@evalops/maestro 0.10.18 → 0.10.20

package/dist/bootstrap/agent-creation-setup.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-creation-setup.js","sourceRoot":"","sources":["../../src/bootstrap/agent-creation-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EACN,2BAA2B,EAC3B,wBAAwB,EACxB,gCAAgC,EAChC,wBAAwB,EACxB,gBAAgB,EAChB,gBAAgB,EAChB,uBAAuB,EACvB,iBAAiB,GACjB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAI7D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAIxD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,MAAM,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;AAE9C,gFAAgF;AAChF,2EAA2E;AAC3E,gEAAgE;AAEhE,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE;IAC5B,IAAI,OAAO,GAEA,IAAI,CAAC;IAChB,OAAO,GAAG,EAAE;QACX,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,GAAG,MAAM,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,OAAO,CAAC;IAChB,CAAC,CAAC;AACH,CAAC,CAAC,EAAE,CAAC;AAEL,MAAM,gBAAgB,GAAG,CAAC,GAAG,EAAE;IAC9B,IAAI,OAAO,GACV,IAAI,CAAC;IACN,OAAO,GAAG,EAAE;QACX,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,GAAG,MAAM,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,OAAO,CAAC;IAChB,CAAC,CAAC;AACH,CAAC,CAAC,EAAE,CAAC;AAEL,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE;IACzB,IAAI,OAAO,GAAqD,IAAI,CAAC;IACrE,OAAO,GAAG,EAAE;QACX,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,OAAO,CAAC;IAChB,CAAC,CAAC;AACH,CAAC,CAAC,EAAE,CAAC;AAQL;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAqBnC;IACA,MAAM,EACL,YAAY,EACZ,cAAc,EACd,uBAAuB,EACvB,KAAK,EACL,gBAAgB,EAChB,QAAQ,EACR,OAAO,EACP,WAAW,EACX,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,GAAG,GACH,GAAG,MAAM,CAAC;IAEX,6DAA6D;IAC7D,MAAM,mBAAmB,GAAG,KAAK,EAAE,SAAiB,EAAE,EAAE;QACvD,IAAI,CAAC;YACJ,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,WAAW,EAAE,CAAC;YACrD,IAAI,CAAC,oBAAoB,EAAE;gBAAE,OAAO,IAAI,CAAC;YACzC,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,gBAAgB,EAAE,CAAC;YAC1D,OAAO,MAAM,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE;gBAChD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC7D,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACb,CAAC;IACF,CAAC,CAAC;IAEF,4DAA4D;IAC5D,MAAM,WAAW,GAAG,KAAK,EAAE,KAM1B,EAAE,EAAE;QACJ,IAAI,CAAC;YACJ,MAAM,EAAE,yBAAyB,EAAE,GAAG,MAAM,cAAc,EAAE,CAAC;YAC7D,MAAM,yBAAyB,CAC9B,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,KAAK,CACX,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE;gBAC3C,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC7D,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACxB,CAAC,CAAC;QACJ,CAAC;IACF,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC;QACvB,YAAY,EAAE;YACb,YAAY;YACZ,cAAc;YACd,uBAAuB;YACvB,KAAK;YACL,aAAa,EAAE,KAAK;YACpB,gBAAgB;YAChB,KAAK,EAAE,QAAQ;YACf,OAAO;YACP,WAAW,EAAE,WAAW,IAAI,IAAI;YAChC,cAAc,EAAE,OAAO,CAAC,OAAO,CAAC;YAChC,IAAI,EAAE,cAAc;SACpB;QACD,SAAS,EAAE,IAAI,iBAAiB,CAAC;YAChC,cAAc,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,iBAAiB,CAAC,YAAY,EAAE,KAAK,CAAC;YACxE,eAAe;YACf,gBAAgB;YAChB,eAAe;YACf,iBAAiB;YACjB,mBAAmB;YACnB,WAAW;SACX,CAAC;QACF,cAAc,EAAE;YACf,IAAI,iBAAiB,EAAE;YACvB,IAAI,2BAA2B,EAAE;YACjC,IAAI,wBAAwB,EAAE;YAC9B,IAAI,wBAAwB,CAAC,GAAG,CAAC;YACjC,IAAI,gBAAgB,EAAE;YACtB,IAAI,gCAAgC,EAAE;YACtC,IAAI,uBAAuB,CAAC,GAAG,CAAC;YAChC,IAAI,gBAAgB,EAAE;SACtB;KACD,CAAC,CAAC;IAEH,4DAA4D;IAC5D,eAAe,CAAC,UAAU,CAAC,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;IAE/D,+CAA+C;IAC/C,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACzD,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CACX,KAAK,CAAC,MAAM,CACX,0FAA0F,CAC1F,CACD,CAAC;QACH,CAAC;IACF,CAAC;SAAM,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC/D,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CACX,KAAK,CAAC,MAAM,CACX,yCAAyC,MAAM,CAAC,QAAQ,0BAA0B,CAClF,CACD,CAAC;QACH,CAAC;IACF,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,CAAC;AAClB,CAAC","sourcesContent":["/**\n * Agent Creation Setup - Agent instance construction and composer activation.\n *\n * Extracts the Agent factory from main.ts Phase 11:\n * lazy module loaders, session token counter, audit logger,\n * Agent construction, composer initialization, and activation.\n *\n * @module bootstrap/agent-creation-setup\n */\n\nimport chalk from \"chalk\";\nimport type { ActionApprovalService } from \"../agent/action-approval.js\";\nimport {\n\tBackgroundTaskContextSource,\n\tCurrentDateContextSource,\n\tFrameworkPreferenceContextSource,\n\tGitSnapshotContextSource,\n\tIDEContextSource,\n\tLspContextSource,\n\tTeamMemoryContextSource,\n\tTodoContextSource,\n} from \"../agent/context-providers.js\";\nimport { Agent, ProviderTransport } from \"../agent/index.js\";\nimport type { ToolRetryConfig, ToolRetryService } from \"../agent/tool-retry.js\";\nimport type { ClientToolExecutionService } from \"../agent/transport.js\";\nimport type { AgentTool, Api, Model } from \"../agent/types.js\";\nimport { composerManager } from \"../composers/index.js\";\nimport type { PromptMetadata } from \"../prompts/types.js\";\nimport type { AuthCredential } from \"../providers/auth.js\";\nimport type { Sandbox } from \"../sandbox/types.js\";\nimport { createLogger } from \"../utils/logger.js\";\n\nconst logger = createLogger(\"agent-creation\");\n\n// ─── Lazy module loaders ─────────────────────────────────────────────────────\n// These IIFE closures ensure enterprise/billing/db modules are only loaded\n// when actually needed (e.g., enterprise features are enabled).\n\nconst getAuditModule = (() => {\n\tlet promise: Promise<\n\t\ttypeof import(\"../enterprise/audit-integration.js\")\n\t> | null = null;\n\treturn () => {\n\t\tif (!promise) {\n\t\t\tpromise = import(\"../enterprise/audit-integration.js\");\n\t\t}\n\t\treturn promise;\n\t};\n})();\n\nconst getBillingModule = (() => {\n\tlet promise: Promise<typeof import(\"../billing/token-tracker.js\")> | null =\n\t\tnull;\n\treturn () => {\n\t\tif (!promise) {\n\t\t\tpromise = import(\"../billing/token-tracker.js\");\n\t\t}\n\t\treturn promise;\n\t};\n})();\n\nconst getDbModule = (() => {\n\tlet promise: Promise<typeof import(\"../db/client.js\")> | null = null;\n\treturn () => {\n\t\tif (!promise) {\n\t\t\tpromise = import(\"../db/client.js\");\n\t\t}\n\t\treturn promise;\n\t};\n})();\n\n// ─── Public API ──────────────────────────────────────────────────────────────\n\nexport interface AgentCreationResult {\n\tagent: Agent;\n}\n\n/**\n * Create the main Agent instance with enterprise integrations,\n * initialize the composer manager, and optionally activate a composer.\n */\nexport function createAgentInstance(params: {\n\tsystemPrompt: string;\n\tpromptMetadata?: PromptMetadata;\n\tsystemPromptSourcePaths?: string[];\n\tmodel: Model<Api>;\n\treasoningSummary: \"auto\" | \"detailed\" | \"concise\" | null | undefined;\n\tallTools: AgentTool[];\n\tsandbox: Sandbox | undefined;\n\tsandboxMode: string | null | undefined;\n\tapprovalService: ActionApprovalService;\n\ttoolRetryService: ToolRetryService;\n\ttoolRetryConfig?: ToolRetryConfig;\n\tclientToolService?: ClientToolExecutionService;\n\trequireCredential: (\n\t\tproviderName: string,\n\t\tfatal: boolean,\n\t) => Promise<AuthCredential>;\n\tenterpriseUser?: { id: string; orgId: string };\n\treadonly?: boolean;\n\tcomposer?: string;\n\tcwd: string;\n}): AgentCreationResult {\n\tconst {\n\t\tsystemPrompt,\n\t\tpromptMetadata,\n\t\tsystemPromptSourcePaths,\n\t\tmodel,\n\t\treasoningSummary,\n\t\tallTools,\n\t\tsandbox,\n\t\tsandboxMode,\n\t\tapprovalService,\n\t\ttoolRetryService,\n\t\ttoolRetryConfig,\n\t\tclientToolService,\n\t\trequireCredential,\n\t\tenterpriseUser,\n\t\tcwd,\n\t} = params;\n\n\t// Build session token counter for billing/policy enforcement\n\tconst sessionTokenCounter = async (sessionId: string) => {\n\t\ttry {\n\t\t\tconst { isDatabaseConfigured } = await getDbModule();\n\t\t\tif (!isDatabaseConfigured()) return null;\n\t\t\tconst { getSessionTokenCount } = await getBillingModule();\n\t\t\treturn await getSessionTokenCount(sessionId);\n\t\t} catch (error) {\n\t\t\tlogger.warn(\"Failed to get session token count\", {\n\t\t\t\terror: error instanceof Error ? error.message : String(error),\n\t\t\t});\n\t\t\treturn null;\n\t\t}\n\t};\n\n\t// Build audit logger for enterprise tool execution tracking\n\tconst auditLogger = async (entry: {\n\t\ttoolName: string;\n\t\targs: Record<string, unknown>;\n\t\tstatus: \"success\" | \"failure\" | \"denied\";\n\t\tdurationMs: number;\n\t\terror?: string;\n\t}) => {\n\t\ttry {\n\t\t\tconst { logSensitiveToolExecution } = await getAuditModule();\n\t\t\tawait logSensitiveToolExecution(\n\t\t\t\tentry.toolName,\n\t\t\t\tentry.args,\n\t\t\t\tentry.status,\n\t\t\t\tentry.durationMs,\n\t\t\t\tentry.error,\n\t\t\t);\n\t\t} catch (error) {\n\t\t\tlogger.warn(\"Failed to log tool execution\", {\n\t\t\t\terror: error instanceof Error ? error.message : String(error),\n\t\t\t\ttoolName: entry.toolName,\n\t\t\t});\n\t\t}\n\t};\n\n\tconst agent = new Agent({\n\t\tinitialState: {\n\t\t\tsystemPrompt,\n\t\t\tpromptMetadata,\n\t\t\tsystemPromptSourcePaths,\n\t\t\tmodel,\n\t\t\tthinkingLevel: \"off\",\n\t\t\treasoningSummary,\n\t\t\ttools: allTools,\n\t\t\tsandbox,\n\t\t\tsandboxMode: sandboxMode ?? null,\n\t\t\tsandboxEnabled: Boolean(sandbox),\n\t\t\tuser: enterpriseUser,\n\t\t},\n\t\ttransport: new ProviderTransport({\n\t\t\tgetAuthContext: (providerName) => requireCredential(providerName, false),\n\t\t\tapprovalService,\n\t\t\ttoolRetryService,\n\t\t\ttoolRetryConfig,\n\t\t\tclientToolService,\n\t\t\tsessionTokenCounter,\n\t\t\tauditLogger,\n\t\t}),\n\t\tcontextSources: [\n\t\t\tnew TodoContextSource(),\n\t\t\tnew BackgroundTaskContextSource(),\n\t\t\tnew CurrentDateContextSource(),\n\t\t\tnew GitSnapshotContextSource(cwd),\n\t\t\tnew LspContextSource(),\n\t\t\tnew FrameworkPreferenceContextSource(),\n\t\t\tnew TeamMemoryContextSource(cwd),\n\t\t\tnew IDEContextSource(),\n\t\t],\n\t});\n\n\t// Initialize composer manager for multi-agent orchestration\n\tcomposerManager.initialize(agent, systemPrompt, allTools, cwd);\n\n\t// Activate composer if specified via CLI flags\n\tif (params.readonly) {\n\t\tconst success = composerManager.activate(\"explore\", cwd);\n\t\tif (!success) {\n\t\t\tconsole.warn(\n\t\t\t\tchalk.yellow(\n\t\t\t\t\t'Warning: Could not activate read-only mode. The \"explore\" composer may not be available.',\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\t} else if (params.composer) {\n\t\tconst success = composerManager.activate(params.composer, cwd);\n\t\tif (!success) {\n\t\t\tconsole.warn(\n\t\t\t\tchalk.yellow(\n\t\t\t\t\t`Warning: Could not activate composer \"${params.composer}\". Check that it exists.`,\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\t}\n\n\treturn { agent };\n}\n"]}
+{"version":3,"file":"agent-creation-setup.js","sourceRoot":"","sources":["../../src/bootstrap/agent-creation-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EACN,2BAA2B,EAC3B,wBAAwB,EACxB,gCAAgC,EAChC,wBAAwB,EACxB,gBAAgB,EAChB,gBAAgB,EAChB,uBAAuB,EACvB,iBAAiB,GACjB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAI7D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAMxD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,MAAM,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;AAE9C,gFAAgF;AAChF,2EAA2E;AAC3E,gEAAgE;AAEhE,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE;IAC5B,IAAI,OAAO,GAEA,IAAI,CAAC;IAChB,OAAO,GAAG,EAAE;QACX,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,GAAG,MAAM,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,OAAO,CAAC;IAChB,CAAC,CAAC;AACH,CAAC,CAAC,EAAE,CAAC;AAEL,MAAM,gBAAgB,GAAG,CAAC,GAAG,EAAE;IAC9B,IAAI,OAAO,GACV,IAAI,CAAC;IACN,OAAO,GAAG,EAAE;QACX,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,GAAG,MAAM,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,OAAO,CAAC;IAChB,CAAC,CAAC;AACH,CAAC,CAAC,EAAE,CAAC;AAEL,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE;IACzB,IAAI,OAAO,GAAqD,IAAI,CAAC;IACrE,OAAO,GAAG,EAAE;QACX,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,OAAO,CAAC;IAChB,CAAC,CAAC;AACH,CAAC,CAAC,EAAE,CAAC;AAQL;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAuBnC;IACA,MAAM,EACL,YAAY,EACZ,cAAc,EACd,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,KAAK,EACL,gBAAgB,EAChB,QAAQ,EACR,OAAO,EACP,WAAW,EACX,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,GAAG,GACH,GAAG,MAAM,CAAC;IAEX,6DAA6D;IAC7D,MAAM,mBAAmB,GAAG,KAAK,EAAE,SAAiB,EAAE,EAAE;QACvD,IAAI,CAAC;YACJ,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,WAAW,EAAE,CAAC;YACrD,IAAI,CAAC,oBAAoB,EAAE;gBAAE,OAAO,IAAI,CAAC;YACzC,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,gBAAgB,EAAE,CAAC;YAC1D,OAAO,MAAM,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE;gBAChD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC7D,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACb,CAAC;IACF,CAAC,CAAC;IAEF,4DAA4D;IAC5D,MAAM,WAAW,GAAG,KAAK,EAAE,KAM1B,EAAE,EAAE;QACJ,IAAI,CAAC;YACJ,MAAM,EAAE,yBAAyB,EAAE,GAAG,MAAM,cAAc,EAAE,CAAC;YAC7D,MAAM,yBAAyB,CAC9B,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,KAAK,CACX,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE;gBAC3C,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC7D,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACxB,CAAC,CAAC;QACJ,CAAC;IACF,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC;QACvB,YAAY,EAAE;YACb,YAAY;YACZ,cAAc;YACd,uBAAuB;YACvB,qBAAqB;YACrB,sBAAsB;YACtB,KAAK;YACL,aAAa,EAAE,KAAK;YACpB,gBAAgB;YAChB,KAAK,EAAE,QAAQ;YACf,OAAO;YACP,WAAW,EAAE,WAAW,IAAI,IAAI;YAChC,cAAc,EAAE,OAAO,CAAC,OAAO,CAAC;YAChC,IAAI,EAAE,cAAc;SACpB;QACD,SAAS,EAAE,IAAI,iBAAiB,CAAC;YAChC,cAAc,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,iBAAiB,CAAC,YAAY,EAAE,KAAK,CAAC;YACxE,eAAe;YACf,gBAAgB;YAChB,eAAe;YACf,iBAAiB;YACjB,mBAAmB;YACnB,WAAW;SACX,CAAC;QACF,cAAc,EAAE;YACf,IAAI,iBAAiB,EAAE;YACvB,IAAI,2BAA2B,EAAE;YACjC,IAAI,wBAAwB,EAAE;YAC9B,IAAI,wBAAwB,CAAC,GAAG,CAAC;YACjC,IAAI,gBAAgB,EAAE;YACtB,IAAI,gCAAgC,EAAE;YACtC,IAAI,uBAAuB,CAAC,GAAG,CAAC;YAChC,IAAI,gBAAgB,EAAE;SACtB;KACD,CAAC,CAAC;IAEH,4DAA4D;IAC5D,eAAe,CAAC,UAAU,CAAC,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;IAE/D,+CAA+C;IAC/C,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACzD,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CACX,KAAK,CAAC,MAAM,CACX,0FAA0F,CAC1F,CACD,CAAC;QACH,CAAC;IACF,CAAC;SAAM,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC/D,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CACX,KAAK,CAAC,MAAM,CACX,yCAAyC,MAAM,CAAC,QAAQ,0BAA0B,CAClF,CACD,CAAC;QACH,CAAC;IACF,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,CAAC;AAClB,CAAC","sourcesContent":["/**\n * Agent Creation Setup - Agent instance construction and composer activation.\n *\n * Extracts the Agent factory from main.ts Phase 11:\n * lazy module loaders, session token counter, audit logger,\n * Agent construction, composer initialization, and activation.\n *\n * @module bootstrap/agent-creation-setup\n */\n\nimport chalk from \"chalk\";\nimport type { ActionApprovalService } from \"../agent/action-approval.js\";\nimport {\n\tBackgroundTaskContextSource,\n\tCurrentDateContextSource,\n\tFrameworkPreferenceContextSource,\n\tGitSnapshotContextSource,\n\tIDEContextSource,\n\tLspContextSource,\n\tTeamMemoryContextSource,\n\tTodoContextSource,\n} from \"../agent/context-providers.js\";\nimport { Agent, ProviderTransport } from \"../agent/index.js\";\nimport type { ToolRetryConfig, ToolRetryService } from \"../agent/tool-retry.js\";\nimport type { ClientToolExecutionService } from \"../agent/transport.js\";\nimport type { AgentTool, Api, Model } from \"../agent/types.js\";\nimport { composerManager } from \"../composers/index.js\";\nimport type { PromptProjectDocManifest } from \"../config/index.js\";\nimport type { UnifiedContextManifest } from \"../context/manifest-types.js\";\nimport type { PromptMetadata } from \"../prompts/types.js\";\nimport type { AuthCredential } from \"../providers/auth.js\";\nimport type { Sandbox } from \"../sandbox/types.js\";\nimport { createLogger } from \"../utils/logger.js\";\n\nconst logger = createLogger(\"agent-creation\");\n\n// ─── Lazy module loaders ─────────────────────────────────────────────────────\n// These IIFE closures ensure enterprise/billing/db modules are only loaded\n// when actually needed (e.g., enterprise features are enabled).\n\nconst getAuditModule = (() => {\n\tlet promise: Promise<\n\t\ttypeof import(\"../enterprise/audit-integration.js\")\n\t> | null = null;\n\treturn () => {\n\t\tif (!promise) {\n\t\t\tpromise = import(\"../enterprise/audit-integration.js\");\n\t\t}\n\t\treturn promise;\n\t};\n})();\n\nconst getBillingModule = (() => {\n\tlet promise: Promise<typeof import(\"../billing/token-tracker.js\")> | null =\n\t\tnull;\n\treturn () => {\n\t\tif (!promise) {\n\t\t\tpromise = import(\"../billing/token-tracker.js\");\n\t\t}\n\t\treturn promise;\n\t};\n})();\n\nconst getDbModule = (() => {\n\tlet promise: Promise<typeof import(\"../db/client.js\")> | null = null;\n\treturn () => {\n\t\tif (!promise) {\n\t\t\tpromise = import(\"../db/client.js\");\n\t\t}\n\t\treturn promise;\n\t};\n})();\n\n// ─── Public API ──────────────────────────────────────────────────────────────\n\nexport interface AgentCreationResult {\n\tagent: Agent;\n}\n\n/**\n * Create the main Agent instance with enterprise integrations,\n * initialize the composer manager, and optionally activate a composer.\n */\nexport function createAgentInstance(params: {\n\tsystemPrompt: string;\n\tpromptMetadata?: PromptMetadata;\n\tsystemPromptSourcePaths?: string[];\n\tpromptContextManifest?: PromptProjectDocManifest;\n\tunifiedContextManifest?: UnifiedContextManifest;\n\tmodel: Model<Api>;\n\treasoningSummary: \"auto\" | \"detailed\" | \"concise\" | null | undefined;\n\tallTools: AgentTool[];\n\tsandbox: Sandbox | undefined;\n\tsandboxMode: string | null | undefined;\n\tapprovalService: ActionApprovalService;\n\ttoolRetryService: ToolRetryService;\n\ttoolRetryConfig?: ToolRetryConfig;\n\tclientToolService?: ClientToolExecutionService;\n\trequireCredential: (\n\t\tproviderName: string,\n\t\tfatal: boolean,\n\t) => Promise<AuthCredential>;\n\tenterpriseUser?: { id: string; orgId: string };\n\treadonly?: boolean;\n\tcomposer?: string;\n\tcwd: string;\n}): AgentCreationResult {\n\tconst {\n\t\tsystemPrompt,\n\t\tpromptMetadata,\n\t\tsystemPromptSourcePaths,\n\t\tpromptContextManifest,\n\t\tunifiedContextManifest,\n\t\tmodel,\n\t\treasoningSummary,\n\t\tallTools,\n\t\tsandbox,\n\t\tsandboxMode,\n\t\tapprovalService,\n\t\ttoolRetryService,\n\t\ttoolRetryConfig,\n\t\tclientToolService,\n\t\trequireCredential,\n\t\tenterpriseUser,\n\t\tcwd,\n\t} = params;\n\n\t// Build session token counter for billing/policy enforcement\n\tconst sessionTokenCounter = async (sessionId: string) => {\n\t\ttry {\n\t\t\tconst { isDatabaseConfigured } = await getDbModule();\n\t\t\tif (!isDatabaseConfigured()) return null;\n\t\t\tconst { getSessionTokenCount } = await getBillingModule();\n\t\t\treturn await getSessionTokenCount(sessionId);\n\t\t} catch (error) {\n\t\t\tlogger.warn(\"Failed to get session token count\", {\n\t\t\t\terror: error instanceof Error ? error.message : String(error),\n\t\t\t});\n\t\t\treturn null;\n\t\t}\n\t};\n\n\t// Build audit logger for enterprise tool execution tracking\n\tconst auditLogger = async (entry: {\n\t\ttoolName: string;\n\t\targs: Record<string, unknown>;\n\t\tstatus: \"success\" | \"failure\" | \"denied\";\n\t\tdurationMs: number;\n\t\terror?: string;\n\t}) => {\n\t\ttry {\n\t\t\tconst { logSensitiveToolExecution } = await getAuditModule();\n\t\t\tawait logSensitiveToolExecution(\n\t\t\t\tentry.toolName,\n\t\t\t\tentry.args,\n\t\t\t\tentry.status,\n\t\t\t\tentry.durationMs,\n\t\t\t\tentry.error,\n\t\t\t);\n\t\t} catch (error) {\n\t\t\tlogger.warn(\"Failed to log tool execution\", {\n\t\t\t\terror: error instanceof Error ? error.message : String(error),\n\t\t\t\ttoolName: entry.toolName,\n\t\t\t});\n\t\t}\n\t};\n\n\tconst agent = new Agent({\n\t\tinitialState: {\n\t\t\tsystemPrompt,\n\t\t\tpromptMetadata,\n\t\t\tsystemPromptSourcePaths,\n\t\t\tpromptContextManifest,\n\t\t\tunifiedContextManifest,\n\t\t\tmodel,\n\t\t\tthinkingLevel: \"off\",\n\t\t\treasoningSummary,\n\t\t\ttools: allTools,\n\t\t\tsandbox,\n\t\t\tsandboxMode: sandboxMode ?? null,\n\t\t\tsandboxEnabled: Boolean(sandbox),\n\t\t\tuser: enterpriseUser,\n\t\t},\n\t\ttransport: new ProviderTransport({\n\t\t\tgetAuthContext: (providerName) => requireCredential(providerName, false),\n\t\t\tapprovalService,\n\t\t\ttoolRetryService,\n\t\t\ttoolRetryConfig,\n\t\t\tclientToolService,\n\t\t\tsessionTokenCounter,\n\t\t\tauditLogger,\n\t\t}),\n\t\tcontextSources: [\n\t\t\tnew TodoContextSource(),\n\t\t\tnew BackgroundTaskContextSource(),\n\t\t\tnew CurrentDateContextSource(),\n\t\t\tnew GitSnapshotContextSource(cwd),\n\t\t\tnew LspContextSource(),\n\t\t\tnew FrameworkPreferenceContextSource(),\n\t\t\tnew TeamMemoryContextSource(cwd),\n\t\t\tnew IDEContextSource(),\n\t\t],\n\t});\n\n\t// Initialize composer manager for multi-agent orchestration\n\tcomposerManager.initialize(agent, systemPrompt, allTools, cwd);\n\n\t// Activate composer if specified via CLI flags\n\tif (params.readonly) {\n\t\tconst success = composerManager.activate(\"explore\", cwd);\n\t\tif (!success) {\n\t\t\tconsole.warn(\n\t\t\t\tchalk.yellow(\n\t\t\t\t\t'Warning: Could not activate read-only mode. The \"explore\" composer may not be available.',\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\t} else if (params.composer) {\n\t\tconst success = composerManager.activate(params.composer, cwd);\n\t\tif (!success) {\n\t\t\tconsole.warn(\n\t\t\t\tchalk.yellow(\n\t\t\t\t\t`Warning: Could not activate composer \"${params.composer}\". Check that it exists.`,\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\t}\n\n\treturn { agent };\n}\n"]}

