@evalops/maestro 0.10.50 → 0.10.53

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EACN,WAAW,EACX,QAAQ,EACR,mBAAmB,EACnB,WAAW,EACX,QAAQ,EACR,gBAAgB,EAChB,QAAQ,EACR,QAAQ,EACR,SAAS;AACT,sBAAsB;AACtB,eAAe,EACf,qBAAqB,EACrB,wBAAwB,GACxB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACN,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,GACnB,MAAM,gBAAgB,CAAC;AAExB,wCAAwC;AACxC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,0BAA0B,CAAC;AACzC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iCAAiC,CAAC;AAChD,cAAc,sCAAsC,CAAC;AACrD,cAAc,uCAAuC,CAAC;AAEtD,qDAAqD;AACrD,OAAO,EACN,sBAAsB,EACtB,iBAAiB,EACjB,oBAAoB,EACpB,sBAAsB,EACtB,QAAQ,GAKR,MAAM,kCAAkC,CAAC","sourcesContent":["export { main } from \"./main.js\";\nexport { SessionManager } from \"./session/manager.js\";\nexport {\n\taskUserTool,\n\tbashTool,\n\tbackgroundTasksTool,\n\tcodingTools,\n\teditTool,\n\tnotebookEditTool,\n\treadTool,\n\ttodoTool,\n\twriteTool,\n\t// Tool result caching\n\tToolResultCache,\n\tcreateToolResultCache,\n\tgetGlobalToolResultCache,\n} from \"./tools/index.js\";\nexport {\n\trecordEvaluationResult,\n\trecordSubagentDispatch,\n\trecordToolExecution,\n} from \"./telemetry.js\";\n\n// SDK tool types for external consumers\nexport * from \"./sdk-tools.js\";\nexport * from \"./platform/a2a-client.js\";\nexport * from \"./platform/a2a-peer-pairing.js\";\nexport * from \"./platform/a2a-peer-registry.js\";\nexport * from \"./platform/operating-plane-client.js\";\nexport * from \"./platform/operating-plane-summary.js\";\n\n// Distributed lock manager for concurrent operations\nexport {\n\tDistributedLockManager,\n\tcreateLockManager,\n\tgetGlobalLockManager,\n\tresetGlobalLockManager,\n\twithLock,\n\ttype LockResult,\n\ttype LockInfo,\n\ttype LockOptions,\n\ttype LockManagerConfig,\n} from \"./db/distributed-lock-manager.js\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACN,4BAA4B,EAC5B,0BAA0B,EAC1B,0BAA0B,GAE1B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EACN,WAAW,EACX,QAAQ,EACR,mBAAmB,EACnB,WAAW,EACX,QAAQ,EACR,gBAAgB,EAChB,QAAQ,EACR,QAAQ,EACR,SAAS;AACT,sBAAsB;AACtB,eAAe,EACf,qBAAqB,EACrB,wBAAwB,GACxB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACN,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,GACnB,MAAM,gBAAgB,CAAC;AAExB,wCAAwC;AACxC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,0BAA0B,CAAC;AACzC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iCAAiC,CAAC;AAChD,cAAc,sCAAsC,CAAC;AACrD,cAAc,uCAAuC,CAAC;AAEtD,qDAAqD;AACrD,OAAO,EACN,sBAAsB,EACtB,iBAAiB,EACjB,oBAAoB,EACpB,sBAAsB,EACtB,QAAQ,GAKR,MAAM,kCAAkC,CAAC","sourcesContent":["export { main } from \"./main.js\";\nexport {\n\tMAESTRO_REVIEW_WORKFLOW_PATH,\n\tbuildMaestroReviewWorkflow,\n\twriteMaestroReviewWorkflow,\n\ttype MaestroReviewWorkflowOptions,\n} from \"./installers/maestro-review-workflow.js\";\nexport { SessionManager } from \"./session/manager.js\";\nexport {\n\taskUserTool,\n\tbashTool,\n\tbackgroundTasksTool,\n\tcodingTools,\n\teditTool,\n\tnotebookEditTool,\n\treadTool,\n\ttodoTool,\n\twriteTool,\n\t// Tool result caching\n\tToolResultCache,\n\tcreateToolResultCache,\n\tgetGlobalToolResultCache,\n} from \"./tools/index.js\";\nexport {\n\trecordEvaluationResult,\n\trecordSubagentDispatch,\n\trecordToolExecution,\n} from \"./telemetry.js\";\n\n// SDK tool types for external consumers\nexport * from \"./sdk-tools.js\";\nexport * from \"./platform/a2a-client.js\";\nexport * from \"./platform/a2a-peer-pairing.js\";\nexport * from \"./platform/a2a-peer-registry.js\";\nexport * from \"./platform/operating-plane-client.js\";\nexport * from \"./platform/operating-plane-summary.js\";\n\n// Distributed lock manager for concurrent operations\nexport {\n\tDistributedLockManager,\n\tcreateLockManager,\n\tgetGlobalLockManager,\n\tresetGlobalLockManager,\n\twithLock,\n\ttype LockResult,\n\ttype LockInfo,\n\ttype LockOptions,\n\ttype LockManagerConfig,\n} from \"./db/distributed-lock-manager.js\";\n"]}

package/dist/installers/maestro-review-workflow.d.ts

@@ -0,0 +1,38 @@
+/** Repo-relative path the workflow is written to. */
+export declare const MAESTRO_REVIEW_WORKFLOW_PATH = ".github/workflows/maestro-review.yml";
+export interface MaestroReviewWorkflowOptions {
+    /** Node major version used to run Maestro in CI. Default "20". */
+    nodeVersion?: string;
+    /** npm package installed in CI. Default "maestro". */
+    maestroPackage?: string;
+    /** Version/tag of the package to install. Default "latest". */
+    maestroVersion?: string;
+    /**
+     * Optional provider passed to `maestro exec --provider` when no model is set.
+     * Defaults to the provider inferred from the API key secret/env var and falls
+     * back to "anthropic".
+     */
+    provider?: string;
+    /** Optional model id passed to `maestro exec --model`. */
+    model?: string;
+    /**
+     * Name of the repository secret holding the model provider API key. Defaults
+     * to the provider's expected runtime env var (e.g. "ANTHROPIC_API_KEY").
+     */
+    apiKeySecretName?: string;
+    /**
+     * Environment variable exposed to Maestro. Defaults to the provider-specific
+     * API key env var so custom secret names still work at runtime.
+     */
+    apiKeyEnvName?: string;
+}
+/**
+ * Build the `.github/workflows/maestro-review.yml` contents as a YAML string.
+ */
+export declare function buildMaestroReviewWorkflow(options?: MaestroReviewWorkflowOptions): string;
+/**
+ * Write the review workflow into the target repository, creating the
+ * `.github/workflows` directory if needed. Returns the absolute path written.
+ */
+export declare function writeMaestroReviewWorkflow(repoRoot: string, options?: MaestroReviewWorkflowOptions): string;
+//# sourceMappingURL=maestro-review-workflow.d.ts.map

package/dist/installers/maestro-review-workflow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"maestro-review-workflow.d.ts","sourceRoot":"","sources":["../../src/installers/maestro-review-workflow.ts"],"names":[],"mappings":"AAGA,qDAAqD;AACrD,eAAO,MAAM,4BAA4B,yCACF,CAAC;AAExC,MAAM,WAAW,4BAA4B;IAC5C,kEAAkE;IAClE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sDAAsD;IACtD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,+DAA+D;IAC/D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0DAA0D;IAC1D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACvB;AAwID;;GAEG;AACH,wBAAgB,0BAA0B,CACzC,OAAO,GAAE,4BAAiC,GACxC,MAAM,CA0DR;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CACzC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,4BAAiC,GACxC,MAAM,CAIR"}

package/dist/installers/maestro-review-workflow.js

@@ -0,0 +1,163 @@
+import { join } from "node:path";
+import { writeTextFileAtomic } from "../utils/fs.js";
+/** Repo-relative path the workflow is written to. */
+export const MAESTRO_REVIEW_WORKFLOW_PATH = ".github/workflows/maestro-review.yml";
+const PROVIDER_API_KEY_ENV_NAMES = {
+    anthropic: "ANTHROPIC_API_KEY",
+    openai: "OPENAI_API_KEY",
+    "openai-codex": "OPENAI_CODEX_TOKEN",
+    "azure-openai": "AZURE_OPENAI_API_KEY",
+    google: "GEMINI_API_KEY",
+    evalops: "MAESTRO_EVALOPS_ACCESS_TOKEN",
+    groq: "GROQ_API_KEY",
+    cerebras: "CEREBRAS_API_KEY",
+    openrouter: "OPENROUTER_API_KEY",
+    mistral: "MISTRAL_API_KEY",
+    deepseek: "DEEPSEEK_API_KEY",
+    xai: "XAI_API_KEY",
+    zai: "ZAI_API_KEY",
+    writer: "WRITER_API_KEY",
+    moonshot: "MOONSHOT_API_KEY",
+    dashscope: "DASHSCOPE_API_KEY",
+    minimax: "MINIMAX_API_KEY",
+};
+function validateEnvName(name, optionName) {
+    if (!/^[A-Z_][A-Z0-9_]*$/.test(name)) {
+        throw new Error(`${optionName} must be a valid GitHub Actions env name: ${name}`);
+    }
+    return name;
+}
+function validateSecretName(name) {
+    if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(name)) {
+        throw new Error(`apiKeySecretName must be a valid GitHub Actions secret name: ${name}`);
+    }
+    return name;
+}
+function getDefaultApiKeyEnvName(provider) {
+    return (PROVIDER_API_KEY_ENV_NAMES[provider] ??
+        `${provider.toUpperCase().replace(/[^A-Z0-9]/g, "_")}_API_KEY`);
+}
+function validateYamlScalar(value, optionName) {
+    if (/\r|\n/.test(value)) {
+        throw new Error(`${optionName} must not contain newlines`);
+    }
+    return value;
+}
+function shellQuote(value) {
+    return `'${value.replaceAll("'", "'\\''")}'`;
+}
+const PROVIDER_BY_API_KEY_ENV_VAR = {
+    ANTHROPIC_API_KEY: "anthropic",
+    GEMINI_API_KEY: "google",
+    GOOGLE_GEMINI_CLI_TOKEN: "google-gemini-cli",
+    GOOGLE_ANTIGRAVITY_TOKEN: "google-antigravity",
+    OPENAI_API_KEY: "openai",
+    OPENAI_CODEX_TOKEN: "openai-codex",
+    OPENAI_CODEX_ACCESS_TOKEN: "openai-codex",
+    CODEX_API_KEY: "openai-codex",
+    AZURE_OPENAI_API_KEY: "azure-openai",
+    MAESTRO_EVALOPS_ACCESS_TOKEN: "evalops",
+    WRITER_API_KEY: "writer",
+    XAI_API_KEY: "xai",
+    GROQ_API_KEY: "groq",
+    CEREBRAS_API_KEY: "cerebras",
+    OPENROUTER_API_KEY: "openrouter",
+    ZAI_API_KEY: "zai",
+    MISTRAL_API_KEY: "mistral",
+    DEEPSEEK_API_KEY: "deepseek",
+    MOONSHOT_API_KEY: "moonshot",
+    KIMI_API_KEY: "moonshot",
+    DASHSCOPE_API_KEY: "dashscope",
+    QWEN_API_KEY: "dashscope",
+    MINIMAX_API_KEY: "minimax",
+};
+function inferProviderFromApiKeyEnvVar(apiKeySecretName) {
+    return PROVIDER_BY_API_KEY_ENV_VAR[apiKeySecretName];
+}
+function resolveOptions(options) {
+    const inferredProvider = options.apiKeySecretName &&
+        inferProviderFromApiKeyEnvVar(options.apiKeySecretName);
+    const provider = validateYamlScalar(options.provider ?? inferredProvider ?? "anthropic", "provider");
+    const apiKeyEnvName = validateEnvName(options.apiKeyEnvName ?? getDefaultApiKeyEnvName(provider), "apiKeyEnvName");
+    return {
+        nodeVersion: validateYamlScalar(options.nodeVersion ?? "20", "nodeVersion"),
+        maestroPackage: validateYamlScalar(options.maestroPackage ?? "maestro", "maestroPackage"),
+        maestroVersion: validateYamlScalar(options.maestroVersion ?? "latest", "maestroVersion"),
+        provider,
+        model: options.model === undefined
+            ? undefined
+            : validateYamlScalar(options.model, "model"),
+        apiKeySecretName: validateSecretName(options.apiKeySecretName ?? apiKeyEnvName),
+        apiKeyEnvName,
+    };
+}
+/**
+ * Build the `.github/workflows/maestro-review.yml` contents as a YAML string.
