@probelabs/visor 0.1.181 → 0.1.182-ee

package/dist/sdk/track-execution-MKIQXP2C.mjs

@@ -0,0 +1,136 @@
+import {
+  getInstanceId,
+  init_instance_id,
+  require_package
+} from "./chunk-QXT47ZHR.mjs";
+import {
+  init_logger,
+  logger
+} from "./chunk-FT3I25QV.mjs";
+import {
+  init_lazy_otel,
+  trace
+} from "./chunk-UCMJJ3IM.mjs";
+import {
+  __esm
+} from "./chunk-J7LXIPZS.mjs";
+
+// src/agent-protocol/track-execution.ts
+import crypto from "crypto";
+import path from "path";
+function getPackageVersion() {
+  try {
+    return require_package()?.version || "dev";
+  } catch {
+    return "dev";
+  }
+}
+async function trackExecution(opts, executor) {
+  const { taskStore, source, configPath, metadata, messageText } = opts;
+  const configName = configPath ? path.basename(configPath, path.extname(configPath)) : void 0;
+  const workflowId = configName && opts.workflowId ? `${configName}#${opts.workflowId}` : opts.workflowId;
+  const requestMessage = {
+    message_id: crypto.randomUUID(),
+    role: "user",
+    parts: [{ text: messageText }]
+  };
+  const traceFile = process.env.VISOR_FALLBACK_TRACE_FILE || void 0;
+  const task = taskStore.createTask({
+    contextId: crypto.randomUUID(),
+    requestMessage,
+    workflowId,
+    requestMetadata: {
+      source,
+      instance_id: getInstanceId(),
+      visor_version: process.env.VISOR_VERSION || getPackageVersion(),
+      ...process.env.VISOR_COMMIT_SHORT ? { visor_commit: process.env.VISOR_COMMIT_SHORT } : {},
+      trace_id: trace.getActiveSpan()?.spanContext().traceId || void 0,
+      ...traceFile ? { trace_file: traceFile } : {},
+      ...metadata
+    }
+  });
+  const instanceId = getInstanceId();
+  taskStore.updateTaskState(task.id, "working");
+  taskStore.claimTask(task.id, instanceId);
+  logger.info(
+    `[TaskTracking] Task ${task.id} started (source=${source}, workflow=${workflowId || "-"}, instance=${instanceId})`
+  );
+  try {
+    const result = await executor();
+    let responseText = "Execution completed";
+    try {
+      const history = result?.reviewSummary?.history;
+      if (history) {
+        const entries = Object.values(history);
+        for (let i = entries.length - 1; i >= 0; i--) {
+          const outputs = entries[i];
+          if (!Array.isArray(outputs)) continue;
+          for (let j = outputs.length - 1; j >= 0; j--) {
+            const text = outputs[j]?.text;
+            if (typeof text === "string" && text.trim().length > 0) {
+              responseText = text.trim();
+              break;
+            }
+          }
+          if (responseText !== "Execution completed") break;
+        }
+      }
+    } catch {
+    }
+    const completedMsg = {
+      message_id: crypto.randomUUID(),
+      role: "agent",
+      parts: [{ text: responseText }]
+    };
+    try {
+      taskStore.updateTaskState(task.id, "completed", completedMsg);
+      logger.info(`[TaskTracking] Task ${task.id} completed`);
+    } catch (stateErr) {
+      logger.warn(
+        `[TaskTracking] Task ${task.id} completed but state transition failed: ${stateErr instanceof Error ? stateErr.message : stateErr}`
+      );
+    }
+    if (opts.autoEvaluate || process.env.VISOR_TASK_EVALUATE === "true") {
+      scheduleEvaluation(task.id, taskStore);
+    }
+    return { task, result };
+  } catch (err) {
+    const errorText = err instanceof Error ? err.message : String(err);
+    const failMessage = {
+      message_id: crypto.randomUUID(),
+      role: "agent",
+      parts: [{ text: errorText }]
+    };
+    try {
+      taskStore.updateTaskState(task.id, "failed", failMessage);
+      logger.info(`[TaskTracking] Task ${task.id} failed: ${errorText}`);
+    } catch {
+    }
+    throw err;
+  }
+}
+function scheduleEvaluation(taskId, taskStore) {
+  setTimeout(async () => {
+    try {
+      const { evaluateAndStore } = await import("./task-evaluator-HLNXKKVV.mjs");
+      await evaluateAndStore(taskId, taskStore);
+      logger.info(`[TaskEvaluator] Auto-evaluation completed for task ${taskId}`);
+    } catch (err) {
+      logger.warn(
+        `[TaskEvaluator] Auto-evaluation failed for task ${taskId}: ${err instanceof Error ? err.message : err}`
+      );
+    }
+  }, 5e3);
+}
+var init_track_execution = __esm({
+  "src/agent-protocol/track-execution.ts"() {
+    init_logger();
+    init_lazy_otel();
+    init_instance_id();
+  }
+});
+init_track_execution();
+export {
+  trackExecution
+};
+//# sourceMappingURL=track-execution-MKIQXP2C.mjs.map

