agent-inspect 6.0.0 → 6.1.0

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 6.1.0
+
+### Minor Changes
+
+- v6.1.0 client-hosted ingestion for @agent-inspect/studio: file-drop, GitHub artifact import, optional HTTP ingest with token validation, and manual bundle upload. All ingest channels disabled by default; self-hosted only.
+
 ## 6.0.0
 
 ### Minor Changes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-inspect",
-  "version": "6.0.0",
+  "version": "6.1.0",
   "license": "MIT",
   "type": "module",
   "description": "Trace, check, and safely share TypeScript AI-agent runs locally — no account, no upload, metadata-only by default",

package/packages/cli/dist/index.cjs

@@ -10729,7 +10729,7 @@ var init_src = __esm({
 });
 
 // package.json
-var version = "6.0.0";
+var version = "6.1.0";
 
 // packages/cli/src/list.ts
 init_advanced();
@@ -17929,9 +17929,103 @@ function parsePort2(value) {
   }
   return parsed;
 }
+function summarizeFileDropResult(result) {
+  if (result.skipped) {
+    console.log(`[AgentInspect studio] file-drop skipped: ${result.reason ?? "disabled"}`);
+    return;
+  }
+  console.log(
+    `[AgentInspect studio] file-drop scanned=${result.scanned} imported=${result.imported} skipped=${result.skippedFiles}`
+  );
+  for (const warning of result.warnings) {
+    console.warn(`[AgentInspect studio] ${warning}`);
+  }
+  for (const error of result.errors) {
+    console.error(`[AgentInspect studio] ${error}`);
+  }
+}
+function summarizeGitHubResult(result) {
+  if (result.skipped) {
+    console.log(`[AgentInspect studio] github import skipped: ${result.reason ?? "disabled"}`);
+    return;
+  }
+  if (result.imported) {
+    console.log(
+      `[AgentInspect studio] github artifact imported to ${result.destPath ?? "(unknown)"}`
+    );
+  } else if (result.destPath) {
+    console.log(`[AgentInspect studio] github artifact unchanged: ${result.destPath}`);
+  }
+  for (const warning of result.registryImportWarnings) {
+    console.warn(`[AgentInspect studio] ${warning}`);
+  }
+  for (const error of result.errors) {
+    console.error(`[AgentInspect studio] ${error}`);
+  }
+}
+async function studioImportBundleCommand(options) {
+  const mod = await loadStudio();
+  if (!mod) return;
+  const result = await mod.runStudioBundleUploadImport({
+    ...options.workspace !== void 0 ? { workspacePath: options.workspace } : {},
+    ...options.db !== void 0 ? { dbPath: options.db } : {},
+    bundlePath: options.path,
+    ...options.cwd !== void 0 ? { cwd: options.cwd } : {}
+  });
+  if (result.skipped) {
+    console.log(`[AgentInspect studio] bundle import skipped: ${result.reason ?? "disabled"}`);
+  } else if (result.imported) {
+    console.log(`[AgentInspect studio] bundle imported to ${result.destPath ?? "(unknown)"}`);
+  } else if (result.destPath) {
+    console.log(`[AgentInspect studio] bundle unchanged: ${result.destPath}`);
+  }
+  for (const warning of result.registryImportWarnings) {
+    console.warn(`[AgentInspect studio] ${warning}`);
+  }
+  for (const error of result.errors) {
+    console.error(`[AgentInspect studio] ${error}`);
+  }
+  if (result.errors.length > 0) process.exitCode = 1;
+}
+async function studioImportGitHubCommand(options) {
+  const mod = await loadStudio();
+  if (!mod) return;
+  const result = await mod.runStudioGitHubArtifactImport({
+    ...options.workspace !== void 0 ? { workspacePath: options.workspace } : {},
+    ...options.db !== void 0 ? { dbPath: options.db } : {},
+    repo: options.repo,
+    runId: options.runId,
+    artifact: options.artifact,
+    ...options.tokenEnv !== void 0 ? { tokenEnv: options.tokenEnv } : {},
+    ...options.cwd !== void 0 ? { cwd: options.cwd } : {}
+  });
+  summarizeGitHubResult(result);
+  if (result.errors.length > 0) {
+    process.exitCode = 1;
+  }
+}
+async function studioImportDropCommand(options = {}) {
+  const mod = await loadStudio();
+  if (!mod) return;
+  const result = await mod.runStudioFileDropImport({
+    ...options.workspace !== void 0 ? { workspacePath: options.workspace } : {},
+    ...options.db !== void 0 ? { dbPath: options.db } : {},
+    ...options.dir !== void 0 ? { dropDir: options.dir } : {},
+    ...options.archive === true ? { archiveAfterImport: true } : {},
+    ...options.cwd !== void 0 ? { cwd: options.cwd } : {}
+  });
+  summarizeFileDropResult(result);
+  if (result.errors.length > 0) {
+    process.exitCode = 1;
+  }
+}
 async function studioCommand(options = {}) {
   const mod = await loadStudio();
   if (!mod) return;
+  const ingest = options.ingest?.trim();
+  if (ingest && ingest !== "file-drop" && ingest !== "http") {
+    throw new Error(`Unsupported --ingest channel: ${ingest}. Supported: file-drop, http`);
+  }
   const port = parsePort2(options.port);
   const host = options.host?.trim();
   const info = await mod.startStudioServer({
@@ -17942,8 +18036,18 @@ async function studioCommand(options = {}) {
     ...options.server === true ? { server: true } : {},
     ...options.cwd !== void 0 ? { cwd: options.cwd } : {},
     ...options.auth === "basic" ? { auth: "basic" } : {},
