@aigne/agent-runtime 1.12.0-beta.5

package/dist/agent-runners/ash-runner.cjs

@@ -0,0 +1,272 @@
+const require_index = require('../providers/basic/ash/dist/index.cjs');
+let ufo = require("ufo");
+let _aigne_ash = require("@aigne/ash");
+
+//#region src/agent-runners/ash-runner.ts
+const MAX_FANOUT_BRANCHES = 100;
+function normalizeToolEntries(manifest) {
+	return (manifest.tools ?? []).map((t) => {
+		if (typeof t === "string") return {
+			path: t,
+			ops: ["read", "exec"]
+		};
+		return {
+			path: t.path,
+			ops: t.ops ?? ["read", "exec"],
+			maxDepth: t.maxDepth
+		};
+	});
+}
+function collectActionPaths(source) {
+	const paths = [];
+	for (const m of source.matchAll(/\baction\s+(\/[^\s{]+)/g)) paths.push(m[1]);
+	return paths;
+}
+function countFanoutBranches(source) {
+	let count = 0;
+	let depth = 0;
+	let inFanout = false;
+	const tokens = source.split(/(\bfanout\b|\{|\}|,)/);
+	for (const token of tokens) if (token === "fanout") inFanout = true;
+	else if (token === "{" && inFanout) {
+		depth++;
+		if (depth === 1) count = 1;
+	} else if (token === "}" && inFanout && depth > 0) {
+		depth--;
+		if (depth === 0) inFanout = false;
+	} else if (token === "," && inFanout && depth === 1) count++;
+	return count;
+}
+async function runAshAgent(opts) {
+	const { afs, manifest, input, session, mountPath } = opts;
+	const inputKey = manifest.inputKey ?? "message";
+	const outputKey = manifest.outputKey;
+	const scriptFile = manifest.script ?? "pipeline.ash";
+	const candidatePaths = [(0, ufo.joinURL)(mountPath, scriptFile), (0, ufo.joinURL)("/packages", scriptFile)];
+	let scriptSource;
+	let lastPathTried = candidatePaths[0];
+	for (const candidate of candidatePaths) {
+		lastPathTried = candidate;
+		try {
+			const raw = await afs.read(candidate);
+			const content = typeof raw === "string" ? raw : String(raw?.data?.content ?? raw?.data ?? raw ?? "");
+			if (content) {
+				scriptSource = content;
+				break;
+			}
+		} catch {}
+	}
+	if (!scriptSource) return {
+		success: false,
+		error: {
+			code: "SCRIPT_NOT_FOUND",
+			message: `Cannot read script at ${lastPathTried}`
+		}
+	};
+	const childTools = normalizeToolEntries(manifest);
+	const scope = opts.afs.scope;
+	const tools = scope ? [...scope.allowedTools] : childTools;
+	const actionPaths = collectActionPaths(scriptSource);
+	for (const actionPath of actionPaths) {
+		if (actionPath.includes("${")) continue;
+		const check = require_index.validateActionPath(actionPath, tools);
+		if (!check.allowed) return {
+			success: false,
+			error: {
+				code: check.code,
+				message: check.reason,
+				path: check.path
+			}
+		};
+	}
+	const branchCount = countFanoutBranches(scriptSource);
+	if (branchCount > MAX_FANOUT_BRANCHES) return {
+		success: false,
+		error: {
+			code: "FANOUT_LIMIT",
+			message: `Fanout has ${branchCount} branches, exceeding limit of ${MAX_FANOUT_BRANCHES}`
+		}
+	};
+	let compiled;
+	try {
+		compiled = (0, _aigne_ash.compileSource)(scriptSource);
+	} catch (e) {
+		return {
+			success: false,
+			error: {
+				code: "ASH_COMPILE_ERROR",
+				message: e.message ?? String(e)
+			}
+		};
+	}
+	const errors = compiled.diagnostics.filter((d) => !d.severity || d.severity === "error");
+	if (errors.length > 0) {
+		const traversal = errors.find((d) => /path traversal/i.test(d.message ?? ""));
+		if (traversal) return {
+			success: false,
+			error: {
+				code: "PATH_TRAVERSAL",
+				message: traversal.message
+			}
+		};
+		return {
+			success: false,
+			error: {
+				code: "ASH_COMPILE_ERROR",
+				message: errors.map((d) => `${d.code}: ${d.message}`).join("; ")
+			}
+		};
+	}
+	if (!compiled.program) return {
+		success: false,
+		error: {
+			code: "ASH_COMPILE_ERROR",
+			message: "Compilation produced no program"
+		}
+	};
+	const program = compiled.program;
+	const inputValue = input[inputKey];
+	if (inputValue !== void 0) {
+		if (typeof inputValue === "string" || typeof inputValue === "number") program.params.set("input", inputValue);
+	}
+	if (typeof inputValue === "object" && inputValue !== null) {
+		for (const [k, v] of Object.entries(inputValue)) if (typeof v === "string" || typeof v === "number") program.params.set(`input.${k}`, v);
+		else if (Array.isArray(v)) program.params.set(`input.${k}`, v);
+	}
+	const writeCollector = {};
+	let lastWriteData = null;
+	const resolveReadPath = (path) => {
+		if (!path.startsWith("./") && !path.startsWith("../")) return path;
+		const resolved = (0, ufo.joinURL)(mountPath, path);
+		const mountNormalized = mountPath.endsWith("/") ? mountPath : `${mountPath}/`;
