@evalops/maestro 0.10.50 → 0.10.51

package/dist/agent/providers/validation.js.map

@@ -1 +1 @@
-{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../src/agent/providers/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAChD,OAAO,EACN,GAAG,GAIH,MAAM,KAAK,CAAC;AACb,OAAO,gBAAwC,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAGxE,MAAM,MAAM,GAAG,YAAY,CAAC,4BAA4B,CAAC,CAAC;AAE1D,oFAAoF;AACpF,MAAM,UAAU,GAAG,oBAAoB,CAAgB,gBAAgB,CAAC,CAAC;AAOzE,MAAM,kBAAkB,GACvB,OAAO,UAAU,KAAK,WAAW;IAChC,UAAgD,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;QACpE,SAAS,CAAC;AAEZ,kFAAkF;AAClF,qEAAqE;AACrE,IAAI,GAAG,GAAe,IAAI,CAAC;AAC3B,MAAM,cAAc,GAAG,IAAI,OAAO,EAK/B,CAAC;AACJ,IAAI,CAAC,kBAAkB,EAAE,CAAC;IACzB,IAAI,CAAC;QACJ,GAAG,GAAG,IAAI,GAAG,CAAC;YACb,uEAAuE;YACvE,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,KAAK;SACb,CAAC,CAAC;QACH,UAAU,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACZ,qDAAqD;QACrD,MAAM,CAAC,IAAI,CAAC,iDAAiD,EAAE;YAC9D,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;YACjD,kBAAkB;SAClB,CAAC,CAAC;IACJ,CAAC;AACF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACpC,IAAe,EACf,QAAkB;IAElB,+FAA+F;IAC/F,IAAI,CAAC,GAAG,IAAI,kBAAkB,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,wEAAwE;QACxE,2EAA2E;QAC3E,IAAI,CAAC;YACJ,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC;gBACxC,OAAO,IAAI,CAAC;YACb,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE;gBACzD,KAAK,EAAE,sBAAsB,CAC5B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACtD;gBACD,IAAI,EAAE,IAAI,CAAC,IAAI;aACf,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE;YAChE,IAAI,EAAE,IAAI,CAAC,IAAI;SACf,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACX,CAAC;IAED,gCAAgC;IAChC,IAAI,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACnD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,UAAuB,CAAC,CAAC;QACrD,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAED,yBAAyB;IACzB,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,OAAO,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,CAAC;IAED,kCAAkC;IAClC,MAAM,MAAM,GACX,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;SACrB,GAAG,CAAC,CAAC,GAAgB,EAAE,EAAE;QACzB,MAAM,IAAI,GACT,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;YAC9C,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;YAC/B,CAAC,CAAE,GAAG,CAAC,MAAuC,CAAC,eAAe;gBAC7D,MAAM,CAAC;QACV,OAAO,OAAO,IAAI,KAAK,GAAG,CAAC,OAAO,IAAI,eAAe,EAAE,CAAC;IACzD,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,IAAI,0BAA0B,CAAC;IAE5C,MAAM,aAAa,GAAG,eAAe,CAAC,QAAQ,CAAC,SAAS,EAAE;QACzD,aAAa,EAAE,IAAI;QACnB,gBAAgB,EAAE,KAAK;KACvB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC;IAChE,MAAM,eAAe,GACpB,QAAQ,CAAC,MAAM,GAAG,IAAI;QACrB,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,oBAAoB,QAAQ,CAAC,MAAM,GAAG,IAAI,SAAS;QAC/E,CAAC,CAAC,QAAQ,CAAC;IAEb,MAAM,YAAY,GAAG,+BAA+B,QAAQ,CAAC,IAAI,OAAO,MAAM,wCAAwC,eAAe,EAAE,CAAC;IAExI,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC","sourcesContent":["import { Value } from \"@sinclair/typebox/value\";\nimport {\n\tAjv,\n\ttype AnySchema,\n\ttype ErrorObject,\n\ttype ValidateFunction,\n} from \"ajv\";\nimport addFormatsModule, { type FormatsPlugin } from \"ajv-formats\";\nimport { sanitizePayload } from \"../../safety/context-firewall.js\";\nimport { createLogger } from \"../../utils/logger.js\";\nimport { resolveDefaultExport } from \"../../utils/module-interop.js\";\nimport { sanitizeWithStaticMask } from \"../../utils/secret-redactor.js\";\nimport type { AgentTool, ToolCall } from \"../types.js\";\n\nconst logger = createLogger(\"agent:providers:validation\");\n\n// ESM/CJS interop: ajv-formats default may be nested under .default in some loaders\nconst addFormats = resolveDefaultExport<FormatsPlugin>(addFormatsModule);\n\n// Detect if we're in a browser extension environment with strict CSP\n// Chrome extensions with Manifest V3 don't allow eval/Function constructor\ninterface ChromeRuntime {\n\tchrome?: { runtime?: { id?: string } };\n}\nconst isBrowserExtension =\n\ttypeof globalThis !== \"undefined\" &&\n\t(globalThis as typeof globalThis & ChromeRuntime).chrome?.runtime?.id !==\n\t\tundefined;\n\n// Create a singleton AJV instance with formats (only if not in browser extension)\n// AJV requires 'unsafe-eval' CSP which is not allowed in Manifest V3\nlet ajv: Ajv | null = null;\nconst validatorCache = new WeakMap<\n\tobject,\n\tValidateFunction & {\n\t\terrors?: ErrorObject[] | null;\n\t}\n>();\nif (!isBrowserExtension) {\n\ttry {\n\t\tajv = new Ajv({\n\t\t\t// Limit error output to avoid unbounded allocations on malformed input\n\t\t\tallErrors: false,\n\t\t\tstrict: false,\n\t\t});\n\t\taddFormats(ajv);\n\t} catch (e) {\n\t\t// AJV initialization failed (likely CSP restriction)\n\t\tlogger.warn(\"AJV validation disabled due to CSP restrictions\", {\n\t\t\terror: e instanceof Error ? e.message : String(e),\n\t\t\tisBrowserExtension,\n\t\t});\n\t}\n}\n\n/**\n * Validates tool call arguments against the tool's TypeBox schema\n * @param tool The tool definition with TypeBox schema\n * @param toolCall The tool call from the LLM\n * @returns The validated arguments\n * @throws Error with formatted message if validation fails\n */\nexport function validateToolArguments(\n\ttool: AgentTool,\n\ttoolCall: ToolCall,\n): Record<string, unknown> {\n\t// Skip validation in browser extension environment (CSP restrictions prevent AJV from working)\n\tif (!ajv || isBrowserExtension) {\n\t\tconst args = isRecord(toolCall.arguments) ? toolCall.arguments : {};\n\t\t// Browser extensions can't use AJV due to Manifest V3 CSP restrictions.