@evalops/maestro 0.10.8 → 0.10.11

package/dist/cli/commands/evalops.js

@@ -0,0 +1,74 @@
+import chalk from "chalk";
+import { hasOAuthCredentials, login, logout } from "../../oauth/index.js";
+import { loadOAuthCredentials } from "../../oauth/storage.js";
+export async function handleEvalOpsCommand(subcommand) {
+    switch (subcommand) {
+        case "init": {
+            const { handleInitCommand } = await import("./init.js");
+            await handleInitCommand();
+            return;
+        }
+        case "login":
+            await handleLogin();
+            return;
+        case "logout":
+            await handleLogout();
+            return;
+        case "status":
+            await handleStatus();
+            return;
+        default:
+            console.error(chalk.red('Unknown evalops subcommand. Try "maestro init" for setup, or "maestro evalops login", "logout", or "status".'));
+            process.exit(1);
+    }
+}
+async function handleLogin() {
+    console.log(chalk.bold("Maestro EvalOps Login"));
+    await login("evalops", {
+        onAuthUrl: (url) => {
+            console.log(chalk.yellow("Open this URL in your browser to authenticate with EvalOps:"));
+            console.log(chalk.underline(url));
+        },
+        onStatus: (status) => console.log(chalk.dim(status)),
+    });
+    console.log(chalk.green("EvalOps credentials saved successfully."));
+    console.log(chalk.dim('Try "maestro --provider evalops --model gpt-4o-mini".'));
+}
+async function handleLogout() {
+    await logout("evalops");
+    console.log(chalk.green("Removed stored EvalOps credentials."));
+}
+async function handleStatus() {
+    if (!hasOAuthCredentials("evalops")) {
+        console.log(chalk.yellow("No stored EvalOps credentials."));
+        console.log(chalk.dim('Run "maestro evalops login" to authenticate with EvalOps.'));
+        return;
+    }
+    const credentials = loadOAuthCredentials("evalops");
+    const remainingMs = Math.max(0, (credentials?.expires ?? Date.now()) - Date.now());
+    const minutes = Math.round(remainingMs / 60_000);
+    const metadata = credentials?.metadata;
+    const organizationId = typeof metadata?.organizationId === "string"
+        ? metadata.organizationId
+        : undefined;
+    const providerRef = metadata?.providerRef &&
+        typeof metadata.providerRef === "object" &&
+        !Array.isArray(metadata.providerRef)
+        ? metadata.providerRef
+        : undefined;
+    console.log(chalk.green("Stored EvalOps credentials detected."));
+    if (organizationId) {
+        console.log(chalk.dim(`Organization: ${organizationId}`));
+    }
+    if (providerRef) {
+        const provider = typeof providerRef.provider === "string"
+            ? providerRef.provider
+            : "openai";
+        const environment = typeof providerRef.environment === "string"
+            ? providerRef.environment
+            : "prod";
+        console.log(chalk.dim(`Provider ref: ${provider}/${environment}`));
+    }
+    console.log(chalk.dim(`Access token expires in ~${minutes} minute${minutes === 1 ? "" : "s"} (auto-refresh enabled).`));
+}
+//# sourceMappingURL=evalops.js.map

package/dist/cli/commands/evalops.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evalops.js","sourceRoot":"","sources":["../../../src/cli/commands/evalops.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAE9D,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,UAAmB;IAC7D,QAAQ,UAAU,EAAE,CAAC;QACpB,KAAK,MAAM,CAAC,CAAC,CAAC;YACb,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;YACxD,MAAM,iBAAiB,EAAE,CAAC;YAC1B,OAAO;QACR,CAAC;QACD,KAAK,OAAO;YACX,MAAM,WAAW,EAAE,CAAC;YACpB,OAAO;QACR,KAAK,QAAQ;YACZ,MAAM,YAAY,EAAE,CAAC;YACrB,OAAO;QACR,KAAK,QAAQ;YACZ,MAAM,YAAY,EAAE,CAAC;YACrB,OAAO;QACR;YACC,OAAO,CAAC,KAAK,CACZ,KAAK,CAAC,GAAG,CACR,8GAA8G,CAC9G,CACD,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACF,CAAC;AAED,KAAK,UAAU,WAAW;IACzB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC;IACjD,MAAM,KAAK,CAAC,SAAS,EAAE;QACtB,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;YAClB,OAAO,CAAC,GAAG,CACV,KAAK,CAAC,MAAM,CACX,6DAA6D,CAC7D,CACD,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QACnC,CAAC;QACD,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;KACpD,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CACV,KAAK,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAClE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY;IAC1B,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IACxB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,KAAK,UAAU,YAAY;IAC1B,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,gCAAgC,CAAC,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CACV,KAAK,CAAC,GAAG,CAAC,2DAA2D,CAAC,CACtE,CAAC;QACF,OAAO;IACR,CAAC;IAED,MAAM,WAAW,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAC3B,CAAC,EACD,CAAC,WAAW,EAAE,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CACjD,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,WAAW,EAAE,QAAQ,CAAC;IACvC,MAAM,cAAc,GACnB,OAAO,QAAQ,EAAE,cAAc,KAAK,QAAQ;QAC3C,CAAC,CAAC,QAAQ,CAAC,cAAc;QACzB,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,WAAW,GAChB,QAAQ,EAAE,WAAW;QACrB,OAAO,QAAQ,CAAC,WAAW,KAAK,QAAQ;QACxC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;QACnC,CAAC,CAAE,QAAQ,CAAC,WAAuC;QACnD,CAAC,CAAC,SAAS,CAAC;IAEd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC,CAAC;IACjE,IAAI,cAAc,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,cAAc,EAAE,CAAC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,WAAW,EAAE,CAAC;QACjB,MAAM,QAAQ,GACb,OAAO,WAAW,CAAC,QAAQ,KAAK,QAAQ;YACvC,CAAC,CAAC,WAAW,CAAC,QAAQ;YACtB,CAAC,CAAC,QAAQ,CAAC;QACb,MAAM,WAAW,GAChB,OAAO,WAAW,CAAC,WAAW,KAAK,QAAQ;YAC1C,CAAC,CAAC,WAAW,CAAC,WAAW;YACzB,CAAC,CAAC,MAAM,CAAC;QACX,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,QAAQ,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,CAAC,GAAG,CACV,KAAK,CAAC,GAAG,CACR,4BAA4B,OAAO,UAAU,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,0BAA0B,CAC/F,CACD,CAAC;AACH,CAAC","sourcesContent":["import chalk from \"chalk\";\nimport { hasOAuthCredentials, login, logout } from \"../../oauth/index.js\";\nimport { loadOAuthCredentials } from \"../../oauth/storage.js\";\n\nexport async function handleEvalOpsCommand(subcommand?: string): Promise<void> {\n\tswitch (subcommand) {\n\t\tcase \"init\": {\n\t\t\tconst { handleInitCommand } = await import(\"./init.js\");\n\t\t\tawait handleInitCommand();\n\t\t\treturn;\n\t\t}\n\t\tcase \"login\":\n\t\t\tawait handleLogin();\n\t\t\treturn;\n\t\tcase \"logout\":\n\t\t\tawait handleLogout();\n\t\t\treturn;\n\t\tcase \"status\":\n\t\t\tawait handleStatus();\n\t\t\treturn;\n\t\tdefault:\n\t\t\tconsole.error(\n\t\t\t\tchalk.red(\n\t\t\t\t\t'Unknown evalops subcommand. Try \"maestro init\" for setup, or \"maestro evalops login\", \"logout\", or \"status\".',\n\t\t\t\t),\n\t\t\t);\n\t\t\tprocess.exit(1);\n\t}\n}\n\nasync function handleLogin(): Promise<void> {\n\tconsole.log(chalk.bold(\"Maestro EvalOps Login\"));\n\tawait login(\"evalops\", {\n\t\tonAuthUrl: (url) => {\n\t\t\tconsole.log(\n\t\t\t\tchalk.yellow(\n\t\t\t\t\t\"Open this URL in your browser to authenticate with EvalOps:\",\n\t\t\t\t),\n\t\t\t);\n\t\t\tconsole.log(chalk.underline(url));\n\t\t},\n\t\tonStatus: (status) => console.log(chalk.dim(status)),\n\t});\n\tconsole.log(chalk.green(\"EvalOps credentials saved successfully.\"));\n\tconsole.log(\n\t\tchalk.dim('Try \"maestro --provider evalops --model gpt-4o-mini\".'),\n\t);\n}\n\nasync function handleLogout(): Promise<void> {\n\tawait logout(\"evalops\");\n\tconsole.log(chalk.green(\"Removed stored EvalOps credentials.\"));\n}\n\nasync function handleStatus(): Promise<void> {\n\tif (!hasOAuthCredentials(\"evalops\")) {\n\t\tconsole.log(chalk.yellow(\"No stored EvalOps credentials.\"));\n\t\tconsole.log(\n\t\t\tchalk.dim('Run \"maestro evalops login\" to authenticate with EvalOps.'),\n\t\t);\n\t\treturn;\n\t}\n\n\tconst credentials = loadOAuthCredentials(\"evalops\");\n\tconst remainingMs = Math.max(\n\t\t0,\n\t\t(credentials?.expires ?? Date.now()) - Date.now(),\n\t);\n\tconst minutes = Math.round(remainingMs / 60_000);\n\tconst metadata = credentials?.metadata;\n\tconst organizationId =\n\t\ttypeof metadata?.organizationId === \"string\"\n\t\t\t? metadata.organizationId\n\t\t\t: undefined;\n\tconst providerRef =\n\t\tmetadata?.providerRef &&\n\t\ttypeof metadata.providerRef === \"object\" &&\n\t\t!Array.isArray(metadata.providerRef)\n\t\t\t? (metadata.providerRef as Record<string, unknown>)\n\t\t\t: undefined;\n\n\tconsole.log(chalk.green(\"Stored EvalOps credentials detected.\"));\n\tif (organizationId) {\n\t\tconsole.log(chalk.dim(`Organization: ${organizationId}`));\n\t}\n\tif (providerRef) {\n\t\tconst provider =\n\t\t\ttypeof providerRef.provider === \"string\"\n\t\t\t\t? providerRef.provider\n\t\t\t\t: \"openai\";\n\t\tconst environment =\n\t\t\ttypeof providerRef.environment === \"string\"\n\t\t\t\t? providerRef.environment\n\t\t\t\t: \"prod\";\n\t\tconsole.log(chalk.dim(`Provider ref: ${provider}/${environment}`));\n\t}\n\tconsole.log(\n\t\tchalk.dim(\n\t\t\t`Access token expires in ~${minutes} minute${minutes === 1 ? \"\" : \"s\"} (auto-refresh enabled).`,\n\t\t),\n\t);\n}\n"]}

