@aiden-ade/sandbox-agent 0.1.87 → 0.1.88

package/dist/index.cjs

@@ -3404,7 +3404,7 @@ var require_websocket = __commonJS({
     var http2 = require("http");
     var net = require("net");
     var tls = require("tls");
-    var { randomBytes: randomBytes13, createHash: createHash18 } = require("crypto");
+    var { randomBytes: randomBytes13, createHash: createHash17 } = require("crypto");
     var { Duplex, Readable: Readable2 } = require("stream");
     var { URL: URL2 } = require("url");
     var PerMessageDeflate = require_permessage_deflate();
@@ -4061,7 +4061,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash18("sha1").update(key + GUID).digest("base64");
+        const digest = createHash17("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -4428,7 +4428,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter = require("events");
     var http2 = require("http");
     var { Duplex } = require("stream");
-    var { createHash: createHash18 } = require("crypto");
+    var { createHash: createHash17 } = require("crypto");
     var extension = require_extension();
     var PerMessageDeflate = require_permessage_deflate();
     var subprotocol = require_subprotocol();
@@ -4725,7 +4725,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash18("sha1").update(key + GUID).digest("base64");
+        const digest = createHash17("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -15447,7 +15447,7 @@ function describeError(error61) {
 }
 
 // src/version.ts
-var AGENT_VERSION = "0.1.87";
+var AGENT_VERSION = "0.1.88";
 
 // src/daemon-worktree.ts
 var import_node_child_process3 = require("child_process");
@@ -47731,8 +47731,6 @@ var MAX_INTERMEDIATE_EVENTS_PER_RUN = 200;
 var MAX_ENCRYPTED_OUTBOX_BYTES = 64 * 1024 * 1024;
 var ACK_TIMEOUT_MS = 1e4;
 var RETRY_DELAY_MS = 1e3;
-var CONDENSATION_NOTICE = "Some detailed output was condensed while this computer was offline; the run result is preserved.";
-var CONDENSATION_GAP = "\u2026";
 var TERMINAL_EVENT_TYPES = /* @__PURE__ */ new Set([
   "agent_run_finished",
   "query_complete",
@@ -47753,59 +47751,6 @@ function isTerminal(event) {
 function isBackgroundHeartbeat(event) {
   return event.type === "activity" && event.status === "background_work";
 }
-function truncateUtf8(value2, maxBytes) {
-  const encoded = Buffer.from(value2, "utf8");
-  if (encoded.length <= maxBytes) return value2;
-  return `${encoded.subarray(0, maxBytes).toString("utf8").replace(/\uFFFD$/u, "")}\u2026`;
-}
-function terminalFingerprint(event) {
-  return (0, import_node_crypto4.createHash)("sha256").update(JSON.stringify(event)).digest("hex").slice(0, 16);
-}
-function condenseTerminalEvent(event) {
-  const fingerprint = terminalFingerprint(event);
-  const note = ` [Offline terminal detail condensed; fingerprint ${fingerprint}.]`;
-  if (event.type === "session_error") {
-    return {
-      type: "session_error",
-      error: `${truncateUtf8(event.error, 512)}${note}`
-    };
-  }
-  if (event.type === "session_complete" && !event.result) return event;
-  if (event.type !== "query_complete" && event.type !== "agent_run_finished" && event.type !== "complete" && event.type !== "session_complete") {
-    return event;
-  }
-  const result = event.result;
-  if (!result) return event;
-  const compactResult = {
-    success: result.success,
-    summary: `${truncateUtf8(result.summary ?? "", 512)}${note}`,
-    filesModified: (result.filesModified ?? []).slice(0, 4).map((file2) => truncateUtf8(file2, 128)),
-    planFilesCreated: (result.planFilesCreated ?? []).slice(0, 2).map((file2) => truncateUtf8(file2, 128)),
-    iterations: result.iterations,
-    ...result.error ? { error: truncateUtf8(result.error, 512) } : {},
-    ...result.providerSessionId ? { providerSessionId: truncateUtf8(result.providerSessionId, 256) } : {},
-    ...result.runtimeSessionId ? { runtimeSessionId: truncateUtf8(result.runtimeSessionId, 256) } : {},
-    ...result.backendKind ? { backendKind: result.backendKind } : {},
-    ...result.supportTier ? { supportTier: result.supportTier } : {},
-    ...result.usage ? { usage: result.usage } : {},
-    ...result.problem ? { problem: result.problem } : {}
-  };
-  if (event.type === "agent_run_finished") {
-    return {
-      type: "agent_run_finished",
-      result: compactResult,