+		if (resolved !== mountPath && !resolved.startsWith(mountNormalized)) throw new Error(`PATH_TRAVERSAL: ${path} escapes mountPath ${mountPath}`);
+		return resolved;
+	};
+	const ctx = {
+		world: {
+			read: async (path) => {
+				const resolved = resolveReadPath(path);
+				const check = require_index.validateToolCall(resolved, "read", tools);
+				if (!check.allowed) throw new Error(`TOOL_WHITELIST_VIOLATION: ${check.reason}`);
+				const data = await afs.read(resolved);
+				if (Array.isArray(data)) return data;
+				if (data && typeof data === "object" && "list" in data) return data.list ?? [];
+				if (data && typeof data === "object" && "data" in data) {
+					const inner = data.data;
+					if (Array.isArray(inner)) return inner;
+					return inner != null ? [inner] : [];
+				}
+				return data != null ? [data] : [];
+			},
+			write: (path, data) => {
+				writeCollector[path] = data;
+				lastWriteData = data;
+				if (!path.startsWith("/output/") && !path.startsWith("$")) {
+					const check = require_index.validateToolCall(path, "write", tools);
+					if (!check.allowed) throw new Error(`TOOL_WHITELIST_VIOLATION: ${check.reason}`);
+					afs.write?.(path, { content: data }).catch(() => {});
+				}
+			},
+			publish: () => {},
+			exec: async (path, _input, params) => {
+				const check = require_index.validateActionPath(path, tools);
+				if (!check.allowed) throw new Error(`TOOL_WHITELIST_VIOLATION: ${check.reason}`);
+				const result = await afs.exec(path, params ?? {}, {});
+				if (result == null) return [];
+				if (typeof result === "object" && "data" in result) {
+					const d = result.data;
+					if (Array.isArray(d)) return d;
+					return d != null ? [d] : [];
+				}
+				return Array.isArray(result) ? result : [result];
+			}
+		},
+		caps: new Set(["*"]),
+		logger: { log: (_stage, _action, _detail) => {} }
+	};
+	let totalSteps = 0;
+	try {
+		for (const job of program.jobs) {
+			if (program.routeTargets?.has(job.name)) continue;
+			const result = await job.execute(ctx);
+			totalSteps += result.recordCount || 1;
+			if (result.status === "error") {
+				const whitelist = result.errors.find((message) => message.startsWith("TOOL_WHITELIST_VIOLATION"));
+				if (whitelist) return {
+					success: false,
+					error: {
+						code: "TOOL_WHITELIST_VIOLATION",
+						message: whitelist
+					},
+					_meta: {
+						pipeline_steps: totalSteps,
+						session
+					}
+				};
+				return {
+					success: false,
+					error: {
+						code: "ASH_RUNTIME_ERROR",
+						message: result.errors.join("; ")
+					},
+					_meta: {
+						pipeline_steps: totalSteps,
+						session
+					}
+				};
+			}
+		}
+	} catch (e) {
+		const message = e?.message ?? String(e);
+		if (typeof message === "string" && message.startsWith("PATH_TRAVERSAL")) return {
+			success: false,
+			error: {
+				code: "PATH_TRAVERSAL",
+				message
+			},
+			_meta: {
+				pipeline_steps: totalSteps,
+				session
+			}
+		};
+		if (typeof message === "string" && message.startsWith("TOOL_WHITELIST_VIOLATION")) return {
+			success: false,
+			error: {
+				code: "TOOL_WHITELIST_VIOLATION",
+				message
+			},
+			_meta: {
+				pipeline_steps: totalSteps,
+				session
+			}
+		};
+		return {
+			success: false,
+			error: {
+				code: "ASH_RUNTIME_ERROR",
+				message
+			},
+			_meta: {
+				pipeline_steps: totalSteps,
+				session
+			}
+		};
+	}
+	let finalData;
+	if (outputKey && writeCollector[(0, ufo.joinURL)("/output", outputKey)]) finalData = writeCollector[(0, ufo.joinURL)("/output", outputKey)];
+	else if (lastWriteData != null) finalData = lastWriteData;
+	else finalData = null;
+	const ashResult = {
+		success: true,
+		data: { result: finalData },
+		_meta: {
+			pipeline_steps: totalSteps,
+			session
+		}
+	};
+	if (outputKey && finalData != null) ashResult.result = { [outputKey]: finalData };
+	return ashResult;
+}
+
+//#endregion
+exports.runAshAgent = runAshAgent;

package/dist/agent-runners/ash-runner.d.cts

@@ -0,0 +1,30 @@
+import { AFSRoot, AgentManifest } from "@aigne/afs";
+
+//#region src/agent-runners/ash-runner.d.ts
+interface AshRunnerInput {
+  afs: AFSRoot;
+  manifest: AgentManifest;
+  input: Record<string, unknown>;
+  session?: string;
+  parentSession?: string;
+  chain?: string[];
+  mountPath: string;
+}
+interface AshRunnerResult {
+  success: boolean;
+  data?: Record<string, unknown>;
+  result?: Record<string, unknown>;
+  error?: {
+    code: string;
+    message: string;
+    path?: string;
+  };
+  _meta?: {
+    pipeline_steps: number;
+    session?: string;
+  };
+}
+declare function runAshAgent(opts: AshRunnerInput): Promise<AshRunnerResult>;
+//#endregion
