@evalops/maestro 0.10.8 → 0.10.10

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA,0DAA0D;AAC1D,sFAAsF;AACtF,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAGlC,CAAC;AACb,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,KAAsB,EAAE,GAAG,IAAe,EAAE,EAAE;IAC9D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;QACxB,IACC,OAAO,QAAQ,KAAK,QAAQ;YAC5B,QAAQ,KAAK,IAAI;YACjB,MAAM,IAAI,QAAQ;YAClB,MAAM,IAAI,QAAQ;YACjB,QAA6C,CAAC,IAAI;gBAClD,oBAAoB;YACpB,QAA6C,CAAC,IAAI,KAAK,SAAS,EAChE,CAAC;YACF,OAAO,KAAK,CAAC,CAAC,gCAAgC;QAC/C,CAAC;IACF,CAAC;IACD,OAAO,YAAY,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,CAAC;AACrC,CAAC,CAAwB,CAAC;AAE1B,MAAM,GAAG,GAAG,KAAK,IAAI,EAAE;IACtB,IAAI,CAAC;QACJ,yEAAyE;QACzE,kEAAkE;QAClE,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;YAC3B,IAAI,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC;gBAC3B,MAAM,OAAO,GAAG,SAAS,GAAG,IAAI,CAAC;gBACjC,IAAI,CAAC;oBACJ,OAAO,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC9B,CAAC;gBAAC,MAAM,CAAC;oBACR,oEAAoE;oBACpE,OAAO,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;gBAClC,CAAC;YACF,CAAC;YACD,OAAO,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;QAClC,CAAC,CAAC;QAEF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;QAClC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;AACF,CAAC,CAAC;AAEF,wGAAwG;AACxG,KAAK,GAAG,EAAE,CAAC","sourcesContent":["#!/usr/bin/env node\n\n// Suppress punycode deprecation warning from dependencies\n// This warning comes from old dependencies still using the deprecated punycode module\nconst originalEmit = process.emit.bind(process) as (\n\tevent: string | symbol,\n\t...args: unknown[]\n) => boolean;\nprocess.emit = ((event: string | symbol, ...args: unknown[]) => {\n\tif (event === \"warning\") {\n\t\tconst [firstArg] = args;\n\t\tif (\n\t\t\ttypeof firstArg === \"object\" &&\n\t\t\tfirstArg !== null &&\n\t\t\t\"name\" in firstArg &&\n\t\t\t\"code\" in firstArg &&\n\t\t\t(firstArg as { name?: string; code?: string }).name ===\n\t\t\t\t\"DeprecationWarning\" &&\n\t\t\t(firstArg as { name?: string; code?: string }).code === \"DEP0040\"\n\t\t) {\n\t\t\treturn false; // Suppress punycode deprecation\n\t\t}\n\t}\n\treturn originalEmit(event, ...args);\n}) as typeof process.emit;\n\nconst run = async () => {\n\ttry {\n\t\t// Prefer the TypeScript entry when running under Bun during development,\n\t\t// but fall back to the compiled JS for bundled/compiled binaries.\n\t\tconst loadMain = async () => {\n\t\t\tif (process.versions?.bun) {\n\t\t\t\tconst tsEntry = \"./main.\" + \"ts\";\n\t\t\t\ttry {\n\t\t\t\t\treturn await import(tsEntry);\n\t\t\t\t} catch {\n\t\t\t\t\t// In compiled binaries the .ts source isn't present; use JS output.\n\t\t\t\t\treturn await import(\"./main.js\");\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn await import(\"./main.js\");\n\t\t};\n\n\t\tconst { main } = await loadMain();\n\t\tawait main(process.argv.slice(2));\n\t} catch (err) {\n\t\tconsole.error(err);\n\t\tprocess.exit(1);\n\t}\n};\n\n// Call without top-level await so Bun's bytecode compilation (which forbids TLA) can bundle this entry.\nvoid run();\n"]}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA,0DAA0D;AAC1D,sFAAsF;AACtF,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAGlC,CAAC;AACb,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,KAAsB,EAAE,GAAG,IAAe,EAAE,EAAE;IAC9D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;QACxB,IACC,OAAO,QAAQ,KAAK,QAAQ;YAC5B,QAAQ,KAAK,IAAI;YACjB,MAAM,IAAI,QAAQ;YAClB,MAAM,IAAI,QAAQ;YACjB,QAA6C,CAAC,IAAI;gBAClD,oBAAoB;YACpB,QAA6C,CAAC,IAAI,KAAK,SAAS,EAChE,CAAC;YACF,OAAO,KAAK,CAAC,CAAC,gCAAgC;QAC/C,CAAC;IACF,CAAC;IACD,OAAO,YAAY,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,CAAC;AACrC,CAAC,CAAwB,CAAC;AAE1B,SAAS,oBAAoB,CAAC,IAAc;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC;QACb,CAAC;QACD,IAAI,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC;QACb,CAAC;QACD,IACC,GAAG,EAAE,UAAU,CAAC,SAAS,CAAC;YAC1B,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,UAAU,EACzC,CAAC;YACF,OAAO,IAAI,CAAC;QACb,CAAC;IACF,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAc;IAC/C,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,IAAI,CAAC;QACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CACnB,GAAG,IAAI,CAAC,SAAS,CAAC;YACjB,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,4BAA4B,OAAO,EAAE;YAC9C,KAAK,EAAE,IAAI;YACX,UAAU,EAAE,OAAO;SACnB,CAAC,IAAI,CACN,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACR,qEAAqE;IACtE,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,OAAO,IAAI,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,GAAG,GAAG,KAAK,IAAI,EAAE;IACtB,IAAI,CAAC;QACJ,yEAAyE;QACzE,kEAAkE;QAClE,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;YAC3B,IAAI,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC;gBAC3B,MAAM,OAAO,GAAG,SAAS,GAAG,IAAI,CAAC;gBACjC,IAAI,CAAC;oBACJ,OAAO,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC9B,CAAC;gBAAC,MAAM,CAAC;oBACR,oEAAoE;oBACpE,OAAO,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;gBAClC,CAAC;YACF,CAAC;YACD,OAAO,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;QAClC,CAAC,CAAC;QAEF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;QAClC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,IAAI,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,wBAAwB,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC;aAAM,CAAC;YACP,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;AACF,CAAC,CAAC;AAEF,wGAAwG;AACxG,KAAK,GAAG,EAAE,CAAC","sourcesContent":["#!/usr/bin/env node\n\n// Suppress punycode deprecation warning from dependencies\n// This warning comes from old dependencies still using the deprecated punycode module\nconst originalEmit = process.emit.bind(process) as (\n\tevent: string | symbol,\n\t...args: unknown[]\n) => boolean;\nprocess.emit = ((event: string | symbol, ...args: unknown[]) => {\n\tif (event === \"warning\") {\n\t\tconst [firstArg] = args;\n\t\tif (\n\t\t\ttypeof firstArg === \"object\" &&\n\t\t\tfirstArg !== null &&\n\t\t\t\"name\" in firstArg &&\n\t\t\t\"code\" in firstArg &&\n\t\t\t(firstArg as { name?: string; code?: string }).name ===\n\t\t\t\t\"DeprecationWarning\" &&\n\t\t\t(firstArg as { name?: string; code?: string }).code === \"DEP0040\"\n\t\t) {\n\t\t\treturn false; // Suppress punycode deprecation\n\t\t}\n\t}\n\treturn originalEmit(event, ...args);\n}) as typeof process.emit;\n\nfunction isHeadlessInvocation(args: string[]): boolean {\n\tfor (let i = 0; i < args.length; i++) {\n\t\tconst arg = args[i];\n\t\tif (arg === \"--headless\") {\n\t\t\treturn true;\n\t\t}\n\t\tif (arg === \"--mode\" && args[i + 1] === \"headless\") {\n\t\t\treturn true;\n\t\t}\n\t\tif (\n\t\t\targ?.startsWith(\"--mode=\") &&\n\t\t\targ.slice(\"--mode=\".length) === \"headless\"\n\t\t) {\n\t\t\treturn true;\n\t\t}\n\t}\n\treturn false;\n}\n\nfunction emitHeadlessStartupError(error: unknown): void {\n\tconst message = error instanceof Error ? error.message : String(error);\n\tconst stack = error instanceof Error ? error.stack : undefined;\n\ttry {\n\t\tprocess.stdout.write(\n\t\t\t`${JSON.stringify({\n\t\t\t\ttype: \"error\",\n\t\t\t\tmessage: `Headless startup failed: ${message}`,\n\t\t\t\tfatal: true,\n\t\t\t\terror_type: \"fatal\",\n\t\t\t})}\\n`,\n\t\t);\n\t} catch {\n\t\t// If stdout is unavailable there is no protocol channel left to use.\n\t}\n\tprocess.stderr.write(`${stack ?? message}\\n`);\n}\n\nconst run = async () => {\n\ttry {\n\t\t// Prefer the TypeScript entry when running under Bun during development,\n\t\t// but fall back to the compiled JS for bundled/compiled binaries.\n\t\tconst loadMain = async () => {\n\t\t\tif (process.versions?.bun) {\n\t\t\t\tconst tsEntry = \"./main.\" + \"ts\";\n\t\t\t\ttry {\n\t\t\t\t\treturn await import(tsEntry);\n\t\t\t\t} catch {\n\t\t\t\t\t// In compiled binaries the .ts source isn't present; use JS output.\n\t\t\t\t\treturn await import(\"./main.js\");\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn await import(\"./main.js\");\n\t\t};\n\n\t\tconst { main } = await loadMain();\n\t\tawait main(process.argv.slice(2));\n\t} catch (err) {\n\t\tif (isHeadlessInvocation(process.argv.slice(2))) {\n\t\t\temitHeadlessStartupError(err);\n\t\t} else {\n\t\t\tconsole.error(err);\n\t\t}\n\t\tprocess.exit(1);\n\t}\n};\n\n// Call without top-level await so Bun's bytecode compilation (which forbids TLA) can bundle this entry.\nvoid run();\n"]}

package/dist/config/env-vars.d.ts

@@ -31,6 +31,8 @@
  * ### API Configuration
  * - MAESTRO_API_KEY_HELPER_TTL_MS - Cache TTL for API key helpers
  * - MAESTRO_SKIP_AUTH - Skip authentication (for testing)
+ * - MAESTRO_IDENTITY_URL - Override EvalOps identity base URL
+ * - MAESTRO_PLATFORM_BASE_URL - Shared EvalOps Platform base URL for core services
  *
  * ### Network Configuration
  * - MAESTRO_HTTP_PROXY - HTTP proxy URL
@@ -83,6 +85,8 @@ export declare const ENV_VARS: {
     readonly SKIP_AUTH: "MAESTRO_SKIP_AUTH";
     readonly SKIP_BEDROCK_AUTH: "MAESTRO_SKIP_BEDROCK_AUTH";
     readonly SKIP_VERTEX_AUTH: "MAESTRO_SKIP_VERTEX_AUTH";
+    readonly IDENTITY_URL: "MAESTRO_IDENTITY_URL";
+    readonly PLATFORM_BASE_URL: "MAESTRO_PLATFORM_BASE_URL";
     readonly HTTP_PROXY: "MAESTRO_HTTP_PROXY";
     readonly HTTPS_PROXY: "MAESTRO_HTTPS_PROXY";
     readonly SOCKS_PROXY: "MAESTRO_SOCKS_PROXY";

package/dist/config/env-vars.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env-vars.d.ts","sourceRoot":"","sources":["../../src/config/env-vars.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AAMH;;GAEG;AACH,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmDX,CAAC;AAEX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,QAAQ,CAAC,CAAC,MAAM,OAAO,QAAQ,CAAC,CAAC;AAElE;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,SAAS,CAEjE;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,SAAS,CAK9D;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,GAAG,SAAS,CAMhE;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,EAAE,GAAG,SAAS,CAOjE;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAIzD;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAI1D;AAED;;GAEG;AACH,wBAAgB,cAAc,IAAI;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB,CAiCA;AAED;;GAEG;AACH,wBAAgB,UAAU,IAAI,OAAO,CAEpC;AAED;;;;;;;GAOG;AACH,wBAAgB,gCAAgC,IAAI,OAAO,CAE1D;AAED;;GAEG;AACH,wBAAgB,WAAW,IAAI,OAAO,CAErC;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,OAAO,CAE7C;AAED;;GAEG;AACH,wBAAgB,qBAAqB,IAAI,OAAO,CAE/C;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,SAAS,CAEvD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,SAAS,CAErD;AAED;;GAEG;AACH,wBAAgB,UAAU,IAAI,IAAI,CAsBjC;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,MAAM,EAAE,CAoD1C"}
+{"version":3,"file":"env-vars.d.ts","sourceRoot":"","sources":["../../src/config/env-vars.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8DG;AAMH;;GAEG;AACH,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqDX,CAAC;AAEX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,QAAQ,CAAC,CAAC,MAAM,OAAO,QAAQ,CAAC,CAAC;AAElE;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,SAAS,CAEjE;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,SAAS,CAK9D;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,GAAG,SAAS,CAMhE;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,EAAE,GAAG,SAAS,CAOjE;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAIzD;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAI1D;AAED;;GAEG;AACH,wBAAgB,cAAc,IAAI;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB,CAiCA;AAED;;GAEG;AACH,wBAAgB,UAAU,IAAI,OAAO,CAEpC;AAED;;;;;;;GAOG;AACH,wBAAgB,gCAAgC,IAAI,OAAO,CAE1D;AAED;;GAEG;AACH,wBAAgB,WAAW,IAAI,OAAO,CAErC;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,OAAO,CAE7C;AAED;;GAEG;AACH,wBAAgB,qBAAqB,IAAI,OAAO,CAE/C;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,SAAS,CAEvD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,SAAS,CAErD;AAED;;GAEG;AACH,wBAAgB,UAAU,IAAI,IAAI,CAsBjC;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,MAAM,EAAE,CAoD1C"}

package/dist/config/env-vars.js

@@ -31,6 +31,8 @@
  * ### API Configuration
  * - MAESTRO_API_KEY_HELPER_TTL_MS - Cache TTL for API key helpers
  * - MAESTRO_SKIP_AUTH - Skip authentication (for testing)
+ * - MAESTRO_IDENTITY_URL - Override EvalOps identity base URL
+ * - MAESTRO_PLATFORM_BASE_URL - Shared EvalOps Platform base URL for core services
  *
  * ### Network Configuration
  * - MAESTRO_HTTP_PROXY - HTTP proxy URL
@@ -89,6 +91,8 @@ export const ENV_VARS = {
     SKIP_AUTH: "MAESTRO_SKIP_AUTH",
     SKIP_BEDROCK_AUTH: "MAESTRO_SKIP_BEDROCK_AUTH",
     SKIP_VERTEX_AUTH: "MAESTRO_SKIP_VERTEX_AUTH",
+    IDENTITY_URL: "MAESTRO_IDENTITY_URL",
+    PLATFORM_BASE_URL: "MAESTRO_PLATFORM_BASE_URL",
     // Network configuration
     HTTP_PROXY: "MAESTRO_HTTP_PROXY",
     HTTPS_PROXY: "MAESTRO_HTTPS_PROXY",