-      ...event.failureDomain ? { failureDomain: event.failureDomain } : {},
-      ...event.causeProblemId ? { causeProblemId: event.causeProblemId } : {}
-    };
-  }
-  if (event.type === "query_complete") {
-    return { type: "query_complete", result: compactResult, ts: event.ts };
-  }
-  if (event.type === "session_complete") {
-    return { type: "session_complete", result: compactResult, ts: event.ts };
-  }
-  return { type: "complete", result: compactResult };
-}
 function parentToolUseIdOf(event) {
   if ((event.type === "text" || event.type === "thinking") && typeof event.parentToolUseId === "string") {
     return event.parentToolUseId;
@@ -47873,6 +47818,7 @@ var EncryptedEventOutbox = class {
     this.journalDir = eventJournalDir(this.path);
     this.maxEncryptedBytes = options.maxEncryptedBytes ?? MAX_ENCRYPTED_OUTBOX_BYTES;
     this.maxIntermediateEventsPerRun = options.maxIntermediateEventsPerRun ?? MAX_INTERMEDIATE_EVENTS_PER_RUN;
+    this.deliveryIntervalMs = options.deliveryIntervalMs ?? 0;
     this.ordinaryBatchMs = options.ordinaryBatchMs ?? EVENT_JOURNAL_ORDINARY_BATCH_MS;
     if (!Number.isSafeInteger(this.maxEncryptedBytes) || this.maxEncryptedBytes <= 0) {
       throw new Error("event outbox maxEncryptedBytes must be a positive integer");
@@ -47880,6 +47826,9 @@ var EncryptedEventOutbox = class {
     if (!Number.isSafeInteger(this.maxIntermediateEventsPerRun) || this.maxIntermediateEventsPerRun < 0) {
       throw new Error("event outbox maxIntermediateEventsPerRun must be a non-negative integer");
     }
+    if (!Number.isSafeInteger(this.deliveryIntervalMs) || this.deliveryIntervalMs < 0) {
+      throw new Error("event outbox deliveryIntervalMs must be a non-negative integer");
+    }
     const pendingLegacy = [];
     const recovered = recoverEventJournal({
       legacyPath: this.path,
@@ -47953,7 +47902,7 @@ var EncryptedEventOutbox = class {
       importedLegacySnapshot: recovered.importedLegacySnapshot
     };
     this.hydrateFromSegments(segmentsForHydrate);
-    this.enforceCaps();
+    this.enforceRetentionPolicy();
     this.persistAckState();
   }
   entries = [];
@@ -47964,6 +47913,8 @@ var EncryptedEventOutbox = class {
   inFlightEventId = null;
   ackTimer = null;
   retryTimer = null;
+  deliveryTimer = null;
+  lastDeliveryAtMs = 0;
   acknowledgementWaiters = /* @__PURE__ */ new Map();
   persistFailureLogged = false;
   compactionState = "idle";
@@ -47974,7 +47925,9 @@ var EncryptedEventOutbox = class {
   key;
   maxEncryptedBytes;
   maxIntermediateEventsPerRun;
+  deliveryIntervalMs;
   ordinaryBatchMs;
+  highWaterMarkLogged = false;
   pendingBytes = 0;
   cachedSegmentBytes = 0;
   cachedSegmentCount = 0;
@@ -48067,7 +48020,7 @@ var EncryptedEventOutbox = class {
       last.createdAtMs = Date.now();
       this.pendingBytes += estimateEntryBytes(last);
       this.rewriteQueued(last);
-      this.enforceCaps(runId);
+      this.enforceRetentionPolicy(runId, false);
       return last.eventId;
     }
     const entry = {
@@ -48079,7 +48032,7 @@ var EncryptedEventOutbox = class {
       sequence: this.nextSequence(runId)
     };
     this.appendEntry(entry, isTerminal(event));
-    this.enforceCaps(runId);
+    this.enforceRetentionPolicy(runId, isBackgroundHeartbeat(event));
     return entry.eventId;
   }
   /**
@@ -48110,7 +48063,7 @@ var EncryptedEventOutbox = class {
       explicitSource: true
     };
     this.appendEntry(entry, true);
-    this.enforceCaps(runId);
+    this.enforceRetentionPolicy(runId, false);
     return eventId;
   }
   hasTerminalEvent(runId) {
@@ -48131,7 +48084,7 @@ var EncryptedEventOutbox = class {
       return min;
     }, null);
     const persistFailure = this.writer.getPersistFailure();
-    const overloaded = this.cachedSegmentBytes > this.maxEncryptedBytes || this.writer.depth() > 2e3;
+    const overloaded = this.pendingBytes > this.maxEncryptedBytes || this.writer.depth() > 2e3;
     const degraded = persistFailure !== null || this.compactionState === "failed" || this.lastRecover.quarantinedSegments.length > 0;
     return {
       writerDepth: this.writer.depth(),
@@ -48155,13 +48108,21 @@ var EncryptedEventOutbox = class {
   disconnect() {
     this.clearAckTimer();
     this.clearRetryTimer();
+    this.clearDeliveryTimer();
     this.inFlightEventId = null;
   }
   flush(socket) {
