@aiden-ade/sandbox-agent 0.1.60 → 0.1.62

package/dist/run-journal.js

@@ -1,193 +0,0 @@
-import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync, } from "node:fs";
-import { dirname } from "node:path";
-const JOURNAL_VERSION = 1;
-const INTERRUPTED_ENTRY_TTL_MS = 24 * 60 * 60_000;
-function isEntry(value) {
-    if (!value || typeof value !== "object")
-        return false;
-    const entry = value;
-    const baseValid = typeof entry.runId === "string" &&
-        entry.runId.length > 0 &&
-        typeof entry.conversationId === "string" &&
-        entry.conversationId.length > 0 &&
-        typeof entry.acceptedAtMs === "number" &&
-        Number.isFinite(entry.acceptedAtMs);
-    if (!baseValid)
-        return false;
-    const hasProviderPid = entry.providerPid !== undefined;
-    const hasProviderSpawnedAt = entry.providerSpawnedAtMs !== undefined;
-    if (hasProviderPid !== hasProviderSpawnedAt)
-        return false;
-    const interruptionValid = entry.interruptedAtMs === undefined ||
-        (typeof entry.interruptedAtMs === "number" && Number.isFinite(entry.interruptedAtMs));
-    if (!hasProviderPid)
-        return interruptionValid;
-    const providerEvidenceValid = Number.isSafeInteger(entry.providerPid) &&
-        entry.providerPid > 0 &&
-        typeof entry.providerSpawnedAtMs === "number" &&
-        Number.isFinite(entry.providerSpawnedAtMs);
-    return providerEvidenceValid && interruptionValid;
-}
-/**
- * Durable accepted-run inbox. It stores identifiers only—never prompts, tool
- * payloads, credentials, or provider output—and is persisted before the daemon
- * acknowledges acceptance so a restart cannot turn redelivery into a second run.
- */
-export class RuntimeRunJournal {
-    path;
-    entries = new Map();
-    recoveredIds = new Set();
-    recoveryPersistencePending = false;
-    constructor(path, nowMs = Date.now()) {
-        this.path = path;
-        if (!existsSync(path))
-            return;
-        try {
-            const parsed = JSON.parse(readFileSync(path, "utf8"));
-            if (parsed.version !== JOURNAL_VERSION || !Array.isArray(parsed.entries)) {
-                throw new Error("unsupported run journal format");
-            }
-            for (const entry of parsed.entries) {
-                if (!isEntry(entry))
-                    throw new Error("invalid run journal entry");
-                if (entry.interruptedAtMs !== undefined &&
-                    nowMs - entry.interruptedAtMs > INTERRUPTED_ENTRY_TTL_MS) {
-                    this.recoveryPersistencePending = true;
-                    continue;
-                }
-                this.entries.set(entry.runId, entry);
-            }
-        }
-        catch (error) {
-            throw new Error(`Cannot safely read accepted-run journal: ${error instanceof Error ? error.message : String(error)}`);
-        }
-    }
-    get(runId) {
-        return this.entries.get(runId);
-    }
-    recoveredRunIds() {
-        return [...this.recoveredIds];
-    }
-    /**
-     * Mark entries from an earlier daemon as interrupted only after this process
-     * has proved exclusive ownership of the config's local API endpoint.
-     */
-    confirmRecoveryOwnership(nowMs = Date.now()) {
-        const previousEntries = new Map(this.entries);
-        const previousRecoveredIds = new Set(this.recoveredIds);
-        const persistenceWasPending = this.recoveryPersistencePending;
-        let changed = persistenceWasPending;
-        try {
-            for (const [runId, entry] of this.entries) {
-                this.recoveredIds.add(runId);
-                if (entry.interruptedAtMs !== undefined)
-                    continue;
-                this.entries.set(runId, { ...entry, interruptedAtMs: nowMs });
-                changed = true;
-            }
-            if (changed)
-                this.persist();
-            this.recoveryPersistencePending = false;
-        }
-        catch (error) {
-            this.entries.clear();
-            for (const [runId, entry] of previousEntries)
-                this.entries.set(runId, entry);
-            this.recoveredIds.clear();
-            for (const runId of previousRecoveredIds)
-                this.recoveredIds.add(runId);
-            this.recoveryPersistencePending = persistenceWasPending;
-            throw error;
-        }
-    }
-    record(entry) {
-        const previous = this.entries.get(entry.runId);
-        this.entries.set(entry.runId, entry);
-        try {
-            this.persist();
-        }
-        catch (error) {
-            if (previous)
-                this.entries.set(entry.runId, previous);
-            else
-                this.entries.delete(entry.runId);
-            throw error;
-        }
-    }
-    recordProviderSpawned(runId, providerPid, providerSpawnedAtMs) {
-        const previous = this.entries.get(runId);
-        if (!previous)
-            throw new Error(`Cannot attach provider evidence to unknown run ${runId}`);
-        if (!Number.isSafeInteger(providerPid) || providerPid <= 0) {
-            throw new Error("Cannot record an invalid provider PID");
-        }
-        if (!Number.isFinite(providerSpawnedAtMs)) {
-            throw new Error("Cannot record an invalid provider spawn time");
-        }
-        this.entries.set(runId, { ...previous, providerPid, providerSpawnedAtMs });
-        try {
-            this.persist();
-        }
-        catch (error) {
-            this.entries.set(runId, previous);
-            throw error;
-        }
-    }
-    /**
-     * A live PID is insufficient for reattachment: operating systems can reuse
-     * PIDs, and the daemon cannot recover the provider's anonymous stdio pipes.
-     * Keep the exact interruption outcome until a durable authenticated control
-     * channel can prove both identity and ownership.
-     */
-    assessRecovery(runId, isProcessAlive) {
-        const entry = this.entries.get(runId);
-        if (!entry)
-            return undefined;
-        if (entry.providerPid === undefined) {
-            return { reattachable: false, reason: "provider_not_recorded" };
-        }
-        if (!isProcessAlive(entry.providerPid)) {
-            return {
-                reattachable: false,
-                reason: "provider_not_running",
-                providerPid: entry.providerPid,
-            };
-        }
-        return {
-            reattachable: false,
-            reason: "provider_identity_unverified",
-            providerPid: entry.providerPid,
-        };
-    }
-    remove(runId) {
-        const previous = this.entries.get(runId);
-        if (!previous)
-            return;
-        const wasRecovered = this.recoveredIds.has(runId);
-        this.entries.delete(runId);
-        this.recoveredIds.delete(runId);
-        try {
-            this.persist();
-        }
-        catch (error) {
-            this.entries.set(runId, previous);
-            if (wasRecovered)
-                this.recoveredIds.add(runId);
-            throw error;
-        }
-    }
-    persist() {
-        const pendingPath = `${this.path}.pending`;
-        mkdirSync(dirname(this.path), { recursive: true });
-        try {
-            writeFileSync(pendingPath, `${JSON.stringify({ version: JOURNAL_VERSION, entries: [...this.entries.values()] })}\n`, { mode: 0o600 });
-            chmodSync(pendingPath, 0o600);
-            renameSync(pendingPath, this.path);
-        }
-        catch (error) {
-            rmSync(pendingPath, { force: true });
-            throw error;
-        }
-    }
-}
-//# sourceMappingURL=run-journal.js.map

