agent-inspect 5.4.0 → 6.1.0

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 6.1.0
+
+### Minor Changes
+
+- v6.1.0 client-hosted ingestion for @agent-inspect/studio: file-drop, GitHub artifact import, optional HTTP ingest with token validation, and manual bundle upload. All ingest channels disabled by default; self-hosted only.
+
+## 6.0.0
+
+### Minor Changes
+
+- Add self-hosted Studio (`@agent-inspect/studio`): optional read-only multi-project analyzer with `agent-inspect studio`, SQLite metadata cache, registry import, search/diff/reports views, optional basic auth, and self-hosting docs. Localhost by default; no maintainer cloud; no default upload.
+
 ## 5.4.0
 
 ### Minor Changes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-inspect",
-  "version": "5.4.0",
+  "version": "6.1.0",
   "license": "MIT",
   "type": "module",
   "description": "Trace, check, and safely share TypeScript AI-agent runs locally — no account, no upload, metadata-only by default",
@@ -206,7 +206,7 @@
   },
   "scripts": {
     "clean": "pnpm -r exec -- rm -rf dist",
-    "build": "pnpm exec tsup --config tsup.core.config.ts && pnpm exec tsup --config tsup.cli.config.ts && pnpm exec tsup --config tsup.langchain.config.ts && pnpm exec tsup --config tsup.tui.config.ts && pnpm exec tsup --config tsup.ai-sdk.config.ts && pnpm exec tsup --config tsup.vitest.config.ts && pnpm exec tsup --config tsup.jest.config.ts && pnpm exec tsup --config tsup.openai-agents.config.ts && pnpm exec tsup --config tsup.harness.config.ts && pnpm exec tsup --config tsup.redact.config.ts && pnpm exec tsup --config tsup.eval.config.ts && pnpm exec tsup --config tsup.mcp.config.ts && pnpm exec tsup --config tsup.guardrails.config.ts && pnpm exec tsup --config tsup.circuit.config.ts && pnpm exec tsup --config tsup.viewer.config.ts && pnpm exec tsup --config tsup.mcp-server.config.ts && pnpm exec tsup --config tsup.adapter-sdk.config.ts && pnpm exec tsup --config tsup.vscode.config.ts && pnpm exec tsup --config tsup.index-sqlite.config.ts",
+    "build": "pnpm exec tsup --config tsup.core.config.ts && pnpm exec tsup --config tsup.cli.config.ts && pnpm exec tsup --config tsup.langchain.config.ts && pnpm exec tsup --config tsup.tui.config.ts && pnpm exec tsup --config tsup.ai-sdk.config.ts && pnpm exec tsup --config tsup.vitest.config.ts && pnpm exec tsup --config tsup.jest.config.ts && pnpm exec tsup --config tsup.openai-agents.config.ts && pnpm exec tsup --config tsup.harness.config.ts && pnpm exec tsup --config tsup.redact.config.ts && pnpm exec tsup --config tsup.eval.config.ts && pnpm exec tsup --config tsup.mcp.config.ts && pnpm exec tsup --config tsup.guardrails.config.ts && pnpm exec tsup --config tsup.circuit.config.ts && pnpm exec tsup --config tsup.viewer.config.ts && pnpm exec tsup --config tsup.mcp-server.config.ts && pnpm exec tsup --config tsup.adapter-sdk.config.ts && pnpm exec tsup --config tsup.vscode.config.ts && pnpm exec tsup --config tsup.index-sqlite.config.ts && pnpm exec tsup --config tsup.studio.config.ts",
     "typecheck": "tsc --noEmit",
     "test": "vitest run",
     "test:watch": "vitest",

package/packages/cli/dist/index.cjs

@@ -10729,7 +10729,7 @@ var init_src = __esm({
 });
 
 // package.json
-var version = "5.4.0";
+var version = "6.1.0";
 
 // packages/cli/src/list.ts
 init_advanced();
@@ -17899,6 +17899,167 @@ async function serveCommand(options = {}) {
   });
 }
 