package/dist/config/env-vars.js.map

@@ -1 +1 @@
-{"version":3,"file":"env-vars.js","sourceRoot":"","sources":["../../src/config/env-vars.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,MAAM,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;AAE1C;;GAEG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG;IACvB,gBAAgB;IAChB,KAAK,EAAE,eAAe;IACtB,cAAc,EAAE,wBAAwB;IACxC,OAAO,EAAE,iBAAiB;IAC1B,eAAe,EAAE,yBAAyB;IAC1C,YAAY,EAAE,sBAAsB;IAEpC,oBAAoB;IACpB,iBAAiB,EAAE,2BAA2B;IAC9C,iBAAiB,EAAE,2BAA2B;IAC9C,sBAAsB,EAAE,gCAAgC;IACxD,kBAAkB,EAAE,4BAA4B;IAChD,SAAS,EAAE,mBAAmB;IAC9B,yBAAyB,EAAE,mCAAmC;IAE9D,yBAAyB;IACzB,cAAc,EAAE,wBAAwB;IACxC,YAAY,EAAE,sBAAsB;IACpC,UAAU,EAAE,oBAAoB;IAChC,QAAQ,EAAE,kBAAkB;IAC5B,WAAW,EAAE,qBAAqB;IAElC,oBAAoB;IACpB,qBAAqB,EAAE,+BAA+B;IACtD,SAAS,EAAE,mBAAmB;IAC9B,iBAAiB,EAAE,2BAA2B;IAC9C,gBAAgB,EAAE,0BAA0B;IAE5C,wBAAwB;IACxB,UAAU,EAAE,oBAAoB;IAChC,WAAW,EAAE,qBAAqB;IAClC,WAAW,EAAE,qBAAqB;IAClC,QAAQ,EAAE,kBAAkB;IAE5B,sBAAsB;IACtB,KAAK,EAAE,eAAe;IACtB,SAAS,EAAE,mBAAmB;IAC9B,UAAU,EAAE,oBAAoB;IAEhC,wBAAwB;IACxB,UAAU,EAAE,oBAAoB;IAChC,WAAW,EAAE,qBAAqB;IAClC,aAAa,EAAE,uBAAuB;IACtC,UAAU,EAAE,oBAAoB;IAChC,WAAW,EAAE,qBAAqB;IAClC,mBAAmB,EAAE,6BAA6B;IAClD,cAAc,EAAE,wBAAwB;IACxC,kBAAkB,EAAE,4BAA4B;IAChD,qBAAqB,EAAE,+BAA+B;IACtD,wBAAwB,EAAE,kCAAkC;CACnD,CAAC;AAIX;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,IAAgB;IAC5C,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,IAAgB;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;AAClD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,IAAgB;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IACtD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5D,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAClE,OAAO,SAAS,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,IAAgB;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,OAAO,KAAK;SACV,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC/C,MAAM,OAAO,GAAG,kBAAkB,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;IAC7E,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IACzD,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAChD,MAAM,OAAO,GAAG,mBAAmB,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;IAC9E,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IACzD,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;AACzD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc;IAM7B,MAAM,MAAM,GAKR,EAAE,CAAC;IAEP,iDAAiD;IACjD,MAAM,SAAS,GACd,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,UAAU;QACtB,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IACxB,IAAI,SAAS;QAAE,MAAM,CAAC,IAAI,GAAG,SAAS,CAAC;IAEvC,MAAM,UAAU,GACf,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,WAAW;QACvB,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IACzB,IAAI,UAAU;QAAE,MAAM,CAAC,KAAK,GAAG,UAAU,CAAC;IAE1C,MAAM,UAAU,GAAG,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACtD,IAAI,UAAU;QAAE,MAAM,CAAC,KAAK,GAAG,UAAU,CAAC;IAE1C,MAAM,OAAO,GACZ,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7B,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC7C,EAAE,KAAK,CAAC,GAAG,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;IAE5D,OAAO,MAAM,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU;IACzB,OAAO,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC;AAChD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gCAAgC;IAC/C,OAAO,UAAU,CAAC,QAAQ,CAAC,yBAAyB,CAAC,IAAI,IAAI,CAAC;AAC/D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW;IAC1B,OAAO,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB;IAClC,OAAO,UAAU,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC;AACxD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB;IACpC,OAAO,UAAU,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,KAAK,CAAC;AACzD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IACjC,OAAO,SAAS,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;AAC9C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAC/B,OAAO,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;AAC9C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU;IACzB,MAAM,OAAO,GAA2B,EAAE,CAAC;IAE3C,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACzB,wBAAwB;YACxB,IACC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACvB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACzB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EACzB,CAAC;gBACF,OAAO,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACP,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACtB,CAAC;QACF,CAAC;IACF,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAC9B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,2BAA2B;IAC3B,MAAM,cAAc,GAAG,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAC9D,IACC,cAAc;QACd,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,EAC3E,CAAC;QACF,QAAQ,CAAC,IAAI,CACZ,qCAAqC,cAAc,6DAA6D,CAChH,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,MAAM,WAAW,GAAG,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACxD,IACC,WAAW;QACX,CAAC,CAAC,WAAW,EAAE,iBAAiB,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAC/D,WAAW,CACX,EACA,CAAC;QACF,QAAQ,CAAC,IAAI,CACZ,kCAAkC,WAAW,mEAAmE,CAChH,CAAC;IACH,CAAC;IAED,qBAAqB;IACrB,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,QAAQ,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxE,QAAQ,CAAC,IAAI,CACZ,+BAA+B,QAAQ,6CAA6C,CACpF,CAAC;IACH,CAAC;IAED,6BAA6B;IAC7B,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAC3D,IACC,SAAS;QACT,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAC5C,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EACnC,CAAC;QACF,QAAQ,CAAC,IAAI,CACZ,uCAAuC,SAAS,+BAA+B,CAC/E,CAAC;IACH,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC;IAED,OAAO,QAAQ,CAAC;AACjB,CAAC","sourcesContent":["/**\n * Environment Variable Configuration\n *\n * Centralized configuration for all MAESTRO_* environment variables.\n * Inspired by Claude Code's CLAUDE_CODE_* variables.\n *\n * Environment variables provide runtime configuration without modifying\n * config files. They have higher precedence than config files but lower\n * than CLI flags.\n *\n * ## Supported Variables\n *\n * ### Core Settings\n * - MAESTRO_MODEL - Override the default model\n * - MAESTRO_MODEL_PROVIDER - Override the model provider\n * - MAESTRO_PROFILE - Select a config profile\n * - MAESTRO_APPROVAL_POLICY - Set approval policy (untrusted|on-failure|on-request|never)\n * - MAESTRO_SANDBOX_MODE - Set sandbox mode (read-only|workspace-write|danger-full-access)\n *\n * ### Behavior Controls\n * - MAESTRO_MAX_OUTPUT_TOKENS - Maximum tokens for model output\n * - MAESTRO_DISABLE_TELEMETRY - Disable telemetry (1 to disable)\n * - MAESTRO_DISABLE_TERMINAL_TITLE - Don't update terminal title (1 to disable)\n * - MAESTRO_DISABLE_ANIMATIONS - Disable TUI animations (1 to disable)\n * - MAESTRO_CONTEXT_FIREWALL_BLOCKING - Enable/disable blocking of sensitive content in tool args (default: 1)\n *\n * ### Subagent Configuration\n * - MAESTRO_SUBAGENT_MODEL - Model to use for subagents\n * - MAESTRO_ORACLE_MODEL - Model to use for the Oracle tool\n *\n * ### API Configuration\n * - MAESTRO_API_KEY_HELPER_TTL_MS - Cache TTL for API key helpers\n * - MAESTRO_SKIP_AUTH - Skip authentication (for testing)\n *\n * ### Network Configuration\n * - MAESTRO_HTTP_PROXY - HTTP proxy URL\n * - MAESTRO_HTTPS_PROXY - HTTPS proxy URL\n * - MAESTRO_SOCKS_PROXY - SOCKS proxy URL\n * - MAESTRO_NO_PROXY - Comma-separated list of hosts to bypass proxy\n *\n * ### Debug Configuration\n * - MAESTRO_DEBUG - Enable debug logging (1 to enable)\n * - MAESTRO_LOG_LEVEL - Set log level (debug|info|warn|error)\n * - MAESTRO_USAGE_FILE - Path to write usage data\n *\n * ### Session Configuration\n * - MAESTRO_NO_SESSION - Disable session persistence (1 to disable)\n * - MAESTRO_SESSION_DIR - Custom session storage directory\n * - MAESTRO_SESSION_SCOPE - Scope sessions by auth subject (auth|true|1)\n * - MAESTRO_MULTI_USER - Alias for MAESTRO_SESSION_SCOPE\n * - MAESTRO_MEMORY_BASE - Durable memory service base URL\n * - MAESTRO_MEMORY_ACCESS_TOKEN - Override bearer token for durable memory service\n * - MAESTRO_MEMORY_TEAM_ID - Optional team scope for durable memory service\n * - MAESTRO_SHARED_MEMORY_BASE - Shared memory base URL (Cloudflare Durable Objects worker)\n * - MAESTRO_SHARED_MEMORY_API_KEY - API key for shared memory service\n * - MAESTRO_SHARED_MEMORY_SESSION_ID - Override session ID for shared memory sync\n *\n * ### Feature Flags\n * - MAESTRO_ENABLE_* - Enable specific features\n * - MAESTRO_DISABLE_* - Disable specific features\n */\n\nimport { createLogger } from \"../utils/logger.js\";\n\nconst logger = createLogger(\"config:env\");\n\n/**\n * All recognized MAESTRO_* environment variables.\n */\nexport const ENV_VARS = {\n\t// Core settings\n\tMODEL: \"MAESTRO_MODEL\",\n\tMODEL_PROVIDER: \"MAESTRO_MODEL_PROVIDER\",\n\tPROFILE: \"MAESTRO_PROFILE\",\n\tAPPROVAL_POLICY: \"MAESTRO_APPROVAL_POLICY\",\n\tSANDBOX_MODE: \"MAESTRO_SANDBOX_MODE\",\n\n\t// Behavior controls\n\tMAX_OUTPUT_TOKENS: \"MAESTRO_MAX_OUTPUT_TOKENS\",\n\tDISABLE_TELEMETRY: \"MAESTRO_DISABLE_TELEMETRY\",\n\tDISABLE_TERMINAL_TITLE: \"MAESTRO_DISABLE_TERMINAL_TITLE\",\n\tDISABLE_ANIMATIONS: \"MAESTRO_DISABLE_ANIMATIONS\",\n\tSAFE_MODE: \"MAESTRO_SAFE_MODE\",\n\tCONTEXT_FIREWALL_BLOCKING: \"MAESTRO_CONTEXT_FIREWALL_BLOCKING\",\n\n\t// Subagent configuration\n\tSUBAGENT_MODEL: \"MAESTRO_SUBAGENT_MODEL\",\n\tORACLE_MODEL: \"MAESTRO_ORACLE_MODEL\",\n\tSWARM_MODE: \"MAESTRO_SWARM_MODE\",\n\tSWARM_ID: \"MAESTRO_SWARM_ID\",\n\tTEAMMATE_ID: \"MAESTRO_TEAMMATE_ID\",\n\n\t// API configuration\n\tAPI_KEY_HELPER_TTL_MS: \"MAESTRO_API_KEY_HELPER_TTL_MS\",\n\tSKIP_AUTH: \"MAESTRO_SKIP_AUTH\",\n\tSKIP_BEDROCK_AUTH: \"MAESTRO_SKIP_BEDROCK_AUTH\",\n\tSKIP_VERTEX_AUTH: \"MAESTRO_SKIP_VERTEX_AUTH\",\n\n\t// Network configuration\n\tHTTP_PROXY: \"MAESTRO_HTTP_PROXY\",\n\tHTTPS_PROXY: \"MAESTRO_HTTPS_PROXY\",\n\tSOCKS_PROXY: \"MAESTRO_SOCKS_PROXY\",\n\tNO_PROXY: \"MAESTRO_NO_PROXY\",\n\n\t// Debug configuration\n\tDEBUG: \"MAESTRO_DEBUG\",\n\tLOG_LEVEL: \"MAESTRO_LOG_LEVEL\",\n\tUSAGE_FILE: \"MAESTRO_USAGE_FILE\",\n\n\t// Session configuration\n\tNO_SESSION: \"MAESTRO_NO_SESSION\",\n\tSESSION_DIR: \"MAESTRO_SESSION_DIR\",\n\tSESSION_SCOPE: \"MAESTRO_SESSION_SCOPE\",\n\tMULTI_USER: \"MAESTRO_MULTI_USER\",\n\tMEMORY_BASE: \"MAESTRO_MEMORY_BASE\",\n\tMEMORY_ACCESS_TOKEN: \"MAESTRO_MEMORY_ACCESS_TOKEN\",\n\tMEMORY_TEAM_ID: \"MAESTRO_MEMORY_TEAM_ID\",\n\tSHARED_MEMORY_BASE: \"MAESTRO_SHARED_MEMORY_BASE\",\n\tSHARED_MEMORY_API_KEY: \"MAESTRO_SHARED_MEMORY_API_KEY\",\n\tSHARED_MEMORY_SESSION_ID: \"MAESTRO_SHARED_MEMORY_SESSION_ID\",\n} as const;\n\nexport type EnvVarName = (typeof ENV_VARS)[keyof typeof ENV_VARS];\n\n/**\n * Get a string environment variable.\n */\nexport function getEnvString(name: EnvVarName): string | undefined {\n\treturn process.env[name]?.trim() || undefined;\n}\n\n/**\n * Get an integer environment variable.\n */\nexport function getEnvInt(name: EnvVarName): number | undefined {\n\tconst value = process.env[name];\n\tif (!value) return undefined;\n\tconst parsed = Number.parseInt(value, 10);\n\treturn Number.isNaN(parsed) ? undefined : parsed;\n}\n\n/**\n * Get a boolean environment variable.\n * Treats \"1\", \"true\", \"yes\" as true; \"0\", \"false\", \"no\", \"\" as false.\n */\nexport function getEnvBool(name: EnvVarName): boolean | undefined {\n\tconst value = process.env[name]?.toLowerCase().trim();\n\tif (!value) return undefined;\n\tif ([\"1\", \"true\", \"yes\", \"on\"].includes(value)) return true;\n\tif ([\"0\", \"false\", \"no\", \"off\", \"\"].includes(value)) return false;\n\treturn undefined;\n}\n\n/**\n * Get a list environment variable (comma-separated).\n */\nexport function getEnvList(name: EnvVarName): string[] | undefined {\n\tconst value = process.env[name];\n\tif (!value) return undefined;\n\treturn value\n\t\t.split(\",\")\n\t\t.map((s) => s.trim())\n\t\t.filter(Boolean);\n}\n\n/**\n * Check if a feature flag is enabled.