package/dist/bootstrap/auth-setup.js

@@ -29,7 +29,7 @@ export function validateCodexFlags(args, command) {
             return false;
         });
         if (codexFlagsUsed) {
-            throw new Error("Legacy Codex/ChatGPT auth flags are no longer supported. Use the openai-codex provider with `maestro codex login` or CODEX_API_KEY instead.");
+            throw new Error("Legacy Codex/ChatGPT auth flags are no longer supported. Use the openai-codex provider with `maestro codex login` instead.");
         }
     }
 }

package/dist/bootstrap/auth-setup.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-setup.js","sourceRoot":"","sources":["../../src/bootstrap/auth-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAGN,kBAAkB,GAClB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACN,8BAA8B,EAC9B,wBAAwB,EACxB,6BAA6B,GAC7B,MAAM,iCAAiC,CAAC;AAkBzC;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAc,EAAE,OAAgB;IAClE,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;YAC/C,IAAI,GAAG,KAAK,iBAAiB,IAAI,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBACrE,OAAO,IAAI,CAAC;YACb,CAAC;YACD,IAAI,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YACnE,IAAI,GAAG,CAAC,UAAU,CAAC,gBAAgB,CAAC;gBAAE,OAAO,IAAI,CAAC;YAClD,OAAO,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;QACH,IAAI,cAAc,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACd,6IAA6I,CAC7I,CAAC;QACH,CAAC;IACF,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,MAG/B;IACA,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,GAAG,MAAM,CAAC;IAE5C,MAAM,YAAY,GAAG,kBAAkB,CAAC;QACvC,IAAI,EAAE,QAAQ;QACd,cAAc;KACd,CAAC,CAAC;IAEH,MAAM,qBAAqB,GAAG,CAAC,YAAoB,EAAc,EAAE;QAClE,MAAM,KAAK,GAAe,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,OAAgB,EAAE,EAAE;YAChD,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC;QAClD,CAAC,CAAC;QACF,IAAI,CACH,6CAA6C,YAAY,GAAG,EAC5D,KAAK,CAAC,GAAG,CAAC,6CAA6C,YAAY,GAAG,CAAC,CACvE,CAAC;QACF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,SAAS,GACd,YAAY,KAAK,WAAW;gBAC3B,CAAC,CAAC,uFAAuF;gBACzF,CAAC,CAAC,YAAY,KAAK,QAAQ;oBAC1B,CAAC,CAAC,2EAA2E;oBAC7E,CAAC,CAAC,6BAA6B,CAAC,YAAY,CAAC;wBAC3C,CAAC,8BAA8B,EAAE;wBAClC,CAAC,CAAC,yEAAyE;wBAC3E,CAAC,CAAC,wBAAwB,CAAC,YAAY,CAAC;4BACvC,CAAC,CAAC,kFAAkF;4BACpF,CAAC,CAAC,+CAA+C,CAAC;YACvD,IAAI,CACH,GAAG,SAAS,mDAAmD,EAC/D,KAAK,CAAC,GAAG,CACR,GAAG,SAAS,mDAAmD,CAC/D,CACD,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;QACpD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,IAAI,CACH,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,6BAA6B,YAAY,GAAG,EACvE,KAAK,CAAC,GAAG,CACR,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,6BAA6B,YAAY,GAAG,CACvE,CACD,CAAC;QACH,CAAC;aAAM,CAAC;YACP,MAAM,UAAU,GAAG,yBAAyB,CAAC,YAAY,CAAC,CAAC;YAC3D,IAAI,UAAU,EAAE,SAAS,EAAE,CAAC;gBAC3B,IAAI,CACH,OAAO,UAAU,CAAC,SAAS,kDAAkD,YAAY,GAAG,EAC5F,KAAK,CAAC,GAAG,CACR,OAAO,UAAU,CAAC,SAAS,kDAAkD,YAAY,GAAG,CAC5F,CACD,CAAC;YACH,CAAC;QACF,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC,CAAC;IAEF,MAAM,iBAAiB,GAAG,KAAK,EAC9B,YAAoB,EACpB,KAAc,EACY,EAAE;QAC5B,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,YAAY,CAAC,CAAC;QACpD,IAAI,UAAU,EAAE,CAAC;YAChB,OAAO,UAAU,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;QAClD,IAAI,KAAK,EAAE,CAAC;YACX,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBAC1B,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC7B,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC,CAAC;IAEF,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,CAAC;AACrD,CAAC","sourcesContent":["/**\n * Authentication Setup - Credential resolution and validation.\n *\n * Extracts auth-related initialization from main.ts Phase 4:\n * auth mode determination, Codex flag validation, credential resolution,\n * and missing-auth error message building.\n *\n * @module bootstrap/auth-setup\n */\n\nimport chalk from \"chalk\";\nimport { getCustomProviderMetadata } from \"../models/registry.js\";\nimport { getEnvVarsForProvider } from \"../providers/api-keys.js\";\nimport {\n\ttype AuthCredential,\n\ttype AuthMode,\n\tcreateAuthResolver,\n} from \"../providers/auth.js\";\nimport {\n\tisEvalOpsManagedGatewayEnabled,\n\tisEvalOpsManagedProvider,\n\tisKnownEvalOpsManagedProvider,\n} from \"../providers/evalops-managed.js\";\n\n/** A plain + colored error line for terminal display. */\nexport interface AuthLine {\n\tplain: string;\n\tcolored: string;\n}\n\nexport interface AuthSetupResult {\n\t/** Resolve a credential for a provider, throwing or exiting on failure. */\n\trequireCredential: (\n\t\tproviderName: string,\n\t\tfatal: boolean,\n\t) => Promise<AuthCredential>;\n\t/** Build user-friendly error lines when credentials are missing. */\n\tbuildMissingAuthLines: (providerName: string) => AuthLine[];\n}\n\n/**\n * Validate that no unsupported legacy Codex/ChatGPT flags are used.\n * Throws with an error message on invalid flags.\n */\nexport function validateCodexFlags(args: string[], command?: string): void {\n\tif (command !== \"help\" && command !== \"config\") {\n\t\tconst codexFlagsUsed = args.some((arg, index) => {\n\t\t\tif (arg === \"--codex-api-key\" || arg.startsWith(\"--codex-api-key=\")) {\n\t\t\t\treturn true;\n\t\t\t}\n\t\t\tif (arg === \"--auth\" && args[index + 1] === \"chatgpt\") return true;\n\t\t\tif (arg.startsWith(\"--auth=chatgpt\")) return true;\n\t\t\treturn false;\n\t\t});\n\t\tif (codexFlagsUsed) {\n\t\t\tthrow new Error(\n\t\t\t\t\"Legacy Codex/ChatGPT auth flags are no longer supported. Use the openai-codex provider with `maestro codex login` or CODEX_API_KEY instead.\",\n\t\t\t);\n\t\t}\n\t}\n}\n\n/**\n * Create the auth resolver and helper functions used throughout startup.\n */\nexport function createAuthSetup(params: {\n\tauthMode: AuthMode;\n\texplicitApiKey?: string;\n}): AuthSetupResult {\n\tconst { authMode, explicitApiKey } = params;\n\n\tconst authResolver = createAuthResolver({\n\t\tmode: authMode,\n\t\texplicitApiKey,\n\t});\n\n\tconst buildMissingAuthLines = (providerName: string): AuthLine[] => {\n\t\tconst lines: AuthLine[] = [];\n\t\tconst push = (plain: string, colored?: string) => {\n\t\t\tlines.push({ plain, colored: colored ?? plain });\n\t\t};\n\t\tpush(\n\t\t\t`Error: No credentials found for provider \"${providerName}\"`,\n\t\t\tchalk.red(`Error: No credentials found for provider \"${providerName}\"`),\n\t\t);\n\t\tif (authMode !== \"api-key\") {\n\t\t\tconst loginHint =\n\t\t\t\tproviderName === \"anthropic\"\n\t\t\t\t\t? 'Run \"maestro anthropic login\" (claude) or use /login to authenticate before retrying.'\n\t\t\t\t\t: providerName === \"openai\"\n\t\t\t\t\t\t? 'Run \"maestro openai login\" or use /login to authenticate before retrying.'\n\t\t\t\t\t\t: isKnownEvalOpsManagedProvider(providerName) &&\n\t\t\t\t\t\t\t\t!isEvalOpsManagedGatewayEnabled()\n\t\t\t\t\t\t\t? \"EvalOps managed gateway access is currently disabled by dynamic config.\"\n\t\t\t\t\t\t\t: isEvalOpsManagedProvider(providerName)\n\t\t\t\t\t\t\t\t? 'Run \"maestro evalops login\" or \"/login evalops\" to authenticate before retrying.'\n\t\t\t\t\t\t\t\t: 'Run \"/login\" to authenticate before retrying.';\n\t\t\tpush(\n\t\t\t\t`${loginHint} Or provide an API key for the selected provider.`,\n\t\t\t\tchalk.dim(\n\t\t\t\t\t`${loginHint} Or provide an API key for the selected provider.`,\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\t\tconst envVars = getEnvVarsForProvider(providerName);\n\t\tif (envVars.length) {\n\t\t\tpush(\n\t\t\t\t`Set ${envVars.join(\" or \")} or provide --api-key for ${providerName}.`,\n\t\t\t\tchalk.dim(\n\t\t\t\t\t`Set ${envVars.join(\" or \")} or provide --api-key for ${providerName}.`,\n\t\t\t\t),\n\t\t\t);\n\t\t} else {\n\t\t\tconst customMeta = getCustomProviderMetadata(providerName);\n\t\t\tif (customMeta?.apiKeyEnv) {\n\t\t\t\tpush(\n\t\t\t\t\t`Set ${customMeta.apiKeyEnv} environment variable or provide --api-key for ${providerName}.`,\n\t\t\t\t\tchalk.dim(\n\t\t\t\t\t\t`Set ${customMeta.apiKeyEnv} environment variable or provide --api-key for ${providerName}.`,\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\t\treturn lines;\n\t};\n\n\tconst requireCredential = async (\n\t\tproviderName: string,\n\t\tfatal: boolean,\n\t): Promise<AuthCredential> => {\n\t\tconst credential = await authResolver(providerName);\n\t\tif (credential) {\n\t\t\treturn credential;\n\t\t}\n\t\tconst lines = buildMissingAuthLines(providerName);\n\t\tif (fatal) {\n\t\t\tfor (const line of lines) {\n\t\t\t\tconsole.error(line.colored);\n\t\t\t}\n\t\t\tprocess.exit(1);\n\t\t}\n\t\tconst plain = lines.map((line) => line.plain).join(\"\\n\");\n\t\tthrow new Error(plain);\n\t};\n\n\treturn { requireCredential, buildMissingAuthLines };\n}\n"]}
+{"version":3,"file":"auth-setup.js","sourceRoot":"","sources":["../../src/bootstrap/auth-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAGN,kBAAkB,GAClB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACN,8BAA8B,EAC9B,wBAAwB,EACxB,6BAA6B,GAC7B,MAAM,iCAAiC,CAAC;AAkBzC;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAc,EAAE,OAAgB;IAClE,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;YAC/C,IAAI,GAAG,KAAK,iBAAiB,IAAI,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBACrE,OAAO,IAAI,CAAC;YACb,CAAC;YACD,IAAI,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YACnE,IAAI,GAAG,CAAC,UAAU,CAAC,gBAAgB,CAAC;gBAAE,OAAO,IAAI,CAAC;YAClD,OAAO,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;QACH,IAAI,cAAc,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACd,4HAA4H,CAC5H,CAAC;QACH,CAAC;IACF,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,MAG/B;IACA,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,GAAG,MAAM,CAAC;IAE5C,MAAM,YAAY,GAAG,kBAAkB,CAAC;QACvC,IAAI,EAAE,QAAQ;QACd,cAAc;KACd,CAAC,CAAC;IAEH,MAAM,qBAAqB,GAAG,CAAC,YAAoB,EAAc,EAAE;QAClE,MAAM,KAAK,GAAe,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,OAAgB,EAAE,EAAE;YAChD,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC;QAClD,CAAC,CAAC;QACF,IAAI,CACH,6CAA6C,YAAY,GAAG,EAC5D,KAAK,CAAC,GAAG,CAAC,6CAA6C,YAAY,GAAG,CAAC,CACvE,CAAC;QACF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,SAAS,GACd,YAAY,KAAK,WAAW;gBAC3B,CAAC,CAAC,uFAAuF;gBACzF,CAAC,CAAC,YAAY,KAAK,QAAQ;oBAC1B,CAAC,CAAC,2EAA2E;oBAC7E,CAAC,CAAC,6BAA6B,CAAC,YAAY,CAAC;wBAC3C,CAAC,8BAA8B,EAAE;wBAClC,CAAC,CAAC,yEAAyE;wBAC3E,CAAC,CAAC,wBAAwB,CAAC,YAAY,CAAC;4BACvC,CAAC,CAAC,kFAAkF;4BACpF,CAAC,CAAC,+CAA+C,CAAC;YACvD,IAAI,CACH,GAAG,SAAS,mDAAmD,EAC/D,KAAK,CAAC,GAAG,CACR,GAAG,SAAS,mDAAmD,CAC/D,CACD,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;QACpD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,IAAI,CACH,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,6BAA6B,YAAY,GAAG,EACvE,KAAK,CAAC,GAAG,CACR,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,6BAA6B,YAAY,GAAG,CACvE,CACD,CAAC;QACH,CAAC;aAAM,CAAC;YACP,MAAM,UAAU,GAAG,yBAAyB,CAAC,YAAY,CAAC,CAAC;YAC3D,IAAI,UAAU,EAAE,SAAS,EAAE,CAAC;gBAC3B,IAAI,CACH,OAAO,UAAU,CAAC,SAAS,kDAAkD,YAAY,GAAG,EAC5F,KAAK,CAAC,GAAG,CACR,OAAO,UAAU,CAAC,SAAS,kDAAkD,YAAY,GAAG,CAC5F,CACD,CAAC;YACH,CAAC;QACF,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC,CAAC;IAEF,MAAM,iBAAiB,GAAG,KAAK,EAC9B,YAAoB,EACpB,KAAc,EACY,EAAE;QAC5B,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,YAAY,CAAC,CAAC;QACpD,IAAI,UAAU,EAAE,CAAC;YAChB,OAAO,UAAU,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;QAClD,IAAI,KAAK,EAAE,CAAC;YACX,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBAC1B,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC7B,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC,CAAC;IAEF,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,CAAC;AACrD,CAAC","sourcesContent":["/**\n * Authentication Setup - Credential resolution and validation.\n *\n * Extracts auth-related initialization from main.ts Phase 4:\n * auth mode determination, Codex flag validation, credential resolution,\n * and missing-auth error message building.\n *\n * @module bootstrap/auth-setup\n */\n\nimport chalk from \"chalk\";\nimport { getCustomProviderMetadata } from \"../models/registry.js\";\nimport { getEnvVarsForProvider } from \"../providers/api-keys.js\";\nimport {\n\ttype AuthCredential,\n\ttype AuthMode,\n\tcreateAuthResolver,\n} from \"../providers/auth.js\";\nimport {\n\tisEvalOpsManagedGatewayEnabled,\n\tisEvalOpsManagedProvider,\n\tisKnownEvalOpsManagedProvider,\n} from \"../providers/evalops-managed.js\";\n\n/** A plain + colored error line for terminal display. */\nexport interface AuthLine {\n\tplain: string;\n\tcolored: string;\n}\n\nexport interface AuthSetupResult {\n\t/** Resolve a credential for a provider, throwing or exiting on failure. */\n\trequireCredential: (\n\t\tproviderName: string,\n\t\tfatal: boolean,\n\t) => Promise<AuthCredential>;\n\t/** Build user-friendly error lines when credentials are missing. */\n\tbuildMissingAuthLines: (providerName: string) => AuthLine[];\n}\n\n/**\n * Validate that no unsupported legacy Codex/ChatGPT flags are used.\n * Throws with an error message on invalid flags.\n */\nexport function validateCodexFlags(args: string[], command?: string): void {\n\tif (command !== \"help\" && command !== \"config\") {\n\t\tconst codexFlagsUsed = args.some((arg, index) => {\n\t\t\tif (arg === \"--codex-api-key\" || arg.startsWith(\"--codex-api-key=\")) {\n\t\t\t\treturn true;\n\t\t\t}\n\t\t\tif (arg === \"--auth\" && args[index + 1] === \"chatgpt\") return true;\n\t\t\tif (arg.startsWith(\"--auth=chatgpt\")) return true;\n\t\t\treturn false;\n\t\t});\n\t\tif (codexFlagsUsed) {\n\t\t\tthrow new Error(\n\t\t\t\t\"Legacy Codex/ChatGPT auth flags are no longer supported. Use the openai-codex provider with `maestro codex login` instead.\",\n\t\t\t);\n\t\t}\n\t}\n}\n\n/**\n * Create the auth resolver and helper functions used throughout startup.\n */\nexport function createAuthSetup(params: {\n\tauthMode: AuthMode;\n\texplicitApiKey?: string;\n}): AuthSetupResult {\n\tconst { authMode, explicitApiKey } = params;\n\n\tconst authResolver = createAuthResolver({\n\t\tmode: authMode,\n\t\texplicitApiKey,\n\t});\n\n\tconst buildMissingAuthLines = (providerName: string): AuthLine[] => {\n\t\tconst lines: AuthLine[] = [];\n\t\tconst push = (plain: string, colored?: string) => {\n\t\t\tlines.push({ plain, colored: colored ?? plain });\n\t\t};\n\t\tpush(\n\t\t\t`Error: No credentials found for provider \"${providerName}\"`,\n\t\t\tchalk.red(`Error: No credentials found for provider \"${providerName}\"`),\n\t\t);\n\t\tif (authMode !== \"api-key\") {\n\t\t\tconst loginHint =\n\t\t\t\tproviderName === \"anthropic\"\n\t\t\t\t\t? 'Run \"maestro anthropic login\" (claude) or use /login to authenticate before retrying.'\n\t\t\t\t\t: providerName === \"openai\"\n\t\t\t\t\t\t? 'Run \"maestro openai login\" or use /login to authenticate before retrying.'\n\t\t\t\t\t\t: isKnownEvalOpsManagedProvider(providerName) &&\n\t\t\t\t\t\t\t\t!isEvalOpsManagedGatewayEnabled()\n\t\t\t\t\t\t\t? \"EvalOps managed gateway access is currently disabled by dynamic config.\"\n\t\t\t\t\t\t\t: isEvalOpsManagedProvider(providerName)\n\t\t\t\t\t\t\t\t? 'Run \"maestro evalops login\" or \"/login evalops\" to authenticate before retrying.'\n\t\t\t\t\t\t\t\t: 'Run \"/login\" to authenticate before retrying.';\n\t\t\tpush(\n\t\t\t\t`${loginHint} Or provide an API key for the selected provider.`,\n\t\t\t\tchalk.dim(\n\t\t\t\t\t`${loginHint} Or provide an API key for the selected provider.`,\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\t\tconst envVars = getEnvVarsForProvider(providerName);\n\t\tif (envVars.length) {\n\t\t\tpush(\n\t\t\t\t`Set ${envVars.join(\" or \")} or provide --api-key for ${providerName}.`,\n\t\t\t\tchalk.dim(\n\t\t\t\t\t`Set ${envVars.join(\" or \")} or provide --api-key for ${providerName}.`,\n\t\t\t\t),\n\t\t\t);\n\t\t} else {\n\t\t\tconst customMeta = getCustomProviderMetadata(providerName);\n\t\t\tif (customMeta?.apiKeyEnv) {\n\t\t\t\tpush(\n\t\t\t\t\t`Set ${customMeta.apiKeyEnv} environment variable or provide --api-key for ${providerName}.`,\n\t\t\t\t\tchalk.dim(\n\t\t\t\t\t\t`Set ${customMeta.apiKeyEnv} environment variable or provide --api-key for ${providerName}.`,\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\t\treturn lines;\n\t};\n\n\tconst requireCredential = async (\n\t\tproviderName: string,\n\t\tfatal: boolean,\n\t): Promise<AuthCredential> => {\n\t\tconst credential = await authResolver(providerName);\n\t\tif (credential) {\n\t\t\treturn credential;\n\t\t}\n\t\tconst lines = buildMissingAuthLines(providerName);\n\t\tif (fatal) {\n\t\t\tfor (const line of lines) {\n\t\t\t\tconsole.error(line.colored);\n\t\t\t}\n\t\t\tprocess.exit(1);\n\t\t}\n\t\tconst plain = lines.map((line) => line.plain).join(\"\\n\");\n\t\tthrow new Error(plain);\n\t};\n\n\treturn { requireCredential, buildMissingAuthLines };\n}\n"]}

