@evalops/maestro 0.10.8 → 0.10.11

package/dist/platform/tool-execution-client.js

@@ -0,0 +1,284 @@
+import { postPlatformConnect, resolvePlatformServiceConfig, trimString, } from "./client.js";
+import { PLATFORM_CONNECT_METHODS, platformConnectMethodPath, platformConnectServicePath, } from "./core-services.js";
+const DEFAULT_TIMEOUT_MS = 2_500;
+const DEFAULT_MAX_ATTEMPTS = 2;
+const TOOL_EXECUTION_BASE_URL_ENV_VARS = [
+    "TOOL_EXECUTION_SERVICE_URL",
+    "MAESTRO_TOOL_EXECUTION_SERVICE_URL",
+    "MAESTRO_PLATFORM_BASE_URL",
+    "MAESTRO_EVALOPS_BASE_URL",
+    "EVALOPS_BASE_URL",
+];
+const TOOL_EXECUTION_TOKEN_ENV_VARS = [
+    "TOOL_EXECUTION_SERVICE_TOKEN",
+    "MAESTRO_TOOL_EXECUTION_SERVICE_TOKEN",
+    "MAESTRO_EVALOPS_ACCESS_TOKEN",
+    "EVALOPS_TOKEN",
+];
+const TOOL_EXECUTION_ORGANIZATION_ENV_VARS = [
+    "TOOL_EXECUTION_SERVICE_ORGANIZATION_ID",
+    "MAESTRO_TOOL_EXECUTION_ORGANIZATION_ID",
+    "MAESTRO_EVALOPS_ORG_ID",
+    "EVALOPS_ORGANIZATION_ID",
+    "MAESTRO_ENTERPRISE_ORG_ID",
+];
+const TOOL_EXECUTION_WORKSPACE_ENV_VARS = [
+    "TOOL_EXECUTION_SERVICE_WORKSPACE_ID",
+    "MAESTRO_TOOL_EXECUTION_WORKSPACE_ID",
+    "MAESTRO_REMOTE_RUNNER_WORKSPACE_ID",
+    "MAESTRO_EVALOPS_WORKSPACE_ID",
+    "EVALOPS_WORKSPACE_ID",
+    "MAESTRO_WORKSPACE_ID",
+];
+const TOOL_EXECUTION_TIMEOUT_ENV_VARS = [
+    "TOOL_EXECUTION_SERVICE_TIMEOUT_MS",
+    "MAESTRO_TOOL_EXECUTION_SERVICE_TIMEOUT_MS",
+];
+const TOOL_EXECUTION_MAX_ATTEMPTS_ENV_VARS = [
+    "TOOL_EXECUTION_SERVICE_MAX_ATTEMPTS",
+    "MAESTRO_TOOL_EXECUTION_SERVICE_MAX_ATTEMPTS",
+];
+const EXECUTE_TOOL_PATH = platformConnectMethodPath(PLATFORM_CONNECT_METHODS.toolexecution.executeTool);
+const RESUME_TOOL_EXECUTION_PATH = platformConnectMethodPath(PLATFORM_CONNECT_METHODS.toolexecution.resumeToolExecution);
+const RECORD_TOOL_EXECUTION_OUTPUT_PATH = platformConnectMethodPath(PLATFORM_CONNECT_METHODS.toolexecution.recordToolExecutionOutput);
+function stripTrailingSlashes(value) {
+    return value.replace(/\/+$/u, "");
+}
+function normalizeBaseUrl(baseUrl) {
+    let normalized = stripTrailingSlashes(baseUrl.trim());
+    for (const suffix of [
+        EXECUTE_TOOL_PATH,
+        RESUME_TOOL_EXECUTION_PATH,
+        RECORD_TOOL_EXECUTION_OUTPUT_PATH,
+        platformConnectServicePath(PLATFORM_CONNECT_METHODS.toolexecution.executeTool.service),
+    ]) {
+        if (normalized.endsWith(suffix)) {
+            normalized = stripTrailingSlashes(normalized.slice(0, -suffix.length));
+        }
+    }
+    return normalized;
+}
+export async function resolveToolExecutionServiceConfig(overrides = {}) {
+    const config = await resolvePlatformServiceConfig({
+        baseUrlEnvVars: TOOL_EXECUTION_BASE_URL_ENV_VARS,
+        tokenEnvVars: TOOL_EXECUTION_TOKEN_ENV_VARS,
+        organizationEnvVars: TOOL_EXECUTION_ORGANIZATION_ENV_VARS,
+        workspaceEnvVars: TOOL_EXECUTION_WORKSPACE_ENV_VARS,
+        timeoutEnvVars: TOOL_EXECUTION_TIMEOUT_ENV_VARS,
+        maxAttemptsEnvVars: TOOL_EXECUTION_MAX_ATTEMPTS_ENV_VARS,
+        baseUrlSuffixes: [
+            EXECUTE_TOOL_PATH,
+            RESUME_TOOL_EXECUTION_PATH,
+            RECORD_TOOL_EXECUTION_OUTPUT_PATH,
+            platformConnectServicePath(PLATFORM_CONNECT_METHODS.toolexecution.executeTool.service),
+        ],
+        defaultTimeoutMs: DEFAULT_TIMEOUT_MS,
+        defaultMaxAttempts: DEFAULT_MAX_ATTEMPTS,
+        requireBaseUrl: false,
+        requireOrganizationId: true,
+        requireToken: true,
+    });
+    if (!config?.baseUrl || !config.workspaceId) {
+        return null;
+    }
+    return {
+        ...config,
+        baseUrl: normalizeBaseUrl(trimString(overrides.baseUrl ?? config.baseUrl) ?? config.baseUrl),
+        organizationId: trimString(overrides.organizationId ?? config.organizationId) ??
+            config.organizationId,
+        workspaceId: trimString(overrides.workspaceId ?? config.workspaceId) ??
+            config.workspaceId,
+        token: trimString(overrides.token ?? config.token) ?? config.token,
+        timeoutMs: overrides.timeoutMs ?? config.timeoutMs,
+        maxAttempts: overrides.maxAttempts ?? config.maxAttempts,
+        teamId: trimString(overrides.teamId ?? config.teamId),
+    };
+}
+function firstString(record, ...keys) {
+    for (const key of keys) {
+        const value = record[key];
+        if (typeof value === "string" && value.trim().length > 0) {
+            return value.trim();
+        }
+    }
+    return undefined;
+}
+function firstBoolean(record, ...keys) {
+    for (const key of keys) {
+        const value = record[key];
+        if (typeof value === "boolean") {
+            return value;
+        }
+    }
+    return undefined;
+}
+function objectValue(record, ...keys) {
+    for (const key of keys) {
+        const value = record[key];
+        if (value && typeof value === "object" && !Array.isArray(value)) {
+            return value;
+        }
+    }
+    return undefined;
+}
+function normalizeExecutionState(value) {
+    if (typeof value !== "string" || value.trim().length === 0) {
+        return undefined;
+    }
+    return value.trim();
+}
+function normalizeApprovalWait(record) {
+    if (!record) {
+        return undefined;
+    }
+    const approvalRequestId = firstString(record, "approvalRequestId", "approval_request_id");
+    const resumeToken = firstString(record, "resumeToken", "resume_token");
+    const reason = firstString(record, "reason");
+    if (!approvalRequestId && !resumeToken && !reason) {
+        return undefined;
+    }
+    return {
+        ...(approvalRequestId ? { approvalRequestId } : {}),
+        ...(resumeToken ? { resumeToken } : {}),
+        ...(reason ? { reason } : {}),
+    };
+}
+function normalizeExecutionRecord(record) {
+    if (!record) {
+        return {};
+    }
+    return {
+        id: firstString(record, "id"),
+        state: normalizeExecutionState(record.state),
+        errorMessage: firstString(record, "errorMessage", "error_message"),
+        approvalWait: normalizeApprovalWait(objectValue(record, "approvalWait", "approval_wait")),
+    };
+}
+function stripUndefinedValues(record) {
+    return Object.fromEntries(Object.entries(record).filter(([, value]) => value !== undefined));
+}
+function normalizeExecuteToolRequest(request) {
+    return stripUndefinedValues({
+        linkage: stripUndefinedValues({
+            workspaceId: request.linkage.workspaceId,
+            organizationId: request.linkage.organizationId,
+            agentId: request.linkage.agentId,
+            runId: request.linkage.runId,
+            objectiveId: request.linkage.objectiveId,
+            stepId: request.linkage.stepId,
+            actorId: request.linkage.actorId,
+            surface: request.linkage.surface,
+            channelId: request.linkage.channelId,
+            correlationId: request.linkage.correlationId,
+        }),
+        tool: stripUndefinedValues({
+            namespace: request.tool.namespace,
+            name: request.tool.name,
+            version: request.tool.version,
+            capability: request.tool.capability,
+            operation: request.tool.operation,
+            idempotent: request.tool.idempotent,
+            mutatesResource: request.tool.mutatesResource,
+        }),
+        connector: request.connector
+            ? stripUndefinedValues({
+                connectionId: request.connector.connectionId,
+                providerId: request.connector.providerId,
+                resourceId: request.connector.resourceId,
+                resourceKind: request.connector.resourceKind,
+                credentialRef: request.connector.credentialRef,
+                credentialEnvironment: request.connector.credentialEnvironment,
+            })
+            : undefined,
+        arguments: request.arguments,
+        riskLevel: request.riskLevel,
+        retryPolicy: request.retryPolicy
+            ? stripUndefinedValues({
+                maxAttempts: request.retryPolicy.maxAttempts,
+                initialDelayMs: request.retryPolicy.initialDelayMs,
+                maxDelayMs: request.retryPolicy.maxDelayMs,
+                allowNonIdempotentRetry: request.retryPolicy.allowNonIdempotentRetry,
+            })
+            : undefined,
+        idempotencyKey: request.idempotencyKey,
+        metadata: request.metadata,
+    });
+}
+function normalizeToolExecutionOutput(output) {
+    return stripUndefinedValues({
+        rawOutput: output.rawOutput,
+        safeOutput: output.safeOutput,
+        proposals: output.proposals?.map((proposal) => stripUndefinedValues({
+            kind: proposal.kind,
+            targetRef: proposal.targetRef,
+            payload: proposal.payload,
+            metadata: proposal.metadata,
+        })),
+        redactions: output.redactions,
+        contentType: output.contentType,
+        outputDigest: output.outputDigest,
+        durationMs: output.durationMs,
+    });
+}
+async function parseJsonResponse(response, serviceName) {
+    const text = await response.text();
+    if (!response.ok) {
+        throw new Error(`${serviceName} returned ${response.status}: ${text || response.statusText}`);
+    }
+    if (!text.trim()) {
+        throw new Error(`${serviceName} returned empty response`);
+    }
+    return JSON.parse(text);
+}
+export async function executeToolWithPlatform(config, request, signal) {
+    const response = await postPlatformConnect(config, EXECUTE_TOOL_PATH, normalizeExecuteToolRequest(request), {
+        serviceName: "tool execution service",
+        failureMode: "required",
+        timeoutMs: config.timeoutMs,
+        maxAttempts: config.maxAttempts,
+        signal,
+    });
+    const payload = await parseJsonResponse(response, "tool execution service");
+    return {
+        execution: normalizeExecutionRecord(objectValue(payload, "execution")),
+        idempotentReplay: firstBoolean(payload, "idempotentReplay", "idempotent_replay") === true,
+    };
+}
+export async function resumeToolExecutionWithPlatform(config, request, signal) {
+    const response = await postPlatformConnect(config, RESUME_TOOL_EXECUTION_PATH, stripUndefinedValues({
+        executionId: request.executionId,
+        approvalRequestId: request.approvalRequestId,
+        resumeToken: request.resumeToken,
+        approved: request.approved,
+        decidedBy: request.decidedBy,
+        reason: request.reason,
+    }), {
+        serviceName: "tool execution service",
+        failureMode: "required",
+        timeoutMs: config.timeoutMs,
+        maxAttempts: config.maxAttempts,
+        signal,
+    });
+    const payload = await parseJsonResponse(response, "tool execution service");
+    return {
+        execution: normalizeExecutionRecord(objectValue(payload, "execution")),
+    };
+}
+export async function recordToolExecutionOutputWithPlatform(config, request, signal) {
+    const response = await postPlatformConnect(config, RECORD_TOOL_EXECUTION_OUTPUT_PATH, stripUndefinedValues({
+        executionId: request.executionId,
+        output: normalizeToolExecutionOutput(request.output),
+        metadata: request.metadata,
+    }), {
+        serviceName: "tool execution service",
+        failureMode: "required",
+        timeoutMs: config.timeoutMs,
+        maxAttempts: config.maxAttempts,
+        signal,
+    });
+    const payload = await parseJsonResponse(response, "tool execution service");
+    return {
+        execution: normalizeExecutionRecord(objectValue(payload, "execution")),
+    };
+}
+//# sourceMappingURL=tool-execution-client.js.map

