@probelabs/visor 0.1.185 → 0.1.186

package/dist/sdk/{config-TVU5RWR5.mjs → config-BCYAVJ5S.mjs}

@@ -2,7 +2,7 @@ import {
   ConfigManager,
   VALID_EVENT_TRIGGERS,
   init_config
-} from "./chunk-YBXNG75V.mjs";
+} from "./chunk-XX6WT332.mjs";
 import "./chunk-KWTCTEFT.mjs";
 import "./chunk-LW3INISN.mjs";
 import "./chunk-6E625R3C.mjs";
@@ -13,4 +13,4 @@ export {
   ConfigManager,
   VALID_EVENT_TRIGGERS
 };
-//# sourceMappingURL=config-TVU5RWR5.mjs.map
+//# sourceMappingURL=config-BCYAVJ5S.mjs.map

package/dist/sdk/{failure-condition-evaluator-WY5S2SU2.mjs → failure-condition-evaluator-ZBOSD574.mjs}

@@ -1,9 +1,9 @@
 import {
   FailureConditionEvaluator,
   init_failure_condition_evaluator
-} from "./chunk-WRRRKWYW.mjs";
-import "./chunk-J3BA347Q.mjs";
-import "./chunk-YXRO7X7C.mjs";
+} from "./chunk-5TXIAPRA.mjs";
+import "./chunk-A4WHMRK2.mjs";
+import "./chunk-NEZY2MXM.mjs";
 import "./chunk-FWWLD555.mjs";
 import "./chunk-25IC7KXZ.mjs";
 import "./chunk-LW3INISN.mjs";
@@ -15,4 +15,4 @@ init_failure_condition_evaluator();
 export {
   FailureConditionEvaluator
 };
-//# sourceMappingURL=failure-condition-evaluator-WY5S2SU2.mjs.map
+//# sourceMappingURL=failure-condition-evaluator-ZBOSD574.mjs.map

package/dist/sdk/{github-frontend-O22WILVL.mjs → github-frontend-4WHT5JEU.mjs}

@@ -5,12 +5,12 @@ import {
 import {
   failure_condition_evaluator_exports,
   init_failure_condition_evaluator
-} from "./chunk-WRRRKWYW.mjs";
-import "./chunk-J3BA347Q.mjs";
+} from "./chunk-5TXIAPRA.mjs";
+import "./chunk-A4WHMRK2.mjs";
 import {
   generateShortHumanId,
   init_human_id
-} from "./chunk-YXRO7X7C.mjs";
+} from "./chunk-NEZY2MXM.mjs";
 import "./chunk-FWWLD555.mjs";
 import "./chunk-25IC7KXZ.mjs";
 import "./chunk-LW3INISN.mjs";
@@ -1391,4 +1391,4 @@ init_github_frontend();
 export {
   GitHubFrontend
 };
-//# sourceMappingURL=github-frontend-O22WILVL.mjs.map
+//# sourceMappingURL=github-frontend-4WHT5JEU.mjs.map

package/dist/sdk/{host-HJXAU545.mjs → host-FKR7H26C.mjs}

@@ -24,7 +24,7 @@ var init_host = __esm({
             const { NdjsonSink } = await import("./ndjson-sink-FD2PSXGD.mjs");
             this.frontends.push(new NdjsonSink(spec.config));
           } else if (spec.name === "github") {
-            const { GitHubFrontend } = await import("./github-frontend-O22WILVL.mjs");
+            const { GitHubFrontend } = await import("./github-frontend-4WHT5JEU.mjs");
             this.frontends.push(new GitHubFrontend());
           } else if (spec.name === "slack") {
             const { SlackFrontend } = await import("./slack-frontend-K3TPGERM.mjs");
@@ -45,7 +45,7 @@ var init_host = __esm({
             const { TeamsFrontend } = await import("./teams-frontend-6RRW533K.mjs");
             this.frontends.push(new TeamsFrontend(spec.config));
           } else if (spec.name === "a2a") {
-            const { A2AFrontend } = await import("./a2a-frontend-JZA4Z24P.mjs");
+            const { A2AFrontend } = await import("./a2a-frontend-L3TQ7QQ6.mjs");
             this.frontends.push(new A2AFrontend(spec.config));
           } else {
             this.log.warn(`[FrontendsHost] Unknown frontend '${spec.name}', skipping`);
@@ -84,4 +84,4 @@ export {
   FrontendsHost,
   isActiveFrontend
 };
-//# sourceMappingURL=host-HJXAU545.mjs.map
+//# sourceMappingURL=host-FKR7H26C.mjs.map