package/dist/cli/commands/hosted-runner.d.ts

@@ -0,0 +1,23 @@
+import type { HostedRunnerContext } from "../../server/app-context.js";
+export interface HostedRunnerConfig {
+    runnerSessionId: string;
+    ownerInstanceId?: string;
+    workspaceRoot: string;
+    snapshotRoot: string;
+    host?: string;
+    port: number;
+    workspaceId?: string;
+    agentRunId?: string;
+    maestroSessionId?: string;
+    attachAudience?: string;
+}
+interface HostedRunnerResolveOptions {
+    defaultPort?: number;
+}
+export declare function formatHostedRunnerUsage(): string;
+export declare function resolveHostedRunnerConfig(args: readonly string[], env?: NodeJS.ProcessEnv, options?: HostedRunnerResolveOptions): Promise<HostedRunnerConfig>;
+export declare function applyHostedRunnerEnvironment(config: HostedRunnerConfig): void;
+export declare function toHostedRunnerContext(config: HostedRunnerConfig): HostedRunnerContext;
+export declare function handleHostedRunnerCommand(args: readonly string[], options?: HostedRunnerResolveOptions): Promise<void>;
+export {};
+//# sourceMappingURL=hosted-runner.d.ts.map

package/dist/cli/commands/hosted-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-runner.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/hosted-runner.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AASvE,MAAM,WAAW,kBAAkB;IAClC,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,UAAU,0BAA0B;IACnC,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AA4JD,wBAAgB,uBAAuB,IAAI,MAAM,CAEhD;AAED,wBAAsB,yBAAyB,CAC9C,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,OAAO,GAAE,0BAA+B,GACtC,OAAO,CAAC,kBAAkB,CAAC,CAkE7B;AAED,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,kBAAkB,GAAG,IAAI,CAgC7E;AAED,wBAAgB,qBAAqB,CACpC,MAAM,EAAE,kBAAkB,GACxB,mBAAmB,CAerB;AAED,wBAAsB,yBAAyB,CAC9C,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,GAAE,0BAA+B,GACtC,OAAO,CAAC,IAAI,CAAC,CAoBf"}