+ */
+export function buildMaestroReviewWorkflow(options = {}) {
+    const resolved = resolveOptions(options);
+    const modelFlag = resolved.model
+        ? ` --model ${shellQuote(resolved.model)}`
+        : "";
+    const packageSpec = `${resolved.maestroPackage}@${resolved.maestroVersion}`;
+    // Keep ${...} placeholders as literal shell expansions in the generated YAML.
+    const reviewPrompt = "Use the pr-review skill to review the changes in this pull request " +
+        "(#${MAESTRO_PR_NUMBER}) from merge base ${MAESTRO_MERGE_BASE_SHA} to " +
+        "${MAESTRO_HEAD_SHA} (equivalent to the three-dot PR diff " +
+        "${MAESTRO_BASE_SHA}...${MAESTRO_HEAD_SHA}). Produce a " +
+        "merge-readiness review ordered by severity, with file and line " +
+        "references.";
+    return `# Generated by Maestro (install-code-review). Re-running the installer
+# overwrites this file; hand edits may be lost.
+name: Maestro Code Review
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+
+permissions:
+  contents: read
+  pull-requests: write
+
+concurrency:
+  group: maestro-review-\${{ github.event.pull_request.number }}
+  cancel-in-progress: true
+
+jobs:
+  review:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-node@v4
+        with:
+          node-version: ${JSON.stringify(resolved.nodeVersion)}
+      - name: Install Maestro
+        run: npm install -g ${shellQuote(packageSpec)}
+      - name: Review pull request
+        env:
+          ${resolved.apiKeyEnvName}: \${{ secrets.${resolved.apiKeySecretName} }}
+          GH_TOKEN: \${{ github.token }}
+          GITHUB_PERSONAL_ACCESS_TOKEN: \${{ github.token }}
+          MAESTRO_PR_NUMBER: \${{ github.event.pull_request.number }}
+          MAESTRO_BASE_SHA: \${{ github.event.pull_request.base.sha }}
+          MAESTRO_HEAD_SHA: \${{ github.event.pull_request.head.sha }}
+        run: |
+          export MAESTRO_MERGE_BASE_SHA="$(git merge-base "\${MAESTRO_BASE_SHA}" "\${MAESTRO_HEAD_SHA}")"
+          maestro exec --provider ${shellQuote(resolved.provider)}${modelFlag} --output-last-message review.md \\
+            "${reviewPrompt}"
+          gh pr comment "\${MAESTRO_PR_NUMBER}" --edit-last --body-file review.md || \\
+            gh pr comment "\${MAESTRO_PR_NUMBER}" --body-file review.md
+`;
+}
+/**
+ * Write the review workflow into the target repository, creating the
+ * `.github/workflows` directory if needed. Returns the absolute path written.
+ */
+export function writeMaestroReviewWorkflow(repoRoot, options = {}) {
+    const target = join(repoRoot, MAESTRO_REVIEW_WORKFLOW_PATH);
+    writeTextFileAtomic(target, buildMaestroReviewWorkflow(options));
+    return target;
+}
+//# sourceMappingURL=maestro-review-workflow.js.map

package/dist/installers/maestro-review-workflow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"maestro-review-workflow.js","sourceRoot":"","sources":["../../src/installers/maestro-review-workflow.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAErD,qDAAqD;AACrD,MAAM,CAAC,MAAM,4BAA4B,GACxC,sCAAsC,CAAC;AAuCxC,MAAM,0BAA0B,GAA2B;IAC1D,SAAS,EAAE,mBAAmB;IAC9B,MAAM,EAAE,gBAAgB;IACxB,cAAc,EAAE,oBAAoB;IACpC,cAAc,EAAE,sBAAsB;IACtC,MAAM,EAAE,gBAAgB;IACxB,OAAO,EAAE,8BAA8B;IACvC,IAAI,EAAE,cAAc;IACpB,QAAQ,EAAE,kBAAkB;IAC5B,UAAU,EAAE,oBAAoB;IAChC,OAAO,EAAE,iBAAiB;IAC1B,QAAQ,EAAE,kBAAkB;IAC5B,GAAG,EAAE,aAAa;IAClB,GAAG,EAAE,aAAa;IAClB,MAAM,EAAE,gBAAgB;IACxB,QAAQ,EAAE,kBAAkB;IAC5B,SAAS,EAAE,mBAAmB;IAC9B,OAAO,EAAE,iBAAiB;CAC1B,CAAC;AAEF,SAAS,eAAe,CAAC,IAAY,EAAE,UAAkB;IACxD,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACd,GAAG,UAAU,6CAA6C,IAAI,EAAE,CAChE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACvC,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CACd,gEAAgE,IAAI,EAAE,CACtE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,uBAAuB,CAAC,QAAgB;IAChD,OAAO,CACN,0BAA0B,CAAC,QAAQ,CAAC;QACpC,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,UAAU,CAC9D,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa,EAAE,UAAkB;IAC5D,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,4BAA4B,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAChC,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;AAC9C,CAAC;AAED,MAAM,2BAA2B,GAA2B;IAC3D,iBAAiB,EAAE,WAAW;IAC9B,cAAc,EAAE,QAAQ;IACxB,uBAAuB,EAAE,mBAAmB;IAC5C,wBAAwB,EAAE,oBAAoB;IAC9C,cAAc,EAAE,QAAQ;IACxB,kBAAkB,EAAE,cAAc;IAClC,yBAAyB,EAAE,cAAc;IACzC,aAAa,EAAE,cAAc;IAC7B,oBAAoB,EAAE,cAAc;IACpC,4BAA4B,EAAE,SAAS;IACvC,cAAc,EAAE,QAAQ;IACxB,WAAW,EAAE,KAAK;IAClB,YAAY,EAAE,MAAM;IACpB,gBAAgB,EAAE,UAAU;IAC5B,kBAAkB,EAAE,YAAY;IAChC,WAAW,EAAE,KAAK;IAClB,eAAe,EAAE,SAAS;IAC1B,gBAAgB,EAAE,UAAU;IAC5B,gBAAgB,EAAE,UAAU;IAC5B,YAAY,EAAE,UAAU;IACxB,iBAAiB,EAAE,WAAW;IAC9B,YAAY,EAAE,WAAW;IACzB,eAAe,EAAE,SAAS;CAC1B,CAAC;AAEF,SAAS,6BAA6B,CACrC,gBAAwB;IAExB,OAAO,2BAA2B,CAAC,gBAAgB,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,cAAc,CACtB,OAAqC;IAErC,MAAM,gBAAgB,GACrB,OAAO,CAAC,gBAAgB;QACxB,6BAA6B,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,kBAAkB,CAClC,OAAO,CAAC,QAAQ,IAAI,gBAAgB,IAAI,WAAW,EACnD,UAAU,CACV,CAAC;IACF,MAAM,aAAa,GAAG,eAAe,CACpC,OAAO,CAAC,aAAa,IAAI,uBAAuB,CAAC,QAAQ,CAAC,EAC1D,eAAe,CACf,CAAC;IACF,OAAO;QACN,WAAW,EAAE,kBAAkB,CAAC,OAAO,CAAC,WAAW,IAAI,IAAI,EAAE,aAAa,CAAC;QAC3E,cAAc,EAAE,kBAAkB,CACjC,OAAO,CAAC,cAAc,IAAI,SAAS,EACnC,gBAAgB,CAChB;QACD,cAAc,EAAE,kBAAkB,CACjC,OAAO,CAAC,cAAc,IAAI,QAAQ,EAClC,gBAAgB,CAChB;QACD,QAAQ;QACR,KAAK,EACJ,OAAO,CAAC,KAAK,KAAK,SAAS;YAC1B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC;QAC9C,gBAAgB,EAAE,kBAAkB,CACnC,OAAO,CAAC,gBAAgB,IAAI,aAAa,CACzC;QACD,aAAa;KACb,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,0BAA0B,CACzC,UAAwC,EAAE;IAE1C,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK;QAC/B,CAAC,CAAC,YAAY,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;QAC1C,CAAC,CAAC,EAAE,CAAC;IACN,MAAM,WAAW,GAAG,GAAG,QAAQ,CAAC,cAAc,IAAI,QAAQ,CAAC,cAAc,EAAE,CAAC;IAC5E,8EAA8E;IAC9E,MAAM,YAAY,GACjB,qEAAqE;QACrE,uEAAuE;QACvE,2DAA2D;QAC3D,wDAAwD;QACxD,iEAAiE;QACjE,aAAa,CAAC;IAEf,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;0BAyBkB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC;;8BAEhC,UAAU,CAAC,WAAW,CAAC;;;YAGzC,QAAQ,CAAC,aAAa,kBAAkB,QAAQ,CAAC,gBAAgB;;;;;;;;oCAQzC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,SAAS;eAC9D,YAAY;;;CAG1B,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CACzC,QAAgB,EAChB,UAAwC,EAAE;IAE1C,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,4BAA4B,CAAC,CAAC;IAC5D,mBAAmB,CAAC,MAAM,EAAE,0BAA0B,CAAC,OAAO,CAAC,CAAC,CAAC;IACjE,OAAO,MAAM,CAAC;AACf,CAAC","sourcesContent":["import { join } from \"node:path\";\nimport { writeTextFileAtomic } from \"../utils/fs.js\";\n\n/** Repo-relative path the workflow is written to. */\nexport const MAESTRO_REVIEW_WORKFLOW_PATH =\n\t\".github/workflows/maestro-review.yml\";\n\nexport interface MaestroReviewWorkflowOptions {\n\t/** Node major version used to run Maestro in CI. Default \"20\". */\n\tnodeVersion?: string;\n\t/** npm package installed in CI. Default \"maestro\". */\n\tmaestroPackage?: string;\n\t/** Version/tag of the package to install. Default \"latest\". */\n\tmaestroVersion?: string;\n\t/**\n\t * Optional provider passed to `maestro exec --provider` when no model is set.\n\t * Defaults to the provider inferred from the API key secret/env var and falls\n\t * back to \"anthropic\".\n\t */\n\tprovider?: string;\n\t/** Optional model id passed to `maestro exec --model`. */\n\tmodel?: string;\n\t/**\n\t * Name of the repository secret holding the model provider API key. Defaults\n\t * to the provider's expected runtime env var (e.g. \"ANTHROPIC_API_KEY\").\n\t */\n\tapiKeySecretName?: string;\n\t/**\n\t * Environment variable exposed to Maestro. Defaults to the provider-specific\n\t * API key env var so custom secret names still work at runtime.