package/dist/run-journal.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"run-journal.js","sourceRoot":"","sources":["../src/run-journal.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,UAAU,EACV,SAAS,EACT,YAAY,EACZ,UAAU,EACV,MAAM,EACN,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,MAAM,wBAAwB,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;AAuBlD,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,KAAK,GAAG,KAAwC,CAAC;IACvD,MAAM,SAAS,GACb,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QACtB,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ;QACxC,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC;QAC/B,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;QACtC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACtC,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAE7B,MAAM,cAAc,GAAG,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC;IACvD,MAAM,oBAAoB,GAAG,KAAK,CAAC,mBAAmB,KAAK,SAAS,CAAC;IACrE,IAAI,cAAc,KAAK,oBAAoB;QAAE,OAAO,KAAK,CAAC;IAC1D,MAAM,iBAAiB,GACrB,KAAK,CAAC,eAAe,KAAK,SAAS;QACnC,CAAC,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;IACxF,IAAI,CAAC,cAAc;QAAE,OAAO,iBAAiB,CAAC;IAC9C,MAAM,qBAAqB,GACzB,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC;QACvC,KAAK,CAAC,WAAY,GAAG,CAAC;QACtB,OAAO,KAAK,CAAC,mBAAmB,KAAK,QAAQ;QAC7C,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAC7C,OAAO,qBAAqB,IAAI,iBAAiB,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,iBAAiB;IAMT;IALF,OAAO,GAAG,IAAI,GAAG,EAAkC,CAAC;IACpD,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,0BAA0B,GAAG,KAAK,CAAC;IAE3C,YACmB,IAAY,EAC7B,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE;QADD,SAAI,GAAJ,IAAI,CAAQ;QAG7B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAmC,CAAC;YACxF,IAAI,MAAM,CAAC,OAAO,KAAK,eAAe,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACpD,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;gBAClE,IACE,KAAK,CAAC,eAAe,KAAK,SAAS;oBACnC,KAAK,GAAG,KAAK,CAAC,eAAe,GAAG,wBAAwB,EACxD,CAAC;oBACD,IAAI,CAAC,0BAA0B,GAAG,IAAI,CAAC;oBACvC,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,4CAA4C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACrG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,GAAG,CAAC,KAAa;QACf,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAED,eAAe;QACb,OAAO,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;IAChC,CAAC;IAED;;;OAGG;IACH,wBAAwB,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE;QACzC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACxD,MAAM,qBAAqB,GAAG,IAAI,CAAC,0BAA0B,CAAC;QAC9D,IAAI,OAAO,GAAG,qBAAqB,CAAC;QACpC,IAAI,CAAC;YACH,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC1C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC7B,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS;oBAAE,SAAS;gBAClD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC9D,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;YACD,IAAI,OAAO;gBAAE,IAAI,CAAC,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,0BAA0B,GAAG,KAAK,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACrB,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,eAAe;gBAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC7E,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;YAC1B,KAAK,MAAM,KAAK,IAAI,oBAAoB;gBAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACvE,IAAI,CAAC,0BAA0B,GAAG,qBAAqB,CAAC;YACxD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,MAAM,CAAC,KAA6B;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,QAAQ;gBAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;;gBACjD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACtC,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,qBAAqB,CAAC,KAAa,EAAE,WAAmB,EAAE,mBAA2B;QACnF,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,KAAK,EAAE,CAAC,CAAC;QAC1F,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,IAAI,WAAW,IAAI,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAClC,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,cAAc,CACZ,KAAa,EACb,cAAwC;QAExC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;QAClE,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;YACvC,OAAO;gBACL,YAAY,EAAE,KAAK;gBACnB,MAAM,EAAE,sBAAsB;gBAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;aAC/B,CAAC;QACJ,CAAC;QACD,OAAO;YACL,YAAY,EAAE,KAAK;YACnB,MAAM,EAAE,8BAA8B;YACtC,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAClC,IAAI,YAAY;gBAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC/C,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,OAAO;QACb,MAAM,WAAW,GAAG,GAAG,IAAI,CAAC,IAAI,UAAU,CAAC;QAC3C,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC;YACH,aAAa,CACX,WAAW,EACX,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,EACxF,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;YACF,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YAC9B,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACrC,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF"}

