npm - @evalops/maestro - Versions diffs - 0.10.46 → 0.10.47 - Mend

@evalops/maestro 0.10.46 → 0.10.47

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (101) hide show

package/dist/agent/providers/openai-codex-session.js CHANGED Viewed

@@ -23,7 +23,7 @@ export function resolveOpenAICodexAccountId(token, headers) {
         process.env.CHATGPT_ACCOUNT_ID?.trim() ??
         extractOpenAICodexAccountId(token);
     if (!accountId) {
-        throw new Error("OpenAI Codex account id is required. Log in with /login openai-codex or set OPENAI_CODEX_ACCOUNT_ID.");
+        throw new Error("OpenAI Codex account id is required for legacy Codex Responses models. Log in with /login openai-codex:responses or set OPENAI_CODEX_ACCOUNT_ID.");
     }
     return accountId;
 }

package/dist/agent/providers/openai-codex-session.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"openai-codex-session.js","sourceRoot":"","sources":["../../../src/agent/providers/openai-codex-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAE1E,MAAM,CAAC,MAAM,6BAA6B,GAAG,iCAAiC,CAAC;AAC/E,MAAM,CAAC,MAAM,uBAAuB,GAAG,cAAc,CAAC;AAgBtD,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACrD,MAAM,GAAG,GACR,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QACnC,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,6BAA6B,CAAC;IAClC,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC5C,IAAI,UAAU,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAAE,OAAO,UAAU,CAAC;IAC/D,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,GAAG,UAAU,YAAY,CAAC;IACpE,OAAO,GAAG,UAAU,kBAAkB,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,2BAA2B,CAC1C,KAAa,EACb,OAA2C;IAE3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1D,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,oBAAoB,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAChE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;QACrB,CAAC;IACF,CAAC;IACD,MAAM,SAAS,GACd,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,IAAI,EAAE;QAC3C,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE;QACtC,2BAA2B,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACd,~~sGAAsG~~,~~CACtG~~,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,yBAAyB,CACxC,OAAyC;IAEzC,MAAM,SAAS,GAAG,2BAA2B,CAC5C,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,aAAa,CACrB,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAClD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,CAAC;QACxE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,uBAAuB,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,YAAY,QAAQ,EAAE,IAAI,OAAO,EAAE,KAAK,IAAI,EAAE,GAAG,CAAC,CAAC;IAC7E,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,wBAAwB,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IAChD,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACvD,CAAC;IACD,OAAO;QACN,GAAG,EAAE,qBAAqB,CAAC,OAAO,CAAC,YAAY,CAAC;QAChD,SAAS;QACT,OAAO;KACP,CAAC;AACH,CAAC","sourcesContent":["import { arch, platform, release } from \"node:os\";\nimport { extractOpenAICodexAccountId } from \"../../oauth/openai-codex.js\";\n\nexport const DEFAULT_OPENAI_CODEX_BASE_URL = \"https://chatgpt.com/backend-api\";\nexport const OPENAI_CODEX_ORIGINATOR = \"codex_cli_rs\";\n\nexport interface ResolveOpenAICodexSessionOptions {\n\ttoken: string;\n\tmodelBaseUrl?: string;\n\tmodelHeaders?: Record<string, string>;\n\toptionHeaders?: Record<string, string>;\n\tsessionId?: string;\n}\n\nexport interface OpenAICodexSession {\n\turl: string;\n\taccountId: string;\n\theaders: Headers;\n}\n\nexport function resolveOpenAICodexUrl(baseUrl?: string): string {\n\tconst raw =\n\t\tbaseUrl && baseUrl.trim().length > 0\n\t\t\t? baseUrl\n\t\t\t: DEFAULT_OPENAI_CODEX_BASE_URL;\n\tconst normalized = raw.replace(/\\/+$/u, \"\");\n\tif (normalized.endsWith(\"/codex/responses\")) return normalized;\n\tif (normalized.endsWith(\"/codex\")) return `${normalized}/responses`;\n\treturn `${normalized}/codex/responses`;\n}\n\nexport function resolveOpenAICodexAccountId(\n\ttoken: string,\n\theaders: Record<string, string> \| undefined,\n): string {\n\tfor (const [key, value] of Object.entries(headers ?? {})) {\n\t\tif (key.toLowerCase() === \"chatgpt-account-id\" && value.trim()) {\n\t\t\treturn value.trim();\n\t\t}\n\t}\n\tconst accountId =\n\t\tprocess.env.OPENAI_CODEX_ACCOUNT_ID?.trim() ??\n\t\tprocess.env.CHATGPT_ACCOUNT_ID?.trim() ??\n\t\textractOpenAICodexAccountId(token);\n\tif (!accountId) {\n\t\tthrow new Error(\n\t\t\t\"OpenAI Codex account id is required. Log in with /login openai-codex or set OPENAI_CODEX_ACCOUNT_ID.\",\n\t\t);\n\t}\n\treturn accountId;\n}\n\nexport function resolveOpenAICodexSession(\n\toptions: ResolveOpenAICodexSessionOptions,\n): OpenAICodexSession {\n\tconst accountId = resolveOpenAICodexAccountId(\n\t\toptions.token,\n\t\toptions.optionHeaders,\n\t);\n\tconst headers = new Headers(options.modelHeaders);\n\tfor (const [key, value] of Object.entries(options.optionHeaders ?? {})) {\n\t\theaders.set(key, value);\n\t}\n\theaders.set(\"Authorization\", `Bearer ${options.token}`);\n\theaders.set(\"chatgpt-account-id\", accountId);\n\theaders.set(\"originator\", OPENAI_CODEX_ORIGINATOR);\n\theaders.set(\"User-Agent\", `maestro (${platform()} ${release()}; ${arch()})`);\n\theaders.set(\"OpenAI-Beta\", \"responses=experimental\");\n\theaders.set(\"accept\", \"text/event-stream\");\n\theaders.set(\"content-type\", \"application/json\");\n\tif (options.sessionId) {\n\t\theaders.set(\"session_id\", options.sessionId);\n\t\theaders.set(\"x-client-request-id\", options.sessionId);\n\t}\n\treturn {\n\t\turl: resolveOpenAICodexUrl(options.modelBaseUrl),\n\t\taccountId,\n\t\theaders,\n\t};\n}\n"]}
1	+ {"version":3,"file":"openai-codex-session.js","sourceRoot":"","sources":["../../../src/agent/providers/openai-codex-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAE1E,MAAM,CAAC,MAAM,6BAA6B,GAAG,iCAAiC,CAAC;AAC/E,MAAM,CAAC,MAAM,uBAAuB,GAAG,cAAc,CAAC;AAgBtD,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACrD,MAAM,GAAG,GACR,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QACnC,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,6BAA6B,CAAC;IAClC,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC5C,IAAI,UAAU,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAAE,OAAO,UAAU,CAAC;IAC/D,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,GAAG,UAAU,YAAY,CAAC;IACpE,OAAO,GAAG,UAAU,kBAAkB,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,2BAA2B,CAC1C,KAAa,EACb,OAA2C;IAE3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1D,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,oBAAoB,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAChE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;QACrB,CAAC;IACF,CAAC;IACD,MAAM,SAAS,GACd,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,IAAI,EAAE;QAC3C,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE;QACtC,2BAA2B,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACd,kJAAkJ,CAClJ,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,yBAAyB,CACxC,OAAyC;IAEzC,MAAM,SAAS,GAAG,2BAA2B,CAC5C,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,aAAa,CACrB,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAClD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,CAAC;QACxE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,uBAAuB,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,YAAY,QAAQ,EAAE,IAAI,OAAO,EAAE,KAAK,IAAI,EAAE,GAAG,CAAC,CAAC;IAC7E,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,wBAAwB,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IAChD,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACvD,CAAC;IACD,OAAO;QACN,GAAG,EAAE,qBAAqB,CAAC,OAAO,CAAC,YAAY,CAAC;QAChD,SAAS;QACT,OAAO;KACP,CAAC;AACH,CAAC","sourcesContent":["import { arch, platform, release } from \"node:os\";\nimport { extractOpenAICodexAccountId } from \"../../oauth/openai-codex.js\";\n\nexport const DEFAULT_OPENAI_CODEX_BASE_URL = \"https://chatgpt.com/backend-api\";\nexport const OPENAI_CODEX_ORIGINATOR = \"codex_cli_rs\";\n\nexport interface ResolveOpenAICodexSessionOptions {\n\ttoken: string;\n\tmodelBaseUrl?: string;\n\tmodelHeaders?: Record<string, string>;\n\toptionHeaders?: Record<string, string>;\n\tsessionId?: string;\n}\n\nexport interface OpenAICodexSession {\n\turl: string;\n\taccountId: string;\n\theaders: Headers;\n}\n\nexport function resolveOpenAICodexUrl(baseUrl?: string): string {\n\tconst raw =\n\t\tbaseUrl && baseUrl.trim().length > 0\n\t\t\t? baseUrl\n\t\t\t: DEFAULT_OPENAI_CODEX_BASE_URL;\n\tconst normalized = raw.replace(/\\/+$/u, \"\");\n\tif (normalized.endsWith(\"/codex/responses\")) return normalized;\n\tif (normalized.endsWith(\"/codex\")) return `${normalized}/responses`;\n\treturn `${normalized}/codex/responses`;\n}\n\nexport function resolveOpenAICodexAccountId(\n\ttoken: string,\n\theaders: Record<string, string> \| undefined,\n): string {\n\tfor (const [key, value] of Object.entries(headers ?? {})) {\n\t\tif (key.toLowerCase() === \"chatgpt-account-id\" && value.trim()) {\n\t\t\treturn value.trim();\n\t\t}\n\t}\n\tconst accountId =\n\t\tprocess.env.OPENAI_CODEX_ACCOUNT_ID?.trim() ??\n\t\tprocess.env.CHATGPT_ACCOUNT_ID?.trim() ??\n\t\textractOpenAICodexAccountId(token);\n\tif (!accountId) {\n\t\tthrow new Error(\n\t\t\t\"OpenAI Codex account id is required for legacy Codex Responses models. Log in with /login openai-codex:responses or set OPENAI_CODEX_ACCOUNT_ID.\",\n\t\t);\n\t}\n\treturn accountId;\n}\n\nexport function resolveOpenAICodexSession(\n\toptions: ResolveOpenAICodexSessionOptions,\n): OpenAICodexSession {\n\tconst accountId = resolveOpenAICodexAccountId(\n\t\toptions.token,\n\t\toptions.optionHeaders,\n\t);\n\tconst headers = new Headers(options.modelHeaders);\n\tfor (const [key, value] of Object.entries(options.optionHeaders ?? {})) {\n\t\theaders.set(key, value);\n\t}\n\theaders.set(\"Authorization\", `Bearer ${options.token}`);\n\theaders.set(\"chatgpt-account-id\", accountId);\n\theaders.set(\"originator\", OPENAI_CODEX_ORIGINATOR);\n\theaders.set(\"User-Agent\", `maestro (${platform()} ${release()}; ${arch()})`);\n\theaders.set(\"OpenAI-Beta\", \"responses=experimental\");\n\theaders.set(\"accept\", \"text/event-stream\");\n\theaders.set(\"content-type\", \"application/json\");\n\tif (options.sessionId) {\n\t\theaders.set(\"session_id\", options.sessionId);\n\t\theaders.set(\"x-client-request-id\", options.sessionId);\n\t}\n\treturn {\n\t\turl: resolveOpenAICodexUrl(options.modelBaseUrl),\n\t\taccountId,\n\t\theaders,\n\t};\n}\n"]}