     if (!socket.connected || this.inFlightEventId || this.entries.length === 0) return;
+    const deliveryDelayMs = this.lastDeliveryAtMs + this.deliveryIntervalMs - Date.now();
+    if (deliveryDelayMs > 0) {
+      this.scheduleDelivery(socket, deliveryDelayMs);
+      return;
+    }
+    this.clearDeliveryTimer();
     const entry = this.pickDeliveryEntry();
     if (!entry) return;
     this.inFlightEventId = entry.eventId;
+    this.lastDeliveryAtMs = Date.now();
     this.transmittedEventIds.add(entry.eventId);
     let settled = false;
     const settle = (result) => {
@@ -48223,119 +48184,59 @@ var EncryptedEventOutbox = class {
     if (removed) this.pendingBytes -= estimateEntryBytes(removed);
     this.writer.removeQueued(eventId);
   }
-  isDroppable(entry) {
-    return entry.eventId !== this.inFlightEventId && !entry.explicitSource && entry.kind !== "condensation_marker" && !isTerminal(entry.event);
+  isDroppableHeartbeat(entry) {
+    return entry.eventId !== this.inFlightEventId && !entry.explicitSource && entry.kind !== "condensation_marker" && isBackgroundHeartbeat(entry.event);
   }
-  pickDropCandidate(matches) {
-    const heartbeat = this.entries.find(
-      (entry) => matches(entry) && this.isDroppable(entry) && isBackgroundHeartbeat(entry.event)
-    );
-    if (heartbeat) return heartbeat;
-    return this.entries.find((entry) => matches(entry) && this.isDroppable(entry));
-  }
-  ensureCondensationMarker(runId, conversationId) {
-    if (this.entries.some((entry) => entry.runId === runId && entry.kind === "condensation_marker")) {
-      return;
-    }
-    const runEntry = this.entries.find((entry) => entry.runId === runId);
-    const markerConversationId = runEntry?.conversationId ?? conversationId;
-    if (!markerConversationId) return;
-    const alreadyNotified = this.condensedRunIds.has(runId);
-    const marker = {
-      eventId: (0, import_node_crypto4.randomUUID)(),
-      conversationId: markerConversationId,
-      runId,
-      event: {
-        type: "text",
-        text: alreadyNotified ? CONDENSATION_GAP : CONDENSATION_NOTICE,
-        ts: Date.now()
-      },
-      createdAtMs: Date.now(),
-      sequence: this.nextSequence(runId),
-      kind: "condensation_marker"
-    };
-    const insertAt = this.entries.findIndex(
-      (entry) => entry.runId === runId && entry.eventId !== this.inFlightEventId
-    );
-    let spliceAt = insertAt === -1 ? this.entries.length : insertAt;
-    if (insertAt !== -1 && this.entries[insertAt]?.event.type === "start") {
-      spliceAt = insertAt + 1;
-    }
-    this.entries.splice(spliceAt, 0, marker);
-    this.pendingBytes += estimateEntryBytes(marker);
-    this.trackRun(runId);
-    this.writer.enqueue(this.toRecord(marker), true);
+  pickHeartbeatDropCandidate(matches) {
+    return this.entries.find((entry) => matches(entry) && this.isDroppableHeartbeat(entry));
   }
   dropEntry(entry) {
     this.removeEntry(entry.eventId);
     this.acknowledgedEventIds.add(entry.eventId);
   }
-  enforceCaps(preferredRunId) {
-    const lossCountByRunId = /* @__PURE__ */ new Map();
-    const lossConversationByRunId = /* @__PURE__ */ new Map();
-    const terminalCondensedRunIds = /* @__PURE__ */ new Set();
-    const runIds = preferredRunId ? [preferredRunId] : [...new Set(this.entries.map((entry) => entry.runId))];
+  enforceRetentionPolicy(preferredRunId, pruneRunHeartbeats = true) {
+    const droppedHeartbeatsByRunId = /* @__PURE__ */ new Map();
+    const runIds = pruneRunHeartbeats ? preferredRunId ? [preferredRunId] : [...new Set(this.entries.map((entry) => entry.runId))] : [];
     for (const runId of runIds) {
-      while (this.entries.filter((entry) => entry.runId === runId && this.isDroppable(entry)).length > this.maxIntermediateEventsPerRun) {
-        const drop = this.pickDropCandidate((entry) => entry.runId === runId);
-        if (!drop) break;
-        this.dropEntry(drop);
-        lossCountByRunId.set(runId, (lossCountByRunId.get(runId) ?? 0) + 1);
-        lossConversationByRunId.set(runId, drop.conversationId);
-      }
-    }
-    while (this.pendingBytes > this.maxEncryptedBytes) {
-      const drop = this.pickDropCandidate(() => true);
-      if (drop) {
-        this.dropEntry(drop);
-        lossCountByRunId.set(drop.runId, (lossCountByRunId.get(drop.runId) ?? 0) + 1);