package/dist/cli/commands/hosted-runner.js

@@ -0,0 +1,241 @@
+import { realpath, stat } from "node:fs/promises";
+import { resolve } from "node:path";
+import chalk from "chalk";
+const HOSTED_RUNNER_USAGE = `maestro hosted-runner [options]
+
+Options:
+  --runner-session-id <id>  Platform remote-runner session id (required)
+  --owner-instance-id <id>  Platform runtime owner generation for attach fencing
+  --workspace-root <path>   Workspace root mounted into the runtime pod (required)
+  --snapshot-root <path>    Directory for drain snapshot manifests
+  --listen <host:port>      Address to bind, for example 0.0.0.0:8080
+  --host <host>             Bind host when --listen is not used
+  --port <port>             Bind port when --listen is not used
+  --workspace-id <id>       EvalOps workspace id for metadata
+  --agent-run-id <id>       Platform AgentRun id for metadata
+  --maestro-session-id <id> Existing Maestro session id for metadata
+  --attach-audience <aud>   Expected attach audience metadata
+  --help                    Show this help
+
+Environment:
+  MAESTRO_RUNNER_SESSION_ID, REMOTE_RUNNER_SESSION_ID
+  MAESTRO_REMOTE_RUNNER_OWNER_INSTANCE_ID, REMOTE_RUNNER_OWNER_INSTANCE_ID
+  MAESTRO_WORKSPACE_ROOT
+  MAESTRO_REMOTE_RUNNER_SNAPSHOT_ROOT, REMOTE_RUNNER_SNAPSHOT_ROOT
+  MAESTRO_HOSTED_RUNNER_LISTEN, MAESTRO_HOSTED_RUNNER_HOST, MAESTRO_HOSTED_RUNNER_PORT, PORT
+  MAESTRO_REMOTE_RUNNER_WORKSPACE_ID, MAESTRO_AGENT_RUN_ID, MAESTRO_SESSION_ID
+  MAESTRO_ATTACH_AUDIENCE`;
+function parseHostedRunnerOptions(args) {
+    const flags = new Map();
+    const positionals = [];
+    for (let index = 0; index < args.length; index += 1) {
+        const arg = args[index];
+        if (!arg) {
+            continue;
+        }
+        if (arg === "--") {
+            positionals.push(...args.slice(index + 1));
+            break;
+        }
+        if (!arg.startsWith("--")) {
+            positionals.push(arg);
+            continue;
+        }
+        const equalsIndex = arg.indexOf("=");
+        const key = equalsIndex >= 0 ? arg.slice(2, equalsIndex) : arg.slice(2);
+        const inlineValue = equalsIndex >= 0 ? arg.slice(equalsIndex + 1) : undefined;
+        const next = args[index + 1];
+        const value = inlineValue !== undefined
+            ? inlineValue
+            : next && !next.startsWith("--")
+                ? next
+                : true;
+        if (inlineValue === undefined && value !== true) {
+            index += 1;
+        }
+        const values = flags.get(key) ?? [];
+        values.push(value);
+        flags.set(key, values);
+    }
+    return { flags, positionals };
+}
+function getLastFlag(options, key) {
+    const values = options.flags.get(key);
+    const value = values?.at(-1);
+    return typeof value === "string" ? value.trim() : undefined;
+}
+function hasFlag(options, key) {
+    return options.flags.has(key);
+}
+function getEnvValue(env, keys) {
+    for (const key of keys) {
+        const value = env[key]?.trim();
+        if (value) {
+            return value;
+        }
+    }
+    return undefined;
+}
+function parsePort(value, label) {
+    if (!value) {
+        return undefined;
+    }
+    if (!/^\d+$/.test(value.trim())) {
+        throw new Error(`${label} must be a TCP port between 1 and 65535`);
+    }
+    const port = Number.parseInt(value, 10);
+    if (!Number.isInteger(port) || port <= 0 || port > 65535) {
+        throw new Error(`${label} must be a TCP port between 1 and 65535`);
+    }
+    return port;
+}
+function parseListen(value) {
+    if (!value) {
+        return {};
+    }
+    const trimmed = value.trim();
+    if (/^\d+$/.test(trimmed)) {
+        return { port: parsePort(trimmed, "--listen") };
+    }
+    const separatorIndex = trimmed.lastIndexOf(":");
+    if (separatorIndex <= 0 || separatorIndex === trimmed.length - 1) {
+        throw new Error("--listen must be <host:port> or <port>");
+    }
+    return {
+        host: trimmed.slice(0, separatorIndex),
+        port: parsePort(trimmed.slice(separatorIndex + 1), "--listen"),
+    };
+}
+async function resolveWorkspaceRoot(path) {
+    if (!path) {
+        throw new Error("maestro hosted-runner requires --workspace-root or MAESTRO_WORKSPACE_ROOT");
+    }
+    const workspaceRoot = resolve(path);
+    const stats = await stat(workspaceRoot);
+    if (!stats.isDirectory()) {
+        throw new Error(`Hosted runner workspace root is not a directory: ${path}`);
+    }
+    return realpath(workspaceRoot);
+}
+function resolveSnapshotRoot(path, workspaceRoot) {
+    if (!path) {
+        return resolve(workspaceRoot, ".maestro", "runner-snapshots");
+    }
+    return resolve(workspaceRoot, path);
+}
+export function formatHostedRunnerUsage() {
+    return HOSTED_RUNNER_USAGE;
+}
+export async function resolveHostedRunnerConfig(args, env = process.env, options = {}) {
+    const parsed = parseHostedRunnerOptions(args);
+    if (parsed.positionals.length > 0) {
+        throw new Error(`Unexpected hosted-runner argument: ${parsed.positionals[0]}`);
+    }
+    const runnerSessionId = getLastFlag(parsed, "runner-session-id") ??
+        getEnvValue(env, ["MAESTRO_RUNNER_SESSION_ID", "REMOTE_RUNNER_SESSION_ID"]);
+    if (!runnerSessionId) {
+        throw new Error("maestro hosted-runner requires --runner-session-id or MAESTRO_RUNNER_SESSION_ID");
+    }
+    const listen = parseListen(getLastFlag(parsed, "listen") ?? env.MAESTRO_HOSTED_RUNNER_LISTEN);
+    const port = listen.port ??
+        parsePort(getLastFlag(parsed, "port"), "--port") ??
+        parsePort(env.MAESTRO_HOSTED_RUNNER_PORT, "MAESTRO_HOSTED_RUNNER_PORT") ??
+        parsePort(env.PORT, "PORT") ??
+        options.defaultPort ??
+        8080;
+    const workspaceRoot = await resolveWorkspaceRoot(getLastFlag(parsed, "workspace-root") ??
+        getEnvValue(env, ["MAESTRO_WORKSPACE_ROOT", "WORKSPACE_ROOT"]));
+    return {
+        runnerSessionId,
+        ownerInstanceId: getLastFlag(parsed, "owner-instance-id") ??
+            getEnvValue(env, [
+                "MAESTRO_REMOTE_RUNNER_OWNER_INSTANCE_ID",
+                "REMOTE_RUNNER_OWNER_INSTANCE_ID",
+            ]),
+        workspaceRoot,
+        snapshotRoot: resolveSnapshotRoot(getLastFlag(parsed, "snapshot-root") ??
+            getEnvValue(env, [
+                "MAESTRO_REMOTE_RUNNER_SNAPSHOT_ROOT",
+                "REMOTE_RUNNER_SNAPSHOT_ROOT",
+            ]), workspaceRoot),
+        host: listen.host ??
+            getLastFlag(parsed, "host") ??
+            env.MAESTRO_HOSTED_RUNNER_HOST,
+        port,
+        workspaceId: getLastFlag(parsed, "workspace-id") ??
+            getEnvValue(env, [
+                "MAESTRO_REMOTE_RUNNER_WORKSPACE_ID",
+                "MAESTRO_WORKSPACE_ID",
+            ]),
+        agentRunId: getLastFlag(parsed, "agent-run-id") ?? env.MAESTRO_AGENT_RUN_ID,
+        maestroSessionId: getLastFlag(parsed, "maestro-session-id") ?? env.MAESTRO_SESSION_ID,
+        attachAudience: getLastFlag(parsed, "attach-audience") ?? env.MAESTRO_ATTACH_AUDIENCE,
+    };
+}
+export function applyHostedRunnerEnvironment(config) {
+    process.env.MAESTRO_HOSTED_RUNNER_MODE = "1";
+    process.env.MAESTRO_RUNNER_SESSION_ID = config.runnerSessionId;
+    process.env.MAESTRO_WORKSPACE_ROOT = config.workspaceRoot;
+    process.env.MAESTRO_REMOTE_RUNNER_SNAPSHOT_ROOT = config.snapshotRoot;
+    if (config.ownerInstanceId) {
+        process.env.MAESTRO_REMOTE_RUNNER_OWNER_INSTANCE_ID =
+            config.ownerInstanceId;
+        process.env.REMOTE_RUNNER_OWNER_INSTANCE_ID = config.ownerInstanceId;
+    }
+    process.env.MAESTRO_PROFILE ??= "hosted-runner";
+    process.env.MAESTRO_WEB_REQUIRE_KEY ??= "1";
+    process.env.MAESTRO_WEB_REQUIRE_REDIS ??= "0";
+    process.env.MAESTRO_WEB_REQUIRE_CSRF ??= "0";
+    process.env.MAESTRO_AGENT_DIR ??= resolve(config.workspaceRoot, ".maestro", "agent");
+    if (config.workspaceId) {
+        process.env.MAESTRO_REMOTE_RUNNER_WORKSPACE_ID = config.workspaceId;
+    }
+    if (config.agentRunId) {
+        process.env.MAESTRO_AGENT_RUN_ID = config.agentRunId;
+    }
+    if (config.maestroSessionId) {
+        process.env.MAESTRO_SESSION_ID = config.maestroSessionId;
+    }
+    if (config.attachAudience) {
+        process.env.MAESTRO_ATTACH_AUDIENCE = config.attachAudience;
+    }
+    process.chdir(config.workspaceRoot);
+}
+export function toHostedRunnerContext(config) {
+    return {
+        enabled: true,
+        runnerSessionId: config.runnerSessionId,
+        ownerInstanceId: config.ownerInstanceId,
+        workspaceRoot: config.workspaceRoot,
+        snapshotRoot: config.snapshotRoot,
+        listenHost: config.host,
+        listenPort: config.port,
+        workspaceId: config.workspaceId,
+        agentRunId: config.agentRunId,
+        attachAudience: config.attachAudience,
+        configuredMaestroSessionId: config.maestroSessionId,
+        activeMaestroSessionId: config.maestroSessionId,
+    };
+}
+export async function handleHostedRunnerCommand(args, options = {}) {
+    const parsed = parseHostedRunnerOptions(args);
+    if (hasFlag(parsed, "help")) {
+        console.log(formatHostedRunnerUsage());
+        return;
+    }
+    try {
+        const config = await resolveHostedRunnerConfig(args, process.env, options);
+        applyHostedRunnerEnvironment(config);
+        const { startWebServer } = await import("../../web-server.js");
+        await startWebServer(config.port, {
+            host: config.host,
+            hostedRunner: toHostedRunnerContext(config),
+        });
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        console.error(chalk.red(message));
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=hosted-runner.js.map

