@a5c-ai/babysitter-sdk 5.0.1-staging.ff2c19f9 → 5.0.1-staging.ff407b73

package/dist/runtime/commitEffectResult.js

@@ -11,6 +11,7 @@ const instrumentation_1 = require("./instrumentation");
 const registry_1 = require("../tasks/registry");
 const serializer_1 = require("../tasks/serializer");
 const tasks_1 = require("../storage/tasks");
+const stateCache_1 = require("./replay/stateCache");
 async function commitEffectResult(options) {
     return await (0, lock_1.withRunLock)(options.runDir, "runtime:commitEffectResult", async () => {
         guardResultPayload(options);
@@ -69,6 +70,7 @@ async function commitEffectResult(options) {
             stderrRef,
             resolvedAt: resolvedEvent.recordedAt,
         });
+        await (0, stateCache_1.rebuildStateCache)(options.runDir, { reason: "post_effect_resolution" });
         (0, instrumentation_1.emitRuntimeMetric)(options.logger, "commit.effect", {
             effectId: options.effectId,
             invocationKey: record.invocationKey,
@@ -108,7 +110,7 @@ async function commitEffectCancellation(options) {
                 metadata: { cancelled: true, reason: options.reason },
             },
         });
-        await (0, journal_1.appendEvent)({
+        const cancelledEvent = await (0, journal_1.appendEvent)({
             runDir: options.runDir,
             eventType: "EFFECT_CANCELLED",
             event: {
@@ -116,10 +118,11 @@ async function commitEffectCancellation(options) {
                 reason: options.reason,
             },
         });
+        await (0, stateCache_1.rebuildStateCache)(options.runDir, { reason: "post_effect_cancellation" });
         registry_1.globalTaskRegistry.resolveEffect(options.effectId, {
             status: "cancelled",
             resultRef,
-            resolvedAt: new Date().toISOString(),
+            resolvedAt: cancelledEvent.recordedAt,
         });
         (0, instrumentation_1.emitRuntimeMetric)(options.logger, "commit.effect.cancel", {
             effectId: options.effectId,

package/dist/runtime/createRun.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"createRun.d.ts","sourceRoot":"","sources":["../../src/runtime/createRun.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAKjE,wBAAsB,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAsGnF"}
+{"version":3,"file":"createRun.d.ts","sourceRoot":"","sources":["../../src/runtime/createRun.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAMjE,wBAAsB,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAmHnF"}

package/dist/runtime/createRun.js

@@ -14,15 +14,25 @@ const ulids_1 = require("../storage/ulids");
 const runtime_1 = require("./hooks/runtime");
 const schemaValidator_1 = require("./schemaValidator");
 const exceptions_1 = require("./exceptions");
+const config_1 = require("../config");
 async function createRun(options) {
     const runId = options.runId ?? (0, ulids_1.nextUlid)();
     validateRunId(runId);
-    const runsDir = path_1.default.resolve(options.runsDir);
+    const runsDir = path_1.default.resolve(options.runsDir ?? (0, config_1.resolveRunsDir)());
     const runDir = (0, paths_1.getRunDir)(runsDir, runId);
     const normalizedEntrypoint = normalizeEntrypoint(runDir, options.process.importPath, options.process.exportName);
     const requestId = options.request ?? options.process.processId ?? runId;
     const providedProof = typeof options.metadata?.completionProof === "string" ? options.metadata.completionProof : undefined;
     const completionProof = providedProof ?? crypto_1.default.randomBytes(16).toString("hex");
+    const nestedMetadata = options.nested
+        ? {
+            parentRunId: options.nested.parentRunId,
+            ...(options.nested.parentEffectId ? { parentEffectId: options.nested.parentEffectId } : {}),
+            ...(options.nested.parentInvocationKey ? { parentInvocationKey: options.nested.parentInvocationKey } : {}),
+            ...(options.nested.sessionId ? { sessionId: options.nested.sessionId } : {}),
+            ...(options.nested.shareSession !== undefined ? { shareSession: options.nested.shareSession } : {}),
+        }
+        : undefined;
     // Validate inputs against inputSchema if both are provided
     if (options.inputSchema && options.inputs !== undefined) {
         const validation = (0, schemaValidator_1.validateAgainstSchema)(options.inputs, options.inputSchema);
@@ -32,6 +42,7 @@ async function createRun(options) {
     }
     const extraMetadata = {
         ...options.metadata,
+        ...(options.governance ? { governance: options.governance } : {}),
         completionProof,
     };
     const { metadata } = await (0, createRunDir_1.createRunDir)({
@@ -40,6 +51,7 @@ async function createRun(options) {
         request: requestId,
         processId: options.process.processId,
         harness: options.harness,
+        nested: nestedMetadata,
         processRevision: options.processRevision,
         layoutVersion: options.layoutVersion,
         inputs: options.inputs,
@@ -62,6 +74,9 @@ async function createRun(options) {
         if (metadata.harness) {
             eventPayload.harness = metadata.harness;
         }
+        if (metadata.nested) {
+            eventPayload.nested = metadata.nested;
+        }
         if (metadata.processRevision) {
             eventPayload.processRevision = metadata.processRevision;
         }
@@ -86,19 +101,18 @@ async function createRun(options) {
     const entryString = metadata.entrypoint.exportName
         ? `${metadata.entrypoint.importPath}#${metadata.entrypoint.exportName}`
         : metadata.entrypoint.importPath;
-    // Call hook from project root (parent of .a5c dir) where plugins/ is located
-    // runDir is like: /path/to/project/.a5c/runs/<runId>
-    // So we need 3 levels up: runs -> .a5c -> project
-    const projectRoot = path_1.default.dirname(path_1.default.dirname(path_1.default.dirname(runDir)));
-    await (0, runtime_1.callRuntimeHook)("on-run-start", {
-        runId,
-        processId: metadata.processId,
-        entry: entryString,
-        inputs: options.inputs,
-    }, {
-        cwd: projectRoot,
-        logger: options.logger,
-    });
+    const projectRoot = (0, config_1.resolveProjectRootForRun)(runDir, metadata.entrypoint?.importPath);
+    if (!options.nested?.skipRunStartHook) {
+        await (0, runtime_1.callRuntimeHook)("on-run-start", {
+            runId,
+            processId: metadata.processId,
+            entry: entryString,
+            inputs: options.inputs,
+        }, {
+            cwd: projectRoot,
+            logger: options.logger,
+        });
+    }
     return {
         runId,
         runDir,