package/dist/app-server/in-process-client.d.ts CHANGED Viewed

@@ -1,4 +1,4 @@
-import type { MaestroAppServerClientMethod, MaestroAppServerCommandExecResult, MaestroAppServerCommandProcessResult, MaestroAppServerDaemonStatusResult, MaestroAppServerEmptyResult, MaestroAppServerExternalAgentImportResult, MaestroAppServerFsMetadataResult, MaestroAppServerFsReadDirectoryResult, MaestroAppServerFsReadFileResult, MaestroAppServerFsWatchResult, MaestroAppServerInitializeResult, MaestroAppServerModelListResult, MaestroAppServerModelProviderCapabilitiesReadResult, MaestroAppServerNetworkAuditListResult, MaestroAppServerNetworkFetchResult, MaestroAppServerPluginBundleListResult, MaestroAppServerPluginBundleMutationResult, MaestroAppServerPolicyCheckResult, MaestroAppServerPolicyReadResult, MaestroAppServerProtocolModeListResult, MaestroAppServerProtocolModeSetResult, MaestroAppServerRemoteControlDrainResult, MaestroAppServerRemoteControlLeaseResult, MaestroAppServerRemoteControlStatusResult, MaestroAppServerRequirementsListResult, MaestroAppServerSandboxProbeResult, MaestroAppServerSandboxProofResult, MaestroAppServerThreadArchiveResult, MaestroAppServerThreadDeleteResult, MaestroAppServerThreadForkResult, MaestroAppServerThreadGoalResult, MaestroAppServerThreadListResult, MaestroAppServerThreadMetadataUpdateResult, MaestroAppServerThreadReadResult, MaestroAppServerThreadStartResult, MaestroAppServerTurnsListResult } from "@evalops/contracts";
+import type { MaestroAppServerClientMethod, MaestroAppServerCommandExecResult, MaestroAppServerCommandProcessResult, MaestroAppServerDaemonStatusResult, MaestroAppServerEmptyResult, MaestroAppServerExternalAgentImportResult, MaestroAppServerFsMetadataResult, MaestroAppServerFsReadDirectoryResult, MaestroAppServerFsReadFileResult, MaestroAppServerFsWatchResult, MaestroAppServerInitializeResult, MaestroAppServerModelListResult, MaestroAppServerModelProviderCapabilitiesReadResult, MaestroAppServerNetworkAuditListResult, MaestroAppServerNetworkFetchResult, MaestroAppServerPluginBundleListResult, MaestroAppServerPluginBundleMutationResult, MaestroAppServerPolicyCheckResult, MaestroAppServerPolicyReadResult, MaestroAppServerProtocolModeListResult, MaestroAppServerProtocolModeSetResult, MaestroAppServerRemoteControlDrainResult, MaestroAppServerRemoteControlLeaseResult, MaestroAppServerRemoteControlStatusResult, MaestroAppServerRequirementsListResult, MaestroAppServerSandboxCheckResult, MaestroAppServerSandboxProbeResult, MaestroAppServerThreadArchiveResult, MaestroAppServerThreadDeleteResult, MaestroAppServerThreadForkResult, MaestroAppServerThreadGoalResult, MaestroAppServerThreadListResult, MaestroAppServerThreadMetadataUpdateResult, MaestroAppServerThreadReadResult, MaestroAppServerThreadStartResult, MaestroAppServerTurnsListResult } from "@evalops/contracts";
 import { type MaestroAppServerSessionApi } from "./session-api.js";
 export interface MaestroAppServerClientInfo {
     name: string;
@@ -10,7 +10,7 @@ export interface InProcessMaestroAppServerClientOptions {
     maxPendingRequests?: number;
 }
 type AppServerRequestMethod = Exclude<MaestroAppServerClientMethod, "initialize">;
-type AppServerMethodResult<M extends AppServerRequestMethod> = M extends "protocol/mode/list" ? MaestroAppServerProtocolModeListResult : M extends "protocol/mode/set" ? MaestroAppServerProtocolModeSetResult : M extends "model/list" ? MaestroAppServerModelListResult : M extends "modelProvider/capabilities/read" ? MaestroAppServerModelProviderCapabilitiesReadResult : M extends "policy/read" ? MaestroAppServerPolicyReadResult : M extends "policy/check" ? MaestroAppServerPolicyCheckResult : M extends "requirements/list" ? MaestroAppServerRequirementsListResult : M extends "network/fetch" ? MaestroAppServerNetworkFetchResult : M extends "network/audit/list" ? MaestroAppServerNetworkAuditListResult : M extends "sandbox/probe" ? MaestroAppServerSandboxProbeResult : M extends "sandbox/proof/run" ? MaestroAppServerSandboxProofResult : M extends "externalAgent/import" ? MaestroAppServerExternalAgentImportResult : M extends "pluginBundle/list" ? MaestroAppServerPluginBundleListResult : M extends "pluginBundle/install" | "pluginBundle/remove" ? MaestroAppServerPluginBundleMutationResult : M extends "daemon/status" ? MaestroAppServerDaemonStatusResult : M extends "remoteControl/status" ? MaestroAppServerRemoteControlStatusResult : M extends "remoteControl/lease/read" | "remoteControl/lease/heartbeat" ? MaestroAppServerRemoteControlLeaseResult : M extends "remoteControl/drain" ? MaestroAppServerRemoteControlDrainResult : M extends "command/exec" ? MaestroAppServerCommandExecResult : M extends "command/exec/write" | "command/exec/terminate" ? MaestroAppServerCommandProcessResult : M extends "fs/readFile" ? MaestroAppServerFsReadFileResult : M extends "fs/readDirectory" ? MaestroAppServerFsReadDirectoryResult : M extends "fs/getMetadata" ? MaestroAppServerFsMetadataResult : M extends "fs/watch" ? MaestroAppServerFsWatchResult : M extends "fs/writeFile" | "fs/createDirectory" | "fs/remove" | "fs/copy" | "fs/unwatch" ? MaestroAppServerEmptyResult : M extends "thread/list" ? MaestroAppServerThreadListResult : M extends "thread/read" ? MaestroAppServerThreadReadResult : M extends "thread/metadata/update" ? MaestroAppServerThreadMetadataUpdateResult : M extends "thread/name/set" ? MaestroAppServerThreadMetadataUpdateResult : M extends "thread/goal/get" | "thread/goal/set" | "thread/goal/clear" ? MaestroAppServerThreadGoalResult : M extends "thread/start" ? MaestroAppServerThreadStartResult : M extends "thread/fork" ? MaestroAppServerThreadForkResult : M extends "thread/archive" | "thread/unarchive" ? MaestroAppServerThreadArchiveResult : M extends "thread/delete" ? MaestroAppServerThreadDeleteResult : M extends "thread/turns/list" ? MaestroAppServerTurnsListResult : never;
+type AppServerMethodResult<M extends AppServerRequestMethod> = M extends "protocol/mode/list" ? MaestroAppServerProtocolModeListResult : M extends "protocol/mode/set" ? MaestroAppServerProtocolModeSetResult : M extends "model/list" ? MaestroAppServerModelListResult : M extends "modelProvider/capabilities/read" ? MaestroAppServerModelProviderCapabilitiesReadResult : M extends "policy/read" ? MaestroAppServerPolicyReadResult : M extends "policy/check" ? MaestroAppServerPolicyCheckResult : M extends "requirements/list" ? MaestroAppServerRequirementsListResult : M extends "network/fetch" ? MaestroAppServerNetworkFetchResult : M extends "network/audit/list" ? MaestroAppServerNetworkAuditListResult : M extends "sandbox/probe" ? MaestroAppServerSandboxProbeResult : M extends "sandbox/check/run" ? MaestroAppServerSandboxCheckResult : M extends "externalAgent/import" ? MaestroAppServerExternalAgentImportResult : M extends "pluginBundle/list" ? MaestroAppServerPluginBundleListResult : M extends "pluginBundle/install" | "pluginBundle/remove" ? MaestroAppServerPluginBundleMutationResult : M extends "daemon/status" ? MaestroAppServerDaemonStatusResult : M extends "remoteControl/status" ? MaestroAppServerRemoteControlStatusResult : M extends "remoteControl/lease/read" | "remoteControl/lease/heartbeat" ? MaestroAppServerRemoteControlLeaseResult : M extends "remoteControl/drain" ? MaestroAppServerRemoteControlDrainResult : M extends "command/exec" ? MaestroAppServerCommandExecResult : M extends "command/exec/write" | "command/exec/terminate" ? MaestroAppServerCommandProcessResult : M extends "fs/readFile" ? MaestroAppServerFsReadFileResult : M extends "fs/readDirectory" ? MaestroAppServerFsReadDirectoryResult : M extends "fs/getMetadata" ? MaestroAppServerFsMetadataResult : M extends "fs/watch" ? MaestroAppServerFsWatchResult : M extends "fs/writeFile" | "fs/createDirectory" | "fs/remove" | "fs/copy" | "fs/unwatch" ? MaestroAppServerEmptyResult : M extends "thread/list" ? MaestroAppServerThreadListResult : M extends "thread/read" ? MaestroAppServerThreadReadResult : M extends "thread/metadata/update" ? MaestroAppServerThreadMetadataUpdateResult : M extends "thread/name/set" ? MaestroAppServerThreadMetadataUpdateResult : M extends "thread/goal/get" | "thread/goal/set" | "thread/goal/clear" ? MaestroAppServerThreadGoalResult : M extends "thread/start" ? MaestroAppServerThreadStartResult : M extends "thread/fork" ? MaestroAppServerThreadForkResult : M extends "thread/archive" | "thread/unarchive" ? MaestroAppServerThreadArchiveResult : M extends "thread/delete" ? MaestroAppServerThreadDeleteResult : M extends "thread/turns/list" ? MaestroAppServerTurnsListResult : never;
 export declare class InProcessMaestroAppServerClientError extends Error {
     readonly code: number;
     constructor(code: number, message: string);