package/dist/platform/tool-execution-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-execution-client.js","sourceRoot":"","sources":["../../src/platform/tool-execution-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAGN,mBAAmB,EACnB,4BAA4B,EAC5B,UAAU,GACV,MAAM,aAAa,CAAC;AACrB,OAAO,EACN,wBAAwB,EACxB,yBAAyB,EACzB,0BAA0B,GAC1B,MAAM,oBAAoB,CAAC;AAE5B,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAE/B,MAAM,gCAAgC,GAAG;IACxC,4BAA4B;IAC5B,oCAAoC;IACpC,2BAA2B;IAC3B,0BAA0B;IAC1B,kBAAkB;CACT,CAAC;AAEX,MAAM,6BAA6B,GAAG;IACrC,8BAA8B;IAC9B,sCAAsC;IACtC,8BAA8B;IAC9B,eAAe;CACN,CAAC;AAEX,MAAM,oCAAoC,GAAG;IAC5C,wCAAwC;IACxC,wCAAwC;IACxC,wBAAwB;IACxB,yBAAyB;IACzB,2BAA2B;CAClB,CAAC;AAEX,MAAM,iCAAiC,GAAG;IACzC,qCAAqC;IACrC,qCAAqC;IACrC,oCAAoC;IACpC,8BAA8B;IAC9B,sBAAsB;IACtB,sBAAsB;CACb,CAAC;AAEX,MAAM,+BAA+B,GAAG;IACvC,mCAAmC;IACnC,2CAA2C;CAClC,CAAC;AAEX,MAAM,oCAAoC,GAAG;IAC5C,qCAAqC;IACrC,6CAA6C;CACpC,CAAC;AAEX,MAAM,iBAAiB,GAAG,yBAAyB,CAClD,wBAAwB,CAAC,aAAa,CAAC,WAAW,CAClD,CAAC;AACF,MAAM,0BAA0B,GAAG,yBAAyB,CAC3D,wBAAwB,CAAC,aAAa,CAAC,mBAAmB,CAC1D,CAAC;AACF,MAAM,iCAAiC,GAAG,yBAAyB,CAClE,wBAAwB,CAAC,aAAa,CAAC,yBAAyB,CAChE,CAAC;AAkIF,SAAS,oBAAoB,CAAC,KAAa;IAC1C,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACxC,IAAI,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACtD,KAAK,MAAM,MAAM,IAAI;QACpB,iBAAiB;QACjB,0BAA0B;QAC1B,iCAAiC;QACjC,0BAA0B,CACzB,wBAAwB,CAAC,aAAa,CAAC,WAAW,CAAC,OAAO,CAC1D;KACD,EAAE,CAAC;QACH,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,UAAU,GAAG,oBAAoB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACxE,CAAC;IACF,CAAC;IACD,OAAO,UAAU,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACtD,YAAiD,EAAE;IAEnD,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC;QACjD,cAAc,EAAE,gCAAgC;QAChD,YAAY,EAAE,6BAA6B;QAC3C,mBAAmB,EAAE,oCAAoC;QACzD,gBAAgB,EAAE,iCAAiC;QACnD,cAAc,EAAE,+BAA+B;QAC/C,kBAAkB,EAAE,oCAAoC;QACxD,eAAe,EAAE;YAChB,iBAAiB;YACjB,0BAA0B;YAC1B,iCAAiC;YACjC,0BAA0B,CACzB,wBAAwB,CAAC,aAAa,CAAC,WAAW,CAAC,OAAO,CAC1D;SACD;QACD,gBAAgB,EAAE,kBAAkB;QACpC,kBAAkB,EAAE,oBAAoB;QACxC,cAAc,EAAE,KAAK;QACrB,qBAAqB,EAAE,IAAI;QAC3B,YAAY,EAAE,IAAI;KAClB,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAC7C,OAAO,IAAI,CAAC;IACb,CAAC;IACD,OAAO;QACN,GAAG,MAAM;QACT,OAAO,EAAE,gBAAgB,CACxB,UAAU,CAAC,SAAS,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CACjE;QACD,cAAc,EACb,UAAU,CAAC,SAAS,CAAC,cAAc,IAAI,MAAM,CAAC,cAAc,CAAC;YAC7D,MAAM,CAAC,cAAc;QACtB,WAAW,EACV,UAAU,CAAC,SAAS,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,CAAC;YACvD,MAAM,CAAC,WAAW;QACnB,KAAK,EAAE,UAAU,CAAC,SAAS,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK;QAClE,SAAS,EAAE,SAAS,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS;QAClD,WAAW,EAAE,SAAS,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW;QACxD,MAAM,EAAE,UAAU,CAAC,SAAS,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC;KACrD,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CACnB,MAA+B,EAC/B,GAAG,IAAc;IAEjB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1D,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;QACrB,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,YAAY,CACpB,MAA+B,EAC/B,GAAG,IAAc;IAEjB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CACnB,MAA+B,EAC/B,GAAG,IAAc;IAEjB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjE,OAAO,KAAgC,CAAC;QACzC,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,uBAAuB,CAC/B,KAAc;IAEd,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5D,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAwB,CAAC;AAC3C,CAAC;AAED,SAAS,qBAAqB,CAC7B,MAA2C;IAE3C,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,iBAAiB,GAAG,WAAW,CACpC,MAAM,EACN,mBAAmB,EACnB,qBAAqB,CACrB,CAAC;IACF,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC7C,IAAI,CAAC,iBAAiB,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM,EAAE,CAAC;QACnD,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO;QACN,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7B,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAChC,MAA2C;IAE3C,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,EAAE,CAAC;IACX,CAAC;IACD,OAAO;QACN,EAAE,EAAE,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC;QAC7B,KAAK,EAAE,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC;QAC5C,YAAY,EAAE,WAAW,CAAC,MAAM,EAAE,cAAc,EAAE,eAAe,CAAC;QAClE,YAAY,EAAE,qBAAqB,CAClC,WAAW,CAAC,MAAM,EAAE,cAAc,EAAE,eAAe,CAAC,CACpD;KACD,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC5B,MAA+B;IAE/B,OAAO,MAAM,CAAC,WAAW,CACxB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CACjE,CAAC;AACH,CAAC;AAED,SAAS,2BAA2B,CACnC,OAAmC;IAEnC,OAAO,oBAAoB,CAAC;QAC3B,OAAO,EAAE,oBAAoB,CAAC;YAC7B,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW;YACxC,cAAc,EAAE,OAAO,CAAC,OAAO,CAAC,cAAc;YAC9C,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO;YAChC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK;YAC5B,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW;YACxC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM;YAC9B,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO;YAChC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO;YAChC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS;YACpC,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,aAAa;SAC5C,CAAC;QACF,IAAI,EAAE,oBAAoB,CAAC;YAC1B,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS;YACjC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI;YACvB,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO;YAC7B,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,UAAU;YACnC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS;YACjC,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,UAAU;YACnC,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC,eAAe;SAC7C,CAAC;QACF,SAAS,EAAE,OAAO,CAAC,SAAS;YAC3B,CAAC,CAAC,oBAAoB,CAAC;gBACrB,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC,YAAY;gBAC5C,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC,UAAU;gBACxC,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC,UAAU;gBACxC,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC,YAAY;gBAC5C,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,aAAa;gBAC9C,qBAAqB,EAAE,OAAO,CAAC,SAAS,CAAC,qBAAqB;aAC9D,CAAC;YACH,CAAC,CAAC,SAAS;QACZ,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;YAC/B,CAAC,CAAC,oBAAoB,CAAC;gBACrB,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,WAAW;gBAC5C,cAAc,EAAE,OAAO,CAAC,WAAW,CAAC,cAAc;gBAClD,UAAU,EAAE,OAAO,CAAC,WAAW,CAAC,UAAU;gBAC1C,uBAAuB,EAAE,OAAO,CAAC,WAAW,CAAC,uBAAuB;aACpE,CAAC;YACH,CAAC,CAAC,SAAS;QACZ,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC1B,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CACpC,MAAmC;IAEnC,OAAO,oBAAoB,CAAC;QAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC7C,oBAAoB,CAAC;YACpB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;SAC3B,CAAC,CACF;QACD,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,UAAU,EAAE,MAAM,CAAC,UAAU;KAC7B,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC/B,QAAkB,EAClB,WAAmB;IAEnB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACd,GAAG,WAAW,aAAa,QAAQ,CAAC,MAAM,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,EAAE,CAC5E,CAAC;IACH,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,GAAG,WAAW,0BAA0B,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,MAAkC,EAClC,OAAmC,EACnC,MAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CACzC,MAAM,EACN,iBAAiB,EACjB,2BAA2B,CAAC,OAAO,CAAC,EACpC;QACC,WAAW,EAAE,wBAAwB;QACrC,WAAW,EAAE,UAAU;QACvB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,MAAM;KACN,CACD,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC;IAC5E,OAAO;QACN,SAAS,EAAE,wBAAwB,CAAC,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACtE,gBAAgB,EACf,YAAY,CAAC,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,CAAC,KAAK,IAAI;KACxE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACpD,MAAkC,EAClC,OAA2C,EAC3C,MAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CACzC,MAAM,EACN,0BAA0B,EAC1B,oBAAoB,CAAC;QACpB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;KACtB,CAAC,EACF;QACC,WAAW,EAAE,wBAAwB;QACrC,WAAW,EAAE,UAAU;QACvB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,MAAM;KACN,CACD,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC;IAC5E,OAAO;QACN,SAAS,EAAE,wBAAwB,CAAC,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;KACtE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qCAAqC,CAC1D,MAAkC,EAClC,OAAiD,EACjD,MAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CACzC,MAAM,EACN,iCAAiC,EACjC,oBAAoB,CAAC;QACpB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,MAAM,EAAE,4BAA4B,CAAC,OAAO,CAAC,MAAM,CAAC;QACpD,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC1B,CAAC,EACF;QACC,WAAW,EAAE,wBAAwB;QACrC,WAAW,EAAE,UAAU;QACvB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,MAAM;KACN,CACD,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC;IAC5E,OAAO;QACN,SAAS,EAAE,wBAAwB,CAAC,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;KACtE,CAAC;AACH,CAAC","sourcesContent":["import {\n\ttype PlatformServiceConfig,\n\tgetEnvValue,\n\tpostPlatformConnect,\n\tresolvePlatformServiceConfig,\n\ttrimString,\n} from \"./client.js\";\nimport {\n\tPLATFORM_CONNECT_METHODS,\n\tplatformConnectMethodPath,\n\tplatformConnectServicePath,\n} from \"./core-services.js\";\n\nconst DEFAULT_TIMEOUT_MS = 2_500;\nconst DEFAULT_MAX_ATTEMPTS = 2;\n\nconst TOOL_EXECUTION_BASE_URL_ENV_VARS = [\n\t\"TOOL_EXECUTION_SERVICE_URL\",\n\t\"MAESTRO_TOOL_EXECUTION_SERVICE_URL\",\n\t\"MAESTRO_PLATFORM_BASE_URL\",\n\t\"MAESTRO_EVALOPS_BASE_URL\",\n\t\"EVALOPS_BASE_URL\",\n] as const;\n\nconst TOOL_EXECUTION_TOKEN_ENV_VARS = [\n\t\"TOOL_EXECUTION_SERVICE_TOKEN\",\n\t\"MAESTRO_TOOL_EXECUTION_SERVICE_TOKEN\",\n\t\"MAESTRO_EVALOPS_ACCESS_TOKEN\",\n\t\"EVALOPS_TOKEN\",\n] as const;\n\nconst TOOL_EXECUTION_ORGANIZATION_ENV_VARS = [\n\t\"TOOL_EXECUTION_SERVICE_ORGANIZATION_ID\",\n\t\"MAESTRO_TOOL_EXECUTION_ORGANIZATION_ID\",\n\t\"MAESTRO_EVALOPS_ORG_ID\",\n\t\"EVALOPS_ORGANIZATION_ID\",\n\t\"MAESTRO_ENTERPRISE_ORG_ID\",\n] as const;\n\nconst TOOL_EXECUTION_WORKSPACE_ENV_VARS = [\n\t\"TOOL_EXECUTION_SERVICE_WORKSPACE_ID\",\n\t\"MAESTRO_TOOL_EXECUTION_WORKSPACE_ID\",\n\t\"MAESTRO_REMOTE_RUNNER_WORKSPACE_ID\",\n\t\"MAESTRO_EVALOPS_WORKSPACE_ID\",\n\t\"EVALOPS_WORKSPACE_ID\",\n\t\"MAESTRO_WORKSPACE_ID\",\n] as const;\n\nconst TOOL_EXECUTION_TIMEOUT_ENV_VARS = [\n\t\"TOOL_EXECUTION_SERVICE_TIMEOUT_MS\",\n\t\"MAESTRO_TOOL_EXECUTION_SERVICE_TIMEOUT_MS\",\n] as const;\n\nconst TOOL_EXECUTION_MAX_ATTEMPTS_ENV_VARS = [\n\t\"TOOL_EXECUTION_SERVICE_MAX_ATTEMPTS\",\n\t\"MAESTRO_TOOL_EXECUTION_SERVICE_MAX_ATTEMPTS\",\n] as const;\n\nconst EXECUTE_TOOL_PATH = platformConnectMethodPath(\n\tPLATFORM_CONNECT_METHODS.toolexecution.executeTool,\n);\nconst RESUME_TOOL_EXECUTION_PATH = platformConnectMethodPath(\n\tPLATFORM_CONNECT_METHODS.toolexecution.resumeToolExecution,\n);\nconst RECORD_TOOL_EXECUTION_OUTPUT_PATH = platformConnectMethodPath(\n\tPLATFORM_CONNECT_METHODS.toolexecution.recordToolExecutionOutput,\n);\n\nexport type ToolExecutionRiskLevel =\n\t| \"RISK_LEVEL_UNSPECIFIED\"\n\t| \"RISK_LEVEL_LOW\"\n\t| \"RISK_LEVEL_MEDIUM\"\n\t| \"RISK_LEVEL_HIGH\"\n\t| \"RISK_LEVEL_CRITICAL\";\n\nexport type ToolExecutionState =\n\t| \"TOOL_EXECUTION_STATE_UNSPECIFIED\"\n\t| \"TOOL_EXECUTION_STATE_ACCEPTED\"\n\t| \"TOOL_EXECUTION_STATE_POLICY_EVALUATING\"\n\t| \"TOOL_EXECUTION_STATE_WAITING_APPROVAL\"\n\t| \"TOOL_EXECUTION_STATE_RUNNING\"\n\t| \"TOOL_EXECUTION_STATE_SUCCEEDED\"\n\t| \"TOOL_EXECUTION_STATE_FAILED\"\n\t| \"TOOL_EXECUTION_STATE_DENIED\"\n\t| \"TOOL_EXECUTION_STATE_CANCELLED\";\n\nexport interface ToolExecutionLinkage {\n\tworkspaceId: string;\n\torganizationId?: string;\n\tagentId: string;\n\trunId?: string;\n\tobjectiveId?: string;\n\tstepId: string;\n\tactorId?: string;\n\tsurface?: string;\n\tchannelId?: string;\n\tcorrelationId?: string;\n}\n\nexport interface PlatformToolRef {\n\tnamespace: string;\n\tname: string;\n\tversion?: string;\n\tcapability: string;\n\toperation?: string;\n\tidempotent?: boolean;\n\tmutatesResource?: boolean;\n}\n\nexport interface PlatformConnectorRef {\n\tconnectionId?: string;\n\tproviderId?: string;\n\tresourceId?: string;\n\tresourceKind?: string;\n\tcredentialRef?: string;\n\tcredentialEnvironment?: string;\n}\n\nexport interface PlatformToolRetryPolicy {\n\tmaxAttempts?: number;\n\tinitialDelayMs?: number;\n\tmaxDelayMs?: number;\n\tallowNonIdempotentRetry?: boolean;\n}\n\nexport interface ExecutePlatformToolRequest {\n\tlinkage: ToolExecutionLinkage;\n\ttool: PlatformToolRef;\n\tconnector?: PlatformConnectorRef;\n\targuments: Record<string, unknown>;\n\triskLevel?: ToolExecutionRiskLevel;\n\tretryPolicy?: PlatformToolRetryPolicy;\n\tidempotencyKey: string;\n\tmetadata?: Record<string, string>;\n}\n\nexport interface ResumePlatformToolExecutionRequest {\n\texecutionId: string;\n\tapprovalRequestId: string;\n\tresumeToken: string;\n\tapproved: boolean;\n\tdecidedBy?: string;\n\treason?: string;\n}\n\nexport interface PlatformToolOutputProposal {\n\tkind: string;\n\ttargetRef?: string;\n\tpayload?: Record<string, unknown>;\n\tmetadata?: Record<string, string>;\n}\n\nexport interface PlatformToolExecutionOutput {\n\trawOutput?: Record<string, unknown>;\n\tsafeOutput?: Record<string, unknown>;\n\tproposals?: PlatformToolOutputProposal[];\n\tredactions?: string[];\n\tcontentType?: string;\n\toutputDigest?: string;\n\tdurationMs?: number;\n}\n\nexport interface RecordPlatformToolExecutionOutputRequest {\n\texecutionId: string;\n\toutput: PlatformToolExecutionOutput;\n\tmetadata?: Record<string, string>;\n}\n\nexport interface PlatformApprovalWait {\n\tapprovalRequestId?: string;\n\tresumeToken?: string;\n\treason?: string;\n}\n\nexport interface PlatformToolExecutionRecord {\n\tid?: string;\n\tstate?: ToolExecutionState;\n\terrorMessage?: string;\n\tapprovalWait?: PlatformApprovalWait;\n}\n\nexport interface ExecutePlatformToolResponse {\n\texecution: PlatformToolExecutionRecord;\n\tidempotentReplay: boolean;\n}\n\nexport interface ResumePlatformToolExecutionResponse {\n\texecution: PlatformToolExecutionRecord;\n}\n\nexport interface RecordPlatformToolExecutionOutputResponse {\n\texecution: PlatformToolExecutionRecord;\n}\n\nexport interface ToolExecutionServiceConfig extends PlatformServiceConfig {}\n\nfunction stripTrailingSlashes(value: string): string {\n\treturn value.replace(/\\/+$/u, \"\");\n}\n\nfunction normalizeBaseUrl(baseUrl: string): string {\n\tlet normalized = stripTrailingSlashes(baseUrl.trim());\n\tfor (const suffix of [\n\t\tEXECUTE_TOOL_PATH,\n\t\tRESUME_TOOL_EXECUTION_PATH,\n\t\tRECORD_TOOL_EXECUTION_OUTPUT_PATH,\n\t\tplatformConnectServicePath(\n\t\t\tPLATFORM_CONNECT_METHODS.toolexecution.executeTool.service,\n\t\t),\n\t]) {\n\t\tif (normalized.endsWith(suffix)) {\n\t\t\tnormalized = stripTrailingSlashes(normalized.slice(0, -suffix.length));\n\t\t}\n\t}\n\treturn normalized;\n}\n\nexport async function resolveToolExecutionServiceConfig(\n\toverrides: Partial<ToolExecutionServiceConfig> = {},\n): Promise<ToolExecutionServiceConfig | null> {\n\tconst config = await resolvePlatformServiceConfig({\n\t\tbaseUrlEnvVars: TOOL_EXECUTION_BASE_URL_ENV_VARS,\n\t\ttokenEnvVars: TOOL_EXECUTION_TOKEN_ENV_VARS,\n\t\torganizationEnvVars: TOOL_EXECUTION_ORGANIZATION_ENV_VARS,\n\t\tworkspaceEnvVars: TOOL_EXECUTION_WORKSPACE_ENV_VARS,\n\t\ttimeoutEnvVars: TOOL_EXECUTION_TIMEOUT_ENV_VARS,\n\t\tmaxAttemptsEnvVars: TOOL_EXECUTION_MAX_ATTEMPTS_ENV_VARS,\n\t\tbaseUrlSuffixes: [\n\t\t\tEXECUTE_TOOL_PATH,\n\t\t\tRESUME_TOOL_EXECUTION_PATH,\n\t\t\tRECORD_TOOL_EXECUTION_OUTPUT_PATH,\n\t\t\tplatformConnectServicePath(\n\t\t\t\tPLATFORM_CONNECT_METHODS.toolexecution.executeTool.service,\n\t\t\t),\n\t\t],\n\t\tdefaultTimeoutMs: DEFAULT_TIMEOUT_MS,\n\t\tdefaultMaxAttempts: DEFAULT_MAX_ATTEMPTS,\n\t\trequireBaseUrl: false,\n\t\trequireOrganizationId: true,\n\t\trequireToken: true,\n\t});\n\tif (!config?.baseUrl || !config.workspaceId) {\n\t\treturn null;\n\t}\n\treturn {\n\t\t...config,\n\t\tbaseUrl: normalizeBaseUrl(\n\t\t\ttrimString(overrides.baseUrl ?? config.baseUrl) ?? config.baseUrl,\n\t\t),\n\t\torganizationId:\n\t\t\ttrimString(overrides.organizationId ?? config.organizationId) ??\n\t\t\tconfig.organizationId,\n\t\tworkspaceId:\n\t\t\ttrimString(overrides.workspaceId ?? config.workspaceId) ??\n\t\t\tconfig.workspaceId,\n\t\ttoken: trimString(overrides.token ?? config.token) ?? config.token,\n\t\ttimeoutMs: overrides.timeoutMs ?? config.timeoutMs,\n\t\tmaxAttempts: overrides.maxAttempts ?? config.maxAttempts,\n\t\tteamId: trimString(overrides.teamId ?? config.teamId),\n\t};\n}\n\nfunction firstString(\n\trecord: Record<string, unknown>,\n\t...keys: string[]\n): string | undefined {\n\tfor (const key of keys) {\n\t\tconst value = record[key];\n\t\tif (typeof value === \"string\" && value.trim().length > 0) {\n\t\t\treturn value.trim();\n\t\t}\n\t}\n\treturn undefined;\n}\n\nfunction firstBoolean(\n\trecord: Record<string, unknown>,\n\t...keys: string[]\n): boolean | undefined {\n\tfor (const key of keys) {\n\t\tconst value = record[key];\n\t\tif (typeof value === \"boolean\") {\n\t\t\treturn value;\n\t\t}\n\t}\n\treturn undefined;\n}\n\nfunction objectValue(\n\trecord: Record<string, unknown>,\n\t...keys: string[]\n): Record<string, unknown> | undefined {\n\tfor (const key of keys) {\n\t\tconst value = record[key];\n\t\tif (value && typeof value === \"object\" && !Array.isArray(value)) {\n\t\t\treturn value as Record<string, unknown>;\n\t\t}\n\t}\n\treturn undefined;\n}\n\nfunction normalizeExecutionState(\n\tvalue: unknown,\n): ToolExecutionState | undefined {\n\tif (typeof value !== \"string\" || value.trim().length === 0) {\n\t\treturn undefined;\n\t}\n\treturn value.trim() as ToolExecutionState;\n}\n\nfunction normalizeApprovalWait(\n\trecord: Record<string, unknown> | undefined,\n): PlatformApprovalWait | undefined {\n\tif (!record) {\n\t\treturn undefined;\n\t}\n\tconst approvalRequestId = firstString(\n\t\trecord,\n\t\t\"approvalRequestId\",\n\t\t\"approval_request_id\",\n\t);\n\tconst resumeToken = firstString(record, \"resumeToken\", \"resume_token\");\n\tconst reason = firstString(record, \"reason\");\n\tif (!approvalRequestId && !resumeToken && !reason) {\n\t\treturn undefined;\n\t}\n\treturn {\n\t\t...(approvalRequestId ? { approvalRequestId } : {}),\n\t\t...(resumeToken ? { resumeToken } : {}),\n\t\t...(reason ? { reason } : {}),\n\t};\n}\n\nfunction normalizeExecutionRecord(\n\trecord: Record<string, unknown> | undefined,\n): PlatformToolExecutionRecord {\n\tif (!record) {\n\t\treturn {};\n\t}\n\treturn {\n\t\tid: firstString(record, \"id\"),\n\t\tstate: normalizeExecutionState(record.state),\n\t\terrorMessage: firstString(record, \"errorMessage\", \"error_message\"),\n\t\tapprovalWait: normalizeApprovalWait(\n\t\t\tobjectValue(record, \"approvalWait\", \"approval_wait\"),\n\t\t),\n\t};\n}\n\nfunction stripUndefinedValues(\n\trecord: Record<string, unknown>,\n): Record<string, unknown> {\n\treturn Object.fromEntries(\n\t\tObject.entries(record).filter(([, value]) => value !== undefined),\n\t);\n}\n\nfunction normalizeExecuteToolRequest(\n\trequest: ExecutePlatformToolRequest,\n): Record<string, unknown> {\n\treturn stripUndefinedValues({\n\t\tlinkage: stripUndefinedValues({\n\t\t\tworkspaceId: request.linkage.workspaceId,\n\t\t\torganizationId: request.linkage.organizationId,\n\t\t\tagentId: request.linkage.agentId,\n\t\t\trunId: request.linkage.runId,\n\t\t\tobjectiveId: request.linkage.objectiveId,\n\t\t\tstepId: request.linkage.stepId,\n\t\t\tactorId: request.linkage.actorId,\n\t\t\tsurface: request.linkage.surface,\n\t\t\tchannelId: request.linkage.channelId,\n\t\t\tcorrelationId: request.linkage.correlationId,\n\t\t}),\n\t\ttool: stripUndefinedValues({\n\t\t\tnamespace: request.tool.namespace,\n\t\t\tname: request.tool.name,\n\t\t\tversion: request.tool.version,\n\t\t\tcapability: request.tool.capability,\n\t\t\toperation: request.tool.operation,\n\t\t\tidempotent: request.tool.idempotent,\n\t\t\tmutatesResource: request.tool.mutatesResource,\n\t\t}),\n\t\tconnector: request.connector\n\t\t\t? stripUndefinedValues({\n\t\t\t\t\tconnectionId: request.connector.connectionId,\n\t\t\t\t\tproviderId: request.connector.providerId,\n\t\t\t\t\tresourceId: request.connector.resourceId,\n\t\t\t\t\tresourceKind: request.connector.resourceKind,\n\t\t\t\t\tcredentialRef: request.connector.credentialRef,\n\t\t\t\t\tcredentialEnvironment: request.connector.credentialEnvironment,\n\t\t\t\t})\n\t\t\t: undefined,\n\t\targuments: request.arguments,\n\t\triskLevel: request.riskLevel,\n\t\tretryPolicy: request.retryPolicy\n\t\t\t? stripUndefinedValues({\n\t\t\t\t\tmaxAttempts: request.retryPolicy.maxAttempts,\n\t\t\t\t\tinitialDelayMs: request.retryPolicy.initialDelayMs,\n\t\t\t\t\tmaxDelayMs: request.retryPolicy.maxDelayMs,\n\t\t\t\t\tallowNonIdempotentRetry: request.retryPolicy.allowNonIdempotentRetry,\n\t\t\t\t})\n\t\t\t: undefined,\n\t\tidempotencyKey: request.idempotencyKey,\n\t\tmetadata: request.metadata,\n\t});\n}\n\nfunction normalizeToolExecutionOutput(\n\toutput: PlatformToolExecutionOutput,\n): Record<string, unknown> {\n\treturn stripUndefinedValues({\n\t\trawOutput: output.rawOutput,\n\t\tsafeOutput: output.safeOutput,\n\t\tproposals: output.proposals?.map((proposal) =>\n\t\t\tstripUndefinedValues({\n\t\t\t\tkind: proposal.kind,\n\t\t\t\ttargetRef: proposal.targetRef,\n\t\t\t\tpayload: proposal.payload,\n\t\t\t\tmetadata: proposal.metadata,\n\t\t\t}),\n\t\t),\n\t\tredactions: output.redactions,\n\t\tcontentType: output.contentType,\n\t\toutputDigest: output.outputDigest,\n\t\tdurationMs: output.durationMs,\n\t});\n}\n\nasync function parseJsonResponse(\n\tresponse: Response,\n\tserviceName: string,\n): Promise<Record<string, unknown>> {\n\tconst text = await response.text();\n\tif (!response.ok) {\n\t\tthrow new Error(\n\t\t\t`${serviceName} returned ${response.status}: ${text || response.statusText}`,\n\t\t);\n\t}\n\tif (!text.trim()) {\n\t\tthrow new Error(`${serviceName} returned empty response`);\n\t}\n\treturn JSON.parse(text) as Record<string, unknown>;\n}\n\nexport async function executeToolWithPlatform(\n\tconfig: ToolExecutionServiceConfig,\n\trequest: ExecutePlatformToolRequest,\n\tsignal?: AbortSignal,\n): Promise<ExecutePlatformToolResponse> {\n\tconst response = await postPlatformConnect(\n\t\tconfig,\n\t\tEXECUTE_TOOL_PATH,\n\t\tnormalizeExecuteToolRequest(request),\n\t\t{\n\t\t\tserviceName: \"tool execution service\",\n\t\t\tfailureMode: \"required\",\n\t\t\ttimeoutMs: config.timeoutMs,\n\t\t\tmaxAttempts: config.maxAttempts,\n\t\t\tsignal,\n\t\t},\n\t);\n\tconst payload = await parseJsonResponse(response, \"tool execution service\");\n\treturn {\n\t\texecution: normalizeExecutionRecord(objectValue(payload, \"execution\")),\n\t\tidempotentReplay:\n\t\t\tfirstBoolean(payload, \"idempotentReplay\", \"idempotent_replay\") === true,\n\t};\n}\n\nexport async function resumeToolExecutionWithPlatform(\n\tconfig: ToolExecutionServiceConfig,\n\trequest: ResumePlatformToolExecutionRequest,\n\tsignal?: AbortSignal,\n): Promise<ResumePlatformToolExecutionResponse> {\n\tconst response = await postPlatformConnect(\n\t\tconfig,\n\t\tRESUME_TOOL_EXECUTION_PATH,\n\t\tstripUndefinedValues({\n\t\t\texecutionId: request.executionId,\n\t\t\tapprovalRequestId: request.approvalRequestId,\n\t\t\tresumeToken: request.resumeToken,\n\t\t\tapproved: request.approved,\n\t\t\tdecidedBy: request.decidedBy,\n\t\t\treason: request.reason,\n\t\t}),\n\t\t{\n\t\t\tserviceName: \"tool execution service\",\n\t\t\tfailureMode: \"required\",\n\t\t\ttimeoutMs: config.timeoutMs,\n\t\t\tmaxAttempts: config.maxAttempts,\n\t\t\tsignal,\n\t\t},\n\t);\n\tconst payload = await parseJsonResponse(response, \"tool execution service\");\n\treturn {\n\t\texecution: normalizeExecutionRecord(objectValue(payload, \"execution\")),\n\t};\n}\n\nexport async function recordToolExecutionOutputWithPlatform(\n\tconfig: ToolExecutionServiceConfig,\n\trequest: RecordPlatformToolExecutionOutputRequest,\n\tsignal?: AbortSignal,\n): Promise<RecordPlatformToolExecutionOutputResponse> {\n\tconst response = await postPlatformConnect(\n\t\tconfig,\n\t\tRECORD_TOOL_EXECUTION_OUTPUT_PATH,\n\t\tstripUndefinedValues({\n\t\t\texecutionId: request.executionId,\n\t\t\toutput: normalizeToolExecutionOutput(request.output),\n\t\t\tmetadata: request.metadata,\n\t\t}),\n\t\t{\n\t\t\tserviceName: \"tool execution service\",\n\t\t\tfailureMode: \"required\",\n\t\t\ttimeoutMs: config.timeoutMs,\n\t\t\tmaxAttempts: config.maxAttempts,\n\t\t\tsignal,\n\t\t},\n\t);\n\tconst payload = await parseJsonResponse(response, \"tool execution service\");\n\treturn {\n\t\texecution: normalizeExecutionRecord(objectValue(payload, \"execution\")),\n\t};\n}\n"]}

