || null;
         this.mcpTools = {};
         this.mcpManager = null;
         this.toolDescriptions = {};
@@ -520759,7 +521549,7 @@ var init_xmlBridge = __esm({
           if (this.debug) {
             console.error("[MCP DEBUG] Initializing MCP client manager...");
           }
-          this.mcpManager = new MCPClientManager({ debug: this.debug, tracer: this.tracer });
+          this.mcpManager = new MCPClientManager({ debug: this.debug, tracer: this.tracer, agentEvents: this.agentEvents });
           const result = await this.mcpManager.initialize(mcpConfigs);
           const vercelTools = this.mcpManager.getVercelTools();
           this.mcpTools = vercelTools;
@@ -528206,7 +528996,7 @@ function deriveDescription(rawDescription, body) {
   }
   return truncateDescription(description);
 }
-function stripFrontmatter(content) {
+function stripFrontmatter2(content) {
   const { body } = extractFrontmatter(content);
   return body.trim();
 }
@@ -528347,7 +529137,7 @@ var init_registry = __esm({
         const skill = this.skillsByName.get(name15);
         if (!skill) return null;
         const content = await (0, import_promises3.readFile)(skill.skillFilePath, "utf8");
-        return stripFrontmatter(content);
+        return stripFrontmatter2(content);
       }
       async _resolveRealPath(target) {
         try {
@@ -545368,7 +546158,7 @@ var init_ProbeAgent = __esm({
             }
             mcpConfig = null;
           }
-          this.mcpBridge = new MCPXmlBridge({ debug: this.debug });
+          this.mcpBridge = new MCPXmlBridge({ debug: this.debug, agentEvents: this.events });
           await this.mcpBridge.initialize(mcpConfig);
           const mcpToolNames = this.mcpBridge.getToolNames();
           const mcpToolCount = mcpToolNames.length;
@@ -546244,6 +547034,14 @@ or
                     active_tools_count: activeToolsList.length
                   });
                 }
+                this.events.emit("timeout.extended", {
+                  grantedMs,
+                  reason: decision.reason || "work in progress",
+                  extensionsUsed: negotiatedTimeoutState.extensionsUsed,
+                  extensionsRemaining: negotiatedTimeoutState.maxRequests - negotiatedTimeoutState.extensionsUsed,
+                  totalExtraTimeMs: negotiatedTimeoutState.totalExtraTimeMs,
+                  budgetRemainingMs: remainingBudgetMs - grantedMs
+                });
               } else {
                 if (this.debug) {
                   console.log(`[DEBUG] Timeout observer: declined extension (reason: ${decision.reason}). Initiating graceful stop.`);
@@ -546257,6 +547055,11 @@ or
                     active_tools: activeToolsList.map((t) => t.name)
                   });
                 }
+                this.events.emit("timeout.windingDown", {
+                  reason: decision.reason || "observer declined",
+                  extensionsUsed: negotiatedTimeoutState.extensionsUsed,
+                  totalExtraTimeMs: negotiatedTimeoutState.totalExtraTimeMs
+                });
                 await this._initiateGracefulStop(gracefulTimeoutState, `observer declined: ${decision.reason}`);
               }
             };
@@ -619797,7 +620600,7 @@ module.exports = /*#__PURE__*/JSON.parse('["aaa","aarp","abb","abbott","abbvie",
 /***/ ((module) => {
 
 "use strict";