package/dist/sdk/track-execution-MKIQXP2C.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/agent-protocol/track-execution.ts"],"sourcesContent":["/**\n * Shared execution tracking helper.\n *\n * Wraps any engine execution call with task lifecycle management:\n * creates a task in 'submitted' state, transitions to 'working',\n * runs the executor, then sets terminal state (completed/failed).\n *\n * Used by CLI, Slack, TUI, and Scheduler frontends when task_tracking is enabled.\n */\n\nimport crypto from 'crypto';\nimport path from 'path';\nimport { logger } from '../logger';\nimport { trace } from '../telemetry/lazy-otel';\nimport { getInstanceId } from '../utils/instance-id';\nimport type { TaskStore } from './task-store';\nimport type { AgentMessage, AgentTask } from './types';\n\nfunction getPackageVersion(): string {\n  try {\n    return require('../../package.json')?.version || 'dev';\n  } catch {\n    return 'dev';\n  }\n}\n\nexport type TaskSource =\n  | 'cli'\n  | 'slack'\n  | 'telegram'\n  | 'email'\n  | 'whatsapp'\n  | 'teams'\n  | 'a2a'\n  | 'mcp'\n  | 'tui'\n  | 'scheduler'\n  | 'webhook';\n\nexport interface TrackExecutionOptions {\n  taskStore: TaskStore;\n  source: TaskSource;\n  workflowId?: string;\n  /** Config file path — used to prefix workflowId as \"config.yaml#workflow\" */\n  configPath?: string;\n  metadata?: Record<string, unknown>;\n  /** Human-readable description of what's being executed */\n  messageText: string;\n  /** Run LLM evaluation after task completion (non-blocking). */\n  autoEvaluate?: boolean;\n}\n\n/**\n * Wrap an engine execution call with task lifecycle tracking.\n *\n * Creates a task, transitions to 'working', runs the executor,\n * then sets terminal state. Returns both the task and the original result.\n * Re-throws any executor error after marking the task as failed.\n */\nexport async function trackExecution<T>(\n  opts: TrackExecutionOptions,\n  executor: () => Promise<T>\n): Promise<{ task: AgentTask; result: T }> {\n  const { taskStore, source, configPath, metadata, messageText } = opts;\n  const configName = configPath ? path.basename(configPath, path.extname(configPath)) : undefined;\n  const workflowId =\n    configName && opts.workflowId ? `${configName}#${opts.workflowId}` : opts.workflowId;\n\n  const requestMessage: AgentMessage = {\n    message_id: crypto.randomUUID(),\n    role: 'user',\n    parts: [{ text: messageText }],\n  };\n\n  // Capture trace file path if telemetry is writing to a file\n  const traceFile = process.env.VISOR_FALLBACK_TRACE_FILE || undefined;\n\n  const task = taskStore.createTask({\n    contextId: crypto.randomUUID(),\n    requestMessage,\n    workflowId,\n    requestMetadata: {\n      source,\n      instance_id: getInstanceId(),\n      visor_version: process.env.VISOR_VERSION || getPackageVersion(),\n      ...(process.env.VISOR_COMMIT_SHORT ? { visor_commit: process.env.VISOR_COMMIT_SHORT } : {}),\n      trace_id: trace.getActiveSpan()?.spanContext().traceId || undefined,\n      ...(traceFile ? { trace_file: traceFile } : {}),\n      ...metadata,\n    },\n  });\n\n  const instanceId = getInstanceId();\n  taskStore.updateTaskState(task.id, 'working');\n  taskStore.claimTask(task.id, instanceId);\n  logger.info(\n    `[TaskTracking] Task ${task.id} started (source=${source}, workflow=${workflowId || '-'}, instance=${instanceId})`\n  );\n\n  try {\n    const result = await executor();\n\n    // Extract AI response text from the result.\n    // result.reviewSummary.history is keyed by checkId with arrays of outputs.\n    // We want the LAST check's text output (the final AI response), not the\n    // first (which is typically the intent router).\n    let responseText = 'Execution completed';\n    try {\n      const history = (result as any)?.reviewSummary?.history as\n        | Record<string, unknown[]>\n        | undefined;\n      if (history) {\n        const entries = Object.values(history);\n        // Iterate in reverse — last check output is the final response\n        for (let i = entries.length - 1; i >= 0; i--) {\n          const outputs = entries[i];\n          if (!Array.isArray(outputs)) continue;\n          // Within a check, look at the last output first too\n          for (let j = outputs.length - 1; j >= 0; j--) {\n            const text = (outputs[j] as any)?.text;\n            if (typeof text === 'string' && text.trim().length > 0) {\n              responseText = text.trim();\n              break;\n            }\n          }\n          if (responseText !== 'Execution completed') break;\n        }\n      }\n    } catch {\n      // ignore extraction errors\n    }\n\n    const completedMsg: AgentMessage = {\n      message_id: crypto.randomUUID(),\n      role: 'agent',\n      parts: [{ text: responseText }],\n    };\n    try {\n      taskStore.updateTaskState(task.id, 'completed', completedMsg);\n      logger.info(`[TaskTracking] Task ${task.id} completed`);\n    } catch (stateErr) {\n      // Another process (e.g. stale sweep) may have already marked this task as failed.\n      // Log a warning but do NOT re-throw — the execution itself succeeded.\n      logger.warn(\n        `[TaskTracking] Task ${task.id} completed but state transition failed: ${stateErr instanceof Error ? stateErr.message : stateErr}`\n      );\n    }\n\n    // Fire-and-forget LLM evaluation (non-blocking)\n    // Enabled via opts.autoEvaluate (from config.task_evaluate) or VISOR_TASK_EVALUATE env var\n    if (opts.autoEvaluate || process.env.VISOR_TASK_EVALUATE === 'true') {\n      scheduleEvaluation(task.id, taskStore);\n    }\n\n    return { task, result };\n  } catch (err) {\n    const errorText = err instanceof Error ? err.message : String(err);\n    const failMessage: AgentMessage = {\n      message_id: crypto.randomUUID(),\n      role: 'agent',\n      parts: [{ text: errorText }],\n    };\n    try {\n      taskStore.updateTaskState(task.id, 'failed', failMessage);\n      logger.info(`[TaskTracking] Task ${task.id} failed: ${errorText}`);\n    } catch {\n      // ignore double-failure\n    }\n    throw err; // re-throw to preserve original behavior\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Non-blocking auto-evaluation\n// ---------------------------------------------------------------------------\n\nfunction scheduleEvaluation(taskId: string, taskStore: TaskStore): void {\n  // Delay slightly to let OTEL spans flush before we try to read the trace\n  setTimeout(async () => {\n    try {\n      const { evaluateAndStore } = await import('./task-evaluator');\n      await evaluateAndStore(taskId, taskStore as any);\n      logger.info(`[TaskEvaluator] Auto-evaluation completed for task ${taskId}`);\n    } catch (err) {\n      logger.warn(\n        `[TaskEvaluator] Auto-evaluation failed for task ${taskId}: ${err instanceof Error ? err.message : err}`\n      );\n    }\n  }, 5000);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAUA,OAAO,YAAY;AACnB,OAAO,UAAU;AAOjB,SAAS,oBAA4B;AACnC,MAAI;AACF,WAAO,mBAA+B,WAAW;AAAA,EACnD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAmCA,eAAsB,eACpB,MACA,UACyC;AACzC,QAAM,EAAE,WAAW,QAAQ,YAAY,UAAU,YAAY,IAAI;AACjE,QAAM,aAAa,aAAa,KAAK,SAAS,YAAY,KAAK,QAAQ,UAAU,CAAC,IAAI;AACtF,QAAM,aACJ,cAAc,KAAK,aAAa,GAAG,UAAU,IAAI,KAAK,UAAU,KAAK,KAAK;AAE5E,QAAM,iBAA+B;AAAA,IACnC,YAAY,OAAO,WAAW;AAAA,IAC9B,MAAM;AAAA,IACN,OAAO,CAAC,EAAE,MAAM,YAAY,CAAC;AAAA,EAC/B;AAGA,QAAM,YAAY,QAAQ,IAAI,6BAA6B;AAE3D,QAAM,OAAO,UAAU,WAAW;AAAA,IAChC,WAAW,OAAO,WAAW;AAAA,IAC7B;AAAA,IACA;AAAA,IACA,iBAAiB;AAAA,MACf;AAAA,MACA,aAAa,cAAc;AAAA,MAC3B,eAAe,QAAQ,IAAI,iBAAiB,kBAAkB;AAAA,MAC9D,GAAI,QAAQ,IAAI,qBAAqB,EAAE,cAAc,QAAQ,IAAI,mBAAmB,IAAI,CAAC;AAAA,MACzF,UAAU,MAAM,cAAc,GAAG,YAAY,EAAE,WAAW;AAAA,MAC1D,GAAI,YAAY,EAAE,YAAY,UAAU,IAAI,CAAC;AAAA,MAC7C,GAAG;AAAA,IACL;AAAA,EACF,CAAC;AAED,QAAM,aAAa,cAAc;AACjC,YAAU,gBAAgB,KAAK,IAAI,SAAS;AAC5C,YAAU,UAAU,KAAK,IAAI,UAAU;AACvC,SAAO;AAAA,IACL,uBAAuB,KAAK,EAAE,oBAAoB,MAAM,cAAc,cAAc,GAAG,cAAc,UAAU;AAAA,EACjH;AAEA,MAAI;AACF,UAAM,SAAS,MAAM,SAAS;AAM9B,QAAI,eAAe;AACnB,QAAI;AACF,YAAM,UAAW,QAAgB,eAAe;AAGhD,UAAI,SAAS;AACX,cAAM,UAAU,OAAO,OAAO,OAAO;AAErC,iBAAS,IAAI,QAAQ,SAAS,GAAG,KAAK,GAAG,KAAK;AAC5C,gBAAM,UAAU,QAAQ,CAAC;AACzB,cAAI,CAAC,MAAM,QAAQ,OAAO,EAAG;AAE7B,mBAAS,IAAI,QAAQ,SAAS,GAAG,KAAK,GAAG,KAAK;AAC5C,kBAAM,OAAQ,QAAQ,CAAC,GAAW;AAClC,gBAAI,OAAO,SAAS,YAAY,KAAK,KAAK,EAAE,SAAS,GAAG;AACtD,6BAAe,KAAK,KAAK;AACzB;AAAA,YACF;AAAA,UACF;AACA,cAAI,iBAAiB,sBAAuB;AAAA,QAC9C;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAER;AAEA,UAAM,eAA6B;AAAA,MACjC,YAAY,OAAO,WAAW;AAAA,MAC9B,MAAM;AAAA,MACN,OAAO,CAAC,EAAE,MAAM,aAAa,CAAC;AAAA,IAChC;AACA,QAAI;AACF,gBAAU,gBAAgB,KAAK,IAAI,aAAa,YAAY;AAC5D,aAAO,KAAK,uBAAuB,KAAK,EAAE,YAAY;AAAA,IACxD,SAAS,UAAU;AAGjB,aAAO;AAAA,QACL,uBAAuB,KAAK,EAAE,2CAA2C,oBAAoB,QAAQ,SAAS,UAAU,QAAQ;AAAA,MAClI;AAAA,IACF;AAIA,QAAI,KAAK,gBAAgB,QAAQ,IAAI,wBAAwB,QAAQ;AACnE,yBAAmB,KAAK,IAAI,SAAS;AAAA,IACvC;AAEA,WAAO,EAAE,MAAM,OAAO;AAAA,EACxB,SAAS,KAAK;AACZ,UAAM,YAAY,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AACjE,UAAM,cAA4B;AAAA,MAChC,YAAY,OAAO,WAAW;AAAA,MAC9B,MAAM;AAAA,MACN,OAAO,CAAC,EAAE,MAAM,UAAU,CAAC;AAAA,IAC7B;AACA,QAAI;AACF,gBAAU,gBAAgB,KAAK,IAAI,UAAU,WAAW;AACxD,aAAO,KAAK,uBAAuB,KAAK,EAAE,YAAY,SAAS,EAAE;AAAA,IACnE,QAAQ;AAAA,IAER;AACA,UAAM;AAAA,EACR;AACF;AAMA,SAAS,mBAAmB,QAAgB,WAA4B;AAEtE,aAAW,YAAY;AACrB,QAAI;AACF,YAAM,EAAE,iBAAiB,IAAI,MAAM,OAAO,+BAAkB;AAC5D,YAAM,iBAAiB,QAAQ,SAAgB;AAC/C,aAAO,KAAK,sDAAsD,MAAM,EAAE;AAAA,IAC5E,SAAS,KAAK;AACZ,aAAO;AAAA,QACL,mDAAmD,MAAM,KAAK,eAAe,QAAQ,IAAI,UAAU,GAAG;AAAA,MACxG;AAAA,IACF;AAAA,EACF,GAAG,GAAI;AACT;AA7LA;AAAA;AAYA;AACA;AACA;AAAA;AAAA;","names":[]}