+// packages/cli/src/studio-cmd.ts
+var PACKAGE = "@agent-inspect/studio";
+function isModuleNotFound3(e) {
+  return e !== null && typeof e === "object" && "code" in e && (e.code === "ERR_MODULE_NOT_FOUND" || e.code === "MODULE_NOT_FOUND");
+}
+async function loadStudio() {
+  try {
+    return await import('@agent-inspect/studio');
+  } catch (e) {
+    if (isModuleNotFound3(e)) {
+      console.error(
+        `The optional Studio analyzer is not installed. Run: npm install ${PACKAGE}`
+      );
+      process.exitCode = 1;
+      return null;
+    }
+    const msg = e instanceof Error ? e.message : String(e);
+    console.error(`[AgentInspect] failed to load ${PACKAGE}: ${msg}`);
+    process.exitCode = 1;
+    return null;
+  }
+}
+function parsePort2(value) {
+  if (value === void 0) return void 0;
+  const parsed = Number(value);
+  if (!Number.isInteger(parsed) || parsed <= 0 || parsed > 65535) {
+    throw new Error("--port must be an integer between 1 and 65535.");
+  }
+  return parsed;
+}
+function summarizeFileDropResult(result) {
+  if (result.skipped) {
+    console.log(`[AgentInspect studio] file-drop skipped: ${result.reason ?? "disabled"}`);
+    return;
+  }
+  console.log(
+    `[AgentInspect studio] file-drop scanned=${result.scanned} imported=${result.imported} skipped=${result.skippedFiles}`
+  );
+  for (const warning of result.warnings) {
+    console.warn(`[AgentInspect studio] ${warning}`);
+  }
+  for (const error of result.errors) {
+    console.error(`[AgentInspect studio] ${error}`);
+  }
+}
+function summarizeGitHubResult(result) {
+  if (result.skipped) {
+    console.log(`[AgentInspect studio] github import skipped: ${result.reason ?? "disabled"}`);
+    return;
+  }
+  if (result.imported) {
+    console.log(
+      `[AgentInspect studio] github artifact imported to ${result.destPath ?? "(unknown)"}`
+    );
+  } else if (result.destPath) {
+    console.log(`[AgentInspect studio] github artifact unchanged: ${result.destPath}`);
+  }
+  for (const warning of result.registryImportWarnings) {
+    console.warn(`[AgentInspect studio] ${warning}`);
+  }
+  for (const error of result.errors) {
+    console.error(`[AgentInspect studio] ${error}`);
+  }
+}
+async function studioImportBundleCommand(options) {
+  const mod = await loadStudio();
+  if (!mod) return;
+  const result = await mod.runStudioBundleUploadImport({
+    ...options.workspace !== void 0 ? { workspacePath: options.workspace } : {},
+    ...options.db !== void 0 ? { dbPath: options.db } : {},
+    bundlePath: options.path,
+    ...options.cwd !== void 0 ? { cwd: options.cwd } : {}
+  });
+  if (result.skipped) {
+    console.log(`[AgentInspect studio] bundle import skipped: ${result.reason ?? "disabled"}`);
+  } else if (result.imported) {
+    console.log(`[AgentInspect studio] bundle imported to ${result.destPath ?? "(unknown)"}`);
+  } else if (result.destPath) {
+    console.log(`[AgentInspect studio] bundle unchanged: ${result.destPath}`);
+  }
+  for (const warning of result.registryImportWarnings) {
+    console.warn(`[AgentInspect studio] ${warning}`);
+  }
+  for (const error of result.errors) {
+    console.error(`[AgentInspect studio] ${error}`);
+  }
+  if (result.errors.length > 0) process.exitCode = 1;
+}
+async function studioImportGitHubCommand(options) {
+  const mod = await loadStudio();