-        lossConversationByRunId.set(drop.runId, drop.conversationId);
-        continue;
-      }
-      const terminal = this.entries.find(
-        (entry) => entry.eventId !== this.inFlightEventId && !entry.explicitSource && isTerminal(entry.event) && !entry.terminalCondensed
+      const heartbeats = this.entries.filter(
+        (entry) => entry.runId === runId && this.isDroppableHeartbeat(entry)
       );
-      if (!terminal) break;
-      this.pendingBytes -= estimateEntryBytes(terminal);
-      terminal.event = condenseTerminalEvent(terminal.event);
-      terminal.terminalCondensed = true;
-      this.pendingBytes += estimateEntryBytes(terminal);
-      if (this.writer.hasQueued(terminal.eventId)) {
-        this.rewriteQueued(terminal);
-      } else {
-        this.writer.enqueue(this.toRecord(terminal), true);
+      const excessHeartbeats = heartbeats.slice(
+        0,
+        Math.max(0, heartbeats.length - this.maxIntermediateEventsPerRun)
+      );
+      for (const drop of excessHeartbeats) {
+        this.dropEntry(drop);
+        droppedHeartbeatsByRunId.set(runId, (droppedHeartbeatsByRunId.get(runId) ?? 0) + 1);
       }
-      terminalCondensedRunIds.add(terminal.runId);
-    }
-    for (const runId of /* @__PURE__ */ new Set([...lossCountByRunId.keys(), ...terminalCondensedRunIds])) {
-      this.ensureCondensationMarker(runId, lossConversationByRunId.get(runId));
     }
     while (this.pendingBytes > this.maxEncryptedBytes) {
-      const drop = this.pickDropCandidate(() => true);
+      const drop = this.pickHeartbeatDropCandidate(() => true);
       if (!drop) break;
       this.dropEntry(drop);
-      lossCountByRunId.set(drop.runId, (lossCountByRunId.get(drop.runId) ?? 0) + 1);
-      lossConversationByRunId.set(drop.runId, drop.conversationId);
-      this.ensureCondensationMarker(drop.runId, drop.conversationId);
-    }
-    for (const [runId, count] of lossCountByRunId) {
-      this.pushLog(
-        `event_outbox_quota run=${runId} dropped_nonessential=${count} max_encrypted_bytes=${this.maxEncryptedBytes}`
-      );
+      droppedHeartbeatsByRunId.set(drop.runId, (droppedHeartbeatsByRunId.get(drop.runId) ?? 0) + 1);
     }
-    for (const runId of terminalCondensedRunIds) {
+    for (const [runId, count] of droppedHeartbeatsByRunId) {
       this.pushLog(
-        `event_outbox_terminal_condensed run=${runId} max_encrypted_bytes=${this.maxEncryptedBytes}`
+        `event_outbox_heartbeat_pruned run=${runId} count=${count} max_encrypted_bytes=${this.maxEncryptedBytes}`
       );
     }
-    if (this.pendingBytes > this.maxEncryptedBytes) {
+    if (this.pendingBytes > this.maxEncryptedBytes && !this.highWaterMarkLogged) {
+      this.highWaterMarkLogged = true;
       this.pushLog(
-        `event_outbox_terminal_reserve_exceeded bytes=${this.pendingBytes} max_encrypted_bytes=${this.maxEncryptedBytes}`
+        `event_outbox_high_watermark bytes=${this.pendingBytes} pending_entries=${this.entries.length} max_encrypted_bytes=${this.maxEncryptedBytes}`
       );
     }
-    if (lossCountByRunId.size > 0 || terminalCondensedRunIds.size > 0) {
-      this.persistAckState();
-    }
+    if (this.pendingBytes <= this.maxEncryptedBytes) this.highWaterMarkLogged = false;
+    if (droppedHeartbeatsByRunId.size > 0) this.persistAckState();
+  }
+  scheduleDelivery(socket, delayMs) {
+    if (this.deliveryTimer) return;
+    this.deliveryTimer = setTimeout(() => {
+      this.deliveryTimer = null;
+      this.flush(socket);
+    }, delayMs);
+    this.deliveryTimer.unref?.();
   }
   persistAckState() {
     try {
@@ -48401,6 +48302,10 @@ var EncryptedEventOutbox = class {
     if (this.retryTimer) clearTimeout(this.retryTimer);
     this.retryTimer = null;
   }
+  clearDeliveryTimer() {
+    if (this.deliveryTimer) clearTimeout(this.deliveryTimer);
+    this.deliveryTimer = null;
+  }
 };
 
 // src/provider-auth-preflight.ts
@@ -79212,7 +79117,11 @@ async function startDaemon(args) {
     eventOutbox = new EncryptedEventOutbox(
       `${configPath}.event-outbox.enc`,
       eventSpoolKey,
-      pushLog
+      pushLog,
+      // Keep replay below the legacy runtime-socket ceiling during rolling
+      // upgrades. Stable acknowledgements still make the stream eventually
+      // consistent; pacing only trades catch-up latency for connection health.