package/dist/app-server/in-process-client.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"in-process-client.js","sourceRoot":"","sources":["../../src/app-server/in-process-client.ts"],"names":[],"mappings":"AAsCA,OAAO,EAEN,6BAA6B,GAC7B,MAAM,kBAAkB,CAAC;AAE1B,MAAM,4BAA4B,GAAG,EAAE,CAAC;AACxC,MAAM,qBAAqB,GAAG,CAAC,KAAK,CAAC;AA2GrC,MAAM,OAAO,oCAAqC,SAAQ,KAAK;IAC9D,YACU,IAAY,EACrB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,SAAI,GAAJ,IAAI,CAAQ;QAIrB,IAAI,CAAC,IAAI,GAAG,sCAAsC,CAAC;IACpD,CAAC;CACD;AAED,MAAM,OAAO,+BAA+B;IAO3C,YACkB,GAA+B,EAC/B,OAA+C;QAD/C,QAAG,GAAH,GAAG,CAA4B;QAC/B,YAAO,GAAP,OAAO,CAAwC;QARzD,gBAAW,GAAG,KAAK,CAAC;QACpB,iBAAY,GAAG,KAAK,CAAC;QACrB,kBAAa,GAAG,CAAC,CAAC;QAClB,oBAAe,GAAG,CAAC,CAAC;QAO3B,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,GAAG,CACjC,CAAC,EACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,kBAAkB,IAAI,4BAA4B,CAAC,CACtE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU;QACf,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC3C,MAAM,IAAI,oCAAoC,CAC7C,CAAC,KAAK,EACN,qBAAqB,CACrB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,MAAM,6BAA6B,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC9D,OAAO,EAAE,KAAK;gBACd,EAAE,EAAE,CAAC;gBACL,MAAM,EAAE,YAAY;gBACpB,MAAM,EAAE;oBACP,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;iBACnC;aACD,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACpB,MAAM,IAAI,oCAAoC,CAC7C,QAAQ,CAAC,KAAK,CAAC,IAAI,EACnB,QAAQ,CAAC,KAAK,CAAC,OAAO,CACtB,CAAC;YACH,CAAC;YACD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,OAAO,QAAQ,CAAC,MAA0C,CAAC;QAC5D,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC3B,CAAC;IACF,CAAC;IAED,KAAK,CAAC,OAAO,CACZ,MAAS,EACT,MAAgC;QAEhC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACvB,MAAM,IAAI,oCAAoC,CAAC,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACrD,MAAM,IAAI,oCAAoC,CAC7C,qBAAqB,EACrB,iCAAiC,CACjC,CAAC;QACH,CAAC;QAED,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,MAAM,6BAA6B,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC9D,OAAO,EAAE,KAAK;gBACd,EAAE,EAAE,IAAI,CAAC,aAAa,EAAE;gBACxB,MAAM;gBACN,MAAM;aACN,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACpB,MAAM,IAAI,oCAAoC,CAC7C,QAAQ,CAAC,KAAK,CAAC,IAAI,EACnB,QAAQ,CAAC,KAAK,CAAC,OAAO,CACtB,CAAC;YACH,CAAC;YACD,OAAO,QAAQ,CAAC,MAAkC,CAAC;QACpD,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,eAAe,EAAE,CAAC;QACxB,CAAC;IACF,CAAC;CACD;AAED,MAAM,UAAU,qCAAqC,CACpD,GAA+B,EAC/B,OAA+C;IAE/C,OAAO,IAAI,+BAA+B,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AAC1D,CAAC","sourcesContent":["import type {\n\tMaestroAppServerClientMethod,\n\tMaestroAppServerCommandExecResult,\n\tMaestroAppServerCommandProcessResult,\n\tMaestroAppServerDaemonStatusResult,\n\tMaestroAppServerEmptyResult,\n\tMaestroAppServerExternalAgentImportResult,\n\tMaestroAppServerFsMetadataResult,\n\tMaestroAppServerFsReadDirectoryResult,\n\tMaestroAppServerFsReadFileResult,\n\tMaestroAppServerFsWatchResult,\n\tMaestroAppServerInitializeResult,\n\tMaestroAppServerModelListResult,\n\tMaestroAppServerModelProviderCapabilitiesReadResult,\n\tMaestroAppServerNetworkAuditListResult,\n\tMaestroAppServerNetworkFetchResult,\n\tMaestroAppServerPluginBundleListResult,\n\tMaestroAppServerPluginBundleMutationResult,\n\tMaestroAppServerPolicyCheckResult,\n\tMaestroAppServerPolicyReadResult,\n\tMaestroAppServerProtocolModeListResult,\n\tMaestroAppServerProtocolModeSetResult,\n\tMaestroAppServerRemoteControlDrainResult,\n\tMaestroAppServerRemoteControlLeaseResult,\n\tMaestroAppServerRemoteControlStatusResult,\n\tMaestroAppServerRequirementsListResult,\n\tMaestroAppServerSandboxProbeResult,\n\tMaestroAppServerSandboxProofResult,\n\tMaestroAppServerThreadArchiveResult,\n\tMaestroAppServerThreadDeleteResult,\n\tMaestroAppServerThreadForkResult,\n\tMaestroAppServerThreadGoalResult,\n\tMaestroAppServerThreadListResult,\n\tMaestroAppServerThreadMetadataUpdateResult,\n\tMaestroAppServerThreadReadResult,\n\tMaestroAppServerThreadStartResult,\n\tMaestroAppServerTurnsListResult,\n} from \"@evalops/contracts\";\nimport {\n\ttype MaestroAppServerSessionApi,\n\thandleMaestroAppServerRequest,\n} from \"./session-api.js\";\n\nconst DEFAULT_MAX_PENDING_REQUESTS = 64;\nconst OVERLOADED_ERROR_CODE = -32001;\n\nexport interface MaestroAppServerClientInfo {\n\tname: string;\n\ttitle?: string;\n\tversion: string;\n}\n\nexport interface InProcessMaestroAppServerClientOptions {\n\tclientInfo: MaestroAppServerClientInfo;\n\tmaxPendingRequests?: number;\n}\n\ntype AppServerRequestMethod = Exclude<\n\tMaestroAppServerClientMethod,\n\t\"initialize\"\n>;\n\ntype AppServerMethodResult<M extends AppServerRequestMethod> =\n\tM extends \"protocol/mode/list\"\n\t\t? MaestroAppServerProtocolModeListResult\n\t\t: M extends \"protocol/mode/set\"\n\t\t\t? MaestroAppServerProtocolModeSetResult\n\t\t\t: M extends \"model/list\"\n\t\t\t\t? MaestroAppServerModelListResult\n\t\t\t\t: M extends \"modelProvider/capabilities/read\"\n\t\t\t\t\t? MaestroAppServerModelProviderCapabilitiesReadResult\n\t\t\t\t\t: M extends \"policy/read\"\n\t\t\t\t\t\t? MaestroAppServerPolicyReadResult\n\t\t\t\t\t\t: M extends \"policy/check\"\n\t\t\t\t\t\t\t? MaestroAppServerPolicyCheckResult\n\t\t\t\t\t\t\t: M extends \"requirements/list\"\n\t\t\t\t\t\t\t\t? MaestroAppServerRequirementsListResult\n\t\t\t\t\t\t\t\t: M extends \"network/fetch\"\n\t\t\t\t\t\t\t\t\t? MaestroAppServerNetworkFetchResult\n\t\t\t\t\t\t\t\t\t: M extends \"network/audit/list\"\n\t\t\t\t\t\t\t\t\t\t? MaestroAppServerNetworkAuditListResult\n\t\t\t\t\t\t\t\t\t\t: M extends \"sandbox/probe\"\n\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerSandboxProbeResult\n\t\t\t\t\t\t\t\t\t\t\t: M extends \"sandbox/proof/run\"\n\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerSandboxProofResult\n\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"externalAgent/import\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerExternalAgentImportResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"pluginBundle/list\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerPluginBundleListResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\| \"pluginBundle/install\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\| \"pluginBundle/remove\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerPluginBundleMutationResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"daemon/status\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerDaemonStatusResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"remoteControl/status\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerRemoteControlStatusResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\| \"remoteControl/lease/read\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\| \"remoteControl/lease/heartbeat\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerRemoteControlLeaseResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"remoteControl/drain\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerRemoteControlDrainResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"command/exec\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerCommandExecResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\| \"command/exec/write\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\| \"command/exec/terminate\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerCommandProcessResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"fs/readFile\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerFsReadFileResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"fs/readDirectory\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerFsReadDirectoryResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"fs/getMetadata\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerFsMetadataResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"fs/watch\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerFsWatchResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\| \"fs/writeFile\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\| \"fs/createDirectory\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\| \"fs/remove\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\| \"fs/copy\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\| \"fs/unwatch\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerEmptyResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"thread/list\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerThreadListResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"thread/read\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerThreadReadResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"thread/metadata/update\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerThreadMetadataUpdateResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"thread/name/set\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerThreadMetadataUpdateResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\| \"thread/goal/get\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\| \"thread/goal/set\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\| \"thread/goal/clear\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerThreadGoalResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"thread/start\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerThreadStartResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"thread/fork\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerThreadForkResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\| \"thread/archive\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\| \"thread/unarchive\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerThreadArchiveResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"thread/delete\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerThreadDeleteResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"thread/turns/list\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerTurnsListResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: never;\n\nexport class InProcessMaestroAppServerClientError extends Error {\n\tconstructor(\n\t\treadonly code: number,\n\t\tmessage: string,\n\t) {\n\t\tsuper(message);\n\t\tthis.name = \"InProcessMaestroAppServerClientError\";\n\t}\n}\n\nexport class InProcessMaestroAppServerClient {\n\tprivate initialized = false;\n\tprivate initializing = false;\n\tprivate nextRequestId = 1;\n\tprivate pendingRequests = 0;\n\tprivate readonly maxPendingRequests: number;\n\n\tconstructor(\n\t\tprivate readonly api: MaestroAppServerSessionApi,\n\t\tprivate readonly options: InProcessMaestroAppServerClientOptions,\n\t) {\n\t\tthis.maxPendingRequests = Math.max(\n\t\t\t1,\n\t\t\tMath.trunc(options.maxPendingRequests ?? DEFAULT_MAX_PENDING_REQUESTS),\n\t\t);\n\t}\n\n\tasync initialize(): Promise<MaestroAppServerInitializeResult> {\n\t\tif (this.initialized \|\| this.initializing) {\n\t\t\tthrow new InProcessMaestroAppServerClientError(\n\t\t\t\t-32000,\n\t\t\t\t\"Already initialized\",\n\t\t\t);\n\t\t}\n\t\tthis.initializing = true;\n\t\ttry {\n\t\t\tconst response = await handleMaestroAppServerRequest(this.api, {\n\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\tid: 0,\n\t\t\t\tmethod: \"initialize\",\n\t\t\t\tparams: {\n\t\t\t\t\tclientInfo: this.options.clientInfo,\n\t\t\t\t},\n\t\t\t});\n\t\t\tif (response.error) {\n\t\t\t\tthrow new InProcessMaestroAppServerClientError(\n\t\t\t\t\tresponse.error.code,\n\t\t\t\t\tresponse.error.message,\n\t\t\t\t);\n\t\t\t}\n\t\t\tthis.initialized = true;\n\t\t\treturn response.result as MaestroAppServerInitializeResult;\n\t\t} finally {\n\t\t\tthis.initializing = false;\n\t\t}\n\t}\n\n\tasync request<M extends AppServerRequestMethod>(\n\t\tmethod: M,\n\t\tparams?: Record<string, unknown>,\n\t): Promise<AppServerMethodResult<M>> {\n\t\tif (!this.initialized) {\n\t\t\tthrow new InProcessMaestroAppServerClientError(-32000, \"Not initialized\");\n\t\t}\n\t\tif (this.pendingRequests >= this.maxPendingRequests) {\n\t\t\tthrow new InProcessMaestroAppServerClientError(\n\t\t\t\tOVERLOADED_ERROR_CODE,\n\t\t\t\t\"Server overloaded; retry later.\",\n\t\t\t);\n\t\t}\n\n\t\tthis.pendingRequests++;\n\t\ttry {\n\t\t\tconst response = await handleMaestroAppServerRequest(this.api, {\n\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\tid: this.nextRequestId++,\n\t\t\t\tmethod,\n\t\t\t\tparams,\n\t\t\t});\n\t\t\tif (response.error) {\n\t\t\t\tthrow new InProcessMaestroAppServerClientError(\n\t\t\t\t\tresponse.error.code,\n\t\t\t\t\tresponse.error.message,\n\t\t\t\t);\n\t\t\t}\n\t\t\treturn response.result as AppServerMethodResult<M>;\n\t\t} finally {\n\t\t\tthis.pendingRequests--;\n\t\t}\n\t}\n}\n\nexport function createInProcessMaestroAppServerClient(\n\tapi: MaestroAppServerSessionApi,\n\toptions: InProcessMaestroAppServerClientOptions,\n): InProcessMaestroAppServerClient {\n\treturn new InProcessMaestroAppServerClient(api, options);\n}\n"]}
1	+ {"version":3,"file":"in-process-client.js","sourceRoot":"","sources":["../../src/app-server/in-process-client.ts"],"names":[],"mappings":"AAsCA,OAAO,EAEN,6BAA6B,GAC7B,MAAM,kBAAkB,CAAC;AAE1B,MAAM,4BAA4B,GAAG,EAAE,CAAC;AACxC,MAAM,qBAAqB,GAAG,CAAC,KAAK,CAAC;AA2GrC,MAAM,OAAO,oCAAqC,SAAQ,KAAK;IAC9D,YACU,IAAY,EACrB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,SAAI,GAAJ,IAAI,CAAQ;QAIrB,IAAI,CAAC,IAAI,GAAG,sCAAsC,CAAC;IACpD,CAAC;CACD;AAED,MAAM,OAAO,+BAA+B;IAO3C,YACkB,GAA+B,EAC/B,OAA+C;QAD/C,QAAG,GAAH,GAAG,CAA4B;QAC/B,YAAO,GAAP,OAAO,CAAwC;QARzD,gBAAW,GAAG,KAAK,CAAC;QACpB,iBAAY,GAAG,KAAK,CAAC;QACrB,kBAAa,GAAG,CAAC,CAAC;QAClB,oBAAe,GAAG,CAAC,CAAC;QAO3B,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,GAAG,CACjC,CAAC,EACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,kBAAkB,IAAI,4BAA4B,CAAC,CACtE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU;QACf,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC3C,MAAM,IAAI,oCAAoC,CAC7C,CAAC,KAAK,EACN,qBAAqB,CACrB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,MAAM,6BAA6B,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC9D,OAAO,EAAE,KAAK;gBACd,EAAE,EAAE,CAAC;gBACL,MAAM,EAAE,YAAY;gBACpB,MAAM,EAAE;oBACP,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;iBACnC;aACD,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACpB,MAAM,IAAI,oCAAoC,CAC7C,QAAQ,CAAC,KAAK,CAAC,IAAI,EACnB,QAAQ,CAAC,KAAK,CAAC,OAAO,CACtB,CAAC;YACH,CAAC;YACD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,OAAO,QAAQ,CAAC,MAA0C,CAAC;QAC5D,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC3B,CAAC;IACF,CAAC;IAED,KAAK,CAAC,OAAO,CACZ,MAAS,EACT,MAAgC;QAEhC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACvB,MAAM,IAAI,oCAAoC,CAAC,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACrD,MAAM,IAAI,oCAAoC,CAC7C,qBAAqB,EACrB,iCAAiC,CACjC,CAAC;QACH,CAAC;QAED,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,MAAM,6BAA6B,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC9D,OAAO,EAAE,KAAK;gBACd,EAAE,EAAE,IAAI,CAAC,aAAa,EAAE;gBACxB,MAAM;gBACN,MAAM;aACN,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACpB,MAAM,IAAI,oCAAoC,CAC7C,QAAQ,CAAC,KAAK,CAAC,IAAI,EACnB,QAAQ,CAAC,KAAK,CAAC,OAAO,CACtB,CAAC;YACH,CAAC;YACD,OAAO,QAAQ,CAAC,MAAkC,CAAC;QACpD,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,eAAe,EAAE,CAAC;QACxB,CAAC;IACF,CAAC;CACD;AAED,MAAM,UAAU,qCAAqC,CACpD,GAA+B,EAC/B,OAA+C;IAE/C,OAAO,IAAI,+BAA+B,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AAC1D,CAAC","sourcesContent":["import type {\n\tMaestroAppServerClientMethod,\n\tMaestroAppServerCommandExecResult,\n\tMaestroAppServerCommandProcessResult,\n\tMaestroAppServerDaemonStatusResult,\n\tMaestroAppServerEmptyResult,\n\tMaestroAppServerExternalAgentImportResult,\n\tMaestroAppServerFsMetadataResult,\n\tMaestroAppServerFsReadDirectoryResult,\n\tMaestroAppServerFsReadFileResult,\n\tMaestroAppServerFsWatchResult,\n\tMaestroAppServerInitializeResult,\n\tMaestroAppServerModelListResult,\n\tMaestroAppServerModelProviderCapabilitiesReadResult,\n\tMaestroAppServerNetworkAuditListResult,\n\tMaestroAppServerNetworkFetchResult,\n\tMaestroAppServerPluginBundleListResult,\n\tMaestroAppServerPluginBundleMutationResult,\n\tMaestroAppServerPolicyCheckResult,\n\tMaestroAppServerPolicyReadResult,\n\tMaestroAppServerProtocolModeListResult,\n\tMaestroAppServerProtocolModeSetResult,\n\tMaestroAppServerRemoteControlDrainResult,\n\tMaestroAppServerRemoteControlLeaseResult,\n\tMaestroAppServerRemoteControlStatusResult,\n\tMaestroAppServerRequirementsListResult,\n\tMaestroAppServerSandboxCheckResult,\n\tMaestroAppServerSandboxProbeResult,\n\tMaestroAppServerThreadArchiveResult,\n\tMaestroAppServerThreadDeleteResult,\n\tMaestroAppServerThreadForkResult,\n\tMaestroAppServerThreadGoalResult,\n\tMaestroAppServerThreadListResult,\n\tMaestroAppServerThreadMetadataUpdateResult,\n\tMaestroAppServerThreadReadResult,\n\tMaestroAppServerThreadStartResult,\n\tMaestroAppServerTurnsListResult,\n} from \"@evalops/contracts\";\nimport {\n\ttype MaestroAppServerSessionApi,\n\thandleMaestroAppServerRequest,\n} from \"./session-api.js\";\n\nconst DEFAULT_MAX_PENDING_REQUESTS = 64;\nconst OVERLOADED_ERROR_CODE = -32001;\n\nexport interface MaestroAppServerClientInfo {\n\tname: string;\n\ttitle?: string;\n\tversion: string;\n}\n\nexport interface InProcessMaestroAppServerClientOptions {\n\tclientInfo: MaestroAppServerClientInfo;\n\tmaxPendingRequests?: number;\n}\n\ntype AppServerRequestMethod = Exclude<\n\tMaestroAppServerClientMethod,\n\t\"initialize\"\n>;\n\ntype AppServerMethodResult<M extends AppServerRequestMethod> =\n\tM extends \"protocol/mode/list\"\n\t\t? MaestroAppServerProtocolModeListResult\n\t\t: M extends \"protocol/mode/set\"\n\t\t\t? MaestroAppServerProtocolModeSetResult\n\t\t\t: M extends \"model/list\"\n\t\t\t\t? MaestroAppServerModelListResult\n\t\t\t\t: M extends \"modelProvider/capabilities/read\"\n\t\t\t\t\t? MaestroAppServerModelProviderCapabilitiesReadResult\n\t\t\t\t\t: M extends \"policy/read\"\n\t\t\t\t\t\t? MaestroAppServerPolicyReadResult\n\t\t\t\t\t\t: M extends \"policy/check\"\n\t\t\t\t\t\t\t? MaestroAppServerPolicyCheckResult\n\t\t\t\t\t\t\t: M extends \"requirements/list\"\n\t\t\t\t\t\t\t\t? MaestroAppServerRequirementsListResult\n\t\t\t\t\t\t\t\t: M extends \"network/fetch\"\n\t\t\t\t\t\t\t\t\t? MaestroAppServerNetworkFetchResult\n\t\t\t\t\t\t\t\t\t: M extends \"network/audit/list\"\n\t\t\t\t\t\t\t\t\t\t? MaestroAppServerNetworkAuditListResult\n\t\t\t\t\t\t\t\t\t\t: M extends \"sandbox/probe\"\n\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerSandboxProbeResult\n\t\t\t\t\t\t\t\t\t\t\t: M extends \"sandbox/check/run\"\n\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerSandboxCheckResult\n\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"externalAgent/import\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerExternalAgentImportResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"pluginBundle/list\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerPluginBundleListResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\| \"pluginBundle/install\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\| \"pluginBundle/remove\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerPluginBundleMutationResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"daemon/status\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerDaemonStatusResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"remoteControl/status\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerRemoteControlStatusResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\| \"remoteControl/lease/read\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\| \"remoteControl/lease/heartbeat\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerRemoteControlLeaseResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"remoteControl/drain\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerRemoteControlDrainResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"command/exec\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerCommandExecResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\| \"command/exec/write\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\| \"command/exec/terminate\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerCommandProcessResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"fs/readFile\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerFsReadFileResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"fs/readDirectory\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerFsReadDirectoryResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"fs/getMetadata\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerFsMetadataResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"fs/watch\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerFsWatchResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\| \"fs/writeFile\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\| \"fs/createDirectory\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\| \"fs/remove\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\| \"fs/copy\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\| \"fs/unwatch\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerEmptyResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"thread/list\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerThreadListResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"thread/read\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerThreadReadResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"thread/metadata/update\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerThreadMetadataUpdateResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"thread/name/set\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerThreadMetadataUpdateResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\| \"thread/goal/get\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\| \"thread/goal/set\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\| \"thread/goal/clear\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerThreadGoalResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"thread/start\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerThreadStartResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"thread/fork\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerThreadForkResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\| \"thread/archive\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\| \"thread/unarchive\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerThreadArchiveResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"thread/delete\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerThreadDeleteResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: M extends \"thread/turns/list\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t? MaestroAppServerTurnsListResult\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t: never;\n\nexport class InProcessMaestroAppServerClientError extends Error {\n\tconstructor(\n\t\treadonly code: number,\n\t\tmessage: string,\n\t) {\n\t\tsuper(message);\n\t\tthis.name = \"InProcessMaestroAppServerClientError\";\n\t}\n}\n\nexport class InProcessMaestroAppServerClient {\n\tprivate initialized = false;\n\tprivate initializing = false;\n\tprivate nextRequestId = 1;\n\tprivate pendingRequests = 0;\n\tprivate readonly maxPendingRequests: number;\n\n\tconstructor(\n\t\tprivate readonly api: MaestroAppServerSessionApi,\n\t\tprivate readonly options: InProcessMaestroAppServerClientOptions,\n\t) {\n\t\tthis.maxPendingRequests = Math.max(\n\t\t\t1,\n\t\t\tMath.trunc(options.maxPendingRequests ?? DEFAULT_MAX_PENDING_REQUESTS),\n\t\t);\n\t}\n\n\tasync initialize(): Promise<MaestroAppServerInitializeResult> {\n\t\tif (this.initialized \|\| this.initializing) {\n\t\t\tthrow new InProcessMaestroAppServerClientError(\n\t\t\t\t-32000,\n\t\t\t\t\"Already initialized\",\n\t\t\t);\n\t\t}\n\t\tthis.initializing = true;\n\t\ttry {\n\t\t\tconst response = await handleMaestroAppServerRequest(this.api, {\n\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\tid: 0,\n\t\t\t\tmethod: \"initialize\",\n\t\t\t\tparams: {\n\t\t\t\t\tclientInfo: this.options.clientInfo,\n\t\t\t\t},\n\t\t\t});\n\t\t\tif (response.error) {\n\t\t\t\tthrow new InProcessMaestroAppServerClientError(\n\t\t\t\t\tresponse.error.code,\n\t\t\t\t\tresponse.error.message,\n\t\t\t\t);\n\t\t\t}\n\t\t\tthis.initialized = true;\n\t\t\treturn response.result as MaestroAppServerInitializeResult;\n\t\t} finally {\n\t\t\tthis.initializing = false;\n\t\t}\n\t}\n\n\tasync request<M extends AppServerRequestMethod>(\n\t\tmethod: M,\n\t\tparams?: Record<string, unknown>,\n\t): Promise<AppServerMethodResult<M>> {\n\t\tif (!this.initialized) {\n\t\t\tthrow new InProcessMaestroAppServerClientError(-32000, \"Not initialized\");\n\t\t}\n\t\tif (this.pendingRequests >= this.maxPendingRequests) {\n\t\t\tthrow new InProcessMaestroAppServerClientError(\n\t\t\t\tOVERLOADED_ERROR_CODE,\n\t\t\t\t\"Server overloaded; retry later.\",\n\t\t\t);\n\t\t}\n\n\t\tthis.pendingRequests++;\n\t\ttry {\n\t\t\tconst response = await handleMaestroAppServerRequest(this.api, {\n\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\tid: this.nextRequestId++,\n\t\t\t\tmethod,\n\t\t\t\tparams,\n\t\t\t});\n\t\t\tif (response.error) {\n\t\t\t\tthrow new InProcessMaestroAppServerClientError(\n\t\t\t\t\tresponse.error.code,\n\t\t\t\t\tresponse.error.message,\n\t\t\t\t);\n\t\t\t}\n\t\t\treturn response.result as AppServerMethodResult<M>;\n\t\t} finally {\n\t\t\tthis.pendingRequests--;\n\t\t}\n\t}\n}\n\nexport function createInProcessMaestroAppServerClient(\n\tapi: MaestroAppServerSessionApi,\n\toptions: InProcessMaestroAppServerClientOptions,\n): InProcessMaestroAppServerClient {\n\treturn new InProcessMaestroAppServerClient(api, options);\n}\n"]}