+export { AshRunnerInput, AshRunnerResult, runAshAgent };
+//# sourceMappingURL=ash-runner.d.cts.map

package/dist/agent-runners/ash-runner.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ash-runner.d.cts","names":[],"sources":["../../src/agent-runners/ash-runner.ts"],"mappings":";;;UAWiB,cAAA;EACf,GAAA,EAAK,OAAA;EACL,QAAA,EAAU,aAAA;EACV,KAAA,EAAO,MAAA;EACP,OAAA;EACA,aAAA;EACA,KAAA;EACA,SAAA;AAAA;AAAA,UAGe,eAAA;EACf,OAAA;EACA,IAAA,GAAO,MAAA;EACP,MAAA,GAAS,MAAA;EACT,KAAA;IAAU,IAAA;IAAc,OAAA;IAAiB,IAAA;EAAA;EACzC,KAAA;IACE,cAAA;IACA,OAAA;EAAA;AAAA;AAAA,iBA4CkB,WAAA,CAAY,IAAA,EAAM,cAAA,GAAiB,OAAA,CAAQ,eAAA"}

package/dist/agent-runners/ash-runner.d.mts

@@ -0,0 +1,30 @@
+import { AFSRoot, AgentManifest } from "@aigne/afs";
+
+//#region src/agent-runners/ash-runner.d.ts
+interface AshRunnerInput {
+  afs: AFSRoot;
+  manifest: AgentManifest;
+  input: Record<string, unknown>;
+  session?: string;
+  parentSession?: string;
+  chain?: string[];
+  mountPath: string;
+}
+interface AshRunnerResult {
+  success: boolean;
+  data?: Record<string, unknown>;
+  result?: Record<string, unknown>;
+  error?: {
+    code: string;
+    message: string;
+    path?: string;
+  };
+  _meta?: {
+    pipeline_steps: number;
+    session?: string;
+  };
+}
+declare function runAshAgent(opts: AshRunnerInput): Promise<AshRunnerResult>;
+//#endregion
+export { AshRunnerInput, AshRunnerResult, runAshAgent };
+//# sourceMappingURL=ash-runner.d.mts.map

package/dist/agent-runners/ash-runner.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ash-runner.d.mts","names":[],"sources":["../../src/agent-runners/ash-runner.ts"],"mappings":";;;UAWiB,cAAA;EACf,GAAA,EAAK,OAAA;EACL,QAAA,EAAU,aAAA;EACV,KAAA,EAAO,MAAA;EACP,OAAA;EACA,aAAA;EACA,KAAA;EACA,SAAA;AAAA;AAAA,UAGe,eAAA;EACf,OAAA;EACA,IAAA,GAAO,MAAA;EACP,MAAA,GAAS,MAAA;EACT,KAAA;IAAU,IAAA;IAAc,OAAA;IAAiB,IAAA;EAAA;EACzC,KAAA;IACE,cAAA;IACA,OAAA;EAAA;AAAA;AAAA,iBA4CkB,WAAA,CAAY,IAAA,EAAM,cAAA,GAAiB,OAAA,CAAQ,eAAA"}

package/dist/agent-runners/ash-runner.mjs

@@ -0,0 +1,273 @@
+import { validateActionPath, validateToolCall } from "../providers/basic/ash/dist/index.mjs";
+import { joinURL } from "ufo";
+import { compileSource } from "@aigne/ash";
+
+//#region src/agent-runners/ash-runner.ts
+const MAX_FANOUT_BRANCHES = 100;
+function normalizeToolEntries(manifest) {
+	return (manifest.tools ?? []).map((t) => {
+		if (typeof t === "string") return {
+			path: t,
+			ops: ["read", "exec"]
+		};
+		return {
+			path: t.path,
+			ops: t.ops ?? ["read", "exec"],
+			maxDepth: t.maxDepth
+		};
+	});
+}
+function collectActionPaths(source) {
+	const paths = [];
+	for (const m of source.matchAll(/\baction\s+(\/[^\s{]+)/g)) paths.push(m[1]);
+	return paths;
+}
+function countFanoutBranches(source) {
+	let count = 0;
+	let depth = 0;
+	let inFanout = false;
+	const tokens = source.split(/(\bfanout\b|\{|\}|,)/);
+	for (const token of tokens) if (token === "fanout") inFanout = true;
+	else if (token === "{" && inFanout) {
+		depth++;
+		if (depth === 1) count = 1;
+	} else if (token === "}" && inFanout && depth > 0) {
+		depth--;
+		if (depth === 0) inFanout = false;
+	} else if (token === "," && inFanout && depth === 1) count++;
+	return count;
+}
+async function runAshAgent(opts) {
+	const { afs, manifest, input, session, mountPath } = opts;
+	const inputKey = manifest.inputKey ?? "message";
+	const outputKey = manifest.outputKey;
+	const scriptFile = manifest.script ?? "pipeline.ash";
+	const candidatePaths = [joinURL(mountPath, scriptFile), joinURL("/packages", scriptFile)];
+	let scriptSource;
+	let lastPathTried = candidatePaths[0];
+	for (const candidate of candidatePaths) {
+		lastPathTried = candidate;
+		try {
+			const raw = await afs.read(candidate);
+			const content = typeof raw === "string" ? raw : String(raw?.data?.content ?? raw?.data ?? raw ?? "");
+			if (content) {
+				scriptSource = content;
+				break;
+			}
+		} catch {}
+	}
+	if (!scriptSource) return {
+		success: false,
+		error: {
+			code: "SCRIPT_NOT_FOUND",
+			message: `Cannot read script at ${lastPathTried}`
+		}
+	};
+	const childTools = normalizeToolEntries(manifest);
+	const scope = opts.afs.scope;
+	const tools = scope ? [...scope.allowedTools] : childTools;
+	const actionPaths = collectActionPaths(scriptSource);
+	for (const actionPath of actionPaths) {
+		if (actionPath.includes("${")) continue;
+		const check = validateActionPath(actionPath, tools);
+		if (!check.allowed) return {
+			success: false,
+			error: {
+				code: check.code,
+				message: check.reason,
+				path: check.path
+			}
+		};
+	}
+	const branchCount = countFanoutBranches(scriptSource);