-module.exports = /*#__PURE__*/JSON.parse('{"name":"@probelabs/visor","version":"0.1.42","main":"dist/index.js","bin":{"visor":"./dist/index.js"},"exports":{".":{"require":"./dist/index.js","import":"./dist/index.js"},"./sdk":{"types":"./dist/sdk/sdk.d.ts","import":"./dist/sdk/sdk.mjs","require":"./dist/sdk/sdk.js"},"./cli":{"require":"./dist/index.js"}},"files":["dist/","defaults/","action.yml","README.md","LICENSE"],"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"scripts":{"build:cli":"ncc build src/index.ts -o dist && cp -r defaults dist/ && cp -r output dist/ && cp -r docs dist/ && cp -r examples dist/ && cp -r src/debug-visualizer/ui dist/debug-visualizer/ && node scripts/inject-version.js && echo \'#!/usr/bin/env node\' | cat - dist/index.js > temp && mv temp dist/index.js && chmod +x dist/index.js","build:sdk":"tsup src/sdk.ts --dts --sourcemap --format esm,cjs --out-dir dist/sdk","build":"./scripts/build-oss.sh","build:ee":"npm run build:cli && npm run build:sdk","test":"jest && npm run test:yaml","test:unit":"jest","prepublishOnly":"npm run build","test:watch":"jest --watch","test:coverage":"jest --coverage","test:ee":"jest --testPathPatterns=\'tests/ee\' --testPathIgnorePatterns=\'/node_modules/\' --no-coverage","test:manual:bash":"RUN_MANUAL_TESTS=true jest tests/manual/bash-config-manual.test.ts","lint":"eslint src tests --ext .ts","lint:fix":"eslint src tests --ext .ts --fix","format":"prettier --write src tests","format:check":"prettier --check src tests","clean":"","clean:traces":"node scripts/clean-traces.js","prebuild":"npm run clean && node scripts/generate-config-schema.js","pretest":"npm run clean:traces && node scripts/generate-config-schema.js && npm run build:cli","pretest:unit":"npm run clean:traces && node scripts/generate-config-schema.js && npm run build:cli","test:with-build":"npm run build:cli && jest","test:yaml":"node dist/index.js test --progress compact","test:yaml:parallel":"node dist/index.js test --progress compact --max-parallel 4","prepare":"husky","pre-commit":"lint-staged","deploy:site":"cd site && npx wrangler pages deploy . --project-name=visor-site --commit-dirty=true","deploy:worker":"npx wrangler deploy","deploy":"npm run deploy:site && npm run deploy:worker","publish:ee":"./scripts/publish-ee.sh","release":"./scripts/release.sh","release:patch":"./scripts/release.sh patch","release:minor":"./scripts/release.sh minor","release:major":"./scripts/release.sh major","release:prerelease":"./scripts/release.sh prerelease","docs:validate":"node scripts/validate-readme-links.js","workshop:setup":"npm install -D reveal-md@6.1.2","workshop:serve":"cd workshop && reveal-md slides.md -w","workshop:export":"reveal-md workshop/slides.md --static workshop/build","workshop:pdf":"reveal-md workshop/slides.md --print workshop/Visor-Workshop.pdf --print-size letter","workshop:pdf:ci":"reveal-md workshop/slides.md --print workshop/Visor-Workshop.pdf --print-size letter --puppeteer-launch-args=\\"--no-sandbox --disable-dev-shm-usage\\"","workshop:pdf:a4":"reveal-md workshop/slides.md --print workshop/Visor-Workshop-A4.pdf --print-size A4","workshop:build":"npm run workshop:export && npm run workshop:pdf","simulate:issue":"TS_NODE_TRANSPILE_ONLY=1 ts-node scripts/simulate-gh-run.ts --event issues --action opened --debug","simulate:comment":"TS_NODE_TRANSPILE_ONLY=1 ts-node scripts/simulate-gh-run.ts --event issue_comment --action created --debug"},"keywords":["code-review","ai","github-action","cli","pr-review","visor"],"author":"Probe Labs","license":"MIT","description":"AI workflow engine for code review, assistants, and automation — orchestrate checks, MCP tools, and AI providers with YAML-driven pipelines","repository":{"type":"git","url":"git+https://github.com/probelabs/visor.git"},"bugs":{"url":"https://github.com/probelabs/visor/issues"},"homepage":"https://github.com/probelabs/visor#readme","dependencies":{"@actions/core":"^1.11.1","@apidevtools/swagger-parser":"^12.1.0","@grammyjs/runner":"^2.0.3","@modelcontextprotocol/sdk":"^1.25.3","@nyariv/sandboxjs":"github:probelabs/SandboxJS#23c4bb611f7d05f3cb8c523917b5f57103e48108","@octokit/action":"^8.0.2","@octokit/auth-app":"^8.1.0","@octokit/core":"^7.0.3","@octokit/rest":"^22.0.0","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.203.0","@opentelemetry/core":"^1.30.1","@opentelemetry/exporter-logs-otlp-http":"^0.203.0","@opentelemetry/exporter-metrics-otlp-http":"^0.203.0","@opentelemetry/exporter-trace-otlp-grpc":"^0.203.0","@opentelemetry/exporter-trace-otlp-http":"^0.203.0","@opentelemetry/instrumentation":"^0.203.0","@opentelemetry/resources":"^1.30.1","@opentelemetry/sdk-logs":"^0.203.0","@opentelemetry/sdk-metrics":"^1.30.1","@opentelemetry/sdk-node":"^0.203.0","@opentelemetry/sdk-trace-base":"^1.30.1","@opentelemetry/semantic-conventions":"^1.30.1","@probelabs/probe":"0.6.0-rc296","@types/commander":"^2.12.0","@types/uuid":"^10.0.0","@utcp/file":"^1.1.0","@utcp/text":"^1.1.0","acorn":"^8.16.0","acorn-walk":"^8.3.5","ajv":"^8.17.1","ajv-formats":"^3.0.1","better-sqlite3":"^11.0.0","blessed":"^0.1.81","botbuilder":"^4.23.3","botframework-connector":"^4.23.3","cli-table3":"^0.6.5","commander":"^14.0.0","deepmerge":"^4.3.1","dotenv":"^17.2.3","grammy":"^1.41.1","ignore":"^7.0.5","imapflow":"^1.2.12","js-yaml":"^4.1.0","jsonpath-plus":"^10.4.0","liquidjs":"^10.21.1","mailparser":"^3.9.3","minimatch":"^10.2.2","node-cron":"^3.0.3","nodemailer":"^8.0.1","open":"^9.1.0","resend":"^6.9.3","simple-git":"^3.28.0","uuid":"^11.1.0","ws":"^8.18.3"},"optionalDependencies":{"@anthropic/claude-code-sdk":"npm:null@*","@open-policy-agent/opa-wasm":"^1.10.0","@utcp/http":"^1.1.0","@utcp/sdk":"^1.1.0","knex":"^3.1.0","mysql2":"^3.11.0","pg":"^8.13.0","tedious":"^19.0.0"},"devDependencies":{"@eslint/js":"^9.34.0","@kie/act-js":"^2.6.2","@kie/mock-github":"^2.0.1","@swc/core":"^1.13.2","@swc/jest":"^0.2.37","@types/better-sqlite3":"^7.6.0","@types/blessed":"^0.1.27","@types/jest":"^30.0.0","@types/js-yaml":"^4.0.9","@types/mailparser":"^3.4.6","@types/node":"^24.3.0","@types/node-cron":"^3.0.11","@types/nodemailer":"^7.0.11","@types/ws":"^8.18.1","@typescript-eslint/eslint-plugin":"^8.42.0","@typescript-eslint/parser":"^8.42.0","@vercel/ncc":"^0.38.4","eslint":"^9.34.0","eslint-config-prettier":"^10.1.8","eslint-plugin-prettier":"^5.5.4","husky":"^9.1.7","jest":"^30.1.3","lint-staged":"^16.1.6","prettier":"^3.6.2","reveal-md":"^6.1.2","ts-json-schema-generator":"^1.5.1","ts-node":"^10.9.2","tsup":"^8.5.0","typescript":"^5.9.2","wrangler":"^3.0.0"},"peerDependenciesMeta":{"@anthropic/claude-code-sdk":{"optional":true},"@utcp/sdk":{"optional":true},"@utcp/http":{"optional":true}},"directories":{"test":"tests"},"lint-staged":{"src/**/*.{ts,js}":["eslint --fix","prettier --write"],"tests/**/*.{ts,js}":["eslint --fix","prettier --write"],"*.{json,md,yml,yaml}":["prettier --write"]}}');
