@agent-vm/worker-gateway 0.0.20

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025-2026 Shravan Sunder
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/index.d.ts

@@ -0,0 +1,166 @@
+//#region ../gateway-interface/dist/index.d.ts
+//#region src/gateway-runtime-contract.d.ts
+declare const gatewayTypeValues: readonly ["openclaw", "worker"];
+type GatewayType = (typeof gatewayTypeValues)[number];
+//#endregion
+//#region ../gondolin-adapter/dist/index.d.ts
+
+//#endregion
+//#region src/types.d.ts
+interface SecretSpec {
+  readonly hosts: readonly string[];
+  readonly value: string;
+}
+type SecretRef = {
+  readonly source: '1password';
+  readonly ref: string;
+} | {
+  readonly source: 'environment';
+  readonly ref: string;
+};
+//#endregion
+//#region src/secret-resolver.d.ts
+
+interface SecretResolver {
+  resolve(ref: SecretRef): Promise<string>;
+  resolveAll(refs: Record<string, SecretRef>): Promise<Record<string, string>>;
+}
+interface VfsMountSpec {
+  readonly kind: 'realfs' | 'realfs-readonly' | 'memory' | 'shadow';
+  readonly hostPath?: string;
+  readonly shadowConfig?: {
+    readonly deny: readonly string[];
+    readonly tmpfs: readonly string[];
+  };
+}
+//#endregion
+//#region src/gateway-process-spec.d.ts
+type GatewayHealthCheck = {
+  readonly type: 'http';
+  readonly port: number;
+  readonly path: string;
+} | {
+  readonly type: 'command';
+  readonly command: string;
+};
+/**
+ * Everything about the process running inside the VM.
+ * Retained by the running gateway handle for logs, health, restart.
+ */
+interface GatewayProcessSpec {
+  readonly bootstrapCommand: string;
+  readonly startCommand: string;
+  readonly healthCheck: GatewayHealthCheck;
+  readonly guestListenPort: number;
+  readonly logPath: string;
+}
+//#endregion
+//#region src/gateway-vm-spec.d.ts
+/**
+ * Everything the controller needs to create the Gondolin VM.
+ * Lifecycle implementations own the full Gondolin-facing contract.
+ */
+interface GatewayVmSpec {
+  readonly environment: Record<string, string>;
+  readonly vfsMounts: Record<string, VfsMountSpec>;
+  readonly mediatedSecrets: Record<string, SecretSpec>;
+  readonly tcpHosts: Record<string, string>;
+  readonly allowedHosts: readonly string[];
+  readonly rootfsMode: 'readonly' | 'memory' | 'cow';
+  readonly sessionLabel: string;
+}
+//#endregion
+//#region src/gateway-lifecycle.d.ts
+/**
+ * Describes how to run interactive auth for a gateway type.
+ * Static property — available without a running VM.
+ */
+interface GatewayAuthConfig {
+  /**
+   * Shell command to list available auth providers inside the VM.
+   * Should output one provider name per line to stdout.
+   */
+  readonly listProvidersCommand: string;
+  /**
+   * Build the shell command for interactive auth login.
+   * The CLI passes this as the SSH remote command with -t (TTY).
+   */
+  readonly buildLoginCommand: (provider: string) => string;
+}
+/**
+ * Zone config as the lifecycle sees it.
+ * Decoupled from SystemConfig — the controller maps into this shape.
