@evalops/maestro 0.10.42 → 0.10.43

package/dist/cli.js

@@ -36816,7 +36816,7 @@ import { dirname as dirname21 } from "node:path";
 import { Writable } from "node:stream";
 import { pipeline as pipeline2 } from "node:stream/promises";
 import { createGzip } from "node:zlib";
-import { execSync } from "node:child_process";
+import { spawnSync as spawnSync2 } from "node:child_process";
 import { readFileSync as readFileSync27 } from "node:fs";
 import {
   closeSync as closeSync2,
@@ -36829,7 +36829,7 @@ import {
   unlinkSync as unlinkSync3
 } from "node:fs";
 import { gunzipSync } from "node:zlib";
-import { execSync as execSync2, spawnSync as spawnSync2 } from "node:child_process";
+import { execSync, spawnSync as spawnSync3 } from "node:child_process";
 import { existsSync as existsSync32, readFileSync as readFileSync29, readdirSync as readdirSync8 } from "node:fs";
 import { existsSync as existsSync33 } from "node:fs";
 import { resolve as resolvePath2 } from "node:path";
@@ -37021,7 +37021,7 @@ import { existsSync as existsSync55, readFileSync as readFileSync45 } from "node
 import { join as join52, resolve as resolve32 } from "node:path";
 import { existsSync as existsSync56, mkdirSync as mkdirSync19, readFileSync as readFileSync46, writeFileSync as writeFileSync17 } from "node:fs";
 import { dirname as dirname31, join as join53, resolve as resolve33 } from "node:path";
-import { spawnSync as spawnSync3 } from "node:child_process";
+import { spawnSync as spawnSync4 } from "node:child_process";
 import {
   copyFileSync,
   existsSync as existsSync57,
@@ -37035,7 +37035,7 @@ import {
 import os3 from "node:os";
 import { dirname as dirname32, join as join54, resolve as resolve34 } from "node:path";
 import chalk23 from "chalk";
-import { spawn as spawn8, spawnSync as spawnSync4 } from "node:child_process";
+import { spawn as spawn8, spawnSync as spawnSync5 } from "node:child_process";
 import { isAbsolute as isAbsolute15, normalize as normalize3, resolve as resolve35 } from "node:path";
 import { Spacer as Spacer8, Text as Text9 } from "@evalops/tui";
 import chalk24 from "chalk";
@@ -37077,7 +37077,7 @@ import { join as join58 } from "node:path";
 import { Spacer as Spacer12, Text as Text13 } from "@evalops/tui";
 import chalk28 from "chalk";
 import { Spacer as Spacer13, Text as Text14 } from "@evalops/tui";
-import { spawn as spawn9, spawnSync as spawnSync5 } from "node:child_process";
+import { spawn as spawn9, spawnSync as spawnSync6 } from "node:child_process";
 import { Spacer as Spacer14, Text as Text15 } from "@evalops/tui";
 import chalk29 from "chalk";
 import chalk30 from "chalk";
@@ -37086,7 +37086,7 @@ import { spawn as spawn10 } from "node:child_process";
 import { readFileSync as readFileSync48 } from "node:fs";
 import { join as join59 } from "node:path";
 import { Spacer as Spacer16, Text as Text17 } from "@evalops/tui";
-import { spawnSync as spawnSync6 } from "node:child_process";
+import { spawnSync as spawnSync7 } from "node:child_process";
 import { join as join60, relative as relative7, resolve as resolve37, sep as sep6 } from "node:path";
 import { SelectList } from "@evalops/tui";
 import { Container as Container2, Text as Text18 } from "@evalops/tui";
@@ -37101,7 +37101,7 @@ import {
 } from "@evalops/tui";
 import { Spacer as Spacer19 } from "@evalops/tui";
 import chalk34 from "chalk";
-import { spawnSync as spawnSync7 } from "node:child_process";
+import { spawnSync as spawnSync8 } from "node:child_process";
 import fs32 from "node:fs";
 import os4 from "node:os";
 import path22 from "node:path";
@@ -37223,7 +37223,7 @@ import { existsSync as existsSync69, mkdirSync as mkdirSync27, readFileSync as r
 import { join as join67 } from "node:path";
 import { parse as parseYaml2 } from "yaml";
 import chalk43 from "chalk";
-import { execSync as execSync3 } from "node:child_process";
+import { execSync as execSync2 } from "node:child_process";
 import {
   existsSync as existsSync70,
   mkdirSync as mkdirSync28,
@@ -37329,7 +37329,7 @@ import AjvModule2, {
   Ajv as AjvClass2
 } from "ajv";
 import chalk58 from "chalk";
-import { spawnSync as spawnSync8 } from "node:child_process";
+import { spawnSync as spawnSync9 } from "node:child_process";
 import { realpathSync as realpathSync8 } from "node:fs";
 import { isAbsolute as isAbsolute20, relative as relative12, resolve as resolve43, sep as sep8 } from "node:path";
 import { spawn as spawn12 } from "node:child_process";
@@ -37457,7 +37457,7 @@ import ExcelJS from "exceljs";
 import JSZip from "jszip";
 import mammoth from "mammoth";
 import { Type as Type19 } from "@sinclair/typebox";
-import { spawnSync as spawnSync9 } from "node:child_process";