package/dist/sdk/validator-XTZJZZJH.mjs

@@ -0,0 +1,134 @@
+import {
+  __esm
+} from "./chunk-J7LXIPZS.mjs";
+
+// src/enterprise/license/validator.ts
+import * as crypto from "crypto";
+import * as fs from "fs";
+import * as path from "path";
+var LicenseValidator;
+var init_validator = __esm({
+  "src/enterprise/license/validator.ts"() {
+    LicenseValidator = class _LicenseValidator {
+      /** Ed25519 public key for license verification (PEM format). */
+      static PUBLIC_KEY = "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAI/Zd08EFmgIdrDm/HXd0l3/5GBt7R1PrdvhdmEXhJlU=\n-----END PUBLIC KEY-----\n";
+      cache = null;
+      static CACHE_TTL = 5 * 60 * 1e3;
+      // 5 minutes
+      static GRACE_PERIOD = 72 * 3600 * 1e3;
+      // 72 hours after expiry
+      /**
+       * Load and validate license from environment or file.
+       *
+       * Resolution order:
+       * 1. VISOR_LICENSE env var (JWT string)
+       * 2. VISOR_LICENSE_FILE env var (path to file)
+       * 3. .visor-license in project root (cwd)
+       * 4. .visor-license in ~/.config/visor/
+       */
+      async loadAndValidate() {
+        if (this.cache && Date.now() - this.cache.validatedAt < _LicenseValidator.CACHE_TTL) {
+          return this.cache.payload;
+        }
+        const token = this.resolveToken();
+        if (!token) return null;
+        const payload = this.verifyAndDecode(token);
+        if (!payload) return null;
+        this.cache = { payload, validatedAt: Date.now() };
+        return payload;
+      }
+      /** Check if a specific feature is licensed */
+      hasFeature(feature) {
+        if (!this.cache) return false;
+        return this.cache.payload.features.includes(feature);
+      }
+      /** Check if license is valid (with grace period) */
+      isValid() {
+        if (!this.cache) return false;
+        const now = Date.now();
+        const expiryMs = this.cache.payload.exp * 1e3;
+        return now < expiryMs + _LicenseValidator.GRACE_PERIOD;
+      }
+      /** Check if the license is within its grace period (expired but still valid) */
+      isInGracePeriod() {
+        if (!this.cache) return false;
+        const now = Date.now();
+        const expiryMs = this.cache.payload.exp * 1e3;
+        return now >= expiryMs && now < expiryMs + _LicenseValidator.GRACE_PERIOD;
+      }
+      resolveToken() {
+        if (process.env.VISOR_LICENSE) {
+          return process.env.VISOR_LICENSE.trim();
+        }
+        if (process.env.VISOR_LICENSE_FILE) {
+          const resolved = path.resolve(process.env.VISOR_LICENSE_FILE);
+          const home2 = process.env.HOME || process.env.USERPROFILE || "";
+          const allowedPrefixes = [path.normalize(process.cwd())];
+          if (home2) allowedPrefixes.push(path.normalize(path.join(home2, ".config", "visor")));
+          let realPath;
+          try {
+            realPath = fs.realpathSync(resolved);
+          } catch {
+            return null;
+          }
+          const isSafe = allowedPrefixes.some(
+            (prefix) => realPath === prefix || realPath.startsWith(prefix + path.sep)
+          );
+          if (!isSafe) return null;
+          return this.readFile(realPath);
+        }
+        const cwdPath = path.join(process.cwd(), ".visor-license");
+        const cwdToken = this.readFile(cwdPath);
+        if (cwdToken) return cwdToken;
+        const home = process.env.HOME || process.env.USERPROFILE || "";
+        if (home) {
+          const configPath = path.join(home, ".config", "visor", ".visor-license");
+          const configToken = this.readFile(configPath);
+          if (configToken) return configToken;
+        }
+        return null;
+      }
+      readFile(filePath) {
+        try {
+          return fs.readFileSync(filePath, "utf-8").trim();
+        } catch {
+          return null;
+        }
+      }
+      verifyAndDecode(token) {
+        try {
+          const parts = token.split(".");
+          if (parts.length !== 3) return null;
+          const [headerB64, payloadB64, signatureB64] = parts;
+          const header = JSON.parse(Buffer.from(headerB64, "base64url").toString());
+          if (header.alg !== "EdDSA") return null;
+          const data = `${headerB64}.${payloadB64}`;
+          const signature = Buffer.from(signatureB64, "base64url");
+          const publicKey = crypto.createPublicKey(_LicenseValidator.PUBLIC_KEY);
+          if (publicKey.asymmetricKeyType !== "ed25519") {
+            return null;
+          }
+          const isValid = crypto.verify(null, Buffer.from(data), publicKey, signature);
+          if (!isValid) return null;
+          const payload = JSON.parse(Buffer.from(payloadB64, "base64url").toString());
+          if (!payload.org || !Array.isArray(payload.features) || typeof payload.exp !== "number" || typeof payload.iat !== "number" || !payload.sub) {
+            return null;
+          }
+          const now = Date.now();
+          const expiryMs = payload.exp * 1e3;
+          if (now >= expiryMs + _LicenseValidator.GRACE_PERIOD) {
+            return null;
+          }
+          return payload;
+        } catch {
+          return null;
+        }
+      }
+    };
+  }
+});
+init_validator();
+export {
+  LicenseValidator
+};
+//# sourceMappingURL=validator-XTZJZZJH.mjs.map