package/dist/bootstrap/event-subscriptions-setup.d.ts

@@ -9,6 +9,7 @@
  */
 import type { Agent } from "../agent/index.js";
 import type { AutomaticMemoryExtractionCoordinator } from "../memory/auto-extraction.js";
+import type { ScriptedScenarioRecorder } from "../server/scenario-recorder.js";
 import { type SessionManager } from "../session/manager.js";
 import { type TurnTracker } from "../telemetry/turn-tracker.js";
 import type { CanonicalTurnEvent } from "../telemetry/wide-events.js";
@@ -35,6 +36,11 @@ export declare function setupEventSubscriptions(params: {
         } | null;
     };
     automaticMemoryExtraction?: AutomaticMemoryExtractionCoordinator;
+    scenarioReplay?: {
+        path: string;
+        scenarioId: string;
+    };
+    scenarioRecorder?: ScriptedScenarioRecorder;
     /** Optional callback invoked on every turn completion (for perf aggregation). */
     onTurnComplete?: (event: CanonicalTurnEvent) => void;
 }): EventSubscriptionsResult;

package/dist/bootstrap/event-subscriptions-setup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"event-subscriptions-setup.d.ts","sourceRoot":"","sources":["../../src/bootstrap/event-subscriptions-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAK/C,OAAO,KAAK,EAAE,oCAAoC,EAAE,MAAM,8BAA8B,CAAC;AAGzF,OAAO,EACN,KAAK,cAAc,EAEnB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACN,KAAK,WAAW,EAEhB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAKtE,MAAM,WAAW,wBAAwB;IACxC,WAAW,EAAE,WAAW,CAAC;CACzB;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE;IAC/C,KAAK,EAAE,KAAK,CAAC;IACb,cAAc,EAAE,cAAc,CAAC;IAC/B,YAAY,EAAE,MAAM,GAAG,QAAQ,GAAG,MAAM,CAAC;IACzC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,iBAAiB,EAAE;QAClB,YAAY,EAAE,MAAM,OAAO,CAAC;QAC5B,YAAY,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;QAC5D,UAAU,EAAE,MAAM;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,IAAI,CAAA;SAAE,GAAG,IAAI,CAAC;KAChE,CAAC;IACF,yBAAyB,CAAC,EAAE,oCAAoC,CAAC;IACjE,iFAAiF;IACjF,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,CAAC;CACrD,GAAG,wBAAwB,CA6J3B"}
+{"version":3,"file":"event-subscriptions-setup.d.ts","sourceRoot":"","sources":["../../src/bootstrap/event-subscriptions-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAK/C,OAAO,KAAK,EAAE,oCAAoC,EAAE,MAAM,8BAA8B,CAAC;AAGzF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC/E,OAAO,EACN,KAAK,cAAc,EAEnB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACN,KAAK,WAAW,EAEhB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAMtE,MAAM,WAAW,wBAAwB;IACxC,WAAW,EAAE,WAAW,CAAC;CACzB;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE;IAC/C,KAAK,EAAE,KAAK,CAAC;IACb,cAAc,EAAE,cAAc,CAAC;IAC/B,YAAY,EAAE,MAAM,GAAG,QAAQ,GAAG,MAAM,CAAC;IACzC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,iBAAiB,EAAE;QAClB,YAAY,EAAE,MAAM,OAAO,CAAC;QAC5B,YAAY,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;QAC5D,UAAU,EAAE,MAAM;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,IAAI,CAAA;SAAE,GAAG,IAAI,CAAC;KAChE,CAAC;IACF,yBAAyB,CAAC,EAAE,oCAAoC,CAAC;IACjE,cAAc,CAAC,EAAE;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,gBAAgB,CAAC,EAAE,wBAAwB,CAAC;IAC5C,iFAAiF;IACjF,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,CAAC;CACrD,GAAG,wBAAwB,CAoL3B"}

package/dist/bootstrap/event-subscriptions-setup.js

@@ -17,12 +17,15 @@ import { createRuntimeSessionSummaryUpdater } from "../session/runtime-summary-u
 import { createTurnTracker, } from "../telemetry/turn-tracker.js";
 import { createLogger } from "../utils/logger.js";
 const logger = createLogger("event-subscriptions");
+const nativePolicySandboxModes = new Set(["read-only", "workspace-write"]);
 /**
  * Wire up all agent event subscriptions: turn tracking, message persistence,
  * session initialization, and notification hooks.
  */
 export function setupEventSubscriptions(params) {
     const { agent, sessionManager, approvalMode, sandboxMode, tsHookCount, cwd, enterpriseContext, automaticMemoryExtraction, } = params;
+    let scenarioReplayTagged = false;
+    let scenarioRecordingTagged = false;
     const updateSessionSummary = createRuntimeSessionSummaryUpdater(sessionManager);
     const sessionHookService = createSessionHookService({
         cwd,
@@ -46,7 +49,9 @@ export function setupEventSubscriptions(params) {
     });
     const trackerSandboxMode = sandboxMode === "docker"
         ? "docker"
-        : sandboxMode === "local" || sandboxMode === "native"
+        : sandboxMode === "local" ||
+            sandboxMode === "native" ||
+            nativePolicySandboxModes.has(sandboxMode ?? "")
             ? "local"
             : "none";
     turnTracker.updateContext({
@@ -87,7 +92,10 @@ export function setupEventSubscriptions(params) {
         if (event.type === "message_end") {
             sessionManager.saveMessage(event.message);
             if (event.message.role === "assistant") {
-                automaticMemoryExtraction?.schedule(sessionManager.getSessionFile());
+                if (!params.scenarioReplay) {
+                    automaticMemoryExtraction?.schedule(sessionManager.getSessionFile());
+                }
+                params.scenarioRecorder?.recordAssistantMessage(event.message);
             }
             // Check if we should initialize session now (after first user message)
             if (sessionManager.shouldInitializeSession(agent.state.messages)) {
@@ -108,6 +116,22 @@ export function setupEventSubscriptions(params) {
                     process.exit(1);
                 }
                 sessionManager.startSession(agent.state);
+                if (params.scenarioReplay && !scenarioReplayTagged) {
+                    sessionManager.appendCustomEntry("scenario_replay", {
+                        replay: true,
+                        scenarioId: params.scenarioReplay.scenarioId,
+                        path: params.scenarioReplay.path,
+                        modelProvider: "scripted-replay",
+                    });
+                    scenarioReplayTagged = true;
+                }
+                if (params.scenarioRecorder && !scenarioRecordingTagged) {
+                    sessionManager.appendCustomEntry("scenario_recording", {
+                        recording: true,
+                        path: params.scenarioRecorder.getOutputPath(),
+                    });
+                    scenarioRecordingTagged = true;
+                }
                 if (enterpriseContext.isEnterprise()) {
                     enterpriseContext.startSession(sessionManager.getSessionId(), agent.state.model?.id);
                     const session = enterpriseContext.getSession();