+	if (branchCount > MAX_FANOUT_BRANCHES) return {
+		success: false,
+		error: {
+			code: "FANOUT_LIMIT",
+			message: `Fanout has ${branchCount} branches, exceeding limit of ${MAX_FANOUT_BRANCHES}`
+		}
+	};
+	let compiled;
+	try {
+		compiled = compileSource(scriptSource);
+	} catch (e) {
+		return {
+			success: false,
+			error: {
+				code: "ASH_COMPILE_ERROR",
+				message: e.message ?? String(e)
+			}
+		};
+	}
+	const errors = compiled.diagnostics.filter((d) => !d.severity || d.severity === "error");
+	if (errors.length > 0) {
+		const traversal = errors.find((d) => /path traversal/i.test(d.message ?? ""));
+		if (traversal) return {
+			success: false,
+			error: {
+				code: "PATH_TRAVERSAL",
+				message: traversal.message
+			}
+		};
+		return {
+			success: false,
+			error: {
+				code: "ASH_COMPILE_ERROR",
+				message: errors.map((d) => `${d.code}: ${d.message}`).join("; ")
+			}
+		};
+	}
+	if (!compiled.program) return {
+		success: false,
+		error: {
+			code: "ASH_COMPILE_ERROR",
+			message: "Compilation produced no program"
+		}
+	};
+	const program = compiled.program;
+	const inputValue = input[inputKey];
+	if (inputValue !== void 0) {
+		if (typeof inputValue === "string" || typeof inputValue === "number") program.params.set("input", inputValue);
+	}
+	if (typeof inputValue === "object" && inputValue !== null) {
+		for (const [k, v] of Object.entries(inputValue)) if (typeof v === "string" || typeof v === "number") program.params.set(`input.${k}`, v);
+		else if (Array.isArray(v)) program.params.set(`input.${k}`, v);
+	}
+	const writeCollector = {};
+	let lastWriteData = null;
+	const resolveReadPath = (path) => {
+		if (!path.startsWith("./") && !path.startsWith("../")) return path;
+		const resolved = joinURL(mountPath, path);
+		const mountNormalized = mountPath.endsWith("/") ? mountPath : `${mountPath}/`;
+		if (resolved !== mountPath && !resolved.startsWith(mountNormalized)) throw new Error(`PATH_TRAVERSAL: ${path} escapes mountPath ${mountPath}`);
+		return resolved;
+	};
+	const ctx = {
+		world: {
+			read: async (path) => {
+				const resolved = resolveReadPath(path);
+				const check = validateToolCall(resolved, "read", tools);
+				if (!check.allowed) throw new Error(`TOOL_WHITELIST_VIOLATION: ${check.reason}`);
+				const data = await afs.read(resolved);
+				if (Array.isArray(data)) return data;
+				if (data && typeof data === "object" && "list" in data) return data.list ?? [];
+				if (data && typeof data === "object" && "data" in data) {
+					const inner = data.data;
+					if (Array.isArray(inner)) return inner;
+					return inner != null ? [inner] : [];
+				}
+				return data != null ? [data] : [];
+			},
+			write: (path, data) => {
+				writeCollector[path] = data;
+				lastWriteData = data;
+				if (!path.startsWith("/output/") && !path.startsWith("$")) {
+					const check = validateToolCall(path, "write", tools);
+					if (!check.allowed) throw new Error(`TOOL_WHITELIST_VIOLATION: ${check.reason}`);
+					afs.write?.(path, { content: data }).catch(() => {});
+				}
+			},
+			publish: () => {},
+			exec: async (path, _input, params) => {
+				const check = validateActionPath(path, tools);
+				if (!check.allowed) throw new Error(`TOOL_WHITELIST_VIOLATION: ${check.reason}`);
+				const result = await afs.exec(path, params ?? {}, {});
+				if (result == null) return [];
+				if (typeof result === "object" && "data" in result) {
+					const d = result.data;
+					if (Array.isArray(d)) return d;
+					return d != null ? [d] : [];
+				}
+				return Array.isArray(result) ? result : [result];
+			}
+		},
+		caps: new Set(["*"]),
+		logger: { log: (_stage, _action, _detail) => {} }
+	};
+	let totalSteps = 0;
+	try {
+		for (const job of program.jobs) {
+			if (program.routeTargets?.has(job.name)) continue;
+			const result = await job.execute(ctx);
+			totalSteps += result.recordCount || 1;
+			if (result.status === "error") {
+				const whitelist = result.errors.find((message) => message.startsWith("TOOL_WHITELIST_VIOLATION"));
+				if (whitelist) return {
+					success: false,
+					error: {
+						code: "TOOL_WHITELIST_VIOLATION",
+						message: whitelist
+					},
+					_meta: {
+						pipeline_steps: totalSteps,
+						session
+					}
+				};
+				return {
+					success: false,
+					error: {
+						code: "ASH_RUNTIME_ERROR",
+						message: result.errors.join("; ")
+					},
+					_meta: {
+						pipeline_steps: totalSteps,
+						session
+					}
+				};
+			}
+		}
+	} catch (e) {
+		const message = e?.message ?? String(e);
+		if (typeof message === "string" && message.startsWith("PATH_TRAVERSAL")) return {