+import { spawnSync as spawnSync10 } from "node:child_process";
 import {
   chmodSync as chmodSync2,
   createWriteStream as createWriteStream3,
@@ -37473,7 +37473,7 @@ import { join as join79 } from "node:path";
 import { Readable as Readable2 } from "node:stream";
 import { finished as finished2 } from "node:stream/promises";
 import chalk62 from "chalk";
-import { spawnSync as spawnSync10 } from "node:child_process";
+import { spawnSync as spawnSync11 } from "node:child_process";
 import { existsSync as existsSync90, readFileSync as readFileSync68, statSync as statSync28 } from "node:fs";
 import {
   dirname as dirname50,
@@ -37653,7 +37653,7 @@ import { stat as stat9 } from "node:fs/promises";
 import { Type as Type43 } from "@sinclair/typebox";
 import { existsSync as existsSync98, readFileSync as readFileSync76, writeFileSync as writeFileSync37 } from "node:fs";
 import { resolve as resolve58 } from "node:path";
-import { spawnSync as spawnSync11 } from "node:child_process";
+import { spawnSync as spawnSync12 } from "node:child_process";
 import { Type as Type44 } from "@sinclair/typebox";
 import {
   ComposerPendingRequestResumeRequestSchema
@@ -37668,7 +37668,7 @@ import { existsSync as existsSync101, mkdirSync as mkdirSync38, readFileSync as
 import { dirname as dirname57, resolve as resolve61 } from "node:path";
 import { randomUUID as randomUUID19 } from "node:crypto";
 import { sql as sql10 } from "drizzle-orm";
-import { execSync as execSync4 } from "node:child_process";
+import { execSync as execSync3 } from "node:child_process";
 import { readFileSync as readFileSync79 } from "node:fs";
 import { join as join84 } from "node:path";
 import {
@@ -37677,7 +37677,7 @@ import {
   reconstructArtifactsFromMessages as reconstructArtifactStateFromMessages
 } from "@evalops/contracts";
 import { lookup as lookupMimeType2 } from "mime-types";
-import { execSync as execSync5 } from "node:child_process";
+import { execSync as execSync4 } from "node:child_process";
 import { existsSync as existsSync102 } from "node:fs";
 import { join as join85 } from "node:path";
 import { existsSync as existsSync103 } from "node:fs";
@@ -37719,7 +37719,7 @@ import { mkdirSync as mkdirSync40, writeFileSync as writeFileSync41 } from "node
 import { dirname as dirname60, isAbsolute as isAbsolute28, resolve as resolve70 } from "node:path";
 import { MAESTRO_SCRIPTED_SCENARIO_SCHEMA as MAESTRO_SCRIPTED_SCENARIO_SCHEMA2 } from "@evalops/contracts";
 import chalk68 from "chalk";
-import { spawnSync as spawnSync12 } from "node:child_process";
+import { spawnSync as spawnSync13 } from "node:child_process";
 import {
   existsSync as existsSync108,
   mkdirSync as mkdirSync41,
@@ -45582,7 +45582,7 @@ var init_subagent_dispatch_table = __esm2(() => {
         laneId: "test-runner",
         skillId: "maestro.subagent.test-runner",
         displayName: "Maestro test runner subagent",
-        description: "Delegate test execution, failure triage, and verification evidence capture to a target-owned Maestro child agent.",
+        description: "Delegate test execution, failure triage, and result artifact capture to a target-owned Maestro child agent.",
         tags: ["maestro", "subagent", "test", "ci"],
         typeAliases: ["test", "qa", "ci", "ci-monitor", "test-runner"],
         capabilityAliases: [
@@ -45730,7 +45730,7 @@ function laneSkillPolicy(laneId) {
         requiredContextGrants: [
           "repo:read",
           "pull-request:read",
-          "evidence:read"
+          "artifact:read"
         ],
         requiredArtifactKinds: ["review.summary"],
         optionalArtifactKinds: ["risk.finding", "test.plan"],
@@ -45741,7 +45741,7 @@ function laneSkillPolicy(laneId) {
         requiredContextGrants: [
           "repo:read",
           "tool:execute-tests",
-          "evidence:write"
+          "artifact:write"
         ],
         requiredArtifactKinds: ["test.report"],
         optionalArtifactKinds: ["failure.triage", "coverage.summary"],
@@ -45749,9 +45749,9 @@ function laneSkillPolicy(laneId) {
       };
     case "repo-explorer":
       return {
-        requiredContextGrants: ["repo:read", "evidence:write"],
+        requiredContextGrants: ["repo:read", "context:index:write"],
         requiredArtifactKinds: ["repo.map"],
-        optionalArtifactKinds: ["evidence.index"],
+        optionalArtifactKinds: ["context.index"],
         allowedTaskClasses: ["repo.inspect", "context.gathering"]
       };
     case "release-shepherd":
@@ -45760,9 +45760,10 @@ function laneSkillPolicy(laneId) {
           "repo:read",
           "pull-request:write",
           "deploy:read",
-          "evidence:write"