package/dist/bootstrap/event-subscriptions-setup.js.map

@@ -1 +1 @@
-{"version":3,"file":"event-subscriptions-setup.js","sourceRoot":"","sources":["../../src/bootstrap/event-subscriptions-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAG/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAEN,sBAAsB,GACtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kCAAkC,EAAE,MAAM,uCAAuC,CAAC;AAC3F,OAAO,EAEN,iBAAiB,GACjB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,MAAM,GAAG,YAAY,CAAC,qBAAqB,CAAC,CAAC;AAMnD;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAevC;IACA,MAAM,EACL,KAAK,EACL,cAAc,EACd,YAAY,EACZ,WAAW,EACX,WAAW,EACX,GAAG,EACH,iBAAiB,EACjB,yBAAyB,GACzB,GAAG,MAAM,CAAC;IACX,MAAM,oBAAoB,GACzB,kCAAkC,CAAC,cAAc,CAAC,CAAC;IACpD,MAAM,kBAAkB,GAAG,wBAAwB,CAAC;QACnD,GAAG;QACH,SAAS,EAAE,cAAc,CAAC,YAAY,EAAE;KACxC,CAAC,CAAC;IAEH,4EAA4E;IAE5E,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,EAAE;QAC5C,SAAS,EAAE,cAAc,CAAC,YAAY,EAAE;QACxC,cAAc,EAAE,CAAC,KAAK,EAAE,EAAE;YACzB,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE;oBAClC,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,UAAU,EAAE,KAAK,CAAC,eAAe;oBACjC,YAAY,EAAE,KAAK,CAAC,YAAY;iBAChC,CAAC,CAAC;YACJ,CAAC;YACD,MAAM,CAAC,cAAc,EAAE,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;KACD,CAAC,CAAC;IAEH,MAAM,kBAAkB,GACvB,WAAW,KAAK,QAAQ;QACvB,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,WAAW,KAAK,OAAO,IAAI,WAAW,KAAK,QAAQ;YACpD,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,MAAM,CAAC;IACZ,WAAW,CAAC,aAAa,CAAC;QACzB,WAAW,EAAE,kBAAkB;QAC/B,YAAY;QACZ,UAAU,EAAE,UAAU;aACpB,SAAS,EAAE;aACX,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;aAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACpB,kBAAkB,EAAE,CAAC;QACrB,QAAQ,EAAE;YACT,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;YAChD,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,GAAG;YACrD,iBAAiB,EAAE,IAAI;YACvB,SAAS,EAAE,WAAW;SACtB;KACD,CAAC,CAAC;IAEH,UAAU,CAAC,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE;QAC/B,WAAW,CAAC,aAAa,CAAC;YACzB,UAAU,EAAE,UAAU;iBACpB,SAAS,EAAE;iBACX,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;iBAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SACpB,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,UAAU,CAAC,EAAE,CAAC,cAAc,EAAE,GAAG,EAAE;QAClC,WAAW,CAAC,aAAa,CAAC;YACzB,UAAU,EAAE,UAAU;iBACpB,SAAS,EAAE;iBACX,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;iBAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SACpB,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAE5E,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC/B,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC5B,8BAA8B;QAC9B,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAClC,cAAc,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBACxC,yBAAyB,EAAE,QAAQ,CAAC,cAAc,CAAC,cAAc,EAAE,CAAC,CAAC;YACtE,CAAC;YAED,uEAAuE;YACvE,IAAI,cAAc,CAAC,uBAAuB,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClE,IAAI,WAA+B,CAAC;gBACpC,IAAI,CAAC;oBACJ,MAAM,QAAQ,GAAG,cAAc,CAAC,eAAe,EAAE,CAAC;oBAClD,WAAW,GAAG,QAAQ,CAAC,MAAM,CAC5B,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CACzD,CAAC,MAAM,CAAC;gBACV,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,OAAO,CAAC,KAAK,CACZ,KAAK,CAAC,MAAM,CACX,6CAA6C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACrG,CACD,CAAC;gBACH,CAAC;gBAED,MAAM,UAAU,GAAG,kBAAkB,CACpC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,EACzB,WAAW,KAAK,SAAS;oBACxB,CAAC,CAAC,EAAE,kBAAkB,EAAE,WAAW,GAAG,CAAC,EAAE;oBACzC,CAAC,CAAC,SAAS,CACZ,CAAC;gBAEF,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;oBACzB,MAAM,GAAG,GAAG,cAAc,UAAU,CAAC,MAAM,EAAE,CAAC;oBAC9C,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;oBAC9B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACjB,CAAC;gBAED,cAAc,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAEzC,IAAI,iBAAiB,CAAC,YAAY,EAAE,EAAE,CAAC;oBACtC,iBAAiB,CAAC,YAAY,CAC7B,cAAc,CAAC,YAAY,EAAE,EAC5B,KAAK,CAAC,KAAK,CAAC,KAAyB,EAAE,EAAE,CAC1C,CAAC;oBACF,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,EAAE,CAAC;oBAC/C,IAAI,OAAO,EAAE,CAAC;wBACb,KAAK,CAAC,UAAU,CAAC;4BAChB,EAAE,EAAE,OAAO,CAAC,SAAS;4BACrB,SAAS,EAAE,OAAO,CAAC,SAAS;yBAC5B,CAAC,CAAC;oBACJ,CAAC;gBACF,CAAC;YACF,CAAC;QACF,CAAC;QAED,MAAM,aAAa,GAAG,sBAAsB,CAC3C,KAAK,CAAC,KAAK,CAAC,KAAwB,CACpC,CAAC;QACF,cAAc,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAE5E,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE;QACzB,yBAAyB,CACxB,KAAK,EACL;YACC,GAAG;YACH,SAAS,EAAE,cAAc,CAAC,YAAY,EAAE;YACxC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ;SAC9B,EACD;YACC,kBAAkB;YAClB,MAAM;SACN,CACD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,WAAW,EAAE,CAAC;AACxB,CAAC","sourcesContent":["/**\n * Event Subscriptions Setup - Turn tracking, persistence, and notifications.\n *\n * Extracts event subscription wiring from main.ts Phase 14.5:\n * turn tracker creation + MCP context updates, message persistence +\n * session initialization, and notification hook subscription.\n *\n * @module bootstrap/event-subscriptions-setup\n */\n\nimport chalk from \"chalk\";\nimport type { Agent } from \"../agent/index.js\";\nimport type { AppMessage } from \"../agent/types.js\";\nimport { dispatchAgentNotification } from \"../hooks/notification-hooks.js\";\nimport { createSessionHookService } from \"../hooks/session-integration.js\";\nimport { mcpManager } from \"../mcp/manager.js\";\nimport type { AutomaticMemoryExtractionCoordinator } from \"../memory/auto-extraction.js\";\nimport type { RegisteredModel } from \"../models/registry.js\";\nimport { checkSessionLimits } from \"../safety/policy.js\";\nimport {\n\ttype SessionManager,\n\ttoSessionModelMetadata,\n} from \"../session/manager.js\";\nimport { createRuntimeSessionSummaryUpdater } from \"../session/runtime-summary-updater.js\";\nimport {\n\ttype TurnTracker,\n\tcreateTurnTracker,\n} from \"../telemetry/turn-tracker.js\";\nimport type { CanonicalTurnEvent } from \"../telemetry/wide-events.js\";\nimport { createLogger } from \"../utils/logger.js\";\n\nconst logger = createLogger(\"event-subscriptions\");\n\nexport interface EventSubscriptionsResult {\n\tturnTracker: TurnTracker;\n}\n\n/**\n * Wire up all agent event subscriptions: turn tracking, message persistence,\n * session initialization, and notification hooks.\n */\nexport function setupEventSubscriptions(params: {\n\tagent: Agent;\n\tsessionManager: SessionManager;\n\tapprovalMode: \"auto\" | \"prompt\" | \"fail\";\n\tsandboxMode: string | undefined;\n\ttsHookCount: number;\n\tcwd: string;\n\tenterpriseContext: {\n\t\tisEnterprise: () => boolean;\n\t\tstartSession: (sessionId: string, modelId?: string) => void;\n\t\tgetSession: () => { sessionId: string; startedAt: Date } | null;\n\t};\n\tautomaticMemoryExtraction?: AutomaticMemoryExtractionCoordinator;\n\t/** Optional callback invoked on every turn completion (for perf aggregation). */\n\tonTurnComplete?: (event: CanonicalTurnEvent) => void;\n}): EventSubscriptionsResult {\n\tconst {\n\t\tagent,\n\t\tsessionManager,\n\t\tapprovalMode,\n\t\tsandboxMode,\n\t\ttsHookCount,\n\t\tcwd,\n\t\tenterpriseContext,\n\t\tautomaticMemoryExtraction,\n\t} = params;\n\tconst updateSessionSummary =\n\t\tcreateRuntimeSessionSummaryUpdater(sessionManager);\n\tconst sessionHookService = createSessionHookService({\n\t\tcwd,\n\t\tsessionId: sessionManager.getSessionId(),\n\t});\n\n\t// ── Turn Tracker ─────────────────────────────────────────────────────────\n\n\tconst turnTracker = createTurnTracker(agent, {\n\t\tsessionId: sessionManager.getSessionId(),\n\t\tonTurnComplete: (event) => {\n\t\t\tif (event.sampled) {\n\t\t\t\tlogger.debug(\"Wide event emitted\", {\n\t\t\t\t\tturnId: event.turnId,\n\t\t\t\t\tstatus: event.status,\n\t\t\t\t\ttoolCount: event.toolCount,\n\t\t\t\t\tdurationMs: event.totalDurationMs,\n\t\t\t\t\tsampleReason: event.sampleReason,\n\t\t\t\t});\n\t\t\t}\n\t\t\tparams.onTurnComplete?.(event);\n\t\t},\n\t});\n\n\tconst trackerSandboxMode =\n\t\tsandboxMode === \"docker\"\n\t\t\t? \"docker\"\n\t\t\t: sandboxMode === \"local\" || sandboxMode === \"native\"\n\t\t\t\t? \"local\"\n\t\t\t\t: \"none\";\n\tturnTracker.updateContext({\n\t\tsandboxMode: trackerSandboxMode,\n\t\tapprovalMode,\n\t\tmcpServers: mcpManager\n\t\t\t.getStatus()\n\t\t\t.servers.filter((s) => s.connected)\n\t\t\t.map((s) => s.name),\n\t\tcontextSourceCount: 5,\n\t\tfeatures: {\n\t\t\tsafeMode: Boolean(process.env.MAESTRO_SAFE_MODE),\n\t\t\tguardianEnabled: process.env.MAESTRO_GUARDIAN !== \"0\",\n\t\t\tcompactionEnabled: true,\n\t\t\thookCount: tsHookCount,\n\t\t},\n\t});\n\n\tmcpManager.on(\"connected\", () => {\n\t\tturnTracker.updateContext({\n\t\t\tmcpServers: mcpManager\n\t\t\t\t.getStatus()\n\t\t\t\t.servers.filter((s) => s.connected)\n\t\t\t\t.map((s) => s.name),\n\t\t});\n\t});\n\tmcpManager.on(\"disconnected\", () => {\n\t\tturnTracker.updateContext({\n\t\t\tmcpServers: mcpManager\n\t\t\t\t.getStatus()\n\t\t\t\t.servers.filter((s) => s.connected)\n\t\t\t\t.map((s) => s.name),\n\t\t});\n\t});\n\n\t// ── Agent event subscription ─────────────────────────────────────────────\n\n\tagent.subscribe(async (event) => {\n\t\tupdateSessionSummary(event);\n\t\t// Save messages on completion\n\t\tif (event.type === \"message_end\") {\n\t\t\tsessionManager.saveMessage(event.message);\n\t\t\tif (event.message.role === \"assistant\") {\n\t\t\t\tautomaticMemoryExtraction?.schedule(sessionManager.getSessionFile());\n\t\t\t}\n\n\t\t\t// Check if we should initialize session now (after first user message)\n\t\t\tif (sessionManager.shouldInitializeSession(agent.state.messages)) {\n\t\t\t\tlet activeCount: number | undefined;\n\t\t\t\ttry {\n\t\t\t\t\tconst sessions = sessionManager.loadAllSessions();\n\t\t\t\t\tactiveCount = sessions.filter(\n\t\t\t\t\t\t(s) => Date.now() - s.modified.getTime() < 60 * 60 * 1000,\n\t\t\t\t\t).length;\n\t\t\t\t} catch (error) {\n\t\t\t\t\tconsole.error(\n\t\t\t\t\t\tchalk.yellow(\n\t\t\t\t\t\t\t`[Policy] Failed to count active sessions: ${error instanceof Error ? error.message : String(error)}`,\n\t\t\t\t\t\t),\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\tconst limitCheck = checkSessionLimits(\n\t\t\t\t\t{ startedAt: new Date() },\n\t\t\t\t\tactiveCount !== undefined\n\t\t\t\t\t\t? { activeSessionCount: activeCount + 1 }\n\t\t\t\t\t\t: undefined,\n\t\t\t\t);\n\n\t\t\t\tif (!limitCheck.allowed) {\n\t\t\t\t\tconst msg = `\\n[Policy] ${limitCheck.reason}`;\n\t\t\t\t\tconsole.error(chalk.red(msg));\n\t\t\t\t\tprocess.exit(1);\n\t\t\t\t}\n\n\t\t\t\tsessionManager.startSession(agent.state);\n\n\t\t\t\tif (enterpriseContext.isEnterprise()) {\n\t\t\t\t\tenterpriseContext.startSession(\n\t\t\t\t\t\tsessionManager.getSessionId(),\n\t\t\t\t\t\t(agent.state.model as RegisteredModel)?.id,\n\t\t\t\t\t);\n\t\t\t\t\tconst session = enterpriseContext.getSession();\n\t\t\t\t\tif (session) {\n\t\t\t\t\t\tagent.setSession({\n\t\t\t\t\t\t\tid: session.sessionId,\n\t\t\t\t\t\t\tstartedAt: session.startedAt,\n\t\t\t\t\t\t});\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tconst modelMetadata = toSessionModelMetadata(\n\t\t\tagent.state.model as RegisteredModel,\n\t\t);\n\t\tsessionManager.updateSnapshot(agent.state, modelMetadata);\n\t});\n\n\t// ── Notification hooks ───────────────────────────────────────────────────\n\n\tagent.subscribe((event) => {\n\t\tdispatchAgentNotification(\n\t\t\tevent,\n\t\t\t{\n\t\t\t\tcwd,\n\t\t\t\tsessionId: sessionManager.getSessionId(),\n\t\t\t\tmessages: agent.state.messages,\n\t\t\t},\n\t\t\t{\n\t\t\t\tsessionHookService,\n\t\t\t\tlogger,\n\t\t\t},\n\t\t);\n\t});\n\n\treturn { turnTracker };\n}\n"]}