\n\t\t// TypeBox's Value.Check avoids eval, so we can still validate safely here.\n\t\ttry {\n\t\t\tif (Value.Check(tool.parameters, args)) {\n\t\t\t\treturn args;\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tlogger.warn(\"TypeBox validation failed in CSP-safe mode\", {\n\t\t\t\terror: sanitizeWithStaticMask(\n\t\t\t\t\terror instanceof Error ? error.message : String(error),\n\t\t\t\t),\n\t\t\t\ttool: tool.name,\n\t\t\t});\n\t\t}\n\t\tlogger.warn(\"Tool arguments failed validation in CSP-safe mode\", {\n\t\t\ttool: tool.name,\n\t\t});\n\t\treturn {};\n\t}\n\n\t// Compile (or reuse) the schema\n\tlet validate = validatorCache.get(tool.parameters);\n\tif (!validate) {\n\t\tvalidate = ajv.compile(tool.parameters as AnySchema);\n\t\tvalidatorCache.set(tool.parameters, validate);\n\t}\n\n\t// Validate the arguments\n\tif (validate(toolCall.arguments)) {\n\t\treturn isRecord(toolCall.arguments) ? toolCall.arguments : {};\n\t}\n\n\t// Format validation errors nicely\n\tconst errors =\n\t\t(validate.errors ?? [])\n\t\t\t.map((err: ErrorObject) => {\n\t\t\t\tconst path =\n\t\t\t\t\terr.instancePath && err.instancePath.length > 1\n\t\t\t\t\t\t? err.instancePath.substring(1)\n\t\t\t\t\t\t: (err.params as { missingProperty?: string }).missingProperty ||\n\t\t\t\t\t\t\t\"root\";\n\t\t\t\treturn `  - ${path}: ${err.message ?? \"invalid value\"}`;\n\t\t\t})\n\t\t\t.join(\"\\n\") || \"Unknown validation error\";\n\n\tconst sanitizedArgs = sanitizePayload(toolCall.arguments, {\n\t\tredactSecrets: true,\n\t\tvaultCredentials: false,\n\t});\n\tconst argsJson = JSON.stringify(sanitizedArgs, null, 2) ?? \"{}\";\n\tconst trimmedArgsJson =\n\t\targsJson.length > 2000\n\t\t\t? `${argsJson.slice(0, 2000)}\\n... (truncated ${argsJson.length - 2000} chars)`\n\t\t\t: argsJson;\n\n\tconst errorMessage = `Validation failed for tool \"${toolCall.name}\":\\n${errors}\\n\\nReceived arguments (sanitized):\\n${trimmedArgsJson}`;\n\n\tthrow new Error(errorMessage);\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn Boolean(value) && typeof value === \"object\" && !Array.isArray(value);\n}\n"]}
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../src/agent/providers/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAChD,OAAO,EACN,GAAG,GAIH,MAAM,KAAK,CAAC;AACb,OAAO,gBAAwC,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAGxE,MAAM,MAAM,GAAG,YAAY,CAAC,4BAA4B,CAAC,CAAC;AAE1D,oFAAoF;AACpF,MAAM,UAAU,GAAG,oBAAoB,CAAgB,gBAAgB,CAAC,CAAC;AAOzE,MAAM,kBAAkB,GACvB,OAAO,UAAU,KAAK,WAAW;IAChC,UAAgD,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;QACpE,SAAS,CAAC;AAEZ,kFAAkF;AAClF,qEAAqE;AACrE,IAAI,GAAG,GAAe,IAAI,CAAC;AAC3B,MAAM,cAAc,GAAG,IAAI,OAAO,EAK/B,CAAC;AACJ,IAAI,CAAC,kBAAkB,EAAE,CAAC;IACzB,IAAI,CAAC;QACJ,GAAG,GAAG,IAAI,GAAG,CAAC;YACb,uEAAuE;YACvE,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,KAAK;SACb,CAAC,CAAC;QACH,UAAU,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACZ,qDAAqD;QACrD,MAAM,CAAC,IAAI,CAAC,iDAAiD,EAAE;YAC9D,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;YACjD,kBAAkB;SAClB,CAAC,CAAC;IACJ,CAAC;AACF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACpC,IAAe,EACf,QAAkB;IAElB,+FAA+F;IAC/F,IAAI,CAAC,GAAG,IAAI,kBAAkB,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,wEAAwE;QACxE,2EAA2E;QAC3E,IAAI,CAAC;YACJ,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC;gBACxC,OAAO,IAAI,CAAC;YACb,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE;gBACzD,KAAK,EAAE,sBAAsB,CAC5B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACtD;gBACD,IAAI,EAAE,IAAI,CAAC,IAAI;aACf,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE;YAChE,IAAI,EAAE,IAAI,CAAC,IAAI;SACf,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACX,CAAC;IAED,gCAAgC;IAChC,IAAI,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACnD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,UAAuB,CAAC,CAAC;QACrD,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAED,yBAAyB;IACzB,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,OAAO,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,CAAC;IAED,kCAAkC;IAClC,MAAM,MAAM,GACX,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;SACrB,GAAG,CAAC,CAAC,GAAgB,EAAE,EAAE;QACzB,MAAM,IAAI,GACT,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;YAC9C,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;YAC/B,CAAC,CAAE,GAAG,CAAC,MAAuC,CAAC,eAAe;gBAC7D,MAAM,CAAC;QACV,OAAO,OAAO,IAAI,KAAK,GAAG,CAAC,OAAO,IAAI,eAAe,EAAE,CAAC;IACzD,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,IAAI,0BAA0B,CAAC;IAE5C,MAAM,aAAa,GAAG,eAAe,CAAC,QAAQ,CAAC,SAAS,EAAE;QACzD,aAAa,EAAE,IAAI;QACnB,gBAAgB,EAAE,KAAK;KACvB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC;IAChE,MAAM,eAAe,GACpB,QAAQ,CAAC,MAAM,GAAG,IAAI;QACrB,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,oBAAoB,QAAQ,CAAC,MAAM,GAAG,IAAI,SAAS;QAC/E,CAAC,CAAC,QAAQ,CAAC;IAEb,MAAM,YAAY,GAAG,+BAA+B,QAAQ,CAAC,IAAI,OAAO,MAAM,wCAAwC,eAAe,EAAE,CAAC;IAExI,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;AAC/B,CAAC","sourcesContent":["import { Value } from \"@sinclair/typebox/value\";\nimport {\n\tAjv,\n\ttype AnySchema,\n\ttype ErrorObject,\n\ttype ValidateFunction,\n} from \"ajv\";\nimport addFormatsModule, { type FormatsPlugin } from \"ajv-formats\";\nimport { sanitizePayload } from \"../../safety/context-firewall.js\";\nimport { isRecord } from \"../../utils/json.js\";\nimport { createLogger } from \"../../utils/logger.js\";\nimport { resolveDefaultExport } from \"../../utils/module-interop.js\";\nimport { sanitizeWithStaticMask } from \"../../utils/secret-redactor.js\";\nimport type { AgentTool, ToolCall } from \"../types.js\";\n\nconst logger = createLogger(\"agent:providers:validation\");\n\n// ESM/CJS interop: ajv-formats default may be nested under .default in some loaders\nconst addFormats = resolveDefaultExport<FormatsPlugin>(addFormatsModule);\n\n// Detect if we're in a browser extension environment with strict CSP\n// Chrome extensions with Manifest V3 don't allow eval/Function constructor\ninterface ChromeRuntime {\n\tchrome?: { runtime?: { id?: string } };\n}\nconst isBrowserExtension =\n\ttypeof globalThis !== \"undefined\" &&\n\t(globalThis as typeof globalThis & ChromeRuntime).chrome?.runtime?.id !==\n\t\tundefined;\n\n// Create a singleton AJV instance with formats (only if not in browser extension)\n// AJV requires 'unsafe-eval' CSP which is not allowed in Manifest V3\nlet ajv: Ajv | null = null;\nconst validatorCache = new WeakMap<\n\tobject,\n\tValidateFunction & {\n\t\terrors?: ErrorObject[] | null;\n\t}\n>();\nif (!isBrowserExtension) {\n\ttry {\n\t\tajv = new Ajv({\n\t\t\t// Limit error output to avoid unbounded allocations on malformed input\n\t\t\tallErrors: false,\n\t\t\tstrict: false,\n\t\t});\n\t\taddFormats(ajv);\n\t} catch (e) {\n\t\t// AJV initialization failed (likely CSP restriction)\n\t\tlogger.warn(\"AJV validation disabled due to CSP restrictions\", {\n\t\t\terror: e instanceof Error ? e.message : String(e),\n\t\t\tisBrowserExtension,\n\t\t});\n\t}\n}\n\n/**\n * Validates tool call arguments against the tool's TypeBox schema\n * @param tool The tool definition with TypeBox schema\n * @param toolCall The tool call from the LLM\n * @returns The validated arguments\n * @throws Error with formatted message if validation fails\n */\nexport function validateToolArguments(\n\ttool: AgentTool,\n\ttoolCall: ToolCall,\n): Record<string, unknown> {\n\t// Skip validation in browser extension environment (CSP restrictions prevent AJV from working)\n\tif (!ajv || isBrowserExtension) {\n\t\tconst args = isRecord(toolCall.arguments) ? toolCall.arguments : {};\n\t\t// Browser extensions can't use AJV due to Manifest V3 CSP restrictions.\n\t\t// TypeBox's Value.Check avoids eval, so we can still validate safely here.\n\t\ttry {\n\t\t\tif (Value.Check(tool.parameters, args)) {\n\t\t\t\treturn args;\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tlogger.warn(\"TypeBox validation failed in CSP-safe mode\", {\n\t\t\t\terror: sanitizeWithStaticMask(\n\t\t\t\t\terror instanceof Error ? error.message : String(error),\n\t\t\t\t),\n\t\t\t\ttool: tool.name,\n\t\t\t});\n\t\t}\n\t\tlogger.warn(\"Tool arguments failed validation in CSP-safe mode\", {\n\t\t\ttool: tool.name,\n\t\t});\n\t\treturn {};\n\t}\n\n\t// Compile (or reuse) the schema\n\tlet validate = validatorCache.get(tool.parameters);\n\tif (!validate) {\n\t\tvalidate = ajv.compile(tool.parameters as AnySchema);\n\t\tvalidatorCache.set(tool.parameters, validate);\n\t}\n\n\t// Validate the arguments\n\tif (validate(toolCall.arguments)) {\n\t\treturn isRecord(toolCall.arguments) ? toolCall.arguments : {};\n\t}\n\n\t// Format validation errors nicely\n\tconst errors =\n\t\t(validate.errors ?? [])\n\t\t\t.map((err: ErrorObject) => {\n\t\t\t\tconst path =\n\t\t\t\t\terr.instancePath && err.instancePath.length > 1\n\t\t\t\t\t\t? err.instancePath.substring(1)\n\t\t\t\t\t\t: (err.params as { missingProperty?: string }).missingProperty ||\n\t\t\t\t\t\t\t\"root\";\n\t\t\t\treturn `  - ${path}: ${err.message ?? \"invalid value\"}`;\n\t\t\t})\n\t\t\t.join(\"\\n\") || \"Unknown validation error\";\n\n\tconst sanitizedArgs = sanitizePayload(toolCall.arguments, {\n\t\tredactSecrets: true,\n\t\tvaultCredentials: false,\n\t});\n\tconst argsJson = JSON.stringify(sanitizedArgs, null, 2) ?? \"{}\";\n\tconst trimmedArgsJson =\n\t\targsJson.length > 2000\n\t\t\t? `${argsJson.slice(0, 2000)}\\n... (truncated ${argsJson.length - 2000} chars)`\n\t\t\t: argsJson;\n\n\tconst errorMessage = `Validation failed for tool \"${toolCall.name}\":\\n${errors}\\n\\nReceived arguments (sanitized):\\n${trimmedArgsJson}`;\n\n\tthrow new Error(errorMessage);\n}\n"]}

package/dist/agent/providers/vertex.js

@@ -18490,6 +18490,28 @@ function resolveHomePath(value, raw) {
   const expanded = value === "~" ? home : value.startsWith("~/") || value.startsWith("~\\") ? join4(home, value.slice(2)) : value;
   return resolve3(expanded);
 }
+function homeFromEnv(raw) {
+  return trim(raw.HOME) ?? trim(raw.USERPROFILE) ?? homedir2();
+}
+function resolveDataLocalDir(raw) {
+  const home = homeFromEnv(raw);
+  if (process.platform === "darwin") {
+    return join4(home, "Library", "Application Support");
+  }
+  if (process.platform === "win32") {