+          "artifact:write",
+          "runtime:events:read"
         ],
-        requiredArtifactKinds: ["release.evidence"],
+        requiredArtifactKinds: ["release.summary"],
         optionalArtifactKinds: ["ci.summary", "deploy.status"],
         allowedTaskClasses: ["release.follow-through", "deployment.smoke"]
       };
@@ -45770,7 +45771,7 @@ function laneSkillPolicy(laneId) {
       return {
         requiredContextGrants: ["repo:read"],
         requiredArtifactKinds: ["subagent.summary"],
-        optionalArtifactKinds: ["evidence.index"],
+        optionalArtifactKinds: ["context.index"],
         allowedTaskClasses: ["agent.delegation"]
       };
   }
@@ -45835,7 +45836,7 @@ function inspectA2ATelemetry(input) {
   return {
     schema: A2A_TELEMETRY_INSPECTION_SCHEMA,
     swarmId: input.swarmId,
-    complete: lanes.length > 0 && missingTelemetryLanes === 0 && orderingAnomalyLanes === 0 && lanes.every((lane) => lane.missingEvidence.length === 0) && input.audit?.complete !== false,
+    complete: lanes.length > 0 && missingTelemetryLanes === 0 && orderingAnomalyLanes === 0 && lanes.every((lane) => lane.missingSignals.length === 0) && input.audit?.complete !== false,
     counts: {
       events: events.length,
       lanes: lanes.length,
@@ -45866,7 +45867,7 @@ function inspectLane(laneId, events, auditLane) {
     timing,
     orderingAnomalies: orderingAnomalies(events, timing),
     missingEventTypes: missingEventTypes(events, eventTypes),
-    missingEvidence: auditLane?.missingEvidence ?? []
+    missingSignals: auditLane?.missingSignals ?? []
   };
 }
 function mergeLaneEventData(events) {
@@ -45998,7 +45999,7 @@ function parseInspectionTimeMs(value) {
 function unique2(values) {
   return [...new Set(values)];
 }
-var A2A_TELEMETRY_INSPECTION_SCHEMA = "evalops.maestro.a2a-telemetry-inspection.v1";
+var A2A_TELEMETRY_INSPECTION_SCHEMA = "evalops.maestro.a2a-telemetry-inspection.v2";
 var PEER_SELECTED = "maestro.events.a2a.peer.selected";
 var TASK_DISPATCHED = "maestro.events.a2a.task.dispatched";
 var TASK_COMPLETED = "maestro.events.a2a.task.completed";
@@ -91403,9 +91404,14 @@ var ResourceMonitor = class {
   }
   readUsageFromPs(pid) {
     try {
-      const output = execSync(`ps -o rss= -o time= -p ${pid}`, {
-        encoding: "utf-8"
-      }).trim().split(/\s+/).filter(Boolean);
+      const result2 = spawnSync2("ps", ["-o", "rss=", "-o", "time=", "-p", String(pid)], {
+        encoding: "utf-8",
+        stdio: ["ignore", "pipe", "pipe"]
+      });
+      if (result2.error || result2.status !== 0) {
+        return null;
+      }
+      const output = result2.stdout.trim().split(/\s+/).filter(Boolean);
       if (output.length < 2) {
         return null;
       }
@@ -91809,7 +91815,7 @@ function getDescendantPidsLinux(pid) {
 function getDescendantPidsMacOS(pid) {
   const descendants = [];
   try {
-    const result2 = spawnSync2("pgrep", ["-P", String(pid)], {
+    const result2 = spawnSync3("pgrep", ["-P", String(pid)], {
       encoding: "utf-8",
       timeout: 5e3
     });
@@ -91840,7 +91846,7 @@ function getDescendantPids(pid) {
   }
   if (process.platform === "win32") {
     try {
-      const result2 = execSync2(`wmic process where parentprocessid=${pid} get processid`, {
+      const result2 = execSync(`wmic process where parentprocessid=${pid} get processid`, {
         encoding: "utf-8",
         timeout: 5e3,
         stdio: ["pipe", "pipe", "pipe"]
@@ -107970,11 +107976,11 @@ var AutoVerifyService = class {
     this.lastTestRun = Date.now();
     const startTime = Date.now();
     try {
-      const { execSync: execSync32 } = await import("node:child_process");
+      const { execSync: execSync22 } = await import("node:child_process");
       let output;
       let success;
       try {
-        output = execSync32(command, {
+        output = execSync22(command, {
           cwd: this.cwd,
           timeout: timeoutMs,
           encoding: "utf-8",
@@ -113500,7 +113506,7 @@ function appendSpawnFailureDetails(stderr, command, error, signal, timeoutMs) {
 `);
 }
 function commandExists(command, cwd) {
-  const result2 = spawnSync3(command, ["--version"], {
+  const result2 = spawnSync4(command, ["--version"], {
     cwd,
     stdio: "pipe",
     encoding: "utf-8"
@@ -113510,7 +113516,7 @@ function commandExists(command, cwd) {
 function runCommand(command, args, cwd, timeoutMs = DEFAULT_TIMEOUT_MS12, env) {
   const started = Date.now();
   try {
-    const result2 = spawnSync3(command, args, {
+    const result2 = spawnSync4(command, args, {
       cwd,
       encoding: "utf-8",
       env: env ? { ...process.env, ...env } : process.env,