+module.exports = /*#__PURE__*/JSON.parse('{"name":"@probelabs/visor","version":"0.1.42","main":"dist/index.js","bin":{"visor":"./dist/index.js"},"exports":{".":{"require":"./dist/index.js","import":"./dist/index.js"},"./sdk":{"types":"./dist/sdk/sdk.d.ts","import":"./dist/sdk/sdk.mjs","require":"./dist/sdk/sdk.js"},"./cli":{"require":"./dist/index.js"}},"files":["dist/","defaults/","action.yml","README.md","LICENSE"],"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"scripts":{"build:cli":"ncc build src/index.ts -o dist && cp -r defaults dist/ && cp -r output dist/ && cp -r docs dist/ && cp -r examples dist/ && cp -r src/debug-visualizer/ui dist/debug-visualizer/ && node scripts/inject-version.js && echo \'#!/usr/bin/env node\' | cat - dist/index.js > temp && mv temp dist/index.js && chmod +x dist/index.js","build:sdk":"tsup src/sdk.ts --dts --sourcemap --format esm,cjs --out-dir dist/sdk","build":"./scripts/build-oss.sh","build:ee":"npm run build:cli && npm run build:sdk","test":"jest && npm run test:yaml","test:unit":"jest","prepublishOnly":"npm run build","test:watch":"jest --watch","test:coverage":"jest --coverage","test:ee":"jest --testPathPatterns=\'tests/ee\' --testPathIgnorePatterns=\'/node_modules/\' --no-coverage","test:manual:bash":"RUN_MANUAL_TESTS=true jest tests/manual/bash-config-manual.test.ts","lint":"eslint src tests --ext .ts","lint:fix":"eslint src tests --ext .ts --fix","format":"prettier --write src tests","format:check":"prettier --check src tests","clean":"","clean:traces":"node scripts/clean-traces.js","prebuild":"npm run clean && node scripts/generate-config-schema.js","pretest":"npm run clean:traces && node scripts/generate-config-schema.js && npm run build:cli","pretest:unit":"npm run clean:traces && node scripts/generate-config-schema.js && npm run build:cli","test:with-build":"npm run build:cli && jest","test:yaml":"node dist/index.js test --progress compact","test:yaml:parallel":"node dist/index.js test --progress compact --max-parallel 4","prepare":"husky","pre-commit":"lint-staged","deploy:site":"cd site && npx wrangler pages deploy . --project-name=visor-site --commit-dirty=true","deploy:worker":"npx wrangler deploy","deploy":"npm run deploy:site && npm run deploy:worker","publish:ee":"./scripts/publish-ee.sh","release":"./scripts/release.sh","release:patch":"./scripts/release.sh patch","release:minor":"./scripts/release.sh minor","release:major":"./scripts/release.sh major","release:prerelease":"./scripts/release.sh prerelease","docs:validate":"node scripts/validate-readme-links.js","workshop:setup":"npm install -D reveal-md@6.1.2","workshop:serve":"cd workshop && reveal-md slides.md -w","workshop:export":"reveal-md workshop/slides.md --static workshop/build","workshop:pdf":"reveal-md workshop/slides.md --print workshop/Visor-Workshop.pdf --print-size letter","workshop:pdf:ci":"reveal-md workshop/slides.md --print workshop/Visor-Workshop.pdf --print-size letter --puppeteer-launch-args=\\"--no-sandbox --disable-dev-shm-usage\\"","workshop:pdf:a4":"reveal-md workshop/slides.md --print workshop/Visor-Workshop-A4.pdf --print-size A4","workshop:build":"npm run workshop:export && npm run workshop:pdf","simulate:issue":"TS_NODE_TRANSPILE_ONLY=1 ts-node scripts/simulate-gh-run.ts --event issues --action opened --debug","simulate:comment":"TS_NODE_TRANSPILE_ONLY=1 ts-node scripts/simulate-gh-run.ts --event issue_comment --action