package/dist/runtime/index.d.ts

@@ -12,6 +12,7 @@ export { ErrorCategory, BabysitterRuntimeError, EffectRequestedError, EffectPend
 export { replaySchemaVersion } from "./constants";
 export { applyStrategy } from "./parallelStrategies";
 export type { ParallelStrategyName, ParallelStrategyOptions, ParallelStrategyResult, } from "./parallelStrategies";
-export type { PolicyRuleKind, PolicyConditionOp, PolicyAction, PolicyCondition, PolicyRule, StatefulPolicyRule, PolicyEvaluationContext, PolicyDecision, PolicyDecisionLog, PolicyEngine, PolicyDecisionReporter, } from "./policy";
+export type { PolicyRuleKind, PolicyConditionOp, PolicyAction, PolicyCondition, PolicyRule, StatefulPolicyRule, PolicyEvaluationContext, PolicyDecision, PolicyDecisionLog, PolicyEngine, PolicyDecisionReporter, RuntimeGovernanceConfig, } from "./policy";
 export { isStatefulRule } from "./policy";
+export { createPolicyEngine, createPolicyDecisionReporter, logPolicyDecision, readPolicyDecisionLog, resolvePolicyDecisionLogDir, matchCondition, } from "./policy";
 //# sourceMappingURL=index.d.ts.map

package/dist/runtime/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AACpF,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,kBAAkB,EAClB,eAAe,EACf,YAAY,EACZ,yBAAyB,EACzB,2BAA2B,EAC3B,cAAc,EACd,WAAW,EACX,gBAAgB,EAChB,eAAe,GAChB,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,EACxB,gBAAgB,EAChB,iBAAiB,EACjB,oBAAoB,EACpB,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,eAAe,GAChB,MAAM,UAAU,CAAC;AAClB,YAAY,EACV,YAAY,EACZ,yBAAyB,EACzB,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,WAAW,GACZ,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EACL,aAAa,EACb,sBAAsB,EACtB,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,cAAc,EACd,cAAc,EACd,WAAW,EACX,UAAU,EACV,sBAAsB,EACtB,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,YAAY,EACV,oBAAoB,EACpB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,eAAe,EACf,UAAU,EACV,kBAAkB,EAClB,uBAAuB,EACvB,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,sBAAsB,GACvB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AACpF,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,kBAAkB,EAClB,eAAe,EACf,YAAY,EACZ,yBAAyB,EACzB,2BAA2B,EAC3B,cAAc,EACd,WAAW,EACX,gBAAgB,EAChB,eAAe,GAChB,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,EACxB,gBAAgB,EAChB,iBAAiB,EACjB,oBAAoB,EACpB,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,eAAe,GAChB,MAAM,UAAU,CAAC;AAClB,YAAY,EACV,YAAY,EACZ,yBAAyB,EACzB,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,WAAW,GACZ,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EACL,aAAa,EACb,sBAAsB,EACtB,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,cAAc,EACd,cAAc,EACd,WAAW,EACX,UAAU,EACV,sBAAsB,EACtB,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,YAAY,EACV,oBAAoB,EACpB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,eAAe,EACf,UAAU,EACV,kBAAkB,EAClB,uBAAuB,EACvB,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,EACL,kBAAkB,EAClB,4BAA4B,EAC5B,iBAAiB,EACjB,qBAAqB,EACrB,2BAA2B,EAC3B,cAAc,GACf,MAAM,UAAU,CAAC"}