@@ -114737,7 +114743,7 @@ Reverted changes in:
   }
   notifyFileChanges() {
     try {
-      const result2 = spawnSync4("git", ["status", "-sb"], {
+      const result2 = spawnSync5("git", ["status", "-sb"], {
         cwd: process.cwd(),
         encoding: "utf-8"
       });
@@ -114815,7 +114821,7 @@ Use /plan add <goal> :: <task> to track follow-ups.`, "info");
   }
   runGitCommand(args) {
     try {
-      const result2 = spawnSync4("git", args, {
+      const result2 = spawnSync5("git", args, {
         cwd: process.cwd(),
         encoding: "utf-8"
       });
@@ -117266,7 +117272,7 @@ ${tail}`);
     }
     runOllama(args) {
       try {
-        const result2 = spawnSync5("ollama", args, {
+        const result2 = spawnSync6("ollama", args, {
           cwd: process.cwd(),
           encoding: "utf-8"
         });
@@ -117381,7 +117387,7 @@ ${lines.join(`
         const cmd = args[0];
         if (!cmd)
           return;
-        const result2 = spawnSync5(cmd, args.slice(1), {
+        const result2 = spawnSync6(cmd, args.slice(1), {
           cwd: process.cwd(),
           encoding: "utf-8"
         });
@@ -118193,7 +118199,7 @@ function setCacheEntry(cwd, entry2) {
   pruneCache(entry2.cachedAt);
 }
 function runRgFiles(cwd) {
-  const result2 = spawnSync6("rg", ["--files"], {
+  const result2 = spawnSync7("rg", ["--files"], {
     cwd,
     encoding: "utf-8",
     stdio: ["ignore", "pipe", "pipe"]
@@ -118225,7 +118231,7 @@ function runFindFiles(cwd) {
     pruneArgs.push("-path", `./${dir}`);
   }
   pruneArgs.push(")", "-prune", "-o", "-type", "f", "-print");
-  const result2 = spawnSync6("find", [".", ...pruneArgs], {
+  const result2 = spawnSync7("find", [".", ...pruneArgs], {
     cwd,
     encoding: "utf-8",
     stdio: ["ignore", "pipe", "pipe"]
@@ -118237,7 +118243,7 @@ function runFindFiles(cwd) {
   return [];
 }
 function runGitFiles(cwd) {
-  const rootResult = spawnSync6("git", ["rev-parse", "--show-toplevel"], {
+  const rootResult = spawnSync7("git", ["rev-parse", "--show-toplevel"], {
     cwd,
     encoding: "utf-8",
     stdio: ["ignore", "pipe", "pipe"]
@@ -118248,7 +118254,7 @@ function runGitFiles(cwd) {
   const root = rootResult.stdout.trim();
   if (!root)
     return null;
-  const listResult = spawnSync6("git", ["ls-files", "--cached", "--others", "--exclude-standard"], {
+  const listResult = spawnSync7("git", ["ls-files", "--cached", "--others", "--exclude-standard"], {
     cwd: root,
     encoding: "utf-8",
     stdio: ["ignore", "pipe", "pipe"]
@@ -119065,7 +119071,7 @@ function openExternalEditor(ui, currentText) {
     if (!editor) {
       return { error: "No editor command found" };
     }
-    const result2 = spawnSync7(editor, [...editorArgs, tempFile], {
+    const result2 = spawnSync8(editor, [...editorArgs, tempFile], {
       stdio: "inherit"
     });
     if (result2.error) {
@@ -132491,7 +132497,7 @@ function generateChangeId() {
 function isGitTracked(filePath) {
   try {
     const dir = dirname41(filePath);
-    execSync3("git rev-parse --git-dir", {
+    execSync2("git rev-parse --git-dir", {
       cwd: dir,
       stdio: "ignore"
     });
@@ -147567,7 +147573,7 @@ function getHeadlessPtyPythonCommand() {
     return cachedPythonCommand;
   }
   for (const candidate of ["python3", "python"]) {
-    const result2 = spawnSync8(candidate, ["-c", "import sys"], {
+    const result2 = spawnSync9(candidate, ["-c", "import sys"], {
       stdio: "ignore"
     });
     if (result2.status === 0) {
@@ -151380,12 +151386,15 @@ function printHelp(version3, options) {
   maestro remote attach <session-id> [--verify] [--print-env]
   maestro remote extend <session-id> --ttl 2h
   maestro remote stop <session-id> [--reason <text>]`)}`;
-  const operatingPlaneSection = `${sectionHeading("maestro operating-plane")}${muted(`  maestro operating-plane status --thread-id <slack-thread> [--evidence-id <id>] [--auth-subject <subject>]
-  maestro operating-plane status --trace-id <id> --json
-
-  Fetches the Platform operating-plane ledger and prints a content-free value
-  proof report with identity, model/tool/approval/trace/evidence/cost status,
-  allowed evidence ids/revisions, blockers, next actions, and withheld reasons.`)}`;
+  const operatingPlaneHelp = [
+    "  maestro operating-plane status --thread-id <slack-thread> [--artifact-id <id>] [--auth-subject <subject>]",
+    "  maestro operating-plane status --trace-id <id> --json",
+    "  Fetches the Platform operating-plane ledger and prints content-free runtime",
+    "  status with identity, model/tool/approval/trace/artifact/cost signals,",
+    "  allowed artifact ids/revisions, blockers, next actions, and withheld reasons."