package/dist/sdk/{routing-Q6QSYM5L.mjs → routing-IB2PXYFC.mjs}

@@ -4,10 +4,10 @@ import {
   evaluateTransitions,
   handleRouting,
   init_routing
-} from "./chunk-YIKN7TSP.mjs";
-import "./chunk-WRRRKWYW.mjs";
-import "./chunk-J3BA347Q.mjs";
-import "./chunk-YXRO7X7C.mjs";
+} from "./chunk-4UMDSYC7.mjs";
+import "./chunk-5TXIAPRA.mjs";
+import "./chunk-A4WHMRK2.mjs";
+import "./chunk-NEZY2MXM.mjs";
 import "./chunk-FWWLD555.mjs";
 import "./chunk-4HIWZA6M.mjs";
 import "./chunk-25IC7KXZ.mjs";
@@ -23,4 +23,4 @@ export {
   evaluateTransitions,
   handleRouting
 };
-//# sourceMappingURL=routing-Q6QSYM5L.mjs.map
+//# sourceMappingURL=routing-IB2PXYFC.mjs.map

package/dist/sdk/{schedule-tool-L7AHV4V7.mjs → schedule-tool-LB33KL2W.mjs}

@@ -4,7 +4,7 @@ import {
   handleScheduleAction,
   init_schedule_tool,
   isScheduleTool
-} from "./chunk-ROLS2CKF.mjs";
+} from "./chunk-NPOVLLKH.mjs";
 import "./chunk-YSOIR46P.mjs";
 import "./chunk-PDQTEBOJ.mjs";
 import "./chunk-WZQMTD7W.mjs";
@@ -14,12 +14,12 @@ import "./chunk-B7BVQM5K.mjs";
 import "./chunk-XXAEN5KU.mjs";
 import "./chunk-ZNKL6ESZ.mjs";
 import "./chunk-4ZLYHSN4.mjs";
-import "./chunk-YBXNG75V.mjs";
+import "./chunk-XX6WT332.mjs";
 import "./chunk-KWTCTEFT.mjs";
-import "./chunk-YIKN7TSP.mjs";
-import "./chunk-WRRRKWYW.mjs";
-import "./chunk-J3BA347Q.mjs";
-import "./chunk-YXRO7X7C.mjs";
+import "./chunk-4UMDSYC7.mjs";
+import "./chunk-5TXIAPRA.mjs";
+import "./chunk-A4WHMRK2.mjs";
+import "./chunk-NEZY2MXM.mjs";
 import "./chunk-FWWLD555.mjs";
 import "./chunk-4HIWZA6M.mjs";
 import "./chunk-25IC7KXZ.mjs";
@@ -35,4 +35,4 @@ export {
   handleScheduleAction,
   isScheduleTool
 };
-//# sourceMappingURL=schedule-tool-L7AHV4V7.mjs.map
+//# sourceMappingURL=schedule-tool-LB33KL2W.mjs.map

package/dist/sdk/{schedule-tool-handler-RDTTPA7Y.mjs → schedule-tool-handler-KYWZHKSS.mjs}

@@ -6,7 +6,7 @@ import {
   extractSlackContext,
   init_schedule_tool_handler,
   isScheduleToolCall
-} from "./chunk-ROLS2CKF.mjs";
+} from "./chunk-NPOVLLKH.mjs";
 import "./chunk-YSOIR46P.mjs";
 import "./chunk-PDQTEBOJ.mjs";
 import "./chunk-WZQMTD7W.mjs";
@@ -16,12 +16,12 @@ import "./chunk-B7BVQM5K.mjs";
 import "./chunk-XXAEN5KU.mjs";
 import "./chunk-ZNKL6ESZ.mjs";
 import "./chunk-4ZLYHSN4.mjs";
-import "./chunk-YBXNG75V.mjs";
+import "./chunk-XX6WT332.mjs";
 import "./chunk-KWTCTEFT.mjs";
-import "./chunk-YIKN7TSP.mjs";
-import "./chunk-WRRRKWYW.mjs";
-import "./chunk-J3BA347Q.mjs";
-import "./chunk-YXRO7X7C.mjs";
+import "./chunk-4UMDSYC7.mjs";
+import "./chunk-5TXIAPRA.mjs";
+import "./chunk-A4WHMRK2.mjs";
+import "./chunk-NEZY2MXM.mjs";
 import "./chunk-FWWLD555.mjs";
 import "./chunk-4HIWZA6M.mjs";
 import "./chunk-25IC7KXZ.mjs";
@@ -39,4 +39,4 @@ export {
   extractSlackContext,
   isScheduleToolCall
 };
-//# sourceMappingURL=schedule-tool-handler-RDTTPA7Y.mjs.map
+//# sourceMappingURL=schedule-tool-handler-KYWZHKSS.mjs.map