package/dist/runtime/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.isStatefulRule = exports.applyStrategy = exports.replaySchemaVersion = exports.rehydrateSerializedError = exports.isBabysitterError = exports.isIntrinsicError = exports.toStructuredError = exports.formatNextSteps = exports.formatErrorWithContext = exports.suggestFix = exports.suggestFlag = exports.suggestCommand = exports.RunFailedError = exports.ParallelPendingError = exports.EffectCancelledError = exports.EffectPendingError = exports.EffectRequestedError = exports.BabysitterRuntimeError = exports.ErrorCategory = exports.hashInvocationKey = exports.ReplayCursor = exports.writeStateCache = exports.rebuildStateCache = exports.readStateCache = exports.normalizeSnapshot = exports.normalizeJournalHead = exports.journalHeadsEqual = exports.buildEffectIndex = exports.createStateCacheSnapshot = exports.STATE_CACHE_SCHEMA_VERSION = exports.requireProcessContext = exports.getActiveProcessContext = exports.withProcessContext = exports.createProcessContext = exports.createReplayEngine = exports.commitEffectCancellation = exports.commitEffectResult = exports.orchestrateIteration = exports.createRun = void 0;
+exports.matchCondition = exports.resolvePolicyDecisionLogDir = exports.readPolicyDecisionLog = exports.logPolicyDecision = exports.createPolicyDecisionReporter = exports.createPolicyEngine = exports.isStatefulRule = exports.applyStrategy = exports.replaySchemaVersion = exports.rehydrateSerializedError = exports.isBabysitterError = exports.isIntrinsicError = exports.toStructuredError = exports.formatNextSteps = exports.formatErrorWithContext = exports.suggestFix = exports.suggestFlag = exports.suggestCommand = exports.RunFailedError = exports.ParallelPendingError = exports.EffectCancelledError = exports.EffectPendingError = exports.EffectRequestedError = exports.BabysitterRuntimeError = exports.ErrorCategory = exports.hashInvocationKey = exports.ReplayCursor = exports.writeStateCache = exports.rebuildStateCache = exports.readStateCache = exports.normalizeSnapshot = exports.normalizeJournalHead = exports.journalHeadsEqual = exports.buildEffectIndex = exports.createStateCacheSnapshot = exports.STATE_CACHE_SCHEMA_VERSION = exports.requireProcessContext = exports.getActiveProcessContext = exports.withProcessContext = exports.createProcessContext = exports.createReplayEngine = exports.commitEffectCancellation = exports.commitEffectResult = exports.orchestrateIteration = exports.createRun = void 0;
 var createRun_1 = require("./createRun");
 Object.defineProperty(exports, "createRun", { enumerable: true, get: function () { return createRun_1.createRun; } });
 var orchestrateIteration_1 = require("./orchestrateIteration");
@@ -52,3 +52,10 @@ var parallelStrategies_1 = require("./parallelStrategies");
 Object.defineProperty(exports, "applyStrategy", { enumerable: true, get: function () { return parallelStrategies_1.applyStrategy; } });
 var policy_1 = require("./policy");
 Object.defineProperty(exports, "isStatefulRule", { enumerable: true, get: function () { return policy_1.isStatefulRule; } });
+var policy_2 = require("./policy");
+Object.defineProperty(exports, "createPolicyEngine", { enumerable: true, get: function () { return policy_2.createPolicyEngine; } });
+Object.defineProperty(exports, "createPolicyDecisionReporter", { enumerable: true, get: function () { return policy_2.createPolicyDecisionReporter; } });
+Object.defineProperty(exports, "logPolicyDecision", { enumerable: true, get: function () { return policy_2.logPolicyDecision; } });
+Object.defineProperty(exports, "readPolicyDecisionLog", { enumerable: true, get: function () { return policy_2.readPolicyDecisionLog; } });
+Object.defineProperty(exports, "resolvePolicyDecisionLogDir", { enumerable: true, get: function () { return policy_2.resolvePolicyDecisionLogDir; } });
+Object.defineProperty(exports, "matchCondition", { enumerable: true, get: function () { return policy_2.matchCondition; } });

package/dist/runtime/intrinsics/subprocess.d.ts

@@ -0,0 +1,5 @@
+import { TaskInvokeOptions } from "../../tasks/types";
+import { SubprocessInvocation, SubprocessResult } from "../types";
+import { TaskIntrinsicContext } from "./task";
+export declare function runSubprocessIntrinsic(invocation: SubprocessInvocation, context: TaskIntrinsicContext, options?: TaskInvokeOptions): Promise<SubprocessResult>;
+//# sourceMappingURL=subprocess.d.ts.map

package/dist/runtime/intrinsics/subprocess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subprocess.d.ts","sourceRoot":"","sources":["../../../src/runtime/intrinsics/subprocess.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsC,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC1F,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAElE,OAAO,EAAoB,oBAAoB,EAAE,MAAM,QAAQ,CAAC;AA6ChE,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,oBAAoB,EAChC,OAAO,EAAE,oBAAoB,EAC7B,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,gBAAgB,CAAC,CAkB3B"}

package/dist/runtime/intrinsics/subprocess.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runSubprocessIntrinsic = runSubprocessIntrinsic;
+const exceptions_1 = require("../exceptions");
+const task_1 = require("./task");
+const SUBPROCESS_TASK_ID = "__sdk.subprocess";
+const subprocessTask = {
+    id: SUBPROCESS_TASK_ID,
+    build(args) {
+        const invocation = args.invocation;
+        const subprocess = {
+            processPath: invocation.processPath,
+            exportName: invocation.exportName,
+            processId: invocation.processId,
+            prompt: invocation.prompt,
+            inputs: invocation.inputs,
+            inputSchema: invocation.inputSchema,
+            outputSchema: invocation.outputSchema,
+            harness: invocation.harness,
+            model: invocation.model,
+            maxIterations: invocation.maxIterations,
+            shareSession: invocation.shareSession !== false,
+            metadata: invocation.metadata,
+        };
+        return {
+            kind: "subprocess",
+            title: args.label,
+            metadata: {
+                subprocess: true,
+                processPath: invocation.processPath,
+                processId: invocation.processId,
+                harness: invocation.harness,
+                model: invocation.model,
+                maxIterations: invocation.maxIterations,
+                shareSession: invocation.shareSession !== false,
+            },
+            subprocess,
+        };
+    },
+};
+function runSubprocessIntrinsic(invocation, context, options) {
+    if (context.subprocessSupport !== "babysitter-agent") {
+        throw new exceptions_1.RunFailedError("Subprocess effects are only supported when the run is iterated by babysitter-agent.", {
+            runId: context.runId,
+            processId: context.processId,
+            subprocessSupport: context.subprocessSupport ?? "disabled",
+        });
+    }
+    const label = options?.label ?? invocation.processId ?? invocation.processPath;
+    return (0, task_1.runTaskIntrinsic)({
+        task: subprocessTask,
+        args: { invocation, label },
+        invokeOptions: { ...options, label },
+        context,
+    });
+}