+  ].join(`
+`);
+  const operatingPlaneSection = `${sectionHeading("maestro operating-plane")}${muted(operatingPlaneHelp)}`;
   const runSection = `${sectionHeading("maestro run")}${muted(`  maestro run inspect <session-id> [--json]
   maestro run ledger <session-id>
   maestro run replay <session-id>
@@ -158663,7 +158672,7 @@ function throwIfToolInstallAborted(config2, signal) {
 }
 function commandExists2(cmd) {
   try {
-    const result2 = spawnSync9(cmd, ["--version"], { stdio: "pipe" });
+    const result2 = spawnSync10(cmd, ["--version"], { stdio: "pipe" });
     return result2.error === void 0 || result2.error === null;
   } catch {
     return false;
@@ -158789,7 +158798,7 @@ async function downloadFile2(url, dest, signal) {
   }
 }
 function runExtractor(command, args, description) {
-  const result2 = spawnSync9(command, args, { stdio: "pipe" });
+  const result2 = spawnSync10(command, args, { stdio: "pipe" });
   if (result2.error) {
     throw new Error(`${description} failed: ${result2.error.message}`);
   }
@@ -159223,7 +159232,7 @@ var init_find = __esm2(() => {
       }
       args.push(pattern);
       const command = [fdPath, ...args].join(" ");
-      const result2 = spawnSync10(fdPath, args, {
+      const result2 = spawnSync11(fdPath, args, {
         encoding: "utf-8",
         maxBuffer: 10 * 1024 * 1024,
         cwd: searchPath
@@ -160394,6 +160403,9 @@ function toArray(value) {
   }
   return Array.isArray(value) ? value : [value];
 }
+function normalizeRipgrepPathArgs(paths) {
+  return paths.map((path3) => expandTildePath(path3));
+}
 function ripgrepAbortError() {
   return new Error("ripgrep search aborted before start");
 }
@@ -160558,6 +160570,7 @@ var ripgrepInstallController = null;
 var ripgrepExecutableWaiters = 0;
 var init_ripgrep_utils = __esm2(() => {
   init_json();
+  init_path_expansion();
   init_tools_manager();
   pathSchema = Type25.Optional(Type25.Union([
     Type25.String({
@@ -160737,7 +160750,7 @@ var init_parallel_ripgrep = __esm2(() => {
       if (context2 !== void 0 && (beforeContext !== void 0 || afterContext !== void 0)) {
         throw new Error("Use either context or before/after context options, not both.");
       }
-      const pathArgs = toArray(paths);
+      const pathArgs = normalizeRipgrepPathArgs(toArray(paths));
       const globArgs = toArray(glob);
       const commandCwd = cwd ? resolvePath12(expandUserPath2(cwd)) : process.cwd();
       const before = beforeContext ?? context2 ?? 0;
@@ -161029,7 +161042,7 @@ Examples:
       if (format === "json" && outputMode !== "content") {
         throw new Error("JSON format is not supported with outputMode: 'files' or 'count'. Use format: 'text' or omit the format parameter.");
       }
-      const pathArgs = toArray(paths);
+      const pathArgs = normalizeRipgrepPathArgs(toArray(paths));
       const globArgs = toArray(glob);
       const commandCwd = cwd ? resolvePath13(expandUserPath2(cwd)) : process.cwd();
       const args = ["--color=never"];
@@ -185366,7 +185379,7 @@ var init_models = __esm2(() => {
 });
 function runOllama(args) {
   try {
-    const result2 = spawnSync11("ollama", args, {
+    const result2 = spawnSync12("ollama", args, {
       cwd: process.cwd(),
       encoding: "utf-8"
     });
@@ -187293,14 +187306,14 @@ async function handleReview(req, res, corsHeaders) {
     return;
   try {
     const cwd = process.cwd();
-    const statusResult = execSync4("git status -sb", {
+    const statusResult = execSync3("git status -sb", {
       cwd,
       encoding: "utf-8",
       stdio: ["pipe", "pipe", "pipe"]
     });
     let diffStat = "";
     try {
-      diffStat = execSync4("git diff --stat", {
+      diffStat = execSync3("git diff --stat", {
         cwd,
         encoding: "utf-8",
         stdio: ["pipe", "pipe", "pipe"]
@@ -187309,7 +187322,7 @@ async function handleReview(req, res, corsHeaders) {
     }
     let stagedDiff = "";
     try {
-      stagedDiff = execSync4("git diff --cached --unified=5", {
+      stagedDiff = execSync3("git diff --cached --unified=5", {
         cwd,
         encoding: "utf-8",
         stdio: ["pipe", "pipe", "pipe"]
@@ -187318,7 +187331,7 @@ async function handleReview(req, res, corsHeaders) {
     }
     let worktreeDiff = "";
     try {
-      worktreeDiff = execSync4("git diff --unified=5", {