package/dist/prompts/service-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service-client.d.ts","sourceRoot":"","sources":["../../src/prompts/service-client.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EACX,0BAA0B,EAC1B,sBAAsB,EACtB,MAAM,YAAY,CAAC;AAsNpB,wBAAsB,qBAAqB,CAC1C,KAAK,EAAE,0BAA0B,GAC/B,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CA8BxC"}
+{"version":3,"file":"service-client.d.ts","sourceRoot":"","sources":["../../src/prompts/service-client.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EACX,0BAA0B,EAC1B,sBAAsB,EACtB,MAAM,YAAY,CAAC;AAwNpB,wBAAsB,qBAAqB,CAC1C,KAAK,EAAE,0BAA0B,GAC/B,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CA8BxC"}

package/dist/prompts/service-client.js

@@ -1,5 +1,6 @@
-import { fetchWithRetry, getEnvValue, postPlatformConnect, resolveOrganizationId, resolvePlatformServiceConfig, trimString, } from "../platform/client.js";
+import { getEnvValue, postPlatformConnect, resolveOrganizationId, resolvePlatformServiceConfig, trimString, } from "../platform/client.js";
 import { PLATFORM_CONNECT_METHODS, PLATFORM_CONNECT_SERVICES, platformConnectMethodPath, platformConnectServicePath, } from "../platform/core-services.js";
+import { fetchDownstream } from "../utils/downstream-http.js";
 import { createLogger } from "../utils/logger.js";
 const logger = createLogger("prompts:service");
 const DEFAULT_TIMEOUT_MS = 2_000;
@@ -115,6 +116,7 @@ async function resolveViaPlatformConnect(config, input, name) {
         label: trimString(input.label) ?? "production",
     }, {
         serviceName: "prompts service",
+        failureMode: "optional",
         timeoutMs: config.timeoutMs,
         maxAttempts: config.maxAttempts,
     });
@@ -134,11 +136,12 @@ async function resolveViaLegacyRest(config, input, name) {
     if (trimString(input.surface)) {
         url.searchParams.set("surface", trimString(input.surface));
     }
-    const response = await fetchWithRetry(url.toString(), {
+    const response = await fetchDownstream(url, {
         method: "GET",
         headers: buildHeaders(config),
     }, {
         serviceName: "prompts service",
+        failureMode: "optional",
         timeoutMs: config.timeoutMs,
         maxAttempts: config.maxAttempts,
     });