package/dist/run-start-gate.d.ts

@@ -1,9 +0,0 @@
-/**
- * FIFO mutex for the short global-config-to-provider-spawn critical section.
- * Providers may run concurrently after spawn; only startup is serialized.
- */
-export declare class RunStartGate {
-    private tail;
-    acquire(): Promise<() => void>;
-}
-//# sourceMappingURL=run-start-gate.d.ts.map

package/dist/run-start-gate.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"run-start-gate.d.ts","sourceRoot":"","sources":["../src/run-start-gate.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,IAAI,CAAoC;IAE1C,OAAO,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC;CAgBrC"}

package/dist/run-start-gate.js

@@ -1,24 +0,0 @@
-/**
- * FIFO mutex for the short global-config-to-provider-spawn critical section.
- * Providers may run concurrently after spawn; only startup is serialized.
- */
-export class RunStartGate {
-    tail = Promise.resolve();
-    async acquire() {
-        const previous = this.tail;
-        let releaseCurrent;
-        const current = new Promise((resolve) => {
-            releaseCurrent = resolve;
-        });
-        this.tail = previous.then(() => current);
-        await previous;
-        let released = false;
-        return () => {
-            if (released)
-                return;
-            released = true;
-            releaseCurrent();
-        };
-    }
-}
-//# sourceMappingURL=run-start-gate.js.map

package/dist/run-start-gate.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"run-start-gate.js","sourceRoot":"","sources":["../src/run-start-gate.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,OAAO,YAAY;IACf,IAAI,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAEhD,KAAK,CAAC,OAAO;QACX,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;QAC3B,IAAI,cAA2B,CAAC;QAChC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC5C,cAAc,GAAG,OAAO,CAAC;QAC3B,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,QAAQ,CAAC;QAEf,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,OAAO,GAAG,EAAE;YACV,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,cAAc,EAAE,CAAC;QACnB,CAAC,CAAC;IACJ,CAAC;CACF"}

package/dist/runtime-backends.d.ts

@@ -1,2 +0,0 @@
-export * from "@alan-ai/agent-core";
-//# sourceMappingURL=runtime-backends.d.ts.map

package/dist/runtime-backends.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime-backends.d.ts","sourceRoot":"","sources":["../src/runtime-backends.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC"}

package/dist/runtime-backends.js

@@ -1,2 +0,0 @@
-export * from "@alan-ai/agent-core";
-//# sourceMappingURL=runtime-backends.js.map

package/dist/runtime-backends.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime-backends.js","sourceRoot":"","sources":["../src/runtime-backends.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC"}

package/dist/runtime-capabilities-sync.d.ts

@@ -1,33 +0,0 @@
-import type { Socket } from "socket.io-client";
-export type ModelsScanStatus = "pending" | "complete" | "failed";
-export interface RuntimeCapabilitiesPayload {
-    agents: Array<{
-        provider: string;
-        available: boolean;
-        version?: string;
-        models?: string[];
-        lastCheckedAt: string;
-    }>;
-    hasGit: boolean;
-    hasTerminal: boolean;
-    supportsFilesystem: boolean;
-}
-export declare function buildModelsScanMetadata(status: ModelsScanStatus, error?: string): Record<string, unknown>;
-export declare function patchRuntimeCapabilitiesSelf(input: {
-    apiUrl: string;
-    runtimeId: string;
-    runtimeToken: string;
-    capabilities: RuntimeCapabilitiesPayload;
-    metadata?: Record<string, unknown>;
-}): Promise<void>;
-export declare function setConnectedRuntimeSocket(socket: Socket | null): void;
-export declare function publishRuntimeCapabilities(input: {
-    capabilities: RuntimeCapabilitiesPayload;
-    metadata?: Record<string, unknown>;
-    apiUrl?: string;
-    runtimeId?: string;
-    runtimeToken?: string;
-}): Promise<void>;
-export declare function getModelScanInFlight(): Promise<void> | null;
-export declare function setModelScanInFlight(promise: Promise<void> | null): void;
-//# sourceMappingURL=runtime-capabilities-sync.d.ts.map