\n * Checks MAESTRO_ENABLE_<feature> env var.\n */\nexport function isFeatureEnabled(feature: string): boolean {\n\tconst envName = `MAESTRO_ENABLE_${feature.toUpperCase().replace(/-/g, \"_\")}`;\n\tconst value = process.env[envName]?.toLowerCase().trim();\n\treturn [\"1\", \"true\", \"yes\", \"on\"].includes(value || \"\");\n}\n\n/**\n * Check if a feature flag is disabled.\n * Checks MAESTRO_DISABLE_<feature> env var.\n */\nexport function isFeatureDisabled(feature: string): boolean {\n\tconst envName = `MAESTRO_DISABLE_${feature.toUpperCase().replace(/-/g, \"_\")}`;\n\tconst value = process.env[envName]?.toLowerCase().trim();\n\treturn [\"1\", \"true\", \"yes\", \"on\"].includes(value || \"\");\n}\n\n/**\n * Get proxy configuration from environment variables.\n */\nexport function getProxyConfig(): {\n\thttp?: string;\n\thttps?: string;\n\tsocks?: string;\n\tnoProxy?: string[];\n} {\n\tconst config: {\n\t\thttp?: string;\n\t\thttps?: string;\n\t\tsocks?: string;\n\t\tnoProxy?: string[];\n\t} = {};\n\n\t// Check MAESTRO_* vars first, then standard vars\n\tconst httpProxy =\n\t\tgetEnvString(ENV_VARS.HTTP_PROXY) ||\n\t\tprocess.env.HTTP_PROXY ||\n\t\tprocess.env.http_proxy;\n\tif (httpProxy) config.http = httpProxy;\n\n\tconst httpsProxy =\n\t\tgetEnvString(ENV_VARS.HTTPS_PROXY) ||\n\t\tprocess.env.HTTPS_PROXY ||\n\t\tprocess.env.https_proxy;\n\tif (httpsProxy) config.https = httpsProxy;\n\n\tconst socksProxy = getEnvString(ENV_VARS.SOCKS_PROXY);\n\tif (socksProxy) config.socks = socksProxy;\n\n\tconst noProxy =\n\t\tgetEnvList(ENV_VARS.NO_PROXY) ||\n\t\t(process.env.NO_PROXY || process.env.no_proxy)\n\t\t\t?.split(\",\")\n\t\t\t.map((s) => s.trim())\n\t\t\t.filter(Boolean);\n\tif (noProxy && noProxy.length > 0) config.noProxy = noProxy;\n\n\treturn config;\n}\n\n/**\n * Check if we're running in safe mode.\n */\nexport function isSafeMode(): boolean {\n\treturn getEnvBool(ENV_VARS.SAFE_MODE) ?? false;\n}\n\n/**\n * Check if context firewall blocking is enabled.\n * Defaults to true (blocking enabled). Set MAESTRO_CONTEXT_FIREWALL_BLOCKING=0 to disable.\n *\n * When blocking is disabled, sensitive content (API keys, credentials) can be passed\n * through tool arguments without being blocked. This is useful for testing scenarios\n * where you intentionally want to use test API keys.\n */\nexport function isContextFirewallBlockingEnabled(): boolean {\n\treturn getEnvBool(ENV_VARS.CONTEXT_FIREWALL_BLOCKING) ?? true;\n}\n\n/**\n * Check if we're running as part of a swarm.\n */\nexport function isSwarmMode(): boolean {\n\treturn getEnvBool(ENV_VARS.SWARM_MODE) ?? false;\n}\n\n/**\n * Check if telemetry is disabled.\n */\nexport function isTelemetryDisabled(): boolean {\n\treturn getEnvBool(ENV_VARS.DISABLE_TELEMETRY) ?? false;\n}\n\n/**\n * Check if animations are disabled.\n */\nexport function areAnimationsDisabled(): boolean {\n\treturn getEnvBool(ENV_VARS.DISABLE_ANIMATIONS) ?? false;\n}\n\n/**\n * Get max output tokens configuration.\n */\nexport function getMaxOutputTokens(): number | undefined {\n\treturn getEnvInt(ENV_VARS.MAX_OUTPUT_TOKENS);\n}\n\n/**\n * Get subagent model override.\n */\nexport function getSubagentModel(): string | undefined {\n\treturn getEnvString(ENV_VARS.SUBAGENT_MODEL);\n}\n\n/**\n * Log all set MAESTRO_* environment variables (for debugging).\n */\nexport function logEnvVars(): void {\n\tconst setVars: Record<string, string> = {};\n\n\tfor (const [key, envName] of Object.entries(ENV_VARS)) {\n\t\tconst value = process.env[envName];\n\t\tif (value !== undefined) {\n\t\t\t// Mask sensitive values\n\t\t\tif (\n\t\t\t\tenvName.includes(\"KEY\") ||\n\t\t\t\tenvName.includes(\"TOKEN\") ||\n\t\t\t\tenvName.includes(\"SECRET\")\n\t\t\t) {\n\t\t\t\tsetVars[key] = \"[REDACTED]\";\n\t\t\t} else {\n\t\t\t\tsetVars[key] = value;\n\t\t\t}\n\t\t}\n\t}\n\n\tif (Object.keys(setVars).length > 0) {\n\t\tlogger.debug(\"COMPOSER environment variables\", setVars);\n\t}\n}\n\n/**\n * Validate environment variable values and warn about invalid ones.\n */\nexport function validateEnvVars(): string[] {\n\tconst warnings: string[] = [];\n\n\t// Validate APPROVAL_POLICY\n\tconst approvalPolicy = getEnvString(ENV_VARS.APPROVAL_POLICY);\n\tif (\n\t\tapprovalPolicy &&\n\t\t![\"untrusted\", \"on-failure\", \"on-request\", \"never\"].includes(approvalPolicy)\n\t) {\n\t\twarnings.push(\n\t\t\t`Invalid MAESTRO_APPROVAL_POLICY: \"${approvalPolicy}\". Must be one of: untrusted, on-failure, on-request, never`,\n\t\t);\n\t}\n\n\t// Validate SANDBOX_MODE\n\tconst sandboxMode = getEnvString(ENV_VARS.SANDBOX_MODE);\n\tif (\n\t\tsandboxMode &&\n\t\t![\"read-only\", \"workspace-write\", \"danger-full-access\"].includes(\n\t\t\tsandboxMode,\n\t\t)\n\t) {\n\t\twarnings.push(\n\t\t\t`Invalid MAESTRO_SANDBOX_MODE: \"${sandboxMode}\". Must be one of: read-only, workspace-write, danger-full-access`,\n\t\t);\n\t}\n\n\t// Validate LOG_LEVEL\n\tconst logLevel = getEnvString(ENV_VARS.LOG_LEVEL);\n\tif (logLevel && ![\"debug\", \"info\", \"warn\", \"error\"].includes(logLevel)) {\n\t\twarnings.push(\n\t\t\t`Invalid MAESTRO_LOG_LEVEL: \"${logLevel}\". Must be one of: debug, info, warn, error`,\n\t\t);\n\t}\n\n\t// Validate MAX_OUTPUT_TOKENS\n\tconst maxTokens = getEnvString(ENV_VARS.MAX_OUTPUT_TOKENS);\n\tif (\n\t\tmaxTokens &&\n\t\t(Number.isNaN(Number.parseInt(maxTokens, 10)) ||\n\t\t\tNumber.parseInt(maxTokens, 10) < 1)\n\t) {\n\t\twarnings.push(\n\t\t\t`Invalid MAESTRO_MAX_OUTPUT_TOKENS: \"${maxTokens}\". Must be a positive integer`,\n\t\t);\n\t}\n\n\tfor (const warning of warnings) {\n\t\tlogger.warn(warning);\n\t}\n\n\treturn warnings;\n}\n"]}
+{"version":3,"file":"env-vars.js","sourceRoot":"","sources":["../../src/config/env-vars.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8DG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,MAAM,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;AAE1C;;GAEG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG;IACvB,gBAAgB;IAChB,KAAK,EAAE,eAAe;IACtB,cAAc,EAAE,wBAAwB;IACxC,OAAO,EAAE,iBAAiB;IAC1B,eAAe,EAAE,yBAAyB;IAC1C,YAAY,EAAE,sBAAsB;IAEpC,oBAAoB;IACpB,iBAAiB,EAAE,2BAA2B;IAC9C,iBAAiB,EAAE,2BAA2B;IAC9C,sBAAsB,EAAE,gCAAgC;IACxD,kBAAkB,EAAE,4BAA4B;IAChD,SAAS,EAAE,mBAAmB;IAC9B,yBAAyB,EAAE,mCAAmC;IAE9D,yBAAyB;IACzB,cAAc,EAAE,wBAAwB;IACxC,YAAY,EAAE,sBAAsB;IACpC,UAAU,EAAE,oBAAoB;IAChC,QAAQ,EAAE,kBAAkB;IAC5B,WAAW,EAAE,qBAAqB;IAElC,oBAAoB;IACpB,qBAAqB,EAAE,+BAA+B;IACtD,SAAS,EAAE,mBAAmB;IAC9B,iBAAiB,EAAE,2BAA2B;IAC9C,gBAAgB,EAAE,0BAA0B;IAC5C,YAAY,EAAE,sBAAsB;IACpC,iBAAiB,EAAE,2BAA2B;IAE9C,wBAAwB;IACxB,UAAU,EAAE,oBAAoB;IAChC,WAAW,EAAE,qBAAqB;IAClC,WAAW,EAAE,qBAAqB;IAClC,QAAQ,EAAE,kBAAkB;IAE5B,sBAAsB;IACtB,KAAK,EAAE,eAAe;IACtB,SAAS,EAAE,mBAAmB;IAC9B,UAAU,EAAE,oBAAoB;IAEhC,wBAAwB;IACxB,UAAU,EAAE,oBAAoB;IAChC,WAAW,EAAE,qBAAqB;IAClC,aAAa,EAAE,uBAAuB;IACtC,UAAU,EAAE,oBAAoB;IAChC,WAAW,EAAE,qBAAqB;IAClC,mBAAmB,EAAE,6BAA6B;IAClD,cAAc,EAAE,wBAAwB;IACxC,kBAAkB,EAAE,4BAA4B;IAChD,qBAAqB,EAAE,+BAA+B;IACtD,wBAAwB,EAAE,kCAAkC;CACnD,CAAC;AAIX;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,IAAgB;IAC5C,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,IAAgB;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;AAClD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,IAAgB;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IACtD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5D,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAClE,OAAO,SAAS,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,IAAgB;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,OAAO,KAAK;SACV,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC/C,MAAM,OAAO,GAAG,kBAAkB,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;IAC7E,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IACzD,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAChD,MAAM,OAAO,GAAG,mBAAmB,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;IAC9E,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IACzD,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;AACzD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc;IAM7B,MAAM,MAAM,GAKR,EAAE,CAAC;IAEP,iDAAiD;IACjD,MAAM,SAAS,GACd,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,UAAU;QACtB,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IACxB,IAAI,SAAS;QAAE,MAAM,CAAC,IAAI,GAAG,SAAS,CAAC;IAEvC,MAAM,UAAU,GACf,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,WAAW;QACvB,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IACzB,IAAI,UAAU;QAAE,MAAM,CAAC,KAAK,GAAG,UAAU,CAAC;IAE1C,MAAM,UAAU,GAAG,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACtD,IAAI,UAAU;QAAE,MAAM,CAAC,KAAK,GAAG,UAAU,CAAC;IAE1C,MAAM,OAAO,GACZ,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7B,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC7C,EAAE,KAAK,CAAC,GAAG,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;IAE5D,OAAO,MAAM,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU;IACzB,OAAO,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC;AAChD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gCAAgC;IAC/C,OAAO,UAAU,CAAC,QAAQ,CAAC,yBAAyB,CAAC,IAAI,IAAI,CAAC;AAC/D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW;IAC1B,OAAO,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB;IAClC,OAAO,UAAU,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC;AACxD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB;IACpC,OAAO,UAAU,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,KAAK,CAAC;AACzD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IACjC,OAAO,SAAS,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;AAC9C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAC/B,OAAO,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;AAC9C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU;IACzB,MAAM,OAAO,GAA2B,EAAE,CAAC;IAE3C,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACzB,wBAAwB;YACxB,IACC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACvB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACzB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EACzB,CAAC;gBACF,OAAO,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACP,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACtB,CAAC;QACF,CAAC;IACF,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAC9B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,2BAA2B;IAC3B,MAAM,cAAc,GAAG,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAC9D,IACC,cAAc;QACd,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,EAC3E,CAAC;QACF,QAAQ,CAAC,IAAI,CACZ,qCAAqC,cAAc,6DAA6D,CAChH,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,MAAM,WAAW,GAAG,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACxD,IACC,WAAW;QACX,CAAC,CAAC,WAAW,EAAE,iBAAiB,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAC/D,WAAW,CACX,EACA,CAAC;QACF,QAAQ,CAAC,IAAI,CACZ,kCAAkC,WAAW,mEAAmE,CAChH,CAAC;IACH,CAAC;IAED,qBAAqB;IACrB,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,QAAQ,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxE,QAAQ,CAAC,IAAI,CACZ,+BAA+B,QAAQ,6CAA6C,CACpF,CAAC;IACH,CAAC;IAED,6BAA6B;IAC7B,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAC3D,IACC,SAAS;QACT,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAC5C,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EACnC,CAAC;QACF,QAAQ,CAAC,IAAI,CACZ,uCAAuC,SAAS,+BAA+B,CAC/E,CAAC;IACH,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC;IAED,OAAO,QAAQ,CAAC;AACjB,CAAC","sourcesContent":["/**\n * Environment Variable Configuration\n *\n * Centralized configuration for all MAESTRO_* environment variables.\n * Inspired by Claude Code's CLAUDE_CODE_* variables.\n *\n * Environment variables provide runtime configuration without modifying\n * config files. They have higher precedence than config files but lower\n * than CLI flags.