+  if (!mod) return;
+  const result = await mod.runStudioGitHubArtifactImport({
+    ...options.workspace !== void 0 ? { workspacePath: options.workspace } : {},
+    ...options.db !== void 0 ? { dbPath: options.db } : {},
+    repo: options.repo,
+    runId: options.runId,
+    artifact: options.artifact,
+    ...options.tokenEnv !== void 0 ? { tokenEnv: options.tokenEnv } : {},
+    ...options.cwd !== void 0 ? { cwd: options.cwd } : {}
+  });
+  summarizeGitHubResult(result);
+  if (result.errors.length > 0) {
+    process.exitCode = 1;
+  }
+}
+async function studioImportDropCommand(options = {}) {
+  const mod = await loadStudio();
+  if (!mod) return;
+  const result = await mod.runStudioFileDropImport({
+    ...options.workspace !== void 0 ? { workspacePath: options.workspace } : {},
+    ...options.db !== void 0 ? { dbPath: options.db } : {},
+    ...options.dir !== void 0 ? { dropDir: options.dir } : {},
+    ...options.archive === true ? { archiveAfterImport: true } : {},
+    ...options.cwd !== void 0 ? { cwd: options.cwd } : {}
+  });
+  summarizeFileDropResult(result);
+  if (result.errors.length > 0) {
+    process.exitCode = 1;
+  }
+}
+async function studioCommand(options = {}) {
+  const mod = await loadStudio();
+  if (!mod) return;
+  const ingest = options.ingest?.trim();
+  if (ingest && ingest !== "file-drop" && ingest !== "http") {
+    throw new Error(`Unsupported --ingest channel: ${ingest}. Supported: file-drop, http`);
+  }
+  const port = parsePort2(options.port);
+  const host = options.host?.trim();
+  const info = await mod.startStudioServer({
+    ...host !== void 0 && host.length > 0 ? { host } : {},
+    ...port !== void 0 ? { port } : {},
+    ...options.workspace !== void 0 ? { workspacePath: options.workspace } : {},
+    ...options.db !== void 0 ? { dbPath: options.db } : {},
+    ...options.server === true ? { server: true } : {},
+    ...options.cwd !== void 0 ? { cwd: options.cwd } : {},
+    ...options.auth === "basic" ? { auth: "basic" } : {},
+    ...options.passwordEnv !== void 0 ? { passwordEnv: options.passwordEnv } : {},
+    ...ingest === "file-drop" ? { ingestFileDrop: true } : {},
+    ...ingest === "http" ? { ingestHttp: true } : {},
+    ...options.ingestTokenEnv !== void 0 ? { ingestTokenEnv: options.ingestTokenEnv } : {},
+    ...options.archiveFileDrop === true ? { archiveFileDrop: true } : {}
+  });
+  if (ingest === "file-drop") {
+    console.log(`[AgentInspect studio] file-drop ingest enabled for startup scan`);
+  }
+  if (ingest === "http") {
+    console.log(`[AgentInspect studio] HTTP ingest enabled (token required on POST routes)`);
+  }
+  console.log(`AgentInspect studio (read-only): ${info.url}`);
+  if (options.open === true && info.host !== "127.0.0.1" && info.host !== "localhost") {
+    console.warn("Skipping browser open for non-local host binding.");
+  } else if (options.open === true) {
+    const openMod = await import('child_process');
+    openMod.exec(`open ${info.url}`, () => {
+    });
+  }
+  await new Promise(() => {
+  });
+}
+
 // packages/eval/src/index.ts
 function isTraceReadResult(value) {
   return value !== null && typeof value === "object" && "runs" in value && "events" in value && "format" in value;
@@ -20701,23 +20862,23 @@ async function indexCleanCommand(options = {}) {
 