package/dist/cli/commands/hosted-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-runner.js","sourceRoot":"","sources":["../../../src/cli/commands/hosted-runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AA2B1B,MAAM,mBAAmB,GAAG;;;;;;;;;;;;;;;;;;;;;;;0BAuBF,CAAC;AAE3B,SAAS,wBAAwB,CAChC,IAAuB;IAEvB,MAAM,KAAK,GAAG,IAAI,GAAG,EAAmC,CAAC;IACzD,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,GAAG,EAAE,CAAC;YACV,SAAS;QACV,CAAC;QACD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YAClB,WAAW,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;YAC3C,MAAM;QACP,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtB,SAAS;QACV,CAAC;QACD,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,WAAW,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACxE,MAAM,WAAW,GAChB,WAAW,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC7B,MAAM,KAAK,GACV,WAAW,KAAK,SAAS;YACxB,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAC/B,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,IAAI,CAAC;QACV,IAAI,WAAW,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACjD,KAAK,IAAI,CAAC,CAAC;QACZ,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACxB,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,WAAW,CACnB,OAA4B,EAC5B,GAAW;IAEX,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7D,CAAC;AAED,SAAS,OAAO,CAAC,OAA4B,EAAE,GAAW;IACzD,OAAO,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,WAAW,CACnB,GAAsB,EACtB,IAAuB;IAEvB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;QAC/B,IAAI,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,SAAS,CACjB,KAAyB,EACzB,KAAa;IAEb,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,yCAAyC,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,yCAAyC,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,KAAyB;IAI7C,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO,EAAE,CAAC;IACX,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC;IACjD,CAAC;IACD,MAAM,cAAc,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,cAAc,IAAI,CAAC,IAAI,cAAc,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO;QACN,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC;QACtC,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC;KAC9D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,IAAwB;IAC3D,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACd,2EAA2E,CAC3E,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,oDAAoD,IAAI,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,QAAQ,CAAC,aAAa,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,mBAAmB,CAC3B,IAAwB,EACxB,aAAqB;IAErB,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,OAAO,OAAO,CAAC,aAAa,EAAE,UAAU,EAAE,kBAAkB,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,uBAAuB;IACtC,OAAO,mBAAmB,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC9C,IAAuB,EACvB,MAAyB,OAAO,CAAC,GAAG,EACpC,UAAsC,EAAE;IAExC,MAAM,MAAM,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACd,sCAAsC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAC7D,CAAC;IACH,CAAC;IAED,MAAM,eAAe,GACpB,WAAW,CAAC,MAAM,EAAE,mBAAmB,CAAC;QACxC,WAAW,CAAC,GAAG,EAAE,CAAC,2BAA2B,EAAE,0BAA0B,CAAC,CAAC,CAAC;IAC7E,IAAI,CAAC,eAAe,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACd,iFAAiF,CACjF,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CACzB,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,GAAG,CAAC,4BAA4B,CACjE,CAAC;IACF,MAAM,IAAI,GACT,MAAM,CAAC,IAAI;QACX,SAAS,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,QAAQ,CAAC;QAChD,SAAS,CAAC,GAAG,CAAC,0BAA0B,EAAE,4BAA4B,CAAC;QACvE,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC;QAC3B,OAAO,CAAC,WAAW;QACnB,IAAI,CAAC;IACN,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAC/C,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC;QACpC,WAAW,CAAC,GAAG,EAAE,CAAC,wBAAwB,EAAE,gBAAgB,CAAC,CAAC,CAC/D,CAAC;IAEF,OAAO;QACN,eAAe;QACf,eAAe,EACd,WAAW,CAAC,MAAM,EAAE,mBAAmB,CAAC;YACxC,WAAW,CAAC,GAAG,EAAE;gBAChB,yCAAyC;gBACzC,iCAAiC;aACjC,CAAC;QACH,aAAa;QACb,YAAY,EAAE,mBAAmB,CAChC,WAAW,CAAC,MAAM,EAAE,eAAe,CAAC;YACnC,WAAW,CAAC,GAAG,EAAE;gBAChB,qCAAqC;gBACrC,6BAA6B;aAC7B,CAAC,EACH,aAAa,CACb;QACD,IAAI,EACH,MAAM,CAAC,IAAI;YACX,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC;YAC3B,GAAG,CAAC,0BAA0B;QAC/B,IAAI;QACJ,WAAW,EACV,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC;YACnC,WAAW,CAAC,GAAG,EAAE;gBAChB,oCAAoC;gBACpC,sBAAsB;aACtB,CAAC;QACH,UAAU,EAAE,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC,IAAI,GAAG,CAAC,oBAAoB;QAC3E,gBAAgB,EACf,WAAW,CAAC,MAAM,EAAE,oBAAoB,CAAC,IAAI,GAAG,CAAC,kBAAkB;QACpE,cAAc,EACb,WAAW,CAAC,MAAM,EAAE,iBAAiB,CAAC,IAAI,GAAG,CAAC,uBAAuB;KACtE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,MAA0B;IACtE,OAAO,CAAC,GAAG,CAAC,0BAA0B,GAAG,GAAG,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,MAAM,CAAC,eAAe,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,MAAM,CAAC,aAAa,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,mCAAmC,GAAG,MAAM,CAAC,YAAY,CAAC;IACtE,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,uCAAuC;YAClD,MAAM,CAAC,eAAe,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,+BAA+B,GAAG,MAAM,CAAC,eAAe,CAAC;IACtE,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,eAAe,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,GAAG,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,yBAAyB,KAAK,GAAG,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,wBAAwB,KAAK,GAAG,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,OAAO,CACxC,MAAM,CAAC,aAAa,EACpB,UAAU,EACV,OAAO,CACP,CAAC;IACF,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,kCAAkC,GAAG,MAAM,CAAC,WAAW,CAAC;IACrE,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,MAAM,CAAC,UAAU,CAAC;IACtD,CAAC;IACD,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,MAAM,CAAC,gBAAgB,CAAC;IAC1D,CAAC;IACD,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,uBAAuB,GAAG,MAAM,CAAC,cAAc,CAAC;IAC7D,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,qBAAqB,CACpC,MAA0B;IAE1B,OAAO;QACN,OAAO,EAAE,IAAI;QACb,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,UAAU,EAAE,MAAM,CAAC,IAAI;QACvB,UAAU,EAAE,MAAM,CAAC,IAAI;QACvB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,0BAA0B,EAAE,MAAM,CAAC,gBAAgB;QACnD,sBAAsB,EAAE,MAAM,CAAC,gBAAgB;KAC/C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC9C,IAAuB,EACvB,UAAsC,EAAE;IAExC,MAAM,MAAM,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,CAAC,CAAC;QACvC,OAAO;IACR,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC3E,4BAA4B,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QAC/D,MAAM,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE;YACjC,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,YAAY,EAAE,qBAAqB,CAAC,MAAM,CAAC;SAC3C,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QAClC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;AACF,CAAC","sourcesContent":["import { realpath, stat } from \"node:fs/promises\";\nimport { resolve } from \"node:path\";\nimport chalk from \"chalk\";\nimport type { HostedRunnerContext } from \"../../server/app-context.js\";\n\ntype HostedRunnerFlagValue = true | string;\n\ninterface HostedRunnerOptions {\n\tflags: Map<string, HostedRunnerFlagValue[]>;\n\tpositionals: string[];\n}\n\nexport interface HostedRunnerConfig {\n\trunnerSessionId: string;\n\townerInstanceId?: string;\n\tworkspaceRoot: string;\n\tsnapshotRoot: string;\n\thost?: string;\n\tport: number;\n\tworkspaceId?: string;\n\tagentRunId?: string;\n\tmaestroSessionId?: string;\n\tattachAudience?: string;\n}\n\ninterface HostedRunnerResolveOptions {\n\tdefaultPort?: number;\n}\n\nconst HOSTED_RUNNER_USAGE = `maestro hosted-runner [options]\n\nOptions:\n  --runner-session-id <id>  Platform remote-runner session id (required)\n  --owner-instance-id <id>  Platform runtime owner generation for attach fencing\n  --workspace-root <path>   Workspace root mounted into the runtime pod (required)\n  --snapshot-root <path>    Directory for drain snapshot manifests\n  --listen <host:port>      Address to bind, for example 0.0.0.0:8080\n  --host <host>             Bind host when --listen is not used\n  --port <port>             Bind port when --listen is not used\n  --workspace-id <id>       EvalOps workspace id for metadata\n  --agent-run-id <id>       Platform AgentRun id for metadata\n  --maestro-session-id <id> Existing Maestro session id for metadata\n  --attach-audience <aud>   Expected attach audience metadata\n  --help                    Show this help\n\nEnvironment:\n  MAESTRO_RUNNER_SESSION_ID, REMOTE_RUNNER_SESSION_ID\n  MAESTRO_REMOTE_RUNNER_OWNER_INSTANCE_ID, REMOTE_RUNNER_OWNER_INSTANCE_ID\n  MAESTRO_WORKSPACE_ROOT\n  MAESTRO_REMOTE_RUNNER_SNAPSHOT_ROOT, REMOTE_RUNNER_SNAPSHOT_ROOT\n  MAESTRO_HOSTED_RUNNER_LISTEN, MAESTRO_HOSTED_RUNNER_HOST, MAESTRO_HOSTED_RUNNER_PORT, PORT\n  MAESTRO_REMOTE_RUNNER_WORKSPACE_ID, MAESTRO_AGENT_RUN_ID, MAESTRO_SESSION_ID\n  MAESTRO_ATTACH_AUDIENCE`;\n\nfunction parseHostedRunnerOptions(\n\targs: readonly string[],\n): HostedRunnerOptions {\n\tconst flags = new Map<string, HostedRunnerFlagValue[]>();\n\tconst positionals: string[] = [];\n\n\tfor (let index = 0; index < args.length; index += 1) {\n\t\tconst arg = args[index];\n\t\tif (!arg) {\n\t\t\tcontinue;\n\t\t}\n\t\tif (arg === \"--\") {\n\t\t\tpositionals.push(...args.slice(index + 1));\n\t\t\tbreak;\n\t\t}\n\t\tif (!arg.startsWith(\"--\")) {\n\t\t\tpositionals.push(arg);\n\t\t\tcontinue;\n\t\t}\n\t\tconst equalsIndex = arg.indexOf(\"=\");\n\t\tconst key = equalsIndex >= 0 ? arg.slice(2, equalsIndex) : arg.slice(2);\n\t\tconst inlineValue =\n\t\t\tequalsIndex >= 0 ? arg.slice(equalsIndex + 1) : undefined;\n\t\tconst next = args[index + 1];\n\t\tconst value =\n\t\t\tinlineValue !