+      { deliveryIntervalMs: 50 }
     );
     nativeHookInbox = new EncryptedNativeHookInbox(nativeHookInboxPath(configPath), eventSpoolKey, {
       recoverClaims: true,
@@ -95651,7 +95560,7 @@ var SandboxEventDispatcher = class {
   get active() {
     return this.outbox !== void 0 && this.outboxSocket !== void 0;
   }
-  /** Set the run id used to bucket per-run caps / terminal condensation. */
+  /** Set the run id used for fair replay and per-run heartbeat pruning. */
   setRunId(runId) {
     this.currentRunId = runId;
   }

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Alan Sandbox Agent
+ * Runs inside E2B sandbox, connects to WS server, executes CoreAgent.
+ */
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/index.js

@@ -0,0 +1,209 @@
+/**
+ * Alan Sandbox Agent
+ * Runs inside E2B sandbox, connects to WS server, executes CoreAgent.
+ */
+import { spawnSync } from "node:child_process";
+import { getDaemonCliEnvironment } from "./cli-executable.js";
+import { HELP_TEXT, resolveCommand } from "./cli-help.js";
+import { loginWithDeviceCode, logoutDaemon, printDoctor, printScanModels, printStatus, recoverDaemonConnection, revokeRuntimeToken, rotateRuntimeToken, runDaemon, setupDaemon, stopDaemon, } from "./daemon.js";
+import { AgentLifecycleLogger, lifecycleContextFromEnv } from "./lifecycle-logger.js";
+import { decodeResumeFallbackContext, RESUME_FALLBACK_CONTEXT_ENV } from "./resume-fallback-env.js";
+import { runSandbox } from "./sandbox.js";
+import { installDaemonService, printDaemonServiceStatus, uninstallDaemonService, } from "./service-manager.js";
+import { AGENT_VERSION } from "./version.js";
+/**
+ * Report the commit identity this session will actually use.
+ *
+ * Two independent carriers have to agree: the GIT_AUTHOR / GIT_COMMITTER env
+ * injected on this process, and the sandbox's git config. Neither is verified
+ * anywhere else — a mismatch or a missing pair previously surfaced only as a
+ * mis-attributed commit, discovered after the fact. `getDaemonCliEnvironment()`
+ * is the same env the CLI child receives, so this reads what the CLI will read.