+      worktreeDiff = execSync3("git diff --unified=5", {
         cwd,
         encoding: "utf-8",
         stdio: ["pipe", "pipe", "pipe"]
@@ -189530,6 +189543,63 @@ function finiteNumber2(value) {
 function booleanValue2(value) {
   return typeof value === "boolean" ? value : void 0;
 }
+function stringValue8(value) {
+  return typeof value === "string" && value.trim().length > 0 ? value : void 0;
+}
+function isPendingRequestKind(value) {
+  return value === "approval" || value === "client_tool" || value === "mcp_elicitation" || value === "user_input" || value === "tool_retry";
+}
+function isPendingRequestSource(value) {
+  return value === "local" || value === "platform";
+}
+function isPendingRequestPlatformSource(value) {
+  return value === "approvals_service" || value === "tool_execution";
+}
+function pendingRequestFromCustomEntry(entry2, sessionId, timestamp3) {
+  if (entry2.type !== "custom" || entry2.customType !== "pending_request") {
+    return;
+  }
+  const data = detailsRecord(entry2.data);
+  const request = detailsRecord(data?.request) ?? data;
+  if (!request) {
+    return;
+  }
+  const id = stringValue8(request.id);
+  const kind = request.kind;
+  const toolCallId2 = stringValue8(request.toolCallId);
+  const toolName = stringValue8(request.toolName);
+  const reason = stringValue8(request.reason);
+  if (!id || !isPendingRequestKind(kind) || !toolCallId2 || !toolName || !reason) {
+    return;
+  }
+  const platformRecord = detailsRecord(request.platform);
+  const platformSource = platformRecord ? isPendingRequestPlatformSource(platformRecord.source) ? platformRecord.source : void 0 : void 0;
+  const platform5 = platformSource ? {
+    source: platformSource,
+    ...stringValue8(platformRecord?.toolExecutionId) ? { toolExecutionId: stringValue8(platformRecord?.toolExecutionId) } : {},
+    ...stringValue8(platformRecord?.approvalRequestId) ? {
+      approvalRequestId: stringValue8(platformRecord?.approvalRequestId)
+    } : {}
+  } : void 0;
+  return {
+    id,
+    kind,
+    status: "pending",
+    visibility: "user",
+    sessionId: stringValue8(request.sessionId) ?? sessionId,
+    toolCallId: toolCallId2,
+    toolName,
+    ...stringValue8(request.displayName) ? { displayName: stringValue8(request.displayName) } : {},
+    ...stringValue8(request.summaryLabel) ? { summaryLabel: stringValue8(request.summaryLabel) } : {},
+    ...stringValue8(request.actionDescription) ? { actionDescription: stringValue8(request.actionDescription) } : {},
+    args: request.args ?? {},
+    reason,
+    createdAt: normalizeTimestamp2(request.createdAt, timestamp3),
+    ...stringValue8(request.expiresAt) ? { expiresAt: normalizeTimestamp2(request.expiresAt, timestamp3) } : {},
+    source: isPendingRequestSource(request.source) ? request.source : "local",
+    ...platform5 ? { platform: platform5 } : {}
+  };
+}
 function textFromContent(content) {
   if (typeof content === "string")
     return content;
@@ -189838,6 +189908,9 @@ function pendingRequestTitle(request) {
 }
 function addPendingRequestItems(items, sessionId, pendingRequests, generatedAt) {
   for (const request of pendingRequests) {
+    if (items.some((item) => item.type === "wait.pending" && item.pendingRequestId === request.id)) {
+      continue;
+    }
     const summary2 = compactTimelineSummary(request.actionDescription || request.summaryLabel || request.reason);
     const platformOperation = platformOperationForPending(request);
     appendItem(items, {
@@ -189989,6 +190062,11 @@ function addEntryItems(items, sessionId, entries, generatedAt, context2) {
         break;
       }
       case "custom": {
+        const pendingRequest2 = pendingRequestFromCustomEntry(entry2, sessionId, timestamp3);
+        if (pendingRequest2) {
+          addPendingRequestItems(items, sessionId, [pendingRequest2], generatedAt);
+          break;
+        }
         appendItem(items, {
           id: `custom:${entry2.id}`,
           sessionId,
@@ -190013,6 +190091,21 @@ function sortItems(items) {
     return a.id.localeCompare(b.id);
   });
 }
+function pendingRequestCountForItems(items) {
+  const pendingRequestIds = /* @__PURE__ */ new Set();
+  let pendingWithoutId = 0;
+  for (const item of items) {
+    if (item.type !== "wait.pending") {
+      continue;
+    }