created --debug"},"keywords":["code-review","ai","github-action","cli","pr-review","visor"],"author":"Probe Labs","license":"MIT","description":"AI workflow engine for code review, assistants, and automation — orchestrate checks, MCP tools, and AI providers with YAML-driven pipelines","repository":{"type":"git","url":"git+https://github.com/probelabs/visor.git"},"bugs":{"url":"https://github.com/probelabs/visor/issues"},"homepage":"https://github.com/probelabs/visor#readme","dependencies":{"@actions/core":"^1.11.1","@apidevtools/swagger-parser":"^12.1.0","@grammyjs/runner":"^2.0.3","@modelcontextprotocol/sdk":"^1.25.3","@nyariv/sandboxjs":"github:probelabs/SandboxJS#23c4bb611f7d05f3cb8c523917b5f57103e48108","@octokit/action":"^8.0.2","@octokit/auth-app":"^8.1.0","@octokit/core":"^7.0.3","@octokit/rest":"^22.0.0","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.203.0","@opentelemetry/core":"^1.30.1","@opentelemetry/exporter-logs-otlp-http":"^0.203.0","@opentelemetry/exporter-metrics-otlp-http":"^0.203.0","@opentelemetry/exporter-trace-otlp-grpc":"^0.203.0","@opentelemetry/exporter-trace-otlp-http":"^0.203.0","@opentelemetry/instrumentation":"^0.203.0","@opentelemetry/resources":"^1.30.1","@opentelemetry/sdk-logs":"^0.203.0","@opentelemetry/sdk-metrics":"^1.30.1","@opentelemetry/sdk-node":"^0.203.0","@opentelemetry/sdk-trace-base":"^1.30.1","@opentelemetry/semantic-conventions":"^1.30.1","@probelabs/probe":"^0.6.0-rc297","@types/commander":"^2.12.0","@types/uuid":"^10.0.0","@utcp/file":"^1.1.0","@utcp/http":"^1.1.0","@utcp/sdk":"^1.1.0","@utcp/text":"^1.1.0","acorn":"^8.16.0","acorn-walk":"^8.3.5","ajv":"^8.17.1","ajv-formats":"^3.0.1","better-sqlite3":"^11.0.0","blessed":"^0.1.81","botbuilder":"^4.23.3","botframework-connector":"^4.23.3","cli-table3":"^0.6.5","commander":"^14.0.0","deepmerge":"^4.3.1","dotenv":"^17.2.3","grammy":"^1.41.1","ignore":"^7.0.5","imapflow":"^1.2.12","js-yaml":"^4.1.0","jsonpath-plus":"^10.4.0","liquidjs":"^10.21.1","mailparser":"^3.9.3","minimatch":"^10.2.2","node-cron":"^3.0.3","nodemailer":"^8.0.1","open":"^9.1.0","resend":"^6.9.3","simple-git":"^3.28.0","uuid":"^11.1.0","ws":"^8.18.3"},"optionalDependencies":{"@anthropic/claude-code-sdk":"npm:null@*","@open-policy-agent/opa-wasm":"^1.10.0","knex":"^3.1.0","mysql2":"^3.11.0","pg":"^8.13.0","tedious":"^19.0.0"},"devDependencies":{"@eslint/js":"^9.34.0","@kie/act-js":"^2.6.2","@kie/mock-github":"^2.0.1","@swc/core":"^1.13.2","@swc/jest":"^0.2.37","@types/better-sqlite3":"^7.6.0","@types/blessed":"^0.1.27","@types/jest":"^30.0.0","@types/js-yaml":"^4.0.9","@types/mailparser":"^3.4.6","@types/node":"^24.3.0","@types/node-cron":"^3.0.11","@types/nodemailer":"^7.0.11","@types/ws":"^8.18.1","@typescript-eslint/eslint-plugin":"^8.42.0","@typescript-eslint/parser":"^8.42.0","@vercel/ncc":"^0.38.4","eslint":"^9.34.0","eslint-config-prettier":"^10.1.8","eslint-plugin-prettier":"^5.5.4","husky":"^9.1.7","jest":"^30.1.3","lint-staged":"^16.1.6","prettier":"^3.6.2","reveal-md":"^6.1.2","ts-json-schema-generator":"^1.5.1","ts-node":"^10.9.2","tsup":"^8.5.0","typescript":"^5.9.2","wrangler":"^3.0.0"},"peerDependenciesMeta":{"@anthropic/claude-code-sdk":{"optional":true}},"directories":{"test":"tests"},"lint-staged":{"src/**/*.{ts,js}":["eslint --fix","prettier --write"],"tests/**/*.{ts,js}":["eslint --fix","prettier --write"],"*.{json,md,yml,yaml}":["prettier --write"]}}');
 
 /***/ })