\n\t */\n\tapiKeyEnvName?: string;\n}\n\ninterface ResolvedOptions {\n\tnodeVersion: string;\n\tmaestroPackage: string;\n\tmaestroVersion: string;\n\tprovider: string;\n\tmodel?: string;\n\tapiKeySecretName: string;\n\tapiKeyEnvName: string;\n}\n\nconst PROVIDER_API_KEY_ENV_NAMES: Record<string, string> = {\n\tanthropic: \"ANTHROPIC_API_KEY\",\n\topenai: \"OPENAI_API_KEY\",\n\t\"openai-codex\": \"OPENAI_CODEX_TOKEN\",\n\t\"azure-openai\": \"AZURE_OPENAI_API_KEY\",\n\tgoogle: \"GEMINI_API_KEY\",\n\tevalops: \"MAESTRO_EVALOPS_ACCESS_TOKEN\",\n\tgroq: \"GROQ_API_KEY\",\n\tcerebras: \"CEREBRAS_API_KEY\",\n\topenrouter: \"OPENROUTER_API_KEY\",\n\tmistral: \"MISTRAL_API_KEY\",\n\tdeepseek: \"DEEPSEEK_API_KEY\",\n\txai: \"XAI_API_KEY\",\n\tzai: \"ZAI_API_KEY\",\n\twriter: \"WRITER_API_KEY\",\n\tmoonshot: \"MOONSHOT_API_KEY\",\n\tdashscope: \"DASHSCOPE_API_KEY\",\n\tminimax: \"MINIMAX_API_KEY\",\n};\n\nfunction validateEnvName(name: string, optionName: string): string {\n\tif (!/^[A-Z_][A-Z0-9_]*$/.test(name)) {\n\t\tthrow new Error(\n\t\t\t`${optionName} must be a valid GitHub Actions env name: ${name}`,\n\t\t);\n\t}\n\treturn name;\n}\n\nfunction validateSecretName(name: string): string {\n\tif (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(name)) {\n\t\tthrow new Error(\n\t\t\t`apiKeySecretName must be a valid GitHub Actions secret name: ${name}`,\n\t\t);\n\t}\n\treturn name;\n}\n\nfunction getDefaultApiKeyEnvName(provider: string): string {\n\treturn (\n\t\tPROVIDER_API_KEY_ENV_NAMES[provider] ??\n\t\t`${provider.toUpperCase().replace(/[^A-Z0-9]/g, \"_\")}_API_KEY`\n\t);\n}\n\nfunction validateYamlScalar(value: string, optionName: string): string {\n\tif (/\\r|\\n/.test(value)) {\n\t\tthrow new Error(`${optionName} must not contain newlines`);\n\t}\n\treturn value;\n}\n\nfunction shellQuote(value: string): string {\n\treturn `'${value.replaceAll(\"'\", \"'\\\\''\")}'`;\n}\n\nconst PROVIDER_BY_API_KEY_ENV_VAR: Record<string, string> = {\n\tANTHROPIC_API_KEY: \"anthropic\",\n\tGEMINI_API_KEY: \"google\",\n\tGOOGLE_GEMINI_CLI_TOKEN: \"google-gemini-cli\",\n\tGOOGLE_ANTIGRAVITY_TOKEN: \"google-antigravity\",\n\tOPENAI_API_KEY: \"openai\",\n\tOPENAI_CODEX_TOKEN: \"openai-codex\",\n\tOPENAI_CODEX_ACCESS_TOKEN: \"openai-codex\",\n\tCODEX_API_KEY: \"openai-codex\",\n\tAZURE_OPENAI_API_KEY: \"azure-openai\",\n\tMAESTRO_EVALOPS_ACCESS_TOKEN: \"evalops\",\n\tWRITER_API_KEY: \"writer\",\n\tXAI_API_KEY: \"xai\",\n\tGROQ_API_KEY: \"groq\",\n\tCEREBRAS_API_KEY: \"cerebras\",\n\tOPENROUTER_API_KEY: \"openrouter\",\n\tZAI_API_KEY: \"zai\",\n\tMISTRAL_API_KEY: \"mistral\",\n\tDEEPSEEK_API_KEY: \"deepseek\",\n\tMOONSHOT_API_KEY: \"moonshot\",\n\tKIMI_API_KEY: \"moonshot\",\n\tDASHSCOPE_API_KEY: \"dashscope\",\n\tQWEN_API_KEY: \"dashscope\",\n\tMINIMAX_API_KEY: \"minimax\",\n};\n\nfunction inferProviderFromApiKeyEnvVar(\n\tapiKeySecretName: string,\n): string | undefined {\n\treturn PROVIDER_BY_API_KEY_ENV_VAR[apiKeySecretName];\n}\n\nfunction resolveOptions(\n\toptions: MaestroReviewWorkflowOptions,\n): ResolvedOptions {\n\tconst inferredProvider =\n\t\toptions.apiKeySecretName &&\n\t\tinferProviderFromApiKeyEnvVar(options.apiKeySecretName);\n\tconst provider = validateYamlScalar(\n\t\toptions.provider ?? inferredProvider ?? \"anthropic\",\n\t\t\"provider\",\n\t);\n\tconst apiKeyEnvName = validateEnvName(\n\t\toptions.apiKeyEnvName ?? getDefaultApiKeyEnvName(provider),\n\t\t\"apiKeyEnvName\",\n\t);\n\treturn {\n\t\tnodeVersion: validateYamlScalar(options.nodeVersion ?? \"20\", \"nodeVersion\"),\n\t\tmaestroPackage: validateYamlScalar(\n\t\t\toptions.maestroPackage ?? \"maestro\",\n\t\t\t\"maestroPackage\",\n\t\t),\n\t\tmaestroVersion: validateYamlScalar(\n\t\t\toptions.maestroVersion ?? \"latest\",\n\t\t\t\"maestroVersion\",\n\t\t),\n\t\tprovider,\n\t\tmodel:\n\t\t\toptions.model === undefined\n\t\t\t\t? undefined\n\t\t\t\t: validateYamlScalar(options.model, \"model\"),\n\t\tapiKeySecretName: validateSecretName(\n\t\t\toptions.apiKeySecretName ?? apiKeyEnvName,\n\t\t),\n\t\tapiKeyEnvName,\n\t};\n}\n\n/**\n * Build the `.github/workflows/maestro-review.yml` contents as a YAML string.\n */\nexport function buildMaestroReviewWorkflow(\n\toptions: MaestroReviewWorkflowOptions = {},\n): string {\n\tconst resolved = resolveOptions(options);\n\tconst modelFlag = resolved.model\n\t\t? ` --model ${shellQuote(resolved.model)}`\n\t\t: \"\";\n\tconst packageSpec = `${resolved.maestroPackage}@${resolved.maestroVersion}`;\n\t// Keep ${...} placeholders as literal shell expansions in the generated YAML.\n\tconst reviewPrompt =\n\t\t\"Use the pr-review skill to review the changes in this pull request \" +\n\t\t\"(#${MAESTRO_PR_NUMBER}) from merge base ${MAESTRO_MERGE_BASE_SHA} to \" +\n\t\t\"${MAESTRO_HEAD_SHA} (equivalent to the three-dot PR diff \" +\n\t\t\"${MAESTRO_BASE_SHA}...${MAESTRO_HEAD_SHA}). Produce a \" +\n\t\t\"merge-readiness review ordered by severity, with file and line \" +\n\t\t\"references.\";\n\n\treturn `# Generated by Maestro (install-code-review). Re-running the installer\n# overwrites this file; hand edits may be lost.\nname: Maestro Code Review\n\non:\n  pull_request:\n    types: [opened, synchronize, reopened]\n\npermissions:\n  contents: read\n  pull-requests: write\n\nconcurrency:\n  group: maestro-review-\\${{ github.event.pull_request.number }}\n  cancel-in-progress: true\n\njobs:\n  review:\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions/checkout@v4\n        with:\n          fetch-depth: 0\n      - uses: actions/setup-node@v4\n        with:\n          node-version: ${JSON.stringify(resolved.nodeVersion)}\n      - name: Install Maestro\n        run: npm install -g ${shellQuote(packageSpec)}\n      - name: Review pull request\n        env:\n          ${resolved.apiKeyEnvName}: \\${{ secrets.${resolved.apiKeySecretName} }}\n          GH_TOKEN: \\${{ github.token }}\n          GITHUB_PERSONAL_ACCESS_TOKEN: \\${{ github.token }}\n          MAESTRO_PR_NUMBER: \\${{ github.event.pull_request.number }}\n          MAESTRO_BASE_SHA: \\${{ github.event.pull_request.base.sha }}\n          MAESTRO_HEAD_SHA: \\${{ github.event.pull_request.head.sha }}\n        run: |\n          export MAESTRO_MERGE_BASE_SHA=\"$(git merge-base \"\\${MAESTRO_BASE_SHA}\" \"\\${MAESTRO_HEAD_SHA}\")\"\n          maestro exec --provider ${shellQuote(resolved.provider)}${modelFlag} --output-last-message review.md \\\\\n            \"${reviewPrompt}\"\n          gh pr comment \"\\${MAESTRO_PR_NUMBER}\" --edit-last --body-file review.md || \\\\\n            gh pr comment \"\\${MAESTRO_PR_NUMBER}\" --body-file review.md\n`;\n}\n\n/**\n * Write the review workflow into the target repository, creating the\n * `.github/workflows` directory if needed. Returns the absolute path written.\n */\nexport function writeMaestroReviewWorkflow(\n\trepoRoot: string,\n\toptions: MaestroReviewWorkflowOptions = {},\n): string {\n\tconst target = join(repoRoot, MAESTRO_REVIEW_WORKFLOW_PATH);\n\twriteTextFileAtomic(target, buildMaestroReviewWorkflow(options));\n\treturn target;\n}\n"]}

package/dist/load-env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"load-env.d.ts","sourceRoot":"","sources":["../src/load-env.ts"],"names":[],"mappings":"AAwPA,wBAAgB,OAAO,IAAI,MAAM,EAAE,CAqClC;AAED,wBAAgB,gBAAgB,IAAI,MAAM,EAAE,CAE3C;AAED,wBAAgB,8BAA8B,IAAI,MAAM,EAAE,CAwBzD;AAED,MAAM,WAAW,gBAAgB;IAChC,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAChC,aAAa,GAAE,MAAM,EAAO,GAC1B,gBAAgB,CAIlB;AAED,wBAAgB,kBAAkB,IAAI,gBAAgB,CAErD"}
+{"version":3,"file":"load-env.d.ts","sourceRoot":"","sources":["../src/load-env.ts"],"names":[],"mappings":"AA2PA,wBAAgB,OAAO,IAAI,MAAM,EAAE,CAqClC;AAED,wBAAgB,gBAAgB,IAAI,MAAM,EAAE,CAE3C;AAED,wBAAgB,8BAA8B,IAAI,MAAM,EAAE,CAwBzD;AAED,MAAM,WAAW,gBAAgB;IAChC,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAChC,aAAa,GAAE,MAAM,EAAO,GAC1B,gBAAgB,CAKlB;AAED,wBAAgB,kBAAkB,IAAI,gBAAgB,CAErD"}

package/dist/load-env.js

@@ -2,7 +2,7 @@ import { existsSync } from "node:fs";
 import { join } from "node:path";
 import { config } from "dotenv";
 import { ENV_VARS } from "./config/env-vars.js";
-import { resetDefaultRuntimeEnv } from "./runtime/env.js";
+import { markRuntimeEnvFinalized, resetDefaultRuntimeEnv, } from "./runtime/env.js";
 const ENV_FILES = [".env.local", ".env"];
 // Keys that must never be sourced from a repo-controlled dotenv file. These are
 // stripped immediately at load time so they can never reach process.env.