+ */
+function logEffectiveGitIdentity(lifecycle, projectPath) {
+    const readConfig = (key) => {
+        try {
+            const result = spawnSync("git", ["config", "--get", key], {
+                cwd: projectPath,
+                env: getDaemonCliEnvironment(),
+                encoding: "utf8",
+                timeout: 5000,
+            });
+            const value = result.status === 0 ? result.stdout.trim() : "";
+            return value || null;
+        }
+        catch {
+            return null;
+        }
+    };
+    const envName = process.env.GIT_AUTHOR_NAME || null;
+    const envEmail = process.env.GIT_AUTHOR_EMAIL || null;
+    const configName = readConfig("user.name");
+    const configEmail = readConfig("user.email");
+    const payload = {
+        projectPath,
+        envAuthorName: envName,
+        envAuthorEmail: envEmail,
+        configUserName: configName,
+        configUserEmail: configEmail,
+    };
+    if (!envEmail && !configEmail) {
+        lifecycle.error("sandbox_agent_git_identity_missing", payload);
+        return;
+    }
+    if (envEmail && configEmail && envEmail !== configEmail) {
+        lifecycle.error("sandbox_agent_git_identity_mismatch", payload);
+        return;
+    }
+    lifecycle.info("sandbox_agent_git_identity", payload);
+}
+async function runSessionFromEnv() {
+    const wsUrl = process.env.ALAN_WS_URL;
+    const sessionId = process.env.ALAN_SESSION_ID;
+    const taskId = process.env.ALAN_TASK_ID;
+    const sessionToken = process.env.ALAN_SESSION_TOKEN;
+    const task = process.env.ALAN_TASK;
+    const teamId = process.env.ALAN_TEAM_ID || undefined;
+    const projectPath = process.env.ALAN_PROJECT_PATH || "/home/user/workspace";
+    const backendKind = process.env.ALAN_BACKEND_KIND || "codex_app_server";
+    const agentId = process.env.ALAN_AGENT_ID || undefined;
+    const agentPrompt = process.env.ALAN_AGENT_PROMPT || undefined;
+    const mode = process.env.ALAN_MODE || "agent";
+    const model = process.env.ALAN_MODEL;
+    const contextWindow = process.env.ALAN_CONTEXT_WINDOW || undefined;
+    const effortLevel = process.env.ALAN_EFFORT_LEVEL || undefined;
+    const providerSessionId = process.env.ALAN_PROVIDER_SESSION_ID || undefined;
+    // Compact recent-transcript for the resume-triggered first turn. Base64 so the
+    // multi-line block survives every provider env-injection path (E2B real env map
+    // and Daytona `su -c` shell interpolation) unmangled — mirrors ALAN_ENV_FILE_B64.
+    const resumeFallbackContext = decodeResumeFallbackContext(process.env[RESUME_FALLBACK_CONTEXT_ENV]);
+    const workflowId = process.env.ALAN_WORKFLOW_ID || undefined;
+    const workflowExecutionId = process.env.ALAN_WORKFLOW_EXECUTION_ID || undefined;
+    const sandboxId = process.env.ALAN_SANDBOX_ID || undefined;
+    const provider = process.env.ALAN_SANDBOX_PROVIDER || undefined;
+    const runId = process.env.ALAN_RUN_ID || undefined;
+    const lifecycle = new AgentLifecycleLogger(lifecycleContextFromEnv(process.env));
+    if (!wsUrl || !sessionId || !taskId || !sessionToken || task == null) {
+        lifecycle.error("sandbox_agent_bootstrap_missing_env", {
+            hasWsUrl: Boolean(wsUrl),
+            hasConversationId: Boolean(sessionId),
+            hasTaskId: Boolean(taskId),
+            hasSessionToken: Boolean(sessionToken),
+            hasTask: task != null,
+        });
+        throw new Error("run-session is an internal Alan sandbox/session command and must be launched by Alan with session env vars. " +
+            "Missing required env vars: ALAN_WS_URL, ALAN_SESSION_ID, ALAN_TASK_ID, ALAN_SESSION_TOKEN, ALAN_TASK");
+    }
+    lifecycle.info("sandbox_agent_process_start", {
+        sessionId,
+        projectPath,
+        agentId,
+        mode,
+        model,
+    });
+    logEffectiveGitIdentity(lifecycle, projectPath);
+    await runSandbox({
+        wsUrl,
+        sessionId,
+        taskId,
+        sessionToken,
+        task,
+        teamId,
+        projectPath,
+        backendKind,
+        agentId,
+        agentPrompt,
+        mode,
+        model,
+        contextWindow,
+        effortLevel,
+        providerSessionId,
+        resumeFallbackContext,
+        workflowId,
+        workflowExecutionId,
+        sandboxId,
+        provider,
+        runId,
+        lifecycle,
+        maxIterations: 50,
+    });
+}
+async function main() {
+    if (process.argv.includes("--version")) {
+        process.stdout.write(`${AGENT_VERSION}\n`);
+        return;
+    }
+    const { command, commandArgs } = resolveCommand(process.argv.slice(2), process.env);
+    if (command === "help") {
+        process.stdout.write(HELP_TEXT);
+        return;