\n *\n * ## Supported Variables\n *\n * ### Core Settings\n * - MAESTRO_MODEL - Override the default model\n * - MAESTRO_MODEL_PROVIDER - Override the model provider\n * - MAESTRO_PROFILE - Select a config profile\n * - MAESTRO_APPROVAL_POLICY - Set approval policy (untrusted|on-failure|on-request|never)\n * - MAESTRO_SANDBOX_MODE - Set sandbox mode (read-only|workspace-write|danger-full-access)\n *\n * ### Behavior Controls\n * - MAESTRO_MAX_OUTPUT_TOKENS - Maximum tokens for model output\n * - MAESTRO_DISABLE_TELEMETRY - Disable telemetry (1 to disable)\n * - MAESTRO_DISABLE_TERMINAL_TITLE - Don't update terminal title (1 to disable)\n * - MAESTRO_DISABLE_ANIMATIONS - Disable TUI animations (1 to disable)\n * - MAESTRO_CONTEXT_FIREWALL_BLOCKING - Enable/disable blocking of sensitive content in tool args (default: 1)\n *\n * ### Subagent Configuration\n * - MAESTRO_SUBAGENT_MODEL - Model to use for subagents\n * - MAESTRO_ORACLE_MODEL - Model to use for the Oracle tool\n *\n * ### API Configuration\n * - MAESTRO_API_KEY_HELPER_TTL_MS - Cache TTL for API key helpers\n * - MAESTRO_SKIP_AUTH - Skip authentication (for testing)\n * - MAESTRO_IDENTITY_URL - Override EvalOps identity base URL\n * - MAESTRO_PLATFORM_BASE_URL - Shared EvalOps Platform base URL for core services\n *\n * ### Network Configuration\n * - MAESTRO_HTTP_PROXY - HTTP proxy URL\n * - MAESTRO_HTTPS_PROXY - HTTPS proxy URL\n * - MAESTRO_SOCKS_PROXY - SOCKS proxy URL\n * - MAESTRO_NO_PROXY - Comma-separated list of hosts to bypass proxy\n *\n * ### Debug Configuration\n * - MAESTRO_DEBUG - Enable debug logging (1 to enable)\n * - MAESTRO_LOG_LEVEL - Set log level (debug|info|warn|error)\n * - MAESTRO_USAGE_FILE - Path to write usage data\n *\n * ### Session Configuration\n * - MAESTRO_NO_SESSION - Disable session persistence (1 to disable)\n * - MAESTRO_SESSION_DIR - Custom session storage directory\n * - MAESTRO_SESSION_SCOPE - Scope sessions by auth subject (auth|true|1)\n * - MAESTRO_MULTI_USER - Alias for MAESTRO_SESSION_SCOPE\n * - MAESTRO_MEMORY_BASE - Durable memory service base URL\n * - MAESTRO_MEMORY_ACCESS_TOKEN - Override bearer token for durable memory service\n * - MAESTRO_MEMORY_TEAM_ID - Optional team scope for durable memory service\n * - MAESTRO_SHARED_MEMORY_BASE - Shared memory base URL (Cloudflare Durable Objects worker)\n * - MAESTRO_SHARED_MEMORY_API_KEY - API key for shared memory service\n * - MAESTRO_SHARED_MEMORY_SESSION_ID - Override session ID for shared memory sync\n *\n * ### Feature Flags\n * - MAESTRO_ENABLE_* - Enable specific features\n * - MAESTRO_DISABLE_* - Disable specific features\n */\n\nimport { createLogger } from \"../utils/logger.js\";\n\nconst logger = createLogger(\"config:env\");\n\n/**\n * All recognized MAESTRO_* environment variables.\n */\nexport const ENV_VARS = {\n\t// Core settings\n\tMODEL: \"MAESTRO_MODEL\",\n\tMODEL_PROVIDER: \"MAESTRO_MODEL_PROVIDER\",\n\tPROFILE: \"MAESTRO_PROFILE\",\n\tAPPROVAL_POLICY: \"MAESTRO_APPROVAL_POLICY\",\n\tSANDBOX_MODE: \"MAESTRO_SANDBOX_MODE\",\n\n\t// Behavior controls\n\tMAX_OUTPUT_TOKENS: \"MAESTRO_MAX_OUTPUT_TOKENS\",\n\tDISABLE_TELEMETRY: \"MAESTRO_DISABLE_TELEMETRY\",\n\tDISABLE_TERMINAL_TITLE: \"MAESTRO_DISABLE_TERMINAL_TITLE\",\n\tDISABLE_ANIMATIONS: \"MAESTRO_DISABLE_ANIMATIONS\",\n\tSAFE_MODE: \"MAESTRO_SAFE_MODE\",\n\tCONTEXT_FIREWALL_BLOCKING: \"MAESTRO_CONTEXT_FIREWALL_BLOCKING\",\n\n\t// Subagent configuration\n\tSUBAGENT_MODEL: \"MAESTRO_SUBAGENT_MODEL\",\n\tORACLE_MODEL: \"MAESTRO_ORACLE_MODEL\",\n\tSWARM_MODE: \"MAESTRO_SWARM_MODE\",\n\tSWARM_ID: \"MAESTRO_SWARM_ID\",\n\tTEAMMATE_ID: \"MAESTRO_TEAMMATE_ID\",\n\n\t// API configuration\n\tAPI_KEY_HELPER_TTL_MS: \"MAESTRO_API_KEY_HELPER_TTL_MS\",\n\tSKIP_AUTH: \"MAESTRO_SKIP_AUTH\",\n\tSKIP_BEDROCK_AUTH: \"MAESTRO_SKIP_BEDROCK_AUTH\",\n\tSKIP_VERTEX_AUTH: \"MAESTRO_SKIP_VERTEX_AUTH\",\n\tIDENTITY_URL: \"MAESTRO_IDENTITY_URL\",\n\tPLATFORM_BASE_URL: \"MAESTRO_PLATFORM_BASE_URL\",\n\n\t// Network configuration\n\tHTTP_PROXY: \"MAESTRO_HTTP_PROXY\",\n\tHTTPS_PROXY: \"MAESTRO_HTTPS_PROXY\",\n\tSOCKS_PROXY: \"MAESTRO_SOCKS_PROXY\",\n\tNO_PROXY: \"MAESTRO_NO_PROXY\",\n\n\t// Debug configuration\n\tDEBUG: \"MAESTRO_DEBUG\",\n\tLOG_LEVEL: \"MAESTRO_LOG_LEVEL\",\n\tUSAGE_FILE: \"MAESTRO_USAGE_FILE\",\n\n\t// Session configuration\n\tNO_SESSION: \"MAESTRO_NO_SESSION\",\n\tSESSION_DIR: \"MAESTRO_SESSION_DIR\",\n\tSESSION_SCOPE: \"MAESTRO_SESSION_SCOPE\",\n\tMULTI_USER: \"MAESTRO_MULTI_USER\",\n\tMEMORY_BASE: \"MAESTRO_MEMORY_BASE\",\n\tMEMORY_ACCESS_TOKEN: \"MAESTRO_MEMORY_ACCESS_TOKEN\",\n\tMEMORY_TEAM_ID: \"MAESTRO_MEMORY_TEAM_ID\",\n\tSHARED_MEMORY_BASE: \"MAESTRO_SHARED_MEMORY_BASE\",\n\tSHARED_MEMORY_API_KEY: \"MAESTRO_SHARED_MEMORY_API_KEY\",\n\tSHARED_MEMORY_SESSION_ID: \"MAESTRO_SHARED_MEMORY_SESSION_ID\",\n} as const;\n\nexport type EnvVarName = (typeof ENV_VARS)[keyof typeof ENV_VARS];\n\n/**\n * Get a string environment variable.\n */\nexport function getEnvString(name: EnvVarName): string | undefined {\n\treturn process.env[name]?.trim() || undefined;\n}\n\n/**\n * Get an integer environment variable.\n */\nexport function getEnvInt(name: EnvVarName): number | undefined {\n\tconst value = process.env[name];\n\tif (!value) return undefined;\n\tconst parsed = Number.parseInt(value, 10);\n\treturn Number.isNaN(parsed) ? undefined : parsed;\n}\n\n/**\n * Get a boolean environment variable.\n * Treats \"1\", \"true\", \"yes\" as true; \"0\", \"false\", \"no\", \"\" as false.\n */\nexport function getEnvBool(name: EnvVarName): boolean | undefined {\n\tconst value = process.env[name]?.toLowerCase().trim();\n\tif (!value) return undefined;\n\tif ([\"1\", \"true\", \"yes\", \"on\"].includes(value)) return true;\n\tif ([\"0\", \"false\", \"no\", \"off\", \"\"].includes(value)) return false;\n\treturn undefined;\n}\n\n/**\n * Get a list environment variable (comma-separated).\n */\nexport function getEnvList(name: EnvVarName): string[] | undefined {\n\tconst value = process.env[name];\n\tif (!value) return undefined;\n\treturn value\n\t\t.split(\",\")\n\t\t.map((s) => s.trim())\n\t\t.filter(Boolean);\n}\n\n/**\n * Check if a feature flag is enabled.\n * Checks MAESTRO_ENABLE_<feature> env var.\n */\nexport function isFeatureEnabled(feature: string): boolean {\n\tconst envName = `MAESTRO_ENABLE_${feature.toUpperCase().replace(/-/g, \"_\")}`;\n\tconst value = process.env[envName]?.toLowerCase().trim();\n\treturn [\"1\", \"true\", \"yes\", \"on\"].includes(value || \"\");\n}\n\n/**\n * Check if a feature flag is disabled.\n * Checks MAESTRO_DISABLE_<feature> env var.\n */\nexport function isFeatureDisabled(feature: string): boolean {\n\tconst envName = `MAESTRO_DISABLE_${feature.toUpperCase().replace(/-/g, \"_\")}`;\n\tconst value = process.env[envName]?.toLowerCase().trim();\n\treturn [\"1\", \"true\", \"yes\", \"on\"].includes(value || \"\");\n}\n\n/**\n * Get proxy configuration from environment variables.\n */\nexport function getProxyConfig(): {\n\thttp?: string;\n\thttps?: string;\n\tsocks?: string;\n\tnoProxy?: string[];\n} {\n\tconst config: {\n\t\thttp?: string;\n\t\thttps?: string;\n\t\tsocks?: string;\n\t\tnoProxy?: string[];\n\t} = {};\n\n\t// Check MAESTRO_* vars first, then standard vars\n\tconst httpProxy =\n\t\tgetEnvString(ENV_VARS.HTTP_PROXY) ||\n\t\tprocess.env.HTTP_PROXY ||\n\t\tprocess.env.http_proxy;\n\tif (httpProxy) config.http = httpProxy;\n\n\tconst httpsProxy =\n\t\tgetEnvString(ENV_VARS.HTTPS_PROXY) ||\n\t\tprocess.env.HTTPS_PROXY ||\n\t\tprocess.env.https_proxy;\n\tif (httpsProxy) config.https = httpsProxy;\n\n\tconst socksProxy = getEnvString(ENV_VARS.SOCKS_PROXY);\n\tif (socksProxy) config.socks = socksProxy;\n\n\tconst noProxy =\n\t\tgetEnvList(ENV_VARS.NO_PROXY) ||\n\t\t(process.env.NO_PROXY || process.env.no_proxy)\n\t\t\t?.split(\",\")\n\t\t\t.map((s) => s.trim())\n\t\t\t.filter(Boolean);\n\tif (noProxy && noProxy.length > 0) config.noProxy = noProxy;\n\n\treturn config;\n}\n\n/**\n * Check if we're running in safe mode.\n */\nexport function isSafeMode(): boolean {\n\treturn getEnvBool(ENV_VARS.SAFE_MODE) ?? false;\n}\n\n/**\n * Check if context firewall blocking is enabled.\n * Defaults to true (blocking enabled). Set MAESTRO_CONTEXT_FIREWALL_BLOCKING=0 to disable.\n *\n * When blocking is disabled, sensitive content (API keys, credentials) can be passed\n * through tool arguments without being blocked. This is useful for testing scenarios\n * where you intentionally want to use test API keys.\n */\nexport function isContextFirewallBlockingEnabled(): boolean {\n\treturn getEnvBool(ENV_VARS.CONTEXT_FIREWALL_BLOCKING) ?? true;\n}\n\n/**\n * Check if we're running as part of a swarm.\n */\nexport function isSwarmMode(): boolean {\n\treturn getEnvBool(ENV_VARS.SWARM_MODE) ?? false;\n}\n\n/**\n * Check if telemetry is disabled.\n */\nexport function isTelemetryDisabled(): boolean {\n\treturn getEnvBool(ENV_VARS.DISABLE_TELEMETRY) ?? false;\n}\n\n/**\n * Check if animations are disabled.\n */\nexport function areAnimationsDisabled(): boolean {\n\treturn getEnvBool(ENV_VARS.DISABLE_ANIMATIONS) ?? false;\n}\n\n/**\n * Get max output tokens configuration.\n */\nexport function getMaxOutputTokens(): number | undefined {\n\treturn getEnvInt(ENV_VARS.MAX_OUTPUT_TOKENS);\n}\n\n/**\n * Get subagent model override.\n */\nexport function getSubagentModel(): string | undefined {\n\treturn getEnvString(ENV_VARS.SUBAGENT_MODEL);\n}\n\n/**\n * Log all set MAESTRO_* environment variables (for debugging).\n */\nexport function logEnvVars(): void {\n\tconst setVars: Record<string, string> = {};\n\n\tfor (const [key, envName] of Object.entries(ENV_VARS)) {\n\t\tconst value = process.env[envName];\n\t\tif (value !== undefined) {\n\t\t\t// Mask sensitive values\n\t\t\tif (\n\t\t\t\tenvName.includes(\"KEY\") ||\n\t\t\t\tenvName.includes(\"TOKEN\") ||\n\t\t\t\tenvName.includes(\"SECRET\")\n\t\t\t) {\n\t\t\t\tsetVars[key] = \"[REDACTED]\";\n\t\t\t} else {\n\t\t\t\tsetVars[key] = value;\n\t\t\t}\n\t\t}\n\t}\n\n\tif (Object.keys(setVars).length > 0) {\n\t\tlogger.debug(\"COMPOSER environment variables\", setVars);\n\t}\n}\n\n/**\n * Validate environment variable values and warn about invalid ones.\n */\nexport function validateEnvVars(): string[] {\n\tconst warnings: string[] = [];\n\n\t// Validate APPROVAL_POLICY\n\tconst approvalPolicy = getEnvString(ENV_VARS.APPROVAL_POLICY);\n\tif (\n\t\tapprovalPolicy &&\n\t\t![\"untrusted\", \"on-failure\", \"on-request\", \"never\"].includes(approvalPolicy)\n\t) {\n\t\twarnings.push(\n\t\t\t`Invalid MAESTRO_APPROVAL_POLICY: \"${approvalPolicy}\". Must be one of: untrusted, on-failure, on-request, never`,\n\t\t);\n\t}\n\n\t// Validate SANDBOX_MODE\n\tconst sandboxMode = getEnvString(ENV_VARS.SANDBOX_MODE);\n\tif (\n\t\tsandboxMode &&\n\t\t![\"read-only\", \"workspace-write\", \"danger-full-access\"].includes(\n\t\t\tsandboxMode,\n\t\t)\n\t) {\n\t\twarnings.push(\n\t\t\t`Invalid MAESTRO_SANDBOX_MODE: \"${sandboxMode}\". Must be one of: read-only, workspace-write, danger-full-access`,\n\t\t);\n\t}\n\n\t// Validate LOG_LEVEL\n\tconst logLevel = getEnvString(ENV_VARS.LOG_LEVEL);\n\tif (logLevel && ![\"debug\", \"info\", \"warn\", \"error\"].includes(logLevel)) {\n\t\twarnings.push(\n\t\t\t`Invalid MAESTRO_LOG_LEVEL: \"${logLevel}\". Must be one of: debug, info, warn, error`,\n\t\t);\n\t}\n\n\t// Validate MAX_OUTPUT_TOKENS\n\tconst maxTokens = getEnvString(ENV_VARS.MAX_OUTPUT_TOKENS);\n\tif (\n\t\tmaxTokens &&\n\t\t(Number.isNaN(Number.parseInt(maxTokens, 10)) ||\n\t\t\tNumber.parseInt(maxTokens, 10) < 1)\n\t) {\n\t\twarnings.push(\n\t\t\t`Invalid MAESTRO_MAX_OUTPUT_TOKENS: \"${maxTokens}\". Must be a positive integer`,\n\t\t);\n\t}\n\n\tfor (const warning of warnings) {\n\t\tlogger.warn(warning);\n\t}\n\n\treturn warnings;\n}\n"]}