package/dist/app-server/protocol-modes-api.js CHANGED Viewed

@@ -2,7 +2,7 @@ import { maestroAppServerClientMethods, maestroAppServerProtocolModeIds, maestro
 const DEFAULT_MODE = "standard";
 const REVIEW_BLOCKED_METHODS = new Set([
     "network/fetch",
-    "sandbox/proof/run",
+    "sandbox/check/run",
     "externalAgent/import",
     "pluginBundle/install",
     "pluginBundle/remove",

package/dist/app-server/protocol-modes-api.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"protocol-modes-api.js","sourceRoot":"","sources":["../../src/app-server/protocol-modes-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAMN,6BAA6B,EAC7B,+BAA+B,EAC/B,6BAA6B,GAC7B,MAAM,oBAAoB,CAAC;AAI5B,MAAM,YAAY,GAAmC,UAAU,CAAC;AAEhE,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAA+B;IACpE,eAAe;IACf,mBAAmB;IACnB,sBAAsB;IACtB,sBAAsB;IACtB,qBAAqB;IACrB,+BAA+B;IAC/B,qBAAqB;IACrB,cAAc;IACd,oBAAoB;IACpB,wBAAwB;IACxB,cAAc;IACd,oBAAoB;IACpB,WAAW;IACX,SAAS;IACT,UAAU;IACV,wBAAwB;IACxB,iBAAiB;IACjB,iBAAiB;IACjB,mBAAmB;IACnB,cAAc;IACd,aAAa;IACb,gBAAgB;IAChB,kBAAkB;IAClB,eAAe;CACf,CAAC,CAAC;AAEH,MAAM,OAAO,kCAAmC,SAAQ,KAAK;IAC5D,YACU,IAAY,EACrB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,SAAI,GAAJ,IAAI,CAAQ;QAIrB,IAAI,CAAC,IAAI,GAAG,oCAAoC,CAAC;IAClD,CAAC;CACD;AAoBD,SAAS,aAAa,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC3C,MAAM,IAAI,kCAAkC,CAAC,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,kCAAkC,CAAC,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IACtE,CAAC;IACD,IACC,+BAA+B,CAAC,QAAQ,CACvC,KAAuC,CACvC,EACA,CAAC;QACF,OAAO,KAAuC,CAAC;IAChD,CAAC;IACD,MAAM,IAAI,kCAAkC,CAAC,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,YAAY,CAAC,MAAe;IACpC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACX,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,OAAO,MAAM,CAAC;IACf,CAAC;IACD,MAAM,IAAI,kCAAkC,CAAC,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,SAAS,CAAC,IAAoC;IACtD,QAAQ,IAAI,EAAE,CAAC;QACd,KAAK,QAAQ;YACZ,OAAO,QAAQ,CAAC;QACjB,KAAK,UAAU;YACd,OAAO,UAAU,CAAC;QACnB,KAAK,UAAU;YACd,OAAO,UAAU,CAAC;IACpB,CAAC;AACF,CAAC;AAED,SAAS,qBAAqB,CAC7B,IAAoC,EACpC,MAAoC;IAEpC,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACb,CAAC;IACD,OAAO,CAAC,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,YAAY,CACpB,IAAoC;IAEpC,MAAM,cAAc,GAAG,6BAA6B,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CACtE,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,CACnC,CAAC;IACF,MAAM,cAAc,GAAG,6BAA6B,CAAC,MAAM,CAC1D,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,CAChD,CAAC;IACF,OAAO;QACN,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC;QACtB,QAAQ,EAAE,IAAI,KAAK,QAAQ;QAC3B,QAAQ,EAAE,IAAI,KAAK,UAAU;QAC7B,cAAc,EAAE,CAAC,GAAG,cAAc,CAAC;QACnC,cAAc,EAAE,CAAC,GAAG,cAAc,CAAC;QACnC,mBAAmB,EAClB,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,6BAA6B,CAAC,CAAC,CAAC,CAAC,EAAE;KAC9D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mCAAmC,CAClD,UAAgD,EAAE;IAElD,IAAI,UAAU,GACb,OAAO,CAAC,WAAW,KAAK,SAAS;QAChC,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACvC,OAAO;QACN,SAAS,CAAC,MAAM;YACf,YAAY,CAAC,MAAM,CAAC,CAAC;YACrB,OAAO;gBACN,UAAU;gBACV,WAAW,EAAE,YAAY;gBACzB,KAAK,EAAE,+BAA+B,CAAC,GAAG,CAAC,YAAY,CAAC;aACxD,CAAC;QACH,CAAC;QAED,OAAO,CAAC,MAAM;YACb,MAAM,gBAAgB,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YAC9C,UAAU,GAAG,aAAa,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAClD,OAAO;gBACN,UAAU;gBACV,IAAI,EAAE,YAAY,CAAC,UAAU,CAAC;aAC9B,CAAC;QACH,CAAC;QAED,WAAW,CAAC,MAAM;YACjB,IAAI,qBAAqB,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC;gBAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC1B,CAAC;YACD,OAAO;gBACN,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,GAAG,MAAM,sCAAsC,UAAU,EAAE;aACnE,CAAC;QACH,CAAC;QAED,UAAU;YACT,OAAO,UAAU,CAAC;QACnB,CAAC;KACD,CAAC;AACH,CAAC","sourcesContent":["import {\n\ttype MaestroAppServerClientMethod,\n\ttype MaestroAppServerProtocolMode,\n\ttype MaestroAppServerProtocolModeId,\n\ttype MaestroAppServerProtocolModeListResult,\n\ttype MaestroAppServerProtocolModeSetResult,\n\tmaestroAppServerClientMethods,\n\tmaestroAppServerProtocolModeIds,\n\tmaestroAppServerServerMethods,\n} from \"@evalops/contracts\";\n\ntype UnknownRecord = Record<string, unknown>;\n\nconst DEFAULT_MODE: MaestroAppServerProtocolModeId = \"standard\";\n\nconst REVIEW_BLOCKED_METHODS = new Set<MaestroAppServerClientMethod>([\n\t\"network/fetch\",\n\t\"sandbox/~~proof~~/run\",\n\t\"externalAgent/import\",\n\t\"pluginBundle/install\",\n\t\"pluginBundle/remove\",\n\t\"remoteControl/lease/heartbeat\",\n\t\"remoteControl/drain\",\n\t\"command/exec\",\n\t\"command/exec/write\",\n\t\"command/exec/terminate\",\n\t\"fs/writeFile\",\n\t\"fs/createDirectory\",\n\t\"fs/remove\",\n\t\"fs/copy\",\n\t\"fs/watch\",\n\t\"thread/metadata/update\",\n\t\"thread/name/set\",\n\t\"thread/goal/set\",\n\t\"thread/goal/clear\",\n\t\"thread/start\",\n\t\"thread/fork\",\n\t\"thread/archive\",\n\t\"thread/unarchive\",\n\t\"thread/delete\",\n]);\n\nexport class MaestroAppServerProtocolModesError extends Error {\n\tconstructor(\n\t\treadonly code: number,\n\t\tmessage: string,\n\t) {\n\t\tsuper(message);\n\t\tthis.name = \"MaestroAppServerProtocolModesError\";\n\t}\n}\n\nexport interface MaestroAppServerProtocolModeDecision {\n\tallowed: boolean;\n\treason?: string;\n}\n\nexport interface MaestroAppServerProtocolModes {\n\tlistModes(params?: UnknownRecord): MaestroAppServerProtocolModeListResult;\n\tsetMode(params?: UnknownRecord): MaestroAppServerProtocolModeSetResult;\n\tcheckMethod(\n\t\tmethod: MaestroAppServerClientMethod,\n\t): MaestroAppServerProtocolModeDecision;\n\tactiveMode(): MaestroAppServerProtocolModeId;\n}\n\nexport interface MaestroAppServerProtocolModesOptions {\n\tinitialMode?: MaestroAppServerProtocolModeId;\n}\n\nfunction normalizeMode(value: unknown): MaestroAppServerProtocolModeId {\n\tif (value === undefined \|\| value === null) {\n\t\tthrow new MaestroAppServerProtocolModesError(-32602, \"Missing mode\");\n\t}\n\tif (typeof value !== \"string\") {\n\t\tthrow new MaestroAppServerProtocolModesError(-32602, \"Invalid mode\");\n\t}\n\tif (\n\t\tmaestroAppServerProtocolModeIds.includes(\n\t\t\tvalue as MaestroAppServerProtocolModeId,\n\t\t)\n\t) {\n\t\treturn value as MaestroAppServerProtocolModeId;\n\t}\n\tthrow new MaestroAppServerProtocolModesError(-32602, \"Invalid mode\");\n}\n\nfunction isRecord(value: unknown): value is UnknownRecord {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction paramsRecord(params: unknown): UnknownRecord {\n\tif (params === undefined) {\n\t\treturn {};\n\t}\n\tif (isRecord(params)) {\n\t\treturn params;\n\t}\n\tthrow new MaestroAppServerProtocolModesError(-32602, \"Invalid params\");\n}\n\nfunction modeLabel(mode: MaestroAppServerProtocolModeId): string {\n\tswitch (mode) {\n\t\tcase \"review\":\n\t\t\treturn \"Review\";\n\t\tcase \"realtime\":\n\t\t\treturn \"Realtime\";\n\t\tcase \"standard\":\n\t\t\treturn \"Standard\";\n\t}\n}\n\nfunction isMethodAllowedInMode(\n\tmode: MaestroAppServerProtocolModeId,\n\tmethod: MaestroAppServerClientMethod,\n): boolean {\n\tif (mode !== \"review\") {\n\t\treturn true;\n\t}\n\treturn !REVIEW_BLOCKED_METHODS.has(method);\n}\n\nfunction describeMode(\n\tmode: MaestroAppServerProtocolModeId,\n): MaestroAppServerProtocolMode {\n\tconst allowedMethods = maestroAppServerClientMethods.filter((method) =>\n\t\tisMethodAllowedInMode(mode, method),\n\t);\n\tconst blockedMethods = maestroAppServerClientMethods.filter(\n\t\t(method) => !isMethodAllowedInMode(mode, method),\n\t);\n\treturn {\n\t\tid: mode,\n\t\tlabel: modeLabel(mode),\n\t\treadOnly: mode === \"review\",\n\t\trealtime: mode === \"realtime\",\n\t\tallowedMethods: [...allowedMethods],\n\t\tblockedMethods: [...blockedMethods],\n\t\tserverNotifications:\n\t\t\tmode === \"realtime\" ? [...maestroAppServerServerMethods] : [],\n\t};\n}\n\nexport function createMaestroAppServerProtocolModes(\n\toptions: MaestroAppServerProtocolModesOptions = {},\n): MaestroAppServerProtocolModes {\n\tlet activeMode =\n\t\toptions.initialMode === undefined\n\t\t\t? DEFAULT_MODE\n\t\t\t: normalizeMode(options.initialMode);\n\treturn {\n\t\tlistModes(params) {\n\t\t\tparamsRecord(params);\n\t\t\treturn {\n\t\t\t\tactiveMode,\n\t\t\t\tdefaultMode: DEFAULT_MODE,\n\t\t\t\tmodes: maestroAppServerProtocolModeIds.map(describeMode),\n\t\t\t};\n\t\t},\n\n\t\tsetMode(params) {\n\t\t\tconst normalizedParams = paramsRecord(params);\n\t\t\tactiveMode = normalizeMode(normalizedParams.mode);\n\t\t\treturn {\n\t\t\t\tactiveMode,\n\t\t\t\tmode: describeMode(activeMode),\n\t\t\t};\n\t\t},\n\n\t\tcheckMethod(method) {\n\t\t\tif (isMethodAllowedInMode(activeMode, method)) {\n\t\t\t\treturn { allowed: true };\n\t\t\t}\n\t\t\treturn {\n\t\t\t\tallowed: false,\n\t\t\t\treason: `${method} is blocked while protocol mode is ${activeMode}`,\n\t\t\t};\n\t\t},\n\n\t\tactiveMode() {\n\t\t\treturn activeMode;\n\t\t},\n\t};\n}\n"]}
1	+ {"version":3,"file":"protocol-modes-api.js","sourceRoot":"","sources":["../../src/app-server/protocol-modes-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAMN,6BAA6B,EAC7B,+BAA+B,EAC/B,6BAA6B,GAC7B,MAAM,oBAAoB,CAAC;AAI5B,MAAM,YAAY,GAAmC,UAAU,CAAC;AAEhE,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAA+B;IACpE,eAAe;IACf,mBAAmB;IACnB,sBAAsB;IACtB,sBAAsB;IACtB,qBAAqB;IACrB,+BAA+B;IAC/B,qBAAqB;IACrB,cAAc;IACd,oBAAoB;IACpB,wBAAwB;IACxB,cAAc;IACd,oBAAoB;IACpB,WAAW;IACX,SAAS;IACT,UAAU;IACV,wBAAwB;IACxB,iBAAiB;IACjB,iBAAiB;IACjB,mBAAmB;IACnB,cAAc;IACd,aAAa;IACb,gBAAgB;IAChB,kBAAkB;IAClB,eAAe;CACf,CAAC,CAAC;AAEH,MAAM,OAAO,kCAAmC,SAAQ,KAAK;IAC5D,YACU,IAAY,EACrB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,SAAI,GAAJ,IAAI,CAAQ;QAIrB,IAAI,CAAC,IAAI,GAAG,oCAAoC,CAAC;IAClD,CAAC;CACD;AAoBD,SAAS,aAAa,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC3C,MAAM,IAAI,kCAAkC,CAAC,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,kCAAkC,CAAC,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IACtE,CAAC;IACD,IACC,+BAA+B,CAAC,QAAQ,CACvC,KAAuC,CACvC,EACA,CAAC;QACF,OAAO,KAAuC,CAAC;IAChD,CAAC;IACD,MAAM,IAAI,kCAAkC,CAAC,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,YAAY,CAAC,MAAe;IACpC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACX,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,OAAO,MAAM,CAAC;IACf,CAAC;IACD,MAAM,IAAI,kCAAkC,CAAC,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,SAAS,CAAC,IAAoC;IACtD,QAAQ,IAAI,EAAE,CAAC;QACd,KAAK,QAAQ;YACZ,OAAO,QAAQ,CAAC;QACjB,KAAK,UAAU;YACd,OAAO,UAAU,CAAC;QACnB,KAAK,UAAU;YACd,OAAO,UAAU,CAAC;IACpB,CAAC;AACF,CAAC;AAED,SAAS,qBAAqB,CAC7B,IAAoC,EACpC,MAAoC;IAEpC,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACb,CAAC;IACD,OAAO,CAAC,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,YAAY,CACpB,IAAoC;IAEpC,MAAM,cAAc,GAAG,6BAA6B,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CACtE,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,CACnC,CAAC;IACF,MAAM,cAAc,GAAG,6BAA6B,CAAC,MAAM,CAC1D,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,CAChD,CAAC;IACF,OAAO;QACN,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC;QACtB,QAAQ,EAAE,IAAI,KAAK,QAAQ;QAC3B,QAAQ,EAAE,IAAI,KAAK,UAAU;QAC7B,cAAc,EAAE,CAAC,GAAG,cAAc,CAAC;QACnC,cAAc,EAAE,CAAC,GAAG,cAAc,CAAC;QACnC,mBAAmB,EAClB,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,6BAA6B,CAAC,CAAC,CAAC,CAAC,EAAE;KAC9D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mCAAmC,CAClD,UAAgD,EAAE;IAElD,IAAI,UAAU,GACb,OAAO,CAAC,WAAW,KAAK,SAAS;QAChC,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACvC,OAAO;QACN,SAAS,CAAC,MAAM;YACf,YAAY,CAAC,MAAM,CAAC,CAAC;YACrB,OAAO;gBACN,UAAU;gBACV,WAAW,EAAE,YAAY;gBACzB,KAAK,EAAE,+BAA+B,CAAC,GAAG,CAAC,YAAY,CAAC;aACxD,CAAC;QACH,CAAC;QAED,OAAO,CAAC,MAAM;YACb,MAAM,gBAAgB,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YAC9C,UAAU,GAAG,aAAa,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAClD,OAAO;gBACN,UAAU;gBACV,IAAI,EAAE,YAAY,CAAC,UAAU,CAAC;aAC9B,CAAC;QACH,CAAC;QAED,WAAW,CAAC,MAAM;YACjB,IAAI,qBAAqB,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC;gBAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC1B,CAAC;YACD,OAAO;gBACN,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,GAAG,MAAM,sCAAsC,UAAU,EAAE;aACnE,CAAC;QACH,CAAC;QAED,UAAU;YACT,OAAO,UAAU,CAAC;QACnB,CAAC;KACD,CAAC;AACH,CAAC","sourcesContent":["import {\n\ttype MaestroAppServerClientMethod,\n\ttype MaestroAppServerProtocolMode,\n\ttype MaestroAppServerProtocolModeId,\n\ttype MaestroAppServerProtocolModeListResult,\n\ttype MaestroAppServerProtocolModeSetResult,\n\tmaestroAppServerClientMethods,\n\tmaestroAppServerProtocolModeIds,\n\tmaestroAppServerServerMethods,\n} from \"@evalops/contracts\";\n\ntype UnknownRecord = Record<string, unknown>;\n\nconst DEFAULT_MODE: MaestroAppServerProtocolModeId = \"standard\";\n\nconst REVIEW_BLOCKED_METHODS = new Set<MaestroAppServerClientMethod>([\n\t\"network/fetch\",\n\t\"sandbox/check/run\",\n\t\"externalAgent/import\",\n\t\"pluginBundle/install\",\n\t\"pluginBundle/remove\",\n\t\"remoteControl/lease/heartbeat\",\n\t\"remoteControl/drain\",\n\t\"command/exec\",\n\t\"command/exec/write\",\n\t\"command/exec/terminate\",\n\t\"fs/writeFile\",\n\t\"fs/createDirectory\",\n\t\"fs/remove\",\n\t\"fs/copy\",\n\t\"fs/watch\",\n\t\"thread/metadata/update\",\n\t\"thread/name/set\",\n\t\"thread/goal/set\",\n\t\"thread/goal/clear\",\n\t\"thread/start\",\n\t\"thread/fork\",\n\t\"thread/archive\",\n\t\"thread/unarchive\",\n\t\"thread/delete\",\n]);\n\nexport class MaestroAppServerProtocolModesError extends Error {\n\tconstructor(\n\t\treadonly code: number,\n\t\tmessage: string,\n\t) {\n\t\tsuper(message);\n\t\tthis.name = \"MaestroAppServerProtocolModesError\";\n\t}\n}\n\nexport interface MaestroAppServerProtocolModeDecision {\n\tallowed: boolean;\n\treason?: string;\n}\n\nexport interface MaestroAppServerProtocolModes {\n\tlistModes(params?: UnknownRecord): MaestroAppServerProtocolModeListResult;\n\tsetMode(params?: UnknownRecord): MaestroAppServerProtocolModeSetResult;\n\tcheckMethod(\n\t\tmethod: MaestroAppServerClientMethod,\n\t): MaestroAppServerProtocolModeDecision;\n\tactiveMode(): MaestroAppServerProtocolModeId;\n}\n\nexport interface MaestroAppServerProtocolModesOptions {\n\tinitialMode?: MaestroAppServerProtocolModeId;\n}\n\nfunction normalizeMode(value: unknown): MaestroAppServerProtocolModeId {\n\tif (value === undefined \|\| value === null) {\n\t\tthrow new MaestroAppServerProtocolModesError(-32602, \"Missing mode\");\n\t}\n\tif (typeof value !== \"string\") {\n\t\tthrow new MaestroAppServerProtocolModesError(-32602, \"Invalid mode\");\n\t}\n\tif (\n\t\tmaestroAppServerProtocolModeIds.includes(\n\t\t\tvalue as MaestroAppServerProtocolModeId,\n\t\t)\n\t) {\n\t\treturn value as MaestroAppServerProtocolModeId;\n\t}\n\tthrow new MaestroAppServerProtocolModesError(-32602, \"Invalid mode\");\n}\n\nfunction isRecord(value: unknown): value is UnknownRecord {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction paramsRecord(params: unknown): UnknownRecord {\n\tif (params === undefined) {\n\t\treturn {};\n\t}\n\tif (isRecord(params)) {\n\t\treturn params;\n\t}\n\tthrow new MaestroAppServerProtocolModesError(-32602, \"Invalid params\");\n}\n\nfunction modeLabel(mode: MaestroAppServerProtocolModeId): string {\n\tswitch (mode) {\n\t\tcase \"review\":\n\t\t\treturn \"Review\";\n\t\tcase \"realtime\":\n\t\t\treturn \"Realtime\";\n\t\tcase \"standard\":\n\t\t\treturn \"Standard\";\n\t}\n}\n\nfunction isMethodAllowedInMode(\n\tmode: MaestroAppServerProtocolModeId,\n\tmethod: MaestroAppServerClientMethod,\n): boolean {\n\tif (mode !== \"review\") {\n\t\treturn true;\n\t}\n\treturn !REVIEW_BLOCKED_METHODS.has(method);\n}\n\nfunction describeMode(\n\tmode: MaestroAppServerProtocolModeId,\n): MaestroAppServerProtocolMode {\n\tconst allowedMethods = maestroAppServerClientMethods.filter((method) =>\n\t\tisMethodAllowedInMode(mode, method),\n\t);\n\tconst blockedMethods = maestroAppServerClientMethods.filter(\n\t\t(method) => !isMethodAllowedInMode(mode, method),\n\t);\n\treturn {\n\t\tid: mode,\n\t\tlabel: modeLabel(mode),\n\t\treadOnly: mode === \"review\",\n\t\trealtime: mode === \"realtime\",\n\t\tallowedMethods: [...allowedMethods],\n\t\tblockedMethods: [...blockedMethods],\n\t\tserverNotifications:\n\t\t\tmode === \"realtime\" ? [...maestroAppServerServerMethods] : [],\n\t};\n}\n\nexport function createMaestroAppServerProtocolModes(\n\toptions: MaestroAppServerProtocolModesOptions = {},\n): MaestroAppServerProtocolModes {\n\tlet activeMode =\n\t\toptions.initialMode === undefined\n\t\t\t? DEFAULT_MODE\n\t\t\t: normalizeMode(options.initialMode);\n\treturn {\n\t\tlistModes(params) {\n\t\t\tparamsRecord(params);\n\t\t\treturn {\n\t\t\t\tactiveMode,\n\t\t\t\tdefaultMode: DEFAULT_MODE,\n\t\t\t\tmodes: maestroAppServerProtocolModeIds.map(describeMode),\n\t\t\t};\n\t\t},\n\n\t\tsetMode(params) {\n\t\t\tconst normalizedParams = paramsRecord(params);\n\t\t\tactiveMode = normalizeMode(normalizedParams.mode);\n\t\t\treturn {\n\t\t\t\tactiveMode,\n\t\t\t\tmode: describeMode(activeMode),\n\t\t\t};\n\t\t},\n\n\t\tcheckMethod(method) {\n\t\t\tif (isMethodAllowedInMode(activeMode, method)) {\n\t\t\t\treturn { allowed: true };\n\t\t\t}\n\t\t\treturn {\n\t\t\t\tallowed: false,\n\t\t\t\treason: `${method} is blocked while protocol mode is ${activeMode}`,\n\t\t\t};\n\t\t},\n\n\t\tactiveMode() {\n\t\t\treturn activeMode;\n\t\t},\n\t};\n}\n"]}