package/dist/prompts/service-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"service-client.js","sourceRoot":"","sources":["../../src/prompts/service-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAEN,cAAc,EACd,WAAW,EACX,mBAAmB,EACnB,qBAAqB,EACrB,4BAA4B,EAC5B,UAAU,GACV,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACN,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,EACzB,0BAA0B,GAC1B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAMlD,MAAM,MAAM,GAAG,YAAY,CAAC,iBAAiB,CAAC,CAAC;AAC/C,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAC/B,MAAM,mBAAmB,GAAG,yBAAyB,CACpD,wBAAwB,CAAC,OAAO,CAAC,OAAO,CACxC,CAAC;AACF,MAAM,0BAA0B,GAAG,aAAa,CAAC;AACjD,MAAM,yBAAyB,GAAG;IACjC,qBAAqB;IACrB,6BAA6B;CACpB,CAAC;AACX,MAAM,sBAAsB,GAAG;IAC9B,uBAAuB;IACvB,+BAA+B;IAC/B,8BAA8B;IAC9B,eAAe;CACN,CAAC;AACX,MAAM,6BAA6B,GAAG;IACrC,iCAAiC;IACjC,iCAAiC;IACjC,wBAAwB;IACxB,yBAAyB;IACzB,2BAA2B;CAClB,CAAC;AAkBX,SAAS,uBAAuB;IAC/B,MAAM,UAAU,GAAG,UAAU,CAC5B,OAAO,CAAC,GAAG,CAAC,yBAAyB,CACrC,EAAE,WAAW,EAAE,CAAC;IACjB,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;QAC3D,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,aAAa,EAAE,CAAC;QAC7D,OAAO,aAAa,CAAC;IACtB,CAAC;IACD,MAAM,mBAAmB,GAAG,WAAW,CAAC,yBAAyB,CAAC,CAAC;IACnE,OAAO,mBAAmB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;AACxD,CAAC;AAED,SAAS,2BAA2B;IACnC,OAAO,OAAO,CACb,WAAW,CAAC;QACX,GAAG,yBAAyB;QAC5B,2BAA2B;QAC3B,0BAA0B;QAC1B,kBAAkB;KAClB,CAAC,CACF,CAAC;AACH,CAAC;AAED,SAAS,kCAAkC;IAC1C,IAAI,CAAC,2BAA2B,EAAE,EAAE,CAAC;QACpC,OAAO;IACR,CAAC;IACD,IAAI,CAAC,qBAAqB,CAAC,6BAA6B,CAAC,EAAE,CAAC;QAC3D,MAAM,CAAC,IAAI,CACV,+EAA+E,CAC/E,CAAC;QACF,OAAO;IACR,CAAC;IACD,MAAM,CAAC,IAAI,CACV,4EAA4E,CAC5E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,2BAA2B;IACzC,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC;QACjD,cAAc,EAAE,yBAAyB;QACzC,YAAY,EAAE,sBAAsB;QACpC,mBAAmB,EAAE,6BAA6B;QAClD,cAAc,EAAE;YACf,4BAA4B;YAC5B,4BAA4B;SAC5B;QACD,kBAAkB,EAAE;YACnB,8BAA8B;YAC9B,8BAA8B;SAC9B;QACD,eAAe,EAAE;YAChB,mBAAmB;YACnB,0BAA0B;YAC1B,0BAA0B,CAAC,yBAAyB,CAAC,OAAO,CAAC;SAC7D;QACD,gBAAgB,EAAE,kBAAkB;QACpC,kBAAkB,EAAE,oBAAoB;QACxC,qBAAqB,EAAE,IAAI;QAC3B,YAAY,EAAE,IAAI;KAClB,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,kCAAkC,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC;IACb,CAAC;IAED,OAAO;QACN,GAAG,MAAM;QACT,SAAS,EAAE,uBAAuB,EAAE;KACpC,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,MAA4B;IACjD,OAAO;QACN,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,MAAM,CAAC,cAAc;YACxB,CAAC,CAAC,EAAE,mBAAmB,EAAE,MAAM,CAAC,cAAc,EAAE;YAChD,CAAC,CAAC,EAAE,CAAC;KACN,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAC/B,KAAiC,EACjC,OAAwB;IAExB,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC;IACzC,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAClE,OAAO,IAAI,CAAC;IACb,CAAC;IAED,OAAO;QACN,IAAI;QACJ,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,YAAY;QAC9C,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC;QAClC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAQ,CAAC;QAC7B,SAAS;QACT,OAAO;KACP,CAAC;AACH,CAAC;AAED,KAAK,UAAU,yBAAyB,CACvC,MAA4B,EAC5B,KAAiC,EACjC,IAAY;IAEZ,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CACzC,MAAM,EACN,mBAAmB,EACnB;QACC,IAAI;QACJ,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,YAAY;KAC9C,EACD;QACC,WAAW,EAAE,iBAAiB;QAC9B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;KAC/B,CACD,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACd,4BAA4B,QAAQ,CAAC,MAAM,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,EAAE,CAC7E,CAAC;IACH,CAAC;IACD,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAoB,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,oBAAoB,CAClC,MAA4B,EAC5B,KAAiC,EACjC,IAAY;IAEZ,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,0BAA0B,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAChE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,CAAC;IACrE,IAAI,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO,CAAE,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,cAAc,CACpC,GAAG,CAAC,QAAQ,EAAE,EACd;QACC,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC;KAC7B,EACD;QACC,WAAW,EAAE,iBAAiB;QAC9B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;KAC/B,CACD,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACd,4BAA4B,QAAQ,CAAC,MAAM,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,EAAE,CAC7E,CAAC;IACH,CAAC;IACD,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAoB,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAC1C,KAAiC;IAEjC,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACb,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,2BAA2B,EAAE,CAAC;QACnD,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,OAAO,GACZ,MAAM,CAAC,SAAS,KAAK,SAAS;YAC7B,CAAC,CAAC,MAAM,yBAAyB,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC;YACtD,CAAC,CAAC,MAAM,oBAAoB,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACb,CAAC;QAED,OAAO,uBAAuB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,6DAA6D,EAAE;YAC1E,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YAC7D,IAAI;YACJ,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,YAAY;YAC9C,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC;SAClC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC","sourcesContent":["import {\n\ttype PlatformServiceConfig,\n\tfetchWithRetry,\n\tgetEnvValue,\n\tpostPlatformConnect,\n\tresolveOrganizationId,\n\tresolvePlatformServiceConfig,\n\ttrimString,\n} from \"../platform/client.js\";\nimport {\n\tPLATFORM_CONNECT_METHODS,\n\tPLATFORM_CONNECT_SERVICES,\n\tplatformConnectMethodPath,\n\tplatformConnectServicePath,\n} from \"../platform/core-services.js\";\nimport { createLogger } from \"../utils/logger.js\";\nimport type {\n\tResolvePromptTemplateInput,\n\tResolvedPromptTemplate,\n} from \"./types.js\";\n\nconst logger = createLogger(\"prompts:service\");\nconst DEFAULT_TIMEOUT_MS = 2_000;\nconst DEFAULT_MAX_ATTEMPTS = 2;\nconst RESOLVE_PROMPT_PATH = platformConnectMethodPath(\n\tPLATFORM_CONNECT_METHODS.prompts.resolve,\n);\nconst LEGACY_RESOLVE_PROMPT_PATH = \"/v1/resolve\";\nconst PROMPTS_BASE_URL_ENV_VARS = [\n\t\"PROMPTS_SERVICE_URL\",\n\t\"MAESTRO_PROMPTS_SERVICE_URL\",\n] as const;\nconst PROMPTS_TOKEN_ENV_VARS = [\n\t\"PROMPTS_SERVICE_TOKEN\",\n\t\"MAESTRO_PROMPTS_SERVICE_TOKEN\",\n\t\"MAESTRO_EVALOPS_ACCESS_TOKEN\",\n\t\"EVALOPS_TOKEN\",\n] as const;\nconst PROMPTS_ORGANIZATION_ENV_VARS = [\n\t\"PROMPTS_SERVICE_ORGANIZATION_ID\",\n\t\"MAESTRO_PROMPTS_ORGANIZATION_ID\",\n\t\"MAESTRO_EVALOPS_ORG_ID\",\n\t\"EVALOPS_ORGANIZATION_ID\",\n\t\"MAESTRO_ENTERPRISE_ORG_ID\",\n] as const;\n\ntype PromptsTransport = \"connect\" | \"legacy-rest\";\n\ntype PromptsServiceConfig = PlatformServiceConfig & {\n\ttransport: PromptsTransport;\n};\n\ninterface ResolveVersionPayload {\n\tid?: string;\n\tversion?: number;\n\tcontent?: string;\n}\n\ninterface ResolveResponse {\n\tversion?: ResolveVersionPayload;\n}\n\nfunction resolvePromptsTransport(): PromptsTransport {\n\tconst configured = trimString(\n\t\tprocess.env.PROMPTS_SERVICE_TRANSPORT,\n\t)?.toLowerCase();\n\tif (configured === \"connect\" || configured === \"platform\") {\n\t\treturn \"connect\";\n\t}\n\tif (configured === \"legacy\" || configured === \"legacy-rest\") {\n\t\treturn \"legacy-rest\";\n\t}\n\tconst serviceSpecificBase = getEnvValue(PROMPTS_BASE_URL_ENV_VARS);\n\treturn serviceSpecificBase ? \"legacy-rest\" : \"connect\";\n}\n\nfunction hasConfiguredPromptsBaseUrl(): boolean {\n\treturn Boolean(\n\t\tgetEnvValue([\n\t\t\t...PROMPTS_BASE_URL_ENV_VARS,\n\t\t\t\"MAESTRO_PLATFORM_BASE_URL\",\n\t\t\t\"MAESTRO_EVALOPS_BASE_URL\",\n\t\t\t\"EVALOPS_BASE_URL\",\n\t\t]),\n\t);\n}\n\nfunction warnPromptsServiceMisconfiguration(): void {\n\tif (!hasConfiguredPromptsBaseUrl()) {\n\t\treturn;\n\t}\n\tif (!resolveOrganizationId(PROMPTS_ORGANIZATION_ENV_VARS)) {\n\t\tlogger.warn(\n\t\t\t\"Prompts service configured without organization id; retaining bundled prompts\",\n\t\t);\n\t\treturn;\n\t}\n\tlogger.warn(\n\t\t\"Prompts service configured without access token; retaining bundled prompts\",\n\t);\n}\n\nasync function resolvePromptsServiceConfig(): Promise<PromptsServiceConfig | null> {\n\tconst config = await resolvePlatformServiceConfig({\n\t\tbaseUrlEnvVars: PROMPTS_BASE_URL_ENV_VARS,\n\t\ttokenEnvVars: PROMPTS_TOKEN_ENV_VARS,\n\t\torganizationEnvVars: PROMPTS_ORGANIZATION_ENV_VARS,\n\t\ttimeoutEnvVars: [\n\t\t\t\"PROMPTS_SERVICE_TIMEOUT_MS\",\n\t\t\t\"MAESTRO_PROMPTS_TIMEOUT_MS\",\n\t\t],\n\t\tmaxAttemptsEnvVars: [\n\t\t\t\"PROMPTS_SERVICE_MAX_ATTEMPTS\",\n\t\t\t\"MAESTRO_PROMPTS_MAX_ATTEMPTS\",\n\t\t],\n\t\tbaseUrlSuffixes: [\n\t\t\tRESOLVE_PROMPT_PATH,\n\t\t\tLEGACY_RESOLVE_PROMPT_PATH,\n\t\t\tplatformConnectServicePath(PLATFORM_CONNECT_SERVICES.prompts),\n\t\t],\n\t\tdefaultTimeoutMs: DEFAULT_TIMEOUT_MS,\n\t\tdefaultMaxAttempts: DEFAULT_MAX_ATTEMPTS,\n\t\trequireOrganizationId: true,\n\t\trequireToken: true,\n\t});\n\tif (!config) {\n\t\twarnPromptsServiceMisconfiguration();\n\t\treturn null;\n\t}\n\n\treturn {\n\t\t...config,\n\t\ttransport: resolvePromptsTransport(),\n\t};\n}\n\nfunction buildHeaders(config: PromptsServiceConfig): Record<string, string> {\n\treturn {\n\t\t...(config.token ? { Authorization: `Bearer ${config.token}` } : {}),\n\t\t...(config.organizationId\n\t\t\t? { \"X-Organization-ID\": config.organizationId }\n\t\t\t: {}),\n\t};\n}\n\nfunction normalizeResolvedPrompt(\n\tinput: ResolvePromptTemplateInput,\n\tpayload: ResolveResponse,\n): ResolvedPromptTemplate | null {\n\tconst name = trimString(input.name);\n\tconst versionId = trimString(payload.version?.id);\n\tconst content = trimString(payload.version?.content);\n\tconst version = payload.version?.version;\n\tif (!name || !versionId || !content || !Number.isFinite(version)) {\n\t\treturn null;\n\t}\n\n\treturn {\n\t\tname,\n\t\tlabel: trimString(input.label) ?? \"production\",\n\t\tsurface: trimString(input.surface),\n\t\tversion: Math.round(version!),\n\t\tversionId,\n\t\tcontent,\n\t};\n}\n\nasync function resolveViaPlatformConnect(\n\tconfig: PromptsServiceConfig,\n\tinput: ResolvePromptTemplateInput,\n\tname: string,\n): Promise<ResolveResponse | null> {\n\tconst response = await postPlatformConnect(\n\t\tconfig,\n\t\tRESOLVE_PROMPT_PATH,\n\t\t{\n\t\t\tname,\n\t\t\tlabel: trimString(input.label) ?? \"production\",\n\t\t},\n\t\t{\n\t\t\tserviceName: \"prompts service\",\n\t\t\ttimeoutMs: config.timeoutMs,\n\t\t\tmaxAttempts: config.maxAttempts,\n\t\t},\n\t);\n\tif (response.status === 404) {\n\t\treturn null;\n\t}\n\tif (!response.ok) {\n\t\tconst text = await response.text();\n\t\tthrow new Error(\n\t\t\t`prompts service returned ${response.status}: ${text || response.statusText}`,\n\t\t);\n\t}\n\treturn (await response.json()) as ResolveResponse;\n}\n\nasync function resolveViaLegacyRest(\n\tconfig: PromptsServiceConfig,\n\tinput: ResolvePromptTemplateInput,\n\tname: string,\n): Promise<ResolveResponse | null> {\n\tconst url = new URL(LEGACY_RESOLVE_PROMPT_PATH, config.baseUrl);\n\turl.searchParams.set(\"name\", name);\n\turl.searchParams.set(\"env\", trimString(input.label) ?? \"production\");\n\tif (trimString(input.surface)) {\n\t\turl.searchParams.set(\"surface\", trimString(input.surface)!);\n\t}\n\n\tconst response = await fetchWithRetry(\n\t\turl.toString(),\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\theaders: buildHeaders(config),\n\t\t},\n\t\t{\n\t\t\tserviceName: \"prompts service\",\n\t\t\ttimeoutMs: config.timeoutMs,\n\t\t\tmaxAttempts: config.maxAttempts,\n\t\t},\n\t);\n\tif (response.status === 404) {\n\t\treturn null;\n\t}\n\tif (!response.ok) {\n\t\tconst text = await response.text();\n\t\tthrow new Error(\n\t\t\t`prompts service returned ${response.status}: ${text || response.statusText}`,\n\t\t);\n\t}\n\treturn (await response.json()) as ResolveResponse;\n}\n\nexport async function resolvePromptTemplate(\n\tinput: ResolvePromptTemplateInput,\n): Promise<ResolvedPromptTemplate | null> {\n\tconst name = trimString(input.name);\n\tif (!name) {\n\t\treturn null;\n\t}\n\n\ttry {\n\t\tconst config = await resolvePromptsServiceConfig();\n\t\tif (!config) {\n\t\t\treturn null;\n\t\t}\n\n\t\tconst payload =\n\t\t\tconfig.transport === \"connect\"\n\t\t\t\t? await resolveViaPlatformConnect(config, input, name)\n\t\t\t\t: await resolveViaLegacyRest(config, input, name);\n\t\tif (!payload) {\n\t\t\treturn null;\n\t\t}\n\n\t\treturn normalizeResolvedPrompt(input, payload);\n\t} catch (error) {\n\t\tlogger.warn(\"Failed to resolve prompt template; retaining bundled prompt\", {\n\t\t\terror: error instanceof Error ? error.message : String(error),\n\t\t\tname,\n\t\t\tlabel: trimString(input.label) ?? \"production\",\n\t\t\tsurface: trimString(input.surface),\n\t\t});\n\t\treturn null;\n\t}\n}\n"]}