package/dist/sdk/validator-XTZJZZJH.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/enterprise/license/validator.ts"],"sourcesContent":["/**\n * Copyright (c) ProbeLabs. All rights reserved.\n * Licensed under the Elastic License 2.0; you may not use this file except\n * in compliance with the Elastic License 2.0.\n */\n\nimport * as crypto from 'crypto';\nimport * as fs from 'fs';\nimport * as path from 'path';\n\nexport interface LicensePayload {\n  org: string;\n  features: string[];\n  exp: number;\n  iat: number;\n  sub: string;\n}\n\nexport class LicenseValidator {\n  /** Ed25519 public key for license verification (PEM format). */\n  private static PUBLIC_KEY =\n    '-----BEGIN PUBLIC KEY-----\\n' +\n    'MCowBQYDK2VwAyEAI/Zd08EFmgIdrDm/HXd0l3/5GBt7R1PrdvhdmEXhJlU=\\n' +\n    '-----END PUBLIC KEY-----\\n';\n\n  private cache: { payload: LicensePayload; validatedAt: number } | null = null;\n  private static CACHE_TTL = 5 * 60 * 1000; // 5 minutes\n  private static GRACE_PERIOD = 72 * 3600 * 1000; // 72 hours after expiry\n\n  /**\n   * Load and validate license from environment or file.\n   *\n   * Resolution order:\n   * 1. VISOR_LICENSE env var (JWT string)\n   * 2. VISOR_LICENSE_FILE env var (path to file)\n   * 3. .visor-license in project root (cwd)\n   * 4. .visor-license in ~/.config/visor/\n   */\n  async loadAndValidate(): Promise<LicensePayload | null> {\n    // Return cached result if still fresh\n    if (this.cache && Date.now() - this.cache.validatedAt < LicenseValidator.CACHE_TTL) {\n      return this.cache.payload;\n    }\n\n    const token = this.resolveToken();\n    if (!token) return null;\n\n    const payload = this.verifyAndDecode(token);\n    if (!payload) return null;\n\n    this.cache = { payload, validatedAt: Date.now() };\n    return payload;\n  }\n\n  /** Check if a specific feature is licensed */\n  hasFeature(feature: string): boolean {\n    if (!this.cache) return false;\n    return this.cache.payload.features.includes(feature);\n  }\n\n  /** Check if license is valid (with grace period) */\n  isValid(): boolean {\n    if (!this.cache) return false;\n    const now = Date.now();\n    const expiryMs = this.cache.payload.exp * 1000;\n    return now < expiryMs + LicenseValidator.GRACE_PERIOD;\n  }\n\n  /** Check if the license is within its grace period (expired but still valid) */\n  isInGracePeriod(): boolean {\n    if (!this.cache) return false;\n    const now = Date.now();\n    const expiryMs = this.cache.payload.exp * 1000;\n    return now >= expiryMs && now < expiryMs + LicenseValidator.GRACE_PERIOD;\n  }\n\n  private resolveToken(): string | null {\n    // 1. Direct env var\n    if (process.env.VISOR_LICENSE) {\n      return process.env.VISOR_LICENSE.trim();\n    }\n\n    // 2. File path from env (validate against path traversal)\n    if (process.env.VISOR_LICENSE_FILE) {\n      // path.resolve() produces an absolute path with all '..' segments resolved,\n      // so a separate resolved.includes('..') check is unnecessary.\n      const resolved = path.resolve(process.env.VISOR_LICENSE_FILE);\n      const home = process.env.HOME || process.env.USERPROFILE || '';\n      const allowedPrefixes = [path.normalize(process.cwd())];\n      if (home) allowedPrefixes.push(path.normalize(path.join(home, '.config', 'visor')));\n\n      // Resolve symlinks so an attacker cannot create a symlink inside an\n      // allowed prefix that points to an arbitrary file outside it.\n      let realPath: string;\n      try {\n        realPath = fs.realpathSync(resolved);\n      } catch {\n        return null; // File doesn't exist or isn't accessible\n      }\n\n      const isSafe = allowedPrefixes.some(\n        prefix => realPath === prefix || realPath.startsWith(prefix + path.sep)\n      );\n      if (!isSafe) return null;\n      return this.readFile(realPath);\n    }\n\n    // 3. .visor-license in cwd\n    const cwdPath = path.join(process.cwd(), '.visor-license');\n    const cwdToken = this.readFile(cwdPath);\n    if (cwdToken) return cwdToken;\n\n    // 4. ~/.config/visor/.visor-license\n    const home = process.env.HOME || process.env.USERPROFILE || '';\n    if (home) {\n      const configPath = path.join(home, '.config', 'visor', '.visor-license');\n      const configToken = this.readFile(configPath);\n      if (configToken) return configToken;\n    }\n\n    return null;\n  }\n\n  private readFile(filePath: string): string | null {\n    try {\n      return fs.readFileSync(filePath, 'utf-8').trim();\n    } catch {\n      return null;\n    }\n  }\n\n  private verifyAndDecode(token: string): LicensePayload | null {\n    try {\n      const parts = token.split('.');\n      if (parts.length !