+    return resolveHomePath(trim(raw.LOCALAPPDATA), raw) ?? resolveHomePath(trim(raw.APPDATA), raw) ?? join4(home, "AppData", "Local");
+  }
+  return resolveHomePath(trim(raw.XDG_DATA_HOME), raw) ?? join4(home, ".local", "share");
+}
+function resolveRuntimeDir(raw) {
+  if (process.platform === "darwin") {
+    return resolveDataLocalDir(raw);
+  }
+  const xdgRuntimeDir = resolveHomePath(trim(raw.XDG_RUNTIME_DIR), raw);
+  if (xdgRuntimeDir)
+    return xdgRuntimeDir;
+  return resolveDataLocalDir(raw);
+}
 function createRuntimeEnv(raw) {
   return Object.freeze({
     logLevel: parseLogLevel(trim(raw.MAESTRO_LOG_LEVEL)),
@@ -18500,6 +18522,9 @@ function createRuntimeEnv(raw) {
     disableKeychain: parseBoolean(trim(raw.MAESTRO_DISABLE_KEYCHAIN)),
     maestroHome: trim(raw.MAESTRO_HOME) ?? join4(homedir2(), ".maestro"),
     maestroAgentDir: trim(raw.MAESTRO_AGENT_DIR),
+    missionStoreDir: resolveHomePath(trim(raw.MAESTRO_MISSION_STORE_DIR), raw),
+    snapshotBlobDir: resolveHomePath(trim(raw.MAESTRO_SNAPSHOT_BLOB_DIR), raw),
+    skillTrustStrict: parseBoolean(trim(raw.MAESTRO_SKILL_TRUST_STRICT)),
     telemetryEnabled: parseOptionalBoolean(trim(raw.MAESTRO_TELEMETRY) ?? trim(raw.PLAYWRIGHT_TELEMETRY)),
     telemetryFlag: trim(raw.MAESTRO_TELEMETRY) ?? trim(raw.PLAYWRIGHT_TELEMETRY),
     beaconFile: resolveHomePath(trim(raw.MAESTRO_BEACON_FILE), raw),
@@ -18523,10 +18548,31 @@ function createRuntimeEnv(raw) {
     ]),
     meterBaseUrl: firstNonEmpty(raw, METER_BASE_URL_VARS),
     meterAccessToken: firstNonEmpty(raw, METER_ACCESS_TOKEN_VARS),
-    meterOrganizationId: firstNonEmpty(raw, METER_ORG_ID_VARS)
+    meterOrganizationId: firstNonEmpty(raw, METER_ORG_ID_VARS),
+    ambientLearnerFile: resolveHomePath(trim(raw.MAESTRO_AMBIENT_LEARNER_FILE), raw),
+    ambientLearnerDefaultFile: join4(resolveDataLocalDir(raw), "ambient-agent", "learner.json"),
+    ambientSocketFile: join4(resolveRuntimeDir(raw), "ambient-agent.sock")
   });
 }
+function isTestProcess() {
+  return process.env.NODE_ENV === "test" || process.env.VITEST === "true";
+}
+function maybeReportEarlyRuntimeEnvAccess() {
+  if (processWithRuntimeEnvCache.__MAESTRO_RUNTIME_ENV_FINALIZED__) {
+    return;
+  }
+  const message = "defaultRuntimeEnv() was read before loadAndFinalizeEnv() completed. Bootstrap entry points must finish dotenv loading and security scrubbing before runtime env snapshots are created.";
+  if (process.env.MAESTRO_RUNTIME_ENV_STRICT_BOOTSTRAP === "1") {
+    throw new Error(message);
+  }
+  if (isTestProcess() || processWithRuntimeEnvCache.__MAESTRO_RUNTIME_ENV_EARLY_ACCESS_WARNED__) {
+    return;
+  }
+  processWithRuntimeEnvCache.__MAESTRO_RUNTIME_ENV_EARLY_ACCESS_WARNED__ = true;
+  console.warn(`[maestro] ${message}`);
+}
 function defaultRuntimeEnv() {
+  maybeReportEarlyRuntimeEnvAccess();
   if (!processWithRuntimeEnvCache.__MAESTRO_DEFAULT_RUNTIME_ENV__) {
     processWithRuntimeEnvCache.__MAESTRO_DEFAULT_RUNTIME_ENV__ = createRuntimeEnv(process.env);
   }
@@ -18734,6 +18780,43 @@ var init_logger = __esm({
   }
 });
 
+// dist/utils/json.js
+function safeJsonParse(input, context) {
+  try {
+    const data = JSON.parse(input);
+    return { success: true, data };
+  } catch (error) {
+    const message = context ? `Failed to parse JSON in ${context}` : "Failed to parse JSON";
+    const parseError = new JsonParseError(
+      message,
+      input.slice(0, 200),
+      // Limit stored input
+      error instanceof Error ? error : void 0
+    );
+    logger2.debug(message, { inputLength: input.length, error });
+    return { success: false, error: parseError };
+  }
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+var logger2, JsonParseError;
+var init_json = __esm({
+  "dist/utils/json.js"() {
+    "use strict";
+    init_logger();
+    logger2 = createLogger("json-utils");
+    JsonParseError = class extends Error {
+      constructor(message, input, cause) {
+        super(message);
+        this.input = input;
+        this.cause = cause;
+        this.name = "JsonParseError";
+      }
+    };
+  }
+});
+
 // dist/safety/credential-patterns.js
 import { createHash, randomBytes } from "node:crypto";
 function createGlobalPatternRegex(def) {
@@ -19236,40 +19319,6 @@ var init_feature_flags = __esm({
   }
 });
 
-// dist/utils/json.js
-function safeJsonParse(input, context) {
-  try {
-    const data = JSON.parse(input);
-    return { success: true, data };
-  } catch (error) {
-    const message = context ? `Failed to parse JSON in ${context}` : "Failed to parse JSON";
-    const parseError = new JsonParseError(
-      message,
-      input.slice(0, 200),
-      // Limit stored input
-      error instanceof Error ? error : void 0
-    );
-    logger2.debug(message, { inputLength: input.length, error });
-    return { success: false, error: parseError };
-  }
-}
-var logger2, JsonParseError;
-var init_json = __esm({
-  "dist/utils/json.js"() {
-    "use strict";
-    init_logger();
-    logger2 = createLogger("json-utils");
-    JsonParseError = class extends Error {
-      constructor(message, input, cause) {
-        super(message);
-        this.input = input;
-        this.cause = cause;
-        this.name = "JsonParseError";
-      }
-    };
-  }
-});
-
 // dist/utils/fs.js
 import { randomBytes as randomBytes2 } from "node:crypto";