package/dist/runtime-capabilities-sync.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime-capabilities-sync.d.ts","sourceRoot":"","sources":["../src/runtime-capabilities-sync.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE/C,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEjE,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,KAAK,CAAC;QACZ,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,OAAO,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC,CAAC;IACH,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;IACrB,kBAAkB,EAAE,OAAO,CAAC;CAC7B;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,gBAAgB,EACxB,KAAK,CAAC,EAAE,MAAM,GACb,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQzB;AAED,wBAAsB,4BAA4B,CAAC,KAAK,EAAE;IACxD,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,0BAA0B,CAAC;IACzC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBhB;AAID,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAErE;AAED,wBAAsB,0BAA0B,CAAC,KAAK,EAAE;IACtD,YAAY,EAAE,0BAA0B,CAAC;IACzC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBhB;AAID,wBAAgB,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAE3D;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,CAExE"}

package/dist/runtime-capabilities-sync.js

@@ -1,56 +0,0 @@
-export function buildModelsScanMetadata(status, error) {
-    const metadata = {
-        modelsScanStatus: status,
-        modelsScannedAt: new Date().toISOString(),
-    };
-    if (error)
-        metadata.modelsScanError = error;
-    else
-        delete metadata.modelsScanError;
-    return metadata;
-}
-export async function patchRuntimeCapabilitiesSelf(input) {
-    const response = await fetch(`${input.apiUrl}/public/runtimes/${input.runtimeId}/capabilities/self`, {
-        method: "PATCH",
-        headers: {
-            "content-type": "application/json",
-            authorization: `Bearer ${input.runtimeToken}`,
-        },
-        body: JSON.stringify({
-            capabilities: input.capabilities,
-            ...(input.metadata ? { metadata: input.metadata } : {}),
-        }),
-    });
-    if (!response.ok) {
-        throw new Error(`runtime capabilities update failed: ${response.status} ${await response.text()}`);
-    }
-}
-let connectedRuntimeSocket = null;
-export function setConnectedRuntimeSocket(socket) {
-    connectedRuntimeSocket = socket;
-}
-export async function publishRuntimeCapabilities(input) {
-    if (connectedRuntimeSocket?.connected) {
-        connectedRuntimeSocket.emit("runtime.capabilities", {
-            capabilities: input.capabilities,
-            ...(input.metadata ? { metadata: input.metadata } : {}),
-        });
-    }
-    if (input.apiUrl && input.runtimeId && input.runtimeToken) {
-        await patchRuntimeCapabilitiesSelf({
-            apiUrl: input.apiUrl,
-            runtimeId: input.runtimeId,
-            runtimeToken: input.runtimeToken,
-            capabilities: input.capabilities,
-            metadata: input.metadata,
-        });
-    }
-}
-let modelScanInFlight = null;
-export function getModelScanInFlight() {
-    return modelScanInFlight;
-}
-export function setModelScanInFlight(promise) {
-    modelScanInFlight = promise;
-}
-//# sourceMappingURL=runtime-capabilities-sync.js.map

package/dist/runtime-capabilities-sync.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime-capabilities-sync.js","sourceRoot":"","sources":["../src/runtime-capabilities-sync.ts"],"names":[],"mappings":"AAiBA,MAAM,UAAU,uBAAuB,CACrC,MAAwB,EACxB,KAAc;IAEd,MAAM,QAAQ,GAA4B;QACxC,gBAAgB,EAAE,MAAM;QACxB,eAAe,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC1C,CAAC;IACF,IAAI,KAAK;QAAE,QAAQ,CAAC,eAAe,GAAG,KAAK,CAAC;;QACvC,OAAO,QAAQ,CAAC,eAAe,CAAC;IACrC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,KAMlD;IACC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,KAAK,CAAC,MAAM,oBAAoB,KAAK,CAAC,SAAS,oBAAoB,EACtE;QACE,MAAM,EAAE,OAAO;QACf,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,KAAK,CAAC,YAAY,EAAE;SAC9C;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxD,CAAC;KACH,CACF,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,uCAAuC,QAAQ,CAAC,MAAM,IAAI,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAClF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,IAAI,sBAAsB,GAAkB,IAAI,CAAC;AAEjD,MAAM,UAAU,yBAAyB,CAAC,MAAqB;IAC7D,sBAAsB,GAAG,MAAM,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,KAMhD;IACC,IAAI,sBAAsB,EAAE,SAAS,EAAE,CAAC;QACtC,sBAAsB,CAAC,IAAI,CAAC,sBAAsB,EAAE;YAClD,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxD,CAAC,CAAC;IACL,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QAC1D,MAAM,4BAA4B,CAAC;YACjC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,IAAI,iBAAiB,GAAyB,IAAI,CAAC;AAEnD,MAAM,UAAU,oBAAoB;IAClC,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAA6B;IAChE,iBAAiB,GAAG,OAAO,CAAC;AAC9B,CAAC"}