package/dist/runtime/intrinsics/task.d.ts

@@ -12,6 +12,7 @@ export interface TaskIntrinsicContext {
     replayCursor: ReplayCursor;
     now: () => Date;
     logger?: ProcessLogger;
+    subprocessSupport?: "disabled" | "babysitter-agent";
     policyEngine?: PolicyEngine;
     reportPolicyDecision?: PolicyDecisionReporter;
 }

package/dist/runtime/intrinsics/task.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"task.d.ts","sourceRoot":"","sources":["../../../src/runtime/intrinsics/task.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,KAAK,EACV,WAAW,EAEX,aAAa,EAEb,iBAAiB,EAClB,MAAM,UAAU,CAAC;AAOlB,OAAO,KAAK,EACV,sBAAsB,EACtB,YAAY,EAEb,MAAM,iBAAiB,CAAC;AASzB,wBAAgB,wBAAwB,IAAI,MAAM,CAAmC;AACrF,wBAAgB,0BAA0B,IAAI,IAAI,CAAgC;AAElF,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,WAAW,CAAC;IACzB,YAAY,EAAE,YAAY,CAAC;IAC3B,GAAG,EAAE,MAAM,IAAI,CAAC;IAChB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,oBAAoB,CAAC,EAAE,sBAAsB,CAAC;CAC/C;AAED,MAAM,WAAW,0BAA0B,CAAC,KAAK,EAAE,OAAO;IACxD,IAAI,EAAE,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAClC,IAAI,EAAE,KAAK,CAAC;IACZ,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,OAAO,EAAE,oBAAoB,CAAC;CAC/B;AAED,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,OAAO,EACnD,OAAO,EAAE,0BAA0B,CAAC,KAAK,EAAE,OAAO,CAAC,GAClD,OAAO,CAAC,OAAO,CAAC,CAmBlB"}
+{"version":3,"file":"task.d.ts","sourceRoot":"","sources":["../../../src/runtime/intrinsics/task.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,KAAK,EACV,WAAW,EAEX,aAAa,EAEb,iBAAiB,EAClB,MAAM,UAAU,CAAC;AAOlB,OAAO,KAAK,EACV,sBAAsB,EACtB,YAAY,EAEb,MAAM,iBAAiB,CAAC;AASzB,wBAAgB,wBAAwB,IAAI,MAAM,CAAmC;AACrF,wBAAgB,0BAA0B,IAAI,IAAI,CAAgC;AAElF,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,WAAW,CAAC;IACzB,YAAY,EAAE,YAAY,CAAC;IAC3B,GAAG,EAAE,MAAM,IAAI,CAAC;IAChB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,iBAAiB,CAAC,EAAE,UAAU,GAAG,kBAAkB,CAAC;IACpD,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,oBAAoB,CAAC,EAAE,sBAAsB,CAAC;CAC/C;AAED,MAAM,WAAW,0BAA0B,CAAC,KAAK,EAAE,OAAO;IACxD,IAAI,EAAE,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAClC,IAAI,EAAE,KAAK,CAAC;IACZ,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,OAAO,EAAE,oBAAoB,CAAC;CAC/B;AAED,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,OAAO,EACnD,OAAO,EAAE,0BAA0B,CAAC,KAAK,EAAE,OAAO,CAAC,GAClD,OAAO,CAAC,OAAO,CAAC,CAmBlB"}

package/dist/runtime/orchestrateIteration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"orchestrateIteration.d.ts","sourceRoot":"","sources":["../../src/runtime/orchestrateIteration.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EACV,eAAe,EACf,kBAAkB,EAGnB,MAAM,SAAS,CAAC;AAajB,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAWvD,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,eAAe,CAAC,CAsGhG"}
+{"version":3,"file":"orchestrateIteration.d.ts","sourceRoot":"","sources":["../../src/runtime/orchestrateIteration.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EACV,eAAe,EACf,kBAAkB,EAGnB,MAAM,SAAS,CAAC;AAcjB,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAWvD,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,eAAe,CAAC,CAsGhG"}

package/dist/runtime/orchestrateIteration.js

@@ -54,6 +54,7 @@ const errorUtils_1 = require("./errorUtils");
 const instrumentation_1 = require("./instrumentation");
 const runtime_1 = require("./hooks/runtime");
 const task_1 = require("./intrinsics/task");
+const config_1 = require("../config");
 const orchestrateHelpers_1 = require("./orchestrateHelpers");
 // Re-export for backward compatibility
 var orchestrateHelpers_2 = require("./orchestrateHelpers");
@@ -78,7 +79,7 @@ async function orchestrateIteration(options) {
         const inputs = options.inputs ?? engine.inputs;
         let finalStatus = "failed";
         const logger = engine.internalContext.logger ?? options.logger;
-        const projectRoot = path_1.default.dirname(path_1.default.dirname(path_1.default.dirname(options.runDir)));
+        const projectRoot = (0, config_1.resolveProjectRootForRun)(options.runDir, engine.metadata.entrypoint?.importPath);
         await (0, runtime_1.callRuntimeHook)("on-iteration-start", { runId: engine.runId, iteration: engine.replayCursor.value }, { cwd: projectRoot, logger });
         let capturedStrayEffect = null;
         const strayEffectHandler = (reason) => { if ((0, orchestrateHelpers_1.asWaitingResult)(reason))
@@ -195,7 +196,12 @@ async function loadProcessFunction(options, defaults, runDir) {
 }
 async function initializeReplayEngine(options, nowFn, iterationStartedAt) {
     try {
-        return await (0, createReplayEngine_1.createReplayEngine)({ runDir: options.runDir, now: nowFn, logger: options.logger });
+        return await (0, createReplayEngine_1.createReplayEngine)({
+            runDir: options.runDir,
+            now: nowFn,
+            logger: options.logger,
+            subprocessSupport: options.subprocessSupport,
+        });
     }
     catch (error) {
         (0, instrumentation_1.emitRuntimeMetric)(options.logger, "replay.iteration", { duration_ms: Date.now() - iterationStartedAt, status: "failed", runDir: options.runDir, phase: "initialize", error: error instanceof Error ? error.message : String(error) });