package/dist/sdk/sdk.js

@@ -1529,7 +1529,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@probelabs/visor",
-      version: "0.1.185",
+      version: "0.1.186",
       main: "dist/index.js",
       bin: {
         visor: "./dist/index.js"
@@ -15349,26 +15349,9 @@ var init_config_loader = __esm({
         }
         if (defaultConfigPath) {
           console.error(`\u{1F4E6} Loading bundled default configuration from ${defaultConfigPath}`);
-          const content = fs11.readFileSync(defaultConfigPath, "utf8");
-          let config = yaml3.load(content);
-          if (!config || typeof config !== "object") {
-            throw new Error("Invalid default configuration");
-          }
-          if (config.include && !config.extends) {
-            const inc = config.include;
-            config.extends = Array.isArray(inc) ? inc : [inc];
-            delete config.include;
-          }
+          const defaultConfigDir = path13.dirname(defaultConfigPath);
+          let config = await this.fetchBundledConfigFile(defaultConfigPath, defaultConfigDir);
           config = this.normalizeStepsAndChecks(config);
-          if (config.extends) {
-            const previousBaseDir = this.options.baseDir;
-            try {
-              this.options.baseDir = path13.dirname(defaultConfigPath);
-              return await this.processExtends(config);
-            } finally {
-              this.options.baseDir = previousBaseDir;
-            }
-          }
           return config;
         }
         console.warn("\u26A0\uFE0F  Bundled default configuration not found, using minimal defaults");
@@ -15384,6 +15367,70 @@ var init_config_loader = __esm({
           }
         };
       }
+      /**
+       * Load a bundled config and its includes without using project-local path resolution.
+       *
+       * `extends: default` is a built-in source. Its sibling includes are part of the Visor
+       * package/action bundle, so they must resolve inside that bundle rather than inside the
+       * caller's repository root.
+       */
+      async fetchBundledConfigFile(filePath, bundledRoot, currentDepth = 0, seen = /* @__PURE__ */ new Set()) {
+        if (currentDepth >= (this.options.maxDepth || 10)) {
+          throw new Error(
+            `Maximum bundled default include depth (${this.options.maxDepth}) exceeded. Check for circular dependencies.`
+          );
+        }
+        const resolvedPath = path13.resolve(filePath);
+        this.validateBundledPath(resolvedPath, bundledRoot);
+        if (seen.has(resolvedPath)) {
+          throw new Error(`Circular dependency detected in bundled defaults: ${resolvedPath}`);
+        }
+        seen.add(resolvedPath);
+        try {
+          const content = fs11.readFileSync(resolvedPath, "utf8");
+          const config = yaml3.load(content);
+          if (!config || typeof config !== "object") {
+            throw new Error(`Invalid default configuration: ${resolvedPath}`);
+          }
+          const extendsValue = config.extends || config.include;
+          delete config.extends;
+          delete config.include;
+          this.annotateToolsBaseDir(config, path13.dirname(resolvedPath));
+          if (!extendsValue) {
+            return config;
+          }
+          const { ConfigMerger: ConfigMerger2 } = await Promise.resolve().then(() => (init_config_merger(), config_merger_exports));
+          const merger = new ConfigMerger2();
+          const sources = Array.isArray(extendsValue) ? extendsValue : [extendsValue];
+          let mergedParents = {};
+          for (const source of sources) {
+            if (typeof source !== "string" || this.getSourceType(source) !== "local" /* LOCAL */) {
+              throw new Error(
+                `Bundled default configuration can only include local bundled files: ${String(source)}`
+              );
+            }
+            const parentPath = path13.isAbsolute(source) ? source : path13.resolve(path13.dirname(resolvedPath), source);
+            const parentConfig = await this.fetchBundledConfigFile(
+              parentPath,
+              bundledRoot,
+              currentDepth + 1,
+              seen
+            );
+            mergedParents = merger.merge(mergedParents, parentConfig);
+          }
+          return merger.merge(mergedParents, config);
+        } catch (error) {
+          if (error && (error.code === "ENOENT" || error.code === "ENOTDIR")) {
+            throw new Error(`Bundled default configuration file not found: ${resolvedPath}`);
+          }
+          if (error instanceof Error) {
+            throw error;
+          }
+          throw error;
+        } finally {
+          seen.delete(resolvedPath);
+        }
+      }
       /**
        * Process extends directive in a configuration
        */
@@ -15470,6 +15517,26 @@ var init_config_loader = __esm({
           }
         }
       }
+      /**
+       * Validate that bundled default includes stay inside the Visor package/action bundle.
+       */
+      validateBundledPath(resolvedPath, bundledRoot) {
+        const canonicalize = (p) => {
+          const resolved = path13.resolve(p);
+          try {
+            return path13.normalize(fs11.realpathSync.native(resolved));
+          } catch {
+            return path13.normalize(resolved);
+          }
+        };
+        const normalizedPath = canonicalize(resolvedPath);
+        const normalizedRoot = canonicalize(bundledRoot);
+        if (normalizedPath !== normalizedRoot && !normalizedPath.startsWith(`${normalizedRoot}${path13.sep}`)) {
+          throw new Error(
+            `Security error: Bundled default include resolves outside bundled defaults directory: ${bundledRoot}`
+          );
+        }
+      }
       /**
        * Find package root directory
        */
@@ -31623,6 +31690,9 @@ ${preview}`);
                 auth: entry.config.auth,
                 headers: entry.config.headers,
                 timeout: entry.config.timeout || 3e4,
+                // Preserve transform_js and rate_limit from the original tool config
+                ...entry.config.transform_js ? { transform_js: entry.config.transform_js } : {},
+                ...entry.config.rate_limit ? { rate_limit: entry.config.rate_limit } : {},
                 inputSchema: {
                   type: "object",
                   properties: {