@@ -307,6 +307,7 @@ export function scrubLoadedSecurityOverrideEnv() {
 export function finalizeLoadedEnv(loadedEnvKeys = []) {
     const scrubbedEnvKeys = scrubLoadedSecurityOverrideEnv();
     resetDefaultRuntimeEnv();
+    markRuntimeEnvFinalized();
     return { loadedEnvKeys, scrubbedEnvKeys };
 }
 export function loadAndFinalizeEnv() {

package/dist/load-env.js.map

@@ -1 +1 @@
-{"version":3,"file":"load-env.js","sourceRoot":"","sources":["../src/load-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,MAAM,SAAS,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;AAEzC,gFAAgF;AAChF,yEAAyE;AACzE,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IACnC,MAAM;IACN,cAAc;IACd,cAAc;IACd,gBAAgB;IAChB,iBAAiB;IACjB,yBAAyB;IACzB,qBAAqB;IACrB,oCAAoC;IACpC,aAAa;IACb,2EAA2E;IAC3E,wEAAwE;IACxE,gEAAgE;IAChE,mEAAmE;IACnE,mBAAmB;IACnB,sBAAsB;IACtB,kBAAkB;CAClB,CAAC,CAAC;AAEH,2EAA2E;AAC3E,6EAA6E;AAC7E,wDAAwD;AACxD,oEAAoE;AACpE,MAAM,6BAA6B,GAAG;IACrC,QAAQ,CAAC,OAAO;IAChB,qBAAqB;IACrB,QAAQ,CAAC,eAAe;IACxB,uBAAuB;IACvB,QAAQ,CAAC,YAAY;IACrB,QAAQ,CAAC,SAAS;IAClB,2BAA2B;IAC3B,yBAAyB;IACzB,QAAQ,CAAC,yBAAyB;IAClC,cAAc;IACd,mBAAmB;IACnB,sBAAsB;IACtB,kBAAkB;IAClB,cAAc;IACd,gBAAgB;IAChB,qBAAqB;IACrB,uBAAuB;IACvB,wBAAwB;IACxB,gCAAgC;IAChC,qBAAqB;IACrB,6BAA6B;IAC7B,2BAA2B;IAC3B,8BAA8B;IAC9B,sBAAsB;IACtB,2BAA2B;IAC3B,0BAA0B;IAC1B,kBAAkB;IAClB,wEAAwE;IACxE,sEAAsE;IACtE,wEAAwE;IACxE,8CAA8C;IAC9C,sBAAsB;IACtB,sBAAsB;IACtB,8BAA8B;IAC9B,eAAe;IACf,yEAAyE;IACzE,uEAAuE;IACvE,wEAAwE;IACxE,0EAA0E;IAC1E,wBAAwB;IACxB,yBAAyB;IACzB,gBAAgB;IAChB,2BAA2B;IAC3B,8BAA8B;IAC9B,sBAAsB;IACtB,sBAAsB;IACtB,oCAAoC;IACpC,yBAAyB;IACzB,iBAAiB;IACjB,iBAAiB;IACjB,kBAAkB;IAClB,UAAU;IACV,YAAY;IACZ,WAAW;IACX,eAAe;IACf,yBAAyB;IACzB,0BAA0B;IAC1B,2BAA2B;IAC3B,kBAAkB;IAClB,uEAAuE;IACvE,kEAAkE;IAClE,oEAAoE;IACpE,yCAAyC;IACzC,oBAAoB;IACpB,sEAAsE;IACtE,wEAAwE;IACxE,kEAAkE;IAClE,oBAAoB;IACpB,iBAAiB;IACjB,+BAA+B;IAC/B,yEAAyE;IACzE,qEAAqE;IACrE,QAAQ,CAAC,aAAa;IACtB,QAAQ,CAAC,UAAU;IACnB,mBAAmB;IACnB,sBAAsB;IACtB,cAAc;IACd,gCAAgC;IAChC,yBAAyB;IACzB,qBAAqB;IACrB,0BAA0B;IAC1B,yEAAyE;IACzE,2EAA2E;IAC3E,yEAAyE;IACzE,qBAAqB;IACrB,wBAAwB;IACxB,oBAAoB;IACpB,0EAA0E;IAC1E,wEAAwE;IACxE,wEAAwE;IACxE,YAAY;IACZ,qEAAqE;IACrE,0EAA0E;IAC1E,uEAAuE;IACvE,yEAAyE;IACzE,gEAAgE;IAChE,mBAAmB;IACnB,4BAA4B;IAC5B,gCAAgC;IAChC,2CAA2C;IAC3C,uBAAuB;IACvB,6BAA6B;IAC7B,oCAAoC;IACpC,kCAAkC;IAClC,2BAA2B;IAC3B,8BAA8B;IAC9B,uBAAuB;IACvB,yEAAyE;IACzE,kEAAkE;IAClE,QAAQ,CAAC,WAAW;IACpB,uEAAuE;IACvE,oEAAoE;IACpE,oEAAoE;IACpE,sEAAsE;IACtE,gEAAgE;IAChE,yEAAyE;IACzE,SAAS;IACT,mBAAmB;IACnB,4BAA4B;IAC5B,qBAAqB;IACrB,2BAA2B;IAC3B,4EAA4E;IAC5E,yCAAyC;IACzC,4CAA4C;IAC5C,2EAA2E;IAC3E,wEAAwE;IACxE,oBAAoB;IACpB,4BAA4B;IAC5B,8BAA8B;IAC9B,kCAAkC;IAClC,8BAA8B;IAC9B,kBAAkB;IAClB,oBAAoB;IACpB,mBAAmB;IACnB,mBAAmB;IACnB,mBAAmB;IACnB,sBAAsB;IACtB,cAAc;IACd,2EAA2E;IAC3E,6EAA6E;IAC7E,2BAA2B;CAClB,CAAC;AAEX,MAAM,eAAe,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;AAC3D,MAAM,gCAAgC,GAAG,IAAI,GAAG,CAC/C,6BAA6B,CAAC,GAAG,CAAC,eAAe,CAAC,CAClD,CAAC;AACF,MAAM,iCAAiC,GAAG;IACzC,oBAAoB;IACpB,0BAA0B;IAC1B,oBAAoB;IACpB,oBAAoB;IACpB,iBAAiB;IACjB,sBAAsB;IACtB,oBAAoB;IACpB,4BAA4B;IAC5B,qBAAqB;IACrB,qBAAqB;IACrB,yEAAyE;IACzE,iEAAiE;IACjE,WAAW;IACX,yBAAyB;IACzB,iBAAiB;IACjB,0BAA0B;IAC1B,uBAAuB;IACvB,cAAc;IACd,wBAAwB;IACxB,gBAAgB;IAChB,yBAAyB;IACzB,wEAAwE;IACxE,gEAAgE;IAChE,qEAAqE;IACrE,4DAA4D;IAC5D,yBAAyB;IACzB,yBAAyB;IACzB,mBAAmB;IACnB,kBAAkB;IAClB,gBAAgB;IAChB,cAAc;IACd,qBAAqB;IACrB,iBAAiB;IACjB,eAAe;IACf,uDAAuD;IACvD,wEAAwE;IACxE,uEAAuE;IACvE,uDAAuD;IACvD,qBAAqB;IACrB,2BAA2B;IAC3B,uBAAuB;IACvB,2EAA2E;IAC3E,gEAAgE;IAChE,kBAAkB;IAClB,kBAAkB;IAClB,eAAe;IACf,mBAAmB;IACnB,yBAAyB;IACzB,2BAA2B;IAC3B,wBAAwB;IACxB,oBAAoB;IACpB,OAAO;IACP,uBAAuB;IACvB,SAAS;CACA,CAAC;AACX,MAAM,2BAA2B,GAAG,CAAC,GAAW,EAAW,EAAE;IAC5D,MAAM,aAAa,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAC3C,OAAO,CACN,gCAAgC,CAAC,GAAG,CAAC,aAAa,CAAC;QACnD,iCAAiC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CACjD,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,CAChC,CACD,CAAC;AACH,CAAC,CAAC;AACF,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;AAExC,MAAM,UAAU,OAAO;IACtB,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3C,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YACjD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;YACnE,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3D,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAChD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;gBACpD,MAAM,aAAa,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;gBAC3C,MAAM,iBAAiB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC7D,IAAI,CAAC,iBAAiB,EAAE,CAAC;oBACxB,SAAS;gBACV,CAAC;gBACD,IAAI,mBAAmB,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;oBAC5C,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;oBACzC,SAAS;gBACV,CAAC;gBACD,6DAA6D;gBAC7D,oEAAoE;gBACpE,+DAA+D;gBAC/D,oEAAoE;gBACpE,mEAAmE;gBACnE,kEAAkE;gBAClE,gEAAgE;gBAChE,IACC,CAAC,gBAAgB,CAAC,GAAG,CAAC,aAAa,CAAC;oBACpC,2BAA2B,CAAC,aAAa,CAAC,EACzC,CAAC;oBACF,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACzB,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACxB,CAAC;YACF,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,CAAC,GAAG,eAAe,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC/B,OAAO,CAAC,GAAG,aAAa,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,8BAA8B;IAC7C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,6BAA6B,EAAE,CAAC;QACjD,MAAM,kBAAkB,GAAG,CAAC,GAAG,aAAa,CAAC,CAAC,MAAM,CACnD,CAAC,SAAS,EAAE,EAAE,CAAC,eAAe,CAAC,SAAS,CAAC,KAAK,eAAe,CAAC,GAAG,CAAC,CAClE,CAAC;QACF,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrC,SAAS;QACV,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;YAC5C,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC/C,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;IACF,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,CAAC,GAAG,aAAa,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC,2BAA2B,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7C,SAAS;QACV,CAAC;QACD,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC/C,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,QAAQ,CAAC;AACjB,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAChC,gBAA0B,EAAE;IAE5B,MAAM,eAAe,GAAG,8BAA8B,EAAE,CAAC;IACzD,sBAAsB,EAAE,CAAC;IACzB,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,kBAAkB;IACjC,OAAO,iBAAiB,CAAC,OAAO,EAAE,CAAC,CAAC;AACrC,CAAC","sourcesContent":["import { existsSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { config } from \"dotenv\";\nimport { ENV_VARS } from \"./config/env-vars.js\";\nimport { resetDefaultRuntimeEnv } from \"./runtime/env.js\";\n\nconst ENV_FILES = [\".env.local\", \".env\"];\n\n// Keys that must never be sourced from a repo-controlled dotenv file. These are\n// stripped immediately at load time so they can never reach process.env.\nconst BLOCKED_DOTENV_KEYS = new Set([\n\t\"HOME\",\n\t\"FACTORY_HOME\",\n\t\"MAESTRO_HOME\",\n\t\"MAESTRO_CONFIG\",\n\t\"MAESTRO_PROFILE\",\n\t\"MAESTRO_LLM_GATEWAY_URL\",\n\t\"MAESTRO_MODELS_FILE\",\n\t\"MAESTRO_TRUST_PROJECT_MODEL_CONFIG\",\n\t\"USERPROFILE\",\n\t// Agent-directory overrides decide where the \"global\" APPEND_SYSTEM.md and\n\t// other agent-scoped files are loaded from. A repo-controlled value can\n\t// redirect that fallback back into the workspace, bypassing the\n\t// untrusted-project gate. See resolveLoadedAppendSystemPromptPath.\n\t\"MAESTRO_AGENT_DIR\",\n\t\"PLAYWRIGHT_AGENT_DIR\",\n\t\"CODING_AGENT_DIR\",\n]);\n\n// Security-relevant settings that may legitimately come from a user's real\n// shell environment but must not be silently set by a repo-controlled dotenv\n// file. These are loaded normally and then scrubbed via\n// scrubLoadedSecurityOverrideEnv() once trust has been established.