+{"version":3,"file":"event-subscriptions-setup.js","sourceRoot":"","sources":["../../src/bootstrap/event-subscriptions-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAG/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,EAEN,sBAAsB,GACtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kCAAkC,EAAE,MAAM,uCAAuC,CAAC;AAC3F,OAAO,EAEN,iBAAiB,GACjB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,MAAM,GAAG,YAAY,CAAC,qBAAqB,CAAC,CAAC;AACnD,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAM3E;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAoBvC;IACA,MAAM,EACL,KAAK,EACL,cAAc,EACd,YAAY,EACZ,WAAW,EACX,WAAW,EACX,GAAG,EACH,iBAAiB,EACjB,yBAAyB,GACzB,GAAG,MAAM,CAAC;IACX,IAAI,oBAAoB,GAAG,KAAK,CAAC;IACjC,IAAI,uBAAuB,GAAG,KAAK,CAAC;IACpC,MAAM,oBAAoB,GACzB,kCAAkC,CAAC,cAAc,CAAC,CAAC;IACpD,MAAM,kBAAkB,GAAG,wBAAwB,CAAC;QACnD,GAAG;QACH,SAAS,EAAE,cAAc,CAAC,YAAY,EAAE;KACxC,CAAC,CAAC;IAEH,4EAA4E;IAE5E,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,EAAE;QAC5C,SAAS,EAAE,cAAc,CAAC,YAAY,EAAE;QACxC,cAAc,EAAE,CAAC,KAAK,EAAE,EAAE;YACzB,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE;oBAClC,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,UAAU,EAAE,KAAK,CAAC,eAAe;oBACjC,YAAY,EAAE,KAAK,CAAC,YAAY;iBAChC,CAAC,CAAC;YACJ,CAAC;YACD,MAAM,CAAC,cAAc,EAAE,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;KACD,CAAC,CAAC;IAEH,MAAM,kBAAkB,GACvB,WAAW,KAAK,QAAQ;QACvB,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,WAAW,KAAK,OAAO;YACvB,WAAW,KAAK,QAAQ;YACxB,wBAAwB,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;YAChD,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,MAAM,CAAC;IACZ,WAAW,CAAC,aAAa,CAAC;QACzB,WAAW,EAAE,kBAAkB;QAC/B,YAAY;QACZ,UAAU,EAAE,UAAU;aACpB,SAAS,EAAE;aACX,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;aAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACpB,kBAAkB,EAAE,CAAC;QACrB,QAAQ,EAAE;YACT,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;YAChD,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,GAAG;YACrD,iBAAiB,EAAE,IAAI;YACvB,SAAS,EAAE,WAAW;SACtB;KACD,CAAC,CAAC;IAEH,UAAU,CAAC,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE;QAC/B,WAAW,CAAC,aAAa,CAAC;YACzB,UAAU,EAAE,UAAU;iBACpB,SAAS,EAAE;iBACX,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;iBAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SACpB,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,UAAU,CAAC,EAAE,CAAC,cAAc,EAAE,GAAG,EAAE;QAClC,WAAW,CAAC,aAAa,CAAC;YACzB,UAAU,EAAE,UAAU;iBACpB,SAAS,EAAE;iBACX,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;iBAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SACpB,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAE5E,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC/B,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC5B,8BAA8B;QAC9B,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAClC,cAAc,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBACxC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;oBAC5B,yBAAyB,EAAE,QAAQ,CAAC,cAAc,CAAC,cAAc,EAAE,CAAC,CAAC;gBACtE,CAAC;gBACD,MAAM,CAAC,gBAAgB,EAAE,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAChE,CAAC;YAED,uEAAuE;YACvE,IAAI,cAAc,CAAC,uBAAuB,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClE,IAAI,WAA+B,CAAC;gBACpC,IAAI,CAAC;oBACJ,MAAM,QAAQ,GAAG,cAAc,CAAC,eAAe,EAAE,CAAC;oBAClD,WAAW,GAAG,QAAQ,CAAC,MAAM,CAC5B,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CACzD,CAAC,MAAM,CAAC;gBACV,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,OAAO,CAAC,KAAK,CACZ,KAAK,CAAC,MAAM,CACX,6CAA6C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACrG,CACD,CAAC;gBACH,CAAC;gBAED,MAAM,UAAU,GAAG,kBAAkB,CACpC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,EACzB,WAAW,KAAK,SAAS;oBACxB,CAAC,CAAC,EAAE,kBAAkB,EAAE,WAAW,GAAG,CAAC,EAAE;oBACzC,CAAC,CAAC,SAAS,CACZ,CAAC;gBAEF,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;oBACzB,MAAM,GAAG,GAAG,cAAc,UAAU,CAAC,MAAM,EAAE,CAAC;oBAC9C,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;oBAC9B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACjB,CAAC;gBAED,cAAc,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACzC,IAAI,MAAM,CAAC,cAAc,IAAI,CAAC,oBAAoB,EAAE,CAAC;oBACpD,cAAc,CAAC,iBAAiB,CAAC,iBAAiB,EAAE;wBACnD,MAAM,EAAE,IAAI;wBACZ,UAAU,EAAE,MAAM,CAAC,cAAc,CAAC,UAAU;wBAC5C,IAAI,EAAE,MAAM,CAAC,cAAc,CAAC,IAAI;wBAChC,aAAa,EAAE,iBAAiB;qBAChC,CAAC,CAAC;oBACH,oBAAoB,GAAG,IAAI,CAAC;gBAC7B,CAAC;gBACD,IAAI,MAAM,CAAC,gBAAgB,IAAI,CAAC,uBAAuB,EAAE,CAAC;oBACzD,cAAc,CAAC,iBAAiB,CAAC,oBAAoB,EAAE;wBACtD,SAAS,EAAE,IAAI;wBACf,IAAI,EAAE,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE;qBAC7C,CAAC,CAAC;oBACH,uBAAuB,GAAG,IAAI,CAAC;gBAChC,CAAC;gBAED,IAAI,iBAAiB,CAAC,YAAY,EAAE,EAAE,CAAC;oBACtC,iBAAiB,CAAC,YAAY,CAC7B,cAAc,CAAC,YAAY,EAAE,EAC5B,KAAK,CAAC,KAAK,CAAC,KAAyB,EAAE,EAAE,CAC1C,CAAC;oBACF,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,EAAE,CAAC;oBAC/C,IAAI,OAAO,EAAE,CAAC;wBACb,KAAK,CAAC,UAAU,CAAC;4BAChB,EAAE,EAAE,OAAO,CAAC,SAAS;4BACrB,SAAS,EAAE,OAAO,CAAC,SAAS;yBAC5B,CAAC,CAAC;oBACJ,CAAC;gBACF,CAAC;YACF,CAAC;QACF,CAAC;QAED,MAAM,aAAa,GAAG,sBAAsB,CAC3C,KAAK,CAAC,KAAK,CAAC,KAAwB,CACpC,CAAC;QACF,cAAc,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAE5E,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE;QACzB,yBAAyB,CACxB,KAAK,EACL;YACC,GAAG;YACH,SAAS,EAAE,cAAc,CAAC,YAAY,EAAE;YACxC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ;SAC9B,EACD;YACC,kBAAkB;YAClB,MAAM;SACN,CACD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,WAAW,EAAE,CAAC;AACxB,CAAC","sourcesContent":["/**\n * Event Subscriptions Setup - Turn tracking, persistence, and notifications.\n *\n * Extracts event subscription wiring from main.ts Phase 14.5:\n * turn tracker creation + MCP context updates, message persistence +\n * session initialization, and notification hook subscription.\n *\n * @module bootstrap/event-subscriptions-setup\n */\n\nimport chalk from \"chalk\";\nimport type { Agent } from \"../agent/index.js\";\nimport type { AppMessage } from \"../agent/types.js\";\nimport { dispatchAgentNotification } from \"../hooks/notification-hooks.js\";\nimport { createSessionHookService } from \"../hooks/session-integration.js\";\nimport { mcpManager } from \"../mcp/manager.js\";\nimport type { AutomaticMemoryExtractionCoordinator } from \"../memory/auto-extraction.js\";\nimport type { RegisteredModel } from \"../models/registry.js\";\nimport { checkSessionLimits } from \"../safety/policy.js\";\nimport type { ScriptedScenarioRecorder } from \"../server/scenario-recorder.js\";\nimport {\n\ttype SessionManager,\n\ttoSessionModelMetadata,\n} from \"../session/manager.js\";\nimport { createRuntimeSessionSummaryUpdater } from \"../session/runtime-summary-updater.js\";\nimport {\n\ttype TurnTracker,\n\tcreateTurnTracker,\n} from \"../telemetry/turn-tracker.js\";\nimport type { CanonicalTurnEvent } from \"../telemetry/wide-events.js\";\nimport { createLogger } from \"../utils/logger.js\";\n\nconst logger = createLogger(\"event-subscriptions\");\nconst nativePolicySandboxModes = new Set([\"read-only\", \"workspace-write\"]);\n\nexport interface EventSubscriptionsResult {\n\tturnTracker: TurnTracker;\n}\n\n/**\n * Wire up all agent event subscriptions: turn tracking, message persistence,\n * session initialization, and notification hooks.\n */\nexport function setupEventSubscriptions(params: {\n\tagent: Agent;\n\tsessionManager: SessionManager;\n\tapprovalMode: \"auto\" | \"prompt\" | \"fail\";\n\tsandboxMode: string | undefined;\n\ttsHookCount: number;\n\tcwd: string;\n\tenterpriseContext: {\n\t\tisEnterprise: () => boolean;\n\t\tstartSession: (sessionId: string, modelId?: string) => void;\n\t\tgetSession: () => { sessionId: string; startedAt: Date } | null;\n\t};\n\tautomaticMemoryExtraction?: AutomaticMemoryExtractionCoordinator;\n\tscenarioReplay?: {\n\t\tpath: string;\n\t\tscenarioId: string;\n\t};\n\tscenarioRecorder?: ScriptedScenarioRecorder;\n\t/** Optional callback invoked on every turn completion (for perf aggregation). */\n\tonTurnComplete?: (event: CanonicalTurnEvent) => void;\n}): EventSubscriptionsResult {\n\tconst {\n\t\tagent,\n\t\tsessionManager,\n\t\tapprovalMode,\n\t\tsandboxMode,\n\t\ttsHookCount,\n\t\tcwd,\n\t\tenterpriseContext,\n\t\tautomaticMemoryExtraction,\n\t} = params;\n\tlet scenarioReplayTagged = false;\n\tlet scenarioRecordingTagged = false;\n\tconst updateSessionSummary =\n\t\tcreateRuntimeSessionSummaryUpdater(sessionManager);\n\tconst sessionHookService = createSessionHookService({\n\t\tcwd,\n\t\tsessionId: sessionManager.getSessionId(),\n\t});\n\n\t// ── Turn Tracker ─────────────────────────────────────────────────────────\n\n\tconst turnTracker = createTurnTracker(agent, {\n\t\tsessionId: sessionManager.getSessionId(),\n\t\tonTurnComplete: (event) => {\n\t\t\tif (event.sampled) {\n\t\t\t\tlogger.debug(\"Wide event emitted\", {\n\t\t\t\t\tturnId: event.turnId,\n\t\t\t\t\tstatus: event.status,\n\t\t\t\t\ttoolCount: event.toolCount,\n\t\t\t\t\tdurationMs: event.totalDurationMs,\n\t\t\t\t\tsampleReason: event.sampleReason,\n\t\t\t\t});\n\t\t\t}\n\t\t\tparams.onTurnComplete?.(event);\n\t\t},\n\t});\n\n\tconst trackerSandboxMode =\n\t\tsandboxMode === \"docker\"\n\t\t\t? \"docker\"\n\t\t\t: sandboxMode === \"local\" ||\n\t\t\t\t\tsandboxMode === \"native\" ||\n\t\t\t\t\tnativePolicySandboxModes.has(sandboxMode ?? \"\")\n\t\t\t\t? \"local\"\n\t\t\t\t: \"none\";\n\tturnTracker.updateContext({\n\t\tsandboxMode: trackerSandboxMode,\n\t\tapprovalMode,\n\t\tmcpServers: mcpManager\n\t\t\t.getStatus()\n\t\t\t.servers.filter((s) => s.connected)\n\t\t\t.map((s) => s.name),\n\t\tcontextSourceCount: 5,\n\t\tfeatures: {\n\t\t\tsafeMode: Boolean(process.env.MAESTRO_SAFE_MODE),\n\t\t\tguardianEnabled: process.env.MAESTRO_GUARDIAN !== \"0\",\n\t\t\tcompactionEnabled: true,\n\t\t\thookCount: tsHookCount,\n\t\t},\n\t});\n\n\tmcpManager.on(\"connected\", () => {\n\t\tturnTracker.updateContext({\n\t\t\tmcpServers: mcpManager\n\t\t\t\t.getStatus()\n\t\t\t\t.servers.filter((s) => s.connected)\n\t\t\t\t.map((s) => s.name),\n\t\t});\n\t});\n\tmcpManager.on(\"disconnected\", () => {\n\t\tturnTracker.updateContext({\n\t\t\tmcpServers: mcpManager\n\t\t\t\t.getStatus()\n\t\t\t\t.servers.filter((s) => s.connected)\n\t\t\t\t.map((s) => s.name),\n\t\t});\n\t});\n\n\t// ── Agent event subscription ─────────────────────────────────────────────\n\n\tagent.subscribe(async (event) => {\n\t\tupdateSessionSummary(event);\n\t\t// Save messages on completion\n\t\tif (event.type === \"message_end\") {\n\t\t\tsessionManager.saveMessage(event.message);\n\t\t\tif (event.message.role === \"assistant\") {\n\t\t\t\tif (!params.scenarioReplay) {\n\t\t\t\t\tautomaticMemoryExtraction?.schedule(sessionManager.getSessionFile());\n\t\t\t\t}\n\t\t\t\tparams.scenarioRecorder?.recordAssistantMessage(event.message);\n\t\t\t}\n\n\t\t\t// Check if we should initialize session now (after first user message)\n\t\t\tif (sessionManager.shouldInitializeSession(agent.state.messages)) {\n\t\t\t\tlet activeCount: number | undefined;\n\t\t\t\ttry {\n\t\t\t\t\tconst sessions = sessionManager.loadAllSessions();\n\t\t\t\t\tactiveCount = sessions.filter(\n\t\t\t\t\t\t(s) => Date.now() - s.modified.getTime() < 60 * 60 * 1000,\n\t\t\t\t\t).length;\n\t\t\t\t} catch (error) {\n\t\t\t\t\tconsole.error(\n\t\t\t\t\t\tchalk.yellow(\n\t\t\t\t\t\t\t`[Policy] Failed to count active sessions: ${error instanceof Error ? error.message : String(error)}`,\n\t\t\t\t\t\t),\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\tconst limitCheck = checkSessionLimits(\n\t\t\t\t\t{ startedAt: new Date() },\n\t\t\t\t\tactiveCount !== undefined\n\t\t\t\t\t\t? { activeSessionCount: activeCount + 1 }\n\t\t\t\t\t\t: undefined,\n\t\t\t\t);\n\n\t\t\t\tif (!limitCheck.allowed) {\n\t\t\t\t\tconst msg = `\\n[Policy] ${limitCheck.reason}`;\n\t\t\t\t\tconsole.error(chalk.red(msg));\n\t\t\t\t\tprocess.exit(1);\n\t\t\t\t}\n\n\t\t\t\tsessionManager.startSession(agent.state);\n\t\t\t\tif (params.scenarioReplay && !scenarioReplayTagged) {\n\t\t\t\t\tsessionManager.appendCustomEntry(\"scenario_replay\", {\n\t\t\t\t\t\treplay: true,\n\t\t\t\t\t\tscenarioId: params.scenarioReplay.scenarioId,\n\t\t\t\t\t\tpath: params.scenarioReplay.path,\n\t\t\t\t\t\tmodelProvider: \"scripted-replay\",\n\t\t\t\t\t});\n\t\t\t\t\tscenarioReplayTagged = true;\n\t\t\t\t}\n\t\t\t\tif (params.scenarioRecorder && !scenarioRecordingTagged) {\n\t\t\t\t\tsessionManager.appendCustomEntry(\"scenario_recording\", {\n\t\t\t\t\t\trecording: true,\n\t\t\t\t\t\tpath: params.scenarioRecorder.getOutputPath(),\n\t\t\t\t\t});\n\t\t\t\t\tscenarioRecordingTagged = true;\n\t\t\t\t}\n\n\t\t\t\tif (enterpriseContext.isEnterprise()) {\n\t\t\t\t\tenterpriseContext.startSession(\n\t\t\t\t\t\tsessionManager.getSessionId(),\n\t\t\t\t\t\t(agent.state.model as RegisteredModel)?.id,\n\t\t\t\t\t);\n\t\t\t\t\tconst session = enterpriseContext.getSession();\n\t\t\t\t\tif (session) {\n\t\t\t\t\t\tagent.setSession({\n\t\t\t\t\t\t\tid: session.sessionId,\n\t\t\t\t\t\t\tstartedAt: session.startedAt,\n\t\t\t\t\t\t});\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tconst modelMetadata = toSessionModelMetadata(\n\t\t\tagent.state.model as RegisteredModel,\n\t\t);\n\t\tsessionManager.updateSnapshot(agent.state, modelMetadata);\n\t});\n\n\t// ── Notification hooks ───────────────────────────────────────────────────\n\n\tagent.subscribe((event) => {\n\t\tdispatchAgentNotification(\n\t\t\tevent,\n\t\t\t{\n\t\t\t\tcwd,\n\t\t\t\tsessionId: sessionManager.getSessionId(),\n\t\t\t\tmessages: agent.state.messages,\n\t\t\t},\n\t\t\t{\n\t\t\t\tsessionHookService,\n\t\t\t\tlogger,\n\t\t\t},\n\t\t);\n\t});\n\n\treturn { turnTracker };\n}\n"]}