package/dist/config/feature-flags.d.ts

@@ -1,8 +1,52 @@
 export declare const MAESTRO_EVALOPS_MANAGED_KILL_SWITCH = "platform.kill_switches.maestro.evalops_managed";
 export declare const MAESTRO_AUTONOMOUS_ACTIONS_KILL_SWITCH = "platform.kill_switches.maestro.autonomous_actions";
+export declare const MAESTRO_PLATFORM_RUNTIME_BRIDGE_KILL_SWITCH = "platform.kill_switches.maestro.platform_runtime_bridge";
 export declare const MAESTRO_DRAFT_AND_CONFIRM_DEFAULT_FLAG = "maestro.agent_authority.draft_and_confirm_default";
+export declare const MAESTRO_PLATFORM_RUNTIME_AGENT_RUNTIME_OBSERVE_FLAG = "maestro.platform_runtime.agent_runtime_observe";
+export declare const MAESTRO_PLATFORM_RUNTIME_TOOL_EXECUTION_BRIDGE_FLAG = "maestro.platform_runtime.tool_execution_bridge";
+export type FeatureFlagDecision = {
+    key: string;
+    metadata: Record<string, unknown>;
+    reason: string;
+    value: boolean;
+    variant: string;
+};
+export type ExperimentAssignment = {
+    assigned: boolean;
+    bucket: number;
+    experimentId: string;
+    exposureRecorded: boolean;
+    flagKey: string;
+    holdoutId?: string;
+    inHoldout: boolean;
+    layerId?: string;
+    metadata: Record<string, unknown>;
+    namespaceEnd: number;
+    namespaceStart: number;
+    reason: string;
+    subject: string;
+    variant: string;
+    variantBucket: number;
+};
+export type FeatureFlagRequestContext = {
+    attributes?: Record<string, string | number | boolean | null | undefined>;
+    subject: string;
+};
+export type FeatureFlagRemoteOptions = {
+    baseUrl?: string;
+    headers?: Record<string, string>;
+    timeoutMs?: number;
+};
 export declare function isFeatureFlagEnabled(key: string): boolean;
 export declare function areAutonomousActionsDisabled(): boolean;
 export declare function isDraftAndConfirmDefaultEnabled(): boolean;
+export declare function isPlatformRuntimeBridgeDisabled(): boolean;
+export declare function isPlatformRuntimeObserveEnabled(): boolean;
+export declare function isPlatformToolExecutionBridgeEnabled(): boolean;
+export declare function evaluateFeatureFlag(key: string, context: FeatureFlagRequestContext, defaultValue?: boolean, options?: FeatureFlagRemoteOptions): Promise<FeatureFlagDecision>;
+export declare function assignExperiment(experimentId: string, context: FeatureFlagRequestContext, options?: FeatureFlagRemoteOptions & {
+    metadata?: Record<string, unknown>;
+    recordExposure?: boolean;
+}): Promise<ExperimentAssignment>;
 export declare function resetFeatureFlagCacheForTests(): void;
 //# sourceMappingURL=feature-flags.d.ts.map

package/dist/config/feature-flags.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"feature-flags.d.ts","sourceRoot":"","sources":["../../src/config/feature-flags.ts"],"names":[],"mappings":"AAsBA,eAAO,MAAM,mCAAmC,mDACC,CAAC;AAClD,eAAO,MAAM,sCAAsC,sDACC,CAAC;AACrD,eAAO,MAAM,sCAAsC,sDACC,CAAC;AA0CrD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAczD;AAED,wBAAgB,4BAA4B,IAAI,OAAO,CAEtD;AAED,wBAAgB,+BAA+B,IAAI,OAAO,CAEzD;AAED,wBAAgB,6BAA6B,IAAI,IAAI,CAIpD"}
+{"version":3,"file":"feature-flags.d.ts","sourceRoot":"","sources":["../../src/config/feature-flags.ts"],"names":[],"mappings":"AAsBA,eAAO,MAAM,mCAAmC,mDACC,CAAC;AAClD,eAAO,MAAM,sCAAsC,sDACC,CAAC;AACrD,eAAO,MAAM,2CAA2C,2DACC,CAAC;AAC1D,eAAO,MAAM,sCAAsC,sDACC,CAAC;AACrD,eAAO,MAAM,mDAAmD,mDACf,CAAC;AAClD,eAAO,MAAM,mDAAmD,mDACf,CAAC;AAElD,MAAM,MAAM,mBAAmB,GAAG;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IAClC,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IAC1E,OAAO,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AA0EF,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAczD;AAED,wBAAgB,4BAA4B,IAAI,OAAO,CAEtD;AAED,wBAAgB,+BAA+B,IAAI,OAAO,CAEzD;AAED,wBAAgB,+BAA+B,IAAI,OAAO,CAEzD;AAED,wBAAgB,+BAA+B,IAAI,OAAO,CAIzD;AAED,wBAAgB,oCAAoC,IAAI,OAAO,CAI9D;AAED,wBAAsB,mBAAmB,CACxC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,yBAAyB,EAClC,YAAY,UAAQ,EACpB,OAAO,GAAE,wBAA6B,GACpC,OAAO,CAAC,mBAAmB,CAAC,CAkE9B;AAED,wBAAsB,gBAAgB,CACrC,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,yBAAyB,EAClC,OAAO,GAAE,wBAAwB,GAAG;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,cAAc,CAAC,EAAE,OAAO,CAAC;CACpB,GACJ,OAAO,CAAC,oBAAoB,CAAC,CAqE/B;AAuID,wBAAgB,6BAA6B,IAAI,IAAI,CAIpD"}

package/dist/config/feature-flags.js

@@ -4,11 +4,34 @@ const featureFlagCache = {
 };
 export const MAESTRO_EVALOPS_MANAGED_KILL_SWITCH = "platform.kill_switches.maestro.evalops_managed";
 export const MAESTRO_AUTONOMOUS_ACTIONS_KILL_SWITCH = "platform.kill_switches.maestro.autonomous_actions";
+export const MAESTRO_PLATFORM_RUNTIME_BRIDGE_KILL_SWITCH = "platform.kill_switches.maestro.platform_runtime_bridge";
 export const MAESTRO_DRAFT_AND_CONFIRM_DEFAULT_FLAG = "maestro.agent_authority.draft_and_confirm_default";
+export const MAESTRO_PLATFORM_RUNTIME_AGENT_RUNTIME_OBSERVE_FLAG = "maestro.platform_runtime.agent_runtime_observe";
+export const MAESTRO_PLATFORM_RUNTIME_TOOL_EXECUTION_BRIDGE_FLAG = "maestro.platform_runtime.tool_execution_bridge";
+const DEFAULT_IN_CLUSTER_FLAG_CONTROL_URL = "http://flag-control-service.evalops.svc.cluster.local:8080";
+const DEFAULT_OUT_OF_CLUSTER_FLAG_CONTROL_URL = "https://flags.internal.evalops.dev";
+const DEFAULT_REMOTE_TIMEOUT_MS = 2_000;
 function getFeatureFlagsPath() {
     const configured = process.env.EVALOPS_FEATURE_FLAGS_PATH?.trim();
     return configured ? configured : undefined;
 }
+function getFeatureFlagRemoteBaseUrl() {
+    return (process.env.EVALOPS_FEATURE_FLAGS_URL?.trim() ||
+        process.env.EVALOPS_FLAG_CONTROL_URL?.trim() ||
+        (process.env.KUBERNETES_SERVICE_HOST
+            ? DEFAULT_IN_CLUSTER_FLAG_CONTROL_URL
+            : DEFAULT_OUT_OF_CLUSTER_FLAG_CONTROL_URL)).replace(/\/+$/, "");
+}
+function getFeatureFlagRemoteHeaders(headers) {
+    const merged = { ...(headers ?? {}) };
+    const token = process.env.EVALOPS_FEATURE_FLAGS_BEARER_TOKEN?.trim() ||
+        process.env.EVALOPS_FLAG_CONTROL_BEARER_TOKEN?.trim();
+    const hasAuthorization = Object.keys(merged).some((key) => key.toLowerCase() === "authorization");
+    if (token && !hasAuthorization) {
+        merged.Authorization = `Bearer ${token}`;
+    }
+    return merged;
+}
 function readFeatureFlagSnapshot() {
     const path = getFeatureFlagsPath();
     if (!path) {
@@ -55,6 +78,197 @@ export function areAutonomousActionsDisabled() {
 export function isDraftAndConfirmDefaultEnabled() {
     return isFeatureFlagEnabled(MAESTRO_DRAFT_AND_CONFIRM_DEFAULT_FLAG);
 }
+export function isPlatformRuntimeBridgeDisabled() {
+    return isFeatureFlagEnabled(MAESTRO_PLATFORM_RUNTIME_BRIDGE_KILL_SWITCH);
+}
+export function isPlatformRuntimeObserveEnabled() {
+    return isFeatureFlagEnabled(MAESTRO_PLATFORM_RUNTIME_AGENT_RUNTIME_OBSERVE_FLAG);
+}
+export function isPlatformToolExecutionBridgeEnabled() {
+    return isFeatureFlagEnabled(MAESTRO_PLATFORM_RUNTIME_TOOL_EXECUTION_BRIDGE_FLAG);
+}
+export async function evaluateFeatureFlag(key, context, defaultValue = false, options = {}) {
+    const normalizedKey = key.trim();
+    if (!normalizedKey) {
+        return fallbackDecision(normalizedKey, context, defaultValue, "missing_key");
+    }
+    try {
+        const response = await postJSON(`${remoteBaseUrl(options)}/ofrep/v1/evaluate/flags/${encodeURIComponent(normalizedKey)}`, JSON.stringify({ context: remoteContext(context) }), options);
+        if (response.status === 404) {
+            return fallbackDecision(normalizedKey, context, defaultValue, "not_found");
+        }
+        if (!response.ok) {
+            return fallbackDecision(normalizedKey, context, defaultValue, `remote_status_${response.status}`);
+        }
+        const payload = (await response.json());
+        if (typeof payload.value !== "boolean") {
+            return fallbackDecision(normalizedKey, context, defaultValue, "invalid_remote_value");
+        }
+        const metadata = getRecord(payload.metadata);
+        return {
+            key: payload.key?.trim() || normalizedKey,
+            metadata,
+            reason: getString(metadata.flag_reason) || payload.reason?.trim() || "remote",
+            value: payload.value,
+            variant: payload.variant?.trim() || booleanVariant(payload.value),
+        };
+    }
+    catch (error) {
+        return fallbackDecision(normalizedKey, context, defaultValue, error instanceof Error ? error.message : "remote_error");
+    }
+}
+export async function assignExperiment(experimentId, context, options = {}) {
+    const normalizedExperimentId = experimentId.trim();
+    if (!normalizedExperimentId) {
+        return missingAssignment(normalizedExperimentId, context, "missing_experiment_id");
+    }
+    const subject = context.subject.trim();
+    if (!subject) {
+        return missingAssignment(normalizedExperimentId, context, "missing_subject");
+    }
+    try {
+        const response = await postJSON(`${remoteBaseUrl(options)}/api/experiments/${encodeURIComponent(normalizedExperimentId)}/assign`, JSON.stringify({
+            context: remoteContext(context),
+            metadata: options.metadata ?? {},
+            record_exposure: options.recordExposure,
+            subject,
+        }), options);
+        if (response.status === 404) {
+            return missingAssignment(normalizedExperimentId, context, "missing_experiment");
+        }
+        if (!response.ok) {
+            return missingAssignment(normalizedExperimentId, context, `remote_status_${response.status}`);
+        }
+        const payload = (await response.json());
+        return {
+            assigned: payload.assigned === true,
+            bucket: getNumber(payload.bucket),
+            experimentId: getString(payload.experiment_id) || normalizedExperimentId,
+            exposureRecorded: payload.exposure_recorded === true,
+            flagKey: getString(payload.flag_key),
+            holdoutId: getString(payload.holdout_id) || undefined,
+            inHoldout: payload.in_holdout === true,
+            layerId: getString(payload.layer_id) || undefined,
+            metadata: getRecord(payload.metadata),
+            namespaceEnd: getNumber(payload.namespace_end),
+            namespaceStart: getNumber(payload.namespace_start),
+            reason: getString(payload.reason) || "remote",
+            subject: getString(payload.subject) || subject,
+            variant: getString(payload.variant),
+            variantBucket: getNumber(payload.variant_bucket),
+        };
+    }
+    catch (error) {
+        return missingAssignment(normalizedExperimentId, context, error instanceof Error ? error.message : "remote_error");
+    }
+}
+function remoteBaseUrl(options) {
+    const configured = options.baseUrl?.trim().replace(/\/+$/, "");
+    return configured || getFeatureFlagRemoteBaseUrl();
+}
+function remoteContext(context) {
+    const remote = {};
+    for (const [key, value] of Object.entries(context.attributes ?? {})) {
+        const normalizedKey = key.trim();
+        if (!normalizedKey || value == null) {
+            continue;
+        }
+        if (normalizedKey === "subject" || normalizedKey === "targetingKey") {
+            continue;
+        }
+        if (typeof value === "string") {
+            const normalizedValue = value.trim();
+            if (normalizedValue) {
+                remote[normalizedKey] = normalizedValue;
+            }
+            continue;
+        }
+        remote[normalizedKey] = value;
+    }
+    const subject = context.subject.trim();
+    if (subject) {
+        remote.subject = subject;
+        remote.targetingKey = subject;
+    }
+    return remote;
+}
+function remoteTimeoutMs(options) {
+    if (options.timeoutMs == null) {
+        return DEFAULT_REMOTE_TIMEOUT_MS;
+    }
+    if (!Number.isFinite(options.timeoutMs) || options.timeoutMs <= 0) {
+        return undefined;
+    }
+    return Math.max(1, Math.trunc(options.timeoutMs));
+}
+async function postJSON(url, body, options) {
+    const controller = new AbortController();
+    const timeoutMs = remoteTimeoutMs(options);
+    let timeout;
+    if (timeoutMs != null) {
+        timeout = setTimeout(() => controller.abort(), timeoutMs);
+    }
+    try {
+        return await fetch(url, {
+            body,
+            headers: {
+                accept: "application/json",
+                "content-type": "application/json",
+                ...getFeatureFlagRemoteHeaders(options.headers),
+            },
+            method: "POST",
+            signal: controller.signal,
+        });
+    }
+    finally {
+        if (timeout != null) {
+            clearTimeout(timeout);
+        }
+    }
+}
+function fallbackDecision(key, context, defaultValue, reason) {
+    return {
+        key,
+        metadata: {
+            fallback_used: true,
+            flag_subject: context.subject.trim(),
+        },
+        reason,
+        value: defaultValue,
+        variant: booleanVariant(defaultValue),
+    };
+}
+function missingAssignment(experimentId, context, reason) {
+    return {
+        assigned: false,
+        bucket: 0,
+        experimentId,
+        exposureRecorded: false,
+        flagKey: "",
+        inHoldout: false,
+        metadata: { fallback_used: true },
+        namespaceEnd: 0,
+        namespaceStart: 0,
+        reason,
+        subject: context.subject.trim(),
+        variant: "",
+        variantBucket: 0,
+    };
+}
+function booleanVariant(value) {
+    return value ? "true" : "false";
+}
+function getRecord(value) {
+    return value != null && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : {};
+}
+function getString(value) {
+    return typeof value === "string" ? value.trim() : "";
+}
+function getNumber(value) {
+    return typeof value === "number" && Number.isFinite(value) ? value : 0;
+}
 export function resetFeatureFlagCacheForTests() {
     featureFlagCache.lastKnownSnapshot = null;
     featureFlagCache.lastPath = undefined;