+ */
+interface GatewayZoneConfig {
+  readonly id: string;
+  readonly gateway: {
+    readonly type: GatewayType;
+    readonly memory: string;
+    readonly cpus: number;
+    readonly port: number;
+    readonly config: string;
+    readonly stateDir: string;
+    readonly workspaceDir: string;
+    readonly authProfilesRef?: {
+      readonly source: '1password';
+      readonly ref: string;
+    } | {
+      readonly source: 'environment';
+      readonly envVar: string;
+    } | undefined;
+  };
+  readonly secrets: Record<string, {
+    readonly source: '1password';
+    readonly ref: string;
+    readonly injection: 'env' | 'http-mediation';
+    readonly hosts?: readonly string[] | undefined;
+  } | {
+    readonly source: 'environment';
+    readonly envVar: string;
+    readonly injection: 'env' | 'http-mediation';
+    readonly hosts?: readonly string[] | undefined;
+  }>;
+  readonly allowedHosts: readonly string[];
+  readonly websocketBypass: readonly string[];
+  readonly toolProfile?: string;
+}
+interface BuildGatewayVmSpecOptions {
+  readonly controllerPort: number;
+  readonly projectNamespace: string;
+  readonly resolvedSecrets: Record<string, string>;
+  readonly tcpPool: {
+    readonly basePort: number;
+    readonly size: number;
+  };
+  readonly zone: GatewayZoneConfig;
+}
+interface GatewayLifecycle {
+  /**
+   * How to run interactive auth for this gateway type.
+   * Absent means the gateway type does not support interactive auth.
+   */
+  readonly authConfig?: GatewayAuthConfig | undefined;
+  /**
+   * Build the full VM spec — everything Gondolin needs to create the VM.
+   * Pure data assembly — no side effects.
+   */
+  buildVmSpec(options: BuildGatewayVmSpecOptions): GatewayVmSpec;
+  /**
+   * Build the process spec — everything about startup, health, and logging.
+   * Pure data assembly — no side effects.
+   */
+  buildProcessSpec(zone: GatewayZoneConfig, resolvedSecrets: Record<string, string>): GatewayProcessSpec;
+  /**
+   * Optional hook to prepare host-side state before the VM boots.
+   * Example: writing auth-profiles.json from 1Password.
+   */
+  prepareHostState?(zone: GatewayZoneConfig, secretResolver: SecretResolver): Promise<void>;
+}
+//#endregion
+//#region src/split-resolved-gateway-secrets.d.ts
+//#endregion
+//#region src/worker-lifecycle.d.ts
+declare const workerLifecycle: GatewayLifecycle;
+//#endregion
+export { workerLifecycle };
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","names":["gatewayTypeValues","GatewayType","buildGatewaySessionLabel","buildToolSessionLabel","SecretSpec","SecretRef","SecretResolver","Promise","Record","VfsMountSpec","GatewayHealthCheck","GatewayProcessSpec","GatewayVmSpec","GatewayAuthConfig","GatewayZoneConfig","BuildGatewayVmSpecOptions","GatewayLifecycle","SplitResolvedGatewaySecretsResult","splitResolvedGatewaySecrets"],"sources":["../../gateway-interface/dist/index.d.ts","../src/worker-lifecycle.ts"],"sourcesContent":["//#region src/gateway-runtime-contract.d.ts\ndeclare const gatewayTypeValues: readonly [\"openclaw\", \"worker\"];\ntype GatewayType = (typeof gatewayTypeValues)[number];\ndeclare