package/dist/runtime-config.d.ts

@@ -1,24 +0,0 @@
-import { type AgentEndpointProfile } from "@alan-ai/shared/runtime-runner-status";
-export type { AgentEndpointProfile };
-/** Remove obsolete renderer tenant selection from durable daemon identity. */
-export declare function sanitizeAgentConfig<T extends Record<string, unknown>>(config: T): T;
-export declare function migrateLegacyAgentConfig(input?: {
-    profile?: AgentEndpointProfile | string | null;
-    alanBaseDir?: string;
-    legacyBaseDir?: string;
-}): boolean;
-export declare function resolveAgentConfigDirectory(baseDir?: string): string;
-export declare function resolveAgentConfigPath(input?: {
-    profile?: AgentEndpointProfile | string | null;
-    explicitPath?: string | null;
-    baseDir?: string;
-}): string;
-export declare function readConfiguredConfigPath(): string;
-export declare function configExistsAtPath(configPath: string): boolean;
-export declare function resolveEndpointProfileFromArgs(args: string[]): AgentEndpointProfile;
-/**
- * Pin the active config file from `--profile` / `ALAN_AGENT_PROFILE` when the
- * caller has not already set `ALAN_AGENT_CONFIG_PATH` (desktop supervisor does).
- */
-export declare function bindAgentConfigPathFromArgs(args: string[]): string;
-//# sourceMappingURL=runtime-config.d.ts.map

package/dist/runtime-config.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime-config.d.ts","sourceRoot":"","sources":["../src/runtime-config.ts"],"names":[],"mappings":"AAcA,OAAO,EACL,KAAK,oBAAoB,EAG1B,MAAM,uCAAuC,CAAC;AAE/C,YAAY,EAAE,oBAAoB,EAAE,CAAC;AAiBrC,8EAA8E;AAC9E,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAOnF;AAqBD,wBAAgB,wBAAwB,CAAC,KAAK,CAAC,EAAE;IAC/C,OAAO,CAAC,EAAE,oBAAoB,GAAG,MAAM,GAAG,IAAI,CAAC;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,GAAG,OAAO,CAsCV;AAED,wBAAgB,2BAA2B,CAAC,OAAO,SAAoB,GAAG,MAAM,CAE/E;AAED,wBAAgB,sBAAsB,CAAC,KAAK,CAAC,EAAE;IAC7C,OAAO,CAAC,EAAE,oBAAoB,GAAG,MAAM,GAAG,IAAI,CAAC;IAC/C,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG,MAAM,CAST;AAED,wBAAgB,wBAAwB,IAAI,MAAM,CAEjD;AAED,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,oBAAoB,CAInF;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAOlE"}