package/dist/config/feature-flags.js.map

@@ -1 +1 @@
-{"version":3,"file":"feature-flags.js","sourceRoot":"","sources":["../../src/config/feature-flags.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAkBjD,MAAM,gBAAgB,GAAqB;IAC1C,iBAAiB,EAAE,IAAI;CACvB,CAAC;AAEF,MAAM,CAAC,MAAM,mCAAmC,GAC/C,gDAAgD,CAAC;AAClD,MAAM,CAAC,MAAM,sCAAsC,GAClD,mDAAmD,CAAC;AACrD,MAAM,CAAC,MAAM,sCAAsC,GAClD,mDAAmD,CAAC;AAErD,SAAS,mBAAmB;IAC3B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,IAAI,EAAE,CAAC;IAClE,OAAO,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5C,CAAC;AAED,SAAS,uBAAuB;IAC/B,MAAM,IAAI,GAAG,mBAAmB,EAAE,CAAC;IACnC,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,gBAAgB,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC1C,gBAAgB,CAAC,QAAQ,GAAG,SAAS,CAAC;QACtC,gBAAgB,CAAC,eAAe,GAAG,SAAS,CAAC;QAC7C,OAAO,IAAI,CAAC;IACb,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC7B,IACC,gBAAgB,CAAC,QAAQ,KAAK,IAAI;YAClC,gBAAgB,CAAC,eAAe,KAAK,KAAK,CAAC,OAAO,EACjD,CAAC;YACF,OAAO,gBAAgB,CAAC,iBAAiB,CAAC;QAC3C,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAC1B,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CACH,CAAC;QACzB,gBAAgB,CAAC,iBAAiB,GAAG,QAAQ,CAAC;QAC9C,gBAAgB,CAAC,QAAQ,GAAG,IAAI,CAAC;QACjC,gBAAgB,CAAC,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC;QACjD,OAAO,QAAQ,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACR,IAAI,gBAAgB,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YACxC,gBAAgB,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC3C,CAAC;QACD,gBAAgB,CAAC,QAAQ,GAAG,IAAI,CAAC;QACjC,gBAAgB,CAAC,eAAe,GAAG,SAAS,CAAC;QAC7C,OAAO,gBAAgB,CAAC,iBAAiB,CAAC;IAC3C,CAAC;AACF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC/C,MAAM,aAAa,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,aAAa,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,uBAAuB,EAAE,CAAC;IAC3C,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACd,CAAC;IAED,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,CACzB,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,aAAa,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,CACtE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B;IAC3C,OAAO,oBAAoB,CAAC,sCAAsC,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,+BAA+B;IAC9C,OAAO,oBAAoB,CAAC,sCAAsC,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,6BAA6B;IAC5C,gBAAgB,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAC1C,gBAAgB,CAAC,QAAQ,GAAG,SAAS,CAAC;IACtC,gBAAgB,CAAC,eAAe,GAAG,SAAS,CAAC;AAC9C,CAAC","sourcesContent":["import { readFileSync, statSync } from \"node:fs\";\n\ntype FeatureFlag = {\n\tenabled?: boolean;\n\tkey?: string;\n};\n\ntype FeatureFlagSnapshot = {\n\tflags?: FeatureFlag[];\n\tschema_version?: number;\n};\n\ntype FeatureFlagCache = {\n\tlastKnownSnapshot: FeatureFlagSnapshot | null;\n\tlastPath?: string;\n\tlastStatMtimeMs?: number;\n};\n\nconst featureFlagCache: FeatureFlagCache = {\n\tlastKnownSnapshot: null,\n};\n\nexport const MAESTRO_EVALOPS_MANAGED_KILL_SWITCH =\n\t\"platform.kill_switches.maestro.evalops_managed\";\nexport const MAESTRO_AUTONOMOUS_ACTIONS_KILL_SWITCH =\n\t\"platform.kill_switches.maestro.autonomous_actions\";\nexport const MAESTRO_DRAFT_AND_CONFIRM_DEFAULT_FLAG =\n\t\"maestro.agent_authority.draft_and_confirm_default\";\n\nfunction getFeatureFlagsPath(): string | undefined {\n\tconst configured = process.env.EVALOPS_FEATURE_FLAGS_PATH?.trim();\n\treturn configured ? configured : undefined;\n}\n\nfunction readFeatureFlagSnapshot(): FeatureFlagSnapshot | null {\n\tconst path = getFeatureFlagsPath();\n\tif (!path) {\n\t\tfeatureFlagCache.lastKnownSnapshot = null;\n\t\tfeatureFlagCache.lastPath = undefined;\n\t\tfeatureFlagCache.lastStatMtimeMs = undefined;\n\t\treturn null;\n\t}\n\n\ttry {\n\t\tconst stats = statSync(path);\n\t\tif (\n\t\t\tfeatureFlagCache.lastPath === path &&\n\t\t\tfeatureFlagCache.lastStatMtimeMs === stats.mtimeMs\n\t\t) {\n\t\t\treturn featureFlagCache.lastKnownSnapshot;\n\t\t}\n\n\t\tconst snapshot = JSON.parse(\n\t\t\treadFileSync(path, \"utf8\"),\n\t\t) as FeatureFlagSnapshot;\n\t\tfeatureFlagCache.lastKnownSnapshot = snapshot;\n\t\tfeatureFlagCache.lastPath = path;\n\t\tfeatureFlagCache.lastStatMtimeMs = stats.mtimeMs;\n\t\treturn snapshot;\n\t} catch {\n\t\tif (featureFlagCache.lastPath !== path) {\n\t\t\tfeatureFlagCache.lastKnownSnapshot = null;\n\t\t}\n\t\tfeatureFlagCache.lastPath = path;\n\t\tfeatureFlagCache.lastStatMtimeMs = undefined;\n\t\treturn featureFlagCache.lastKnownSnapshot;\n\t}\n}\n\nexport function isFeatureFlagEnabled(key: string): boolean {\n\tconst normalizedKey = key.trim();\n\tif (!normalizedKey) {\n\t\treturn false;\n\t}\n\n\tconst snapshot = readFeatureFlagSnapshot();\n\tif (!snapshot?.flags?.length) {\n\t\treturn false;\n\t}\n\n\treturn snapshot.flags.some(\n\t\t(flag) => flag?.key?.trim() === normalizedKey && flag.enabled === true,\n\t);\n}\n\nexport function areAutonomousActionsDisabled(): boolean {\n\treturn isFeatureFlagEnabled(MAESTRO_AUTONOMOUS_ACTIONS_KILL_SWITCH);\n}\n\nexport function isDraftAndConfirmDefaultEnabled(): boolean {\n\treturn isFeatureFlagEnabled(MAESTRO_DRAFT_AND_CONFIRM_DEFAULT_FLAG);\n}\n\nexport function resetFeatureFlagCacheForTests(): void {\n\tfeatureFlagCache.lastKnownSnapshot = null;\n\tfeatureFlagCache.lastPath = undefined;\n\tfeatureFlagCache.lastStatMtimeMs = undefined;\n}\n"]}
+{"version":3,"file":"feature-flags.js","sourceRoot":"","sources":["../../src/config/feature-flags.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAkBjD,MAAM,gBAAgB,GAAqB;IAC1C,iBAAiB,EAAE,IAAI;CACvB,CAAC;AAEF,MAAM,CAAC,MAAM,mCAAmC,GAC/C,gDAAgD,CAAC;AAClD,MAAM,CAAC,MAAM,sCAAsC,GAClD,mDAAmD,CAAC;AACrD,MAAM,CAAC,MAAM,2CAA2C,GACvD,wDAAwD,CAAC;AAC1D,MAAM,CAAC,MAAM,sCAAsC,GAClD,mDAAmD,CAAC;AACrD,MAAM,CAAC,MAAM,mDAAmD,GAC/D,gDAAgD,CAAC;AAClD,MAAM,CAAC,MAAM,mDAAmD,GAC/D,gDAAgD,CAAC;AAuClD,MAAM,mCAAmC,GACxC,4DAA4D,CAAC;AAC9D,MAAM,uCAAuC,GAC5C,oCAAoC,CAAC;AACtC,MAAM,yBAAyB,GAAG,KAAK,CAAC;AAExC,SAAS,mBAAmB;IAC3B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,IAAI,EAAE,CAAC;IAClE,OAAO,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5C,CAAC;AAED,SAAS,2BAA2B;IACnC,OAAO,CACN,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,IAAI,EAAE;QAC7C,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE;QAC5C,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB;YACnC,CAAC,CAAC,mCAAmC;YACrC,CAAC,CAAC,uCAAuC,CAAC,CAC3C,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,2BAA2B,CACnC,OAAgC;IAEhC,MAAM,MAAM,GAA2B,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;IAC9D,MAAM,KAAK,GACV,OAAO,CAAC,GAAG,CAAC,kCAAkC,EAAE,IAAI,EAAE;QACtD,OAAO,CAAC,GAAG,CAAC,iCAAiC,EAAE,IAAI,EAAE,CAAC;IACvD,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAChD,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,eAAe,CAC9C,CAAC;IACF,IAAI,KAAK,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAChC,MAAM,CAAC,aAAa,GAAG,UAAU,KAAK,EAAE,CAAC;IAC1C,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,uBAAuB;IAC/B,MAAM,IAAI,GAAG,mBAAmB,EAAE,CAAC;IACnC,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,gBAAgB,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC1C,gBAAgB,CAAC,QAAQ,GAAG,SAAS,CAAC;QACtC,gBAAgB,CAAC,eAAe,GAAG,SAAS,CAAC;QAC7C,OAAO,IAAI,CAAC;IACb,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC7B,IACC,gBAAgB,CAAC,QAAQ,KAAK,IAAI;YAClC,gBAAgB,CAAC,eAAe,KAAK,KAAK,CAAC,OAAO,EACjD,CAAC;YACF,OAAO,gBAAgB,CAAC,iBAAiB,CAAC;QAC3C,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAC1B,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CACH,CAAC;QACzB,gBAAgB,CAAC,iBAAiB,GAAG,QAAQ,CAAC;QAC9C,gBAAgB,CAAC,QAAQ,GAAG,IAAI,CAAC;QACjC,gBAAgB,CAAC,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC;QACjD,OAAO,QAAQ,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACR,IAAI,gBAAgB,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YACxC,gBAAgB,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC3C,CAAC;QACD,gBAAgB,CAAC,QAAQ,GAAG,IAAI,CAAC;QACjC,gBAAgB,CAAC,eAAe,GAAG,SAAS,CAAC;QAC7C,OAAO,gBAAgB,CAAC,iBAAiB,CAAC;IAC3C,CAAC;AACF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC/C,MAAM,aAAa,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,aAAa,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,uBAAuB,EAAE,CAAC;IAC3C,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACd,CAAC;IAED,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,CACzB,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,aAAa,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,CACtE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B;IAC3C,OAAO,oBAAoB,CAAC,sCAAsC,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,+BAA+B;IAC9C,OAAO,oBAAoB,CAAC,sCAAsC,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,+BAA+B;IAC9C,OAAO,oBAAoB,CAAC,2CAA2C,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,+BAA+B;IAC9C,OAAO,oBAAoB,CAC1B,mDAAmD,CACnD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oCAAoC;IACnD,OAAO,oBAAoB,CAC1B,mDAAmD,CACnD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,GAAW,EACX,OAAkC,EAClC,YAAY,GAAG,KAAK,EACpB,UAAoC,EAAE;IAEtC,MAAM,aAAa,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,aAAa,EAAE,CAAC;QACpB,OAAO,gBAAgB,CACtB,aAAa,EACb,OAAO,EACP,YAAY,EACZ,aAAa,CACb,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAC9B,GAAG,aAAa,CAAC,OAAO,CAAC,4BAA4B,kBAAkB,CAAC,aAAa,CAAC,EAAE,EACxF,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,EACnD,OAAO,CACP,CAAC;QACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC7B,OAAO,gBAAgB,CACtB,aAAa,EACb,OAAO,EACP,YAAY,EACZ,WAAW,CACX,CAAC;QACH,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO,gBAAgB,CACtB,aAAa,EACb,OAAO,EACP,YAAY,EACZ,iBAAiB,QAAQ,CAAC,MAAM,EAAE,CAClC,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAMrC,CAAC;QACF,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACxC,OAAO,gBAAgB,CACtB,aAAa,EACb,OAAO,EACP,YAAY,EACZ,sBAAsB,CACtB,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC7C,OAAO;YACN,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,aAAa;YACzC,QAAQ;YACR,MAAM,EACL,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,QAAQ;YACtE,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC;SACjE,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,gBAAgB,CACtB,aAAa,EACb,OAAO,EACP,YAAY,EACZ,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CACvD,CAAC;IACH,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,YAAoB,EACpB,OAAkC,EAClC,UAGI,EAAE;IAEN,MAAM,sBAAsB,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC;IACnD,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC7B,OAAO,iBAAiB,CACvB,sBAAsB,EACtB,OAAO,EACP,uBAAuB,CACvB,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,OAAO,iBAAiB,CACvB,sBAAsB,EACtB,OAAO,EACP,iBAAiB,CACjB,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAC9B,GAAG,aAAa,CAAC,OAAO,CAAC,oBAAoB,kBAAkB,CAAC,sBAAsB,CAAC,SAAS,EAChG,IAAI,CAAC,SAAS,CAAC;YACd,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC;YAC/B,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;YAChC,eAAe,EAAE,OAAO,CAAC,cAAc;YACvC,OAAO;SACP,CAAC,EACF,OAAO,CACP,CAAC;QACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC7B,OAAO,iBAAiB,CACvB,sBAAsB,EACtB,OAAO,EACP,oBAAoB,CACpB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO,iBAAiB,CACvB,sBAAsB,EACtB,OAAO,EACP,iBAAiB,QAAQ,CAAC,MAAM,EAAE,CAClC,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAC;QACnE,OAAO;YACN,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,IAAI;YACnC,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC;YACjC,YAAY,EAAE,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,sBAAsB;YACxE,gBAAgB,EAAE,OAAO,CAAC,iBAAiB,KAAK,IAAI;YACpD,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC;YACpC,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,SAAS;YACrD,SAAS,EAAE,OAAO,CAAC,UAAU,KAAK,IAAI;YACtC,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,SAAS;YACjD,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC;YACrC,YAAY,EAAE,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC;YAC9C,cAAc,EAAE,SAAS,CAAC,OAAO,CAAC,eAAe,CAAC;YAClD,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,QAAQ;YAC7C,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO;YAC9C,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC;YACnC,aAAa,EAAE,SAAS,CAAC,OAAO,CAAC,cAAc,CAAC;SAChD,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,iBAAiB,CACvB,sBAAsB,EACtB,OAAO,EACP,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CACvD,CAAC;IACH,CAAC;AACF,CAAC;AAED,SAAS,aAAa,CAAC,OAAiC;IACvD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC/D,OAAO,UAAU,IAAI,2BAA2B,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,aAAa,CACrB,OAAkC;IAElC,MAAM,MAAM,GAA8C,EAAE,CAAC;IAC7D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;QACrE,MAAM,aAAa,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,aAAa,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;YACrC,SAAS;QACV,CAAC;QACD,IAAI,aAAa,KAAK,SAAS,IAAI,aAAa,KAAK,cAAc,EAAE,CAAC;YACrE,SAAS;QACV,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;YACrC,IAAI,eAAe,EAAE,CAAC;gBACrB,MAAM,CAAC,aAAa,CAAC,GAAG,eAAe,CAAC;YACzC,CAAC;YACD,SAAS;QACV,CAAC;QACD,MAAM,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC;IAC/B,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,OAAO,EAAE,CAAC;QACb,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;QACzB,MAAM,CAAC,YAAY,GAAG,OAAO,CAAC;IAC/B,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CACvB,OAAiC;IAEjC,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC;QAC/B,OAAO,yBAAyB,CAAC;IAClC,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,SAAS,IAAI,CAAC,EAAE,CAAC;QACnE,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,QAAQ,CACtB,GAAW,EACX,IAAY,EACZ,OAAiC;IAEjC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,OAAkD,CAAC;IACvD,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;QACvB,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC;QACJ,OAAO,MAAM,KAAK,CAAC,GAAG,EAAE;YACvB,IAAI;YACJ,OAAO,EAAE;gBACR,MAAM,EAAE,kBAAkB;gBAC1B,cAAc,EAAE,kBAAkB;gBAClC,GAAG,2BAA2B,CAAC,OAAO,CAAC,OAAO,CAAC;aAC/C;YACD,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,UAAU,CAAC,MAAM;SACzB,CAAC,CAAC;IACJ,CAAC;YAAS,CAAC;QACV,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACrB,YAAY,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;IACF,CAAC;AACF,CAAC;AAED,SAAS,gBAAgB,CACxB,GAAW,EACX,OAAkC,EAClC,YAAqB,EACrB,MAAc;IAEd,OAAO;QACN,GAAG;QACH,QAAQ,EAAE;YACT,aAAa,EAAE,IAAI;YACnB,YAAY,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE;SACpC;QACD,MAAM;QACN,KAAK,EAAE,YAAY;QACnB,OAAO,EAAE,cAAc,CAAC,YAAY,CAAC;KACrC,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CACzB,YAAoB,EACpB,OAAkC,EAClC,MAAc;IAEd,OAAO;QACN,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,CAAC;QACT,YAAY;QACZ,gBAAgB,EAAE,KAAK;QACvB,OAAO,EAAE,EAAE;QACX,SAAS,EAAE,KAAK;QAChB,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE;QACjC,YAAY,EAAE,CAAC;QACf,cAAc,EAAE,CAAC;QACjB,MAAM;QACN,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE;QAC/B,OAAO,EAAE,EAAE;QACX,aAAa,EAAE,CAAC;KAChB,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACrC,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;AACjC,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAChC,OAAO,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,EAAE,CAAC;AACP,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,6BAA6B;IAC5C,gBAAgB,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAC1C,gBAAgB,CAAC,QAAQ,GAAG,SAAS,CAAC;IACtC,gBAAgB,CAAC,eAAe,GAAG,SAAS,CAAC;AAC9C,CAAC","sourcesContent":["import { readFileSync, statSync } from \"node:fs\";\n\ntype FeatureFlag = {\n\tenabled?: boolean;\n\tkey?: string;\n};\n\ntype FeatureFlagSnapshot = {\n\tflags?: FeatureFlag[];\n\tschema_version?: number;\n};\n\ntype FeatureFlagCache = {\n\tlastKnownSnapshot: FeatureFlagSnapshot | null;\n\tlastPath?: string;\n\tlastStatMtimeMs?: number;\n};\n\nconst featureFlagCache: FeatureFlagCache = {\n\tlastKnownSnapshot: null,\n};\n\nexport const MAESTRO_EVALOPS_MANAGED_KILL_SWITCH =\n\t\"platform.kill_switches.maestro.evalops_managed\";\nexport const MAESTRO_AUTONOMOUS_ACTIONS_KILL_SWITCH =\n\t\"platform.kill_switches.maestro.autonomous_actions\";\nexport const MAESTRO_PLATFORM_RUNTIME_BRIDGE_KILL_SWITCH =\n\t\"platform.kill_switches.maestro.platform_runtime_bridge\";\nexport const MAESTRO_DRAFT_AND_CONFIRM_DEFAULT_FLAG =\n\t\"maestro.agent_authority.draft_and_confirm_default\";\nexport const MAESTRO_PLATFORM_RUNTIME_AGENT_RUNTIME_OBSERVE_FLAG =\n\t\"maestro.platform_runtime.agent_runtime_observe\";\nexport const MAESTRO_PLATFORM_RUNTIME_TOOL_EXECUTION_BRIDGE_FLAG =\n\t\"maestro.platform_runtime.tool_execution_bridge\";\n\nexport type FeatureFlagDecision = {\n\tkey: string;\n\tmetadata: Record<string, unknown>;\n\treason: string;\n\tvalue: boolean;\n\tvariant: string;\n};\n\nexport type ExperimentAssignment = {\n\tassigned: boolean;\n\tbucket: number;\n\texperimentId: string;\n\texposureRecorded: boolean;\n\tflagKey: string;\n\tholdoutId?: string;\n\tinHoldout: boolean;\n\tlayerId?: string;\n\tmetadata: Record<string, unknown>;\n\tnamespaceEnd: number;\n\tnamespaceStart: number;\n\treason: string;\n\tsubject: string;\n\tvariant: string;\n\tvariantBucket: number;\n};\n\nexport type FeatureFlagRequestContext = {\n\tattributes?: Record<string, string | number | boolean | null | undefined>;\n\tsubject: string;\n};\n\nexport type FeatureFlagRemoteOptions = {\n\tbaseUrl?: string;\n\theaders?: Record<string, string>;\n\ttimeoutMs?: number;\n};\n\nconst DEFAULT_IN_CLUSTER_FLAG_CONTROL_URL =\n\t\"http://flag-control-service.evalops.svc.cluster.local:8080\";\nconst DEFAULT_OUT_OF_CLUSTER_FLAG_CONTROL_URL =\n\t\"https://flags.internal.evalops.dev\";\nconst DEFAULT_REMOTE_TIMEOUT_MS = 2_000;\n\nfunction getFeatureFlagsPath(): string | undefined {\n\tconst configured = process.env.EVALOPS_FEATURE_FLAGS_PATH?.trim();\n\treturn configured ? configured : undefined;\n}\n\nfunction getFeatureFlagRemoteBaseUrl(): string {\n\treturn (\n\t\tprocess.env.EVALOPS_FEATURE_FLAGS_URL?.trim() ||\n\t\tprocess.env.EVALOPS_FLAG_CONTROL_URL?.trim() ||\n\t\t(process.env.KUBERNETES_SERVICE_HOST\n\t\t\t? DEFAULT_IN_CLUSTER_FLAG_CONTROL_URL\n\t\t\t: DEFAULT_OUT_OF_CLUSTER_FLAG_CONTROL_URL)\n\t).replace(/\\/+$/, \"\");\n}\n\nfunction getFeatureFlagRemoteHeaders(\n\theaders?: Record<string, string>,\n): Record<string, string> {\n\tconst merged: Record<string, string> = { ...(headers ?? {}) };\n\tconst token =\n\t\tprocess.env.EVALOPS_FEATURE_FLAGS_BEARER_TOKEN?.trim() ||\n\t\tprocess.env.EVALOPS_FLAG_CONTROL_BEARER_TOKEN?.trim();\n\tconst hasAuthorization = Object.keys(merged).some(\n\t\t(key) => key.toLowerCase() === \"authorization\",\n\t);\n\tif (token && !hasAuthorization) {\n\t\tmerged.Authorization = `Bearer ${token}`;\n\t}\n\treturn merged;\n}\n\nfunction readFeatureFlagSnapshot(): FeatureFlagSnapshot | null {\n\tconst path = getFeatureFlagsPath();\n\tif (!path) {\n\t\tfeatureFlagCache.lastKnownSnapshot = null;\n\t\tfeatureFlagCache.lastPath = undefined;\n\t\tfeatureFlagCache.lastStatMtimeMs = undefined;\n\t\treturn null;\n\t}\n\n\ttry {\n\t\tconst stats = statSync(path);\n\t\tif (\n\t\t\tfeatureFlagCache.lastPath === path &&\n\t\t\tfeatureFlagCache.lastStatMtimeMs === stats.mtimeMs\n\t\t) {\n\t\t\treturn featureFlagCache.lastKnownSnapshot;\n\t\t}\n\n\t\tconst snapshot = JSON.parse(\n\t\t\treadFileSync(path, \"utf8\"),\n\t\t) as FeatureFlagSnapshot;\n\t\tfeatureFlagCache.lastKnownSnapshot = snapshot;\n\t\tfeatureFlagCache.lastPath = path;\n\t\tfeatureFlagCache.lastStatMtimeMs = stats.mtimeMs;\n\t\treturn snapshot;\n\t} catch {\n\t\tif (featureFlagCache.lastPath !== path) {\n\t\t\tfeatureFlagCache.lastKnownSnapshot = null;\n\t\t}\n\t\tfeatureFlagCache.lastPath = path;\n\t\tfeatureFlagCache.lastStatMtimeMs = undefined;\n\t\treturn featureFlagCache.lastKnownSnapshot;\n\t}\n}\n\nexport function isFeatureFlagEnabled(key: string): boolean {\n\tconst normalizedKey = key.trim();\n\tif (!normalizedKey) {\n\t\treturn false;\n\t}\n\n\tconst snapshot = readFeatureFlagSnapshot();\n\tif (!snapshot?.flags?.length) {\n\t\treturn false;\n\t}\n\n\treturn snapshot.flags.some(\n\t\t(flag) => flag?.key?.trim() === normalizedKey && flag.enabled === true,\n\t);\n}\n\nexport function areAutonomousActionsDisabled(): boolean {\n\treturn isFeatureFlagEnabled(MAESTRO_AUTONOMOUS_ACTIONS_KILL_SWITCH);\n}\n\nexport function isDraftAndConfirmDefaultEnabled(): boolean {\n\treturn isFeatureFlagEnabled(MAESTRO_DRAFT_AND_CONFIRM_DEFAULT_FLAG);\n}\n\nexport function isPlatformRuntimeBridgeDisabled(): boolean {\n\treturn isFeatureFlagEnabled(MAESTRO_PLATFORM_RUNTIME_BRIDGE_KILL_SWITCH);\n}\n\nexport function isPlatformRuntimeObserveEnabled(): boolean {\n\treturn isFeatureFlagEnabled(\n\t\tMAESTRO_PLATFORM_RUNTIME_AGENT_RUNTIME_OBSERVE_FLAG,\n\t);\n}\n\nexport function isPlatformToolExecutionBridgeEnabled(): boolean {\n\treturn isFeatureFlagEnabled(\n\t\tMAESTRO_PLATFORM_RUNTIME_TOOL_EXECUTION_BRIDGE_FLAG,\n\t);\n}\n\nexport async function evaluateFeatureFlag(\n\tkey: string,\n\tcontext: FeatureFlagRequestContext,\n\tdefaultValue = false,\n\toptions: FeatureFlagRemoteOptions = {},\n): Promise<FeatureFlagDecision> {\n\tconst normalizedKey = key.trim();\n\tif (!normalizedKey) {\n\t\treturn fallbackDecision(\n\t\t\tnormalizedKey,\n\t\t\tcontext,\n\t\t\tdefaultValue,\n\t\t\t\"missing_key\",\n\t\t);\n\t}\n\n\ttry {\n\t\tconst response = await postJSON(\n\t\t\t`${remoteBaseUrl(options)}/ofrep/v1/evaluate/flags/${encodeURIComponent(normalizedKey)}`,\n\t\t\tJSON.stringify({ context: remoteContext(context) }),\n\t\t\toptions,\n\t\t);\n\t\tif (response.status === 404) {\n\t\t\treturn fallbackDecision(\n\t\t\t\tnormalizedKey,\n\t\t\t\tcontext,\n\t\t\t\tdefaultValue,\n\t\t\t\t\"not_found\",\n\t\t\t);\n\t\t}\n\t\tif (!response.ok) {\n\t\t\treturn fallbackDecision(\n\t\t\t\tnormalizedKey,\n\t\t\t\tcontext,\n\t\t\t\tdefaultValue,\n\t\t\t\t`remote_status_${response.status}`,\n\t\t\t);\n\t\t}\n\n\t\tconst payload = (await response.json()) as {\n\t\t\tkey?: string;\n\t\t\tmetadata?: Record<string, unknown>;\n\t\t\treason?: string;\n\t\t\tvalue?: unknown;\n\t\t\tvariant?: string;\n\t\t};\n\t\tif (typeof payload.value !== \"boolean\") {\n\t\t\treturn fallbackDecision(\n\t\t\t\tnormalizedKey,\n\t\t\t\tcontext,\n\t\t\t\tdefaultValue,\n\t\t\t\t\"invalid_remote_value\",\n\t\t\t);\n\t\t}\n\t\tconst metadata = getRecord(payload.metadata);\n\t\treturn {\n\t\t\tkey: payload.key?.trim() || normalizedKey,\n\t\t\tmetadata,\n\t\t\treason:\n\t\t\t\tgetString(metadata.flag_reason) || payload.reason?.trim() || \"remote\",\n\t\t\tvalue: payload.value,\n\t\t\tvariant: payload.variant?.trim() || booleanVariant(payload.value),\n\t\t};\n\t} catch (error) {\n\t\treturn fallbackDecision(\n\t\t\tnormalizedKey,\n\t\t\tcontext,\n\t\t\tdefaultValue,\n\t\t\terror instanceof Error ? error.message : \"remote_error\",\n\t\t);\n\t}\n}\n\nexport async function assignExperiment(\n\texperimentId: string,\n\tcontext: FeatureFlagRequestContext,\n\toptions: FeatureFlagRemoteOptions & {\n\t\tmetadata?: Record<string, unknown>;\n\t\trecordExposure?: boolean;\n\t} = {},\n): Promise<ExperimentAssignment> {\n\tconst normalizedExperimentId = experimentId.trim();\n\tif (!normalizedExperimentId) {\n\t\treturn missingAssignment(\n\t\t\tnormalizedExperimentId,\n\t\t\tcontext,\n\t\t\t\"missing_experiment_id\",\n\t\t);\n\t}\n\tconst subject = context.subject.trim();\n\tif (!subject) {\n\t\treturn missingAssignment(\n\t\t\tnormalizedExperimentId,\n\t\t\tcontext,\n\t\t\t\"missing_subject\",\n\t\t);\n\t}\n\n\ttry {\n\t\tconst response = await postJSON(\n\t\t\t`${remoteBaseUrl(options)}/api/experiments/${encodeURIComponent(normalizedExperimentId)}/assign`,\n\t\t\tJSON.stringify({\n\t\t\t\tcontext: remoteContext(context),\n\t\t\t\tmetadata: options.metadata ?? {},\n\t\t\t\trecord_exposure: options.recordExposure,\n\t\t\t\tsubject,\n\t\t\t}),\n\t\t\toptions,\n\t\t);\n\t\tif (response.status === 404) {\n\t\t\treturn missingAssignment(\n\t\t\t\tnormalizedExperimentId,\n\t\t\t\tcontext,\n\t\t\t\t\"missing_experiment\",\n\t\t\t);\n\t\t}\n\t\tif (!response.ok) {\n\t\t\treturn missingAssignment(\n\t\t\t\tnormalizedExperimentId,\n\t\t\t\tcontext,\n\t\t\t\t`remote_status_${response.status}`,\n\t\t\t);\n\t\t}\n\n\t\tconst payload = (await response.json()) as Record<string, unknown>;\n\t\treturn {\n\t\t\tassigned: payload.assigned === true,\n\t\t\tbucket: getNumber(payload.bucket),\n\t\t\texperimentId: getString(payload.experiment_id) || normalizedExperimentId,\n\t\t\texposureRecorded: payload.exposure_recorded === true,\n\t\t\tflagKey: getString(payload.flag_key),\n\t\t\tholdoutId: getString(payload.holdout_id) || undefined,\n\t\t\tinHoldout: payload.in_holdout === true,\n\t\t\tlayerId: getString(payload.layer_id) || undefined,\n\t\t\tmetadata: getRecord(payload.metadata),\n\t\t\tnamespaceEnd: getNumber(payload.namespace_end),\n\t\t\tnamespaceStart: getNumber(payload.namespace_start),\n\t\t\treason: getString(payload.reason) || \"remote\",\n\t\t\tsubject: getString(payload.subject) || subject,\n\t\t\tvariant: getString(payload.variant),\n\t\t\tvariantBucket: getNumber(payload.variant_bucket),\n\t\t};\n\t} catch (error) {\n\t\treturn missingAssignment(\n\t\t\tnormalizedExperimentId,\n\t\t\tcontext,\n\t\t\terror instanceof Error ? error.message : \"remote_error\",\n\t\t);\n\t}\n}\n\nfunction remoteBaseUrl(options: FeatureFlagRemoteOptions): string {\n\tconst configured = options.baseUrl?.trim().replace(/\\/+$/, \"\");\n\treturn configured || getFeatureFlagRemoteBaseUrl();\n}\n\nfunction remoteContext(\n\tcontext: FeatureFlagRequestContext,\n): Record<string, string | number | boolean> {\n\tconst remote: Record<string, string | number | boolean> = {};\n\tfor (const [key, value] of Object.entries(context.attributes ?? {})) {\n\t\tconst normalizedKey = key.trim();\n\t\tif (!normalizedKey || value == null) {\n\t\t\tcontinue;\n\t\t}\n\t\tif (normalizedKey === \"subject\" || normalizedKey === \"targetingKey\") {\n\t\t\tcontinue;\n\t\t}\n\t\tif (typeof value === \"string\") {\n\t\t\tconst normalizedValue = value.trim();\n\t\t\tif (normalizedValue) {\n\t\t\t\tremote[normalizedKey] = normalizedValue;\n\t\t\t}\n\t\t\tcontinue;\n\t\t}\n\t\tremote[normalizedKey] = value;\n\t}\n\tconst subject = context.subject.trim();\n\tif (subject) {\n\t\tremote.subject = subject;\n\t\tremote.targetingKey = subject;\n\t}\n\treturn remote;\n}\n\nfunction remoteTimeoutMs(\n\toptions: FeatureFlagRemoteOptions,\n): number | undefined {\n\tif (options.timeoutMs == null) {\n\t\treturn DEFAULT_REMOTE_TIMEOUT_MS;\n\t}\n\tif (!Number.isFinite(options.timeoutMs) || options.timeoutMs <= 0) {\n\t\treturn undefined;\n\t}\n\treturn Math.max(1, Math.trunc(options.timeoutMs));\n}\n\nasync function postJSON(\n\turl: string,\n\tbody: string,\n\toptions: FeatureFlagRemoteOptions,\n): Promise<Response> {\n\tconst controller = new AbortController();\n\tconst timeoutMs = remoteTimeoutMs(options);\n\tlet timeout: ReturnType<typeof setTimeout> | undefined;\n\tif (timeoutMs != null) {\n\t\ttimeout = setTimeout(() => controller.abort(), timeoutMs);\n\t}\n\ttry {\n\t\treturn await fetch(url, {\n\t\t\tbody,\n\t\t\theaders: {\n\t\t\t\taccept: \"application/json\",\n\t\t\t\t\"content-type\": \"application/json\",\n\t\t\t\t...getFeatureFlagRemoteHeaders(options.headers),\n\t\t\t},\n\t\t\tmethod: \"POST\",\n\t\t\tsignal: controller.signal,\n\t\t});\n\t} finally {\n\t\tif (timeout != null) {\n\t\t\tclearTimeout(timeout);\n\t\t}\n\t}\n}\n\nfunction fallbackDecision(\n\tkey: string,\n\tcontext: FeatureFlagRequestContext,\n\tdefaultValue: boolean,\n\treason: string,\n): FeatureFlagDecision {\n\treturn {\n\t\tkey,\n\t\tmetadata: {\n\t\t\tfallback_used: true,\n\t\t\tflag_subject: context.subject.trim(),\n\t\t},\n\t\treason,\n\t\tvalue: defaultValue,\n\t\tvariant: booleanVariant(defaultValue),\n\t};\n}\n\nfunction missingAssignment(\n\texperimentId: string,\n\tcontext: FeatureFlagRequestContext,\n\treason: string,\n): ExperimentAssignment {\n\treturn {\n\t\tassigned: false,\n\t\tbucket: 0,\n\t\texperimentId,\n\t\texposureRecorded: false,\n\t\tflagKey: \"\",\n\t\tinHoldout: false,\n\t\tmetadata: { fallback_used: true },\n\t\tnamespaceEnd: 0,\n\t\tnamespaceStart: 0,\n\t\treason,\n\t\tsubject: context.subject.trim(),\n\t\tvariant: \"\",\n\t\tvariantBucket: 0,\n\t};\n}\n\nfunction booleanVariant(value: boolean): string {\n\treturn value ? \"true\" : \"false\";\n}\n\nfunction getRecord(value: unknown): Record<string, unknown> {\n\treturn value != null && typeof value === \"object\" && !Array.isArray(value)\n\t\t? (value as Record<string, unknown>)\n\t\t: {};\n}\n\nfunction getString(value: unknown): string {\n\treturn typeof value === \"string\" ? value.trim() : \"\";\n}\n\nfunction getNumber(value: unknown): number {\n\treturn typeof value === \"number\" && Number.isFinite(value) ? value : 0;\n}\n\nexport function resetFeatureFlagCacheForTests(): void {\n\tfeatureFlagCache.lastKnownSnapshot = null;\n\tfeatureFlagCache.lastPath = undefined;\n\tfeatureFlagCache.lastStatMtimeMs = undefined;\n}\n"]}