 import { constants, closeSync, existsSync, fsyncSync, mkdirSync, openSync, readFileSync as readFileSync3, renameSync, statSync as statSync3, unlinkSync, writeFileSync } from "node:fs";
@@ -19321,7 +19370,16 @@ function readJsonFile(path, options = {}) {
           error: result.error.message
         });
         if (rotateOnParseFail) {
-          rotateCorruptJsonFile(path);
+          const rotatedPath = rotateCorruptJsonFile(path, content);
+          if (!rotatedPath) {
+            const repairedContent = readTextFile(path, { fallback: "" });
+            if (repairedContent !== "" && repairedContent !== content) {
+              const repaired = safeJsonParse(repairedContent, path);
+              if (repaired.success) {
+                return repaired.data;
+              }
+            }
+          }
         }
         return fallback;
       }
@@ -19336,9 +19394,26 @@ function readJsonFile(path, options = {}) {
     throw error;
   }
 }
-function rotateCorruptJsonFile(path) {
+function rotateCorruptJsonFile(path, expectedContent) {
   if (!fileExists(path))
     return null;
+  if (expectedContent !== void 0) {
+    try {
+      const currentContent = readFileSync3(path, "utf8");
+      if (currentContent !== expectedContent) {
+        logger3.warn("Skipped corrupt JSON rotation; file changed after read", {
+          path
+        });
+        return null;
+      }
+    } catch (error) {
+      logger3.warn("Failed to re-read corrupt JSON before rotation", {
+        path,
+        error: error instanceof Error ? error.message : String(error)
+      });
+      return null;
+    }
+  }
   const timestamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
   const nonce = randomBytes2(4).toString("hex");
   const rotatedPath = `${path}.corrupt.${timestamp}.${nonce}`;
@@ -20239,7 +20314,10 @@ function defaultCorrelation(env, managedContext) {
     remote_runner_session_id: readEnv(env, [
       "MAESTRO_REMOTE_RUNNER_SESSION_ID"
     ]),
-    objective_id: readEnv(env, ["MAESTRO_OBJECTIVE_ID"]),
+    objective_id: readEnv(env, [
+      "MAESTRO_OBJECTIVE_ID",
+      "MAESTRO_EVALOPS_OBJECTIVE_ID"
+    ]),
     conversation_id: readEnv(env, ["MAESTRO_CONVERSATION_ID"]),
     attributes: readStringRecord(env, "MAESTRO_EVENT_BUS_ATTR_")
   };
@@ -20505,28 +20583,34 @@ function contextFromMetadata(metadata, extra) {
     Object.assign(context, extra);
   return Object.keys(context).length > 0 ? context : void 0;
 }
+function normalizeOptionalString(value) {
+  if (typeof value !== "string")
+    return void 0;
+  const trimmed = value.trim();
+  return trimmed.length > 0 ? trimmed : void 0;
+}
 function correlationFromMetadata(metadata) {
   if (!metadata || typeof metadata !== "object" || Array.isArray(metadata)) {
     return void 0;
   }
   const record = metadata;
   return {
-    session_id: typeof record.sessionId === "string" ? record.sessionId : typeof record.session_id === "string" ? record.session_id : void 0,
-    workspace_id: typeof record.workspaceId === "string" ? record.workspaceId : typeof record.workspace_id === "string" ? record.workspace_id : void 0,
-    agent_run_id: typeof record.agentRunId === "string" ? record.agentRunId : typeof record.agent_run_id === "string" ? record.agent_run_id : void 0,
-    agent_run_step_id: typeof record.toolCallId === "string" ? record.toolCallId : typeof record.tool_call_id === "string" ? record.tool_call_id : void 0,
-    organization_id: typeof record.organizationId === "string" ? record.organizationId : typeof record.organization_id === "string" ? record.organization_id : void 0,
-    user_id: typeof record.userId === "string" ? record.userId : typeof record.user_id === "string" ? record.user_id : void 0,
-    agent_id: typeof record.agentId === "string" ? record.agentId : typeof record.agent_id === "string" ? record.agent_id : void 0,
-    actor_id: typeof record.actorId === "string" ? record.actorId : typeof record.actor_id === "string" ? record.actor_id : void 0,
-    principal_id: typeof record.principalId === "string" ? record.principalId : typeof record.principal_id === "string" ? record.principal_id : void 0,
-    trace_id: typeof record.traceId === "string" ? record.traceId : typeof record.trace_id === "string" ? record.trace_id : void 0,
-    traceparent: typeof record.traceparent === "string" ? record.traceparent : typeof record.trace_parent === "string" ? record.trace_parent : void 0,
-    tracestate: typeof record.tracestate === "string" ? record.tracestate : typeof record.trace_state === "string" ? record.trace_state : void 0,
-    request_id: typeof record.requestId === "string" ? record.requestId : typeof record.request_id === "string" ? record.request_id : void 0,
-    remote_runner_session_id: typeof record.remoteRunnerSessionId === "string" ? record.remoteRunnerSessionId : typeof record.remote_runner_session_id === "string" ? record.remote_runner_session_id : void 0,
-    objective_id: typeof record.objectiveId === "string" ? record.objectiveId : typeof record.objective_id === "string" ? record.objective_id : void 0,
-    conversation_id: typeof record.conversationId === "string" ? record.conversationId : typeof record.conversation_id === "string" ? record.conversation_id : void 0