package/dist/app-server/sandbox-check-api.d.ts ADDED Viewed

@@ -0,0 +1,21 @@
+import type { MaestroAppServerSandboxCheckResult, MaestroAppServerSandboxProbeResult, MaestroAppServerSandboxType } from "@evalops/contracts";
+import { type CreateSandboxOptions, type Sandbox } from "../sandbox/index.js";
+type UnknownRecord = Record<string, unknown>;
+export declare class MaestroAppServerSandboxCheckError extends Error {
+    readonly code: number;
+    constructor(code: number, message: string);
+}
+export interface MaestroAppServerSandboxCheck {
+    probe(): MaestroAppServerSandboxProbeResult;
+    runCheck(params?: UnknownRecord): Promise<MaestroAppServerSandboxCheckResult>;
+}
+export interface MaestroAppServerSandboxCheckOptions {
+    cwd?: string;
+    isNativeSandboxAvailable?: () => boolean;
+    getNativeSandboxType?: () => MaestroAppServerSandboxType;
+    createSandbox?: (options: CreateSandboxOptions) => Promise<Sandbox | undefined>;
+}
+export declare function normalizeSandboxCheckParams(value: unknown): UnknownRecord;
+export declare function createMaestroAppServerSandboxCheck(options?: MaestroAppServerSandboxCheckOptions): MaestroAppServerSandboxCheck;
+export {};
+//# sourceMappingURL=sandbox-check-api.d.ts.map

package/dist/app-server/{sandbox-proof-api.d.ts.map → sandbox-check-api.d.ts.map} RENAMED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"sandbox-~~proof~~-api.d.ts","sourceRoot":"","sources":["../../src/app-server/sandbox-~~proof~~-api.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,~~EACX~~,kCAAkC,~~EAElC~~,kCAAkC,EAClC,2BAA2B,EAC3B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACN,KAAK,oBAAoB,EACzB,KAAK,OAAO,EAIZ,MAAM,qBAAqB,CAAC;AAE7B,KAAK,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE7C,qBAAa,iCAAkC,SAAQ,KAAK;IAE1D,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM;CAKhB;AAED,MAAM,WAAW,4BAA4B;IAC5C,KAAK,IAAI,kCAAkC,CAAC;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,kCAAkC,CAAC,CAAC;CAC9E;AAED,MAAM,WAAW,mCAAmC;IACnD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,wBAAwB,CAAC,EAAE,MAAM,OAAO,CAAC;IACzC,oBAAoB,CAAC,EAAE,MAAM,2BAA2B,CAAC;IACzD,aAAa,CAAC,EAAE,CACf,OAAO,EAAE,oBAAoB,KACzB,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;CAClC;AAYD,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,aAAa,CAQzE;AAcD,wBAAgB,kCAAkC,CACjD,OAAO,GAAE,mCAAwC,GAC/C,4BAA4B,CA4I9B"}
1	+ {"version":3,"file":"sandbox-check-api.d.ts","sourceRoot":"","sources":["../../src/app-server/sandbox-check-api.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAEX,kCAAkC,EAClC,kCAAkC,EAClC,2BAA2B,EAC3B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACN,KAAK,oBAAoB,EACzB,KAAK,OAAO,EAIZ,MAAM,qBAAqB,CAAC;AAE7B,KAAK,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE7C,qBAAa,iCAAkC,SAAQ,KAAK;IAE1D,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM;CAKhB;AAED,MAAM,WAAW,4BAA4B;IAC5C,KAAK,IAAI,kCAAkC,CAAC;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,kCAAkC,CAAC,CAAC;CAC9E;AAED,MAAM,WAAW,mCAAmC;IACnD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,wBAAwB,CAAC,EAAE,MAAM,OAAO,CAAC;IACzC,oBAAoB,CAAC,EAAE,MAAM,2BAA2B,CAAC;IACzD,aAAa,CAAC,EAAE,CACf,OAAO,EAAE,oBAAoB,KACzB,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;CAClC;AAYD,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,aAAa,CAQzE;AAcD,wBAAgB,kCAAkC,CACjD,OAAO,GAAE,mCAAwC,GAC/C,4BAA4B,CA4I9B"}

package/dist/app-server/{sandbox-proof-api.js → sandbox-check-api.js} RENAMED Viewed

@@ -2,28 +2,28 @@ import { existsSync, mkdtempSync, rmSync } from "node:fs";
 import { platform as osPlatform, tmpdir } from "node:os";
 import { join } from "node:path";
 import { createSandbox, getNativeSandboxType, isNativeSandboxAvailable, } from "../sandbox/index.js";
-export class MaestroAppServerSandboxProofError extends Error {
+export class MaestroAppServerSandboxCheckError extends Error {
     constructor(code, message) {
         super(message);
         this.code = code;
-        this.name = "MaestroAppServerSandboxProofError";
+        this.name = "MaestroAppServerSandboxCheckError";
     }
 }
-function parseProofMode(value) {
+function parseCheckMode(value) {
     if (value === undefined || value === null) {
         return "workspace-write";
     }
     if (value === "read-only" || value === "workspace-write") {
         return value;
     }
-    throw new MaestroAppServerSandboxProofError(-32602, "Invalid sandbox mode");
+    throw new MaestroAppServerSandboxCheckError(-32602, "Invalid sandbox mode");
 }
-export function normalizeSandboxProofParams(value) {
+export function normalizeSandboxCheckParams(value) {
     if (value === undefined || value === null) {
         return {};
     }
     if (typeof value !== "object" || Array.isArray(value)) {
-        throw new MaestroAppServerSandboxProofError(-32602, "Invalid params");
+        throw new MaestroAppServerSandboxCheckError(-32602, "Invalid params");
     }
     return value;
 }
@@ -33,7 +33,7 @@ function shellQuote(value) {
 function checkDetail(name, passed, detail) {
     return { name, passed, detail };
 }
-export function createMaestroAppServerSandboxProof(options = {}) {
+export function createMaestroAppServerSandboxCheck(options = {}) {
     const available = options.isNativeSandboxAvailable ?? isNativeSandboxAvailable;
     const sandboxType = options.getNativeSandboxType ?? getNativeSandboxType;
     const sandboxFactory = options.createSandbox ?? createSandbox;
@@ -46,12 +46,12 @@ export function createMaestroAppServerSandboxProof(options = {}) {
                 type: sandboxType(),
                 platform: osPlatform(),
                 supportedModes: isAvailable ? ["read-only", "workspace-write"] : [],
-                proofAvailable: isAvailable,
+                checkAvailable: isAvailable,
             };
         },
-        async runProof(params = {}) {
-            const normalizedParams = normalizeSandboxProofParams(params);
-            const mode = parseProofMode(normalizedParams.mode);
+        async runCheck(params = {}) {
+            const normalizedParams = normalizeSandboxCheckParams(params);
+            const mode = parseCheckMode(normalizedParams.mode);
             const type = sandboxType();
             if (!available()) {
                 return {
@@ -63,12 +63,12 @@ export function createMaestroAppServerSandboxProof(options = {}) {
                     checks: [],
                 };
             }
-            const outsidePath = join(tmpdir(), `maestro-native-proof-outside-${process.pid}-${Date.now()}`);
+            const outsidePath = join(tmpdir(), `maestro-native-check-outside-${process.pid}-${Date.now()}`);
             let workspace;
             let sandbox;
             const checks = [];
             try {
-                workspace = mkdtempSync(join(cwd, "maestro-native-proof-"));
+                workspace = mkdtempSync(join(cwd, "maestro-native-check-"));
                 sandbox = await sandboxFactory({
                     mode,
                     cwd: workspace,
@@ -86,15 +86,15 @@ export function createMaestroAppServerSandboxProof(options = {}) {
                 const envMarker = await sandbox.exec('printf "%s" "$MAESTRO_SANDBOX"');
                 checks.push(checkDetail("native-env-marker", envMarker.exitCode === 0 && envMarker.stdout.trim() === type, `MAESTRO_SANDBOX=${envMarker.stdout.trim() || "(empty)"}`));
                 if (mode === "workspace-write") {
-                    const inside = await sandbox.exec("touch inside-proof.txt && test -f inside-proof.txt");
+                    const inside = await sandbox.exec("touch inside-check.txt && test -f inside-check.txt");
                     checks.push(checkDetail("workspace-write", inside.exitCode === 0, inside.exitCode === 0
                         ? "wrote inside workspace"
                         : inside.stderr || inside.stdout || "inside write failed"));
                 }
                 else {
-                    const readOnly = await sandbox.exec("touch read-only-proof.txt 2>/dev/null");
+                    const readOnly = await sandbox.exec("touch read-only-check.txt 2>/dev/null");
                     checks.push(checkDetail("read-only-write-blocked", readOnly.exitCode !== 0 &&
-                        !existsSync(join(workspace, "read-only-proof.txt")), readOnly.exitCode !== 0
+                        !existsSync(join(workspace, "read-only-check.txt")), readOnly.exitCode !== 0
                         ? "blocked workspace write"
                         : "workspace write unexpectedly succeeded"));
                 }
@@ -111,7 +111,7 @@ export function createMaestroAppServerSandboxProof(options = {}) {
                 };
             }
             catch (error) {
-                checks.push(checkDetail("native-sandbox-proof", false, error instanceof Error ? error.message : "proof failed"));
+                checks.push(checkDetail("native-sandbox-check", false, error instanceof Error ? error.message : "check failed"));
                 return { mode, available: true, type, passed: false, checks };
             }
             finally {
@@ -124,4 +124,4 @@ export function createMaestroAppServerSandboxProof(options = {}) {
         },
     };
 }
-//# sourceMappingURL=sandbox-proof-api.js.map
+//# sourceMappingURL=sandbox-check-api.js.map