package/dist/runtime-config.js

@@ -1,124 +0,0 @@
-import { chmodSync, constants, copyFileSync, existsSync, lstatSync, mkdirSync, readFileSync, unlinkSync, utimesSync, writeFileSync, } from "node:fs";
-import { homedir } from "node:os";
-import { join } from "node:path";
-import { normalizeAgentEndpointProfile, resolveAgentConfigFileName, } from "@alan-ai/shared/runtime-runner-status";
-const DEFAULT_AGENT_DIR = join(homedir(), ".alan", "agent");
-const LEGACY_AGENT_DIR = join(homedir(), ".aiden", "agent");
-const AGENT_CONFIG_KEYS = new Map([
-    ["apiUrl", "string"],
-    ["wsUrl", "string"],
-    ["endpointProfile", "string"],
-    ["teamId", "string"],
-    ["runtimeId", "string"],
-    ["runtimeToken", "string"],
-    ["localApiPort", "number"],
-    ["localApiToken", "string"],
-    ["displayName", "string"],
-]);
-/** Remove obsolete renderer tenant selection from durable daemon identity. */
-export function sanitizeAgentConfig(config) {
-    const sanitized = { ...config };
-    delete sanitized.teamId;
-    delete sanitized.organizationId;
-    delete sanitized.currentTeamId;
-    delete sanitized.currentOrganizationId;
-    return sanitized;
-}
-function isValidAgentConfig(configPath) {
-    try {
-        const stat = lstatSync(configPath);
-        if (!stat.isFile() || stat.isSymbolicLink())
-            return false;
-        const parsed = JSON.parse(readFileSync(configPath, "utf8"));
-        if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
-            return false;
-        const entries = Object.entries(parsed);
-        return (entries.some(([key]) => AGENT_CONFIG_KEYS.has(key)) &&
-            entries.every(([key, value]) => {
-                const expectedType = AGENT_CONFIG_KEYS.get(key);
-                return expectedType === undefined || typeof value === expectedType;
-            }));
-    }
-    catch {
-        return false;
-    }
-}
-export function migrateLegacyAgentConfig(input) {
-    const profile = normalizeAgentEndpointProfile(input?.profile ?? null) ?? "production";
-    const alanBaseDir = input?.alanBaseDir ?? DEFAULT_AGENT_DIR;
-    const legacyBaseDir = input?.legacyBaseDir ?? LEGACY_AGENT_DIR;
-    const fileName = resolveAgentConfigFileName(profile);
-    const legacyPath = join(legacyBaseDir, fileName);
-    const alanPath = join(alanBaseDir, fileName);
-    if (existsSync(alanPath) || !isValidAgentConfig(legacyPath))
-        return false;
-    let copied = false;
-    try {
-        const sourceDirectoryStat = lstatSync(legacyBaseDir);
-        const sourceFileStat = lstatSync(legacyPath);
-        if (!sourceDirectoryStat.isDirectory() || sourceDirectoryStat.isSymbolicLink())
-            return false;
-        const alanDirectoryExisted = existsSync(alanBaseDir);
-        if (alanDirectoryExisted) {
-            const alanDirectoryStat = lstatSync(alanBaseDir);
-            if (!alanDirectoryStat.isDirectory() || alanDirectoryStat.isSymbolicLink())
-                return false;
-        }
-        mkdirSync(alanBaseDir, { recursive: true, mode: sourceDirectoryStat.mode & 0o777 });
-        if (!alanDirectoryExisted)
-            chmodSync(alanBaseDir, sourceDirectoryStat.mode & 0o777);
-        copyFileSync(legacyPath, alanPath, constants.COPYFILE_EXCL);
-        copied = true;
-        const migrated = sanitizeAgentConfig(JSON.parse(readFileSync(alanPath, "utf8")));
-        writeFileSync(alanPath, JSON.stringify(migrated, null, 2));
-        chmodSync(alanPath, sourceFileStat.mode & 0o777);
-        utimesSync(alanPath, sourceFileStat.atime, sourceFileStat.mtime);
-        if (!isValidAgentConfig(alanPath)) {
-            unlinkSync(alanPath);
-            return false;
-        }
-        return true;
-    }
-    catch {
-        if (copied && existsSync(alanPath))
-            unlinkSync(alanPath);
-        return false;
-    }
-}
-export function resolveAgentConfigDirectory(baseDir = DEFAULT_AGENT_DIR) {
-    return baseDir;
-}
-export function resolveAgentConfigPath(input) {
-    if (input?.explicitPath?.trim())
-        return input.explicitPath.trim();
-    const profile = normalizeAgentEndpointProfile(typeof input?.profile === "string" ? input.profile : (input?.profile ?? null)) ?? "production";
-    const baseDir = input?.baseDir ?? DEFAULT_AGENT_DIR;
-    if (input?.baseDir === undefined)
-        migrateLegacyAgentConfig({ profile });
-    return join(baseDir, resolveAgentConfigFileName(profile));
-}
-export function readConfiguredConfigPath() {
-    return process.env.ALAN_AGENT_CONFIG_PATH ?? resolveAgentConfigPath({ profile: "production" });
-}
-export function configExistsAtPath(configPath) {
-    return existsSync(configPath);
-}
-export function resolveEndpointProfileFromArgs(args) {
-    const index = args.indexOf("--profile");
-    const raw = index === -1 ? process.env.ALAN_AGENT_PROFILE : args[index + 1];
-    return normalizeAgentEndpointProfile(raw) ?? "production";
-}
-/**
- * Pin the active config file from `--profile` / `ALAN_AGENT_PROFILE` when the
- * caller has not already set `ALAN_AGENT_CONFIG_PATH` (desktop supervisor does).
- */
-export function bindAgentConfigPathFromArgs(args) {
-    const explicit = process.env.ALAN_AGENT_CONFIG_PATH?.trim();
-    if (explicit)
-        return explicit;
-    const profile = resolveEndpointProfileFromArgs(args);
-    const configPath = resolveAgentConfigPath({ profile });
-    process.env.ALAN_AGENT_CONFIG_PATH = configPath;
-    return configPath;
-}
-//# sourceMappingURL=runtime-config.js.map