\nconst DOTENV_SECURITY_OVERRIDE_KEYS = [\n\tENV_VARS.PROFILE,\n\t\"MAESTRO_WEB_PROFILE\",\n\tENV_VARS.APPROVAL_POLICY,\n\t\"MAESTRO_APPROVAL_MODE\",\n\tENV_VARS.SANDBOX_MODE,\n\tENV_VARS.SAFE_MODE,\n\t\"MAESTRO_SAFE_REQUIRE_PLAN\",\n\t\"MAESTRO_SAFE_VALIDATORS\",\n\tENV_VARS.CONTEXT_FIREWALL_BLOCKING,\n\t\"MAESTRO_HOME\",\n\t\"MAESTRO_AGENT_DIR\",\n\t\"PLAYWRIGHT_AGENT_DIR\",\n\t\"CODING_AGENT_DIR\",\n\t\"NODE_OPTIONS\",\n\t\"MAESTRO_CONFIG\",\n\t\"MAESTRO_MODELS_FILE\",\n\t\"MAESTRO_NOTIFY_EVENTS\",\n\t\"MAESTRO_NOTIFY_PROGRAM\",\n\t\"MAESTRO_ENTERPRISE_POLICY_PATH\",\n\t\"MAESTRO_POLICY_PATH\",\n\t\"MAESTRO_PROMPT_HISTORY_FILE\",\n\t\"MAESTRO_TOOL_HISTORY_FILE\",\n\t\"MAESTRO_TUI_TIP_HISTORY_FILE\",\n\t\"MAESTRO_BASH_HISTORY\",\n\t\"MAESTRO_PLATFORM_BASE_URL\",\n\t\"MAESTRO_EVALOPS_BASE_URL\",\n\t\"EVALOPS_BASE_URL\",\n\t// EvalOps identity service URL: `bootstrapEvalOpsAgent()` and the OAuth\n\t// flow honor these aliases before the stored/derived URL. A repo .env\n\t// could otherwise point identity at an attacker service and capture the\n\t// user's OAuth bearer during agent bootstrap.\n\t\"MAESTRO_IDENTITY_URL\",\n\t\"EVALOPS_IDENTITY_URL\",\n\t\"MAESTRO_EVALOPS_ACCESS_TOKEN\",\n\t\"EVALOPS_TOKEN\",\n\t// EvalOps tenant identity aliases: any of these can scope durable-memory\n\t// writes (`X-Organization-ID`), remote-runner workspace selection, and\n\t// managed-context lookups. A repo-controlled dotenv must not be able to\n\t// redirect those tenant identifiers when a real EvalOps token is present.\n\t\"MAESTRO_EVALOPS_ORG_ID\",\n\t\"EVALOPS_ORGANIZATION_ID\",\n\t\"EVALOPS_ORG_ID\",\n\t\"MAESTRO_ENTERPRISE_ORG_ID\",\n\t\"MAESTRO_EVALOPS_WORKSPACE_ID\",\n\t\"EVALOPS_WORKSPACE_ID\",\n\t\"MAESTRO_WORKSPACE_ID\",\n\t\"MAESTRO_REMOTE_RUNNER_WORKSPACE_ID\",\n\t\"MAESTRO_EVALOPS_USER_ID\",\n\t\"EVALOPS_USER_ID\",\n\t\"MAESTRO_USER_ID\",\n\t\"EVALOPS_NATS_URL\",\n\t\"NATS_URL\",\n\t\"NATS_TOKEN\",\n\t\"NATS_USER\",\n\t\"NATS_PASSWORD\",\n\t\"MAESTRO_WEB_REQUIRE_KEY\",\n\t\"MAESTRO_WEB_REQUIRE_CSRF\",\n\t\"MAESTRO_WEB_REQUIRE_REDIS\",\n\t\"MAESTRO_WEB_ROOT\",\n\t// CORS / WebSocket origin policy: a repo-controlled dotenv must not be\n\t// able to broaden cross-origin browser access to the local API by\n\t// setting `MAESTRO_WEB_ORIGIN=*` (or an attacker-controlled origin)\n\t// before the user's real env is checked.\n\t\"MAESTRO_WEB_ORIGIN\",\n\t// Content-Security-Policy override: web-server.ts prefers a non-empty\n\t// MAESTRO_WEB_CSP over the prod default when building SECURITY_HEADERS,\n\t// so a repo .env could otherwise weaken the browser policy in any\n\t// hardened profile.\n\t\"MAESTRO_WEB_CSP\",\n\t\"MAESTRO_STRICT_SESSION_ACCESS\",\n\t// Session scoping controls: a repo-controlled dotenv must not be able to\n\t// collapse authenticated web sessions back to the global file store.\n\tENV_VARS.SESSION_SCOPE,\n\tENV_VARS.MULTI_USER,\n\t\"MAESTRO_REDIS_URL\",\n\t\"MAESTRO_DATABASE_URL\",\n\t\"DATABASE_URL\",\n\t\"MAESTRO_HOSTED_SESSION_STORAGE\",\n\t\"MAESTRO_SESSION_STORAGE\",\n\t\"MAESTRO_TRUST_PROXY\",\n\t\"MAESTRO_TRUST_PROXY_HOPS\",\n\t// Web/auth secret material: a repo-controlled dotenv must not be able to\n\t// choose a known API key, CSRF token, JWT signing secret, or shared secret\n\t// for endpoints that are supposed to require a user-provided credential.\n\t\"MAESTRO_WEB_API_KEY\",\n\t\"MAESTRO_WEB_CSRF_TOKEN\",\n\t\"MAESTRO_JWT_SECRET\",\n\t// `JWT_SECRET` is the unprefixed fallback honored by src/auth/jwt.ts when\n\t// `MAESTRO_JWT_SECRET` is not set; a repo-controlled dotenv must not be\n\t// able to choose the signing key for enterprise auth via this fallback.\n\t\"JWT_SECRET\",\n\t// OAuth credential file overrides: `src/providers/openai-auth.ts:91`\n\t// binds AUTH_FILE to OPENAI_OAUTH_FILE, and `saveOpenAIOAuthCredential()`\n\t// then writes access/refresh/ID tokens and the derived API key to that\n\t// path. A repo .env must not be able to redirect fresh OAuth credentials\n\t// into the checkout where they can be read on the next install.\n\t\"OPENAI_OAUTH_FILE\",\n\t\"MAESTRO_AUTH_SHARED_SECRET\",\n\t\"MAESTRO_DEVICE_IDENTITY_HELPER\",\n\t\"MAESTRO_DEVICE_IDENTITY_ALLOW_TEST_HELPER\",\n\t\"MAESTRO_USER_MCP_PATH\",\n\t\"MAESTRO_ENTERPRISE_MCP_PATH\",\n\t\"MAESTRO_MCP_PROJECT_APPROVALS_FILE\",\n\t\"MAESTRO_MCP_WORKSPACE_TRUST_FILE\",\n\t\"MAESTRO_PACKAGE_CACHE_DIR\",\n\t\"MAESTRO_RUN_SCRIPT_ALLOWLIST\",\n\t\"MAESTRO_SCRIPT_RUNNER\",\n\t// Session storage location: a repo-controlled dotenv must not be able to\n\t// redirect where session transcripts are read from or written to.\n\tENV_VARS.SESSION_DIR,\n\t// Local-state file/dir overrides: a repo-controlled dotenv must not be\n\t// able to redirect where the todo store or background-task logs are\n\t// written, which would otherwise let a checkout capture future task\n\t// content or command output for files that live outside the workspace\n\t// by default. Same reasoning extends to the web queue store and\n\t// automations store, which write user prompt/output text to env-selected\n\t// paths.\n\t\"MAESTRO_TODO_FILE\",\n\t\"MAESTRO_BACKGROUND_LOG_DIR\",\n\t\"MAESTRO_QUEUE_STATE\",\n\t\"MAESTRO_AUTOMATIONS_STATE\",\n\t// Sandbox enforcement opt-out: a repo-controlled dotenv must not be able to\n\t// enable unsandboxed fallback execution.\n\t\"MAESTRO_ALLOW_UNSANDBOXED_SANDBOX_FALLBACK\",\n\t// Bash guard / shell egress / allowlist controls: a repo-controlled dotenv\n\t// must not be able to disable command approvals or widen the allowlist.\n\t\"MAESTRO_BASH_GUARD\",\n\t\"MAESTRO_ALLOW_EGRESS_SHELL\",\n\t\"MAESTRO_FAIL_UNTAGGED_EGRESS\",\n\t\"MAESTRO_BACKGROUND_SHELL_DISABLE\",\n\t\"MAESTRO_BASH_ALLOWLIST_PATHS\",\n\t\"MAESTRO_GUARDIAN\",\n\t\"MAESTRO_MARKITDOWN\",\n\t\"MAESTRO_EVENT_BUS\",\n\t\"MAESTRO_AUDIT_BUS\",\n\t\"MAESTRO_TELEMETRY\",\n\t\"PLAYWRIGHT_TELEMETRY\",\n\t\"MAESTRO_OTEL\",\n\t// Auto-verify custom command: a repo-controlled dotenv must not be able to\n\t// inject an arbitrary shell command that AutoVerifyService runs after edits.\n\t\"MAESTRO_AUTO_TEST_COMMAND\",\n] as const;\n\nconst normalizeEnvKey = (key: string) => key.toUpperCase();\nconst DOTENV_SECURITY_OVERRIDE_KEY_SET = new Set<string>(\n\tDOTENV_SECURITY_OVERRIDE_KEYS.map(normalizeEnvKey),\n);\nconst DOTENV_SECURITY_OVERRIDE_PREFIXES = [\n\t\"APPROVALS_SERVICE_\",\n\t\"MAESTRO_ARTIFACT_ACCESS_\",\n\t\"MAESTRO_APPROVALS_\",\n\t\"MAESTRO_AGENT_MCP_\",\n\t\"MAESTRO_BEACON_\",\n\t\"MAESTRO_CEREBRO_MCP_\",\n\t\"MAESTRO_EVENT_BUS_\",\n\t\"MAESTRO_EVALOPS_AGENT_MCP_\",\n\t\"GOVERNANCE_SERVICE_\",\n\t\"MAESTRO_GOVERNANCE_\",\n\t// Internal service clients must not accept repo-selected endpoints while\n\t// falling back to user-provided bearer tokens or tenant headers.\n\t\"PIPELINE_\",\n\t\"MAESTRO_AGENT_REGISTRY_\",\n\t\"AGENT_REGISTRY_\",\n\t\"PLATFORM_AGENT_REGISTRY_\",\n\t\"MAESTRO_PLATFORM_A2A_\",\n\t\"MAESTRO_A2A_\",\n\t\"MAESTRO_AGENT_RUNTIME_\",\n\t\"AGENT_RUNTIME_\",\n\t\"PLATFORM_AGENT_RUNTIME_\",\n\t// Platform tool-execution bridge: a repo .env must not be able to point\n\t// the Connect endpoint, auth token, or tenant identifiers at an\n\t// attacker-controlled service, or bash/MCP tool args and observation\n\t// output get posted there with the user's real credentials.\n\t\"TOOL_EXECUTION_SERVICE_\",\n\t\"MAESTRO_TOOL_EXECUTION_\",\n\t\"MAESTRO_GUARDIAN_\",\n\t\"MAESTRO_HISTORY_\",\n\t\"MAESTRO_HOOKS_\",\n\t\"MAESTRO_JWT_\",\n\t\"MAESTRO_MARKITDOWN_\",\n\t\"MAESTRO_MEMORY_\",\n\t\"MAESTRO_OTEL_\",\n\t// Web rate-limit controls: `session-rate-limit.ts` and\n\t// `session-share-store.ts` read these at module load when web-server.ts\n\t// imports its handlers. A repo .env could otherwise weaken per-session\n\t// or share rate limits even in a hardened web profile.\n\t\"MAESTRO_RATE_LIMIT_\",\n\t\"MAESTRO_SHARE_RATE_LIMIT_\",\n\t\"MAESTRO_PLATFORM_MCP_\",\n\t// Prompt-service controls: these can redirect system prompt resolution and\n\t// credential-bearing service calls to a repo-selected endpoint.