package/dist/app-server/{sandbox-proof-api.js.map → sandbox-check-api.js.map} RENAMED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"sandbox-proof-api.js","sourceRoot":"","sources":["../../src/app-server/sandbox-proof-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAOjC,OAAO,EAGN,aAAa,EACb,oBAAoB,EACpB,wBAAwB,GACxB,MAAM,qBAAqB,CAAC;AAI7B,MAAM,OAAO,iCAAkC,SAAQ,KAAK;IAC3D,YACU,IAAY,EACrB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,SAAI,GAAJ,IAAI,CAAQ;QAIrB,IAAI,CAAC,IAAI,GAAG,mCAAmC,CAAC;IACjD,CAAC;CACD;AAgBD,SAAS,cAAc,CAAC,KAAc;IACrC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC3C,OAAO,iBAAiB,CAAC;IAC1B,CAAC;IACD,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,iBAAiB,EAAE,CAAC;QAC1D,OAAO,KAAK,CAAC;IACd,CAAC;IACD,MAAM,IAAI,iCAAiC,CAAC,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAAc;IACzD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC3C,OAAO,EAAE,CAAC;IACX,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,iCAAiC,CAAC,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,KAAsB,CAAC;AAC/B,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAChC,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;AAC9C,CAAC;AAED,SAAS,WAAW,CACnB,IAAY,EACZ,MAAe,EACf,MAAc;IAEd,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,kCAAkC,CACjD,UAA+C,EAAE;IAEjD,MAAM,SAAS,GACd,OAAO,CAAC,wBAAwB,IAAI,wBAAwB,CAAC;IAC9D,MAAM,WAAW,GAAG,OAAO,CAAC,oBAAoB,IAAI,oBAAoB,CAAC;IACzE,MAAM,cAAc,GAAG,OAAO,CAAC,aAAa,IAAI,aAAa,CAAC;IAC9D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAEzC,OAAO;QACN,KAAK;YACJ,MAAM,WAAW,GAAG,SAAS,EAAE,CAAC;YAChC,OAAO;gBACN,SAAS,EAAE,WAAW;gBACtB,IAAI,EAAE,WAAW,EAAE;gBACnB,QAAQ,EAAE,UAAU,EAAE;gBACtB,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE;gBACnE,cAAc,EAAE,WAAW;aAC3B,CAAC;QACH,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,EAAE;YACzB,MAAM,gBAAgB,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC;YAC7D,MAAM,IAAI,GAAG,cAAc,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACnD,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;YAC3B,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;gBAClB,OAAO;oBACN,IAAI;oBACJ,SAAS,EAAE,KAAK;oBAChB,IAAI;oBACJ,MAAM,EAAE,KAAK;oBACb,aAAa,EAAE,mDAAmD;oBAClE,MAAM,EAAE,EAAE;iBACV,CAAC;YACH,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,CACvB,MAAM,EAAE,EACR,gCAAgC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAC3D,CAAC;YACF,IAAI,SAA6B,CAAC;YAClC,IAAI,OAA4B,CAAC;YACjC,MAAM,MAAM,GAAiD,EAAE,CAAC;YAChE,IAAI,CAAC;gBACJ,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC,CAAC;gBAC5D,OAAO,GAAG,MAAM,cAAc,CAAC;oBAC9B,IAAI;oBACJ,GAAG,EAAE,SAAS;oBACd,MAAM,EAAE;wBACP,MAAM,EAAE,IAAI;wBACZ,aAAa,EAAE,KAAK;wBACpB,eAAe,EAAE,IAAI;wBACrB,aAAa,EAAE,IAAI;qBACnB;iBACD,CAAC,CAAC;gBACH,IAAI,CAAC,OAAO,EAAE,CAAC;oBACd,MAAM,CAAC,IAAI,CACV,WAAW,CACV,yBAAyB,EACzB,KAAK,EACL,kCAAkC,CAClC,CACD,CAAC;oBACF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;gBAC/D,CAAC;gBAED,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;gBACvE,MAAM,CAAC,IAAI,CACV,WAAW,CACV,mBAAmB,EACnB,SAAS,CAAC,QAAQ,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,IAAI,EAC5D,mBAAmB,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,SAAS,EAAE,CACzD,CACD,CAAC;gBAEF,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;oBAChC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAChC,oDAAoD,CACpD,CAAC;oBACF,MAAM,CAAC,IAAI,CACV,WAAW,CACV,iBAAiB,EACjB,MAAM,CAAC,QAAQ,KAAK,CAAC,EACrB,MAAM,CAAC,QAAQ,KAAK,CAAC;wBACpB,CAAC,CAAC,wBAAwB;wBAC1B,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,qBAAqB,CAC1D,CACD,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACP,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAClC,uCAAuC,CACvC,CAAC;oBACF,MAAM,CAAC,IAAI,CACV,WAAW,CACV,yBAAyB,EACzB,QAAQ,CAAC,QAAQ,KAAK,CAAC;wBACtB,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC,EACpD,QAAQ,CAAC,QAAQ,KAAK,CAAC;wBACtB,CAAC,CAAC,yBAAyB;wBAC3B,CAAC,CAAC,wCAAwC,CAC3C,CACD,CAAC;gBACH,CAAC;gBAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CACjC,SAAS,UAAU,CAAC,WAAW,CAAC,cAAc,CAC9C,CAAC;gBACF,MAAM,CAAC,IAAI,CACV,WAAW,CACV,uBAAuB,EACvB,OAAO,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAClD,OAAO,CAAC,QAAQ,KAAK,CAAC;oBACrB,CAAC,CAAC,iCAAiC;oBACnC,CAAC,CAAC,sCAAsC,CACzC,CACD,CAAC;gBAEF,OAAO;oBACN,IAAI;oBACJ,SAAS,EAAE,IAAI;oBACf,IAAI;oBACJ,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;oBAC7C,MAAM;iBACN,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,CACV,WAAW,CACV,sBAAsB,EACtB,KAAK,EACL,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CACvD,CACD,CAAC;gBACF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAC/D,CAAC;oBAAS,CAAC;gBACV,MAAM,OAAO,EAAE,OAAO,EAAE,CAAC;gBACzB,IAAI,SAAS,EAAE,CAAC;oBACf,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrD,CAAC;gBACD,MAAM,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACtC,CAAC;QACF,CAAC;KACD,CAAC;AACH,CAAC","sourcesContent":["import { existsSync, mkdtempSync, rmSync } from \"node:fs\";\nimport { platform as osPlatform, tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport type {\n\tMaestroAppServerSandboxProbeResult,\n\tMaestroAppServerSandboxProofMode,\n\tMaestroAppServerSandboxProofResult,\n\tMaestroAppServerSandboxType,\n} from \"@evalops/contracts\";\nimport {\n\ttype CreateSandboxOptions,\n\ttype Sandbox,\n\tcreateSandbox,\n\tgetNativeSandboxType,\n\tisNativeSandboxAvailable,\n} from \"../sandbox/index.js\";\n\ntype UnknownRecord = Record<string, unknown>;\n\nexport class MaestroAppServerSandboxProofError extends Error {\n\tconstructor(\n\t\treadonly code: number,\n\t\tmessage: string,\n\t) {\n\t\tsuper(message);\n\t\tthis.name = \"MaestroAppServerSandboxProofError\";\n\t}\n}\n\nexport interface MaestroAppServerSandboxProof {\n\tprobe(): MaestroAppServerSandboxProbeResult;\n\trunProof(params?: UnknownRecord): Promise<MaestroAppServerSandboxProofResult>;\n}\n\nexport interface MaestroAppServerSandboxProofOptions {\n\tcwd?: string;\n\tisNativeSandboxAvailable?: () => boolean;\n\tgetNativeSandboxType?: () => MaestroAppServerSandboxType;\n\tcreateSandbox?: (\n\t\toptions: CreateSandboxOptions,\n\t) => Promise<Sandbox \| undefined>;\n}\n\nfunction parseProofMode(value: unknown): MaestroAppServerSandboxProofMode {\n\tif (value === undefined \|\| value === null) {\n\t\treturn \"workspace-write\";\n\t}\n\tif (value === \"read-only\" \|\| value === \"workspace-write\") {\n\t\treturn value;\n\t}\n\tthrow new MaestroAppServerSandboxProofError(-32602, \"Invalid sandbox mode\");\n}\n\nexport function normalizeSandboxProofParams(value: unknown): UnknownRecord {\n\tif (value === undefined \|\| value === null) {\n\t\treturn {};\n\t}\n\tif (typeof value !== \"object\" \|\| Array.isArray(value)) {\n\t\tthrow new MaestroAppServerSandboxProofError(-32602, \"Invalid params\");\n\t}\n\treturn value as UnknownRecord;\n}\n\nfunction shellQuote(value: string): string {\n\treturn `'${value.replaceAll(\"'\", \"'\\\\''\")}'`;\n}\n\nfunction checkDetail(\n\tname: string,\n\tpassed: boolean,\n\tdetail: string,\n): MaestroAppServerSandboxProofResult[\"checks\"][number] {\n\treturn { name, passed, detail };\n}\n\nexport function createMaestroAppServerSandboxProof(\n\toptions: MaestroAppServerSandboxProofOptions = {},\n): MaestroAppServerSandboxProof {\n\tconst available =\n\t\toptions.isNativeSandboxAvailable ?? isNativeSandboxAvailable;\n\tconst sandboxType = options.getNativeSandboxType ?? getNativeSandboxType;\n\tconst sandboxFactory = options.createSandbox ?? createSandbox;\n\tconst cwd = options.cwd ?? process.cwd();\n\n\treturn {\n\t\tprobe() {\n\t\t\tconst isAvailable = available();\n\t\t\treturn {\n\t\t\t\tavailable: isAvailable,\n\t\t\t\ttype: sandboxType(),\n\t\t\t\tplatform: osPlatform(),\n\t\t\t\tsupportedModes: isAvailable ? [\"read-only\", \"workspace-write\"] : [],\n\t\t\t\tproofAvailable: isAvailable,\n\t\t\t};\n\t\t},\n\n\t\tasync runProof(params = {}) {\n\t\t\tconst normalizedParams = normalizeSandboxProofParams(params);\n\t\t\tconst mode = parseProofMode(normalizedParams.mode);\n\t\t\tconst type = sandboxType();\n\t\t\tif (!available()) {\n\t\t\t\treturn {\n\t\t\t\t\tmode,\n\t\t\t\t\tavailable: false,\n\t\t\t\t\ttype,\n\t\t\t\t\tpassed: false,\n\t\t\t\t\tskippedReason: \"Native sandbox is not available on this platform.\",\n\t\t\t\t\tchecks: [],\n\t\t\t\t};\n\t\t\t}\n\n\t\t\tconst outsidePath = join(\n\t\t\t\ttmpdir(),\n\t\t\t\t`maestro-native-proof-outside-${process.pid}-${Date.now()}`,\n\t\t\t);\n\t\t\tlet workspace: string \| undefined;\n\t\t\tlet sandbox: Sandbox \| undefined;\n\t\t\tconst checks: MaestroAppServerSandboxProofResult[\"checks\"] = [];\n\t\t\ttry {\n\t\t\t\tworkspace = mkdtempSync(join(cwd, \"maestro-native-proof-\"));\n\t\t\t\tsandbox = await sandboxFactory({\n\t\t\t\t\tmode,\n\t\t\t\t\tcwd: workspace,\n\t\t\t\t\tnative: {\n\t\t\t\t\t\tpolicy: mode,\n\t\t\t\t\t\tnetworkAccess: false,\n\t\t\t\t\t\texcludeSlashTmp: true,\n\t\t\t\t\t\texcludeTmpdir: true,\n\t\t\t\t\t},\n\t\t\t\t});\n\t\t\t\tif (!sandbox) {\n\t\t\t\t\tchecks.push(\n\t\t\t\t\t\tcheckDetail(\n\t\t\t\t\t\t\t\"native-sandbox-instance\",\n\t\t\t\t\t\t\tfalse,\n\t\t\t\t\t\t\t\"No sandbox instance was created.\",\n\t\t\t\t\t\t),\n\t\t\t\t\t);\n\t\t\t\t\treturn { mode, available: true, type, passed: false, checks };\n\t\t\t\t}\n\n\t\t\t\tconst envMarker = await sandbox.exec('printf \"%s\" \"$MAESTRO_SANDBOX\"');\n\t\t\t\tchecks.push(\n\t\t\t\t\tcheckDetail(\n\t\t\t\t\t\t\"native-env-marker\",\n\t\t\t\t\t\tenvMarker.exitCode === 0 && envMarker.stdout.trim() === type,\n\t\t\t\t\t\t`MAESTRO_SANDBOX=${envMarker.stdout.trim() \|\| \"(empty)\"}`,\n\t\t\t\t\t),\n\t\t\t\t);\n\n\t\t\t\tif (mode === \"workspace-write\") {\n\t\t\t\t\tconst inside = await sandbox.exec(\n\t\t\t\t\t\t\"touch inside-proof.txt && test -f inside-proof.txt\",\n\t\t\t\t\t);\n\t\t\t\t\tchecks.push(\n\t\t\t\t\t\tcheckDetail(\n\t\t\t\t\t\t\t\"workspace-write\",\n\t\t\t\t\t\t\tinside.exitCode === 0,\n\t\t\t\t\t\t\tinside.exitCode === 0\n\t\t\t\t\t\t\t\t? \"wrote inside workspace\"\n\t\t\t\t\t\t\t\t: inside.stderr \|\| inside.stdout \|\| \"inside write failed\",\n\t\t\t\t\t\t),\n\t\t\t\t\t);\n\t\t\t\t} else {\n\t\t\t\t\tconst readOnly = await sandbox.exec(\n\t\t\t\t\t\t\"touch read-only-proof.txt 2>/dev/null\",\n\t\t\t\t\t);\n\t\t\t\t\tchecks.push(\n\t\t\t\t\t\tcheckDetail(\n\t\t\t\t\t\t\t\"read-only-write-blocked\",\n\t\t\t\t\t\t\treadOnly.exitCode !== 0 &&\n\t\t\t\t\t\t\t\t!existsSync(join(workspace, \"read-only-proof.txt\")),\n\t\t\t\t\t\t\treadOnly.exitCode !== 0\n\t\t\t\t\t\t\t\t? \"blocked workspace write\"\n\t\t\t\t\t\t\t\t: \"workspace write unexpectedly succeeded\",\n\t\t\t\t\t\t),\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\tconst outside = await sandbox.exec(\n\t\t\t\t\t`touch ${shellQuote(outsidePath)} 2>/dev/null`,\n\t\t\t\t);\n\t\t\t\tchecks.push(\n\t\t\t\t\tcheckDetail(\n\t\t\t\t\t\t\"outside-write-blocked\",\n\t\t\t\t\t\toutside.exitCode !== 0 && !existsSync(outsidePath),\n\t\t\t\t\t\toutside.exitCode !== 0\n\t\t\t\t\t\t\t? \"blocked write outside workspace\"\n\t\t\t\t\t\t\t: \"outside write unexpectedly succeeded\",\n\t\t\t\t\t),\n\t\t\t\t);\n\n\t\t\t\treturn {\n\t\t\t\t\tmode,\n\t\t\t\t\tavailable: true,\n\t\t\t\t\ttype,\n\t\t\t\t\tpassed: checks.every((check) => check.passed),\n\t\t\t\t\tchecks,\n\t\t\t\t};\n\t\t\t} catch (error) {\n\t\t\t\tchecks.push(\n\t\t\t\t\tcheckDetail(\n\t\t\t\t\t\t\"native-sandbox-proof\",\n\t\t\t\t\t\tfalse,\n\t\t\t\t\t\terror instanceof Error ? error.message : \"proof failed\",\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t\treturn { mode, available: true, type, passed: false, checks };\n\t\t\t} finally {\n\t\t\t\tawait sandbox?.dispose();\n\t\t\t\tif (workspace) {\n\t\t\t\t\trmSync(workspace, { recursive: true, force: true });\n\t\t\t\t}\n\t\t\t\trmSync(outsidePath, { force: true });\n\t\t\t}\n\t\t},\n\t};\n}\n"]}