+    session_id: normalizeOptionalString(record.sessionId) ?? normalizeOptionalString(record.session_id),
+    workspace_id: normalizeOptionalString(record.workspaceId) ?? normalizeOptionalString(record.workspace_id),
+    agent_run_id: normalizeOptionalString(record.agentRunId) ?? normalizeOptionalString(record.agent_run_id),
+    agent_run_step_id: normalizeOptionalString(record.toolCallId) ?? normalizeOptionalString(record.tool_call_id),
+    organization_id: normalizeOptionalString(record.organizationId) ?? normalizeOptionalString(record.organization_id),
+    user_id: normalizeOptionalString(record.userId) ?? normalizeOptionalString(record.user_id),
+    agent_id: normalizeOptionalString(record.agentId) ?? normalizeOptionalString(record.agent_id),
+    actor_id: normalizeOptionalString(record.actorId) ?? normalizeOptionalString(record.actor_id),
+    principal_id: normalizeOptionalString(record.principalId) ?? normalizeOptionalString(record.principal_id),
+    trace_id: normalizeOptionalString(record.traceId) ?? normalizeOptionalString(record.trace_id),
+    traceparent: normalizeOptionalString(record.traceparent) ?? normalizeOptionalString(record.trace_parent),
+    tracestate: normalizeOptionalString(record.tracestate) ?? normalizeOptionalString(record.trace_state),
+    request_id: normalizeOptionalString(record.requestId) ?? normalizeOptionalString(record.request_id),
+    remote_runner_session_id: normalizeOptionalString(record.remoteRunnerSessionId) ?? normalizeOptionalString(record.remote_runner_session_id),
+    objective_id: normalizeOptionalString(record.objectiveId) ?? normalizeOptionalString(record.objective_id),
+    conversation_id: normalizeOptionalString(record.conversationId) ?? normalizeOptionalString(record.conversation_id)
   };
 }
 function stringMetadata(metadata, name) {
@@ -21124,9 +21208,6 @@ function resolveBundledCodexBinPath() {
     return null;
   }
 }
-function isRecord(value) {
-  return Boolean(value && typeof value === "object" && !Array.isArray(value));
-}
 function defaultServerRequestResponse(method) {
   switch (method) {
     case "item/commandExecution/requestApproval":
@@ -21162,6 +21243,7 @@ var init_app_server_client = __esm({
   "dist/codex/app-server-client.js"() {
     "use strict";
     init_package_version();
+    init_json();
     DEFAULT_REQUEST_TIMEOUT_MS = 3e4;
     DEFAULT_LOGIN_TIMEOUT_MS = 5 * 6e4;
     MAX_NOTIFICATION_HISTORY = 100;
@@ -23092,9 +23174,6 @@ var init_service_client = __esm({
 function isConnectorOAuthProvider(provider) {
   return Object.prototype.hasOwnProperty.call(CONNECTOR_PROVIDER_BY_OAUTH_PROVIDER, provider);
 }
-function isRecord2(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 function getMetadataString(metadata, key) {
   const value = metadata?.[key];
   return typeof value === "string" && value.trim().length > 0 ? value.trim() : void 0;
@@ -23109,7 +23188,7 @@ function getMetadataStringArray(metadata, key) {
 }
 function getMetadataStringMap(metadata, key) {
   const value = metadata?.[key];
-  if (!isRecord2(value)) {
+  if (!isRecord(value)) {
     return void 0;
   }
   const entries = Object.entries(value).map(([entryKey, entryValue]) => [
@@ -23220,6 +23299,7 @@ var init_connectors = __esm({
   "dist/oauth/connectors.js"() {
     "use strict";
     init_service_client();
+    init_json();
     init_storage();
     CONNECTOR_PROVIDER_BY_OAUTH_PROVIDER = {
       "github-copilot": "github",
@@ -23598,9 +23678,6 @@ function parseScopesPayload(value) {
   }
   return value.filter((entry2) => typeof entry2 === "string").map((entry2) => entry2.trim()).filter((entry2) => entry2.length > 0);
 }
-function isRecord3(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 function getMetadataString2(metadata, key) {
   const value = metadata?.[key];
   return typeof value === "string" && value.trim().length > 0 ? value : void 0;
@@ -23614,7 +23691,7 @@ function getMetadataScopes(metadata) {
 }
 function resolveProviderRef(metadata) {
   const fallback = getProviderRef();
-  const providerRef = isRecord3(metadata?.providerRef) ? metadata.providerRef : void 0;
+  const providerRef = isRecord(metadata?.providerRef) ? metadata.providerRef : void 0;
   return {
     provider: getMetadataString2(providerRef, "provider") ?? fallback.provider,
     environment: getMetadataString2(providerRef, "environment") ?? fallback.environment,
@@ -23981,6 +24058,7 @@ var init_evalops = __esm({
     init_env_aliases();
     init_core_services();
     init_downstream_http();
+    init_json();
     init_logger();
     init_loopback_http();
     init_device_identity();
@@ -26297,28 +26375,58 @@ __export(telemetry_exports, {
 import { appendFile as appendFile2, mkdir as mkdir2 } from "node:fs/promises";
 import { dirname as dirname6 } from "node:path";
 import { SpanStatusCode } from "@opentelemetry/api";
+function createExporterRuntimeConfig(env) {
+  const file = env.exporterFile;
+  const endpoint = env.exporterEndpoint;
+  const initialEnabled = shouldEnableTelemetryForEnv(env, file, endpoint);
+  return {
+    endpoint,
+    env,
+    file,
+    flag: env.telemetryFlag,
+    initialEnabled,
+    // `RuntimeEnv.telemetrySampleRate` is already parsed and clamped to
+    // `[0, 1]`; `null` means no signal, treated as full-sampling.