+{"version":3,"file":"service-client.js","sourceRoot":"","sources":["../../src/prompts/service-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAEN,WAAW,EACX,mBAAmB,EACnB,qBAAqB,EACrB,4BAA4B,EAC5B,UAAU,GACV,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACN,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,EACzB,0BAA0B,GAC1B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAMlD,MAAM,MAAM,GAAG,YAAY,CAAC,iBAAiB,CAAC,CAAC;AAC/C,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAC/B,MAAM,mBAAmB,GAAG,yBAAyB,CACpD,wBAAwB,CAAC,OAAO,CAAC,OAAO,CACxC,CAAC;AACF,MAAM,0BAA0B,GAAG,aAAa,CAAC;AACjD,MAAM,yBAAyB,GAAG;IACjC,qBAAqB;IACrB,6BAA6B;CACpB,CAAC;AACX,MAAM,sBAAsB,GAAG;IAC9B,uBAAuB;IACvB,+BAA+B;IAC/B,8BAA8B;IAC9B,eAAe;CACN,CAAC;AACX,MAAM,6BAA6B,GAAG;IACrC,iCAAiC;IACjC,iCAAiC;IACjC,wBAAwB;IACxB,yBAAyB;IACzB,2BAA2B;CAClB,CAAC;AAkBX,SAAS,uBAAuB;IAC/B,MAAM,UAAU,GAAG,UAAU,CAC5B,OAAO,CAAC,GAAG,CAAC,yBAAyB,CACrC,EAAE,WAAW,EAAE,CAAC;IACjB,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;QAC3D,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,aAAa,EAAE,CAAC;QAC7D,OAAO,aAAa,CAAC;IACtB,CAAC;IACD,MAAM,mBAAmB,GAAG,WAAW,CAAC,yBAAyB,CAAC,CAAC;IACnE,OAAO,mBAAmB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;AACxD,CAAC;AAED,SAAS,2BAA2B;IACnC,OAAO,OAAO,CACb,WAAW,CAAC;QACX,GAAG,yBAAyB;QAC5B,2BAA2B;QAC3B,0BAA0B;QAC1B,kBAAkB;KAClB,CAAC,CACF,CAAC;AACH,CAAC;AAED,SAAS,kCAAkC;IAC1C,IAAI,CAAC,2BAA2B,EAAE,EAAE,CAAC;QACpC,OAAO;IACR,CAAC;IACD,IAAI,CAAC,qBAAqB,CAAC,6BAA6B,CAAC,EAAE,CAAC;QAC3D,MAAM,CAAC,IAAI,CACV,+EAA+E,CAC/E,CAAC;QACF,OAAO;IACR,CAAC;IACD,MAAM,CAAC,IAAI,CACV,4EAA4E,CAC5E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,2BAA2B;IACzC,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC;QACjD,cAAc,EAAE,yBAAyB;QACzC,YAAY,EAAE,sBAAsB;QACpC,mBAAmB,EAAE,6BAA6B;QAClD,cAAc,EAAE;YACf,4BAA4B;YAC5B,4BAA4B;SAC5B;QACD,kBAAkB,EAAE;YACnB,8BAA8B;YAC9B,8BAA8B;SAC9B;QACD,eAAe,EAAE;YAChB,mBAAmB;YACnB,0BAA0B;YAC1B,0BAA0B,CAAC,yBAAyB,CAAC,OAAO,CAAC;SAC7D;QACD,gBAAgB,EAAE,kBAAkB;QACpC,kBAAkB,EAAE,oBAAoB;QACxC,qBAAqB,EAAE,IAAI;QAC3B,YAAY,EAAE,IAAI;KAClB,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,kCAAkC,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC;IACb,CAAC;IAED,OAAO;QACN,GAAG,MAAM;QACT,SAAS,EAAE,uBAAuB,EAAE;KACpC,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,MAA4B;IACjD,OAAO;QACN,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,MAAM,CAAC,cAAc;YACxB,CAAC,CAAC,EAAE,mBAAmB,EAAE,MAAM,CAAC,cAAc,EAAE;YAChD,CAAC,CAAC,EAAE,CAAC;KACN,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAC/B,KAAiC,EACjC,OAAwB;IAExB,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC;IACzC,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAClE,OAAO,IAAI,CAAC;IACb,CAAC;IAED,OAAO;QACN,IAAI;QACJ,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,YAAY;QAC9C,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC;QAClC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAQ,CAAC;QAC7B,SAAS;QACT,OAAO;KACP,CAAC;AACH,CAAC;AAED,KAAK,UAAU,yBAAyB,CACvC,MAA4B,EAC5B,KAAiC,EACjC,IAAY;IAEZ,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CACzC,MAAM,EACN,mBAAmB,EACnB;QACC,IAAI;QACJ,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,YAAY;KAC9C,EACD;QACC,WAAW,EAAE,iBAAiB;QAC9B,WAAW,EAAE,UAAU;QACvB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;KAC/B,CACD,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACd,4BAA4B,QAAQ,CAAC,MAAM,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,EAAE,CAC7E,CAAC;IACH,CAAC;IACD,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAoB,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,oBAAoB,CAClC,MAA4B,EAC5B,KAAiC,EACjC,IAAY;IAEZ,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,0BAA0B,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAChE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,CAAC;IACrE,IAAI,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO,CAAE,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,eAAe,CACrC,GAAG,EACH;QACC,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC;KAC7B,EACD;QACC,WAAW,EAAE,iBAAiB;QAC9B,WAAW,EAAE,UAAU;QACvB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;KAC/B,CACD,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACd,4BAA4B,QAAQ,CAAC,MAAM,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,EAAE,CAC7E,CAAC;IACH,CAAC;IACD,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAoB,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAC1C,KAAiC;IAEjC,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACb,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,2BAA2B,EAAE,CAAC;QACnD,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,OAAO,GACZ,MAAM,CAAC,SAAS,KAAK,SAAS;YAC7B,CAAC,CAAC,MAAM,yBAAyB,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC;YACtD,CAAC,CAAC,MAAM,oBAAoB,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACb,CAAC;QAED,OAAO,uBAAuB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,6DAA6D,EAAE;YAC1E,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YAC7D,IAAI;YACJ,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,YAAY;YAC9C,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC;SAClC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC","sourcesContent":["import {\n\ttype PlatformServiceConfig,\n\tgetEnvValue,\n\tpostPlatformConnect,\n\tresolveOrganizationId,\n\tresolvePlatformServiceConfig,\n\ttrimString,\n} from \"../platform/client.js\";\nimport {\n\tPLATFORM_CONNECT_METHODS,\n\tPLATFORM_CONNECT_SERVICES,\n\tplatformConnectMethodPath,\n\tplatformConnectServicePath,\n} from \"../platform/core-services.js\";\nimport { fetchDownstream } from \"../utils/downstream-http.js\";\nimport { createLogger } from \"../utils/logger.js\";\nimport type {\n\tResolvePromptTemplateInput,\n\tResolvedPromptTemplate,\n} from \"./types.js\";\n\nconst logger = createLogger(\"prompts:service\");\nconst DEFAULT_TIMEOUT_MS = 2_000;\nconst DEFAULT_MAX_ATTEMPTS = 2;\nconst RESOLVE_PROMPT_PATH = platformConnectMethodPath(\n\tPLATFORM_CONNECT_METHODS.prompts.resolve,\n);\nconst LEGACY_RESOLVE_PROMPT_PATH = \"/v1/resolve\";\nconst PROMPTS_BASE_URL_ENV_VARS = [\n\t\"PROMPTS_SERVICE_URL\",\n\t\"MAESTRO_PROMPTS_SERVICE_URL\",\n] as const;\nconst PROMPTS_TOKEN_ENV_VARS = [\n\t\"PROMPTS_SERVICE_TOKEN\",\n\t\"MAESTRO_PROMPTS_SERVICE_TOKEN\",\n\t\"MAESTRO_EVALOPS_ACCESS_TOKEN\",\n\t\"EVALOPS_TOKEN\",\n] as const;\nconst PROMPTS_ORGANIZATION_ENV_VARS = [\n\t\"PROMPTS_SERVICE_ORGANIZATION_ID\",\n\t\"MAESTRO_PROMPTS_ORGANIZATION_ID\",\n\t\"MAESTRO_EVALOPS_ORG_ID\",\n\t\"EVALOPS_ORGANIZATION_ID\",\n\t\"MAESTRO_ENTERPRISE_ORG_ID\",\n] as const;\n\ntype PromptsTransport = \"connect\" | \"legacy-rest\";\n\ntype PromptsServiceConfig = PlatformServiceConfig & {\n\ttransport: PromptsTransport;\n};\n\ninterface ResolveVersionPayload {\n\tid?: string;\n\tversion?: number;\n\tcontent?: string;\n}\n\ninterface ResolveResponse {\n\tversion?: ResolveVersionPayload;\n}\n\nfunction resolvePromptsTransport(): PromptsTransport {\n\tconst configured = trimString(\n\t\tprocess.env.PROMPTS_SERVICE_TRANSPORT,\n\t)?.toLowerCase();\n\tif (configured === \"connect\" || configured === \"platform\") {\n\t\treturn \"connect\";\n\t}\n\tif (configured === \"legacy\" || configured === \"legacy-rest\") {\n\t\treturn \"legacy-rest\";\n\t}\n\tconst serviceSpecificBase = getEnvValue(PROMPTS_BASE_URL_ENV_VARS);\n\treturn serviceSpecificBase ? \"legacy-rest\" : \"connect\";\n}\n\nfunction hasConfiguredPromptsBaseUrl(): boolean {\n\treturn Boolean(\n\t\tgetEnvValue([\n\t\t\t...PROMPTS_BASE_URL_ENV_VARS,\n\t\t\t\"MAESTRO_PLATFORM_BASE_URL\",\n\t\t\t\"MAESTRO_EVALOPS_BASE_URL\",\n\t\t\t\"EVALOPS_BASE_URL\",\n\t\t]),\n\t);\n}\n\nfunction warnPromptsServiceMisconfiguration(): void {\n\tif (!hasConfiguredPromptsBaseUrl()) {\n\t\treturn;\n\t}\n\tif (!resolveOrganizationId(PROMPTS_ORGANIZATION_ENV_VARS)) {\n\t\tlogger.warn(\n\t\t\t\"Prompts service configured without organization id; retaining bundled prompts\",\n\t\t);\n\t\treturn;\n\t}\n\tlogger.warn(\n\t\t\"Prompts service configured without access token; retaining bundled prompts\",\n\t);\n}\n\nasync function resolvePromptsServiceConfig(): Promise<PromptsServiceConfig | null> {\n\tconst config = await resolvePlatformServiceConfig({\n\t\tbaseUrlEnvVars: PROMPTS_BASE_URL_ENV_VARS,\n\t\ttokenEnvVars: PROMPTS_TOKEN_ENV_VARS,\n\t\torganizationEnvVars: PROMPTS_ORGANIZATION_ENV_VARS,\n\t\ttimeoutEnvVars: [\n\t\t\t\"PROMPTS_SERVICE_TIMEOUT_MS\",\n\t\t\t\"MAESTRO_PROMPTS_TIMEOUT_MS\",\n\t\t],\n\t\tmaxAttemptsEnvVars: [\n\t\t\t\"PROMPTS_SERVICE_MAX_ATTEMPTS\",\n\t\t\t\"MAESTRO_PROMPTS_MAX_ATTEMPTS\",\n\t\t],\n\t\tbaseUrlSuffixes: [\n\t\t\tRESOLVE_PROMPT_PATH,\n\t\t\tLEGACY_RESOLVE_PROMPT_PATH,\n\t\t\tplatformConnectServicePath(PLATFORM_CONNECT_SERVICES.prompts),\n\t\t],\n\t\tdefaultTimeoutMs: DEFAULT_TIMEOUT_MS,\n\t\tdefaultMaxAttempts: DEFAULT_MAX_ATTEMPTS,\n\t\trequireOrganizationId: true,\n\t\trequireToken: true,\n\t});\n\tif (!config) {\n\t\twarnPromptsServiceMisconfiguration();\n\t\treturn null;\n\t}\n\n\treturn {\n\t\t...config,\n\t\ttransport: resolvePromptsTransport(),\n\t};\n}\n\nfunction buildHeaders(config: PromptsServiceConfig): Record<string, string> {\n\treturn {\n\t\t...(config.token ? { Authorization: `Bearer ${config.token}` } : {}),\n\t\t...(config.organizationId\n\t\t\t? { \"X-Organization-ID\": config.organizationId }\n\t\t\t: {}),\n\t};\n}\n\nfunction normalizeResolvedPrompt(\n\tinput: ResolvePromptTemplateInput,\n\tpayload: ResolveResponse,\n): ResolvedPromptTemplate | null {\n\tconst name = trimString(input.name);\n\tconst versionId = trimString(payload.version?.id);\n\tconst content = trimString(payload.version?.content);\n\tconst version = payload.version?.version;\n\tif (!name || !versionId || !content || !Number.isFinite(version)) {\n\t\treturn null;\n\t}\n\n\treturn {\n\t\tname,\n\t\tlabel: trimString(input.label) ?? \"production\",\n\t\tsurface: trimString(input.surface),\n\t\tversion: Math.round(version!),\n\t\tversionId,\n\t\tcontent,\n\t};\n}\n\nasync function resolveViaPlatformConnect(\n\tconfig: PromptsServiceConfig,\n\tinput: ResolvePromptTemplateInput,\n\tname: string,\n): Promise<ResolveResponse | null> {\n\tconst response = await postPlatformConnect(\n\t\tconfig,\n\t\tRESOLVE_PROMPT_PATH,\n\t\t{\n\t\t\tname,\n\t\t\tlabel: trimString(input.label) ?? \"production\",\n\t\t},\n\t\t{\n\t\t\tserviceName: \"prompts service\",\n\t\t\tfailureMode: \"optional\",\n\t\t\ttimeoutMs: config.timeoutMs,\n\t\t\tmaxAttempts: config.maxAttempts,\n\t\t},\n\t);\n\tif (response.status === 404) {\n\t\treturn null;\n\t}\n\tif (!response.ok) {\n\t\tconst text = await response.text();\n\t\tthrow new Error(\n\t\t\t`prompts service returned ${response.status}: ${text || response.statusText}`,\n\t\t);\n\t}\n\treturn (await response.json()) as ResolveResponse;\n}\n\nasync function resolveViaLegacyRest(\n\tconfig: PromptsServiceConfig,\n\tinput: ResolvePromptTemplateInput,\n\tname: string,\n): Promise<ResolveResponse | null> {\n\tconst url = new URL(LEGACY_RESOLVE_PROMPT_PATH, config.baseUrl);\n\turl.searchParams.set(\"name\", name);\n\turl.searchParams.set(\"env\", trimString(input.label) ?? \"production\");\n\tif (trimString(input.surface)) {\n\t\turl.searchParams.set(\"surface\", trimString(input.surface)!);\n\t}\n\n\tconst response = await fetchDownstream(\n\t\turl,\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\theaders: buildHeaders(config),\n\t\t},\n\t\t{\n\t\t\tserviceName: \"prompts service\",\n\t\t\tfailureMode: \"optional\",\n\t\t\ttimeoutMs: config.timeoutMs,\n\t\t\tmaxAttempts: config.maxAttempts,\n\t\t},\n\t);\n\tif (response.status === 404) {\n\t\treturn null;\n\t}\n\tif (!response.ok) {\n\t\tconst text = await response.text();\n\t\tthrow new Error(\n\t\t\t`prompts service returned ${response.status}: ${text || response.statusText}`,\n\t\t);\n\t}\n\treturn (await response.json()) as ResolveResponse;\n}\n\nexport async function resolvePromptTemplate(\n\tinput: ResolvePromptTemplateInput,\n): Promise<ResolvedPromptTemplate | null> {\n\tconst name = trimString(input.name);\n\tif (!name) {\n\t\treturn null;\n\t}\n\n\ttry {\n\t\tconst config = await resolvePromptsServiceConfig();\n\t\tif (!config) {\n\t\t\treturn null;\n\t\t}\n\n\t\tconst payload =\n\t\t\tconfig.transport === \"connect\"\n\t\t\t\t? await resolveViaPlatformConnect(config, input, name)\n\t\t\t\t: await resolveViaLegacyRest(config, input, name);\n\t\tif (!payload) {\n\t\t\treturn null;\n\t\t}\n\n\t\treturn normalizeResolvedPrompt(input, payload);\n\t} catch (error) {\n\t\tlogger.warn(\"Failed to resolve prompt template; retaining bundled prompt\", {\n\t\t\terror: error instanceof Error ? error.message : String(error),\n\t\t\tname,\n\t\t\tlabel: trimString(input.label) ?? \"production\",\n\t\t\tsurface: trimString(input.surface),\n\t\t});\n\t\treturn null;\n\t}\n}\n"]}