 // packages/cli/src/index-sqlite-cmd.ts
 init_advanced();
-var PACKAGE = "@agent-inspect/index-sqlite";
-function isModuleNotFound3(e) {
+var PACKAGE2 = "@agent-inspect/index-sqlite";
+function isModuleNotFound4(e) {
   return e !== null && typeof e === "object" && "code" in e && (e.code === "ERR_MODULE_NOT_FOUND" || e.code === "MODULE_NOT_FOUND");
 }
 async function loadIndexSqlite() {
   try {
     return await Promise.resolve().then(() => (init_src(), src_exports));
   } catch (e) {
-    if (isModuleNotFound3(e)) {
+    if (isModuleNotFound4(e)) {
       console.error(
-        `The optional SQLite index is not installed. Run: npm install ${PACKAGE}`
+        `The optional SQLite index is not installed. Run: npm install ${PACKAGE2}`
       );
       process.exitCode = 1;
       return null;
     }
     const msg = e instanceof Error ? e.message : String(e);
-    console.error(`[AgentInspect] failed to load ${PACKAGE}: ${msg}`);
+    console.error(`[AgentInspect] failed to load ${PACKAGE2}: ${msg}`);
     process.exitCode = 1;
     return null;
   }
@@ -21565,6 +21726,21 @@ function createCliProgram() {
   program.command("viewer").description("Start localhost read-only viewer (traces, suite, or workspace) (v5.3+)").option("--dir <path>", "trace directory (trace mode)").option("--suite", "suite evidence mode").option("--workspace", "workspace mode").option("--config <path>", "suite config path (suite mode)").option("--host <host>", "bind host (default 127.0.0.1)", "127.0.0.1").option("--port <number>", "bind port (default 7337)", "7337").option("--open", "open browser locally when host is localhost").action((opts) => {
     runCommand(() => serveCommand(opts));
   });
+  const studioCmd = program.command("studio").description(
+    "Start self-hosted read-only Studio analyzer (requires @agent-inspect/studio) (v6.0+)"
+  ).option("--workspace <path>", "studio registry manifest path").option("--db <path>", "studio database path (sqlite file or postgres URL)").option("--host <host>", "bind host (default 127.0.0.1)", "127.0.0.1").option("--port <number>", "bind port (default 7340)", "7340").option("--server", "bind for network access (0.0.0.0; requires explicit opt-in)").option("--auth <mode>", "auth mode: none or basic", "none").option("--password-env <name>", "env var for basic-auth password").option("--ingest <channel>", "enable ingest channel on startup (file-drop, http)").option("--ingest-token-env <name>", "env var for HTTP ingest token (default STUDIO_INGEST_TOKEN)").option("--archive-file-drop", "archive file-drop sources after successful import").option("--open", "open browser locally when host is localhost").action((opts) => {
+    runCommand(() => studioCommand(opts));
+  });
+  const studioImportCmd = studioCmd.command("import").description("Import external evidence into Studio (v6.1+)");
+  studioImportCmd.command("drop").description("Import allowlisted files from a file-drop directory").option("--workspace <path>", "studio registry manifest path").option("--db <path>", "studio database path (sqlite file or postgres URL)").option("--dir <path>", "file-drop directory (defaults to registry import.fileDropDir)").option("--archive", "move imported files into .imported/ under the drop dir").action((opts) => {
+    runCommand(() => studioImportDropCommand(opts));
+  });
+  studioImportCmd.command("github").description("Download a GitHub Actions artifact into the studio import dirs").requiredOption("--repo <owner/name>", "GitHub repository").requiredOption("--run-id <id>", "workflow run id").requiredOption("--artifact <name>", "artifact name").option("--workspace <path>", "studio registry manifest path").option("--db <path>", "studio database path (sqlite file or postgres URL)").option("--token-env <name>", "env var for GitHub token (default GITHUB_TOKEN)").action((opts) => {
+    runCommand(() => studioImportGitHubCommand(opts));
+  });
+  studioImportCmd.command("bundle").description("Import a local share-safe bundle directory into Studio").requiredOption("--path <dir>", "bundle directory path").option("--workspace <path>", "studio registry manifest path").option("--db <path>", "studio database path (sqlite file or postgres URL)").action((opts) => {
+    runCommand(() => studioImportBundleCommand(opts));
+  });
   program.command("eval").description("Run deterministic local evals against a trace").argument("<trace-path-or-run-id>", "trace file, directory, stdin -, or run id").option("--dir <path>", "trace directory for run-id lookup").addOption(
     new commander.Option("--format <format>", "trace input format").choices([
       "agent-inspect-jsonl",