package/dist/runtime/policy/engine.d.ts

@@ -0,0 +1,4 @@
+import type { PolicyRule, PolicyCondition, PolicyEvaluationContext, PolicyEngine } from "./types";
+export declare function matchCondition(condition: PolicyCondition, context: PolicyEvaluationContext): boolean;
+export declare function createPolicyEngine(rules: PolicyRule[]): PolicyEngine;
+//# sourceMappingURL=engine.d.ts.map

package/dist/runtime/policy/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../../src/runtime/policy/engine.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,eAAe,EACf,uBAAuB,EAEvB,YAAY,EACb,MAAM,SAAS,CAAC;AAejB,wBAAgB,cAAc,CAAC,SAAS,EAAE,eAAe,EAAE,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAkCpG;AASD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,YAAY,CA6CpE"}

package/dist/runtime/policy/engine.js

@@ -0,0 +1,97 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.matchCondition = matchCondition;
+exports.createPolicyEngine = createPolicyEngine;
+const types_1 = require("./types");
+function resolveField(context, fieldPath) {
+    const parts = fieldPath.split(".");
+    let current = context;
+    for (const part of parts) {
+        if (current == null || typeof current !== "object") {
+            return undefined;
+        }
+        current = current[part];
+    }
+    return current;
+}
+function matchCondition(condition, context) {
+    const fieldValue = resolveField(context, condition.field);
+    if (fieldValue === undefined || fieldValue === null) {
+        return false;
+    }
+    switch (condition.op) {
+        case "eq":
+            return String(fieldValue) === condition.value;
+        case "neq":
+            return String(fieldValue) !== condition.value;
+        case "gt":
+            return typeof fieldValue === "number" && fieldValue > Number(condition.value);
+        case "lt":
+            return typeof fieldValue === "number" && fieldValue < Number(condition.value);
+        case "gte":
+            return typeof fieldValue === "number" && fieldValue >= Number(condition.value);
+        case "lte":
+            return typeof fieldValue === "number" && fieldValue <= Number(condition.value);
+        case "contains":
+            if (Array.isArray(fieldValue)) {
+                return fieldValue.includes(condition.value);
+            }
+            return String(fieldValue).includes(condition.value);
+        case "matches":
+            try {
+                return new RegExp(condition.value).test(String(fieldValue));
+            }
+            catch {
+                return false;
+            }
+        default:
+            return false;
+    }
+}
+function ruleMatches(rule, context) {
+    if ((0, types_1.isStatefulRule)(rule)) {
+        return rule.shouldMatch(context);
+    }
+    return matchCondition(rule.condition, context);
+}
+function createPolicyEngine(rules) {
+    const denyRules = rules.filter((rule) => rule.action === "deny").sort((a, b) => b.priority - a.priority);
+    const warnRules = rules.filter((rule) => rule.action === "warn").sort((a, b) => b.priority - a.priority);
+    const allowRules = rules.filter((rule) => rule.action === "allow").sort((a, b) => b.priority - a.priority);
+    return {
+        rules: Object.freeze([...rules]),
+        evaluate(context) {
+            const warnings = [];
+            for (const rule of denyRules) {
+                if (ruleMatches(rule, context)) {
+                    return {
+                        allowed: false,
+                        rule,
+                        reason: `Denied by rule ${rule.id}`,
+                        warnings,
+                    };
+                }
+            }
+            for (const rule of warnRules) {
+                if (ruleMatches(rule, context)) {
+                    warnings.push(`Warning from rule ${rule.id}: ${rule.metadata?.reason ?? rule.kind}`);
+                }
+            }
+            for (const rule of allowRules) {
+                if (ruleMatches(rule, context)) {
+                    return {
+                        allowed: true,
+                        rule,
+                        reason: `Allowed by rule ${rule.id}`,
+                        warnings,
+                    };
+                }
+            }
+            return {
+                allowed: true,
+                reason: "Allowed by default policy",
+                warnings,
+            };
+        },
+    };
+}

package/dist/runtime/policy/index.d.ts

@@ -1,3 +1,5 @@
-export type { PolicyRuleKind, PolicyConditionOp, PolicyAction, PolicyCondition, PolicyRule, StatefulPolicyRule, PolicyEvaluationContext, PolicyDecision, PolicyDecisionLog, PolicyEngine, PolicyDecisionReporter, } from "./types";
+export type { PolicyRuleKind, PolicyConditionOp, PolicyAction, PolicyCondition, PolicyRule, StatefulPolicyRule, PolicyEvaluationContext, PolicyDecision, PolicyDecisionLog, PolicyEngine, PolicyDecisionReporter, RuntimeGovernanceConfig, } from "./types";
 export { isStatefulRule } from "./types";
+export { createPolicyEngine, matchCondition } from "./engine";
+export { createPolicyDecisionReporter, logPolicyDecision, readPolicyDecisionLog, resolvePolicyDecisionLogDir, } from "./logging";
 //# sourceMappingURL=index.d.ts.map

package/dist/runtime/policy/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/policy/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,eAAe,EACf,UAAU,EACV,kBAAkB,EAClB,uBAAuB,EACvB,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,sBAAsB,GACvB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/policy/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,eAAe,EACf,UAAU,EACV,kBAAkB,EAClB,uBAAuB,EACvB,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC9D,OAAO,EACL,4BAA4B,EAC5B,iBAAiB,EACjB,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,WAAW,CAAC"}