package/dist/bootstrap/model-resolution-setup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"model-resolution-setup.d.ts","sourceRoot":"","sources":["../../src/bootstrap/model-resolution-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAQpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAG3D,MAAM,WAAW,qBAAqB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;CAClB;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CAAC,MAAM,EAAE;IAClD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,CAClB,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,OAAO,KACV,OAAO,CAAC,cAAc,CAAC,CAAC;CAC7B,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAwFjC"}
+{"version":3,"file":"model-resolution-setup.d.ts","sourceRoot":"","sources":["../../src/bootstrap/model-resolution-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAQpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAG3D,MAAM,WAAW,qBAAqB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;CAClB;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CAAC,MAAM,EAAE;IAClD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,CAClB,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,OAAO,KACV,OAAO,CAAC,cAAc,CAAC,CAAC;CAC7B,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA6FjC"}

package/dist/bootstrap/model-resolution-setup.js

@@ -69,7 +69,6 @@ export async function resolveModelFromArgs(params) {
             .sort()
             .join(", ")}`);
     }
-    await requireCredential(provider, false);
     // Resolve model with policy check
     let model;
     try {
@@ -84,6 +83,10 @@ export async function resolveModelFromArgs(params) {
     if (!model) {
         throw new Error(`Unknown model "${provider}/${modelId}". Check your models config.`);
     }
+    if (provider !== "scripted-replay" &&
+        model.api !== "openai-codex-app-server") {
+        await requireCredential(provider, false);
+    }
     return { provider, modelId, model };
 }
 //# sourceMappingURL=model-resolution-setup.js.map