1	+ {"version":3,"file":"sandbox-check-api.js","sourceRoot":"","sources":["../../src/app-server/sandbox-check-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAOjC,OAAO,EAGN,aAAa,EACb,oBAAoB,EACpB,wBAAwB,GACxB,MAAM,qBAAqB,CAAC;AAI7B,MAAM,OAAO,iCAAkC,SAAQ,KAAK;IAC3D,YACU,IAAY,EACrB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,SAAI,GAAJ,IAAI,CAAQ;QAIrB,IAAI,CAAC,IAAI,GAAG,mCAAmC,CAAC;IACjD,CAAC;CACD;AAgBD,SAAS,cAAc,CAAC,KAAc;IACrC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC3C,OAAO,iBAAiB,CAAC;IAC1B,CAAC;IACD,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,iBAAiB,EAAE,CAAC;QAC1D,OAAO,KAAK,CAAC;IACd,CAAC;IACD,MAAM,IAAI,iCAAiC,CAAC,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAAc;IACzD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC3C,OAAO,EAAE,CAAC;IACX,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,iCAAiC,CAAC,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,KAAsB,CAAC;AAC/B,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAChC,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;AAC9C,CAAC;AAED,SAAS,WAAW,CACnB,IAAY,EACZ,MAAe,EACf,MAAc;IAEd,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,kCAAkC,CACjD,UAA+C,EAAE;IAEjD,MAAM,SAAS,GACd,OAAO,CAAC,wBAAwB,IAAI,wBAAwB,CAAC;IAC9D,MAAM,WAAW,GAAG,OAAO,CAAC,oBAAoB,IAAI,oBAAoB,CAAC;IACzE,MAAM,cAAc,GAAG,OAAO,CAAC,aAAa,IAAI,aAAa,CAAC;IAC9D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAEzC,OAAO;QACN,KAAK;YACJ,MAAM,WAAW,GAAG,SAAS,EAAE,CAAC;YAChC,OAAO;gBACN,SAAS,EAAE,WAAW;gBACtB,IAAI,EAAE,WAAW,EAAE;gBACnB,QAAQ,EAAE,UAAU,EAAE;gBACtB,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE;gBACnE,cAAc,EAAE,WAAW;aAC3B,CAAC;QACH,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,EAAE;YACzB,MAAM,gBAAgB,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC;YAC7D,MAAM,IAAI,GAAG,cAAc,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACnD,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;YAC3B,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;gBAClB,OAAO;oBACN,IAAI;oBACJ,SAAS,EAAE,KAAK;oBAChB,IAAI;oBACJ,MAAM,EAAE,KAAK;oBACb,aAAa,EAAE,mDAAmD;oBAClE,MAAM,EAAE,EAAE;iBACV,CAAC;YACH,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,CACvB,MAAM,EAAE,EACR,gCAAgC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAC3D,CAAC;YACF,IAAI,SAA6B,CAAC;YAClC,IAAI,OAA4B,CAAC;YACjC,MAAM,MAAM,GAAiD,EAAE,CAAC;YAChE,IAAI,CAAC;gBACJ,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC,CAAC;gBAC5D,OAAO,GAAG,MAAM,cAAc,CAAC;oBAC9B,IAAI;oBACJ,GAAG,EAAE,SAAS;oBACd,MAAM,EAAE;wBACP,MAAM,EAAE,IAAI;wBACZ,aAAa,EAAE,KAAK;wBACpB,eAAe,EAAE,IAAI;wBACrB,aAAa,EAAE,IAAI;qBACnB;iBACD,CAAC,CAAC;gBACH,IAAI,CAAC,OAAO,EAAE,CAAC;oBACd,MAAM,CAAC,IAAI,CACV,WAAW,CACV,yBAAyB,EACzB,KAAK,EACL,kCAAkC,CAClC,CACD,CAAC;oBACF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;gBAC/D,CAAC;gBAED,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;gBACvE,MAAM,CAAC,IAAI,CACV,WAAW,CACV,mBAAmB,EACnB,SAAS,CAAC,QAAQ,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,IAAI,EAC5D,mBAAmB,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,SAAS,EAAE,CACzD,CACD,CAAC;gBAEF,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;oBAChC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAChC,oDAAoD,CACpD,CAAC;oBACF,MAAM,CAAC,IAAI,CACV,WAAW,CACV,iBAAiB,EACjB,MAAM,CAAC,QAAQ,KAAK,CAAC,EACrB,MAAM,CAAC,QAAQ,KAAK,CAAC;wBACpB,CAAC,CAAC,wBAAwB;wBAC1B,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,qBAAqB,CAC1D,CACD,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACP,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAClC,uCAAuC,CACvC,CAAC;oBACF,MAAM,CAAC,IAAI,CACV,WAAW,CACV,yBAAyB,EACzB,QAAQ,CAAC,QAAQ,KAAK,CAAC;wBACtB,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC,EACpD,QAAQ,CAAC,QAAQ,KAAK,CAAC;wBACtB,CAAC,CAAC,yBAAyB;wBAC3B,CAAC,CAAC,wCAAwC,CAC3C,CACD,CAAC;gBACH,CAAC;gBAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CACjC,SAAS,UAAU,CAAC,WAAW,CAAC,cAAc,CAC9C,CAAC;gBACF,MAAM,CAAC,IAAI,CACV,WAAW,CACV,uBAAuB,EACvB,OAAO,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAClD,OAAO,CAAC,QAAQ,KAAK,CAAC;oBACrB,CAAC,CAAC,iCAAiC;oBACnC,CAAC,CAAC,sCAAsC,CACzC,CACD,CAAC;gBAEF,OAAO;oBACN,IAAI;oBACJ,SAAS,EAAE,IAAI;oBACf,IAAI;oBACJ,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;oBAC7C,MAAM;iBACN,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,CACV,WAAW,CACV,sBAAsB,EACtB,KAAK,EACL,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CACvD,CACD,CAAC;gBACF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAC/D,CAAC;oBAAS,CAAC;gBACV,MAAM,OAAO,EAAE,OAAO,EAAE,CAAC;gBACzB,IAAI,SAAS,EAAE,CAAC;oBACf,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrD,CAAC;gBACD,MAAM,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACtC,CAAC;QACF,CAAC;KACD,CAAC;AACH,CAAC","sourcesContent":["import { existsSync, mkdtempSync, rmSync } from \"node:fs\";\nimport { platform as osPlatform, tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport type {\n\tMaestroAppServerSandboxCheckMode,\n\tMaestroAppServerSandboxCheckResult,\n\tMaestroAppServerSandboxProbeResult,\n\tMaestroAppServerSandboxType,\n} from \"@evalops/contracts\";\nimport {\n\ttype CreateSandboxOptions,\n\ttype Sandbox,\n\tcreateSandbox,\n\tgetNativeSandboxType,\n\tisNativeSandboxAvailable,\n} from \"../sandbox/index.js\";\n\ntype UnknownRecord = Record<string, unknown>;\n\nexport class MaestroAppServerSandboxCheckError extends Error {\n\tconstructor(\n\t\treadonly code: number,\n\t\tmessage: string,\n\t) {\n\t\tsuper(message);\n\t\tthis.name = \"MaestroAppServerSandboxCheckError\";\n\t}\n}\n\nexport interface MaestroAppServerSandboxCheck {\n\tprobe(): MaestroAppServerSandboxProbeResult;\n\trunCheck(params?: UnknownRecord): Promise<MaestroAppServerSandboxCheckResult>;\n}\n\nexport interface MaestroAppServerSandboxCheckOptions {\n\tcwd?: string;\n\tisNativeSandboxAvailable?: () => boolean;\n\tgetNativeSandboxType?: () => MaestroAppServerSandboxType;\n\tcreateSandbox?: (\n\t\toptions: CreateSandboxOptions,\n\t) => Promise<Sandbox \| undefined>;\n}\n\nfunction parseCheckMode(value: unknown): MaestroAppServerSandboxCheckMode {\n\tif (value === undefined \|\| value === null) {\n\t\treturn \"workspace-write\";\n\t}\n\tif (value === \"read-only\" \|\| value === \"workspace-write\") {\n\t\treturn value;\n\t}\n\tthrow new MaestroAppServerSandboxCheckError(-32602, \"Invalid sandbox mode\");\n}\n\nexport function normalizeSandboxCheckParams(value: unknown): UnknownRecord {\n\tif (value === undefined \|\| value === null) {\n\t\treturn {};\n\t}\n\tif (typeof value !== \"object\" \|\| Array.isArray(value)) {\n\t\tthrow new MaestroAppServerSandboxCheckError(-32602, \"Invalid params\");\n\t}\n\treturn value as UnknownRecord;\n}\n\nfunction shellQuote(value: string): string {\n\treturn `'${value.replaceAll(\"'\", \"'\\\\''\")}'`;\n}\n\nfunction checkDetail(\n\tname: string,\n\tpassed: boolean,\n\tdetail: string,\n): MaestroAppServerSandboxCheckResult[\"checks\"][number] {\n\treturn { name, passed, detail };\n}\n\nexport function createMaestroAppServerSandboxCheck(\n\toptions: MaestroAppServerSandboxCheckOptions = {},\n): MaestroAppServerSandboxCheck {\n\tconst available =\n\t\toptions.isNativeSandboxAvailable ?? isNativeSandboxAvailable;\n\tconst sandboxType = options.getNativeSandboxType ?? getNativeSandboxType;\n\tconst sandboxFactory = options.createSandbox ?? createSandbox;\n\tconst cwd = options.cwd ?? process.cwd();\n\n\treturn {\n\t\tprobe() {\n\t\t\tconst isAvailable = available();\n\t\t\treturn {\n\t\t\t\tavailable: isAvailable,\n\t\t\t\ttype: sandboxType(),\n\t\t\t\tplatform: osPlatform(),\n\t\t\t\tsupportedModes: isAvailable ? [\"read-only\", \"workspace-write\"] : [],\n\t\t\t\tcheckAvailable: isAvailable,\n\t\t\t};\n\t\t},\n\n\t\tasync runCheck(params = {}) {\n\t\t\tconst normalizedParams = normalizeSandboxCheckParams(params);\n\t\t\tconst mode = parseCheckMode(normalizedParams.mode);\n\t\t\tconst type = sandboxType();\n\t\t\tif (!available()) {\n\t\t\t\treturn {\n\t\t\t\t\tmode,\n\t\t\t\t\tavailable: false,\n\t\t\t\t\ttype,\n\t\t\t\t\tpassed: false,\n\t\t\t\t\tskippedReason: \"Native sandbox is not available on this platform.\",\n\t\t\t\t\tchecks: [],\n\t\t\t\t};\n\t\t\t}\n\n\t\t\tconst outsidePath = join(\n\t\t\t\ttmpdir(),\n\t\t\t\t`maestro-native-check-outside-${process.pid}-${Date.now()}`,\n\t\t\t);\n\t\t\tlet workspace: string \| undefined;\n\t\t\tlet sandbox: Sandbox \| undefined;\n\t\t\tconst checks: MaestroAppServerSandboxCheckResult[\"checks\"] = [];\n\t\t\ttry {\n\t\t\t\tworkspace = mkdtempSync(join(cwd, \"maestro-native-check-\"));\n\t\t\t\tsandbox = await sandboxFactory({\n\t\t\t\t\tmode,\n\t\t\t\t\tcwd: workspace,\n\t\t\t\t\tnative: {\n\t\t\t\t\t\tpolicy: mode,\n\t\t\t\t\t\tnetworkAccess: false,\n\t\t\t\t\t\texcludeSlashTmp: true,\n\t\t\t\t\t\texcludeTmpdir: true,\n\t\t\t\t\t},\n\t\t\t\t});\n\t\t\t\tif (!sandbox) {\n\t\t\t\t\tchecks.push(\n\t\t\t\t\t\tcheckDetail(\n\t\t\t\t\t\t\t\"native-sandbox-instance\",\n\t\t\t\t\t\t\tfalse,\n\t\t\t\t\t\t\t\"No sandbox instance was created.\",\n\t\t\t\t\t\t),\n\t\t\t\t\t);\n\t\t\t\t\treturn { mode, available: true, type, passed: false, checks };\n\t\t\t\t}\n\n\t\t\t\tconst envMarker = await sandbox.exec('printf \"%s\" \"$MAESTRO_SANDBOX\"');\n\t\t\t\tchecks.push(\n\t\t\t\t\tcheckDetail(\n\t\t\t\t\t\t\"native-env-marker\",\n\t\t\t\t\t\tenvMarker.exitCode === 0 && envMarker.stdout.trim() === type,\n\t\t\t\t\t\t`MAESTRO_SANDBOX=${envMarker.stdout.trim() \|\| \"(empty)\"}`,\n\t\t\t\t\t),\n\t\t\t\t);\n\n\t\t\t\tif (mode === \"workspace-write\") {\n\t\t\t\t\tconst inside = await sandbox.exec(\n\t\t\t\t\t\t\"touch inside-check.txt && test -f inside-check.txt\",\n\t\t\t\t\t);\n\t\t\t\t\tchecks.push(\n\t\t\t\t\t\tcheckDetail(\n\t\t\t\t\t\t\t\"workspace-write\",\n\t\t\t\t\t\t\tinside.exitCode === 0,\n\t\t\t\t\t\t\tinside.exitCode === 0\n\t\t\t\t\t\t\t\t? \"wrote inside workspace\"\n\t\t\t\t\t\t\t\t: inside.stderr \|\| inside.stdout \|\| \"inside write failed\",\n\t\t\t\t\t\t),\n\t\t\t\t\t);\n\t\t\t\t} else {\n\t\t\t\t\tconst readOnly = await sandbox.exec(\n\t\t\t\t\t\t\"touch read-only-check.txt 2>/dev/null\",\n\t\t\t\t\t);\n\t\t\t\t\tchecks.push(\n\t\t\t\t\t\tcheckDetail(\n\t\t\t\t\t\t\t\"read-only-write-blocked\",\n\t\t\t\t\t\t\treadOnly.exitCode !== 0 &&\n\t\t\t\t\t\t\t\t!existsSync(join(workspace, \"read-only-check.txt\")),\n\t\t\t\t\t\t\treadOnly.exitCode !== 0\n\t\t\t\t\t\t\t\t? \"blocked workspace write\"\n\t\t\t\t\t\t\t\t: \"workspace write unexpectedly succeeded\",\n\t\t\t\t\t\t),\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\tconst outside = await sandbox.exec(\n\t\t\t\t\t`touch ${shellQuote(outsidePath)} 2>/dev/null`,\n\t\t\t\t);\n\t\t\t\tchecks.push(\n\t\t\t\t\tcheckDetail(\n\t\t\t\t\t\t\"outside-write-blocked\",\n\t\t\t\t\t\toutside.exitCode !== 0 && !existsSync(outsidePath),\n\t\t\t\t\t\toutside.exitCode !== 0\n\t\t\t\t\t\t\t? \"blocked write outside workspace\"\n\t\t\t\t\t\t\t: \"outside write unexpectedly succeeded\",\n\t\t\t\t\t),\n\t\t\t\t);\n\n\t\t\t\treturn {\n\t\t\t\t\tmode,\n\t\t\t\t\tavailable: true,\n\t\t\t\t\ttype,\n\t\t\t\t\tpassed: checks.every((check) => check.passed),\n\t\t\t\t\tchecks,\n\t\t\t\t};\n\t\t\t} catch (error) {\n\t\t\t\tchecks.push(\n\t\t\t\t\tcheckDetail(\n\t\t\t\t\t\t\"native-sandbox-check\",\n\t\t\t\t\t\tfalse,\n\t\t\t\t\t\terror instanceof Error ? error.message : \"check failed\",\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t\treturn { mode, available: true, type, passed: false, checks };\n\t\t\t} finally {\n\t\t\t\tawait sandbox?.dispose();\n\t\t\t\tif (workspace) {\n\t\t\t\t\trmSync(workspace, { recursive: true, force: true });\n\t\t\t\t}\n\t\t\t\trmSync(outsidePath, { force: true });\n\t\t\t}\n\t\t},\n\t};\n}\n"]}