== 3) return null;\n\n      const [headerB64, payloadB64, signatureB64] = parts;\n\n      // Decode header to verify algorithm\n      const header = JSON.parse(Buffer.from(headerB64, 'base64url').toString());\n      if (header.alg !== 'EdDSA') return null;\n\n      // Verify signature\n      const data = `${headerB64}.${payloadB64}`;\n      const signature = Buffer.from(signatureB64, 'base64url');\n\n      const publicKey = crypto.createPublicKey(LicenseValidator.PUBLIC_KEY);\n\n      // Validate that the loaded public key is actually Ed25519 (OID 1.3.101.112).\n      // This prevents algorithm-confusion attacks if the embedded key were ever\n      // swapped to a different type.\n      if (publicKey.asymmetricKeyType !== 'ed25519') {\n        return null;\n      }\n\n      // Ed25519 verification: algorithm must be null because EdDSA performs its\n      // own internal hashing (SHA-512) — passing a digest algorithm here would\n      // cause Node.js to throw. The key type is validated above.\n      const isValid = crypto.verify(null, Buffer.from(data), publicKey, signature);\n      if (!isValid) return null;\n\n      // Decode payload\n      const payload: LicensePayload = JSON.parse(Buffer.from(payloadB64, 'base64url').toString());\n\n      // Validate required fields\n      if (\n        !payload.org ||\n        !Array.isArray(payload.features) ||\n        typeof payload.exp !== 'number' ||\n        typeof payload.iat !== 'number' ||\n        !payload.sub\n      ) {\n        return null;\n      }\n\n      // Check expiry (with grace period)\n      const now = Date.now();\n      const expiryMs = payload.exp * 1000;\n      if (now >= expiryMs + LicenseValidator.GRACE_PERIOD) {\n        return null;\n      }\n\n      return payload;\n    } catch {\n      return null;\n    }\n  }\n}\n"],"mappings":";;;;;AAMA,YAAY,YAAY;AACxB,YAAY,QAAQ;AACpB,YAAY,UAAU;AARtB,IAkBa;AAlBb;AAAA;AAkBO,IAAM,mBAAN,MAAM,kBAAiB;AAAA;AAAA,MAE5B,OAAe,aACb;AAAA,MAIM,QAAiE;AAAA,MACzE,OAAe,YAAY,IAAI,KAAK;AAAA;AAAA,MACpC,OAAe,eAAe,KAAK,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAW1C,MAAM,kBAAkD;AAEtD,YAAI,KAAK,SAAS,KAAK,IAAI,IAAI,KAAK,MAAM,cAAc,kBAAiB,WAAW;AAClF,iBAAO,KAAK,MAAM;AAAA,QACpB;AAEA,cAAM,QAAQ,KAAK,aAAa;AAChC,YAAI,CAAC,MAAO,QAAO;AAEnB,cAAM,UAAU,KAAK,gBAAgB,KAAK;AAC1C,YAAI,CAAC,QAAS,QAAO;AAErB,aAAK,QAAQ,EAAE,SAAS,aAAa,KAAK,IAAI,EAAE;AAChD,eAAO;AAAA,MACT;AAAA;AAAA,MAGA,WAAW,SAA0B;AACnC,YAAI,CAAC,KAAK,MAAO,QAAO;AACxB,eAAO,KAAK,MAAM,QAAQ,SAAS,SAAS,OAAO;AAAA,MACrD;AAAA;AAAA,MAGA,UAAmB;AACjB,YAAI,CAAC,KAAK,MAAO,QAAO;AACxB,cAAM,MAAM,KAAK,IAAI;AACrB,cAAM,WAAW,KAAK,MAAM,QAAQ,MAAM;AAC1C,eAAO,MAAM,WAAW,kBAAiB;AAAA,MAC3C;AAAA;AAAA,MAGA,kBAA2B;AACzB,YAAI,CAAC,KAAK,MAAO,QAAO;AACxB,cAAM,MAAM,KAAK,IAAI;AACrB,cAAM,WAAW,KAAK,MAAM,QAAQ,MAAM;AAC1C,eAAO,OAAO,YAAY,MAAM,WAAW,kBAAiB;AAAA,MAC9D;AAAA,MAEQ,eAA8B;AAEpC,YAAI,QAAQ,IAAI,eAAe;AAC7B,iBAAO,QAAQ,IAAI,cAAc,KAAK;AAAA,QACxC;AAGA,YAAI,QAAQ,IAAI,oBAAoB;AAGlC,gBAAM,WAAgB,aAAQ,QAAQ,IAAI,kBAAkB;AAC5D,gBAAMA,QAAO,QAAQ,IAAI,QAAQ,QAAQ,IAAI,eAAe;AAC5D,gBAAM,kBAAkB,CAAM,eAAU,QAAQ,IAAI,CAAC,CAAC;AACtD,cAAIA,MAAM,iBAAgB,KAAU,eAAe,UAAKA,OAAM,WAAW,OAAO,CAAC,CAAC;AAIlF,cAAI;AACJ,cAAI;AACF,uBAAc,gBAAa,QAAQ;AAAA,UACrC,QAAQ;AACN,mBAAO;AAAA,UACT;AAEA,gBAAM,SAAS,gBAAgB;AAAA,YAC7B,YAAU,aAAa,UAAU,SAAS,WAAW,SAAc,QAAG;AAAA,UACxE;AACA,cAAI,CAAC,OAAQ,QAAO;AACpB,iBAAO,KAAK,SAAS,QAAQ;AAAA,QAC/B;AAGA,cAAM,UAAe,UAAK,QAAQ,IAAI,GAAG,gBAAgB;AACzD,cAAM,WAAW,KAAK,SAAS,OAAO;AACtC,YAAI,SAAU,QAAO;AAGrB,cAAM,OAAO,QAAQ,IAAI,QAAQ,QAAQ,IAAI,eAAe;AAC5D,YAAI,MAAM;AACR,gBAAM,aAAkB,UAAK,MAAM,WAAW,SAAS,gBAAgB;AACvE,gBAAM,cAAc,KAAK,SAAS,UAAU;AAC5C,cAAI,YAAa,QAAO;AAAA,QAC1B;AAEA,eAAO;AAAA,MACT;AAAA,MAEQ,SAAS,UAAiC;AAChD,YAAI;AACF,iBAAU,gBAAa,UAAU,OAAO,EAAE,KAAK;AAAA,QACjD,QAAQ;AACN,iBAAO;AAAA,QACT;AAAA,MACF;AAAA,MAEQ,gBAAgB,OAAsC;AAC5D,YAAI;AACF,gBAAM,QAAQ,MAAM,MAAM,GAAG;AAC7B,cAAI,MAAM,WAAW,EAAG,QAAO;AAE/B,gBAAM,CAAC,WAAW,YAAY,YAAY,IAAI;AAG9C,gBAAM,SAAS,KAAK,MAAM,OAAO,KAAK,WAAW,WAAW,EAAE,SAAS,CAAC;AACxE,cAAI,OAAO,QAAQ,QAAS,QAAO;AAGnC,gBAAM,OAAO,GAAG,SAAS,IAAI,UAAU;AACvC,gBAAM,YAAY,OAAO,KAAK,cAAc,WAAW;AAEvD,gBAAM,YAAmB,uBAAgB,kBAAiB,UAAU;AAKpE,cAAI,UAAU,sBAAsB,WAAW;AAC7C,mBAAO;AAAA,UACT;AAKA,gBAAM,UAAiB,cAAO,MAAM,OAAO,KAAK,IAAI,GAAG,WAAW,SAAS;AAC3E,cAAI,CAAC,QAAS,QAAO;AAGrB,gBAAM,UAA0B,KAAK,MAAM,OAAO,KAAK,YAAY,WAAW,EAAE,SAAS,CAAC;AAG1F,cACE,CAAC,QAAQ,OACT,CAAC,MAAM,QAAQ,QAAQ,QAAQ,KAC/B,OAAO,QAAQ,QAAQ,YACvB,OAAO,QAAQ,QAAQ,YACvB,CAAC,QAAQ,KACT;AACA,mBAAO;AAAA,UACT;AAGA,gBAAM,MAAM,KAAK,IAAI;AACrB,gBAAM,WAAW,QAAQ,MAAM;AAC/B,cAAI,OAAO,WAAW,kBAAiB,cAAc;AACnD,mBAAO;AAAA,UACT;AAEA,iBAAO;AAAA,QACT,QAAQ;AACN,iBAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF;AAAA;AAAA;","names":["home"]}