package/dist/bootstrap/model-resolution-setup.js.map

@@ -1 +1 @@
-{"version":3,"file":"model-resolution-setup.js","sourceRoot":"","sources":["../../src/bootstrap/model-resolution-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EACN,aAAa,EACb,+BAA+B,EAC/B,qBAAqB,EACrB,YAAY,EACZ,YAAY,GACZ,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAQlD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAO1C;IACA,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,iBAAiB,EAAE,GAAG,MAAM,CAAC;IAClE,IAAI,QAAQ,GAAG,cAAc,CAAC;IAC9B,IAAI,OAAO,GAAG,WAAW,CAAC;IAE1B,oFAAoF;IACpF,IAAI,OAAO,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QACnD,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;QACnD,IAAI,aAAa,IAAI,YAAY,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACnE,QAAQ,GAAG,aAAa,CAAC;YACzB,OAAO,GAAG,YAAY,CAAC;YACvB,OAAO,CAAC,GAAG,CACV,KAAK,CAAC,GAAG,CAAC,iBAAiB,WAAW,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC,CAClE,CAAC;QACH,CAAC;IACF,CAAC;IAED,6BAA6B;IAC7B,IAAI,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,QAAQ,EAAE,CAAC;YACd,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;YAC7B,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;YAC3B,OAAO,CAAC,GAAG,CACV,KAAK,CAAC,GAAG,CAAC,gBAAgB,WAAW,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC,CACjE,CAAC;QACH,CAAC;IACF,CAAC;IAED,wCAAwC;IACxC,IAAI,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC1B,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,UAAU,EAAE,CAAC;YAChB,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,OAAO,eAAe,QAAQ,GAAG,CAAC,CAAC,CAAC;QAC3E,CAAC;IACF,CAAC;IAED,yBAAyB;IACzB,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,MAAM,cAAc,GAAG,+BAA+B,EAAE,CAAC;QACzD,IAAI,cAAc,EAAE,CAAC;YACpB,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACf,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC;YACpC,CAAC;YACD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC;YAClC,CAAC;QACF,CAAC;IACF,CAAC;IAED,QAAQ,KAAK,WAAW,CAAC;IACzB,OAAO,KAAK,iBAAiB,CAAC;IAE9B,oBAAoB;IACpB,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,qBAAqB,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACd,qBAAqB,QAAQ,2BAA2B,KAAK,CAAC,IAAI,CACjE,kBAAkB,CAClB;aACC,IAAI,EAAE;aACN,IAAI,CAAC,IAAI,CAAC,EAAE,CACd,CAAC;IACH,CAAC;IAED,MAAM,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAEzC,kCAAkC;IAClC,IAAI,KAAkD,CAAC;IACvD,IAAI,CAAC;QACJ,KAAK,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,KAAK,CAAC;IACb,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACd,kBAAkB,QAAQ,IAAI,OAAO,8BAA8B,CACnE,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACrC,CAAC","sourcesContent":["/**\n * Model Resolution - Provider and model resolution from CLI arguments.\n *\n * Extracts the provider/model resolution chain from main.ts Phase 8:\n * slash-format parsing, alias lookup, provider-agnostic search,\n * factory defaults, validation, and credential check.\n *\n * @module bootstrap/model-resolution-setup\n */\n\nimport chalk from \"chalk\";\nimport type { Api, Model } from \"../agent/types.js\";\nimport {\n\tfindModelById,\n\tgetFactoryDefaultModelSelection,\n\tgetSupportedProviders,\n\tresolveAlias,\n\tresolveModel,\n} from \"../models/registry.js\";\nimport type { AuthCredential } from \"../providers/auth.js\";\nimport { PolicyError } from \"../safety/policy.js\";\n\nexport interface ModelResolutionResult {\n\tprovider: string;\n\tmodelId: string;\n\tmodel: Model<Api>;\n}\n\n/**\n * Resolve provider and model from CLI args, aliases, cross-provider search,\n * and factory defaults. Validates credentials and policy.\n *\n * @throws Error with user-facing message on validation failures\n */\nexport async function resolveModelFromArgs(params: {\n\tparsedProvider?: string;\n\tparsedModel?: string;\n\trequireCredential: (\n\t\tproviderName: string,\n\t\tfatal: boolean,\n\t) => Promise<AuthCredential>;\n}): Promise<ModelResolutionResult> {\n\tconst { parsedProvider, parsedModel, requireCredential } = params;\n\tlet provider = parsedProvider;\n\tlet modelId = parsedModel;\n\n\t// Check if model uses provider/modelId format (e.g., \"bedrock/anthropic.claude-v3\")\n\tif (modelId && !provider && modelId.includes(\"/\")) {\n\t\tconst slashIndex = modelId.indexOf(\"/\");\n\t\tconst maybeProvider = modelId.slice(0, slashIndex);\n\t\tconst maybeModelId = modelId.slice(slashIndex + 1);\n\t\tif (maybeProvider && maybeModelId && !maybeProvider.includes(\".\")) {\n\t\t\tprovider = maybeProvider;\n\t\t\tmodelId = maybeModelId;\n\t\t\tconsole.log(\n\t\t\t\tchalk.dim(`Parsed model: ${parsedModel} → ${provider}/${modelId}`),\n\t\t\t);\n\t\t}\n\t}\n\n\t// Check if model is an alias\n\tif (modelId && !provider) {\n\t\tconst resolved = resolveAlias(modelId);\n\t\tif (resolved) {\n\t\t\tprovider = resolved.provider;\n\t\t\tmodelId = resolved.modelId;\n\t\t\tconsole.log(\n\t\t\t\tchalk.dim(`Using alias: ${parsedModel} → ${provider}/${modelId}`),\n\t\t\t);\n\t\t}\n\t}\n\n\t// Search for model across all providers\n\tif (modelId && !provider) {\n\t\tconst foundModel = findModelById(modelId);\n\t\tif (foundModel) {\n\t\t\tprovider = foundModel.provider;\n\t\t\tconsole.log(chalk.dim(`Found model: ${modelId} (provider: ${provider})`));\n\t\t}\n\t}\n\n\t// Apply factory defaults\n\tif (!provider || !modelId) {\n\t\tconst factoryDefault = getFactoryDefaultModelSelection();\n\t\tif (factoryDefault) {\n\t\t\tif (!provider) {\n\t\t\t\tprovider = factoryDefault.provider;\n\t\t\t}\n\t\t\tif (!modelId) {\n\t\t\t\tmodelId = factoryDefault.modelId;\n\t\t\t}\n\t\t}\n\t}\n\n\tprovider ??= \"anthropic\";\n\tmodelId ??= \"claude-opus-4-6\";\n\n\t// Validate provider\n\tconst supportedProviders = new Set(getSupportedProviders());\n\tif (!supportedProviders.has(provider)) {\n\t\tthrow new Error(\n\t\t\t`Unknown provider \"${provider}\". Supported providers: ${Array.from(\n\t\t\t\tsupportedProviders,\n\t\t\t)\n\t\t\t\t.sort()\n\t\t\t\t.join(\", \")}`,\n\t\t);\n\t}\n\n\tawait requireCredential(provider, false);\n\n\t// Resolve model with policy check\n\tlet model: ReturnType<typeof resolveModel> | undefined;\n\ttry {\n\t\tmodel = resolveModel(provider, modelId);\n\t} catch (error) {\n\t\tif (error instanceof PolicyError) {\n\t\t\tthrow new Error(error.message);\n\t\t}\n\t\tthrow error;\n\t}\n\n\tif (!model) {\n\t\tthrow new Error(\n\t\t\t`Unknown model \"${provider}/${modelId}\". Check your models config.`,\n\t\t);\n\t}\n\n\treturn { provider, modelId, model };\n}\n"]}
+{"version":3,"file":"model-resolution-setup.js","sourceRoot":"","sources":["../../src/bootstrap/model-resolution-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EACN,aAAa,EACb,+BAA+B,EAC/B,qBAAqB,EACrB,YAAY,EACZ,YAAY,GACZ,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAQlD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAO1C;IACA,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,iBAAiB,EAAE,GAAG,MAAM,CAAC;IAClE,IAAI,QAAQ,GAAG,cAAc,CAAC;IAC9B,IAAI,OAAO,GAAG,WAAW,CAAC;IAE1B,oFAAoF;IACpF,IAAI,OAAO,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QACnD,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;QACnD,IAAI,aAAa,IAAI,YAAY,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACnE,QAAQ,GAAG,aAAa,CAAC;YACzB,OAAO,GAAG,YAAY,CAAC;YACvB,OAAO,CAAC,GAAG,CACV,KAAK,CAAC,GAAG,CAAC,iBAAiB,WAAW,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC,CAClE,CAAC;QACH,CAAC;IACF,CAAC;IAED,6BAA6B;IAC7B,IAAI,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,QAAQ,EAAE,CAAC;YACd,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;YAC7B,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;YAC3B,OAAO,CAAC,GAAG,CACV,KAAK,CAAC,GAAG,CAAC,gBAAgB,WAAW,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC,CACjE,CAAC;QACH,CAAC;IACF,CAAC;IAED,wCAAwC;IACxC,IAAI,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC1B,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,UAAU,EAAE,CAAC;YAChB,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,OAAO,eAAe,QAAQ,GAAG,CAAC,CAAC,CAAC;QAC3E,CAAC;IACF,CAAC;IAED,yBAAyB;IACzB,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,MAAM,cAAc,GAAG,+BAA+B,EAAE,CAAC;QACzD,IAAI,cAAc,EAAE,CAAC;YACpB,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACf,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC;YACpC,CAAC;YACD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC;YAClC,CAAC;QACF,CAAC;IACF,CAAC;IAED,QAAQ,KAAK,WAAW,CAAC;IACzB,OAAO,KAAK,iBAAiB,CAAC;IAE9B,oBAAoB;IACpB,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,qBAAqB,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACd,qBAAqB,QAAQ,2BAA2B,KAAK,CAAC,IAAI,CACjE,kBAAkB,CAClB;aACC,IAAI,EAAE;aACN,IAAI,CAAC,IAAI,CAAC,EAAE,CACd,CAAC;IACH,CAAC;IAED,kCAAkC;IAClC,IAAI,KAAkD,CAAC;IACvD,IAAI,CAAC;QACJ,KAAK,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,KAAK,CAAC;IACb,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACd,kBAAkB,QAAQ,IAAI,OAAO,8BAA8B,CACnE,CAAC;IACH,CAAC;IAED,IACC,QAAQ,KAAK,iBAAiB;QAC9B,KAAK,CAAC,GAAG,KAAK,yBAAyB,EACtC,CAAC;QACF,MAAM,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACrC,CAAC","sourcesContent":["/**\n * Model Resolution - Provider and model resolution from CLI arguments.\n *\n * Extracts the provider/model resolution chain from main.ts Phase 8:\n * slash-format parsing, alias lookup, provider-agnostic search,\n * factory defaults, validation, and credential check.\n *\n * @module bootstrap/model-resolution-setup\n */\n\nimport chalk from \"chalk\";\nimport type { Api, Model } from \"../agent/types.js\";\nimport {\n\tfindModelById,\n\tgetFactoryDefaultModelSelection,\n\tgetSupportedProviders,\n\tresolveAlias,\n\tresolveModel,\n} from \"../models/registry.js\";\nimport type { AuthCredential } from \"../providers/auth.js\";\nimport { PolicyError } from \"../safety/policy.js\";\n\nexport interface ModelResolutionResult {\n\tprovider: string;\n\tmodelId: string;\n\tmodel: Model<Api>;\n}\n\n/**\n * Resolve provider and model from CLI args, aliases, cross-provider search,\n * and factory defaults. Validates credentials and policy.\n *\n * @throws Error with user-facing message on validation failures\n */\nexport async function resolveModelFromArgs(params: {\n\tparsedProvider?: string;\n\tparsedModel?: string;\n\trequireCredential: (\n\t\tproviderName: string,\n\t\tfatal: boolean,\n\t) => Promise<AuthCredential>;\n}): Promise<ModelResolutionResult> {\n\tconst { parsedProvider, parsedModel, requireCredential } = params;\n\tlet provider = parsedProvider;\n\tlet modelId = parsedModel;\n\n\t// Check if model uses provider/modelId format (e.g., \"bedrock/anthropic.claude-v3\")\n\tif (modelId && !provider && modelId.includes(\"/\")) {\n\t\tconst slashIndex = modelId.indexOf(\"/\");\n\t\tconst maybeProvider = modelId.slice(0, slashIndex);\n\t\tconst maybeModelId = modelId.slice(slashIndex + 1);\n\t\tif (maybeProvider && maybeModelId && !maybeProvider.includes(\".\")) {\n\t\t\tprovider = maybeProvider;\n\t\t\tmodelId = maybeModelId;\n\t\t\tconsole.log(\n\t\t\t\tchalk.dim(`Parsed model: ${parsedModel} → ${provider}/${modelId}`),\n\t\t\t);\n\t\t}\n\t}\n\n\t// Check if model is an alias\n\tif (modelId && !provider) {\n\t\tconst resolved = resolveAlias(modelId);\n\t\tif (resolved) {\n\t\t\tprovider = resolved.provider;\n\t\t\tmodelId = resolved.modelId;\n\t\t\tconsole.log(\n\t\t\t\tchalk.dim(`Using alias: ${parsedModel} → ${provider}/${modelId}`),\n\t\t\t);\n\t\t}\n\t}\n\n\t// Search for model across all providers\n\tif (modelId && !provider) {\n\t\tconst foundModel = findModelById(modelId);\n\t\tif (foundModel) {\n\t\t\tprovider = foundModel.provider;\n\t\t\tconsole.log(chalk.dim(`Found model: ${modelId} (provider: ${provider})`));\n\t\t}\n\t}\n\n\t// Apply factory defaults\n\tif (!provider || !modelId) {\n\t\tconst factoryDefault = getFactoryDefaultModelSelection();\n\t\tif (factoryDefault) {\n\t\t\tif (!provider) {\n\t\t\t\tprovider = factoryDefault.provider;\n\t\t\t}\n\t\t\tif (!modelId) {\n\t\t\t\tmodelId = factoryDefault.modelId;\n\t\t\t}\n\t\t}\n\t}\n\n\tprovider ??= \"anthropic\";\n\tmodelId ??= \"claude-opus-4-6\";\n\n\t// Validate provider\n\tconst supportedProviders = new Set(getSupportedProviders());\n\tif (!supportedProviders.has(provider)) {\n\t\tthrow new Error(\n\t\t\t`Unknown provider \"${provider}\". Supported providers: ${Array.from(\n\t\t\t\tsupportedProviders,\n\t\t\t)\n\t\t\t\t.sort()\n\t\t\t\t.join(\", \")}`,\n\t\t);\n\t}\n\n\t// Resolve model with policy check\n\tlet model: ReturnType<typeof resolveModel> | undefined;\n\ttry {\n\t\tmodel = resolveModel(provider, modelId);\n\t} catch (error) {\n\t\tif (error instanceof PolicyError) {\n\t\t\tthrow new Error(error.message);\n\t\t}\n\t\tthrow error;\n\t}\n\n\tif (!model) {\n\t\tthrow new Error(\n\t\t\t`Unknown model \"${provider}/${modelId}\". Check your models config.`,\n\t\t);\n\t}\n\n\tif (\n\t\tprovider !== \"scripted-replay\" &&\n\t\tmodel.api !== \"openai-codex-app-server\"\n\t) {\n\t\tawait requireCredential(provider, false);\n\t}\n\n\treturn { provider, modelId, model };\n}\n"]}

package/dist/bootstrap/tools-setup.d.ts

@@ -5,7 +5,7 @@
  *
  * @module bootstrap/tools-setup
  */
-import type { AgentTool } from "../agent/types.js";
+import type { AgentTool, Api } from "../agent/types.js";
 import { type SandboxMode, createSandbox } from "../sandbox/index.js";
 export interface ToolsSetupResult {
     /** All tools (base + inline) */
@@ -27,6 +27,7 @@ export interface ToolsSetupResult {
 export declare function createToolsAndSandbox(params: {
     parsedTools?: string[];
     parsedSandbox?: string;
+    modelApi?: Api | string;
     cwd: string;
 }): Promise<ToolsSetupResult>;
 //# sourceMappingURL=tools-setup.d.ts.map

package/dist/bootstrap/tools-setup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tools-setup.d.ts","sourceRoot":"","sources":["../../src/bootstrap/tools-setup.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EACN,KAAK,WAAW,EAChB,aAAa,EAEb,MAAM,qBAAqB,CAAC;AAI7B,MAAM,WAAW,gBAAgB;IAChC,gCAAgC;IAChC,QAAQ,EAAE,SAAS,EAAE,CAAC;IACtB,uDAAuD;IACvD,SAAS,EAAE,SAAS,EAAE,CAAC;IACvB,oCAAoC;IACpC,OAAO,EAAE,UAAU,CAAC,OAAO,aAAa,CAAC,SAAS,OAAO,CAAC,MAAM,CAAC,CAAC,GAC/D,CAAC,GACD,KAAK,GAAG,SAAS,CAAC;IACrB,4BAA4B;IAC5B,WAAW,EAAE,WAAW,GAAG,SAAS,CAAC;IACrC,0DAA0D;IAC1D,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,CAAC,MAAM,EAAE;IACnD,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,EAAE,MAAM,CAAC;CACZ,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA8C5B"}
+{"version":3,"file":"tools-setup.d.ts","sourceRoot":"","sources":["../../src/bootstrap/tools-setup.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AAKxD,OAAO,EACN,KAAK,WAAW,EAChB,aAAa,EAEb,MAAM,qBAAqB,CAAC;AAI7B,MAAM,WAAW,gBAAgB;IAChC,gCAAgC;IAChC,QAAQ,EAAE,SAAS,EAAE,CAAC;IACtB,uDAAuD;IACvD,SAAS,EAAE,SAAS,EAAE,CAAC;IACvB,oCAAoC;IACpC,OAAO,EAAE,UAAU,CAAC,OAAO,aAAa,CAAC,SAAS,OAAO,CAAC,MAAM,CAAC,CAAC,GAC/D,CAAC,GACD,KAAK,GAAG,SAAS,CAAC;IACrB,4BAA4B;IAC5B,WAAW,EAAE,WAAW,GAAG,SAAS,CAAC;IACrC,0DAA0D;IAC1D,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,CAAC,MAAM,EAAE;IACnD,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;CACZ,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAgD5B"}