package/dist/runtime/policy/index.js

@@ -1,5 +1,13 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.isStatefulRule = void 0;
+exports.resolvePolicyDecisionLogDir = exports.readPolicyDecisionLog = exports.logPolicyDecision = exports.createPolicyDecisionReporter = exports.matchCondition = exports.createPolicyEngine = exports.isStatefulRule = void 0;
 var types_1 = require("./types");
 Object.defineProperty(exports, "isStatefulRule", { enumerable: true, get: function () { return types_1.isStatefulRule; } });
+var engine_1 = require("./engine");
+Object.defineProperty(exports, "createPolicyEngine", { enumerable: true, get: function () { return engine_1.createPolicyEngine; } });
+Object.defineProperty(exports, "matchCondition", { enumerable: true, get: function () { return engine_1.matchCondition; } });
+var logging_1 = require("./logging");
+Object.defineProperty(exports, "createPolicyDecisionReporter", { enumerable: true, get: function () { return logging_1.createPolicyDecisionReporter; } });
+Object.defineProperty(exports, "logPolicyDecision", { enumerable: true, get: function () { return logging_1.logPolicyDecision; } });
+Object.defineProperty(exports, "readPolicyDecisionLog", { enumerable: true, get: function () { return logging_1.readPolicyDecisionLog; } });
+Object.defineProperty(exports, "resolvePolicyDecisionLogDir", { enumerable: true, get: function () { return logging_1.resolvePolicyDecisionLogDir; } });

package/dist/runtime/policy/logging.d.ts

@@ -0,0 +1,6 @@
+import type { PolicyDecisionLog, PolicyDecisionReporter, RuntimeGovernanceConfig } from "./types";
+export declare function resolvePolicyDecisionLogDir(runId: string, governance?: RuntimeGovernanceConfig): string;
+export declare function logPolicyDecision(logDir: string, entry: PolicyDecisionLog): Promise<void>;
+export declare function readPolicyDecisionLog(logDir: string): Promise<PolicyDecisionLog[]>;
+export declare function createPolicyDecisionReporter(runId: string, governance?: RuntimeGovernanceConfig): PolicyDecisionReporter;
+//# sourceMappingURL=logging.d.ts.map

package/dist/runtime/policy/logging.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging.d.ts","sourceRoot":"","sources":["../../../src/runtime/policy/logging.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,iBAAiB,EACjB,sBAAsB,EACtB,uBAAuB,EACxB,MAAM,SAAS,CAAC;AAIjB,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,uBAAuB,GAAG,MAAM,CAGvG;AAED,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAG/F;AAED,wBAAsB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAcxF;AAED,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,MAAM,EACb,UAAU,CAAC,EAAE,uBAAuB,GACnC,sBAAsB,CAKxB"}

package/dist/runtime/policy/logging.js

@@ -0,0 +1,43 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolvePolicyDecisionLogDir = resolvePolicyDecisionLogDir;
+exports.logPolicyDecision = logPolicyDecision;
+exports.readPolicyDecisionLog = readPolicyDecisionLog;
+exports.createPolicyDecisionReporter = createPolicyDecisionReporter;
+const node_fs_1 = require("node:fs");
+const node_path_1 = __importDefault(require("node:path"));
+const config_1 = require("../../config");
+const LOG_FILENAME = "governance-decisions.jsonl";
+function resolvePolicyDecisionLogDir(runId, governance) {
+    const logRoot = governance?.auditLogDir ? node_path_1.default.resolve(governance.auditLogDir) : (0, config_1.getGlobalLogDir)();
+    return node_path_1.default.join(logRoot, runId);
+}
+async function logPolicyDecision(logDir, entry) {
+    await node_fs_1.promises.mkdir(logDir, { recursive: true });
+    await node_fs_1.promises.appendFile(node_path_1.default.join(logDir, LOG_FILENAME), JSON.stringify(entry) + "\n", "utf8");
+}
+async function readPolicyDecisionLog(logDir) {
+    try {
+        const content = await node_fs_1.promises.readFile(node_path_1.default.join(logDir, LOG_FILENAME), "utf8");
+        return content
+            .split("\n")
+            .filter((line) => line.trim().length > 0)
+            .map((line) => JSON.parse(line));
+    }
+    catch (error) {
+        const err = error;
+        if (err.code === "ENOENT") {
+            return [];
+        }
+        throw error;
+    }
+}
+function createPolicyDecisionReporter(runId, governance) {
+    const logDir = resolvePolicyDecisionLogDir(runId, governance);
+    return async (entry) => {
+        await logPolicyDecision(logDir, entry);
+    };
+}

package/dist/runtime/policy/types.d.ts

@@ -48,4 +48,8 @@ export interface PolicyEngine {
     evaluate(context: PolicyEvaluationContext): PolicyDecision;
 }
 export type PolicyDecisionReporter = (entry: PolicyDecisionLog) => void | Promise<void>;
+export interface RuntimeGovernanceConfig {
+    policyRules?: PolicyRule[];
+    auditLogDir?: string;
+}
 //# sourceMappingURL=types.d.ts.map