+			success: false,
+			error: {
+				code: "PATH_TRAVERSAL",
+				message
+			},
+			_meta: {
+				pipeline_steps: totalSteps,
+				session
+			}
+		};
+		if (typeof message === "string" && message.startsWith("TOOL_WHITELIST_VIOLATION")) return {
+			success: false,
+			error: {
+				code: "TOOL_WHITELIST_VIOLATION",
+				message
+			},
+			_meta: {
+				pipeline_steps: totalSteps,
+				session
+			}
+		};
+		return {
+			success: false,
+			error: {
+				code: "ASH_RUNTIME_ERROR",
+				message
+			},
+			_meta: {
+				pipeline_steps: totalSteps,
+				session
+			}
+		};
+	}
+	let finalData;
+	if (outputKey && writeCollector[joinURL("/output", outputKey)]) finalData = writeCollector[joinURL("/output", outputKey)];
+	else if (lastWriteData != null) finalData = lastWriteData;
+	else finalData = null;
+	const ashResult = {
+		success: true,
+		data: { result: finalData },
+		_meta: {
+			pipeline_steps: totalSteps,
+			session
+		}
+	};
+	if (outputKey && finalData != null) ashResult.result = { [outputKey]: finalData };
+	return ashResult;
+}
+
+//#endregion
+export { runAshAgent };
+//# sourceMappingURL=ash-runner.mjs.map

package/dist/agent-runners/ash-runner.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ash-runner.mjs","names":[],"sources":["../../src/agent-runners/ash-runner.ts"],"sourcesContent":["import type { AFSRoot, AgentManifest } from \"@aigne/afs\";\nimport { type ToolEntry, validateActionPath, validateToolCall } from \"@aigne/afs-ash\";\nimport {\n  type CompileResult,\n  compileSource,\n  type JobContext,\n  type WorldInterface,\n} from \"@aigne/ash\";\nimport { joinURL } from \"ufo\";\nimport type { AgentScope } from \"../program/scoped-afs.js\";\n\nexport interface AshRunnerInput {\n  afs: AFSRoot;\n  manifest: AgentManifest;\n  input: Record<string, unknown>;\n  session?: string;\n  parentSession?: string;\n  chain?: string[];\n  mountPath: string;\n}\n\nexport interface AshRunnerResult {\n  success: boolean;\n  data?: Record<string, unknown>;\n  result?: Record<string, unknown>;\n  error?: { code: string; message: string; path?: string };\n  _meta?: {\n    pipeline_steps: number;\n    session?: string;\n  };\n}\n\nconst MAX_FANOUT_BRANCHES = 100;\n\nfunction normalizeToolEntries(manifest: AgentManifest): ToolEntry[] {\n  return (manifest.tools ?? []).map((t) => {\n    if (typeof t === \"string\") return { path: t, ops: [\"read\", \"exec\"] };\n    return { path: t.path, ops: t.ops ?? [\"read\", \"exec\"], maxDepth: t.maxDepth };\n  });\n}\n\nfunction collectActionPaths(source: string): string[] {\n  const paths: string[] = [];\n  const actionRegex = /\\baction\\s+(\\/[^\\s{]+)/g;\n  for (const m of source.matchAll(actionRegex)) {\n    paths.push(m[1]!);\n  }\n  return paths;\n}\n\nfunction countFanoutBranches(source: string): number {\n  // Count comma-separated branches inside fanout { ... }\n  // Each branch is a pipeline separated by commas\n  let count = 0;\n  let depth = 0;\n  let inFanout = false;\n  const tokens = source.split(/(\\bfanout\\b|\\{|\\}|,)/);\n  for (const token of tokens) {\n    if (token === \"fanout\") inFanout = true;\n    else if (token === \"{\" && inFanout) {\n      depth++;\n      if (depth === 1) count = 1; // first branch\n    } else if (token === \"}\" && inFanout && depth > 0) {\n      depth--;\n      if (depth === 0) inFanout = false;\n    } else if (token === \",\" && inFanout && depth === 1) {\n      count++;\n    }\n  }\n  return count;\n}\n\nexport async function runAshAgent(opts: AshRunnerInput): Promise<AshRunnerResult> {\n  const { afs, manifest, input, session, mountPath } = opts;\n\n  const inputKey = manifest.inputKey ?? \"message\";\n  const outputKey = manifest.outputKey;\n  const scriptFile = manifest.script ?? \"pipeline.ash\";\n\n  // B12: Runtime AFS projects the blocklet directory at /packages; the\n  // external mountPath (/blocklets/<id>) isn't a valid internal path after\n  // activation. Try mountPath first (works in tests + pre-activation),\n  // fall back to /packages (production post-activation).\n  const candidatePaths = [joinURL(mountPath, scriptFile), joinURL(\"/packages\", scriptFile)];\n\n  let scriptSource: string | undefined;\n  let lastPathTried = candidatePaths[0]!;\n  for (const candidate of candidatePaths) {\n    lastPathTried = candidate;\n    try {\n      const raw = await afs.read!