-    ...options.passwordEnv !== void 0 ? { passwordEnv: options.passwordEnv } : {}
+    ...options.passwordEnv !== void 0 ? { passwordEnv: options.passwordEnv } : {},
+    ...ingest === "file-drop" ? { ingestFileDrop: true } : {},
+    ...ingest === "http" ? { ingestHttp: true } : {},
+    ...options.ingestTokenEnv !== void 0 ? { ingestTokenEnv: options.ingestTokenEnv } : {},
+    ...options.archiveFileDrop === true ? { archiveFileDrop: true } : {}
   });
+  if (ingest === "file-drop") {
+    console.log(`[AgentInspect studio] file-drop ingest enabled for startup scan`);
+  }
+  if (ingest === "http") {
+    console.log(`[AgentInspect studio] HTTP ingest enabled (token required on POST routes)`);
+  }
   console.log(`AgentInspect studio (read-only): ${info.url}`);
   if (options.open === true && info.host !== "127.0.0.1" && info.host !== "localhost") {
     console.warn("Skipping browser open for non-local host binding.");
@@ -21622,11 +21726,21 @@ function createCliProgram() {
   program.command("viewer").description("Start localhost read-only viewer (traces, suite, or workspace) (v5.3+)").option("--dir <path>", "trace directory (trace mode)").option("--suite", "suite evidence mode").option("--workspace", "workspace mode").option("--config <path>", "suite config path (suite mode)").option("--host <host>", "bind host (default 127.0.0.1)", "127.0.0.1").option("--port <number>", "bind port (default 7337)", "7337").option("--open", "open browser locally when host is localhost").action((opts) => {
     runCommand(() => serveCommand(opts));
   });
-  program.command("studio").description(
+  const studioCmd = program.command("studio").description(
     "Start self-hosted read-only Studio analyzer (requires @agent-inspect/studio) (v6.0+)"
-  ).option("--workspace <path>", "studio registry manifest path").option("--db <path>", "studio database path (sqlite file or postgres URL)").option("--host <host>", "bind host (default 127.0.0.1)", "127.0.0.1").option("--port <number>", "bind port (default 7340)", "7340").option("--server", "bind for network access (0.0.0.0; requires explicit opt-in)").option("--auth <mode>", "auth mode: none or basic", "none").option("--password-env <name>", "env var for basic-auth password").option("--open", "open browser locally when host is localhost").action((opts) => {
+  ).option("--workspace <path>", "studio registry manifest path").option("--db <path>", "studio database path (sqlite file or postgres URL)").option("--host <host>", "bind host (default 127.0.0.1)", "127.0.0.1").option("--port <number>", "bind port (default 7340)", "7340").option("--server", "bind for network access (0.0.0.0; requires explicit opt-in)").option("--auth <mode>", "auth mode: none or basic", "none").option("--password-env <name>", "env var for basic-auth password").option("--ingest <channel>", "enable ingest channel on startup (file-drop, http)").option("--ingest-token-env <name>", "env var for HTTP ingest token (default STUDIO_INGEST_TOKEN)").option("--archive-file-drop", "archive file-drop sources after successful import").option("--open", "open browser locally when host is localhost").action((opts) => {
     runCommand(() => studioCommand(opts));
   });
+  const studioImportCmd = studioCmd.command("import").description("Import external evidence into Studio (v6.1+)");
+  studioImportCmd.command("drop").description("Import allowlisted files from a file-drop directory").option("--workspace <path>", "studio registry manifest path").option("--db <path>", "studio database path (sqlite file or postgres URL)").option("--dir <path>", "file-drop directory (defaults to registry import.fileDropDir)").option("--archive", "move imported files into .imported/ under the drop dir").action((opts) => {
+    runCommand(() => studioImportDropCommand(opts));
+  });
+  studioImportCmd.command("github").description("Download a GitHub Actions artifact into the studio import dirs").requiredOption("--repo <owner/name>", "GitHub repository").requiredOption("--run-id <id>", "workflow run id").requiredOption("--artifact <name>", "artifact name").option("--workspace <path>", "studio registry manifest path").option("--db <path>", "studio database path (sqlite file or postgres URL)").option("--token-env <name>", "env var for GitHub token (default GITHUB_TOKEN)").action((opts) => {
+    runCommand(() => studioImportGitHubCommand(opts));
+  });
+  studioImportCmd.command("bundle").description("Import a local share-safe bundle directory into Studio").requiredOption("--path <dir>", "bundle directory path").option("--workspace <path>", "studio registry manifest path").option("--db <path>", "studio database path (sqlite file or postgres URL)").action((opts) => {
+    runCommand(() => studioImportBundleCommand(opts));
+  });
   program.command("eval").description("Run deterministic local evals against a trace").argument("<trace-path-or-run-id>", "trace file, directory, stdin -, or run id").option("--dir <path>", "trace directory for run-id lookup").addOption(
     new commander.Option("--format <format>", "trace input format").choices([
       "agent-inspect-jsonl",