package/dist/runtime-config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime-config.js","sourceRoot":"","sources":["../src/runtime-config.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,SAAS,EACT,YAAY,EACZ,UAAU,EACV,SAAS,EACT,SAAS,EACT,YAAY,EACZ,UAAU,EACV,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAEL,6BAA6B,EAC7B,0BAA0B,GAC3B,MAAM,uCAAuC,CAAC;AAI/C,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC5D,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAE5D,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAA8B;IAC7D,CAAC,QAAQ,EAAE,QAAQ,CAAC;IACpB,CAAC,OAAO,EAAE,QAAQ,CAAC;IACnB,CAAC,iBAAiB,EAAE,QAAQ,CAAC;IAC7B,CAAC,QAAQ,EAAE,QAAQ,CAAC;IACpB,CAAC,WAAW,EAAE,QAAQ,CAAC;IACvB,CAAC,cAAc,EAAE,QAAQ,CAAC;IAC1B,CAAC,cAAc,EAAE,QAAQ,CAAC;IAC1B,CAAC,eAAe,EAAE,QAAQ,CAAC;IAC3B,CAAC,aAAa,EAAE,QAAQ,CAAC;CAC1B,CAAC,CAAC;AAEH,8EAA8E;AAC9E,MAAM,UAAU,mBAAmB,CAAoC,MAAS;IAC9E,MAAM,SAAS,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;IAChC,OAAO,SAAS,CAAC,MAAM,CAAC;IACxB,OAAO,SAAS,CAAC,cAAc,CAAC;IAChC,OAAO,SAAS,CAAC,aAAa,CAAC;IAC/B,OAAO,SAAS,CAAC,qBAAqB,CAAC;IACvC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAkB;IAC5C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,OAAO,KAAK,CAAC;QAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAY,CAAC;QACvE,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QACjF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvC,OAAO,CACL,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACnD,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;gBAC7B,MAAM,YAAY,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAChD,OAAO,YAAY,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,YAAY,CAAC;YACrE,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAIxC;IACC,MAAM,OAAO,GAAG,6BAA6B,CAAC,KAAK,EAAE,OAAO,IAAI,IAAI,CAAC,IAAI,YAAY,CAAC;IACtF,MAAM,WAAW,GAAG,KAAK,EAAE,WAAW,IAAI,iBAAiB,CAAC;IAC5D,MAAM,aAAa,GAAG,KAAK,EAAE,aAAa,IAAI,gBAAgB,CAAC;IAC/D,MAAM,QAAQ,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC7C,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAE1E,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,mBAAmB,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC;QACrD,MAAM,cAAc,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QAC7C,IAAI,CAAC,mBAAmB,CAAC,WAAW,EAAE,IAAI,mBAAmB,CAAC,cAAc,EAAE;YAAE,OAAO,KAAK,CAAC;QAC7F,MAAM,oBAAoB,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;QACrD,IAAI,oBAAoB,EAAE,CAAC;YACzB,MAAM,iBAAiB,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;YACjD,IAAI,CAAC,iBAAiB,CAAC,WAAW,EAAE,IAAI,iBAAiB,CAAC,cAAc,EAAE;gBAAE,OAAO,KAAK,CAAC;QAC3F,CAAC;QACD,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,mBAAmB,CAAC,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC;QACpF,IAAI,CAAC,oBAAoB;YAAE,SAAS,CAAC,WAAW,EAAE,mBAAmB,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC;QACpF,YAAY,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC,aAAa,CAAC,CAAC;QAC5D,MAAM,GAAG,IAAI,CAAC;QACd,MAAM,QAAQ,GAAG,mBAAmB,CAClC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAA4B,CACtE,CAAC;QACF,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3D,SAAS,CAAC,QAAQ,EAAE,cAAc,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC;QACjD,UAAU,CAAC,QAAQ,EAAE,cAAc,CAAC,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC;QACjE,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,UAAU,CAAC,QAAQ,CAAC,CAAC;YACrB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,MAAM,IAAI,UAAU,CAAC,QAAQ,CAAC;YAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;QACzD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,OAAO,GAAG,iBAAiB;IACrE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAItC;IACC,IAAI,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;IAClE,MAAM,OAAO,GACX,6BAA6B,CAC3B,OAAO,KAAK,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,IAAI,IAAI,CAAC,CAC9E,IAAI,YAAY,CAAC;IACpB,MAAM,OAAO,GAAG,KAAK,EAAE,OAAO,IAAI,iBAAiB,CAAC;IACpD,IAAI,KAAK,EAAE,OAAO,KAAK,SAAS;QAAE,wBAAwB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACxE,OAAO,IAAI,CAAC,OAAO,EAAE,0BAA0B,CAAC,OAAO,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,sBAAsB,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;AACjG,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,UAAkB;IACnD,OAAO,UAAU,CAAC,UAAU,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,IAAc;IAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAC5E,OAAO,6BAA6B,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC;AAC5D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CAAC,IAAc;IACxD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,CAAC;IAC5D,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,OAAO,GAAG,8BAA8B,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,sBAAsB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,UAAU,CAAC;IAChD,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/sandbox-outbox.d.ts