package/dist/runtime/policy/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/runtime/policy/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG,YAAY,GAAG,gBAAgB,GAAG,aAAa,CAAC;AAC5F,MAAM,MAAM,iBAAiB,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,IAAI,GAAG,KAAK,GAAG,KAAK,GAAG,UAAU,GAAG,SAAS,CAAC;AACpG,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;AAErD,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,iBAAiB,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,cAAc,CAAC;IACrB,SAAS,EAAE,eAAe,CAAC;IAC3B,MAAM,EAAE,YAAY,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,kBAAmB,SAAQ,UAAU;IACpD,WAAW,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC;CACxD;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI,IAAI,kBAAkB,CAE3E;AAED,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,uBAAuB,CAAC;IACjC,QAAQ,EAAE,cAAc,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,uBAAuB,GAAG,cAAc,CAAC;CAC5D;AAED,MAAM,MAAM,sBAAsB,GAAG,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/runtime/policy/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG,YAAY,GAAG,gBAAgB,GAAG,aAAa,CAAC;AAC5F,MAAM,MAAM,iBAAiB,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,IAAI,GAAG,KAAK,GAAG,KAAK,GAAG,UAAU,GAAG,SAAS,CAAC;AACpG,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;AAErD,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,iBAAiB,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,cAAc,CAAC;IACrB,SAAS,EAAE,eAAe,CAAC;IAC3B,MAAM,EAAE,YAAY,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,kBAAmB,SAAQ,UAAU;IACpD,WAAW,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC;CACxD;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI,IAAI,kBAAkB,CAE3E;AAED,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,uBAAuB,CAAC;IACjC,QAAQ,EAAE,cAAc,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,uBAAuB,GAAG,cAAc,CAAC;CAC5D;AAED,MAAM,MAAM,sBAAsB,GAAG,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAExF,MAAM,WAAW,uBAAuB;IACtC,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB"}

package/dist/runtime/processContext.d.ts

@@ -11,6 +11,8 @@ export interface ProcessContextInit extends Omit<TaskIntrinsicContext, "now"> {
     recordedLogSeqs?: Set<number>;
     /** When true, breakpoints are auto-approved without human interaction. */
     nonInteractive?: boolean;
+    /** Internal-only gate for babysitter-agent owned subprocess orchestration. */
+    subprocessSupport?: "disabled" | "babysitter-agent";
 }
 export interface InternalProcessContext extends TaskIntrinsicContext {
     processId: string;
@@ -21,6 +23,7 @@ export interface InternalProcessContext extends TaskIntrinsicContext {
     recordedLogSeqs: Set<number>;
     /** When true, breakpoints are auto-approved without human interaction. */
     nonInteractive: boolean;
+    subprocessSupport: "disabled" | "babysitter-agent";
 }
 export interface CreateProcessContextResult {
     context: ProcessContext;

package/dist/runtime/processContext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"processContext.d.ts","sourceRoot":"","sources":["../../src/runtime/processContext.ts"],"names":[],"mappings":"AACA,OAAO,EAAoB,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAO3E,OAAO,EAAE,cAAc,EAAmB,MAAM,SAAS,CAAC;AAM1D,MAAM,WAAW,kBAAmB,SAAQ,IAAI,CAAC,oBAAoB,EAAE,KAAK,CAAC;IAC3E,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB;;;;OAIG;IACH,eAAe,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,0EAA0E;IAC1E,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,sBAAuB,SAAQ,oBAAoB;IAClE,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,IAAI,CAAC;IAChB,kEAAkE;IAClE,MAAM,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7B,0EAA0E;IAC1E,cAAc,EAAE,OAAO,CAAC;CACzB;AAID,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,cAAc,CAAC;IACxB,eAAe,EAAE,sBAAsB,CAAC;CACzC;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,kBAAkB,GAAG,0BAA0B,CAqGzF;AAED,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,QAAQ,EAAE,sBAAsB,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAE5G;AAED,wBAAgB,uBAAuB,IAAI,sBAAsB,GAAG,SAAS,CAE5E;AAED,wBAAgB,qBAAqB,IAAI,sBAAsB,CAM9D"}
+{"version":3,"file":"processContext.d.ts","sourceRoot":"","sources":["../../src/runtime/processContext.ts"],"names":[],"mappings":"AACA,OAAO,EAAoB,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAQ3E,OAAO,EAAE,cAAc,EAAmB,MAAM,SAAS,CAAC;AAM1D,MAAM,WAAW,kBAAmB,SAAQ,IAAI,CAAC,oBAAoB,EAAE,KAAK,CAAC;IAC3E,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB;;;;OAIG;IACH,eAAe,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,0EAA0E;IAC1E,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,8EAA8E;IAC9E,iBAAiB,CAAC,EAAE,UAAU,GAAG,kBAAkB,CAAC;CACrD;AAED,MAAM,WAAW,sBAAuB,SAAQ,oBAAoB;IAClE,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,IAAI,CAAC;IAChB,kEAAkE;IAClE,MAAM,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7B,0EAA0E;IAC1E,cAAc,EAAE,OAAO,CAAC;IACxB,iBAAiB,EAAE,UAAU,GAAG,kBAAkB,CAAC;CACpD;AAID,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,cAAc,CAAC;IACxB,eAAe,EAAE,sBAAsB,CAAC;CACzC;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,kBAAkB,GAAG,0BAA0B,CAuGzF;AAED,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,QAAQ,EAAE,sBAAsB,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAE5G;AAED,wBAAgB,uBAAuB,IAAI,sBAAsB,GAAG,SAAS,CAE5E;AAED,wBAAgB,qBAAqB,IAAI,sBAAsB,CAM9D"}