+    sampleRate: env.telemetrySampleRate ?? 1
+  };
+}
+function getExporterRuntimeConfig() {
+  const env = defaultRuntimeEnv();
+  if (!exporterRuntimeConfig || exporterRuntimeConfig.env !== env) {
+    exporterRuntimeConfig = createExporterRuntimeConfig(env);
+  }
+  return exporterRuntimeConfig;
+}
+function shouldEnableTelemetryForEnv(env, file, endpoint) {
+  if (env.telemetryEnabled === false)
+    return false;
+  if (env.telemetryEnabled === true)
+    return true;
+  return Boolean(endpoint || file || hasRemoteMeterDestination());
+}
 function getTelemetryStatus() {
+  const config = getExporterRuntimeConfig();
   let reason = "disabled";
-  const baseEnabled = initialTelemetryEnabled && samplingRate > 0;
-  if (!shouldEnableTelemetry()) {
+  const baseEnabled = config.initialEnabled && config.sampleRate > 0;
+  if (!shouldEnableTelemetry(config)) {
     reason = "flag disabled";
-  } else if (samplingRate === 0) {
+  } else if (config.sampleRate === 0) {
     reason = "sampling=0";
-  } else if (telemetryEndpointEnv) {
+  } else if (config.endpoint) {
     reason = "endpoint";
   } else if (hasRemoteMeterDestination()) {
     reason = "meter";
-  } else if (telemetryFileEnv || baseEnabled) {
+  } else if (config.file || baseEnabled) {
     reason = "file";
   }
   const runtimeOverride = telemetryOverride === null ? void 0 : telemetryOverride ? "enabled" : "disabled";
   return {
-    enabled: telemetryEnabled && samplingRate > 0,
+    enabled: (telemetryOverride === null ? config.initialEnabled : telemetryOverride) && config.sampleRate > 0,
     reason,
-    endpoint: telemetryEndpointEnv ?? void 0,
-    filePath: telemetryFileEnv ?? defaultTelemetryFile,
-    sampleRate: samplingRate,
-    flagValue: telemetryFlag ?? void 0,
+    endpoint: config.endpoint ?? void 0,
+    filePath: config.file ?? defaultTelemetryFile,
+    sampleRate: config.sampleRate,
+    flagValue: config.flag ?? void 0,
     runtimeOverride,
     overrideReason: telemetryOverrideReason
   };
@@ -26326,7 +26434,6 @@ function getTelemetryStatus() {
 function setTelemetryRuntimeOverride(enabled, reason) {
   telemetryOverride = enabled;
   telemetryOverrideReason = reason;
-  telemetryEnabled = enabled === null ? initialTelemetryEnabled : enabled;
 }
 function normalizeTelemetryEventMetadata(event) {
   if (!("metadata" in event) && !("sensitiveMetadata" in event)) {
@@ -26354,7 +26461,7 @@ function isCanonicalTurnTelemetryEvent(event) {
   return event.type === "canonical-turn" && "model" in event && "tokens" in event;
 }
 async function writeToFile(payload) {
-  const filePath = telemetryFileEnv || defaultTelemetryFile;
+  const filePath = getExporterRuntimeConfig().file || defaultTelemetryFile;
   await mkdir2(dirname6(filePath), { recursive: true });
   await appendFile2(filePath, `${payload}
 `, "utf-8");
@@ -26365,7 +26472,7 @@ async function appendToolFailure(payload) {
 `, "utf-8");
 }
 async function postToEndpoint(payload) {
-  const endpoint = telemetryEndpointEnv;
+  const endpoint = getExporterRuntimeConfig().endpoint;
   if (!endpoint) {
     return;
   }
@@ -26673,17 +26780,18 @@ function maestroCorrelationSpanAttributes(event) {
   return Object.fromEntries(Object.entries(attributes).filter((entry2) => typeof entry2[1] === "string" && entry2[1].trim().length > 0 && entry2[1] !== "unknown"));
 }
 async function persistTelemetry(event) {
+  const config = getExporterRuntimeConfig();
   const payload = JSON.stringify(event);
   const tasks = [];
   if (isCanonicalTurnTelemetryEvent(event)) {
     tasks.push(mirrorCanonicalTurnEventToMeter(event).then(() => void 0));
   }
-  if (telemetryEndpointEnv) {
+  if (config.endpoint) {
     tasks.push(postToEndpoint(payload));
   }
-  if (telemetryEndpointEnv === void 0) {
+  if (config.file) {
     tasks.push(writeToFile(payload));
-  } else if (telemetryFileEnv) {
+  } else if (config.endpoint === null && !hasRemoteMeterDestination(config.env)) {
     tasks.push(writeToFile(payload));
   }
   await Promise.all(tasks);
@@ -26711,6 +26819,7 @@ async function recordTelemetry(event) {
   if (isInternalTelemetryDisabled()) {
     return;
   }
+  const config = getExporterRuntimeConfig();
   const normalizedEvent = normalizeTelemetryEventMetadata(event);
   const openTelemetryEnabled = isOpenTelemetryEnabled();
   if (openTelemetryEnabled) {
@@ -26718,12 +26827,12 @@ async function recordTelemetry(event) {
     recordOpenTelemetryMetric(normalizedEvent);
   }
   const eventBusTask = mirrorTelemetryToMaestroEventBus(normalizedEvent);
-  const legacyEnabled = telemetryEnabled && samplingRate > 0;
+  const legacyEnabled = (telemetryOverride === null ? config.initialEnabled : telemetryOverride) && config.sampleRate > 0;
   if (!legacyEnabled) {
     await eventBusTask;
     return;
   }
-  if (samplingRate < 1 && Math.random() > samplingRate) {
+  if (config.sampleRate < 1 && Math.random() > config.sampleRate) {
     await eventBusTask;
     return;
   }
@@ -26977,7 +27086,7 @@ function recordSandboxViolation(event, tool, action, reason, options) {
     metadata: options?.metadata ? { ...options.metadata, sessionId: options.sessionId } : options?.sessionId ? { sessionId: options.sessionId } : void 0
   });
 }
-var exporterRuntimeEnv, telemetryFileEnv, telemetryEndpointEnv, telemetryFlag, telemetrySampleRate, shouldEnableTelemetry, initialTelemetryEnabled, telemetryEnabled, telemetryOverride, telemetryOverrideReason, A2A_PHASE_EVENT_TYPES, samplingRate, defaultTelemetryFile, toolFailureLogFile, BACKGROUND_TASK_HISTORY_LIMIT, backgroundTaskHistory;
+var exporterRuntimeConfig, shouldEnableTelemetry, telemetryOverride, telemetryOverrideReason, A2A_PHASE_EVENT_TYPES, defaultTelemetryFile, toolFailureLogFile, BACKGROUND_TASK_HISTORY_LIMIT, backgroundTaskHistory;
 var init_telemetry = __esm({
   "dist/telemetry.js"() {
     "use strict";
@@ -26993,20 +27102,8 @@ var init_telemetry = __esm({
     init_wide_events();