\n\t\"PROMPTS_SERVICE_\",\n\t\"MAESTRO_PROMPTS_\",\n\t\"MAESTRO_SAFE_\",\n\t\"MAESTRO_SCENARIO_\",\n\t\"MAESTRO_SESSION_BACKUP_\",\n\t\"MAESTRO_SESSION_RECOVERY_\",\n\t\"MAESTRO_SHARED_MEMORY_\",\n\t\"MAESTRO_TELEMETRY_\",\n\t\"OTEL_\",\n\t\"PLAYWRIGHT_TELEMETRY_\",\n\t\"SENTRY_\",\n] as const;\nconst isDotenvSecurityOverrideKey = (key: string): boolean => {\n\tconst normalizedKey = normalizeEnvKey(key);\n\treturn (\n\t\tDOTENV_SECURITY_OVERRIDE_KEY_SET.has(normalizedKey) ||\n\t\tDOTENV_SECURITY_OVERRIDE_PREFIXES.some((prefix) =>\n\t\t\tnormalizedKey.startsWith(prefix),\n\t\t)\n\t);\n};\nconst loadedEnvKeys = new Set<string>();\n\nexport function loadEnv(): string[] {\n\tconst newlyLoadedKeys = new Set<string>();\n\tfor (const file of ENV_FILES) {\n\t\tconst resolved = join(process.cwd(), file);\n\t\tif (existsSync(resolved)) {\n\t\t\tconst before = new Set(Object.keys(process.env));\n\t\t\tconst beforeNormalized = new Set([...before].map(normalizeEnvKey));\n\t\t\tconst result = config({ path: resolved, override: false });\n\t\t\tconst after = new Set(Object.keys(process.env));\n\t\t\tfor (const key of Object.keys(result.parsed ?? {})) {\n\t\t\t\tconst normalizedKey = normalizeEnvKey(key);\n\t\t\t\tconst wasLoadedByDotenv = !before.has(key) && after.has(key);\n\t\t\t\tif (!wasLoadedByDotenv) {\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tif (BLOCKED_DOTENV_KEYS.has(normalizedKey)) {\n\t\t\t\t\tReflect.deleteProperty(process.env, key);\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\t// Track newly loaded keys so they can be scrubbed later. For\n\t\t\t\t// security override keys we record the exact dotenv-loaded key even\n\t\t\t\t// when a differently cased variant already existed in the real\n\t\t\t\t// environment: env names are case-sensitive on POSIX, so dotenv can\n\t\t\t\t// create a distinct uppercase `MAESTRO_PROFILE` alongside a user's\n\t\t\t\t// `maestro_profile`, and that repo-controlled value must still be\n\t\t\t\t// scrubbed rather than survive due to the normalized collision.\n\t\t\t\tif (\n\t\t\t\t\t!beforeNormalized.has(normalizedKey) ||\n\t\t\t\t\tisDotenvSecurityOverrideKey(normalizedKey)\n\t\t\t\t) {\n\t\t\t\t\tnewlyLoadedKeys.add(key);\n\t\t\t\t\tloadedEnvKeys.add(key);\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n\treturn [...newlyLoadedKeys];\n}\n\nexport function getLoadedEnvKeys(): string[] {\n\treturn [...loadedEnvKeys];\n}\n\nexport function scrubLoadedSecurityOverrideEnv(): string[] {\n\tconst scrubbed: string[] = [];\n\tfor (const key of DOTENV_SECURITY_OVERRIDE_KEYS) {\n\t\tconst matchingLoadedKeys = [...loadedEnvKeys].filter(\n\t\t\t(loadedKey) => normalizeEnvKey(loadedKey) === normalizeEnvKey(key),\n\t\t);\n\t\tif (matchingLoadedKeys.length === 0) {\n\t\t\tcontinue;\n\t\t}\n\t\tfor (const loadedKey of matchingLoadedKeys) {\n\t\t\tReflect.deleteProperty(process.env, loadedKey);\n\t\t\tloadedEnvKeys.delete(loadedKey);\n\t\t\tscrubbed.push(loadedKey);\n\t\t}\n\t}\n\tfor (const loadedKey of [...loadedEnvKeys]) {\n\t\tif (!isDotenvSecurityOverrideKey(loadedKey)) {\n\t\t\tcontinue;\n\t\t}\n\t\tReflect.deleteProperty(process.env, loadedKey);\n\t\tloadedEnvKeys.delete(loadedKey);\n\t\tscrubbed.push(loadedKey);\n\t}\n\treturn scrubbed;\n}\n\nexport interface FinalizedEnvLoad {\n\tloadedEnvKeys: string[];\n\tscrubbedEnvKeys: string[];\n}\n\n/**\n * Finish dotenv bootstrap after any trust-sensitive keys have been loaded.\n *\n * The order is load -> scrub -> reset RuntimeEnv. Resetting before the scrub\n * can preserve repo-controlled security overrides in the cached runtime\n * snapshot, which is exactly the bug class closed by the OTel follow-up.\n */\nexport function finalizeLoadedEnv(\n\tloadedEnvKeys: string[] = [],\n): FinalizedEnvLoad {\n\tconst scrubbedEnvKeys = scrubLoadedSecurityOverrideEnv();\n\tresetDefaultRuntimeEnv();\n\treturn { loadedEnvKeys, scrubbedEnvKeys };\n}\n\nexport function loadAndFinalizeEnv(): FinalizedEnvLoad {\n\treturn finalizeLoadedEnv(loadEnv());\n}\n"]}
+{"version":3,"file":"load-env.js","sourceRoot":"","sources":["../src/load-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EACN,uBAAuB,EACvB,sBAAsB,GACtB,MAAM,kBAAkB,CAAC;AAE1B,MAAM,SAAS,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;AAEzC,gFAAgF;AAChF,yEAAyE;AACzE,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IACnC,MAAM;IACN,cAAc;IACd,cAAc;IACd,gBAAgB;IAChB,iBAAiB;IACjB,yBAAyB;IACzB,qBAAqB;IACrB,oCAAoC;IACpC,aAAa;IACb,2EAA2E;IAC3E,wEAAwE;IACxE,gEAAgE;IAChE,mEAAmE;IACnE,mBAAmB;IACnB,sBAAsB;IACtB,kBAAkB;CAClB,CAAC,CAAC;AAEH,2EAA2E;AAC3E,6EAA6E;AAC7E,wDAAwD;AACxD,oEAAoE;AACpE,MAAM,6BAA6B,GAAG;IACrC,QAAQ,CAAC,OAAO;IAChB,qBAAqB;IACrB,QAAQ,CAAC,eAAe;IACxB,uBAAuB;IACvB,QAAQ,CAAC,YAAY;IACrB,QAAQ,CAAC,SAAS;IAClB,2BAA2B;IAC3B,yBAAyB;IACzB,QAAQ,CAAC,yBAAyB;IAClC,cAAc;IACd,mBAAmB;IACnB,sBAAsB;IACtB,kBAAkB;IAClB,cAAc;IACd,gBAAgB;IAChB,qBAAqB;IACrB,uBAAuB;IACvB,wBAAwB;IACxB,gCAAgC;IAChC,qBAAqB;IACrB,6BAA6B;IAC7B,2BAA2B;IAC3B,8BAA8B;IAC9B,sBAAsB;IACtB,2BAA2B;IAC3B,0BAA0B;IAC1B,kBAAkB;IAClB,wEAAwE;IACxE,sEAAsE;IACtE,wEAAwE;IACxE,8CAA8C;IAC9C,sBAAsB;IACtB,sBAAsB;IACtB,8BAA8B;IAC9B,eAAe;IACf,yEAAyE;IACzE,uEAAuE;IACvE,wEAAwE;IACxE,0EAA0E;IAC1E,wBAAwB;IACxB,yBAAyB;IACzB,gBAAgB;IAChB,2BAA2B;IAC3B,8BAA8B;IAC9B,sBAAsB;IACtB,sBAAsB;IACtB,oCAAoC;IACpC,yBAAyB;IACzB,iBAAiB;IACjB,iBAAiB;IACjB,kBAAkB;IAClB,UAAU;IACV,YAAY;IACZ,WAAW;IACX,eAAe;IACf,yBAAyB;IACzB,0BAA0B;IAC1B,2BAA2B;IAC3B,kBAAkB;IAClB,uEAAuE;IACvE,kEAAkE;IAClE,oEAAoE;IACpE,yCAAyC;IACzC,oBAAoB;IACpB,sEAAsE;IACtE,wEAAwE;IACxE,kEAAkE;IAClE,oBAAoB;IACpB,iBAAiB;IACjB,+BAA+B;IAC/B,yEAAyE;IACzE,qEAAqE;IACrE,QAAQ,CAAC,aAAa;IACtB,QAAQ,CAAC,UAAU;IACnB,mBAAmB;IACnB,sBAAsB;IACtB,cAAc;IACd,gCAAgC;IAChC,yBAAyB;IACzB,qBAAqB;IACrB,0BAA0B;IAC1B,yEAAyE;IACzE,2EAA2E;IAC3E,yEAAyE;IACzE,qBAAqB;IACrB,wBAAwB;IACxB,oBAAoB;IACpB,0EAA0E;IAC1E,wEAAwE;IACxE,wEAAwE;IACxE,YAAY;IACZ,qEAAqE;IACrE,0EAA0E;IAC1E,uEAAuE;IACvE,yEAAyE;IACzE,gEAAgE;IAChE,mBAAmB;IACnB,4BAA4B;IAC5B,gCAAgC;IAChC,2CAA2C;IAC3C,uBAAuB;IACvB,6BAA6B;IAC7B,oCAAoC;IACpC,kCAAkC;IAClC,2BAA2B;IAC3B,8BAA8B;IAC9B,uBAAuB;IACvB,yEAAyE;IACzE,kEAAkE;IAClE,QAAQ,CAAC,WAAW;IACpB,uEAAuE;IACvE,oEAAoE;IACpE,oEAAoE;IACpE,sEAAsE;IACtE,gEAAgE;IAChE,yEAAyE;IACzE,SAAS;IACT,mBAAmB;IACnB,4BAA4B;IAC5B,qBAAqB;IACrB,2BAA2B;IAC3B,4EAA4E;IAC5E,yCAAyC;IACzC,4CAA4C;IAC5C,2EAA2E;IAC3E,wEAAwE;IACxE,oBAAoB;IACpB,4BAA4B;IAC5B,8BAA8B;IAC9B,kCAAkC;IAClC,8BAA8B;IAC9B,kBAAkB;IAClB,oBAAoB;IACpB,mBAAmB;IACnB,mBAAmB;IACnB,mBAAmB;IACnB,sBAAsB;IACtB,cAAc;IACd,2EAA2E;IAC3E,6EAA6E;IAC7E,2BAA2B;CAClB,CAAC;AAEX,MAAM,eAAe,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;AAC3D,MAAM,gCAAgC,GAAG,IAAI,GAAG,CAC/C,6BAA6B,CAAC,GAAG,CAAC,eAAe,CAAC,CAClD,CAAC;AACF,MAAM,iCAAiC,GAAG;IACzC,oBAAoB;IACpB,0BAA0B;IAC1B,oBAAoB;IACpB,oBAAoB;IACpB,iBAAiB;IACjB,sBAAsB;IACtB,oBAAoB;IACpB,4BAA4B;IAC5B,qBAAqB;IACrB,qBAAqB;IACrB,yEAAyE;IACzE,iEAAiE;IACjE,WAAW;IACX,yBAAyB;IACzB,iBAAiB;IACjB,0BAA0B;IAC1B,uBAAuB;IACvB,cAAc;IACd,wBAAwB;IACxB,gBAAgB;IAChB,yBAAyB;IACzB,wEAAwE;IACxE,gEAAgE;IAChE,qEAAqE;IACrE,4DAA4D;IAC5D,yBAAyB;IACzB,yBAAyB;IACzB,mBAAmB;IACnB,kBAAkB;IAClB,gBAAgB;IAChB,cAAc;IACd,qBAAqB;IACrB,iBAAiB;IACjB,eAAe;IACf,uDAAuD;IACvD,wEAAwE;IACxE,uEAAuE;IACvE,uDAAuD;IACvD,qBAAqB;IACrB,2BAA2B;IAC3B,uBAAuB;IACvB,2EAA2E;IAC3E,gEAAgE;IAChE,kBAAkB;IAClB,kBAAkB;IAClB,eAAe;IACf,mBAAmB;IACnB,yBAAyB;IACzB,2BAA2B;IAC3B,wBAAwB;IACxB,oBAAoB;IACpB,OAAO;IACP,uBAAuB;IACvB,SAAS;CACA,CAAC;AACX,MAAM,2BAA2B,GAAG,CAAC,GAAW,EAAW,EAAE;IAC5D,MAAM,aAAa,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAC3C,OAAO,CACN,gCAAgC,CAAC,GAAG,CAAC,aAAa,CAAC;QACnD,iCAAiC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CACjD,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,CAChC,CACD,CAAC;AACH,CAAC,CAAC;AACF,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;AAExC,MAAM,UAAU,OAAO;IACtB,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3C,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YACjD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;YACnE,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