package/dist/runtime/processContext.js

@@ -42,6 +42,7 @@ const task_1 = require("./intrinsics/task");
 const breakpoint_1 = require("./intrinsics/breakpoint");
 const sleep_1 = require("./intrinsics/sleep");
 const orchestratorTask_1 = require("./intrinsics/orchestratorTask");
+const subprocess_1 = require("./intrinsics/subprocess");
 const hook_1 = require("./intrinsics/hook");
 const dispatcher_1 = require("../hooks/dispatcher");
 const parallel_1 = require("./intrinsics/parallel");
@@ -59,6 +60,7 @@ function createProcessContext(init) {
         logSeq: 0,
         recordedLogSeqs: init.recordedLogSeqs ?? new Set(),
         nonInteractive: init.nonInteractive ?? false,
+        subprocessSupport: init.subprocessSupport ?? "disabled",
     };
     const parallelHelpers = {
         all: (thunks) => (0, parallel_1.runParallelAll)(thunks),
@@ -75,6 +77,7 @@ function createProcessContext(init) {
         breakpoint: (payload, options) => (0, breakpoint_1.runBreakpointIntrinsic)(payload, internal, options),
         sleepUntil: (target, options) => (0, sleep_1.runSleepIntrinsic)(target, internal, options),
         orchestratorTask: (payload, options) => (0, orchestratorTask_1.runOrchestratorTaskIntrinsic)(payload, internal, options),
+        subprocess: (invocation, options) => (0, subprocess_1.runSubprocessIntrinsic)(invocation, internal, options),
         hook: (hookType, payload, options) => (0, hook_1.runHookIntrinsic)(hookType, payload, internal, options),
         parallel: parallelHelpers,
         // Always provide a callable logger to processes so `ctx.log(...)` never throws.

package/dist/runtime/replay/createReplayEngine.d.ts

@@ -8,6 +8,7 @@ export interface CreateReplayEngineOptions {
     runDir: string;
     now?: () => Date;
     logger?: (...args: any[]) => void;
+    subprocessSupport?: "disabled" | "babysitter-agent";
 }
 export interface ReplayEngine {
     runId: string;

package/dist/runtime/replay/createReplayEngine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"createReplayEngine.d.ts","sourceRoot":"","sources":["../../../src/runtime/replay/createReplayEngine.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAgB,MAAM,qBAAqB,CAAC;AAIhE,OAAO,EAAoB,WAAW,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAwB,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAGjF,OAAO,EAAwD,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAExG,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IAEjB,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,WAAW,CAAC;IACtB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,WAAW,CAAC;IACzB,YAAY,EAAE,YAAY,CAAC;IAC3B,OAAO,EAAE,cAAc,CAAC;IACxB,eAAe,EAAE,sBAAsB,CAAC;IACxC,UAAU,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACvC,YAAY,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;CAC3F;AAED,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,yBAAyB,GAAG,OAAO,CAAC,YAAY,CAAC,CA2DlG"}
+{"version":3,"file":"createReplayEngine.d.ts","sourceRoot":"","sources":["../../../src/runtime/replay/createReplayEngine.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAgB,MAAM,qBAAqB,CAAC;AAIhE,OAAO,EAAoB,WAAW,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAwB,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAGjF,OAAO,EAAwD,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAQxG,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IAEjB,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,IAAI,CAAC;IAClC,iBAAiB,CAAC,EAAE,UAAU,GAAG,kBAAkB,CAAC;CACrD;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,WAAW,CAAC;IACtB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,WAAW,CAAC;IACzB,YAAY,EAAE,YAAY,CAAC;IAC3B,OAAO,EAAE,cAAc,CAAC;IACxB,eAAe,EAAE,sBAAsB,CAAC;IACxC,UAAU,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACvC,YAAY,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;CAC3F;AAED,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,yBAAyB,GAAG,OAAO,CAAC,YAAY,CAAC,CAmElG"}

package/dist/runtime/replay/createReplayEngine.js

@@ -44,6 +44,7 @@ const processContext_1 = require("../processContext");
 const constants_1 = require("../constants");
 const exceptions_1 = require("../exceptions");
 const stateCache_1 = require("./stateCache");
+const policy_1 = require("../policy");
 async function createReplayEngine(options) {
     const metadata = await (0, runFiles_1.readRunMetadata)(options.runDir);
     ensureCompatibleLayout(metadata.layoutVersion, options.runDir);
@@ -76,6 +77,11 @@ async function createReplayEngine(options) {
     const recordedLogSeqs = await readRecordedLogSeqs(options.runDir);
     const replayCursor = new replayCursor_1.ReplayCursor();
     const processId = metadata.processId ?? metadata.request ?? metadata.runId;
+    const governance = readRuntimeGovernanceConfig(metadata);
+    const policyEngine = governance ? (0, policy_1.createPolicyEngine)(governance.policyRules ?? []) : undefined;
+    const reportPolicyDecision = governance
+        ? (0, policy_1.createPolicyDecisionReporter)(metadata.runId, governance)
+        : undefined;
     const { context, internalContext } = (0, processContext_1.createProcessContext)({
         runId: metadata.runId,
         runDir: options.runDir,
@@ -86,6 +92,9 @@ async function createReplayEngine(options) {
         logger: options.logger,
         recordedLogSeqs,
         nonInteractive: Boolean(metadata.nonInteractive),
+        subprocessSupport: options.subprocessSupport,
+        policyEngine,
+        reportPolicyDecision,
     });
     return {
         runId: metadata.runId,
@@ -161,3 +170,20 @@ function ensureCompatibleLayout(layoutVersion, runDir) {
         });
     }
 }
+function readRuntimeGovernanceConfig(metadata) {
+    const candidate = metadata.governance;
+    if (!candidate || typeof candidate !== "object" || Array.isArray(candidate)) {
+        return undefined;
+    }
+    const record = candidate;
+    const policyRules = Array.isArray(record.policyRules)
+        ? record.policyRules.filter((rule) => (Boolean(rule) && typeof rule === "object" && !Array.isArray(rule)))
+        : undefined;
+    const auditLogDir = typeof record.auditLogDir === "string" && record.auditLogDir.trim()
+        ? record.auditLogDir
+        : undefined;
+    return {
+        ...(policyRules ? { policyRules } : {}),
+        ...(auditLogDir ? { auditLogDir } : {}),
+    };
+}