+    }
+    if (command === "setup") {
+        await setupDaemon(commandArgs);
+        return;
+    }
+    if (command === "login") {
+        await loginWithDeviceCode(commandArgs);
+        return;
+    }
+    if (command === "daemon") {
+        await runDaemon(commandArgs);
+        return;
+    }
+    if (command === "service" && commandArgs[0] === "install") {
+        installDaemonService(commandArgs.slice(1));
+        return;
+    }
+    if (command === "service" && commandArgs[0] === "uninstall") {
+        uninstallDaemonService(commandArgs.slice(1));
+        return;
+    }
+    if (command === "service" && commandArgs[0] === "status") {
+        printDaemonServiceStatus(commandArgs.slice(1));
+        return;
+    }
+    if (command === "stop") {
+        await stopDaemon(commandArgs);
+        return;
+    }
+    if (command === "recover") {
+        await recoverDaemonConnection(commandArgs);
+        return;
+    }
+    if (command === "status") {
+        await printStatus();
+        return;
+    }
+    if (command === "doctor") {
+        await printDoctor(commandArgs);
+        return;
+    }
+    if (command === "scan-models") {
+        await printScanModels(commandArgs);
+        return;
+    }
+    if (command === "token" && commandArgs[0] === "rotate") {
+        await rotateRuntimeToken(commandArgs.slice(1));
+        return;
+    }
+    if (command === "token" && commandArgs[0] === "revoke") {
+        await revokeRuntimeToken(commandArgs.slice(1));
+        return;
+    }
+    if (command === "logout") {
+        await logoutDaemon();
+        return;
+    }
+    if (command === "run-session") {
+        await runSessionFromEnv();
+        return;
+    }
+    throw new Error(`Unknown command: ${command}\n\n${HELP_TEXT}`);
+}
+main().catch((error) => {
+    new AgentLifecycleLogger(lifecycleContextFromEnv(process.env)).error("sandbox_agent_fatal", {
+        error: error instanceof Error ? error : new Error(String(error)),
+    });
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EACL,mBAAmB,EACnB,YAAY,EACZ,WAAW,EACX,eAAe,EACf,WAAW,EACX,uBAAuB,EACvB,kBAAkB,EAClB,kBAAkB,EAClB,SAAS,EACT,WAAW,EACX,UAAU,GACX,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AACtF,OAAO,EAAE,2BAA2B,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AACpG,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EACL,oBAAoB,EACpB,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C;;;;;;;;GAQG;AACH,SAAS,uBAAuB,CAAC,SAA+B,EAAE,WAAmB;IACnF,MAAM,UAAU,GAAG,CAAC,GAAW,EAAiB,EAAE;QAChD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE;gBACxD,GAAG,EAAE,WAAW;gBAChB,GAAG,EAAE,uBAAuB,EAAE;gBAC9B,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,OAAO,KAAK,IAAI,IAAI,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC;IACpD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,IAAI,CAAC;IACtD,MAAM,UAAU,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;IAE7C,MAAM,OAAO,GAAG;QACd,WAAW;QACX,aAAa,EAAE,OAAO;QACtB,cAAc,EAAE,QAAQ;QACxB,cAAc,EAAE,UAAU;QAC1B,eAAe,EAAE,WAAW;KAC7B,CAAC;IAEF,IAAI,CAAC,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;QAC9B,SAAS,CAAC,KAAK,CAAC,oCAAoC,EAAE,OAAO,CAAC,CAAC;QAC/D,OAAO;IACT,CAAC;IACD,IAAI,QAAQ,IAAI,WAAW,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QACxD,SAAS,CAAC,KAAK,CAAC,qCAAqC,EAAE,OAAO,CAAC,CAAC;QAChE,OAAO;IACT,CAAC;IACD,SAAS,CAAC,IAAI,CAAC,4BAA4B,EAAE,OAAO,CAAC,CAAC;AACxD,CAAC;AAED,KAAK,UAAU,iBAAiB;IAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IACtC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IACxC,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACpD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;IACnC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,SAAS,CAAC;IACrD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,sBAAsB,CAAC;IAC5E,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,kBAAkB,CAAC;IACxE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,SAAS,CAAC;IACvD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,SAAS,CAAC;IAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC;IAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IACrC,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,SAAS,CAAC;IACnE,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,SAAS,CAAC;IAC/D,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,SAAS,CAAC;IAC5E,+EAA+E;IAC/E,gFAAgF;IAChF,kFAAkF;IAClF,MAAM,qBAAqB,GAAG,2BAA2B,CACvD,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CACzC,CAAC;IACF,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,SAAS,CAAC;IAC7D,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,SAAS,CAAC;IAChF,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,SAAS,CAAC;IAC3D,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,SAAS,CAAC;IAChE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,SAAS,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,oBAAoB,CAAC,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAEjF,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;QACrE,SAAS,CAAC,KAAK,CAAC,qCAAqC,EAAE;YACrD,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC;YACxB,iBAAiB,EAAE,OAAO,CAAC,SAAS,CAAC;YACrC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC;YAC1B,eAAe,EAAE,OAAO,CAAC,YAAY,CAAC;YACtC,OAAO,EAAE,IAAI,IAAI,IAAI;SACtB,CAAC,CAAC;QACH,MAAM,IAAI,KAAK,CACb,8GAA8G;YAC5G,sGAAsG,CACzG,CAAC;IACJ,CAAC;IAED,SAAS,CAAC,IAAI,CAAC,6BAA6B,EAAE;QAC5C,SAAS;QACT,WAAW;QACX,OAAO;QACP,IAAI;QACJ,KAAK;KACN,CAAC,CAAC;IAEH,uBAAuB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAEhD,MAAM,UAAU,CAAC;QACf,KAAK;QACL,SAAS;QACT,MAAM;QACN,YAAY;QACZ,IAAI;QACJ,MAAM;QACN,WAAW;QACX,WAAW;QACX,OAAO;QACP,WAAW;QACX,IAAI;QACJ,KAAK;QACL,aAAa;QACb,WAAW;QACX,iBAAiB;QACjB,qBAAqB;QACrB,UAAU;QACV,mBAAmB;QACnB,SAAS;QACT,QAAQ;QACR,KAAK;QACL,SAAS;QACT,aAAa,EAAE,EAAE;KAClB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,aAAa,IAAI,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAEpF,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAChC,OAAO;IACT,CAAC;IAED,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC;QAC/B,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACvC,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,SAAS,CAAC,WAAW,CAAC,CAAC;QAC7B,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QAC1D,oBAAoB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;QAC5D,sBAAsB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QACzD,wBAAwB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC;QAC9B,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,uBAAuB,CAAC,WAAW,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,WAAW,EAAE,CAAC;QACpB,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC;QAC/B,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;QAC9B,MAAM,eAAe,CAAC,WAAW,CAAC,CAAC;QACnC,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,OAAO,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QACvD,MAAM,kBAAkB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,OAAO,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QACvD,MAAM,kBAAkB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,YAAY,EAAE,CAAC;QACrB,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;QAC9B,MAAM,iBAAiB,EAAE,CAAC;QAC1B,OAAO;IACT,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,OAAO,SAAS,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,IAAI,oBAAoB,CAAC,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,EAAE;QAC1F,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;KACjE,CAAC,CAAC;IACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/lifecycle-logger.d.ts

@@ -0,0 +1,25 @@
+export interface AgentLifecycleContext {
+    taskId?: string;
+    conversationId?: string;
+    runId?: string;
+    sandboxId?: string;
+    provider?: string;
+    backendKind?: string;
+    agentVersion?: string;
+}
+export type AgentLifecycleLevel = "debug" | "info" | "warn" | "error";
+type AgentLifecycleFields = Record<string, unknown>;
+export declare class AgentLifecycleLogger {
+    private context;
+    constructor(context?: AgentLifecycleContext);
+    setContext(context: AgentLifecycleContext): void;
+    child(context: AgentLifecycleContext): AgentLifecycleLogger;
+    debug(event: string, fields?: AgentLifecycleFields): void;
+    info(event: string, fields?: AgentLifecycleFields): void;
+    warn(event: string, fields?: AgentLifecycleFields): void;
+    error(event: string, fields?: AgentLifecycleFields): void;
+    private log;
+}
+export declare function lifecycleContextFromEnv(env: NodeJS.ProcessEnv): AgentLifecycleContext;
+export {};
+//# sourceMappingURL=lifecycle-logger.d.ts.map

package/dist/lifecycle-logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle-logger.d.ts","sourceRoot":"","sources":["../src/lifecycle-logger.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,mBAAmB,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAEtE,KAAK,oBAAoB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEpD,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,OAAO,CAAwB;gBAE3B,OAAO,GAAE,qBAA0B;IAI/C,UAAU,CAAC,OAAO,EAAE,qBAAqB,GAAG,IAAI;IAIhD,KAAK,CAAC,OAAO,EAAE,qBAAqB,GAAG,oBAAoB;IAI3D,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,GAAE,oBAAyB,GAAG,IAAI;IAI7D,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,GAAE,oBAAyB,GAAG,IAAI;IAI5D,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,GAAE,oBAAyB,GAAG,IAAI;IAI5D,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,GAAE,oBAAyB,GAAG,IAAI;IAI7D,OAAO,CAAC,GAAG;CAWZ;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,qBAAqB,CAUrF"}