== undefined\n\t\t\t\t? inlineValue\n\t\t\t\t: next && !next.startsWith(\"--\")\n\t\t\t\t\t? next\n\t\t\t\t\t: true;\n\t\tif (inlineValue === undefined && value !== true) {\n\t\t\tindex += 1;\n\t\t}\n\t\tconst values = flags.get(key) ?? [];\n\t\tvalues.push(value);\n\t\tflags.set(key, values);\n\t}\n\n\treturn { flags, positionals };\n}\n\nfunction getLastFlag(\n\toptions: HostedRunnerOptions,\n\tkey: string,\n): string | undefined {\n\tconst values = options.flags.get(key);\n\tconst value = values?.at(-1);\n\treturn typeof value === \"string\" ? value.trim() : undefined;\n}\n\nfunction hasFlag(options: HostedRunnerOptions, key: string): boolean {\n\treturn options.flags.has(key);\n}\n\nfunction getEnvValue(\n\tenv: NodeJS.ProcessEnv,\n\tkeys: readonly string[],\n): string | undefined {\n\tfor (const key of keys) {\n\t\tconst value = env[key]?.trim();\n\t\tif (value) {\n\t\t\treturn value;\n\t\t}\n\t}\n\treturn undefined;\n}\n\nfunction parsePort(\n\tvalue: string | undefined,\n\tlabel: string,\n): number | undefined {\n\tif (!value) {\n\t\treturn undefined;\n\t}\n\tif (!/^\\d+$/.test(value.trim())) {\n\t\tthrow new Error(`${label} must be a TCP port between 1 and 65535`);\n\t}\n\tconst port = Number.parseInt(value, 10);\n\tif (!Number.isInteger(port) || port <= 0 || port > 65535) {\n\t\tthrow new Error(`${label} must be a TCP port between 1 and 65535`);\n\t}\n\treturn port;\n}\n\nfunction parseListen(value: string | undefined): {\n\thost?: string;\n\tport?: number;\n} {\n\tif (!value) {\n\t\treturn {};\n\t}\n\tconst trimmed = value.trim();\n\tif (/^\\d+$/.test(trimmed)) {\n\t\treturn { port: parsePort(trimmed, \"--listen\") };\n\t}\n\tconst separatorIndex = trimmed.lastIndexOf(\":\");\n\tif (separatorIndex <= 0 || separatorIndex === trimmed.length - 1) {\n\t\tthrow new Error(\"--listen must be <host:port> or <port>\");\n\t}\n\treturn {\n\t\thost: trimmed.slice(0, separatorIndex),\n\t\tport: parsePort(trimmed.slice(separatorIndex + 1), \"--listen\"),\n\t};\n}\n\nasync function resolveWorkspaceRoot(path: string | undefined): Promise<string> {\n\tif (!path) {\n\t\tthrow new Error(\n\t\t\t\"maestro hosted-runner requires --workspace-root or MAESTRO_WORKSPACE_ROOT\",\n\t\t);\n\t}\n\tconst workspaceRoot = resolve(path);\n\tconst stats = await stat(workspaceRoot);\n\tif (!stats.isDirectory()) {\n\t\tthrow new Error(`Hosted runner workspace root is not a directory: ${path}`);\n\t}\n\treturn realpath(workspaceRoot);\n}\n\nfunction resolveSnapshotRoot(\n\tpath: string | undefined,\n\tworkspaceRoot: string,\n): string {\n\tif (!path) {\n\t\treturn resolve(workspaceRoot, \".maestro\", \"runner-snapshots\");\n\t}\n\treturn resolve(workspaceRoot, path);\n}\n\nexport function formatHostedRunnerUsage(): string {\n\treturn HOSTED_RUNNER_USAGE;\n}\n\nexport async function resolveHostedRunnerConfig(\n\targs: readonly string[],\n\tenv: NodeJS.ProcessEnv = process.env,\n\toptions: HostedRunnerResolveOptions = {},\n): Promise<HostedRunnerConfig> {\n\tconst parsed = parseHostedRunnerOptions(args);\n\tif (parsed.positionals.length > 0) {\n\t\tthrow new Error(\n\t\t\t`Unexpected hosted-runner argument: ${parsed.positionals[0]}`,\n\t\t);\n\t}\n\n\tconst runnerSessionId =\n\t\tgetLastFlag(parsed, \"runner-session-id\") ??\n\t\tgetEnvValue(env, [\"MAESTRO_RUNNER_SESSION_ID\", \"REMOTE_RUNNER_SESSION_ID\"]);\n\tif (!runnerSessionId) {\n\t\tthrow new Error(\n\t\t\t\"maestro hosted-runner requires --runner-session-id or MAESTRO_RUNNER_SESSION_ID\",\n\t\t);\n\t}\n\n\tconst listen = parseListen(\n\t\tgetLastFlag(parsed, \"listen\") ?? env.MAESTRO_HOSTED_RUNNER_LISTEN,\n\t);\n\tconst port =\n\t\tlisten.port ??\n\t\tparsePort(getLastFlag(parsed, \"port\"), \"--port\") ??\n\t\tparsePort(env.MAESTRO_HOSTED_RUNNER_PORT, \"MAESTRO_HOSTED_RUNNER_PORT\") ??\n\t\tparsePort(env.PORT, \"PORT\") ??\n\t\toptions.defaultPort ??\n\t\t8080;\n\tconst workspaceRoot = await resolveWorkspaceRoot(\n\t\tgetLastFlag(parsed, \"workspace-root\") ??\n\t\t\tgetEnvValue(env, [\"MAESTRO_WORKSPACE_ROOT\", \"WORKSPACE_ROOT\"]),\n\t);\n\n\treturn {\n\t\trunnerSessionId,\n\t\townerInstanceId:\n\t\t\tgetLastFlag(parsed, \"owner-instance-id\") ??\n\t\t\tgetEnvValue(env, [\n\t\t\t\t\"MAESTRO_REMOTE_RUNNER_OWNER_INSTANCE_ID\",\n\t\t\t\t\"REMOTE_RUNNER_OWNER_INSTANCE_ID\",\n\t\t\t]),\n\t\tworkspaceRoot,\n\t\tsnapshotRoot: resolveSnapshotRoot(\n\t\t\tgetLastFlag(parsed, \"snapshot-root\") ??\n\t\t\t\tgetEnvValue(env, [\n\t\t\t\t\t\"MAESTRO_REMOTE_RUNNER_SNAPSHOT_ROOT\",\n\t\t\t\t\t\"REMOTE_RUNNER_SNAPSHOT_ROOT\",\n\t\t\t\t]),\n\t\t\tworkspaceRoot,\n\t\t),\n\t\thost:\n\t\t\tlisten.host ??\n\t\t\tgetLastFlag(parsed, \"host\") ??\n\t\t\tenv.MAESTRO_HOSTED_RUNNER_HOST,\n\t\tport,\n\t\tworkspaceId:\n\t\t\tgetLastFlag(parsed, \"workspace-id\") ??\n\t\t\tgetEnvValue(env, [\n\t\t\t\t\"MAESTRO_REMOTE_RUNNER_WORKSPACE_ID\",\n\t\t\t\t\"MAESTRO_WORKSPACE_ID\",\n\t\t\t]),\n\t\tagentRunId: getLastFlag(parsed, \"agent-run-id\") ?? env.MAESTRO_AGENT_RUN_ID,\n\t\tmaestroSessionId:\n\t\t\tgetLastFlag(parsed, \"maestro-session-id\") ?? env.MAESTRO_SESSION_ID,\n\t\tattachAudience:\n\t\t\tgetLastFlag(parsed, \"attach-audience\") ?? env.MAESTRO_ATTACH_AUDIENCE,\n\t};\n}\n\nexport function applyHostedRunnerEnvironment(config: HostedRunnerConfig): void {\n\tprocess.env.MAESTRO_HOSTED_RUNNER_MODE = \"1\";\n\tprocess.env.MAESTRO_RUNNER_SESSION_ID = config.runnerSessionId;\n\tprocess.env.MAESTRO_WORKSPACE_ROOT = config.workspaceRoot;\n\tprocess.env.MAESTRO_REMOTE_RUNNER_SNAPSHOT_ROOT = config.snapshotRoot;\n\tif (config.ownerInstanceId) {\n\t\tprocess.env.MAESTRO_REMOTE_RUNNER_OWNER_INSTANCE_ID =\n\t\t\tconfig.ownerInstanceId;\n\t\tprocess.env.REMOTE_RUNNER_OWNER_INSTANCE_ID = config.ownerInstanceId;\n\t}\n\tprocess.env.MAESTRO_PROFILE ??= \"hosted-runner\";\n\tprocess.env.MAESTRO_WEB_REQUIRE_KEY ??= \"1\";\n\tprocess.env.MAESTRO_WEB_REQUIRE_REDIS ??= \"0\";\n\tprocess.env.MAESTRO_WEB_REQUIRE_CSRF ??= \"0\";\n\tprocess.env.MAESTRO_AGENT_DIR ??= resolve(\n\t\tconfig.workspaceRoot,\n\t\t\".maestro\",\n\t\t\"agent\",\n\t);\n\tif (config.workspaceId) {\n\t\tprocess.env.MAESTRO_REMOTE_RUNNER_WORKSPACE_ID = config.workspaceId;\n\t}\n\tif (config.agentRunId) {\n\t\tprocess.env.MAESTRO_AGENT_RUN_ID = config.agentRunId;\n\t}\n\tif (config.maestroSessionId) {\n\t\tprocess.env.MAESTRO_SESSION_ID = config.maestroSessionId;\n\t}\n\tif (config.attachAudience) {\n\t\tprocess.env.MAESTRO_ATTACH_AUDIENCE = config.attachAudience;\n\t}\n\tprocess.chdir(config.workspaceRoot);\n}\n\nexport function toHostedRunnerContext(\n\tconfig: HostedRunnerConfig,\n): HostedRunnerContext {\n\treturn {\n\t\tenabled: true,\n\t\trunnerSessionId: config.runnerSessionId,\n\t\townerInstanceId: config.ownerInstanceId,\n\t\tworkspaceRoot: config.workspaceRoot,\n\t\tsnapshotRoot: config.snapshotRoot,\n\t\tlistenHost: config.host,\n\t\tlistenPort: config.port,\n\t\tworkspaceId: config.workspaceId,\n\t\tagentRunId: config.agentRunId,\n\t\tattachAudience: config.attachAudience,\n\t\tconfiguredMaestroSessionId: config.maestroSessionId,\n\t\tactiveMaestroSessionId: config.maestroSessionId,\n\t};\n}\n\nexport async function handleHostedRunnerCommand(\n\targs: readonly string[],\n\toptions: HostedRunnerResolveOptions = {},\n): Promise<void> {\n\tconst parsed = parseHostedRunnerOptions(args);\n\tif (hasFlag(parsed, \"help\")) {\n\t\tconsole.log(formatHostedRunnerUsage());\n\t\treturn;\n\t}\n\n\ttry {\n\t\tconst config = await resolveHostedRunnerConfig(args, process.env, options);\n\t\tapplyHostedRunnerEnvironment(config);\n\t\tconst { startWebServer } = await import(\"../../web-server.js\");\n\t\tawait startWebServer(config.port, {\n\t\t\thost: config.host,\n\t\t\thostedRunner: toHostedRunnerContext(config),\n\t\t});\n\t} catch (error) {\n\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\tconsole.error(chalk.red(message));\n\t\tprocess.exit(1);\n\t}\n}\n"]}