package/dist/sdk/{workflow-check-provider-NTHC5ZBF.mjs → workflow-check-provider-EXMC6JIS.mjs}

@@ -1,7 +1,7 @@
 import {
   WorkflowCheckProvider,
   init_workflow_check_provider
-} from "./chunk-QGBASDYP.mjs";
+} from "./chunk-TQQNSHQV.mjs";
 import "./chunk-YSOIR46P.mjs";
 import "./chunk-PDQTEBOJ.mjs";
 import "./chunk-7XRSCOKE.mjs";
@@ -10,12 +10,12 @@ import "./chunk-B7BVQM5K.mjs";
 import "./chunk-XXAEN5KU.mjs";
 import "./chunk-RHKPFJLG.mjs";
 import "./chunk-J27D43HS.mjs";
-import "./chunk-VMVIM4JB.mjs";
+import "./chunk-ZOF5QT6U.mjs";
 import "./chunk-KWTCTEFT.mjs";
-import "./chunk-VXC2XNQJ.mjs";
-import "./chunk-J73GEFPT.mjs";
-import "./chunk-DGIH6EX3.mjs";
-import "./chunk-6VVXKXTI.mjs";
+import "./chunk-ANUT54HW.mjs";
+import "./chunk-DHETLQIX.mjs";
+import "./chunk-7ERVRLDV.mjs";
+import "./chunk-QXT47ZHR.mjs";
 import "./chunk-34QX63WK.mjs";
 import "./chunk-PQWZ6NFL.mjs";
 import "./chunk-25IC7KXZ.mjs";
@@ -28,4 +28,4 @@ init_workflow_check_provider();
 export {
   WorkflowCheckProvider
 };
-//# sourceMappingURL=workflow-check-provider-NTHC5ZBF.mjs.map
+//# sourceMappingURL=workflow-check-provider-EXMC6JIS.mjs.map

package/dist/sdk/{workflow-check-provider-SRIMWKLQ.mjs → workflow-check-provider-VKYGI5GK.mjs}

@@ -1,7 +1,7 @@
 import {
   WorkflowCheckProvider,
   init_workflow_check_provider
-} from "./chunk-7YZSSO4X.mjs";
+} from "./chunk-6DPPP7LD.mjs";
 import "./chunk-YSOIR46P.mjs";
 import "./chunk-PDQTEBOJ.mjs";
 import "./chunk-7XRSCOKE.mjs";
@@ -10,7 +10,7 @@ import "./chunk-B7BVQM5K.mjs";
 import "./chunk-XXAEN5KU.mjs";
 import "./chunk-RHKPFJLG.mjs";
 import "./chunk-J27D43HS.mjs";
-import "./chunk-VMVIM4JB.mjs";
+import "./chunk-4I3TJ7UJ.mjs";
 import "./chunk-KWTCTEFT.mjs";
 import "./chunk-KBGQJKIZ.mjs";
 import "./chunk-U6K5SK7X.mjs";
@@ -28,4 +28,4 @@ init_workflow_check_provider();
 export {
   WorkflowCheckProvider
 };
-//# sourceMappingURL=workflow-check-provider-SRIMWKLQ.mjs.map
+//# sourceMappingURL=workflow-check-provider-VKYGI5GK.mjs.map

package/dist/slack/socket-runner.d.ts

@@ -38,6 +38,7 @@ export declare class SlackSocketRunner implements Runner {
     private heartbeatTimer?;
     private lastPong;
     private closing;
+    private draining;
     private taskStore?;
     private configPath?;
     private staleTaskTimer?;
@@ -115,6 +116,17 @@ export declare class SlackSocketRunner implements Runner {
         name: string;
         description?: string;
     }[]): unknown[];
+    /**
+     * Stop listening for new messages. Closes the WebSocket and stops the scheduler,
+     * but does NOT wait for in-flight work to complete. Frees the connection so
+     * a new process can connect to Slack immediately.
+     */
+    stopListening(): Promise<void>;
+    /**
+     * Enter drain mode: stop accepting new messages, wait for active threads to complete.
+     * @param timeoutMs - Max wait time. 0 = unlimited (default).
+     */
+    drain(timeoutMs?: number): Promise<void>;
     /**
      * Stop the socket runner and clean up resources
      */