(candidate);\n      const content =\n        typeof raw === \"string\"\n          ? raw\n          : String((raw as any)?.data?.content ?? raw?.data ?? raw ?? \"\");\n      if (content) {\n        scriptSource = content;\n        break;\n      }\n    } catch {\n      // Try next candidate\n    }\n  }\n\n  if (!scriptSource) {\n    return {\n      success: false,\n      error: { code: \"SCRIPT_NOT_FOUND\", message: `Cannot read script at ${lastPathTried}` },\n    };\n  }\n\n  const childTools = normalizeToolEntries(manifest);\n  // Phase 6 — `scope.allowedTools` is the single source of truth for the\n  // whitelist. `projectForChild` already intersected parent + child tools,\n  // so the runner just reads it. Callers that bypass projection fall back\n  // to the manifest's own tools.\n  const scope = (opts.afs as AgentScope).scope;\n  const tools: ToolEntry[] = scope ? [...scope.allowedTools] : childTools;\n\n  // Pre-compile: check action paths against whitelist\n  const actionPaths = collectActionPaths(scriptSource);\n  for (const actionPath of actionPaths) {\n    if (actionPath.includes(\"${\")) continue;\n    const check = validateActionPath(actionPath, tools);\n    if (!check.allowed) {\n      return {\n        success: false,\n        error: { code: check.code!, message: check.reason!, path: check.path },\n      };\n    }\n  }\n\n  // Pre-compile: fanout branch limit\n  const branchCount = countFanoutBranches(scriptSource);\n  if (branchCount > MAX_FANOUT_BRANCHES) {\n    return {\n      success: false,\n      error: {\n        code: \"FANOUT_LIMIT\",\n        message: `Fanout has ${branchCount} branches, exceeding limit of ${MAX_FANOUT_BRANCHES}`,\n      },\n    };\n  }\n\n  // Compile\n  let compiled: CompileResult;\n  try {\n    compiled = compileSource(scriptSource);\n  } catch (e: any) {\n    return {\n      success: false,\n      error: { code: \"ASH_COMPILE_ERROR\", message: e.message ?? String(e) },\n    };\n  }\n\n  const errors = compiled.diagnostics.filter((d) => !d.severity || d.severity === \"error\");\n  if (errors.length > 0) {\n    // B12: path-traversal diagnostics (from ash type-checker's `..` rejection)\n    // surface as PATH_TRAVERSAL so consumers can distinguish them from general\n    // compile errors.\n    const traversal = errors.find((d) => /path traversal/i.test(d.message ?? \"\"));\n    if (traversal) {\n      return {\n        success: false,\n        error: { code: \"PATH_TRAVERSAL\", message: traversal.message },\n      };\n    }\n    return {\n      success: false,\n      error: {\n        code: \"ASH_COMPILE_ERROR\",\n        message: errors.map((d) => `${d.code}: ${d.message}`).join(\"; \"),\n      },\n    };\n  }\n\n  if (!compiled.program) {\n    return {\n      success: false,\n      error: { code: \"ASH_COMPILE_ERROR\", message: \"Compilation produced no program\" },\n    };\n  }\n\n  const program = compiled.program;\n\n  // Bind $input into params\n  const inputValue = input[inputKey];\n  if (inputValue !== undefined) {\n    if (typeof inputValue === \"string\" || typeof inputValue === \"number\") {\n      program.params.set(\"input\", inputValue);\n    }\n  }\n  if (typeof inputValue === \"object\" && inputValue !== null) {\n    for (const [k, v] of Object.entries(inputValue as Record<string, unknown>)) {\n      if (typeof v === \"string\" || typeof v === \"number\") {\n        program.params.set(`input.${k}`, v);\n      } else if (Array.isArray(v)) {\n        program.params.set(`input.${k}`, v as (string | number)[]);\n      }\n    }\n  }\n\n  // Write collector: captures save/tee writes for output\n  const writeCollector: Record<string, unknown[]> = {};\n  let lastWriteData: unknown[] | null = null;\n\n  // B12: Resolve blocklet-relative paths (`./foo`, `../foo`) against mountPath.\n  // Reject resolved paths that escape mountPath with a PATH_TRAVERSAL marker so\n  // caller can surface the structured error instead of a silent empty array.\n  const resolveReadPath = (path: string): string => {\n    if (!path.startsWith(\"./\") && !path.startsWith(\"../\")) return path;\n    const resolved = joinURL(mountPath, path);\n    const mountNormalized = mountPath.endsWith(\"/\") ? mountPath : `${mountPath}/`;\n    if (resolved !== mountPath && !resolved.startsWith(mountNormalized)) {\n      throw new Error(`PATH_TRAVERSAL: ${path} escapes mountPath ${mountPath}`);\n    }\n    return resolved;\n  };\n\n  const world: WorldInterface = {\n    read: async (path: string): Promise<unknown[]> => {\n      const resolved = resolveReadPath(path);\n      const check = validateToolCall(resolved, \"read\", tools);\n      if (!check.allowed) {\n        throw new Error(`TOOL_WHITELIST_VIOLATION: ${check.reason}`);\n      }\n      const data = await afs.read!