package/dist/cli/commands/init.d.ts

@@ -0,0 +1,4 @@
+import { type EvalOpsInitOptions } from "../../evalops/agent-bootstrap.js";
+export declare function parseInitArgs(args: string[]): EvalOpsInitOptions;
+export declare function handleInitCommand(args?: string[]): Promise<void>;
+//# sourceMappingURL=init.d.ts.map

package/dist/cli/commands/init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/init.ts"],"names":[],"mappings":"AACA,OAAO,EACN,KAAK,kBAAkB,EAEvB,MAAM,kCAAkC,CAAC;AA4B1C,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,kBAAkB,CA2EhE;AAED,wBAAsB,iBAAiB,CAAC,IAAI,GAAE,MAAM,EAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CA2D1E"}

package/dist/cli/commands/init.js

@@ -0,0 +1,140 @@
+import chalk from "chalk";
+import { bootstrapEvalOpsAgent, } from "../../evalops/agent-bootstrap.js";
+function readValue(args, index, flag) {
+    const value = args[index + 1];
+    if (!value || value.startsWith("-")) {
+        throw new Error(`${flag} requires a value`);
+    }
+    return value;
+}
+function parsePositiveInteger(value, flag) {
+    const parsed = Number.parseInt(value, 10);
+    if (!Number.isInteger(parsed) || parsed <= 0) {
+        throw new Error(`${flag} must be a positive integer`);
+    }
+    return parsed;
+}
+function appendScopes(existing, value) {
+    return [
+        ...(existing ?? []),
+        ...value
+            .split(",")
+            .map((entry) => entry.trim())
+            .filter((entry) => entry.length > 0),
+    ];
+}
+export function parseInitArgs(args) {
+    const options = {};
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
+        switch (arg) {
+            case "--agent-mcp-url":
+            case "--mcp-url":
+                options.mcpUrl = readValue(args, i, arg);
+                i++;
+                break;
+            case "--agent-type":
+                options.agentType = readValue(args, i, arg);
+                i++;
+                break;
+            case "--api-key-scope":
+            case "--key-scope":
+                options.apiKeyScopes = appendScopes(options.apiKeyScopes, readValue(args, i, arg));
+                i++;
+                break;
+            case "--expires-in-days":
+                options.expiresInDays = parsePositiveInteger(readValue(args, i, arg), arg);
+                i++;
+                break;
+            case "--force-login":
+                options.forceLogin = true;
+                break;
+            case "--json":
+                options.json = true;
+                break;
+            case "--key-name":
+                options.keyName = readValue(args, i, arg);
+                i++;
+                break;
+            case "--manifest-url":
+                options.manifestUrl = readValue(args, i, arg);
+                i++;
+                break;
+            case "--register-scope":
+            case "--scope":
+                options.registerScopes = appendScopes(options.registerScopes, readValue(args, i, arg));
+                i++;
+                break;
+            case "--rotate-key":
+                options.rotateKey = true;
+                break;
+            case "--surface":
+                options.surface = readValue(args, i, arg);
+                i++;
+                break;
+            case "--ttl-seconds":
+                options.ttlSeconds = parsePositiveInteger(readValue(args, i, arg), arg);
+                i++;
+                break;
+            case "--workspace":
+            case "--workspace-id":
+                options.workspaceId = readValue(args, i, arg);
+                i++;
+                break;
+            default:
+                if (arg?.startsWith("-")) {
+                    throw new Error(`Unknown maestro init option: ${arg}`);
+                }
+                throw new Error(`Unexpected maestro init argument: ${arg}`);
+        }
+    }
+    return options;
+}
+export async function handleInitCommand(args = []) {
+    let options;
+    try {
+        options = parseInitArgs(args);
+    }
+    catch (error) {
+        console.error(chalk.red(error instanceof Error ? error.message : String(error)));
+        process.exit(1);
+    }
+    if (!options.json) {
+        console.log(chalk.bold("Maestro EvalOps Init"));
+    }
+    const result = await bootstrapEvalOpsAgent(options, {
+        onAuthUrl: (url) => {
+            if (options.json) {
+                return;
+            }
+            console.log(chalk.yellow("Open this URL in your browser to authenticate with EvalOps:"));
+            console.log(chalk.underline(url));
+        },
+        onStatus: (status) => {
+            if (!options.json) {
+                console.log(chalk.dim(status.message));
+            }
+        },
+    });
+    if (options.json) {
+        console.log(JSON.stringify(result, null, 2));
+        return;
+    }
+    console.log(chalk.green("EvalOps agent bootstrap complete."));
+    console.log(chalk.dim(`MCP endpoint: ${result.endpoint}`));
+    if (result.organizationId) {
+        console.log(chalk.dim(`Organization: ${result.organizationId}`));
+    }
+    if (result.agentId) {
+        console.log(chalk.dim(`Agent: ${result.agentId}`));
+    }
+    if (result.runId) {
+        console.log(chalk.dim(`Run: ${result.runId}`));
+    }
+    if (result.keyPrefix) {
+        const keyMode = result.apiKeyCreated ? "created" : "reused";
+        console.log(chalk.dim(`API key ${keyMode}: ${result.keyPrefix}`));
+    }
+    console.log(chalk.dim("Stored EvalOps MCP credentials locally for future Maestro sessions."));
+}
+//# sourceMappingURL=init.js.map

package/dist/cli/commands/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../../src/cli/commands/init.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAEN,qBAAqB,GACrB,MAAM,kCAAkC,CAAC;AAE1C,SAAS,SAAS,CAAC,IAAc,EAAE,KAAa,EAAE,IAAY;IAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,mBAAmB,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa,EAAE,IAAY;IACxD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,6BAA6B,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,QAA8B,EAAE,KAAa;IAClE,OAAO;QACN,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;QACnB,GAAG,KAAK;aACN,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;aAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;KACrC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAc;IAC3C,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,QAAQ,GAAG,EAAE,CAAC;YACb,KAAK,iBAAiB,CAAC;YACvB,KAAK,WAAW;gBACf,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;gBACzC,CAAC,EAAE,CAAC;gBACJ,MAAM;YACP,KAAK,cAAc;gBAClB,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;gBAC5C,CAAC,EAAE,CAAC;gBACJ,MAAM;YACP,KAAK,iBAAiB,CAAC;YACvB,KAAK,aAAa;gBACjB,OAAO,CAAC,YAAY,GAAG,YAAY,CAClC,OAAO,CAAC,YAAY,EACpB,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CACvB,CAAC;gBACF,CAAC,EAAE,CAAC;gBACJ,MAAM;YACP,KAAK,mBAAmB;gBACvB,OAAO,CAAC,aAAa,GAAG,oBAAoB,CAC3C,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,EACvB,GAAG,CACH,CAAC;gBACF,CAAC,EAAE,CAAC;gBACJ,MAAM;YACP,KAAK,eAAe;gBACnB,