package/dist/slack/socket-runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"socket-runner.d.ts","sourceRoot":"","sources":["file:///home/runner/work/visor/visor/src/slack/socket-runner.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,WAAW,EAAmB,MAAM,iBAAiB,CAAC;AACpE,OAAO,EAAE,2BAA2B,EAAE,MAAM,mCAAmC,CAAC;AAOhF,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAiB,KAAK,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAM3E,OAAO,EAAyB,KAAK,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAEtF,KAAK,iBAAiB,GAAG;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,QAAQ,GAAG,KAAK,CAAC;IAC5B,OAAO,CAAC,EAAE,UAAU,GAAG,KAAK,CAAC;IAC7B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,CAAC;AAEF,qBAAa,iBAAkB,YAAW,MAAM;IAC9C,QAAQ,CAAC,IAAI,WAAW;IACxB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,QAAQ,CAA8B;IAC9C,OAAO,CAAC,OAAO,CAA6B;IAC5C,OAAO,CAAC,KAAK,CAAgB;IAC7B,OAAO,CAAC,EAAE,CAAC,CAAY;IACvB,OAAO,CAAC,MAAM,CAA8B;IAC5C,OAAO,CAAC,GAAG,CAAc;IACzB,OAAO,CAAC,MAAM,CAAC,CAAc;IAC7B,OAAO,CAAC,OAAO,CAAC,CAAc;IAC9B,OAAO,CAAC,SAAS,CAAC,CAAS;IAC3B,OAAO,CAAC,gBAAgB,CAAkB;IAC1C,OAAO,CAAC,WAAW,CAAkB;IACrC,OAAO,CAAC,aAAa,CAAkC;IACvD,OAAO,CAAC,aAAa,CASP;IACd,OAAO,CAAC,OAAO,CAAC,CAAe;IAC/B,OAAO,CAAC,UAAU,CAAK;IACvB,OAAO,CAAC,gBAAgB,CAAC,CAAY;IACrC,OAAO,CAAC,uBAAuB,CAAC,CAA0B;IAC1D,OAAO,CAAC,aAAa,CAAqB;IAC1C,OAAO,CAAC,cAAc,CAAC,CAAiC;IACxD,OAAO,CAAC,QAAQ,CAAK;IACrB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,SAAS,CAAC,CAAmD;IACrE,OAAO,CAAC,UAAU,CAAC,CAAS;IAC5B,OAAO,CAAC,cAAc,CAAC,CAAiC;gBAE5C,MAAM,EAAE,2BAA2B,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,iBAAiB;IAsB1F,oDAAoD;IACpD,YAAY,CAAC,KAAK,EAAE,OAAO,8BAA8B,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI;IAKhG,qFAAqF;IACrF,YAAY,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI;IASpC;;;OAGG;IACH,OAAO,CAAC,6BAA6B;IAYrC;;OAEG;YACW,wBAAwB;IA8BtC;;;OAGG;YACW,YAAY;IAYpB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YAiHd,cAAc;YAiBd,OAAO;IAgCrB;;;OAGG;IACH,OAAO,CAAC,cAAc;IAetB;;;OAGG;IACH,OAAO,CAAC,cAAc;IAgCtB,OAAO,CAAC,aAAa;YAOP,OAAO;IAgBrB,OAAO,CAAC,IAAI;IAMZ,OAAO,CAAC,gBAAgB;IAQxB;;;OAGG;YACW,aAAa;IAyC3B;;OAEG;YACW,WAAW;YAKX,aAAa;IA+b3B;;OAEG;YACW,sBAAsB;IAkMpC,OAAO,CAAC,WAAW;IAMnB,OAAO,CAAC,aAAa;IAIrB;;;OAGG;IACG,6BAA6B,CAAC,SAAS,SAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IA+BpE;;;OAGG;YACW,cAAc;IA+C5B;;;OAGG;IACH,eAAe,CACb,QAAQ,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,EACrD,SAAS,EAAE,QAAQ,EAAE,EACrB,QAAQ,EAAE,cAAc,EAAE,EAC1B,SAAS,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,GAC9D,OAAO,EAAE;IAyHZ;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAgC3B;;OAEG;IACH,YAAY,IAAI,SAAS,GAAG,SAAS;IAIrC,0FAA0F;IAC1F,OAAO,CAAC,eAAe;CA+BxB"}
+{"version":3,"file":"socket-runner.d.ts","sourceRoot":"","sources":["file:///home/runner/work/visor/visor/src/slack/socket-runner.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,WAAW,EAAmB,MAAM,iBAAiB,CAAC;AACpE,OAAO,EAAE,2BAA2B,EAAE,MAAM,mCAAmC,CAAC;AAOhF,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAiB,KAAK,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAM3E,OAAO,EAAyB,KAAK,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAEtF,KAAK,iBAAiB,GAAG;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,QAAQ,GAAG,KAAK,CAAC;IAC5B,OAAO,CAAC,EAAE,UAAU,GAAG,KAAK,CAAC;IAC7B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,CAAC;AAoBF,qBAAa,iBAAkB,YAAW,MAAM;IAC9C,QAAQ,CAAC,IAAI,WAAW;IACxB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,QAAQ,CAA8B;IAC9C,OAAO,CAAC,OAAO,CAA6B;IAC5C,OAAO,CAAC,KAAK,CAAgB;IAC7B,OAAO,CAAC,EAAE,CAAC,CAAY;IACvB,OAAO,CAAC,MAAM,CAA8B;IAC5C,OAAO,CAAC,GAAG,CAAc;IACzB,OAAO,CAAC,MAAM,CAAC,CAAc;IAC7B,OAAO,CAAC,OAAO,CAAC,CAAc;IAC9B,OAAO,CAAC,SAAS,CAAC,CAAS;IAC3B,OAAO,CAAC,gBAAgB,CAAkB;IAC1C,OAAO,CAAC,WAAW,CAAkB;IACrC,OAAO,CAAC,aAAa,CAAkC;IACvD,OAAO,CAAC,aAAa,CASP;IACd,OAAO,CAAC,OAAO,CAAC,CAAe;IAC/B,OAAO,CAAC,UAAU,CAAK;IACvB,OAAO,CAAC,gBAAgB,CAAC,CAAY;IACrC,OAAO,CAAC,uBAAuB,CAAC,CAA0B;IAC1D,OAAO,CAAC,aAAa,CAAqB;IAC1C,OAAO,CAAC,cAAc,CAAC,CAAiC;IACxD,OAAO,CAAC,QAAQ,CAAK;IACrB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,SAAS,CAAC,CAAmD;IACrE,OAAO,CAAC,UAAU,CAAC,CAAS;IAC5B,OAAO,CAAC,cAAc,CAAC,CAAiC;gBAE5C,MAAM,EAAE,2BAA2B,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,iBAAiB;IAsB1F,oDAAoD;IACpD,YAAY,CAAC,KAAK,EAAE,OAAO,8BAA8B,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI;IAKhG,qFAAqF;IACrF,YAAY,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI;IASpC;;;OAGG;IACH,OAAO,CAAC,6BAA6B;IAYrC;;OAEG;YACW,wBAAwB;IA8BtC;;;OAGG;YACW,YAAY;IAYpB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YAiHd,cAAc;YAiBd,OAAO;IAgCrB;;;OAGG;IACH,OAAO,CAAC,cAAc;IAetB;;;OAGG;IACH,OAAO,CAAC,cAAc;IAgCtB,OAAO,CAAC,aAAa;YAOP,OAAO;IAgBrB,OAAO,CAAC,IAAI;IAMZ,OAAO,CAAC,gBAAgB;IAQxB;;;OAGG;YACW,aAAa;IAyC3B;;OAEG;YACW,WAAW;YAKX,aAAa;IAqd3B;;OAEG;YACW,sBAAsB;IAkMpC,OAAO,CAAC,WAAW;IAMnB,OAAO,CAAC,aAAa;IAIrB;;;OAGG;IACG,6BAA6B,CAAC,SAAS,SAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IA+BpE;;;OAGG;YACW,cAAc;IA+C5B;;;OAGG;IACH,eAAe,CACb,QAAQ,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,EACrD,SAAS,EAAE,QAAQ,EAAE,EACrB,QAAQ,EAAE,cAAc,EAAE,EAC1B,SAAS,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,GAC9D,OAAO,EAAE;IAyHZ;;;;OAIG;IACG,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IAwBpC;;;OAGG;IACG,KAAK,CAAC,SAAS,SAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAyBzC;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAgC3B;;OAEG;IACH,YAAY,IAAI,SAAS,GAAG,SAAS;IAIrC,0FAA0F;IAC1F,OAAO,CAAC,eAAe;CA+BxB"}

package/dist/teams/webhook-runner.d.ts

@@ -24,6 +24,7 @@ export declare class TeamsWebhookRunner implements Runner {
     private host;
     private taskStore?;
     private configPath?;
+    private activeRequests;
     constructor(engine: StateMachineExecutionEngine, cfg: VisorConfig, opts: TeamsWebhookConfig);
     /** Get the TeamsClient instance (for shared access) */
     getClient(): TeamsClient;
@@ -32,8 +33,11 @@ export declare class TeamsWebhookRunner implements Runner {
     /** Hot-swap config for future requests */
     updateConfig(cfg: VisorConfig): void;
     start(): Promise<void>;
+    stopListening(): Promise<void>;
+    drain(timeoutMs?: number): Promise<void>;
     stop(): Promise<void>;
     private handleMessage;
+    private handleMessageInner;
     /** Ensure teams frontend is in the config for this run */
     private prepareConfigForRun;
     /** Deduplication: track processed activities by ID */

package/dist/teams/webhook-runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"webhook-runner.d.ts","sourceRoot":"","sources":["file:///home/runner/work/visor/visor/src/teams/webhook-runner.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,2BAA2B,EAAE,MAAM,mCAAmC,CAAC;AAChF,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAIvC,MAAM,MAAM,kBAAkB,GAAG;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,qBAAa,kBAAmB,YAAW,MAAM;IAC/C,QAAQ,CAAC,IAAI,WAAW;IACxB,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,OAAO,CAAe;IAC9B,OAAO,CAAC,MAAM,CAA8B;IAC5C,OAAO,CAAC,GAAG,CAAc;IACzB,OAAO,CAAC,aAAa,CAAc;IACnC,OAAO,CAAC,mBAAmB,CAAkC;IAC7D,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,SAAS,CAAC,CAAmD;IACrE,OAAO,CAAC,UAAU,CAAC,CAAS;gBAEhB,MAAM,EAAE,2BAA2B,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,kBAAkB;IAmB3F,uDAAuD;IACvD,SAAS,IAAI,WAAW;IAIxB,mDAAmD;IACnD,YAAY,CAAC,KAAK,EAAE,OAAO,8BAA8B,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI;IAKhG,0CAA0C;IAC1C,YAAY,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI;IAI9B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAkEtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YAWb,aAAa;IA4G3B,0DAA0D;IAC1D,OAAO,CAAC,mBAAmB;IAc3B,sDAAsD;IACtD,OAAO,CAAC,WAAW;CAWpB"}
+{"version":3,"file":"webhook-runner.d.ts","sourceRoot":"","sources":["file:///home/runner/work/visor/visor/src/teams/webhook-runner.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,2BAA2B,EAAE,MAAM,mCAAmC,CAAC;AAChF,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAIvC,MAAM,MAAM,kBAAkB,GAAG;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,qBAAa,kBAAmB,YAAW,MAAM;IAC/C,QAAQ,CAAC,IAAI,WAAW;IACxB,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,OAAO,CAAe;IAC9B,OAAO,CAAC,MAAM,CAA8B;IAC5C,OAAO,CAAC,GAAG,CAAc;IACzB,OAAO,CAAC,aAAa,CAAc;IACnC,OAAO,CAAC,mBAAmB,CAAkC;IAC7D,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,SAAS,CAAC,CAAmD;IACrE,OAAO,CAAC,UAAU,CAAC,CAAS;IAC5B,OAAO,CAAC,cAAc,CAAK;gBAEf,MAAM,EAAE,2BAA2B,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,kBAAkB;IAmB3F,uDAAuD;IACvD,SAAS,IAAI,WAAW;IAIxB,mDAAmD;IACnD,YAAY,CAAC,KAAK,EAAE,OAAO,8BAA8B,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI;IAKhG,0CAA0C;IAC1C,YAAY,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI;IAI9B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAkEtB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IAY9B,KAAK,CAAC,SAAS,SAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBnC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YAWb,aAAa;YASb,kBAAkB;IA4GhC,0DAA0D;IAC1D,OAAO,CAAC,mBAAmB;IAc3B,sDAAsD;IACtD,OAAO,CAAC,WAAW;CAWpB"}