     init_secret_redactor();
     init_metadata_normalization();
-    exporterRuntimeEnv = defaultRuntimeEnv();
-    telemetryFileEnv = exporterRuntimeEnv.exporterFile;
-    telemetryEndpointEnv = exporterRuntimeEnv.exporterEndpoint;
-    telemetryFlag = exporterRuntimeEnv.telemetryFlag;
-    telemetrySampleRate = exporterRuntimeEnv.telemetrySampleRate;
-    shouldEnableTelemetry = () => {
-      if (exporterRuntimeEnv.telemetryEnabled === false)
-        return false;
-      if (exporterRuntimeEnv.telemetryEnabled === true)
-        return true;
-      return Boolean(telemetryEndpointEnv || telemetryFileEnv || hasRemoteMeterDestination());
-    };
-    initialTelemetryEnabled = shouldEnableTelemetry();
-    telemetryEnabled = initialTelemetryEnabled;
+    exporterRuntimeConfig = null;
+    shouldEnableTelemetry = (config = getExporterRuntimeConfig()) => shouldEnableTelemetryForEnv(config.env, config.file, config.endpoint);
     telemetryOverride = null;
     A2A_PHASE_EVENT_TYPES = {
       peer_selected: MaestroBusEventType.A2APeerSelected,
@@ -27018,7 +27115,6 @@ var init_telemetry = __esm({
       push_received: MaestroBusEventType.A2APushReceived,
       evidence_completed: MaestroBusEventType.A2AEvidenceCompleted
     };
-    samplingRate = telemetrySampleRate ?? 1;
     defaultTelemetryFile = PATHS.TELEMETRY_LOG;
     toolFailureLogFile = PATHS.TOOL_FAILURE_LOG;
     BACKGROUND_TASK_HISTORY_LIMIT = 50;
@@ -27110,6 +27206,9 @@ ${errMsg}`);
   return result;
 }
 
+// dist/models/config-loader.js
+init_json();
+
 // dist/utils/jsonc-umd.js
 import { parse as parseJsonc, printParseErrorCode } from "jsonc-parser";
 
@@ -27666,9 +27765,6 @@ var configSchema = Type2.Object({
 var configValidator = compileTypeboxSchema(configSchema);
 var TRUST_PROJECT_MODEL_CONFIG_ENV = "MAESTRO_TRUST_PROJECT_MODEL_CONFIG";
 var TRUE_ENV_VALUES = /* @__PURE__ */ new Set(["1", "true", "yes", "on"]);
-function isRecord4(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 function isProjectModelConfigTrusted() {
   const value = process.env[TRUST_PROJECT_MODEL_CONFIG_ENV];
   return value !== void 0 && TRUE_ENV_VALUES.has(value.toLowerCase());
@@ -27937,7 +28033,7 @@ function loadUntrustedProjectConfigFile(path) {
 }
 function sanitizeUntrustedProjectConfig(config, path) {
   const providers = [];
-  if (!isRecord4(config)) {
+  if (!isRecord(config)) {
     logger19.warn("Ignoring invalid untrusted project model config", {
       path,
       trustEnv: TRUST_PROJECT_MODEL_CONFIG_ENV
@@ -28706,7 +28802,7 @@ function parseStreamingJson(partialJson) {
 }
 
 // dist/agent/providers/tool-arguments.js
-function isRecord5(value) {
+function isRecord2(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 function describeValueType(value) {
@@ -28736,7 +28832,7 @@ function createToolArgumentNormalizer(options) {
   }
   function parseFromString(raw, context, parseOptions) {
     const parsed = parseStreamingJson(raw);
-    if (isRecord5(parsed)) {
+    if (isRecord2(parsed)) {
       return parsed;
     }
     if (parseOptions?.logInvalid ?? true) {
@@ -28751,7 +28847,7 @@ function createToolArgumentNormalizer(options) {
         logInvalid: normalizeOptions?.logInvalid
       });
     }
-    if (isRecord5(raw)) {
+    if (isRecord2(raw)) {
       if (normalizeOptions?.expectString) {
         warnOnce("raw:object", `${options.providerLabel} tool call arguments were object, expected string`, buildWarningDetails(context));
       }
@@ -28774,7 +28870,7 @@ function createToolArgumentNormalizer(options) {
         partialJson: raw
       };
     }
-    if (isRecord5(raw)) {
+    if (isRecord2(raw)) {
       if (normalizeOptions?.expectString) {
         warnOnce("raw:object", `${options.providerLabel} tool call arguments were object, expected string`, buildWarningDetails(context));
       }

package/dist/agent/snapshot-store.d.ts

@@ -0,0 +1,32 @@
+import type { RewindPlan } from "./snapshot-rewind-plan.js";
+export interface SnapshotBlobStoreConfig {
+    rootDir?: string;
+}
+export interface RewindExecutionResult {
+    targetIndex: number;
+    fromIndex: number;
+    restored: string[];
+    deleted: string[];
+    bytesRestored: number;
+    dryRun: boolean;
+}
+export declare function getSnapshotBlobRoot(rootDir?: string): string;
+export declare function sha256Content(content: string | Buffer): string;
+export declare class SnapshotBlobStore {
+    private readonly rootDir;
+    constructor(config?: SnapshotBlobStoreConfig);
+    put(content: string | Buffer): {
+        contentSha256: string;
+        size: number;
+    };
+    get(contentSha256: string): Buffer;
+    has(contentSha256: string): boolean;
+    getPath(contentSha256: string): string;
+}
+export declare function executeRewindPlan(options: {
+    plan: RewindPlan;
+    workspaceDir: string;
+    store?: SnapshotBlobStore;
+    dryRun?: boolean;
+}): RewindExecutionResult;
+//# sourceMappingURL=snapshot-store.d.ts.map

package/dist/agent/snapshot-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot-store.d.ts","sourceRoot":"","sources":["../../src/agent/snapshot-store.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,UAAU,EAAmB,MAAM,2BAA2B,CAAC;AAI7E,MAAM,WAAW,uBAAuB;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,OAAO,CAAC;CAChB;AAgBD,wBAAgB,mBAAmB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAM5D;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAE9D;AAED,qBAAa,iBAAiB;IAC7B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAErB,MAAM,GAAE,uBAA4B;IAIhD,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE;IAYtE,GAAG,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM;IAQlC,GAAG,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO;IAInC,OAAO,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM;CAItC;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE;IAC1C,IAAI,EAAE,UAAU,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAC1B,MAAM,CAAC,EAAE,OAAO,CAAC;CACjB,GAAG,qBAAqB,CAgDxB"}