package/dist/connectors/service-client.d.ts

@@ -0,0 +1,98 @@
+export declare const CONNECTORS_CALL_FAILURE_MODES: {
+    readonly getCapabilities: "fail-open";
+    readonly getConnection: "fail-open";
+    readonly getDegradedReadPolicy: "fail-open";
+    readonly getHealth: "fail-open";
+    readonly listConnections: "fail-open";
+    readonly refreshConnection: "fail-open";
+    readonly registerConnection: "fail-open";
+    readonly resolveSourceOfTruth: "fail-open";
+    readonly revokeConnection: "fail-open";
+    readonly setSourceOfTruthPolicy: "fail-open";
+};
+export interface ConnectorsServiceConfig {
+    baseUrl?: string;
+    token?: string;
+    workspaceId?: string;
+    timeoutMs?: number;
+    maxAttempts?: number;
+    circuitFailureThreshold?: number;
+    circuitResetTimeoutMs?: number;
+    circuitSuccessThreshold?: number;
+}
+export interface ResolvedConnectorsServiceConfig {
+    baseUrl: string;
+    token?: string;
+    workspaceId?: string;
+    timeoutMs: number;
+    maxAttempts: number;
+    circuitFailureThreshold: number;
+    circuitResetTimeoutMs: number;
+    circuitSuccessThreshold: number;
+}
+export interface RemoteConnectorConnection {
+    id: string;
+    workspaceId: string;
+    providerId: string;
+    displayName?: string;
+    authType?: string;
+    scopes: string[];
+    credentialRefs?: Record<string, string>;
+    healthStatus?: string;
+    lastHealthyAt?: string;
+    createdAt?: string;
+    updatedAt?: string;
+}
+export interface RemoteConnectionHealth {
+    status?: string;
+    latencyMs?: number;
+    lastCheckAt?: string;
+    errorMessage?: string;
+}
+export interface RegisterRemoteConnectionInput {
+    workspaceId?: string;
+    providerId: string;
+    displayName?: string;
+    authType: "AUTH_TYPE_OAUTH2" | "AUTH_TYPE_API_KEY" | "AUTH_TYPE_BASIC";
+    scopes?: string[];
+    credentials?: Record<string, string>;
+}
+export interface RemoteSourceOfTruthResolution {
+    workspaceId: string;
+    area: string;
+    primaryConnectionId: string;
+    fallbackConnectionId?: string;
+    providerId: string;
+    displayName?: string;
+}
+export interface RemoteSourceOfTruthPolicy {
+    workspaceId: string;
+    area: string;
+    primaryConnectionId: string;
+    fallbackConnectionId?: string;
+}
+export interface SetRemoteSourceOfTruthPolicyInput {
+    workspaceId?: string;
+    area: string;
+    primaryConnectionId: string;
+    fallbackConnectionId?: string;
+}
+export interface RemoteDegradedReadPolicy {
+    mode?: string;
+    integrations: string[];
+    maxAgeMinutes?: number;
+    queuePrimaryRefresh?: boolean;
+}
+export declare function resolveConnectorsServiceConfig(config?: ConnectorsServiceConfig | false): ResolvedConnectorsServiceConfig | null;
+export declare function listRemoteConnections(workspaceId?: string, configInput?: ConnectorsServiceConfig | false): Promise<RemoteConnectorConnection[]>;
+export declare function getRemoteConnection(connectionId?: string, configInput?: ConnectorsServiceConfig | false): Promise<RemoteConnectorConnection | null>;
+export declare function registerRemoteConnection(input: RegisterRemoteConnectionInput, configInput?: ConnectorsServiceConfig | false): Promise<RemoteConnectorConnection | null>;
+export declare function refreshRemoteConnection(connectionId?: string, configInput?: ConnectorsServiceConfig | false): Promise<RemoteConnectorConnection | null>;
+export declare function revokeRemoteConnection(connectionId?: string, configInput?: ConnectorsServiceConfig | false): Promise<boolean>;
+export declare function getRemoteConnectionHealth(connectionId?: string, configInput?: ConnectorsServiceConfig | false): Promise<RemoteConnectionHealth | null>;
+export declare function resolveRemoteSourceOfTruth(workspaceId?: string, area?: string, configInput?: ConnectorsServiceConfig | false): Promise<RemoteSourceOfTruthResolution | null>;
+export declare function setRemoteSourceOfTruthPolicy(input: SetRemoteSourceOfTruthPolicyInput, configInput?: ConnectorsServiceConfig | false): Promise<RemoteSourceOfTruthPolicy | null>;
+export declare function getRemoteDegradedReadPolicy(workspaceId?: string, configInput?: ConnectorsServiceConfig | false): Promise<RemoteDegradedReadPolicy | null>;
+export declare function getRemoteConnectionCapabilities(connectionId?: string, configInput?: ConnectorsServiceConfig | false): Promise<string[]>;
+export declare function resetConnectorsDownstreamForTests(): void;
+//# sourceMappingURL=service-client.d.ts.map

package/dist/connectors/service-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-client.d.ts","sourceRoot":"","sources":["../../src/connectors/service-client.ts"],"names":[],"mappings":"AAgDA,eAAO,MAAM,6BAA6B;;;;;;;;;;;CAWhC,CAAC;AAIX,MAAM,WAAW,uBAAuB;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,uBAAuB,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,+BAA+B;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,uBAAuB,EAAE,MAAM,CAAC;IAChC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,uBAAuB,EAAE,MAAM,CAAC;CAChC;AA+DD,MAAM,WAAW,yBAAyB;IACzC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACtC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,6BAA6B;IAC7C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,kBAAkB,GAAG,mBAAmB,GAAG,iBAAiB,CAAC;IACvE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,6BAA6B;IAC7C,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,mBAAmB,EAAE,MAAM,CAAC;IAC5B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,yBAAyB;IACzC,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,mBAAmB,EAAE,MAAM,CAAC;IAC5B,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,iCAAiC;IACjD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,mBAAmB,EAAE,MAAM,CAAC;IAC5B,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,wBAAwB;IACxC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAqHD,wBAAgB,8BAA8B,CAC7C,MAAM,CAAC,EAAE,uBAAuB,GAAG,KAAK,GACtC,+BAA+B,GAAG,IAAI,CA6ExC;AAiKD,wBAAsB,qBAAqB,CAC1C,WAAW,CAAC,EAAE,MAAM,EACpB,WAAW,CAAC,EAAE,uBAAuB,GAAG,KAAK,GAC3C,OAAO,CAAC,yBAAyB,EAAE,CAAC,CAwBtC;AAED,wBAAsB,mBAAmB,CACxC,YAAY,CAAC,EAAE,MAAM,EACrB,WAAW,CAAC,EAAE,uBAAuB,GAAG,KAAK,GAC3C,OAAO,CAAC,yBAAyB,GAAG,IAAI,CAAC,CAc3C;AAED,wBAAsB,wBAAwB,CAC7C,KAAK,EAAE,6BAA6B,EACpC,WAAW,CAAC,EAAE,uBAAuB,GAAG,KAAK,GAC3C,OAAO,CAAC,yBAAyB,GAAG,IAAI,CAAC,CAwB3C;AAED,wBAAsB,uBAAuB,CAC5C,YAAY,CAAC,EAAE,MAAM,EACrB,WAAW,CAAC,EAAE,uBAAuB,GAAG,KAAK,GAC3C,OAAO,CAAC,yBAAyB,GAAG,IAAI,CAAC,CAc3C;AAED,wBAAsB,sBAAsB,CAC3C,YAAY,CAAC,EAAE,MAAM,EACrB,WAAW,CAAC,EAAE,uBAAuB,GAAG,KAAK,GAC3C,OAAO,CAAC,OAAO,CAAC,CAclB;AAED,wBAAsB,yBAAyB,CAC9C,YAAY,CAAC,EAAE,MAAM,EACrB,WAAW,CAAC,EAAE,uBAAuB,GAAG,KAAK,GAC3C,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAcxC;AAED,wBAAsB,0BAA0B,CAC/C,WAAW,CAAC,EAAE,MAAM,EACpB,IAAI,CAAC,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,uBAAuB,GAAG,KAAK,GAC3C,OAAO,CAAC,6BAA6B,GAAG,IAAI,CAAC,CA4C/C;AAED,wBAAsB,4BAA4B,CACjD,KAAK,EAAE,iCAAiC,EACxC,WAAW,CAAC,EAAE,uBAAuB,GAAG,KAAK,GAC3C,OAAO,CAAC,yBAAyB,GAAG,IAAI,CAAC,CAsC3C;AAMD,wBAAsB,2BAA2B,CAChD,WAAW,CAAC,EAAE,MAAM,EACpB,WAAW,CAAC,EAAE,uBAAuB,GAAG,KAAK,GAC3C,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC,CAyB1C;AAED,wBAAsB,+BAA+B,CACpD,YAAY,CAAC,EAAE,MAAM,EACrB,WAAW,CAAC,EAAE,uBAAuB,GAAG,KAAK,GAC3C,OAAO,CAAC,MAAM,EAAE,CAAC,CAcnB;AAED,wBAAgB,iCAAiC,IAAI,IAAI,CAGxD"}