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;gBAC1B,MAAM;YACP,KAAK,QAAQ;gBACZ,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;gBACpB,MAAM;YACP,KAAK,YAAY;gBAChB,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;gBAC1C,CAAC,EAAE,CAAC;gBACJ,MAAM;YACP,KAAK,gBAAgB;gBACpB,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;gBAC9C,CAAC,EAAE,CAAC;gBACJ,MAAM;YACP,KAAK,kBAAkB,CAAC;YACxB,KAAK,SAAS;gBACb,OAAO,CAAC,cAAc,GAAG,YAAY,CACpC,OAAO,CAAC,cAAc,EACtB,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CACvB,CAAC;gBACF,CAAC,EAAE,CAAC;gBACJ,MAAM;YACP,KAAK,cAAc;gBAClB,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;gBACzB,MAAM;YACP,KAAK,WAAW;gBACf,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;gBAC1C,CAAC,EAAE,CAAC;gBACJ,MAAM;YACP,KAAK,eAAe;gBACnB,OAAO,CAAC,UAAU,GAAG,oBAAoB,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;gBACxE,CAAC,EAAE,CAAC;gBACJ,MAAM;YACP,KAAK,aAAa,CAAC;YACnB,KAAK,gBAAgB;gBACpB,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;gBAC9C,CAAC,EAAE,CAAC;gBACJ,MAAM;YACP;gBACC,IAAI,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1B,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,EAAE,CAAC,CAAC;gBACxD,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,qCAAqC,GAAG,EAAE,CAAC,CAAC;QAC9D,CAAC;IACF,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAiB,EAAE;IAC1D,IAAI,OAA2B,CAAC;IAChC,IAAI,CAAC;QACJ,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,CAAC,KAAK,CACZ,KAAK,CAAC,GAAG,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CACjE,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE;QACnD,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;YAClB,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClB,OAAO;YACR,CAAC;YACD,OAAO,CAAC,GAAG,CACV,KAAK,CAAC,MAAM,CACX,6DAA6D,CAC7D,CACD,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QACnC,CAAC;QACD,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE;YACpB,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBACnB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YACxC,CAAC;QACF,CAAC;KACD,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO;IACR,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC3D,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,OAAO,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,CAAC,GAAG,CACV,KAAK,CAAC,GAAG,CACR,qEAAqE,CACrE,CACD,CAAC;AACH,CAAC","sourcesContent":["import chalk from \"chalk\";\nimport {\n\ttype EvalOpsInitOptions,\n\tbootstrapEvalOpsAgent,\n} from \"../../evalops/agent-bootstrap.js\";\n\nfunction readValue(args: string[], index: number, flag: string): string {\n\tconst value = args[index + 1];\n\tif (!value || value.startsWith(\"-\")) {\n\t\tthrow new Error(`${flag} requires a value`);\n\t}\n\treturn value;\n}\n\nfunction parsePositiveInteger(value: string, flag: string): number {\n\tconst parsed = Number.parseInt(value, 10);\n\tif (!Number.isInteger(parsed) || parsed <= 0) {\n\t\tthrow new Error(`${flag} must be a positive integer`);\n\t}\n\treturn parsed;\n}\n\nfunction appendScopes(existing: string[] | undefined, value: string): string[] {\n\treturn [\n\t\t...(existing ?? []),\n\t\t...value\n\t\t\t.split(\",\")\n\t\t\t.map((entry) => entry.trim())\n\t\t\t.filter((entry) => entry.length > 0),\n\t];\n}\n\nexport function parseInitArgs(args: string[]): EvalOpsInitOptions {\n\tconst options: EvalOpsInitOptions = {};\n\tfor (let i = 0; i < args.length; i++) {\n\t\tconst arg = args[i];\n\t\tswitch (arg) {\n\t\t\tcase \"--agent-mcp-url\":\n\t\t\tcase \"--mcp-url\":\n\t\t\t\toptions.mcpUrl = readValue(args, i, arg);\n\t\t\t\ti++;\n\t\t\t\tbreak;\n\t\t\tcase \"--agent-type\":\n\t\t\t\toptions.agentType = readValue(args, i, arg);\n\t\t\t\ti++;\n\t\t\t\tbreak;\n\t\t\tcase \"--api-key-scope\":\n\t\t\tcase \"--key-scope\":\n\t\t\t\toptions.apiKeyScopes = appendScopes(\n\t\t\t\t\toptions.apiKeyScopes,\n\t\t\t\t\treadValue(args, i, arg),\n\t\t\t\t);\n\t\t\t\ti++;\n\t\t\t\tbreak;\n\t\t\tcase \"--expires-in-days\":\n\t\t\t\toptions.expiresInDays = parsePositiveInteger(\n\t\t\t\t\treadValue(args, i, arg),\n\t\t\t\t\targ,\n\t\t\t\t);\n\t\t\t\ti++;\n\t\t\t\tbreak;\n\t\t\tcase \"--force-login\":\n\t\t\t\toptions.forceLogin = true;\n\t\t\t\tbreak;\n\t\t\tcase \"--json\":\n\t\t\t\toptions.json = true;\n\t\t\t\tbreak;\n\t\t\tcase \"--key-name\":\n\t\t\t\toptions.keyName = readValue(args, i, arg);\n\t\t\t\ti++;\n\t\t\t\tbreak;\n\t\t\tcase \"--manifest-url\":\n\t\t\t\toptions.manifestUrl = readValue(args, i, arg);\n\t\t\t\ti++;\n\t\t\t\tbreak;\n\t\t\tcase \"--register-scope\":\n\t\t\tcase \"--scope\":\n\t\t\t\toptions.registerScopes = appendScopes(\n\t\t\t\t\toptions.registerScopes,\n\t\t\t\t\treadValue(args, i, arg),\n\t\t\t\t);\n\t\t\t\ti++;\n\t\t\t\tbreak;\n\t\t\tcase \"--rotate-key\":\n\t\t\t\toptions.rotateKey = true;\n\t\t\t\tbreak;\n\t\t\tcase \"--surface\":\n\t\t\t\toptions.surface = readValue(args, i, arg);\n\t\t\t\ti++;\n\t\t\t\tbreak;\n\t\t\tcase \"--ttl-seconds\":\n\t\t\t\toptions.ttlSeconds = parsePositiveInteger(readValue(args, i, arg), arg);\n\t\t\t\ti++;\n\t\t\t\tbreak;\n\t\t\tcase \"--workspace\":\n\t\t\tcase \"--workspace-id\":\n\t\t\t\toptions.workspaceId = readValue(args, i, arg);\n\t\t\t\ti++;\n\t\t\t\tbreak;\n\t\t\tdefault:\n\t\t\t\tif (arg?.startsWith(\"-\")) {\n\t\t\t\t\tthrow new Error(`Unknown maestro init option: ${arg}`);\n\t\t\t\t}\n\t\t\t\tthrow new Error(`Unexpected maestro init argument: ${arg}`);\n\t\t}\n\t}\n\treturn options;\n}\n\nexport async function handleInitCommand(args: string[] = []): Promise<void> {\n\tlet options: EvalOpsInitOptions;\n\ttry {\n\t\toptions = parseInitArgs(args);\n\t} catch (error) {\n\t\tconsole.error(\n\t\t\tchalk.red(error instanceof Error ? error.message : String(error)),\n\t\t);\n\t\tprocess.exit(1);\n\t}\n\n\tif (!options.json) {\n\t\tconsole.log(chalk.bold(\"Maestro EvalOps Init\"));\n\t}\n\n\tconst result = await bootstrapEvalOpsAgent(options, {\n\t\tonAuthUrl: (url) => {\n\t\t\tif (options.json) {\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tconsole.log(\n\t\t\t\tchalk.yellow(\n\t\t\t\t\t\"Open this URL in your browser to authenticate with EvalOps:\",\n\t\t\t\t),\n\t\t\t);\n\t\t\tconsole.log(chalk.underline(url));\n\t\t},\n\t\tonStatus: (status) => {\n\t\t\tif (!options.json) {\n\t\t\t\tconsole.log(chalk.dim(status.message));\n\t\t\t}\n\t\t},\n\t});\n\n\tif (options.json) {\n\t\tconsole.log(JSON.stringify(result, null, 2));\n\t\treturn;\n\t}\n\n\tconsole.log(chalk.green(\"EvalOps agent bootstrap complete.\"));\n\tconsole.log(chalk.dim(`MCP endpoint: ${result.endpoint}`));\n\tif (result.organizationId) {\n\t\tconsole.log(chalk.dim(`Organization: ${result.organizationId}`));\n\t}\n\tif (result.agentId) {\n\t\tconsole.log(chalk.dim(`Agent: ${result.agentId}`));\n\t}\n\tif (result.runId) {\n\t\tconsole.log(chalk.dim(`Run: ${result.runId}`));\n\t}\n\tif (result.keyPrefix) {\n\t\tconst keyMode = result.apiKeyCreated ? \"created\" : \"reused\";\n\t\tconsole.log(chalk.dim(`API key ${keyMode}: ${result.keyPrefix}`));\n\t}\n\tconsole.log(\n\t\tchalk.dim(\n\t\t\t\"Stored EvalOps MCP credentials locally for future Maestro sessions.\",\n\t\t),\n\t);\n}\n"]}