+    if (item.pendingRequestId) {
+      pendingRequestIds.add(item.pendingRequestId);
+    } else {
+      pendingWithoutId += 1;
+    }
+  }
+  return pendingRequestIds.size + pendingWithoutId;
+}
 function buildComposerRunTimeline(options) {
   const generatedAt = options.generatedAt ?? (/* @__PURE__ */ new Date()).toISOString();
   const items = [];
@@ -190034,13 +190127,14 @@ function buildComposerRunTimeline(options) {
     }
   }
   addPendingRequestItems(items, options.sessionId, pendingRequests, generatedAt);
+  const sortedItems = sortItems(items);
   return {
     sessionId: options.sessionId,
     source: "local",
     generatedAt,
     platformBacked: false,
-    pendingRequestCount: pendingRequests.length,
-    items: sortItems(items)
+    pendingRequestCount: pendingRequestCountForItems(sortedItems),
+    items: sortedItems
   };
 }
 var init_session_timeline = __esm2(() => {
@@ -190378,12 +190472,12 @@ async function getStatusSnapshot(options = {}) {
   let gitBranch = null;
   let gitStatus = null;
   try {
-    gitBranch = execSync5("git rev-parse --abbrev-ref HEAD", {
+    gitBranch = execSync4("git rev-parse --abbrev-ref HEAD", {
       cwd,
       encoding: "utf-8",
       stdio: ["pipe", "pipe", "ignore"]
     }).trim();
-    const status = execSync5("git status --porcelain", {
+    const status = execSync4("git status --porcelain", {
       cwd,
       encoding: "utf-8",
       stdio: ["pipe", "pipe", "ignore"]
@@ -195367,7 +195461,7 @@ async function validateToolbox(skillDir, options = {}) {
     }
     runnableEntryCount += 1;
     if (options.describeToolbox) {
-      const result2 = spawnSync12(toolboxDescribeSpawnCommand(path3, platform5), {
+      const result2 = spawnSync13(toolboxDescribeSpawnCommand(path3, platform5), {
         env: { ...process.env, MAESTRO_TOOLBOX_ACTION: "describe" },
         encoding: "utf8",
         shell: shouldUseShellForToolboxDescribe(platform5),
@@ -200398,7 +200492,7 @@ function summarizeOperatingPlaneInspection(inspection, options = {}) {
 }
 function formatOperatingPlaneStatusReport(report) {
   const lines = [
-    `Agent operating-plane value proof (${report.runCount} ${pluralize("run", report.runCount)})`,
+    `Agent operating-plane status (${report.runCount} ${pluralize("run", report.runCount)})`,
     `Generated: ${report.generatedAt}`
   ];
   if (report.unavailableSources.length > 0) {
@@ -200415,14 +200509,14 @@ function formatOperatingPlaneStatusReport(report) {
     pushLine(lines, "  Thread", run2.channelThreadId);
     pushLine(lines, "  Trace", run2.traceId);
     pushLine(lines, "  Identity", run2.identitySubject);
-    if (run2.proofPresent.length > 0) {
-      lines.push(`  Proof present: ${run2.proofPresent.join(", ")}`);
+    if (run2.signalsPresent.length > 0) {
+      lines.push(`  Signals present: ${run2.signalsPresent.join(", ")}`);
     }
-    if (run2.proofMissing.length > 0) {
-      lines.push(`  Missing proof: ${run2.proofMissing.join(", ")}`);
+    if (run2.signalsMissing.length > 0) {
+      lines.push(`  Signals missing: ${run2.signalsMissing.join(", ")}`);
     }
-    if (run2.evidenceRefs.length > 0) {
-      lines.push(`  Evidence: ${run2.evidenceRefs.map(formatEvidenceRef).join("; ")}`);
+    if (run2.artifactRefs.length > 0) {
+      lines.push(`  Artifacts: ${run2.artifactRefs.map(formatArtifactRef).join("; ")}`);
     }
     for (const nextAction of run2.nextActions) {
       lines.push(`  Next action: ${nextAction}`);
@@ -200442,7 +200536,7 @@ function formatOperatingPlaneStatusReport(report) {
 `);
 }
 function summarizeOperatingPlaneRun(run2) {
-  const { proofPresent, proofMissing } = summarizeProof(run2);
+  const { signalsPresent, signalsMissing } = summarizeValueSignals(run2);
   return stripUndefined({
     runId: run2.agent_run_id,
     title: oneLine(run2.title) ?? "",
@@ -200452,35 +200546,35 @@ function summarizeOperatingPlaneRun(run2) {
     traceId: oneLine(run2.trace_id),
     identitySubject: operatingPlaneIdentitySubject(run2),
     operatorSummary: oneLine(run2.value_proof?.operator_summary),
-    proofPresent,
-    proofMissing,
-    evidenceRefs: summarizeEvidenceRefs(run2.evidence_refs),
+    signalsPresent,
+    signalsMissing,
+    artifactRefs: summarizeArtifactRefs(run2.evidence_refs),