package/dist/telegram/polling-runner.d.ts

@@ -30,6 +30,8 @@ export declare class TelegramPollingRunner implements Runner {
     /** Hot-swap config for future requests */
     updateConfig(cfg: VisorConfig): void;
     start(): Promise<void>;
+    stopListening(): Promise<void>;
+    drain(timeoutMs?: number): Promise<void>;
     stop(): Promise<void>;
     private handleMessage;
     /** Ensure telegram frontend is in the config for this run */

package/dist/telegram/polling-runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"polling-runner.d.ts","sourceRoot":"","sources":["file:///home/runner/work/visor/visor/src/telegram/polling-runner.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,2BAA2B,EAAE,MAAM,mCAAmC,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAM1C,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;IACpC,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,qBAAa,qBAAsB,YAAW,MAAM;IAClD,QAAQ,CAAC,IAAI,cAAc;IAC3B,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,OAAO,CAAkB;IACjC,OAAO,CAAC,MAAM,CAA8B;IAC5C,OAAO,CAAC,GAAG,CAAc;IACzB,OAAO,CAAC,aAAa,CAAc;IACnC,OAAO,CAAC,cAAc,CAAU;IAChC,OAAO,CAAC,YAAY,CAAC,CAAe;IACpC,OAAO,CAAC,gBAAgB,CAAkC;IAC1D,OAAO,CAAC,WAAW,CAAqB;IACxC,OAAO,CAAC,SAAS,CAAC,CAAmD;IACrE,OAAO,CAAC,UAAU,CAAC,CAAS;gBAEhB,MAAM,EAAE,2BAA2B,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,qBAAqB;IAY9F,0DAA0D;IAC1D,SAAS,IAAI,cAAc;IAI3B,mDAAmD;IACnD,YAAY,CAAC,KAAK,EAAE,OAAO,8BAA8B,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI;IAKhG,0CAA0C;IAC1C,YAAY,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI;IAI9B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA6DtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YAOb,aAAa;IA0H3B,6DAA6D;IAC7D,OAAO,CAAC,mBAAmB;IAc3B,mEAAmE;IACnE,OAAO,CAAC,WAAW;IAYnB,OAAO,CAAC,SAAS;IAKjB,OAAO,CAAC,WAAW;CAGpB"}
+{"version":3,"file":"polling-runner.d.ts","sourceRoot":"","sources":["file:///home/runner/work/visor/visor/src/telegram/polling-runner.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,2BAA2B,EAAE,MAAM,mCAAmC,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAM1C,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;IACpC,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,qBAAa,qBAAsB,YAAW,MAAM;IAClD,QAAQ,CAAC,IAAI,cAAc;IAC3B,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,OAAO,CAAkB;IACjC,OAAO,CAAC,MAAM,CAA8B;IAC5C,OAAO,CAAC,GAAG,CAAc;IACzB,OAAO,CAAC,aAAa,CAAc;IACnC,OAAO,CAAC,cAAc,CAAU;IAChC,OAAO,CAAC,YAAY,CAAC,CAAe;IACpC,OAAO,CAAC,gBAAgB,CAAkC;IAC1D,OAAO,CAAC,WAAW,CAAqB;IACxC,OAAO,CAAC,SAAS,CAAC,CAAmD;IACrE,OAAO,CAAC,UAAU,CAAC,CAAS;gBAEhB,MAAM,EAAE,2BAA2B,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,qBAAqB;IAY9F,0DAA0D;IAC1D,SAAS,IAAI,cAAc;IAI3B,mDAAmD;IACnD,YAAY,CAAC,KAAK,EAAE,OAAO,8BAA8B,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI;IAKhG,0CAA0C;IAC1C,YAAY,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI;IAI9B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA6DtB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IAO9B,KAAK,CAAC,SAAS,SAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAenC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YAOb,aAAa;IA0H3B,6DAA6D;IAC7D,OAAO,CAAC,mBAAmB;IAc3B,mEAAmE;IACnE,OAAO,CAAC,WAAW;IAYnB,OAAO,CAAC,SAAS;IAKjB,OAAO,CAAC,WAAW;CAGpB"}

package/dist/types/config.d.ts

@@ -1454,6 +1454,20 @@ export interface SchedulerConfig {
     /** Slack message triggers for reactive workflow execution */
     on_message?: Record<string, SlackMessageTrigger>;
 }
+/**
+ * Graceful restart configuration
+ */
+export interface GracefulRestartConfig {
+    /** Max time in ms to wait for in-flight work to complete. 0 = unlimited (default). */
+    drain_timeout_ms?: number;
+    /** Max time in ms to wait for the new child process to become ready. Default: 15000. */
+    child_ready_timeout_ms?: number;
+    /** Send "restarting" messages to active conversations. Default: true. */
+    notify_users?: boolean;
+    /** Override the command used to spawn the new process.
+     *  If not set, auto-detects: npx re-invokes npx, direct execution re-spawns same binary. */
+    restart_command?: string;
+}
 /**
  * Main Visor configuration
  */
@@ -1545,6 +1559,25 @@ export interface VisorConfig {
      *  When true, all workflow executions (CLI, Slack, TUI, Scheduler) are recorded
      *  in a shared SQLite TaskStore visible via `visor tasks`. */
     task_tracking?: boolean;
+    /** Graceful restart configuration */
+    graceful_restart?: GracefulRestartConfig;
+    /** Automatically evaluate completed tasks using an LLM judge.
+     *  Requires task_tracking to be enabled. Runs asynchronously after task completion.
+     *  Set to `true` for defaults, or provide an object to configure. */
+    task_evaluate?: boolean | TaskEvaluateConfig;
+}
+/**
+ * Configuration for automatic task evaluation via LLM judge.
+ */
+export interface TaskEvaluateConfig {
+    /** Enable auto-evaluation (default: true when config object is present) */
+    enabled?: boolean;
+    /** LLM model to use for evaluation (e.g. "gemini-2.5-flash", "claude-sonnet-4-5") */
+    model?: string;
+    /** AI provider: google, openai, anthropic */
+    provider?: string;
+    /** Custom system prompt for the evaluator (overrides the default evaluation prompt) */
+    prompt?: string;
 }
 /**
  * Workspace isolation configuration