function buildGatewaySessionLabel(projectNamespace: string, zoneId: string): string;\ndeclare function buildToolSessionLabel(projectNamespace: string, zoneId: string, tcpSlot: number): string;\n//#endregion\n//#region ../gondolin-adapter/dist/index.d.ts\n\n//#endregion\n//#region src/types.d.ts\ninterface SecretSpec {\n  readonly hosts: readonly string[];\n  readonly value: string;\n}\ntype SecretRef = {\n  readonly source: '1password';\n  readonly ref: string;\n} | {\n  readonly source: 'environment';\n  readonly ref: string;\n};\n//#endregion\n//#region src/secret-resolver.d.ts\n\ninterface SecretResolver {\n  resolve(ref: SecretRef): Promise<string>;\n  resolveAll(refs: Record<string, SecretRef>): Promise<Record<string, string>>;\n}\ninterface VfsMountSpec {\n  readonly kind: 'realfs' | 'realfs-readonly' | 'memory' | 'shadow';\n  readonly hostPath?: string;\n  readonly shadowConfig?: {\n    readonly deny: readonly string[];\n    readonly tmpfs: readonly string[];\n  };\n}\n//#endregion\n//#region src/gateway-process-spec.d.ts\ntype GatewayHealthCheck = {\n  readonly type: 'http';\n  readonly port: number;\n  readonly path: string;\n} | {\n  readonly type: 'command';\n  readonly command: string;\n};\n/**\n * Everything about the process running inside the VM.\n * Retained by the running gateway handle for logs, health, restart.\n */\ninterface GatewayProcessSpec {\n  readonly bootstrapCommand: string;\n  readonly startCommand: string;\n  readonly healthCheck: GatewayHealthCheck;\n  readonly guestListenPort: number;\n  readonly logPath: string;\n}\n//#endregion\n//#region src/gateway-vm-spec.d.ts\n/**\n * Everything the controller needs to create the Gondolin VM.\n * Lifecycle implementations own the full Gondolin-facing contract.\n */\ninterface GatewayVmSpec {\n  readonly environment: Record<string, string>;\n  readonly vfsMounts: Record<string, VfsMountSpec>;\n  readonly mediatedSecrets: Record<string, SecretSpec>;\n  readonly tcpHosts: Record<string, string>;\n  readonly allowedHosts: readonly string[];\n  readonly rootfsMode: 'readonly' | 'memory' | 'cow';\n  readonly sessionLabel: string;\n}\n//#endregion\n//#region src/gateway-lifecycle.d.ts\n/**\n * Describes how to run interactive auth for a gateway type.\n * Static property — available without a running VM.\n */\ninterface GatewayAuthConfig {\n  /**\n   * Shell command to list available auth providers inside the VM.\n   * Should output one provider name per line to stdout.\n   */\n  readonly listProvidersCommand: string;\n  /**\n   * Build the shell command for interactive auth login.\n   * The CLI passes this as the SSH remote command with -t (TTY).\n   */\n  readonly buildLoginCommand: (provider: string) => string;\n}\n/**\n * Zone config as the lifecycle sees it.\n * Decoupled from SystemConfig — the controller maps into this shape.