     nextActions: uniqueStrings4(run2.work_items?.map((item) => oneLine(item.next_action))),
     blockers: uniqueStrings4(run2.work_items?.map((item) => oneLine(item.blocker))),
     withheld: operatingPlaneWithheldReasons(run2),
     usage: summarizeUsage(run2.usage)
   });
 }
-function summarizeProof(run2) {
-  const proof = run2.value_proof;
+function summarizeValueSignals(run2) {
+  const signals = run2.value_proof;
   const fields = [
-    { label: "identity", value: proof?.identity_bound },
-    { label: "model", value: proof?.model_observed },
-    { label: "tool", value: proof?.tool_observed },
-    { label: "approval", value: proof?.approval_observed },
-    { label: "trace", value: proof?.trace_linked },
-    { label: "evidence", value: proof?.evidence_linked },
-    { label: "cost", value: proof?.cost_attributed }
+    { label: "identity", value: signals?.identity_bound },
+    { label: "model", value: signals?.model_observed },
+    { label: "tool", value: signals?.tool_observed },
+    { label: "approval", value: signals?.approval_observed },
+    { label: "trace", value: signals?.trace_linked },
+    { label: "artifact", value: signals?.evidence_linked },
+    { label: "cost", value: signals?.cost_attributed }
   ];
-  const proofPresent = fields.filter((field) => field.value === true).map((field) => field.label);
-  const proofMissing = uniqueStrings4([
+  const signalsPresent = fields.filter((field) => field.value === true).map((field) => field.label);
+  const signalsMissing = uniqueStrings4([
     ...fields.filter((field) => field.value !== true).map((field) => field.label),
-    ...proof?.missing_proof ?? [],
-    proof ? void 0 : "value_proof unavailable"
+    ...(signals?.missing_proof ?? []).map(operatorFacingSignalLabel),
+    signals ? void 0 : "runtime signal unavailable"
   ]);
-  return { proofPresent, proofMissing };
+  return { signalsPresent, signalsMissing };
 }
-function summarizeEvidenceRefs(evidenceRefs) {
+function summarizeArtifactRefs(evidenceRefs) {
   return (evidenceRefs ?? []).map((evidence2) => stripUndefined({
     id: oneLine(evidence2.id) ?? "",
     source: oneLine(evidence2.source) ?? "",
@@ -200517,7 +200611,7 @@ function operatingPlaneWithheldReasons(run2) {
     ...run2.unavailable_sources ?? []
   ]);
 }
-function formatEvidenceRef(evidence2) {
+function formatArtifactRef(evidence2) {
   const details = [
     `${evidence2.source}/${evidence2.kind}`,
     evidence2.available ? "available" : "unavailable",
@@ -200526,6 +200620,16 @@ function formatEvidenceRef(evidence2) {
   ];
   return `${evidence2.id} (${uniqueStrings4(details).join(", ")})`;
 }
+function operatorFacingSignalLabel(value) {
+  const normalized = oneLine(value);
+  if (!normalized) {
+    return;
+  }
+  if (normalized === "value_proof unavailable") {
+    return "runtime signal unavailable";
+  }
+  return normalized.replace(/\bproof\b/giu, "signal").replace(/\bevidence\b/giu, "artifact");
+}
 function formatUsage(usage4) {
   const parts = [
     typeof usage4.totalTokens === "number" ? `${usage4.totalTokens} total tokens` : void 0,
@@ -200655,7 +200759,7 @@ function queryFromFlags(flags) {
     channelThreadId: flagString(flags, "--channel-thread-id"),
     traceId: flagString(flags, "--trace-id"),
     sessionId: flagString(flags, "--session-id"),
-    evidenceId: flagString(flags, "--evidence-id"),
+    evidenceId: flagString(flags, "--artifact-id") ?? flagString(flags, "--evidence-id"),
     gatewayAuthenticatedSubject: flagString(flags, "--gateway-authenticated-subject") ?? flagString(flags, "--auth-subject"),
     audience: flagString(flags, "--audience"),
     includeGates: flagBoolean(flags, "--include-gates"),
@@ -200710,7 +200814,7 @@ function operatingPlaneHelpText() {
 
 Filters:
   --thread-id <id>                  Slack/channel thread id
-  --evidence-id <id>                Evidence ref id
+  --artifact-id <id>                Runtime artifact ref id
   --auth-subject <subject>          Gateway-authenticated subject
   --trace-id <id>                   Trace id
   --session-id <id>                 Maestro/session id
@@ -200727,6 +200831,7 @@ var init_operating_plane = __esm2(() => {
   init_operating_plane_client();
   VALUE_FLAGS = /* @__PURE__ */ new Set([
     "--agent-id",
+    "--artifact-id",
     "--audience",
     "--auth-subject",
     "--autonomy-session-id",