package/dist/providers/anthropic-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"anthropic-auth.d.ts","sourceRoot":"","sources":["../../src/providers/anthropic-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAWH,MAAM,MAAM,kBAAkB,GAAG,KAAK,GAAG,SAAS,CAAC;AAEnD,MAAM,WAAW,wBAAwB;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,kBAAkB,CAAC;CACzB;AA2BD,eAAO,MAAM,uBAAuB,8IACwG,CAAC;AAyB7I,wBAAsB,iCAAiC,IAAI,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC,CA+BlG;AAED,wBAAsB,4BAA4B,CACjD,UAAU,EAAE,wBAAwB,GAClC,OAAO,CAAC,IAAI,CAAC,CAMf;AAED,wBAAsB,8BAA8B,IAAI,OAAO,CAAC,IAAI,CAAC,CAMpE;AAED,wBAAsB,gCAAgC,IAAI,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC,CAqBjG;AAED,wBAAsB,yBAAyB,CAC9C,IAAI,GAAE,kBAA0B;;;GAsBhC;AAED,wBAAsB,kCAAkC,CACvD,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACd,OAAO,CAAC;IACV,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CAClB,GAAG,IAAI,CAAC,CA6BR;AAED,wBAAsB,0BAA0B,CAC/C,YAAY,EAAE,MAAM,GAClB,OAAO,CAAC;IACV,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CAClB,GAAG,IAAI,CAAC,CAsBR;AAED,wBAAsB,iBAAiB,CACtC,WAAW,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAgBxB"}
+{"version":3,"file":"anthropic-auth.d.ts","sourceRoot":"","sources":["../../src/providers/anthropic-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAYH,MAAM,MAAM,kBAAkB,GAAG,KAAK,GAAG,SAAS,CAAC;AAEnD,MAAM,WAAW,wBAAwB;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,kBAAkB,CAAC;CACzB;AA4BD,eAAO,MAAM,uBAAuB,8IACwG,CAAC;AAyB7I,wBAAsB,iCAAiC,IAAI,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC,CA+BlG;AAED,wBAAsB,4BAA4B,CACjD,UAAU,EAAE,wBAAwB,GAClC,OAAO,CAAC,IAAI,CAAC,CAMf;AAED,wBAAsB,8BAA8B,IAAI,OAAO,CAAC,IAAI,CAAC,CAMpE;AAED,wBAAsB,gCAAgC,IAAI,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC,CAqBjG;AAED,wBAAsB,yBAAyB,CAC9C,IAAI,GAAE,kBAA0B;;;GAsBhC;AAED,wBAAsB,kCAAkC,CACvD,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACd,OAAO,CAAC;IACV,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CAClB,GAAG,IAAI,CAAC,CAiCR;AAED,wBAAsB,0BAA0B,CAC/C,YAAY,EAAE,MAAM,GAClB,OAAO,CAAC;IACV,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CAClB,GAAG,IAAI,CAAC,CA0BR;AAED,wBAAsB,iBAAiB,CACtC,WAAW,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAiBxB"}

package/dist/providers/anthropic-auth.js

@@ -51,7 +51,9 @@ import { rm } from "node:fs/promises";
 import { dirname, join, resolve } from "node:path";
 import { getAgentDir } from "../config/constants.js";
 import { safeJsonParse } from "../utils/json.js";
+import { fetchOAuthHttp } from "../utils/oauth-http.js";
 const CLIENT_ID = "9d1c250a-e61b-44d9-88ed-5944d1962f5e";
+const ANTHROPIC_OAUTH_SERVICE_NAME = "Anthropic OAuth service";
 const CLAUDE_LOGIN_HOST = {
     pro: "claude.ai",
     console: "console.anthropic.com",
@@ -154,7 +156,7 @@ export async function exchangeAnthropicAuthorizationCode(code, verifier) {
     if (!actualCode || !state) {
         return null;
     }
-    const response = await fetch("https://console.anthropic.com/v1/oauth/token", {
+    const response = await fetchOAuthHttp("https://console.anthropic.com/v1/oauth/token", {
         method: "POST",
         headers: { "Content-Type": "application/json" },
         body: JSON.stringify({
@@ -165,7 +167,7 @@ export async function exchangeAnthropicAuthorizationCode(code, verifier) {
             redirect_uri: "https://console.anthropic.com/oauth/code/callback",
             code_verifier: verifier,
         }),
-    });
+    }, { serviceName: ANTHROPIC_OAUTH_SERVICE_NAME });
     if (!response.ok) {
         return null;
     }
@@ -180,7 +182,7 @@ export async function exchangeAnthropicAuthorizationCode(code, verifier) {
     };
 }
 export async function refreshAnthropicOAuthToken(refreshToken) {
-    const response = await fetch("https://console.anthropic.com/v1/oauth/token", {
+    const response = await fetchOAuthHttp("https://console.anthropic.com/v1/oauth/token", {
         method: "POST",
         headers: { "Content-Type": "application/json" },
         body: JSON.stringify({
@@ -188,7 +190,7 @@ export async function refreshAnthropicOAuthToken(refreshToken) {
             refresh_token: refreshToken,
             client_id: CLIENT_ID,
         }),
-    });
+    }, { serviceName: ANTHROPIC_OAUTH_SERVICE_NAME });
     if (!response.ok) {
         return null;
     }
@@ -203,13 +205,13 @@ export async function refreshAnthropicOAuthToken(refreshToken) {
     };
 }
 export async function fetchClaudeApiKey(accessToken) {
-    const response = await fetch("https://api.anthropic.com/api/oauth/claude_cli/create_api_key", {
+    const response = await fetchOAuthHttp("https://api.anthropic.com/api/oauth/claude_cli/create_api_key", {
         method: "POST",
         headers: {
             "Content-Type": "application/json",
             authorization: `Bearer ${accessToken}`,
         },
-    });
+    }, { serviceName: ANTHROPIC_OAUTH_SERVICE_NAME });
     if (!response.ok) {
         return null;
     }