@@ -1,122 +0,0 @@
-/**
- * Durable, at-least-once event delivery for the CLOUD sandbox agent path.
- *
- * The local daemon already hardens its `agent.event` stream with
- * {@link EncryptedEventOutbox} (spool-before-send, ack-to-remove, replay on
- * reconnect). The cloud sandbox agent historically emitted `agent_event`
- * fire-and-forget, so a socket blip mid-turn silently dropped stream events.
- *
- * This module reuses the daemon's battle-tested outbox crypto/spool/cap logic
- * and adapts it to the cloud `agent_event` channel WITHOUT touching the daemon
- * path:
- *   - key material derives from ALAN_SESSION_TOKEN (the daemon derives from its
- *     persisted config key — same 32-byte AES-256-GCM strength, different entry
- *     point);
- *   - the spool lives at `/tmp/alan-agent-outbox-${conversationId}.enc`;
- *   - {@link SandboxOutboxSocket} translates the daemon envelope onto the cloud
- *     `agent_event` wire format (event + stable `eventId` + monotonic `seq`) and
- *     maps the server's `{ ok, duplicate?, retryable? }` ack back to the outbox's
- *     `{ ok, retryable? }` contract.
- *
- * The whole behaviour is gated behind `ALAN_EVENT_OUTBOX_ENABLED === "true"` so
- * the published npm package stays byte-for-byte fire-and-forget until ops turns
- * it on fleet-wide.
- */
-import { type AgentEventAck, EncryptedEventOutbox, type EventOutboxOptions, type OutboxSocket } from "./event-outbox.js";
-import type { AgentEvent } from "./types.js";
-/** Env flag that activates durable delivery inside the agent process. */
-export declare const SANDBOX_EVENT_OUTBOX_ENV = "ALAN_EVENT_OUTBOX_ENABLED";
-/** True only when ops has explicitly opted the process into durable delivery. */
-export declare function isSandboxEventOutboxEnabled(env?: NodeJS.ProcessEnv): boolean;
-/**
- * Derive the 32-byte AES-256-GCM key for the sandbox outbox from the per-session
- * token. The daemon persists a random key in its config file; the cloud agent is
- * ephemeral and has no such store, so we derive deterministically from the
- * session token it already holds. SHA-256 yields exactly 32 bytes, which is what
- * {@link EncryptedEventOutbox} requires — the crypto strength is unchanged.
- */
-export declare function deriveSandboxOutboxKey(sessionToken: string): string;
-/** Per-conversation spool location inside the sandbox VM. */
-export declare function sandboxOutboxSpoolPath(conversationId: string): string;
-/**
- * Construct the durable outbox for one conversation. If a prior process left an
- * undecryptable spool (corruption, or a rotated session token), the stale file
- * is removed and a fresh outbox is created so delivery is still hardened going
- * forward instead of crashing the agent.
- */
-export declare function createSandboxEventOutbox(input: {
-    conversationId: string;
-    sessionToken: string;
-    pushLog?: (message: string) => void;
-    options?: EventOutboxOptions;
-    spoolPath?: string;
-}): EncryptedEventOutbox;
-/** Server ack shape for the cloud `agent_event` channel (with dedupe signal). */
-export interface SandboxAgentEventAck {
-    ok: boolean;
-    duplicate?: boolean;
-    retryable?: boolean;
-}
-/** Minimal socket.io surface the adapter needs from the live sandbox socket. */
-export interface SandboxEmitSocket {
-    readonly connected: boolean;
-    emit(event: "agent_event", payload: unknown, ack: (result: SandboxAgentEventAck) => void): unknown;
-}
-/**
- * Bridges {@link EncryptedEventOutbox} (which speaks the daemon's
- * `agent.event` envelope) onto the cloud `agent_event` channel.
- *
- * Every wire payload carries the outbox `eventId` (for server-side dedupe) plus
- * a monotonic `seq` that is stable per event across retries and reconnect
- * replays, so the server can order and de-duplicate an at-least-once stream.
- */
-export declare class SandboxOutboxSocket implements OutboxSocket {
-    private readonly socket;
-    private readonly seqByEventId;
-    private seqCounter;
-    constructor(socket: SandboxEmitSocket);
-    get connected(): boolean;
-    emit(_event: "agent.event", payload: {
-        eventId: string;
-        conversationId: string;
-        runId: string;
-        event: AgentEvent;
-    }, acknowledge: (result: AgentEventAck) => void): void;
-}
-/**
- * Owns the durable outbox for a single sandbox conversation and routes every
- * agent event through it when enabled. When disabled (the default) callers fall
- * back to today's fire-and-forget emit — byte-for-byte the prior behaviour.
- */
-export declare class SandboxEventDispatcher {
-    private readonly conversationId;
-    private readonly outbox?;
-    private readonly outboxSocket?;
-    private currentRunId?;
-    constructor(input: {
-        conversationId: string;
-        sessionToken: string;
-        enabled: boolean;
-        socket: SandboxEmitSocket;
-        pushLog?: (message: string) => void;
-        onInitError?: (error: unknown) => void;
-        options?: EventOutboxOptions;
-        spoolPath?: string;
-    });
-    /** True when events are being durably queued rather than fired-and-forgotten. */
-    get active(): boolean;
-    /** Set the run id used to bucket per-run caps / terminal condensation. */
-    setRunId(runId: string | undefined): void;
-    /**
-     * Durably deliver one event (enqueue-before-send, remove-on-ack). When the
-     * outbox is inactive, defers to `fireAndForget` so behaviour is unchanged.
-     */
-    emit(event: AgentEvent, fireAndForget: (event: AgentEvent) => void): void;
-    /** Replay un-acked events in order — called on (re)connect before new events. */
-    flush(): void;
-    /** Reset in-flight state on disconnect so the next flush replays from the head. */
-    disconnect(): void;
-    /** Diagnostics: number of events still awaiting a server ack. */
-    pendingCount(): number;
-}
-//# sourceMappingURL=sandbox-outbox.d.ts.map