package/dist/app-server/session-api.d.ts CHANGED Viewed

@@ -1,4 +1,4 @@
-import { type MaestroAppServerClientRequest, type MaestroAppServerCommandExecResult, type MaestroAppServerCommandProcessResult, type MaestroAppServerDaemonStatusResult, type MaestroAppServerEmptyResult, type MaestroAppServerExternalAgentImportResult, type MaestroAppServerFsMetadataResult, type MaestroAppServerFsReadDirectoryResult, type MaestroAppServerFsReadFileResult, type MaestroAppServerFsWatchResult, type MaestroAppServerModelListResult, type MaestroAppServerModelProviderCapabilitiesReadResult, type MaestroAppServerNetworkAuditListResult, type MaestroAppServerNetworkFetchResult, type MaestroAppServerPluginBundleListResult, type MaestroAppServerPluginBundleMutationResult, type MaestroAppServerPolicyCheckResult, type MaestroAppServerPolicyReadResult, type MaestroAppServerProtocolModeListResult, type MaestroAppServerProtocolModeSetResult, type MaestroAppServerRemoteControlDrainResult, type MaestroAppServerRemoteControlLeaseResult, type MaestroAppServerRemoteControlStatusResult, type MaestroAppServerRequirementsListResult, type MaestroAppServerResponse, type MaestroAppServerSandboxProbeResult, type MaestroAppServerSandboxProofResult, type MaestroAppServerServerNotification, type MaestroAppServerThread, type MaestroAppServerThreadArchiveResult, type MaestroAppServerThreadDeleteResult, type MaestroAppServerThreadForkResult, type MaestroAppServerThreadGoal, type MaestroAppServerThreadGoalResult, type MaestroAppServerThreadListResult, type MaestroAppServerThreadMetadataUpdateResult, type MaestroAppServerThreadStartResult, type MaestroAppServerTurn, type MaestroAppServerTurnsListResult, maestroAppServerClientMethods } from "@evalops/contracts";
+import { type MaestroAppServerClientRequest, type MaestroAppServerCommandExecResult, type MaestroAppServerCommandProcessResult, type MaestroAppServerDaemonStatusResult, type MaestroAppServerEmptyResult, type MaestroAppServerExternalAgentImportResult, type MaestroAppServerFsMetadataResult, type MaestroAppServerFsReadDirectoryResult, type MaestroAppServerFsReadFileResult, type MaestroAppServerFsWatchResult, type MaestroAppServerModelListResult, type MaestroAppServerModelProviderCapabilitiesReadResult, type MaestroAppServerNetworkAuditListResult, type MaestroAppServerNetworkFetchResult, type MaestroAppServerPluginBundleListResult, type MaestroAppServerPluginBundleMutationResult, type MaestroAppServerPolicyCheckResult, type MaestroAppServerPolicyReadResult, type MaestroAppServerProtocolModeListResult, type MaestroAppServerProtocolModeSetResult, type MaestroAppServerRemoteControlDrainResult, type MaestroAppServerRemoteControlLeaseResult, type MaestroAppServerRemoteControlStatusResult, type MaestroAppServerRequirementsListResult, type MaestroAppServerResponse, type MaestroAppServerSandboxCheckResult, type MaestroAppServerSandboxProbeResult, type MaestroAppServerServerNotification, type MaestroAppServerThread, type MaestroAppServerThreadArchiveResult, type MaestroAppServerThreadDeleteResult, type MaestroAppServerThreadForkResult, type MaestroAppServerThreadGoal, type MaestroAppServerThreadGoalResult, type MaestroAppServerThreadListResult, type MaestroAppServerThreadMetadataUpdateResult, type MaestroAppServerThreadStartResult, type MaestroAppServerTurn, type MaestroAppServerTurnsListResult, maestroAppServerClientMethods } from "@evalops/contracts";
 import type { SessionManager } from "../session/manager.js";
 import type { SessionEntry } from "../session/types.js";
 import { type MaestroAppServerDaemonLifecycle } from "./daemon-lifecycle-api.js";
@@ -8,13 +8,13 @@ import { type MaestroAppServerNetworkGovernance } from "./network-governance-api
 import { type MaestroAppServerPluginBundleApi } from "./plugin-bundle-api.js";
 import { type MaestroAppServerPolicyControl } from "./policy-control-api.js";
 import { type MaestroAppServerProtocolModeDecision, type MaestroAppServerProtocolModes } from "./protocol-modes-api.js";
-import { type MaestroAppServerSandboxProof } from "./sandbox-proof-api.js";
+import { type MaestroAppServerSandboxCheck } from "./sandbox-check-api.js";
 export type { MaestroAppServerServerNotification };
 export { type MaestroAppServerDaemonLifecycle, createMaestroAppServerDaemonLifecycle, } from "./daemon-lifecycle-api.js";
 export { type MaestroAppServerExternalAgentImport, createMaestroAppServerExternalAgentImport, } from "./external-agent-import-api.js";
 export { type MaestroAppServerPluginBundleApi, createMaestroAppServerPluginBundleApi, } from "./plugin-bundle-api.js";
 export { type MaestroAppServerProtocolModes, createMaestroAppServerProtocolModes, } from "./protocol-modes-api.js";
-export { type MaestroAppServerSandboxProof, createMaestroAppServerSandboxProof, } from "./sandbox-proof-api.js";
+export { type MaestroAppServerSandboxCheck, createMaestroAppServerSandboxCheck, } from "./sandbox-check-api.js";
 type MaybePromise<T> = T | Promise<T>;
 type SessionStore = Pick<SessionManager, "getSessionFileById" | "loadAllSessions" | "listSessions" | "loadSession"> & {
     getSessionFile?: () => string;
@@ -60,7 +60,7 @@ export interface MaestroAppServerSessionApiOptions {
     hostControl?: MaestroAppServerHostControl | false;
     policyControl?: MaestroAppServerPolicyControl | false;
     networkGovernance?: MaestroAppServerNetworkGovernance | false;
-    sandboxProof?: MaestroAppServerSandboxProof | false;
+    sandboxCheck?: MaestroAppServerSandboxCheck | false;
     externalAgentImport?: MaestroAppServerExternalAgentImport | false;
     pluginBundles?: MaestroAppServerPluginBundleApi | false;
     daemonLifecycle?: MaestroAppServerDaemonLifecycle | false;
@@ -80,7 +80,7 @@ export interface MaestroAppServerSessionApi {
     fetchNetwork(params?: Record<string, unknown>): Promise<MaestroAppServerNetworkFetchResult>;
     listNetworkAudit(params?: Record<string, unknown>): Promise<MaestroAppServerNetworkAuditListResult>;
     probeSandbox(params?: Record<string, unknown>): Promise<MaestroAppServerSandboxProbeResult>;
-    runSandboxProof(params?: Record<string, unknown>): Promise<MaestroAppServerSandboxProofResult>;
+    runSandboxCheck(params?: Record<string, unknown>): Promise<MaestroAppServerSandboxCheckResult>;
     importExternalAgent(params?: Record<string, unknown>): Promise<MaestroAppServerExternalAgentImportResult>;
     listPluginBundles(params?: Record<string, unknown>): Promise<MaestroAppServerPluginBundleListResult>;
     installPluginBundle(params?: Record<string, unknown>): Promise<MaestroAppServerPluginBundleMutationResult>;

package/dist/app-server/session-api.js CHANGED Viewed

@@ -10,14 +10,14 @@ import { MaestroAppServerNetworkGovernanceError, createMaestroAppServerNetworkGo
 import { MaestroAppServerPluginBundleError, createMaestroAppServerPluginBundleApi, } from "./plugin-bundle-api.js";
 import { MaestroAppServerPolicyControlError, createMaestroAppServerPolicyControl, } from "./policy-control-api.js";
 import { MaestroAppServerProtocolModesError, createMaestroAppServerProtocolModes, } from "./protocol-modes-api.js";
-import { MaestroAppServerSandboxProofError, createMaestroAppServerSandboxProof, normalizeSandboxProofParams, } from "./sandbox-proof-api.js";
+import { MaestroAppServerSandboxCheckError, createMaestroAppServerSandboxCheck, normalizeSandboxCheckParams, } from "./sandbox-check-api.js";
 const DEFAULT_PAGE_LIMIT = 50;
 const MAX_PAGE_LIMIT = 100;
 export { createMaestroAppServerDaemonLifecycle, } from "./daemon-lifecycle-api.js";
 export { createMaestroAppServerExternalAgentImport, } from "./external-agent-import-api.js";
 export { createMaestroAppServerPluginBundleApi, } from "./plugin-bundle-api.js";
 export { createMaestroAppServerProtocolModes, } from "./protocol-modes-api.js";
-export { createMaestroAppServerSandboxProof, } from "./sandbox-proof-api.js";
+export { createMaestroAppServerSandboxCheck, } from "./sandbox-check-api.js";
 export class MaestroAppServerError extends Error {
     constructor(code, message) {
         super(message);
@@ -431,9 +431,9 @@ export function createMaestroAppServerSessionApi(store, options = {}) {
         ? undefined
         : (options.networkGovernance ??
             createMaestroAppServerNetworkGovernance());
-    const sandboxProof = options.sandboxProof === false
+    const sandboxCheck = options.sandboxCheck === false
         ? undefined
-        : (options.sandboxProof ?? createMaestroAppServerSandboxProof());
+        : (options.sandboxCheck ?? createMaestroAppServerSandboxCheck());
     const pluginBundles = options.pluginBundles === false
         ? undefined
         : (options.pluginBundles ?? createMaestroAppServerPluginBundleApi());
@@ -471,7 +471,7 @@ export function createMaestroAppServerSessionApi(store, options = {}) {
     const canUseFilesystemWatch = Boolean(hostControl?.supportsWatch());
     const canUsePolicyControl = Boolean(policyControl);
     const canUseNetworkGovernance = Boolean(networkGovernance);
-    const canUseSandboxProof = Boolean(sandboxProof);
+    const canUseSandboxCheck = Boolean(sandboxCheck);
     const canUseExternalAgentImport = Boolean(externalAgentImport);
     const canUsePluginBundles = Boolean(pluginBundles);
     return {
@@ -493,8 +493,8 @@ export function createMaestroAppServerSessionApi(store, options = {}) {
                     requirements: canUsePolicyControl,
                     networkProxy: canUseNetworkGovernance,
                     networkAudit: canUseNetworkGovernance,
-                    sandboxProbe: canUseSandboxProof,
-                    sandboxProof: canUseSandboxProof,
+                    sandboxProbe: canUseSandboxCheck,
+                    sandboxCheck: canUseSandboxCheck,
                     externalAgentImport: canUseExternalAgentImport,
                     pluginBundles: canUsePluginBundles,
                     daemonStatus: daemonLifecycleCapabilities.daemonStatus,
@@ -564,18 +564,18 @@ export function createMaestroAppServerSessionApi(store, options = {}) {
             return networkGovernance.listAudit(params);
         },
         async probeSandbox(params = {}) {
-            if (!sandboxProof) {
+            if (!sandboxCheck) {
                 throw new MaestroAppServerError(-32601, "Sandbox probe is not available");
             }
-            normalizeSandboxProofParams(params);
-            return sandboxProof.probe();
+            normalizeSandboxCheckParams(params);
+            return sandboxCheck.probe();
         },
-        async runSandboxProof(params = {}) {
-            if (!sandboxProof) {
-                throw new MaestroAppServerError(-32601, "Sandbox proof is not available");
+        async runSandboxCheck(params = {}) {
+            if (!sandboxCheck) {
+                throw new MaestroAppServerError(-32601, "Sandbox check is not available");
             }
-            const normalizedParams = normalizeSandboxProofParams(params);
-            return sandboxProof.runProof(normalizedParams);
+            const normalizedParams = normalizeSandboxCheckParams(params);
+            return sandboxCheck.runCheck(normalizedParams);
         },
         async importExternalAgent(params = {}) {
             if (!externalAgentImport) {
@@ -1153,11 +1153,11 @@ export async function handleMaestroAppServerRequest(api, request) {
                     id,
                     result: await api.probeSandbox(request.params),
                 };
-            case "sandbox/proof/run":
+            case "sandbox/check/run":
                 return {
                     jsonrpc: "2.0",
                     id,
-                    result: await api.runSandboxProof(request.params),
+                    result: await api.runSandboxCheck(request.params),
                 };
             case "externalAgent/import":
                 return {
@@ -1374,7 +1374,7 @@ export async function handleMaestroAppServerRequest(api, request) {
             error instanceof MaestroAppServerHostControlError ||
             error instanceof MaestroAppServerNetworkGovernanceError ||
             error instanceof MaestroAppServerPolicyControlError ||
-            error instanceof MaestroAppServerSandboxProofError ||
+            error instanceof MaestroAppServerSandboxCheckError ||
             error instanceof MaestroAppServerExternalAgentImportError ||
             error instanceof MaestroAppServerPluginBundleError ||
             error instanceof MaestroAppServerDaemonLifecycleError ||