package/dist/providers/anthropic-auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"anthropic-auth.js","sourceRoot":"","sources":["../../src/providers/anthropic-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAajD,MAAM,SAAS,GAAG,sCAAsC,CAAC;AAEzD,MAAM,iBAAiB,GAAuC;IAC7D,GAAG,EAAE,WAAW;IAChB,OAAO,EAAE,uBAAuB;CAChC,CAAC;AAaF,MAAM,gBAAgB,GAAG,OAAO,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,CAAC;AAEtD,MAAM,SAAS,GAAG,OAAO,CACxB,OAAO,CAAC,GAAG,CAAC,oBAAoB;IAC/B,IAAI,CAAC,gBAAgB,EAAE,sBAAsB,CAAC,CAC/C,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GACnC,2IAA2I,CAAC;AAO7I,SAAS,WAAW,CAAC,MAAc;IAClC,OAAO,MAAM;SACX,QAAQ,CAAC,QAAQ,CAAC;SAClB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACvB,CAAC;AAED,KAAK,UAAU,YAAY;IAC1B,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9E,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,aAAa;IACrB,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC;IACtD,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,aAAa,CAKzB,QAAQ,EAAE,4BAA4B,CAAC,CAAC;QAE3C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC;QAC3B,IACC,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;YACtC,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ;YACvC,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,EACnC,CAAC;YACF,OAAO;gBACN,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK;aACnD,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CACjD,UAAoC;IAEpC,aAAa,EAAE,CAAC;IAChB,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;QAC7D,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,KAAK;KACX,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B;IACnD,IAAI,CAAC;QACJ,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACR,kCAAkC;IACnC,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC;IACrD,MAAM,MAAM,GAAG,MAAM,iCAAiC,EAAE,CAAC;IACzD,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QAC5C,OAAO,MAAM,CAAC;IACf,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACxE,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,MAAM,8BAA8B,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,IAAI,GAA6B;QACtC,GAAG,MAAM;QACT,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,YAAY,EAAE,SAAS,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY;QAC3D,SAAS,EAAE,SAAS,CAAC,SAAS;KAC9B,CAAC;IACF,MAAM,4BAA4B,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,IAAI,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC9C,OAA2B,KAAK;IAEhC,MAAM,IAAI,GAAG,MAAM,YAAY,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,IAAI,GAAG,CACnB,WAAW,iBAAiB,CAAC,IAAI,CAAC,kBAAkB,EACpD,WAAW,iBAAiB,CAAC,IAAI,CAAC,EAAE,CACpC,CAAC;IACF,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAC/C,IAAI,CAAC,YAAY,CAAC,GAAG,CACpB,cAAc,EACd,mDAAmD,CACnD,CAAC;IACF,IAAI,CAAC,YAAY,CAAC,GAAG,CACpB,OAAO,EACP,gDAAgD,CAChD,CAAC;IACF,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACxD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;IACvD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9C,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACvD,IAAY,EACZ,QAAgB;IAMhB,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnD,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,8CAA8C,EAAE;QAC5E,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACpB,IAAI,EAAE,UAAU;YAChB,KAAK;YACL,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,SAAS;YACpB,YAAY,EAAE,mDAAmD;YACjE,aAAa,EAAE,QAAQ;SACvB,CAAC;KACF,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA2B,CAAC;IAClE,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QACrD,OAAO,IAAI,CAAC;IACb,CAAC;IACD,OAAO;QACN,WAAW,EAAE,OAAO,CAAC,YAAY;QACjC,YAAY,EAAE,OAAO,CAAC,aAAa;QACnC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,IAAI;KACxD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC/C,YAAoB;IAMpB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,8CAA8C,EAAE;QAC5E,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACpB,UAAU,EAAE,eAAe;YAC3B,aAAa,EAAE,YAAY;YAC3B,SAAS,EAAE,SAAS;SACpB,CAAC;KACF,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA2B,CAAC;IAClE,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IACb,CAAC;IACD,OAAO;QACN,WAAW,EAAE,OAAO,CAAC,YAAY;QACjC,YAAY,EAAE,OAAO,CAAC,aAAa;QACnC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,IAAI;KACxD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,WAAmB;IAEnB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC3B,+DAA+D,EAC/D;QACC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACR,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,WAAW,EAAE;SACtC;KACD,CACD,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAyB,CAAC;IAChE,OAAO,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACrE,CAAC","sourcesContent":["/**\n * Anthropic OAuth Authentication\n *\n * This module implements OAuth 2.0 with PKCE for authenticating with\n * Anthropic's Claude API. It supports both claude.ai (Pro) and\n * console.anthropic.com (Console) login modes.\n *\n * ## Authentication Flow\n *\n * ```\n * ┌─────────────────────────────────────────────────────────────┐\n * │                    Anthropic OAuth Flow                     │\n * ├─────────────────────────────────────────────────────────────┤\n * │  1. Generate PKCE challenge (verifier + challenge)          │\n * │  2. Generate login URL → User opens in browser              │\n * │  3. User authenticates at claude.ai or console.anthropic.com│\n * │  4. Receive authorization code from redirect                │\n * │  5. Exchange code + verifier for access/refresh tokens      │\n * │  6. Store credentials in ~/.maestro/anthropic-oauth.json   │\n * │  7. Auto-refresh tokens when they expire                    │\n * └─────────────────────────────────────────────────────────────┘\n * ```\n *\n * ## Login Modes\n *\n * | Mode    | Host                    | Description              |\n * |---------|-------------------------|--------------------------|\n * | pro     | claude.ai               | Claude Pro subscriptions |\n * | console | console.anthropic.com   | API Console access       |\n *\n * ## Token Storage\n *\n * Credentials are stored at:\n * - Default: `~/.maestro/anthropic-oauth.json`\n * - Custom: `$ANTHROPIC_OAUTH_FILE`\n *\n * File is created with mode 0o600 (owner read/write only).\n *\n * ## Key Functions\n *\n * - `generateAnthropicLoginUrl()`: Create OAuth URL for browser\n * - `exchangeAnthropicAuthorizationCode()`: Exchange code for tokens\n * - `getFreshAnthropicOAuthCredential()`: Get valid token (auto-refresh)\n * - `fetchClaudeApiKey()`: Convert OAuth token to API key\n *\n * @module providers/anthropic-auth\n */\n\nimport { createHash, randomBytes } from \"node:crypto\";\nimport { mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { rm } from \"node:fs/promises\";\nimport { dirname, join, resolve } from \"node:path\";\nimport { getAgentDir } from \"../config/constants.js\";\nimport { safeJsonParse } from \"../utils/json.js\";\n\n// Portions of this module are derived from https://github.com/sst/opencode-anthropic-auth (MIT).\n\nexport type AnthropicLoginMode = \"pro\" | \"console\";\n\nexport interface AnthropicOAuthCredential {\n\taccessToken: string;\n\trefreshToken: string;\n\texpiresAt: number;\n\tmode: AnthropicLoginMode;\n}\n\nconst CLIENT_ID = \"9d1c250a-e61b-44d9-88ed-5944d1962f5e\";\n\nconst CLAUDE_LOGIN_HOST: Record<AnthropicLoginMode, string> = {\n\tpro: \"claude.ai\",\n\tconsole: \"console.anthropic.com\",\n};\n\ninterface AnthropicTokenResponse {\n\taccess_token?: string;\n\trefresh_token?: string;\n\texpires_in?: number;\n\terror?: string;\n}\n\ninterface ClaudeApiKeyResponse {\n\traw_key?: string;\n}\n\nconst DEFAULT_BASE_DIR = resolve(getAgentDir(), \"..\");\n\nconst AUTH_FILE = resolve(\n\tprocess.env.ANTHROPIC_OAUTH_FILE ??\n\t\tjoin(DEFAULT_BASE_DIR, \"anthropic-oauth.json\"),\n);\n\nexport const CLAUDE_CODE_BETA_HEADER =\n\t\"oauth-2025-04-20,claude-code-20250219,interleaved-thinking-2025-05-14,fine-grained-tool-streaming-2025-05-14,advanced-tool-use-2025-11-20\";\n\ninterface PKCEPair {\n\tverifier: string;\n\tchallenge: string;\n}\n\nfunction toBase64Url(buffer: Buffer): string {\n\treturn buffer\n\t\t.toString(\"base64\")\n\t\t.replace(/\\+/g, \"-\")\n\t\t.replace(/\\//g, \"_\")\n\t\t.replace(/=+$/g, \"\");\n}\n\nasync function generatePKCE(): Promise<PKCEPair> {\n\tconst verifier = toBase64Url(randomBytes(32));\n\tconst challenge = toBase64Url(createHash(\"sha256\").update(verifier).digest());\n\treturn { verifier, challenge };\n}\n\nfunction ensureAuthDir(): void {\n\tmkdirSync(dirname(AUTH_FILE), { recursive: true });\n}\n\nexport async function getStoredAnthropicOAuthCredential(): Promise<AnthropicOAuthCredential | null> {\n\ttry {\n\t\tconst contents = readFileSync(AUTH_FILE, \"utf8\");\n\t\tconst result = safeJsonParse<{\n\t\t\taccessToken?: unknown;\n\t\t\trefreshToken?: unknown;\n\t\t\texpiresAt?: unknown;\n\t\t\tmode?: unknown;\n\t\t}>(contents, \"Anthropic auth credentials\");\n\n\t\tif (!result.success) {\n\t\t\treturn null;\n\t\t}\n\n\t\tconst parsed = result.data;\n\t\tif (\n\t\t\ttypeof parsed.accessToken === \"string\" &&\n\t\t\ttypeof parsed.refreshToken === \"string\" &&\n\t\t\ttypeof parsed.expiresAt === \"number\"\n\t\t) {\n\t\t\treturn {\n\t\t\t\taccessToken: parsed.accessToken,\n\t\t\t\trefreshToken: parsed.refreshToken,\n\t\t\t\texpiresAt: parsed.expiresAt,\n\t\t\t\tmode: parsed.mode === \"console\" ? \"console\" : \"pro\",\n\t\t\t};\n\t\t}\n\t\treturn null;\n\t} catch {\n\t\treturn null;\n\t}\n}\n\nexport async function saveAnthropicOAuthCredential(\n\tcredential: AnthropicOAuthCredential,\n): Promise<void> {\n\tensureAuthDir();\n\twriteFileSync(AUTH_FILE, JSON.stringify(credential, null, 2), {\n\t\tencoding: \"utf8\",\n\t\tmode: 0o600,\n\t});\n}\n\nexport async function deleteAnthropicOAuthCredential(): Promise<void> {\n\ttry {\n\t\tawait rm(AUTH_FILE);\n\t} catch {\n\t\t// ignore when file does not exist\n\t}\n}\n\nexport async function getFreshAnthropicOAuthCredential(): Promise<AnthropicOAuthCredential | null> {\n\tconst stored = await getStoredAnthropicOAuthCredential();\n\tif (!stored) {\n\t\treturn null;\n\t}\n\tif (stored.expiresAt - Date.now() > 60_000) {\n\t\treturn stored;\n\t}\n\tconst refreshed = await refreshAnthropicOAuthToken(stored.refreshToken);\n\tif (!refreshed) {\n\t\tawait deleteAnthropicOAuthCredential();\n\t\treturn null;\n\t}\n\tconst next: AnthropicOAuthCredential = {\n\t\t...stored,\n\t\taccessToken: refreshed.accessToken,\n\t\trefreshToken: refreshed.refreshToken ?? stored.refreshToken,\n\t\texpiresAt: refreshed.expiresAt,\n\t};\n\tawait saveAnthropicOAuthCredential(next);\n\treturn next;\n}\n\nexport async function generateAnthropicLoginUrl(\n\tmode: AnthropicLoginMode = \"pro\",\n) {\n\tconst pkce = await generatePKCE();\n\tconst base = new URL(\n\t\t`https://${CLAUDE_LOGIN_HOST[mode]}/oauth/authorize`,\n\t\t`https://${CLAUDE_LOGIN_HOST[mode]}`,\n\t);\n\tbase.searchParams.set(\"code\", \"true\");\n\tbase.searchParams.set(\"client_id\", CLIENT_ID);\n\tbase.searchParams.set(\"response_type\", \"code\");\n\tbase.searchParams.set(\n\t\t\"redirect_uri\",\n\t\t\"https://console.anthropic.com/oauth/code/callback\",\n\t);\n\tbase.searchParams.set(\n\t\t\"scope\",\n\t\t\"org:create_api_key user:profile user:inference\",\n\t);\n\tbase.searchParams.set(\"code_challenge\", pkce.challenge);\n\tbase.searchParams.set(\"code_challenge_method\", \"S256\");\n\tbase.searchParams.set(\"state\", pkce.verifier);\n\treturn { url: base.toString(), verifier: pkce.verifier };\n}\n\nexport async function exchangeAnthropicAuthorizationCode(\n\tcode: string,\n\tverifier: string,\n): Promise<{\n\taccessToken: string;\n\trefreshToken: string;\n\texpiresAt: number;\n} | null> {\n\tconst [actualCode, state] = code.trim().split(\"#\");\n\tif (!actualCode || !state) {\n\t\treturn null;\n\t}\n\tconst response = await fetch(\"https://console.anthropic.com/v1/oauth/token\", {\n\t\tmethod: \"POST\",\n\t\theaders: { \"Content-Type\": \"application/json\" },\n\t\tbody: JSON.stringify({\n\t\t\tcode: actualCode,\n\t\t\tstate,\n\t\t\tgrant_type: \"authorization_code\",\n\t\t\tclient_id: CLIENT_ID,\n\t\t\tredirect_uri: \"https://console.anthropic.com/oauth/code/callback\",\n\t\t\tcode_verifier: verifier,\n\t\t}),\n\t});\n\tif (!response.ok) {\n\t\treturn null;\n\t}\n\tconst payload = (await response.json()) as AnthropicTokenResponse;\n\tif (!payload.access_token || !payload.refresh_token) {\n\t\treturn null;\n\t}\n\treturn {\n\t\taccessToken: payload.access_token,\n\t\trefreshToken: payload.refresh_token,\n\t\texpiresAt: Date.now() + (payload.expires_in ?? 0) * 1000,\n\t};\n}\n\nexport async function refreshAnthropicOAuthToken(\n\trefreshToken: string,\n): Promise<{\n\taccessToken: string;\n\trefreshToken?: string;\n\texpiresAt: number;\n} | null> {\n\tconst response = await fetch(\"https://console.anthropic.com/v1/oauth/token\", {\n\t\tmethod: \"POST\",\n\t\theaders: { \"Content-Type\": \"application/json\" },\n\t\tbody: JSON.stringify({\n\t\t\tgrant_type: \"refresh_token\",\n\t\t\trefresh_token: refreshToken,\n\t\t\tclient_id: CLIENT_ID,\n\t\t}),\n\t});\n\tif (!response.ok) {\n\t\treturn null;\n\t}\n\tconst payload = (await response.json()) as AnthropicTokenResponse;\n\tif (!payload.access_token) {\n\t\treturn null;\n\t}\n\treturn {\n\t\taccessToken: payload.access_token,\n\t\trefreshToken: payload.refresh_token,\n\t\texpiresAt: Date.now() + (payload.expires_in ?? 0) * 1000,\n\t};\n}\n\nexport async function fetchClaudeApiKey(\n\taccessToken: string,\n): Promise<string | null> {\n\tconst response = await fetch(\n\t\t\"https://api.anthropic.com/api/oauth/claude_cli/create_api_key\",\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\theaders: {\n\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\tauthorization: `Bearer ${accessToken}`,\n\t\t\t},\n\t\t},\n\t);\n\tif (!response.ok) {\n\t\treturn null;\n\t}\n\tconst payload = (await response.json()) as ClaudeApiKeyResponse;\n\treturn typeof payload.raw_key === \"string\" ? payload.raw_key : null;\n}\n"]}
+{"version":3,"file":"anthropic-auth.js","sourceRoot":"","sources":["../../src/providers/anthropic-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAaxD,MAAM,SAAS,GAAG,sCAAsC,CAAC;AACzD,MAAM,4BAA4B,GAAG,yBAAyB,CAAC;AAE/D,MAAM,iBAAiB,GAAuC;IAC7D,GAAG,EAAE,WAAW;IAChB,OAAO,EAAE,uBAAuB;CAChC,CAAC;AAaF,MAAM,gBAAgB,GAAG,OAAO,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,CAAC;AAEtD,MAAM,SAAS,GAAG,OAAO,CACxB,OAAO,CAAC,GAAG,CAAC,oBAAoB;IAC/B,IAAI,CAAC,gBAAgB,EAAE,sBAAsB,CAAC,CAC/C,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GACnC,2IAA2I,CAAC;AAO7I,SAAS,WAAW,CAAC,MAAc;IAClC,OAAO,MAAM;SACX,QAAQ,CAAC,QAAQ,CAAC;SAClB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACvB,CAAC;AAED,KAAK,UAAU,YAAY;IAC1B,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9E,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,aAAa;IACrB,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC;IACtD,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,aAAa,CAKzB,QAAQ,EAAE,4BAA4B,CAAC,CAAC;QAE3C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC;QAC3B,IACC,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;YACtC,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ;YACvC,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,EACnC,CAAC;YACF,OAAO;gBACN,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK;aACnD,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CACjD,UAAoC;IAEpC,aAAa,EAAE,CAAC;IAChB,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;QAC7D,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,KAAK;KACX,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B;IACnD,IAAI,CAAC;QACJ,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACR,kCAAkC;IACnC,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC;IACrD,MAAM,MAAM,GAAG,MAAM,iCAAiC,EAAE,CAAC;IACzD,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QAC5C,OAAO,MAAM,CAAC;IACf,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACxE,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,MAAM,8BAA8B,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,IAAI,GAA6B;QACtC,GAAG,MAAM;QACT,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,YAAY,EAAE,SAAS,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY;QAC3D,SAAS,EAAE,SAAS,CAAC,SAAS;KAC9B,CAAC;IACF,MAAM,4BAA4B,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,IAAI,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC9C,OAA2B,KAAK;IAEhC,MAAM,IAAI,GAAG,MAAM,YAAY,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,IAAI,GAAG,CACnB,WAAW,iBAAiB,CAAC,IAAI,CAAC,kBAAkB,EACpD,WAAW,iBAAiB,CAAC,IAAI,CAAC,EAAE,CACpC,CAAC;IACF,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAC/C,IAAI,CAAC,YAAY,CAAC,GAAG,CACpB,cAAc,EACd,mDAAmD,CACnD,CAAC;IACF,IAAI,CAAC,YAAY,CAAC,GAAG,CACpB,OAAO,EACP,gDAAgD,CAChD,CAAC;IACF,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACxD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;IACvD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9C,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACvD,IAAY,EACZ,QAAgB;IAMhB,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnD,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,cAAc,CACpC,8CAA8C,EAC9C;QACC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACpB,IAAI,EAAE,UAAU;YAChB,KAAK;YACL,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,SAAS;YACpB,YAAY,EAAE,mDAAmD;YACjE,aAAa,EAAE,QAAQ;SACvB,CAAC;KACF,EACD,EAAE,WAAW,EAAE,4BAA4B,EAAE,CAC7C,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA2B,CAAC;IAClE,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QACrD,OAAO,IAAI,CAAC;IACb,CAAC;IACD,OAAO;QACN,WAAW,EAAE,OAAO,CAAC,YAAY;QACjC,YAAY,EAAE,OAAO,CAAC,aAAa;QACnC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,IAAI;KACxD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC/C,YAAoB;IAMpB,MAAM,QAAQ,GAAG,MAAM,cAAc,CACpC,8CAA8C,EAC9C;QACC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACpB,UAAU,EAAE,eAAe;YAC3B,aAAa,EAAE,YAAY;YAC3B,SAAS,EAAE,SAAS;SACpB,CAAC;KACF,EACD,EAAE,WAAW,EAAE,4BAA4B,EAAE,CAC7C,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA2B,CAAC;IAClE,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IACb,CAAC;IACD,OAAO;QACN,WAAW,EAAE,OAAO,CAAC,YAAY;QACjC,YAAY,EAAE,OAAO,CAAC,aAAa;QACnC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,IAAI;KACxD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,WAAmB;IAEnB,MAAM,QAAQ,GAAG,MAAM,cAAc,CACpC,+DAA+D,EAC/D;QACC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACR,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,WAAW,EAAE;SACtC;KACD,EACD,EAAE,WAAW,EAAE,4BAA4B,EAAE,CAC7C,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAyB,CAAC;IAChE,OAAO,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACrE,CAAC","sourcesContent":["/**\n * Anthropic OAuth Authentication\n *\n * This module implements OAuth 2.0 with PKCE for authenticating with\n * Anthropic's Claude API. It supports both claude.ai (Pro) and\n * console.anthropic.com (Console) login modes.\n *\n * ## Authentication Flow\n *\n * ```\n * ┌─────────────────────────────────────────────────────────────┐\n * │                    Anthropic OAuth Flow                     │\n * ├─────────────────────────────────────────────────────────────┤\n * │  1. Generate PKCE challenge (verifier + challenge)          │\n * │  2. Generate login URL → User opens in browser              │\n * │  3. User authenticates at claude.ai or console.anthropic.com│\n * │  4. Receive authorization code from redirect                │\n * │  5. Exchange code + verifier for access/refresh tokens      │\n * │  6. Store credentials in ~/.maestro/anthropic-oauth.json   │\n * │  7. Auto-refresh tokens when they expire                    │\n * └─────────────────────────────────────────────────────────────┘\n * ```\n *\n * ## Login Modes\n *\n * | Mode    | Host                    | Description              |\n * |---------|-------------------------|--------------------------|\n * | pro     | claude.ai               | Claude Pro subscriptions |\n * | console | console.anthropic.com   | API Console access       |\n *\n * ## Token Storage\n *\n * Credentials are stored at:\n * - Default: `~/.maestro/anthropic-oauth.json`\n * - Custom: `$ANTHROPIC_OAUTH_FILE`\n *\n * File is created with mode 0o600 (owner read/write only).\n *\n * ## Key Functions\n *\n * - `generateAnthropicLoginUrl()`: Create OAuth URL for browser\n * - `exchangeAnthropicAuthorizationCode()`: Exchange code for tokens\n * - `getFreshAnthropicOAuthCredential()`: Get valid token (auto-refresh)\n * - `fetchClaudeApiKey()`: Convert OAuth token to API key\n *\n * @module providers/anthropic-auth\n */\n\nimport { createHash, randomBytes } from \"node:crypto\";\nimport { mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { rm } from \"node:fs/promises\";\nimport { dirname, join, resolve } from \"node:path\";\nimport { getAgentDir } from \"../config/constants.js\";\nimport { safeJsonParse } from \"../utils/json.js\";\nimport { fetchOAuthHttp } from \"../utils/oauth-http.js\";\n\n// Portions of this module are derived from https://github.com/sst/opencode-anthropic-auth (MIT).\n\nexport type AnthropicLoginMode = \"pro\" | \"console\";\n\nexport interface AnthropicOAuthCredential {\n\taccessToken: string;\n\trefreshToken: string;\n\texpiresAt: number;\n\tmode: AnthropicLoginMode;\n}\n\nconst CLIENT_ID = \"9d1c250a-e61b-44d9-88ed-5944d1962f5e\";\nconst ANTHROPIC_OAUTH_SERVICE_NAME = \"Anthropic OAuth service\";\n\nconst CLAUDE_LOGIN_HOST: Record<AnthropicLoginMode, string> = {\n\tpro: \"claude.ai\",\n\tconsole: \"console.anthropic.com\",\n};\n\ninterface AnthropicTokenResponse {\n\taccess_token?: string;\n\trefresh_token?: string;\n\texpires_in?: number;\n\terror?: string;\n}\n\ninterface ClaudeApiKeyResponse {\n\traw_key?: string;\n}\n\nconst DEFAULT_BASE_DIR = resolve(getAgentDir(), \"..\");\n\nconst AUTH_FILE = resolve(\n\tprocess.env.ANTHROPIC_OAUTH_FILE ??\n\t\tjoin(DEFAULT_BASE_DIR, \"anthropic-oauth.json\"),\n);\n\nexport const CLAUDE_CODE_BETA_HEADER =\n\t\"oauth-2025-04-20,claude-code-20250219,interleaved-thinking-2025-05-14,fine-grained-tool-streaming-2025-05-14,advanced-tool-use-2025-11-20\";\n\ninterface PKCEPair {\n\tverifier: string;\n\tchallenge: string;\n}\n\nfunction toBase64Url(buffer: Buffer): string {\n\treturn buffer\n\t\t.toString(\"base64\")\n\t\t.replace(/\\+/g, \"-\")\n\t\t.replace(/\\//g, \"_\")\n\t\t.replace(/=+$/g, \"\");\n}\n\nasync function generatePKCE(): Promise<PKCEPair> {\n\tconst verifier = toBase64Url(randomBytes(32));\n\tconst challenge = toBase64Url(createHash(\"sha256\").update(verifier).digest());\n\treturn { verifier, challenge };\n}\n\nfunction ensureAuthDir(): void {\n\tmkdirSync(dirname(AUTH_FILE), { recursive: true });\n}\n\nexport async function getStoredAnthropicOAuthCredential(): Promise<AnthropicOAuthCredential | null> {\n\ttry {\n\t\tconst contents = readFileSync(AUTH_FILE, \"utf8\");\n\t\tconst result = safeJsonParse<{\n\t\t\taccessToken?: unknown;\n\t\t\trefreshToken?: unknown;\n\t\t\texpiresAt?: unknown;\n\t\t\tmode?: unknown;\n\t\t}>(contents, \"Anthropic auth credentials\");\n\n\t\tif (!result.success) {\n\t\t\treturn null;\n\t\t}\n\n\t\tconst parsed = result.data;\n\t\tif (\n\t\t\ttypeof parsed.accessToken === \"string\" &&\n\t\t\ttypeof parsed.refreshToken === \"string\" &&\n\t\t\ttypeof parsed.expiresAt === \"number\"\n\t\t) {\n\t\t\treturn {\n\t\t\t\taccessToken: parsed.accessToken,\n\t\t\t\trefreshToken: parsed.refreshToken,\n\t\t\t\texpiresAt: parsed.expiresAt,\n\t\t\t\tmode: parsed.mode === \"console\" ? \"console\" : \"pro\",\n\t\t\t};\n\t\t}\n\t\treturn null;\n\t} catch {\n\t\treturn null;\n\t}\n}\n\nexport async function saveAnthropicOAuthCredential(\n\tcredential: AnthropicOAuthCredential,\n): Promise<void> {\n\tensureAuthDir();\n\twriteFileSync(AUTH_FILE, JSON.stringify(credential, null, 2), {\n\t\tencoding: \"utf8\",\n\t\tmode: 0o600,\n\t});\n}\n\nexport async function deleteAnthropicOAuthCredential(): Promise<void> {\n\ttry {\n\t\tawait rm(AUTH_FILE);\n\t} catch {\n\t\t// ignore when file does not exist\n\t}\n}\n\nexport async function getFreshAnthropicOAuthCredential(): Promise<AnthropicOAuthCredential | null> {\n\tconst stored = await getStoredAnthropicOAuthCredential();\n\tif (!stored) {\n\t\treturn null;\n\t}\n\tif (stored.expiresAt - Date.now() > 60_000) {\n\t\treturn stored;\n\t}\n\tconst refreshed = await refreshAnthropicOAuthToken(stored.refreshToken);\n\tif (!refreshed) {\n\t\tawait deleteAnthropicOAuthCredential();\n\t\treturn null;\n\t}\n\tconst next: AnthropicOAuthCredential = {\n\t\t...stored,\n\t\taccessToken: refreshed.accessToken,\n\t\trefreshToken: refreshed.refreshToken ?? stored.refreshToken,\n\t\texpiresAt: refreshed.expiresAt,\n\t};\n\tawait saveAnthropicOAuthCredential(next);\n\treturn next;\n}\n\nexport async function generateAnthropicLoginUrl(\n\tmode: AnthropicLoginMode = \"pro\",\n) {\n\tconst pkce = await generatePKCE();\n\tconst base = new URL(\n\t\t`https://${CLAUDE_LOGIN_HOST[mode]}/oauth/authorize`,\n\t\t`https://${CLAUDE_LOGIN_HOST[mode]}`,\n\t);\n\tbase.searchParams.set(\"code\", \"true\");\n\tbase.searchParams.set(\"client_id\", CLIENT_ID);\n\tbase.searchParams.set(\"response_type\", \"code\");\n\tbase.searchParams.set(\n\t\t\"redirect_uri\",\n\t\t\"https://console.anthropic.com/oauth/code/callback\",\n\t);\n\tbase.searchParams.set(\n\t\t\"scope\",\n\t\t\"org:create_api_key user:profile user:inference\",\n\t);\n\tbase.searchParams.set(\"code_challenge\", pkce.challenge);\n\tbase.searchParams.set(\"code_challenge_method\", \"S256\");\n\tbase.searchParams.set(\"state\", pkce.verifier);\n\treturn { url: base.toString(), verifier: pkce.verifier };\n}\n\nexport async function exchangeAnthropicAuthorizationCode(\n\tcode: string,\n\tverifier: string,\n): Promise<{\n\taccessToken: string;\n\trefreshToken: string;\n\texpiresAt: number;\n} | null> {\n\tconst [actualCode, state] = code.trim().split(\"#\");\n\tif (!actualCode || !state) {\n\t\treturn null;\n\t}\n\tconst response = await fetchOAuthHttp(\n\t\t\"https://console.anthropic.com/v1/oauth/token\",\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\theaders: { \"Content-Type\": \"application/json\" },\n\t\t\tbody: JSON.stringify({\n\t\t\t\tcode: actualCode,\n\t\t\t\tstate,\n\t\t\t\tgrant_type: \"authorization_code\",\n\t\t\t\tclient_id: CLIENT_ID,\n\t\t\t\tredirect_uri: \"https://console.anthropic.com/oauth/code/callback\",\n\t\t\t\tcode_verifier: verifier,\n\t\t\t}),\n\t\t},\n\t\t{ serviceName: ANTHROPIC_OAUTH_SERVICE_NAME },\n\t);\n\tif (!response.ok) {\n\t\treturn null;\n\t}\n\tconst payload = (await response.json()) as AnthropicTokenResponse;\n\tif (!payload.access_token || !payload.refresh_token) {\n\t\treturn null;\n\t}\n\treturn {\n\t\taccessToken: payload.access_token,\n\t\trefreshToken: payload.refresh_token,\n\t\texpiresAt: Date.now() + (payload.expires_in ?? 0) * 1000,\n\t};\n}\n\nexport async function refreshAnthropicOAuthToken(\n\trefreshToken: string,\n): Promise<{\n\taccessToken: string;\n\trefreshToken?: string;\n\texpiresAt: number;\n} | null> {\n\tconst response = await fetchOAuthHttp(\n\t\t\"https://console.anthropic.com/v1/oauth/token\",\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\theaders: { \"Content-Type\": \"application/json\" },\n\t\t\tbody: JSON.stringify({\n\t\t\t\tgrant_type: \"refresh_token\",\n\t\t\t\trefresh_token: refreshToken,\n\t\t\t\tclient_id: CLIENT_ID,\n\t\t\t}),\n\t\t},\n\t\t{ serviceName: ANTHROPIC_OAUTH_SERVICE_NAME },\n\t);\n\tif (!response.ok) {\n\t\treturn null;\n\t}\n\tconst payload = (await response.json()) as AnthropicTokenResponse;\n\tif (!payload.access_token) {\n\t\treturn null;\n\t}\n\treturn {\n\t\taccessToken: payload.access_token,\n\t\trefreshToken: payload.refresh_token,\n\t\texpiresAt: Date.now() + (payload.expires_in ?? 0) * 1000,\n\t};\n}\n\nexport async function fetchClaudeApiKey(\n\taccessToken: string,\n): Promise<string | null> {\n\tconst response = await fetchOAuthHttp(\n\t\t\"https://api.anthropic.com/api/oauth/claude_cli/create_api_key\",\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\theaders: {\n\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\tauthorization: `Bearer ${accessToken}`,\n\t\t\t},\n\t\t},\n\t\t{ serviceName: ANTHROPIC_OAUTH_SERVICE_NAME },\n\t);\n\tif (!response.ok) {\n\t\treturn null;\n\t}\n\tconst payload = (await response.json()) as ClaudeApiKeyResponse;\n\treturn typeof payload.raw_key === \"string\" ? payload.raw_key : null;\n}\n"]}