3D,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAChD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;gBACpD,MAAM,aAAa,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;gBAC3C,MAAM,iBAAiB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC7D,IAAI,CAAC,iBAAiB,EAAE,CAAC;oBACxB,SAAS;gBACV,CAAC;gBACD,IAAI,mBAAmB,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;oBAC5C,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;oBACzC,SAAS;gBACV,CAAC;gBACD,6DAA6D;gBAC7D,oEAAoE;gBACpE,+DAA+D;gBAC/D,oEAAoE;gBACpE,mEAAmE;gBACnE,kEAAkE;gBAClE,gEAAgE;gBAChE,IACC,CAAC,gBAAgB,CAAC,GAAG,CAAC,aAAa,CAAC;oBACpC,2BAA2B,CAAC,aAAa,CAAC,EACzC,CAAC;oBACF,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACzB,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACxB,CAAC;YACF,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,CAAC,GAAG,eAAe,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC/B,OAAO,CAAC,GAAG,aAAa,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,8BAA8B;IAC7C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,6BAA6B,EAAE,CAAC;QACjD,MAAM,kBAAkB,GAAG,CAAC,GAAG,aAAa,CAAC,CAAC,MAAM,CACnD,CAAC,SAAS,EAAE,EAAE,CAAC,eAAe,CAAC,SAAS,CAAC,KAAK,eAAe,CAAC,GAAG,CAAC,CAClE,CAAC;QACF,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrC,SAAS;QACV,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;YAC5C,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC/C,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;IACF,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,CAAC,GAAG,aAAa,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC,2BAA2B,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7C,SAAS;QACV,CAAC;QACD,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC/C,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,QAAQ,CAAC;AACjB,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAChC,gBAA0B,EAAE;IAE5B,MAAM,eAAe,GAAG,8BAA8B,EAAE,CAAC;IACzD,sBAAsB,EAAE,CAAC;IACzB,uBAAuB,EAAE,CAAC;IAC1B,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,kBAAkB;IACjC,OAAO,iBAAiB,CAAC,OAAO,EAAE,CAAC,CAAC;AACrC,CAAC","sourcesContent":["import { existsSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { config } from \"dotenv\";\nimport { ENV_VARS } from \"./config/env-vars.js\";\nimport {\n\tmarkRuntimeEnvFinalized,\n\tresetDefaultRuntimeEnv,\n} from \"./runtime/env.js\";\n\nconst ENV_FILES = [\".env.local\", \".env\"];\n\n// Keys that must never be sourced from a repo-controlled dotenv file. These are\n// stripped immediately at load time so they can never reach process.env.\nconst BLOCKED_DOTENV_KEYS = new Set([\n\t\"HOME\",\n\t\"FACTORY_HOME\",\n\t\"MAESTRO_HOME\",\n\t\"MAESTRO_CONFIG\",\n\t\"MAESTRO_PROFILE\",\n\t\"MAESTRO_LLM_GATEWAY_URL\",\n\t\"MAESTRO_MODELS_FILE\",\n\t\"MAESTRO_TRUST_PROJECT_MODEL_CONFIG\",\n\t\"USERPROFILE\",\n\t// Agent-directory overrides decide where the \"global\" APPEND_SYSTEM.md and\n\t// other agent-scoped files are loaded from. A repo-controlled value can\n\t// redirect that fallback back into the workspace, bypassing the\n\t// untrusted-project gate. See resolveLoadedAppendSystemPromptPath.\n\t\"MAESTRO_AGENT_DIR\",\n\t\"PLAYWRIGHT_AGENT_DIR\",\n\t\"CODING_AGENT_DIR\",\n]);\n\n// Security-relevant settings that may legitimately come from a user's real\n// shell environment but must not be silently set by a repo-controlled dotenv\n// file. These are loaded normally and then scrubbed via\n// scrubLoadedSecurityOverrideEnv() once trust has been established.\nconst DOTENV_SECURITY_OVERRIDE_KEYS = [\n\tENV_VARS.PROFILE,\n\t\"MAESTRO_WEB_PROFILE\",\n\tENV_VARS.APPROVAL_POLICY,\n\t\"MAESTRO_APPROVAL_MODE\",\n\tENV_VARS.SANDBOX_MODE,\n\tENV_VARS.SAFE_MODE,\n\t\"MAESTRO_SAFE_REQUIRE_PLAN\",\n\t\"MAESTRO_SAFE_VALIDATORS\",\n\tENV_VARS.CONTEXT_FIREWALL_BLOCKING,\n\t\"MAESTRO_HOME\",\n\t\"MAESTRO_AGENT_DIR\",\n\t\"PLAYWRIGHT_AGENT_DIR\",\n\t\"CODING_AGENT_DIR\",\n\t\"NODE_OPTIONS\",\n\t\"MAESTRO_CONFIG\",\n\t\"MAESTRO_MODELS_FILE\",\n\t\"MAESTRO_NOTIFY_EVENTS\",\n\t\"MAESTRO_NOTIFY_PROGRAM\",\n\t\"MAESTRO_ENTERPRISE_POLICY_PATH\",\n\t\"MAESTRO_POLICY_PATH\",\n\t\"MAESTRO_PROMPT_HISTORY_FILE\",\n\t\"MAESTRO_TOOL_HISTORY_FILE\",\n\t\"MAESTRO_TUI_TIP_HISTORY_FILE\",\n\t\"MAESTRO_BASH_HISTORY\",\n\t\"MAESTRO_PLATFORM_BASE_URL\",\n\t\"MAESTRO_EVALOPS_BASE_URL\",\n\t\"EVALOPS_BASE_URL\",\n\t// EvalOps identity service URL: `bootstrapEvalOpsAgent()` and the OAuth\n\t// flow honor these aliases before the stored/derived URL. A repo .env\n\t// could otherwise point identity at an attacker service and capture the\n\t// user's OAuth bearer during agent bootstrap.\n\t\"MAESTRO_IDENTITY_URL\",\n\t\"EVALOPS_IDENTITY_URL\",\n\t\"MAESTRO_EVALOPS_ACCESS_TOKEN\",\n\t\"EVALOPS_TOKEN\",\n\t// EvalOps tenant identity aliases: any of these can scope durable-memory\n\t// writes (`X-Organization-ID`), remote-runner workspace selection, and\n\t// managed-context lookups. A repo-controlled dotenv must not be able to\n\t// redirect those tenant identifiers when a real EvalOps token is present.\n\t\"MAESTRO_EVALOPS_ORG_ID\",\n\t\"EVALOPS_ORGANIZATION_ID\",\n\t\"EVALOPS_ORG_ID\",\n\t\"MAESTRO_ENTERPRISE_ORG_ID\",\n\t\"MAESTRO_EVALOPS_WORKSPACE_ID\",\n\t\"EVALOPS_WORKSPACE_ID\",\n\t\"MAESTRO_WORKSPACE_ID\",\n\t\"MAESTRO_REMOTE_RUNNER_WORKSPACE_ID\",\n\t\"MAESTRO_EVALOPS_USER_ID\",\n\t\"EVALOPS_USER_ID\",\n\t\"MAESTRO_USER_ID\",\n\t\"EVALOPS_NATS_URL\",\n\t\"NATS_URL\",\n\t\"NATS_TOKEN\",\n\t\"NATS_USER\",\n\t\"NATS_PASSWORD\",\n\t\"MAESTRO_WEB_REQUIRE_KEY\",\n\t\"MAESTRO_WEB_REQUIRE_CSRF\",\n\t\"MAESTRO_WEB_REQUIRE_REDIS\",\n\t\"MAESTRO_WEB_ROOT\",\n\t// CORS / WebSocket origin policy: a repo-controlled dotenv must not be\n\t// able to broaden cross-origin browser access to the local API by\n\t// setting `MAESTRO_WEB_ORIGIN=*` (or an attacker-controlled origin)\n\t// before the user's real env is checked.\n\t\"MAESTRO_WEB_ORIGIN\",\n\t// Content-Security-Policy override: web-server.ts prefers a non-empty\n\t// MAESTRO_WEB_CSP over the prod default when building SECURITY_HEADERS,\n\t// so a repo .env could otherwise weaken the browser policy in any\n\t// hardened profile.\n\t\"MAESTRO_WEB_CSP\",\n\t\"MAESTRO_STRICT_SESSION_ACCESS\",\n\t// Session scoping controls: a repo-controlled dotenv must not be able to\n\t// collapse authenticated web sessions back to the global file store.\n\tENV_VARS.SESSION_SCOPE,\n\tENV_VARS.MULTI_USER,\n\t\"MAESTRO_REDIS_URL\",\n\t\"MAESTRO_DATABASE_URL\",\n\t\"DATABASE_URL\",\n\t\"MAESTRO_HOSTED_SESSION_STORAGE\",\n\t\"MAESTRO_SESSION_STORAGE\",\n\t\"MAESTRO_TRUST_PROXY\",\n\t\"MAESTRO_TRUST_PROXY_HOPS\",\n\t// Web/auth secret material: a repo-controlled dotenv must not be able to\n\t// choose a known API key, CSRF token, JWT signing secret, or shared secret\n\t// for endpoints that are supposed to require a user-provided credential.\n\t\"MAESTRO_WEB_API_KEY\",\n\t\"MAESTRO_WEB_CSRF_TOKEN\",\n\t\"MAESTRO_JWT_SECRET\",\n\t// `JWT_SECRET` is the unprefixed fallback honored by src/auth/jwt.ts when\n\t// `MAESTRO_JWT_SECRET` is not set; a repo-controlled dotenv must not be\n\t// able to choose the signing key for enterprise auth via this fallback.\n\t\"JWT_SECRET\",\n\t// OAuth credential file overrides: `src/providers/openai-auth.ts:91`\n\t// binds AUTH_FILE to OPENAI_OAUTH_FILE, and `saveOpenAIOAuthCredential()`\n\t// then writes access/refresh/ID tokens and the derived API key to that\n\t// path. A repo .env must not be able to redirect fresh OAuth credentials\n\t// into the checkout where they can be read on the next install.\n\t\"OPENAI_OAUTH_FILE\",\n\t\"MAESTRO_AUTH_SHARED_SECRET\",\n\t\"MAESTRO_DEVICE_IDENTITY_HELPER\",\n\t\"MAESTRO_DEVICE_IDENTITY_ALLOW_TEST_HELPER\",\n\t\"MAESTRO_USER_MCP_PATH\",\n\t\"MAESTRO_ENTERPRISE_MCP_PATH\",\n\t\"MAESTRO_MCP_PROJECT_APPROVALS_FILE\",\n\t\"MAESTRO_MCP_WORKSPACE_TRUST_FILE\",\n\t\"MAESTRO_PACKAGE_CACHE_DIR\",\n\t\"MAESTRO_RUN_SCRIPT_ALLOWLIST\",\n\t\"MAESTRO_SCRIPT_RUNNER\",\n\t// Session storage location: a repo-controlled dotenv must not be able to\n\t// redirect where session transcripts are read from or written to.