package/dist/cli/commands/memory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/memory.ts"],"names":[],"mappings":"AAwQA,wBAAsB,mBAAmB,CACxC,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,IAAI,EAAE,MAAM,EAAE,GACZ,OAAO,CAAC,IAAI,CAAC,CAuFf"}
+{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/memory.ts"],"names":[],"mappings":"AA2QA,wBAAsB,mBAAmB,CACxC,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,IAAI,EAAE,MAAM,EAAE,GACZ,OAAO,CAAC,IAAI,CAAC,CAuFf"}

package/dist/cli/commands/memory.js

@@ -1,5 +1,6 @@
 import chalk from "chalk";
 import { badge, muted, sectionHeading, separator } from "../../style/theme.js";
+import { fetchDownstream } from "../../utils/downstream-http.js";
 const REQUEST_TIMEOUT_MS = 5000;
 function getConfig() {
     const base = process.env.MAESTRO_SHARED_MEMORY_BASE?.trim();
@@ -21,40 +22,32 @@ function buildHeaders(config) {
     return headers;
 }
 async function fetchJson(config, path) {
-    const controller = new AbortController();
-    const timeout = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);
-    try {
-        const response = await fetch(`${config.baseUrl}${path}`, {
-            headers: buildHeaders(config),
-            signal: controller.signal,
-        });
-        const text = await response.text();
-        if (!response.ok) {
-            throw new Error(`Shared memory error ${response.status}: ${text || response.statusText}`);
-        }
-        return text ? JSON.parse(text) : {};
-    }
-    finally {
-        clearTimeout(timeout);
+    const response = await fetchDownstream(`${config.baseUrl}${path}`, {
+        headers: buildHeaders(config),
+    }, {
+        serviceName: "shared memory service",
+        failureMode: "required",
+        timeoutMs: REQUEST_TIMEOUT_MS,
+    });
+    const text = await response.text();
+    if (!response.ok) {
+        throw new Error(`Shared memory error ${response.status}: ${text || response.statusText}`);
     }
+    return text ? JSON.parse(text) : {};
 }
 async function fetchText(config, path) {
-    const controller = new AbortController();
-    const timeout = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);
-    try {
-        const response = await fetch(`${config.baseUrl}${path}`, {
-            headers: buildHeaders(config),
-            signal: controller.signal,
-        });
-        const text = await response.text();
-        if (!response.ok) {
-            throw new Error(`Shared memory error ${response.status}: ${text || response.statusText}`);
-        }
-        return text;
-    }
-    finally {
-        clearTimeout(timeout);
+    const response = await fetchDownstream(`${config.baseUrl}${path}`, {
+        headers: buildHeaders(config),
+    }, {
+        serviceName: "shared memory service",
+        failureMode: "required",
+        timeoutMs: REQUEST_TIMEOUT_MS,
+    });
+    const text = await response.text();
+    if (!response.ok) {
+        throw new Error(`Shared memory error ${response.status}: ${text || response.statusText}`);
     }
+    return text;
 }
 function printCapabilities(cap) {
     if (!cap) {