package/dist/providers/api-keys.d.ts

@@ -63,6 +63,7 @@ export declare const envApiKeyMap: {
     readonly "google-antigravity": readonly ["GOOGLE_ANTIGRAVITY_TOKEN"];
     readonly evalops: readonly ["MAESTRO_EVALOPS_ACCESS_TOKEN"];
     readonly openai: readonly ["OPENAI_API_KEY"];
+    readonly "openai-codex": readonly ["OPENAI_CODEX_TOKEN", "OPENAI_CODEX_ACCESS_TOKEN", "CODEX_API_KEY"];
     readonly "azure-openai": readonly ["AZURE_OPENAI_API_KEY"];
     readonly anthropic: readonly ["ANTHROPIC_OAUTH_TOKEN", "ANTHROPIC_API_KEY"];
     readonly bedrock: readonly ["AWS_ACCESS_KEY_ID", "AWS_PROFILE", "AWS_SSO_SESSION_NAME", "AWS_WEB_IDENTITY_TOKEN_FILE", "AWS_CONTAINER_CREDENTIALS_RELATIVE_URI"];

package/dist/providers/api-keys.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-keys.d.ts","sourceRoot":"","sources":["../../src/providers/api-keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0DG;AAMH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;CAsB6B,CAAC;AAEvD,MAAM,MAAM,aAAa,GAAG,MAAM,OAAO,YAAY,CAAC;AAEtD,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,aAAa,CAErE;AAYD,MAAM,MAAM,YAAY,GACrB,UAAU,GACV,KAAK,GACL,gBAAgB,GAChB,YAAY,GACZ,SAAS,CAAC;AAEb,MAAM,WAAW,kBAAkB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,wBAAgB,YAAY,CAC3B,QAAQ,EAAE,MAAM,EAChB,WAAW,CAAC,EAAE,MAAM,GAClB,kBAAkB,CAoFpB;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAOhE"}
+{"version":3,"file":"api-keys.d.ts","sourceRoot":"","sources":["../../src/providers/api-keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0DG;AAMH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;CA2B6B,CAAC;AAEvD,MAAM,MAAM,aAAa,GAAG,MAAM,OAAO,YAAY,CAAC;AAEtD,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,aAAa,CAErE;AAYD,MAAM,MAAM,YAAY,GACrB,UAAU,GACV,KAAK,GACL,gBAAgB,GAChB,YAAY,GACZ,SAAS,CAAC;AAEb,MAAM,WAAW,kBAAkB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,wBAAgB,YAAY,CAC3B,QAAQ,EAAE,MAAM,EAChB,WAAW,CAAC,EAAE,MAAM,GAClB,kBAAkB,CAoFpB;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAOhE"}

package/dist/providers/api-keys.js

@@ -66,6 +66,11 @@ export const envApiKeyMap = {
     "google-antigravity": ["GOOGLE_ANTIGRAVITY_TOKEN"],
     evalops: ["MAESTRO_EVALOPS_ACCESS_TOKEN"],
     openai: ["OPENAI_API_KEY"],
+    "openai-codex": [
+        "OPENAI_CODEX_TOKEN",
+        "OPENAI_CODEX_ACCESS_TOKEN",
+        "CODEX_API_KEY",
+    ],
     "azure-openai": ["AZURE_OPENAI_API_KEY"],
     anthropic: ["ANTHROPIC_OAUTH_TOKEN", "ANTHROPIC_API_KEY"],
     bedrock: [