(resolved);\n      if (Array.isArray(data)) return data;\n      if (data && typeof data === \"object\" && \"list\" in (data as any)) {\n        return ((data as any).list ?? []) as unknown[];\n      }\n      if (data && typeof data === \"object\" && \"data\" in (data as any)) {\n        const inner = (data as any).data;\n        if (Array.isArray(inner)) return inner;\n        return inner != null ? [inner] : [];\n      }\n      return data != null ? [data] : [];\n    },\n\n    write: (path: string, data: unknown[]): void => {\n      writeCollector[path] = data;\n      lastWriteData = data;\n      // Forward non-output writes to AFS\n      if (!path.startsWith(\"/output/\") && !path.startsWith(\"$\")) {\n        const check = validateToolCall(path, \"write\", tools);\n        if (!check.allowed) {\n          throw new Error(`TOOL_WHITELIST_VIOLATION: ${check.reason}`);\n        }\n        afs.write?.(path, { content: data } as any).catch(() => {});\n      }\n    },\n\n    publish: (): void => {},\n\n    exec: async (\n      path: string,\n      _input: unknown[],\n      params?: Record<string, unknown>,\n    ): Promise<unknown[]> => {\n      const check = validateActionPath(path, tools);\n      if (!check.allowed) {\n        throw new Error(`TOOL_WHITELIST_VIOLATION: ${check.reason}`);\n      }\n\n      const result = await afs.exec!(path, params ?? {}, {});\n      if (result == null) return [];\n      if (typeof result === \"object\" && \"data\" in result) {\n        const d = (result as any).data;\n        if (Array.isArray(d)) return d;\n        return d != null ? [d] : [];\n      }\n      return Array.isArray(result) ? result : [result];\n    },\n  };\n\n  const logger = {\n    log: (_stage: string, _action: string, _detail?: unknown) => {},\n  };\n\n  const ctx: JobContext = {\n    world,\n    caps: new Set([\"*\"]),\n    logger,\n  };\n\n  let totalSteps = 0;\n\n  try {\n    for (const job of program.jobs) {\n      if (program.routeTargets?.has(job.name)) continue;\n\n      const result = await job.execute(ctx);\n      totalSteps += result.recordCount || 1;\n\n      if (result.status === \"error\") {\n        const whitelist = result.errors.find((message) =>\n          message.startsWith(\"TOOL_WHITELIST_VIOLATION\"),\n        );\n        if (whitelist) {\n          return {\n            success: false,\n            error: { code: \"TOOL_WHITELIST_VIOLATION\", message: whitelist },\n            _meta: { pipeline_steps: totalSteps, session },\n          };\n        }\n        return {\n          success: false,\n          error: { code: \"ASH_RUNTIME_ERROR\", message: result.errors.join(\"; \") },\n          _meta: { pipeline_steps: totalSteps, session },\n        };\n      }\n    }\n  } catch (e: any) {\n    const message = e?.message ?? String(e);\n    if (typeof message === \"string\" && message.startsWith(\"PATH_TRAVERSAL\")) {\n      return {\n        success: false,\n        error: { code: \"PATH_TRAVERSAL\", message },\n        _meta: { pipeline_steps: totalSteps, session },\n      };\n    }\n    if (typeof message === \"string\" && message.startsWith(\"TOOL_WHITELIST_VIOLATION\")) {\n      return {\n        success: false,\n        error: { code: \"TOOL_WHITELIST_VIOLATION\", message },\n        _meta: { pipeline_steps: totalSteps, session },\n      };\n    }\n    return {\n      success: false,\n      error: { code: \"ASH_RUNTIME_ERROR\", message },\n      _meta: { pipeline_steps: totalSteps, session },\n    };\n  }\n\n  // Determine output data\n  let finalData: unknown;\n  if (outputKey && writeCollector[joinURL(\"/output\", outputKey)]) {\n    finalData = writeCollector[joinURL(\"/output\", outputKey)];\n  } else if (lastWriteData != null) {\n    finalData = lastWriteData;\n  } else {\n    finalData = null;\n  }\n\n  const ashResult: AshRunnerResult = {\n    success: true,\n    data: { result: finalData },\n    _meta: { pipeline_steps: totalSteps, session },\n  };\n\n  if (outputKey && finalData != null) {\n    ashResult.result = { [outputKey]: finalData };\n  }\n\n  return ashResult;\n}\n"],"mappings":";;;;;AAgCA,MAAM,sBAAsB;AAE5B,SAAS,qBAAqB,UAAsC;AAClE,SAAQ,SAAS,SAAS,EAAE,EAAE,KAAK,MAAM;AACvC,MAAI,OAAO,MAAM,SAAU,QAAO;GAAE,MAAM;GAAG,KAAK,CAAC,QAAQ,OAAO;GAAE;AACpE,SAAO;GAAE,MAAM,EAAE;GAAM,KAAK,EAAE,OAAO,CAAC,QAAQ,OAAO;GAAE,UAAU,EAAE;GAAU;GAC7E;;AAGJ,SAAS,mBAAmB,QAA0B;CACpD,MAAM,QAAkB,EAAE;AAE1B,MAAK,MAAM,KAAK,OAAO,SADH,0BACwB,CAC1C,OAAM,KAAK,EAAE,GAAI;AAEnB,QAAO;;AAGT,SAAS,oBAAoB,QAAwB;CAGnD,IAAI,QAAQ;CACZ,IAAI,QAAQ;CACZ,IAAI,WAAW;CACf,MAAM,SAAS,OAAO,MAAM,uBAAuB;AACnD,MAAK,MAAM,SAAS,OAClB,KAAI,UAAU,SAAU,YAAW;UAC1B,UAAU,OAAO,UAAU;AAClC;AACA,MAAI,UAAU,EAAG,SAAQ;YAChB,UAAU,OAAO,YAAY,QAAQ,GAAG;AACjD;AACA,MAAI,UAAU,EAAG,YAAW;YACnB,UAAU,OAAO,YAAY,UAAU,EAChD;AAGJ,QAAO;;AAGT,eAAsB,YAAY,MAAgD;CAChF,MAAM,EAAE,KAAK,UAAU,OAAO,SAAS,cAAc;CAErD,MAAM,WAAW,SAAS,YAAY;CACtC,MAAM,YAAY,SAAS;CAC3B,MAAM,aAAa,SAAS,UAAU;CAMtC,MAAM,iBAAiB,CAAC,QAAQ,WAAW,WAAW,EAAE,QAAQ,aAAa,WAAW,CAAC;CAEzF,IAAI;CACJ,IAAI,gBAAgB,eAAe;AACnC,MAAK,MAAM,aAAa,gBAAgB;AACtC,kBAAgB;AAChB,MAAI;GACF,MAAM,MAAM,MAAM,IAAI,KAAM,UAAU;GACtC,MAAM,UACJ,OAAO,QAAQ,WACX,MACA,OAAQ,KAAa,MAAM,WAAW,KAAK,QAAQ,OAAO,GAAG;AACnE,OAAI,SAAS;AACX,mBAAe;AACf;;UAEI;;AAKV,KAAI,CAAC,aACH,QAAO;EACL,SAAS;EACT,OAAO;GAAE,MAAM;GAAoB,SAAS,yBAAyB;GAAiB;EACvF;CAGH,MAAM,aAAa,qBAAqB,SAAS;CAKjD,MAAM,QAAS,KAAK,IAAmB;CACvC,MAAM,QAAqB,QAAQ,CAAC,GAAG,MAAM,aAAa,GAAG;CAG7D,MAAM,cAAc,mBAAmB,aAAa;AACpD,MAAK,MAAM,cAAc,aAAa;AACpC,MAAI,WAAW,SAAS,KAAK,CAAE;EAC/B,MAAM,QAAQ,mBAAmB,YAAY,MAAM;AACnD,MAAI,CAAC,MAAM,QACT,QAAO;GACL,SAAS;GACT,OAAO;IAAE,MAAM,MAAM;IAAO,SAAS,MAAM;IAAS,MAAM,MAAM;IAAM;GACvE;;CAKL,MAAM,cAAc,oBAAoB,aAAa;AACrD,KAAI,cAAc,oBAChB,QAAO;EACL,SAAS;EACT,OAAO;GACL,MAAM;GACN,SAAS,cAAc,YAAY,gCAAgC;GACpE;EACF;CAIH,IAAI;AACJ,KAAI;AACF,aAAW,cAAc,aAAa;UAC/B,GAAQ;AACf,SAAO;GACL,SAAS;GACT,OAAO;IAAE,MAAM;IAAqB,SAAS,EAAE,WAAW,OAAO,EAAE;IAAE;GACtE;;CAGH,MAAM,SAAS,SAAS,YAAY,QAAQ,MAAM,CAAC,EAAE,YAAY,EAAE,aAAa,QAAQ;AACxF,KAAI,OAAO,SAAS,GAAG;EAIrB,MAAM,YAAY,OAAO,MAAM,MAAM,kBAAkB,KAAK,EAAE,WAAW,GAAG,CAAC;AAC7E,MAAI,UACF,QAAO;GACL,SAAS;GACT,OAAO;IAAE,MAAM;IAAkB,SAAS,UAAU;IAAS;GAC9D;AAEH,SAAO;GACL,SAAS;GACT,OAAO;IACL,MAAM;IACN,SAAS,OAAO,KAAK,MAAM,GAAG,EAAE,KAAK,IAAI,EAAE,UAAU,CAAC,KAAK,KAAK;IACjE;GACF;;AAGH,KAAI,CAAC,SAAS,QACZ,QAAO;EACL,SAAS;EACT,OAAO;GAAE,MAAM;GAAqB,SAAS;GAAmC;EACjF;CAGH,MAAM,UAAU,SAAS;CAGzB,MAAM,aAAa,MAAM;AACzB,KAAI,eAAe,QACjB;MAAI,OAAO,eAAe,YAAY,OAAO,eAAe,SAC1D,SAAQ,OAAO,IAAI,SAAS,WAAW;;AAG3C,KAAI,OAAO,eAAe,YAAY,eAAe,MACnD;OAAK,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,WAAsC,CACxE,KAAI,OAAO,MAAM,YAAY,OAAO,MAAM,SACxC,SAAQ,OAAO,IAAI,SAAS,KAAK,EAAE;WAC1B,MAAM,QAAQ,EAAE,CACzB,SAAQ,OAAO,IAAI,SAAS,KAAK,EAAyB;;CAMhE,MAAM,iBAA4C,EAAE;CACpD,IAAI,gBAAkC;CAKtC,MAAM,mBAAmB,SAAyB;AAChD,MAAI,CAAC,KAAK,WAAW,KAAK,IAAI,CAAC,KAAK,WAAW,MAAM,CAAE,QAAO;EAC9D,MAAM,WAAW,QAAQ,WAAW,KAAK;EACzC,MAAM,kBAAkB,UAAU,SAAS,IAAI,GAAG,YAAY,GAAG,UAAU;AAC3E,MAAI,aAAa,aAAa,CAAC,SAAS,WAAW,gBAAgB,CACjE,OAAM,IAAI,MAAM,mBAAmB,KAAK,qBAAqB,YAAY;AAE3E,SAAO;;CA+DT,MAAM,MAAkB;EACtB,OA7D4B;GAC5B,MAAM,OAAO,SAAqC;IAChD,MAAM,WAAW,gBAAgB,KAAK;IACtC,MAAM,QAAQ,iBAAiB,UAAU,QAAQ,MAAM;AACvD,QAAI,CAAC,MAAM,QACT,OAAM,IAAI,MAAM,6BAA6B,MAAM,SAAS;IAE9D,MAAM,OAAO,MAAM,IAAI,KAAM,SAAS;AACtC,QAAI,MAAM,QAAQ,KAAK,CAAE,QAAO;AAChC,QAAI,QAAQ,OAAO,SAAS,YAAY,UAAW,KACjD,QAAS,KAAa,QAAQ,EAAE;AAElC,QAAI,QAAQ,OAAO,SAAS,YAAY,UAAW,MAAc;KAC/D,MAAM,QAAS,KAAa;AAC5B,SAAI,MAAM,QAAQ,MAAM,CAAE,QAAO;AACjC,YAAO,SAAS,OAAO,CAAC,MAAM,GAAG,EAAE;;AAErC,WAAO,QAAQ,OAAO,CAAC,KAAK,GAAG,EAAE;;GAGnC,QAAQ,MAAc,SAA0B;AAC9C,mBAAe,QAAQ;AACvB,oBAAgB;AAEhB,QAAI,CAAC,KAAK,WAAW,WAAW,IAAI,CAAC,KAAK,WAAW,IAAI,EAAE;KACzD,MAAM,QAAQ,iBAAiB,MAAM,SAAS,MAAM;AACpD,SAAI,CAAC,MAAM,QACT,OAAM,IAAI,MAAM,6BAA6B,MAAM,SAAS;AAE9D,SAAI,QAAQ,MAAM,EAAE,SAAS,MAAM,CAAQ,CAAC,YAAY,GAAG;;;GAI/D,eAAqB;GAErB,MAAM,OACJ,MACA,QACA,WACuB;IACvB,MAAM,QAAQ,mBAAmB,MAAM,MAAM;AAC7C,QAAI,CAAC,MAAM,QACT,OAAM,IAAI,MAAM,6BAA6B,MAAM,SAAS;IAG9D,MAAM,SAAS,MAAM,IAAI,KAAM,MAAM,UAAU,EAAE,EAAE,EAAE,CAAC;AACtD,QAAI,UAAU,KAAM,QAAO,EAAE;AAC7B,QAAI,OAAO,WAAW,YAAY,UAAU,QAAQ;KAClD,MAAM,IAAK,OAAe;AAC1B,SAAI,MAAM,QAAQ,EAAE,CAAE,QAAO;AAC7B,YAAO,KAAK,OAAO,CAAC,EAAE,GAAG,EAAE;;AAE7B,WAAO,MAAM,QAAQ,OAAO,GAAG,SAAS,CAAC,OAAO;;GAEnD;EAQC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC;EACpB,QAPa,EACb,MAAM,QAAgB,SAAiB,YAAsB,IAC9D;EAMA;CAED,IAAI,aAAa;AAEjB,KAAI;AACF,OAAK,MAAM,OAAO,QAAQ,MAAM;AAC9B,OAAI,QAAQ,cAAc,IAAI,IAAI,KAAK,CAAE;GAEzC,MAAM,SAAS,MAAM,IAAI,QAAQ,IAAI;AACrC,iBAAc,OAAO,eAAe;AAEpC,OAAI,OAAO,WAAW,SAAS;IAC7B,MAAM,YAAY,OAAO,OAAO,MAAM,YACpC,QAAQ,WAAW,2BAA2B,CAC/C;AACD,QAAI,UACF,QAAO;KACL,SAAS;KACT,OAAO;MAAE,MAAM;MAA4B,SAAS;MAAW;KAC/D,OAAO;MAAE,gBAAgB;MAAY;MAAS;KAC/C;AAEH,WAAO;KACL,SAAS;KACT,OAAO;MAAE,MAAM;MAAqB,SAAS,OAAO,OAAO,KAAK,KAAK;MAAE;KACvE,OAAO;MAAE,gBAAgB;MAAY;MAAS;KAC/C;;;UAGE,GAAQ;EACf,MAAM,UAAU,GAAG,WAAW,OAAO,EAAE;AACvC,MAAI,OAAO,YAAY,YAAY,QAAQ,WAAW,iBAAiB,CACrE,QAAO;GACL,SAAS;GACT,OAAO;IAAE,MAAM;IAAkB;IAAS;GAC1C,OAAO;IAAE,gBAAgB;IAAY;IAAS;GAC/C;AAEH,MAAI,OAAO,YAAY,YAAY,QAAQ,WAAW,2BAA2B,CAC/E,QAAO;GACL,SAAS;GACT,OAAO;IAAE,MAAM;IAA4B;IAAS;GACpD,OAAO;IAAE,gBAAgB;IAAY;IAAS;GAC/C;AAEH,SAAO;GACL,SAAS;GACT,OAAO;IAAE,MAAM;IAAqB;IAAS;GAC7C,OAAO;IAAE,gBAAgB;IAAY;IAAS;GAC/C;;CAIH,IAAI;AACJ,KAAI,aAAa,eAAe,QAAQ,WAAW,UAAU,EAC3D,aAAY,eAAe,QAAQ,WAAW,UAAU;UAC/C,iBAAiB,KAC1B,aAAY;KAEZ,aAAY;CAGd,MAAM,YAA6B;EACjC,SAAS;EACT,MAAM,EAAE,QAAQ,WAAW;EAC3B,OAAO;GAAE,gBAAgB;GAAY;GAAS;EAC/C;AAED,KAAI,aAAa,aAAa,KAC5B,WAAU,SAAS,GAAG,YAAY,WAAW;AAG/C,QAAO"}