\n */\ninterface GatewayZoneConfig {\n  readonly id: string;\n  readonly gateway: {\n    readonly type: GatewayType;\n    readonly memory: string;\n    readonly cpus: number;\n    readonly port: number;\n    readonly config: string;\n    readonly stateDir: string;\n    readonly workspaceDir: string;\n    readonly authProfilesRef?: {\n      readonly source: '1password';\n      readonly ref: string;\n    } | {\n      readonly source: 'environment';\n      readonly envVar: string;\n    } | undefined;\n  };\n  readonly secrets: Record<string, {\n    readonly source: '1password';\n    readonly ref: string;\n    readonly injection: 'env' | 'http-mediation';\n    readonly hosts?: readonly string[] | undefined;\n  } | {\n    readonly source: 'environment';\n    readonly envVar: string;\n    readonly injection: 'env' | 'http-mediation';\n    readonly hosts?: readonly string[] | undefined;\n  }>;\n  readonly allowedHosts: readonly string[];\n  readonly websocketBypass: readonly string[];\n  readonly toolProfile?: string;\n}\ninterface BuildGatewayVmSpecOptions {\n  readonly controllerPort: number;\n  readonly projectNamespace: string;\n  readonly resolvedSecrets: Record<string, string>;\n  readonly tcpPool: {\n    readonly basePort: number;\n    readonly size: number;\n  };\n  readonly zone: GatewayZoneConfig;\n}\ninterface GatewayLifecycle {\n  /**\n   * How to run interactive auth for this gateway type.\n   * Absent means the gateway type does not support interactive auth.\n   */\n  readonly authConfig?: GatewayAuthConfig | undefined;\n  /**\n   * Build the full VM spec — everything Gondolin needs to create the VM.\n   * Pure data assembly — no side effects.\n   */\n  buildVmSpec(options: BuildGatewayVmSpecOptions): GatewayVmSpec;\n  /**\n   * Build the process spec — everything about startup, health, and logging.\n   * Pure data assembly — no side effects.\n   */\n  buildProcessSpec(zone: GatewayZoneConfig, resolvedSecrets: Record<string, string>): GatewayProcessSpec;\n  /**\n   * Optional hook to prepare host-side state before the VM boots.\n   * Example: writing auth-profiles.json from 1Password.\n   */\n  prepareHostState?(zone: GatewayZoneConfig, secretResolver: SecretResolver): Promise<void>;\n}\n//#endregion\n//#region src/split-resolved-gateway-secrets.d.ts\ninterface SplitResolvedGatewaySecretsResult {\n  readonly environmentSecrets: Record<string, string>;\n  readonly mediatedSecrets: Record<string, SecretSpec>;\n}\ndeclare function splitResolvedGatewaySecrets(zone: GatewayZoneConfig, resolvedSecrets: Record<string, string>): SplitResolvedGatewaySecretsResult;\n//#endregion\nexport { type BuildGatewayVmSpecOptions, type GatewayAuthConfig, type GatewayHealthCheck, type GatewayLifecycle, type GatewayProcessSpec, type GatewayType, type GatewayVmSpec, type GatewayZoneConfig, type SplitResolvedGatewaySecretsResult, buildGatewaySessionLabel, buildToolSessionLabel, gatewayTypeValues, splitResolvedGatewaySecrets };\n//# sourceMappingURL=index.d.ts.map"],"mappings":";;cACcA,iBAAkD,EAAA,SAAA,CAAA,UAAA,EAAA,QAAA,CAAA;AAAA,KAC3DC,WAAAA,GAAW,CAAA,OAAWD,iBAAAA,CAAAA,CAAAA,MAAiB,CAAA;AAY9B;;;;;UAJJI,UAAAA,CAgB6CI;EAARD,SAAAA,KAAAA,EAAAA,SAAAA,MAAAA,EAAAA;EAAO,SAAA,KAAA,EAAA,MAAA;AAAA;AAEhC,KAdjBF,SAAAA,GAwBAK;EAAkB,SAYbC,MAAAA,EAAAA,WAAkB;EAGc,SAUhCC,GAAAA,EAAAA,MAAa;CACCJ,GAAAA;EACaC,SAAAA,MAAAA,EAAAA,aAAAA;EAAfD,SAAAA,GAAAA,EAAAA,MAAAA;CACqBJ;;;;AAChB,UA3CjBE,cAAAA,CAsDiB;EAAA,OAgBjBQ,CAAAA,GAAAA,EArEKT,SAqEY,CAAA,EArEAE,OAqEA,CAAA,MAGRN,CAAAA;EAeO,UAehBc,CAAAA,IAAAA,EArGSP,MAqGTO,CAAAA,MAAyB,EArGDV,SAqGC,CAGPG,CAAAA,EAxGmBD,OA6G9BO,CA7GsCN,MA6GtCM,CAAAA,MAAAA,EAAiB,MAAA,CAAA,CAAA;AAAA;UA3GxBL,YAAAA,CAkHcI;EAKDE,SAAAA,IAAAA,EAAAA,QAAAA,GAAAA,iBAAAA,GAAAA,QAAAA,GAAAA,QAAAA;EAA4BH,SAAAA,QAAAA,CAAAA,EAAAA,MAAAA;EAK1BE,SAAAA,YAAAA,CAAAA,EAAAA;IAAoCN,SAAAA,IAAAA,EAAAA,SAAAA,MAAAA,EAAAA;IAAyBG,SAAAA,KAAAA,EAAAA,SAAAA,MAAAA,EAAAA;EAK5DG,CAAAA;;;;KAvHrBJ,kBAAAA;;;EC9BL,SAAa,IAAA,EAAA,MAsDZ;;;;;;;;;UDZSC,kBAAAA;;;wBAGcD;;;;;;;;;;UAUdE,aAAAA;wBACcJ;sBACFA,eAAeC;4BACTD,eAAeJ;qBACtBI;;;;;;;;;;;UAWXK,iBAAAA;;;;;;;;;;;;;;;;UAgBAC,iBAAAA;;;mBAGSb;;;;;;;;;;;;;;;oBAeCO;;;;;;;;;;;;;;;UAeVO,yBAAAA;;;4BAGkBP;;;;;iBAKXM;;UAEPE,gBAAAA;;;;;wBAKcH;;;;;uBAKDE,4BAA4BH;;;;;yBAK1BE,oCAAoCN,yBAAyBG;;;;;0BAK5DG,mCAAmCR,iBAAiBC;;;;;;AA5JhEP,cCOD,eDPmD,ECOlC,gBDPkC"}

package/dist/index.js

@@ -0,0 +1,52 @@
+import { buildGatewaySessionLabel, splitResolvedGatewaySecrets } from "@agent-vm/gateway-interface";
+
+//#region src/worker-lifecycle.ts
+const workerLifecycle = {
+	buildVmSpec({ controllerPort, projectNamespace, resolvedSecrets, zone }) {
+		const { environmentSecrets, mediatedSecrets } = splitResolvedGatewaySecrets(zone, resolvedSecrets);
+		return {
+			allowedHosts: [...zone.allowedHosts],
+			environment: {
+				HOME: "/home/coder",
+				CONTROLLER_BASE_URL: "http://controller.vm.host:18800",
+				NODE_EXTRA_CA_CERTS: "/run/gondolin/ca-certificates.crt",
+				AGENT_VM_ZONE_ID: zone.id,
+				STATE_DIR: "/state",
+				WORKER_CONFIG_PATH: "/state/effective-worker.json",
+				WORKSPACE_DIR: "/workspace",
+				...environmentSecrets
+			},
+			mediatedSecrets,
+			rootfsMode: "cow",
+			sessionLabel: buildGatewaySessionLabel(projectNamespace, zone.id),
+			tcpHosts: { "controller.vm.host:18800": `127.0.0.1:${controllerPort}` },
+			vfsMounts: {
+				"/state": {
+					hostPath: zone.gateway.stateDir,
+					kind: "realfs"
+				},
+				"/workspace": {
+					hostPath: zone.gateway.workspaceDir,
+					kind: "realfs"
+				}
+			}
+		};
+	},
+	buildProcessSpec() {
+		return {
+			bootstrapCommand: "if [ -f /state/agent-vm-worker.tgz ]; then npm install -g --force @openai/codex /state/agent-vm-worker.tgz; fi",
+			startCommand: "cd /workspace && nohup agent-vm-worker serve --port 18789 --config /state/effective-worker.json --state-dir /state > /tmp/agent-vm-worker.log 2>&1 &",
+			healthCheck: {
+				type: "http",
+				port: 18789,
+				path: "/health"
+			},
+			guestListenPort: 18789,
+			logPath: "/tmp/agent-vm-worker.log"
+		};
+	}
+};
+
+//#endregion
+export { workerLifecycle };
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":["workerLifecycle: GatewayLifecycle"],"sources":["../src/worker-lifecycle.ts"],"sourcesContent":["import type {\n\tBuildGatewayVmSpecOptions,\n\tGatewayLifecycle,\n\tGatewayProcessSpec,\n\tGatewayVmSpec,\n} from '@agent-vm/gateway-interface';\nimport { buildGatewaySessionLabel, splitResolvedGatewaySecrets } from '@agent-vm/gateway-interface';\n\nexport const workerLifecycle: GatewayLifecycle = {\n\tbuildVmSpec({\n\t\tcontrollerPort,\n\t\tprojectNamespace,\n\t\tresolvedSecrets,\n\t\tzone,\n\t}: BuildGatewayVmSpecOptions): GatewayVmSpec {\n\t\tconst { environmentSecrets, mediatedSecrets } = splitResolvedGatewaySecrets(\n\t\t\tzone,\n\t\t\tresolvedSecrets,\n\t\t);\n\n\t\treturn {\n\t\t\tallowedHosts: [...zone.allowedHosts],\n\t\t\tenvironment: {\n\t\t\t\tHOME: '/home/coder',\n\t\t\t\tCONTROLLER_BASE_URL: 'http://controller.vm.host:18800',\n\t\t\t\tNODE_EXTRA_CA_CERTS: '/run/gondolin/ca-certificates.crt',\n\t\t\t\tAGENT_VM_ZONE_ID: zone.id,\n\t\t\t\tSTATE_DIR: '/state',\n\t\t\t\tWORKER_CONFIG_PATH: '/state/effective-worker.json',\n\t\t\t\tWORKSPACE_DIR: '/workspace',\n\t\t\t\t...environmentSecrets,\n\t\t\t},\n\t\t\tmediatedSecrets,\n\t\t\trootfsMode: 'cow',\n\t\t\tsessionLabel: buildGatewaySessionLabel(projectNamespace, zone.id),\n\t\t\ttcpHosts: {\n\t\t\t\t'controller.vm.host:18800': `127.0.0.1:${controllerPort}`,\n\t\t\t},\n\t\t\tvfsMounts: {\n\t\t\t\t'/state': {\n\t\t\t\t\thostPath: zone.gateway.stateDir,\n\t\t\t\t\tkind: 'realfs',\n\t\t\t\t},\n\t\t\t\t'/workspace': {\n\t\t\t\t\thostPath: zone.gateway.workspaceDir,\n\t\t\t\t\tkind: 'realfs',\n\t\t\t\t},\n\t\t\t},\n\t\t};\n\t},\n\n\tbuildProcessSpec(): GatewayProcessSpec {\n\t\treturn {\n\t\t\tbootstrapCommand:\n\t\t\t\t'if [ -f /state/agent-vm-worker.tgz ]; then npm install -g --force @openai/codex /state/agent-vm-worker.tgz; fi',\n\t\t\tstartCommand:\n\t\t\t\t'cd /workspace && nohup agent-vm-worker serve --port 18789 --config /state/effective-worker.json --state-dir /state > /tmp/agent-vm-worker.log 2>&1 &',\n\t\t\thealthCheck: { type: 'http', port: 18789, path: '/health' },\n\t\t\tguestListenPort: 18789,\n\t\t\tlogPath: '/tmp/agent-vm-worker.log',\n\t\t};\n\t},\n};\n"],"mappings":";;;AAQA,MAAaA,kBAAoC;CAChD,YAAY,EACX,gBACA,kBACA,iBACA,QAC4C;EAC5C,MAAM,EAAE,oBAAoB,oBAAoB,4BAC/C,MACA,gBACA;AAED,SAAO;GACN,cAAc,CAAC,GAAG,KAAK,aAAa;GACpC,aAAa;IACZ,MAAM;IACN,qBAAqB;IACrB,qBAAqB;IACrB,kBAAkB,KAAK;IACvB,WAAW;IACX,oBAAoB;IACpB,eAAe;IACf,GAAG;IACH;GACD;GACA,YAAY;GACZ,cAAc,yBAAyB,kBAAkB,KAAK,GAAG;GACjE,UAAU,EACT,4BAA4B,aAAa,kBACzC;GACD,WAAW;IACV,UAAU;KACT,UAAU,KAAK,QAAQ;KACvB,MAAM;KACN;IACD,cAAc;KACb,UAAU,KAAK,QAAQ;KACvB,MAAM;KACN;IACD;GACD;;CAGF,mBAAuC;AACtC,SAAO;GACN,kBACC;GACD,cACC;GACD,aAAa;IAAE,MAAM;IAAQ,MAAM;IAAO,MAAM;IAAW;GAC3D,iBAAiB;GACjB,SAAS;GACT;;CAEF"}

package/package.json

@@ -0,0 +1,39 @@
+{
+  "name": "@agent-vm/worker-gateway",
+  "version": "0.0.20",
+  "description": "Worker gateway lifecycle: boots a Gondolin VM and drives @agent-vm/agent-vm-worker for autonomous coding tasks.",
+  "homepage": "https://github.com/ShravanSunder/agent-vm#readme",
+  "bugs": {
+    "url": "https://github.com/ShravanSunder/agent-vm/issues"
+  },
+  "license": "MIT",
+  "author": "Shravan Sunder <ShravanSunder@users.noreply.github.com>",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ShravanSunder/agent-vm.git",
+    "directory": "packages/worker-gateway"
+  },
+  "files": [
+    "dist"
+  ],
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@agent-vm/gateway-interface": "0.0.20",
+    "@agent-vm/gondolin-adapter": "0.0.20"
+  },
+  "scripts": {
+    "build": "tsdown",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
+  }
+}