package/dist/bootstrap/tools-setup.js

@@ -6,6 +6,7 @@
  * @module bootstrap/tools-setup
  */
 import chalk from "chalk";
+import { isCodexAppServerApi, selectCodexDefaultTools, } from "../codex/compatibility.js";
 import { createSandbox, disposeSandbox, } from "../sandbox/index.js";
 import { codingTools, filterTools, toolRegistry } from "../tools/index.js";
 import { loadInlineTools } from "../tools/inline-tools.js";
@@ -15,7 +16,7 @@ import { loadInlineTools } from "../tools/inline-tools.js";
  * @throws Error if --tools filter matches no tools
  */
 export async function createToolsAndSandbox(params) {
-    const { parsedTools, parsedSandbox, cwd } = params;
+    const { parsedTools, parsedSandbox, modelApi, cwd } = params;
     // Apply --tools filter if user specified a subset
     let baseTools = codingTools;
     if (parsedTools && parsedTools.length > 0) {
@@ -27,6 +28,9 @@ export async function createToolsAndSandbox(params) {
         baseTools = filteredTools;
         console.log(chalk.dim(`Tools restricted to: ${filteredTools.map((t) => t.name).join(", ")}`));
     }
+    else if (isCodexAppServerApi(modelApi)) {
+        baseTools = selectCodexDefaultTools(codingTools);
+    }
     // Load inline tools from .maestro/tools.json and ~/.maestro/tools.json
     const inlineTools = loadInlineTools();
     const allTools = [...baseTools, ...inlineTools];

package/dist/bootstrap/tools-setup.js.map

@@ -1 +1 @@
-{"version":3,"file":"tools-setup.js","sourceRoot":"","sources":["../../src/bootstrap/tools-setup.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAEN,aAAa,EACb,cAAc,GACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAiB3D;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,MAI3C;IACA,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;IAEnD,kDAAkD;IAClD,IAAI,SAAS,GAAG,WAAW,CAAC;IAC5B,IAAI,WAAW,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3C,MAAM,aAAa,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;QAC/C,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACd,0CAA0C,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBACnE,oBAAoB,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAClE,CAAC;QACH,CAAC;QACD,SAAS,GAAG,aAAa,CAAC;QAC1B,OAAO,CAAC,GAAG,CACV,KAAK,CAAC,GAAG,CACR,wBAAwB,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrE,CACD,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,MAAM,WAAW,GAAG,eAAe,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,CAAC,GAAG,SAAS,EAAE,GAAG,WAAW,CAAC,CAAC;IAEhD,0DAA0D;IAC1D,MAAM,WAAW,GAAG,CAAC,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAE1D,CAAC;IACb,MAAM,OAAO,GAAG,WAAW;QAC1B,CAAC,CAAC,MAAM,aAAa,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;QACjD,CAAC,CAAC,SAAS,CAAC;IAEb,MAAM,cAAc,GAAG,OAAO;QAC7B,CAAC,CAAC,KAAK,IAAI,EAAE;YACX,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;QACF,CAAC,CAAC,SAAS,CAAC;IAEb,OAAO;QACN,QAAQ;QACR,SAAS;QACT,OAAO;QACP,WAAW;QACX,cAAc,EAAE,cAAc;KAC9B,CAAC;AACH,CAAC","sourcesContent":["/**\n * Tools & Sandbox Setup - Tool filtering and sandbox initialization.\n *\n * Extracts tool registry filtering and sandbox creation from main.ts Phase 10.\n *\n * @module bootstrap/tools-setup\n */\n\nimport chalk from \"chalk\";\nimport type { AgentTool } from \"../agent/types.js\";\nimport {\n\ttype SandboxMode,\n\tcreateSandbox,\n\tdisposeSandbox,\n} from \"../sandbox/index.js\";\nimport { codingTools, filterTools, toolRegistry } from \"../tools/index.js\";\nimport { loadInlineTools } from \"../tools/inline-tools.js\";\n\nexport interface ToolsSetupResult {\n\t/** All tools (base + inline) */\n\tallTools: AgentTool[];\n\t/** Base tools after filtering (used for MCP merges) */\n\tbaseTools: AgentTool[];\n\t/** Sandbox instance if requested */\n\tsandbox: ReturnType<typeof createSandbox> extends Promise<infer T>\n\t\t? T\n\t\t: never | undefined;\n\t/** Resolved sandbox mode */\n\tsandboxMode: SandboxMode | undefined;\n\t/** Cleanup function for sandbox (call on process exit) */\n\tdisposeSandbox?: () => Promise<void>;\n}\n\n/**\n * Build the tool set and optionally create a sandbox.\n *\n * @throws Error if --tools filter matches no tools\n */\nexport async function createToolsAndSandbox(params: {\n\tparsedTools?: string[];\n\tparsedSandbox?: string;\n\tcwd: string;\n}): Promise<ToolsSetupResult> {\n\tconst { parsedTools, parsedSandbox, cwd } = params;\n\n\t// Apply --tools filter if user specified a subset\n\tlet baseTools = codingTools;\n\tif (parsedTools && parsedTools.length > 0) {\n\t\tconst filteredTools = filterTools(parsedTools);\n\t\tif (filteredTools.length === 0) {\n\t\t\tthrow new Error(\n\t\t\t\t`No valid tools matched --tools filter: ${parsedTools.join(\", \")}. ` +\n\t\t\t\t\t`Available tools: ${Object.keys(toolRegistry).sort().join(\", \")}`,\n\t\t\t);\n\t\t}\n\t\tbaseTools = filteredTools;\n\t\tconsole.log(\n\t\t\tchalk.dim(\n\t\t\t\t`Tools restricted to: ${filteredTools.map((t) => t.name).join(\", \")}`,\n\t\t\t),\n\t\t);\n\t}\n\n\t// Load inline tools from .maestro/tools.json and ~/.maestro/tools.json\n\tconst inlineTools = loadInlineTools();\n\tconst allTools = [...baseTools, ...inlineTools];\n\n\t// Create sandbox for isolated tool execution if requested\n\tconst sandboxMode = (parsedSandbox ?? process.env.MAESTRO_SANDBOX_MODE) as\n\t\t| SandboxMode\n\t\t| undefined;\n\tconst sandbox = sandboxMode\n\t\t? await createSandbox({ mode: sandboxMode, cwd })\n\t\t: undefined;\n\n\tconst cleanupSandbox = sandbox\n\t\t? async () => {\n\t\t\t\tawait disposeSandbox(sandbox);\n\t\t\t}\n\t\t: undefined;\n\n\treturn {\n\t\tallTools,\n\t\tbaseTools,\n\t\tsandbox,\n\t\tsandboxMode,\n\t\tdisposeSandbox: cleanupSandbox,\n\t};\n}\n"]}
+{"version":3,"file":"tools-setup.js","sourceRoot":"","sources":["../../src/bootstrap/tools-setup.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EACN,mBAAmB,EACnB,uBAAuB,GACvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAEN,aAAa,EACb,cAAc,GACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAiB3D;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,MAK3C;IACA,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;IAE7D,kDAAkD;IAClD,IAAI,SAAS,GAAG,WAAW,CAAC;IAC5B,IAAI,WAAW,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3C,MAAM,aAAa,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;QAC/C,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACd,0CAA0C,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBACnE,oBAAoB,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAClE,CAAC;QACH,CAAC;QACD,SAAS,GAAG,aAAa,CAAC;QAC1B,OAAO,CAAC,GAAG,CACV,KAAK,CAAC,GAAG,CACR,wBAAwB,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrE,CACD,CAAC;IACH,CAAC;SAAM,IAAI,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1C,SAAS,GAAG,uBAAuB,CAAC,WAAW,CAAC,CAAC;IAClD,CAAC;IAED,uEAAuE;IACvE,MAAM,WAAW,GAAG,eAAe,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,CAAC,GAAG,SAAS,EAAE,GAAG,WAAW,CAAC,CAAC;IAEhD,0DAA0D;IAC1D,MAAM,WAAW,GAAG,CAAC,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAE1D,CAAC;IACb,MAAM,OAAO,GAAG,WAAW;QAC1B,CAAC,CAAC,MAAM,aAAa,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;QACjD,CAAC,CAAC,SAAS,CAAC;IAEb,MAAM,cAAc,GAAG,OAAO;QAC7B,CAAC,CAAC,KAAK,IAAI,EAAE;YACX,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;QACF,CAAC,CAAC,SAAS,CAAC;IAEb,OAAO;QACN,QAAQ;QACR,SAAS;QACT,OAAO;QACP,WAAW;QACX,cAAc,EAAE,cAAc;KAC9B,CAAC;AACH,CAAC","sourcesContent":["/**\n * Tools & Sandbox Setup - Tool filtering and sandbox initialization.\n *\n * Extracts tool registry filtering and sandbox creation from main.ts Phase 10.\n *\n * @module bootstrap/tools-setup\n */\n\nimport chalk from \"chalk\";\nimport type { AgentTool, Api } from \"../agent/types.js\";\nimport {\n\tisCodexAppServerApi,\n\tselectCodexDefaultTools,\n} from \"../codex/compatibility.js\";\nimport {\n\ttype SandboxMode,\n\tcreateSandbox,\n\tdisposeSandbox,\n} from \"../sandbox/index.js\";\nimport { codingTools, filterTools, toolRegistry } from \"../tools/index.js\";\nimport { loadInlineTools } from \"../tools/inline-tools.js\";\n\nexport interface ToolsSetupResult {\n\t/** All tools (base + inline) */\n\tallTools: AgentTool[];\n\t/** Base tools after filtering (used for MCP merges) */\n\tbaseTools: AgentTool[];\n\t/** Sandbox instance if requested */\n\tsandbox: ReturnType<typeof createSandbox> extends Promise<infer T>\n\t\t? T\n\t\t: never | undefined;\n\t/** Resolved sandbox mode */\n\tsandboxMode: SandboxMode | undefined;\n\t/** Cleanup function for sandbox (call on process exit) */\n\tdisposeSandbox?: () => Promise<void>;\n}\n\n/**\n * Build the tool set and optionally create a sandbox.\n *\n * @throws Error if --tools filter matches no tools\n */\nexport async function createToolsAndSandbox(params: {\n\tparsedTools?: string[];\n\tparsedSandbox?: string;\n\tmodelApi?: Api | string;\n\tcwd: string;\n}): Promise<ToolsSetupResult> {\n\tconst { parsedTools, parsedSandbox, modelApi, cwd } = params;\n\n\t// Apply --tools filter if user specified a subset\n\tlet baseTools = codingTools;\n\tif (parsedTools && parsedTools.length > 0) {\n\t\tconst filteredTools = filterTools(parsedTools);\n\t\tif (filteredTools.length === 0) {\n\t\t\tthrow new Error(\n\t\t\t\t`No valid tools matched --tools filter: ${parsedTools.join(\", \")}. ` +\n\t\t\t\t\t`Available tools: ${Object.keys(toolRegistry).sort().join(\", \")}`,\n\t\t\t);\n\t\t}\n\t\tbaseTools = filteredTools;\n\t\tconsole.log(\n\t\t\tchalk.dim(\n\t\t\t\t`Tools restricted to: ${filteredTools.map((t) => t.name).join(\", \")}`,\n\t\t\t),\n\t\t);\n\t} else if (isCodexAppServerApi(modelApi)) {\n\t\tbaseTools = selectCodexDefaultTools(codingTools);\n\t}\n\n\t// Load inline tools from .maestro/tools.json and ~/.maestro/tools.json\n\tconst inlineTools = loadInlineTools();\n\tconst allTools = [...baseTools, ...inlineTools];\n\n\t// Create sandbox for isolated tool execution if requested\n\tconst sandboxMode = (parsedSandbox ?? process.env.MAESTRO_SANDBOX_MODE) as\n\t\t| SandboxMode\n\t\t| undefined;\n\tconst sandbox = sandboxMode\n\t\t? await createSandbox({ mode: sandboxMode, cwd })\n\t\t: undefined;\n\n\tconst cleanupSandbox = sandbox\n\t\t? async () => {\n\t\t\t\tawait disposeSandbox(sandbox);\n\t\t\t}\n\t\t: undefined;\n\n\treturn {\n\t\tallTools,\n\t\tbaseTools,\n\t\tsandbox,\n\t\tsandboxMode,\n\t\tdisposeSandbox: cleanupSandbox,\n\t};\n}\n"]}

package/dist/cli/args.d.ts

@@ -13,7 +13,9 @@ export interface Args {
     continue?: boolean;
     resume?: boolean;
     help?: boolean;
+    helpHidden?: boolean;
     version?: boolean;
+    listModesAll?: boolean;
     mode?: Mode;
     /** Run in headless mode for native TUI communication */
     headless?: boolean;
@@ -24,13 +26,14 @@ export interface Args {
     subcommand?: string;
     /** Raw arguments owned by command-group handlers. */
     commandArgs?: string[];
+    contextLiveMcp?: boolean;
     approvalMode?: "auto" | "prompt" | "fail";
     authMode?: "auto" | "api-key" | "claude";
     force?: boolean;
     execJson?: boolean;
     execFullAuto?: boolean;
     execReadOnly?: boolean;
-    /** Sandbox mode: "docker", "local", "native", or "none" */
+    /** Sandbox backend or policy mode */
     sandbox?: string;
     execOutputSchema?: string;
     execOutputLast?: string;
@@ -49,6 +52,11 @@ export interface Args {
     composer?: string;
     exportFormat?: string;
     redactSecrets?: boolean;
+    junitPath?: string;
+    /** Open a real agent session backed by a scripted replay scenario. */
+    replayScenarioPath?: string;
+    /** Record assistant turns into a scripted replay scenario file. */
+    recordScenarioPath?: string;
 }
 export declare function parseArgs(args: string[]): Args;
 //# sourceMappingURL=args.d.ts.map

package/dist/cli/args.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../../src/cli/args.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,UAAU,CAAC;AAExD,MAAM,WAAW,IAAI;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,4DAA4D;IAC5D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,wDAAwD;IACxD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qDAAqD;IACrD,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC1C,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAC;IACzC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,sCAAsC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+CAA+C;IAC/C,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,8CAA8C;IAC9C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,OAAO,CAAC;CACxB;AAsCD,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAyL9C"}
+{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../../src/cli/args.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,UAAU,CAAC;AAExD,MAAM,WAAW,IAAI;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,4DAA4D;IAC5D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,wDAAwD;IACxD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qDAAqD;IACrD,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC1C,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAC;IACzC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,qCAAqC;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,sCAAsC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+CAA+C;IAC/C,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,8CAA8C;IAC9C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sEAAsE;IACtE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,mEAAmE;IACnE,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAwGD,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAyP9C"}