\n\tENV_VARS.SESSION_DIR,\n\t// Local-state file/dir overrides: a repo-controlled dotenv must not be\n\t// able to redirect where the todo store or background-task logs are\n\t// written, which would otherwise let a checkout capture future task\n\t// content or command output for files that live outside the workspace\n\t// by default. Same reasoning extends to the web queue store and\n\t// automations store, which write user prompt/output text to env-selected\n\t// paths.\n\t\"MAESTRO_TODO_FILE\",\n\t\"MAESTRO_BACKGROUND_LOG_DIR\",\n\t\"MAESTRO_QUEUE_STATE\",\n\t\"MAESTRO_AUTOMATIONS_STATE\",\n\t// Sandbox enforcement opt-out: a repo-controlled dotenv must not be able to\n\t// enable unsandboxed fallback execution.\n\t\"MAESTRO_ALLOW_UNSANDBOXED_SANDBOX_FALLBACK\",\n\t// Bash guard / shell egress / allowlist controls: a repo-controlled dotenv\n\t// must not be able to disable command approvals or widen the allowlist.\n\t\"MAESTRO_BASH_GUARD\",\n\t\"MAESTRO_ALLOW_EGRESS_SHELL\",\n\t\"MAESTRO_FAIL_UNTAGGED_EGRESS\",\n\t\"MAESTRO_BACKGROUND_SHELL_DISABLE\",\n\t\"MAESTRO_BASH_ALLOWLIST_PATHS\",\n\t\"MAESTRO_GUARDIAN\",\n\t\"MAESTRO_MARKITDOWN\",\n\t\"MAESTRO_EVENT_BUS\",\n\t\"MAESTRO_AUDIT_BUS\",\n\t\"MAESTRO_TELEMETRY\",\n\t\"PLAYWRIGHT_TELEMETRY\",\n\t\"MAESTRO_OTEL\",\n\t// Auto-verify custom command: a repo-controlled dotenv must not be able to\n\t// inject an arbitrary shell command that AutoVerifyService runs after edits.\n\t\"MAESTRO_AUTO_TEST_COMMAND\",\n] as const;\n\nconst normalizeEnvKey = (key: string) => key.toUpperCase();\nconst DOTENV_SECURITY_OVERRIDE_KEY_SET = new Set<string>(\n\tDOTENV_SECURITY_OVERRIDE_KEYS.map(normalizeEnvKey),\n);\nconst DOTENV_SECURITY_OVERRIDE_PREFIXES = [\n\t\"APPROVALS_SERVICE_\",\n\t\"MAESTRO_ARTIFACT_ACCESS_\",\n\t\"MAESTRO_APPROVALS_\",\n\t\"MAESTRO_AGENT_MCP_\",\n\t\"MAESTRO_BEACON_\",\n\t\"MAESTRO_CEREBRO_MCP_\",\n\t\"MAESTRO_EVENT_BUS_\",\n\t\"MAESTRO_EVALOPS_AGENT_MCP_\",\n\t\"GOVERNANCE_SERVICE_\",\n\t\"MAESTRO_GOVERNANCE_\",\n\t// Internal service clients must not accept repo-selected endpoints while\n\t// falling back to user-provided bearer tokens or tenant headers.\n\t\"PIPELINE_\",\n\t\"MAESTRO_AGENT_REGISTRY_\",\n\t\"AGENT_REGISTRY_\",\n\t\"PLATFORM_AGENT_REGISTRY_\",\n\t\"MAESTRO_PLATFORM_A2A_\",\n\t\"MAESTRO_A2A_\",\n\t\"MAESTRO_AGENT_RUNTIME_\",\n\t\"AGENT_RUNTIME_\",\n\t\"PLATFORM_AGENT_RUNTIME_\",\n\t// Platform tool-execution bridge: a repo .env must not be able to point\n\t// the Connect endpoint, auth token, or tenant identifiers at an\n\t// attacker-controlled service, or bash/MCP tool args and observation\n\t// output get posted there with the user's real credentials.\n\t\"TOOL_EXECUTION_SERVICE_\",\n\t\"MAESTRO_TOOL_EXECUTION_\",\n\t\"MAESTRO_GUARDIAN_\",\n\t\"MAESTRO_HISTORY_\",\n\t\"MAESTRO_HOOKS_\",\n\t\"MAESTRO_JWT_\",\n\t\"MAESTRO_MARKITDOWN_\",\n\t\"MAESTRO_MEMORY_\",\n\t\"MAESTRO_OTEL_\",\n\t// Web rate-limit controls: `session-rate-limit.ts` and\n\t// `session-share-store.ts` read these at module load when web-server.ts\n\t// imports its handlers. A repo .env could otherwise weaken per-session\n\t// or share rate limits even in a hardened web profile.\n\t\"MAESTRO_RATE_LIMIT_\",\n\t\"MAESTRO_SHARE_RATE_LIMIT_\",\n\t\"MAESTRO_PLATFORM_MCP_\",\n\t// Prompt-service controls: these can redirect system prompt resolution and\n\t// credential-bearing service calls to a repo-selected endpoint.\n\t\"PROMPTS_SERVICE_\",\n\t\"MAESTRO_PROMPTS_\",\n\t\"MAESTRO_SAFE_\",\n\t\"MAESTRO_SCENARIO_\",\n\t\"MAESTRO_SESSION_BACKUP_\",\n\t\"MAESTRO_SESSION_RECOVERY_\",\n\t\"MAESTRO_SHARED_MEMORY_\",\n\t\"MAESTRO_TELEMETRY_\",\n\t\"OTEL_\",\n\t\"PLAYWRIGHT_TELEMETRY_\",\n\t\"SENTRY_\",\n] as const;\nconst isDotenvSecurityOverrideKey = (key: string): boolean => {\n\tconst normalizedKey = normalizeEnvKey(key);\n\treturn (\n\t\tDOTENV_SECURITY_OVERRIDE_KEY_SET.has(normalizedKey) ||\n\t\tDOTENV_SECURITY_OVERRIDE_PREFIXES.some((prefix) =>\n\t\t\tnormalizedKey.startsWith(prefix),\n\t\t)\n\t);\n};\nconst loadedEnvKeys = new Set<string>();\n\nexport function loadEnv(): string[] {\n\tconst newlyLoadedKeys = new Set<string>();\n\tfor (const file of ENV_FILES) {\n\t\tconst resolved = join(process.cwd(), file);\n\t\tif (existsSync(resolved)) {\n\t\t\tconst before = new Set(Object.keys(process.env));\n\t\t\tconst beforeNormalized = new Set([...before].map(normalizeEnvKey));\n\t\t\tconst result = config({ path: resolved, override: false });\n\t\t\tconst after = new Set(Object.keys(process.env));\n\t\t\tfor (const key of Object.keys(result.parsed ?? {})) {\n\t\t\t\tconst normalizedKey = normalizeEnvKey(key);\n\t\t\t\tconst wasLoadedByDotenv = !before.has(key) && after.has(key);\n\t\t\t\tif (!wasLoadedByDotenv) {\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tif (BLOCKED_DOTENV_KEYS.has(normalizedKey)) {\n\t\t\t\t\tReflect.deleteProperty(process.env, key);\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\t// Track newly loaded keys so they can be scrubbed later. For\n\t\t\t\t// security override keys we record the exact dotenv-loaded key even\n\t\t\t\t// when a differently cased variant already existed in the real\n\t\t\t\t// environment: env names are case-sensitive on POSIX, so dotenv can\n\t\t\t\t// create a distinct uppercase `MAESTRO_PROFILE` alongside a user's\n\t\t\t\t// `maestro_profile`, and that repo-controlled value must still be\n\t\t\t\t// scrubbed rather than survive due to the normalized collision.\n\t\t\t\tif (\n\t\t\t\t\t!beforeNormalized.has(normalizedKey) ||\n\t\t\t\t\tisDotenvSecurityOverrideKey(normalizedKey)\n\t\t\t\t) {\n\t\t\t\t\tnewlyLoadedKeys.add(key);\n\t\t\t\t\tloadedEnvKeys.add(key);\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n\treturn [...newlyLoadedKeys];\n}\n\nexport function getLoadedEnvKeys(): string[] {\n\treturn [...loadedEnvKeys];\n}\n\nexport function scrubLoadedSecurityOverrideEnv(): string[] {\n\tconst scrubbed: string[] = [];\n\tfor (const key of DOTENV_SECURITY_OVERRIDE_KEYS) {\n\t\tconst matchingLoadedKeys = [...loadedEnvKeys].filter(\n\t\t\t(loadedKey) => normalizeEnvKey(loadedKey) === normalizeEnvKey(key),\n\t\t);\n\t\tif (matchingLoadedKeys.length === 0) {\n\t\t\tcontinue;\n\t\t}\n\t\tfor (const loadedKey of matchingLoadedKeys) {\n\t\t\tReflect.deleteProperty(process.env, loadedKey);\n\t\t\tloadedEnvKeys.delete(loadedKey);\n\t\t\tscrubbed.push(loadedKey);\n\t\t}\n\t}\n\tfor (const loadedKey of [...loadedEnvKeys]) {\n\t\tif (!isDotenvSecurityOverrideKey(loadedKey)) {\n\t\t\tcontinue;\n\t\t}\n\t\tReflect.deleteProperty(process.env, loadedKey);\n\t\tloadedEnvKeys.delete(loadedKey);\n\t\tscrubbed.push(loadedKey);\n\t}\n\treturn scrubbed;\n}\n\nexport interface FinalizedEnvLoad {\n\tloadedEnvKeys: string[];\n\tscrubbedEnvKeys: string[];\n}\n\n/**\n * Finish dotenv bootstrap after any trust-sensitive keys have been loaded.\n *\n * The order is load -> scrub -> reset RuntimeEnv. Resetting before the scrub\n * can preserve repo-controlled security overrides in the cached runtime\n * snapshot, which is exactly the bug class closed by the OTel follow-up.\n */\nexport function finalizeLoadedEnv(\n\tloadedEnvKeys: string[] = [],\n): FinalizedEnvLoad {\n\tconst scrubbedEnvKeys = scrubLoadedSecurityOverrideEnv();\n\tresetDefaultRuntimeEnv();\n\tmarkRuntimeEnvFinalized();\n\treturn { loadedEnvKeys, scrubbedEnvKeys };\n}\n\nexport function loadAndFinalizeEnv(): FinalizedEnvLoad {\n\treturn finalizeLoadedEnv(loadEnv());\n}\n"]}

package/dist/main.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsFG;AA6dH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,iBAs/CxC"}
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsFG;AAuYH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,iBAqrBxC"}