@aigne/agent-runtime 1.12.0-beta.5

package/dist/agent-runners/budget.cjs

@@ -0,0 +1,71 @@
+
+//#region src/agent-runners/budget.ts
+/**
+* S11 — Budget hierarchy.
+*
+* Budget flows: manifest default → caller _budget_override (only narrowing) →
+* parent remaining is hard upper bound.
+*/
+const MAX_ROUNDS_HARD_CAP = 50;
+const DEFAULT_MAX_ROUNDS = 6;
+const DEFAULT_TOTAL_TOKENS = 8e4;
+function resolveBudget(opts) {
+	const warnings = [];
+	let maxRounds = opts.manifest?.maxRounds ?? DEFAULT_MAX_ROUNDS;
+	let totalTokens = opts.manifest?.totalTokens ?? DEFAULT_TOTAL_TOKENS;
+	if (maxRounds > MAX_ROUNDS_HARD_CAP) throw new Error(`BUDGET_INVALID: max_rounds ${maxRounds} exceeds hard cap ${MAX_ROUNDS_HARD_CAP}`);
+	if (opts.callerOverride) {
+		const ov = opts.callerOverride;
+		if (ov.maxRounds != null) {
+			if (ov.maxRounds < 0) throw new Error("BUDGET_INVALID: negative max_rounds");
+			if (ov.maxRounds <= maxRounds) maxRounds = ov.maxRounds;
+			else warnings.push({
+				code: "BUDGET_OVERRIDE_CLAMPED",
+				message: `Requested max_rounds ${ov.maxRounds} clamped to manifest ${maxRounds}`
+			});
+		}
+		if (ov.totalTokens != null) {
+			if (ov.totalTokens < 0) throw new Error("BUDGET_INVALID: negative total_tokens");
+			if (ov.totalTokens <= totalTokens) totalTokens = ov.totalTokens;
+			else warnings.push({
+				code: "BUDGET_OVERRIDE_CLAMPED",
+				message: `Requested total_tokens ${ov.totalTokens} clamped to manifest ${totalTokens}`
+			});
+		}
+	}
+	if (opts.parentRemaining != null && opts.parentRemaining < totalTokens) totalTokens = opts.parentRemaining;
+	return {
+		maxRounds,
+		totalTokens,
+		warnings
+	};
+}
+function createBudgetTracker(budget) {
+	const ac = new AbortController();
+	let used = 0;
+	return {
+		maxTokens: budget.totalTokens,
+		maxRounds: budget.maxRounds,
+		get used() {
+			return used;
+		},
+		get remaining() {
+			return budget.totalTokens - used;
+		},
+		signal: ac.signal,
+		consumeTokens(tokens) {
+			used += tokens;
+			if (used >= budget.totalTokens) ac.abort();
+		},
+		isExhausted() {
+			return used >= budget.totalTokens;
+		}
+	};
+}
+
+//#endregion
+exports.DEFAULT_MAX_ROUNDS = DEFAULT_MAX_ROUNDS;
+exports.DEFAULT_TOTAL_TOKENS = DEFAULT_TOTAL_TOKENS;
+exports.MAX_ROUNDS_HARD_CAP = MAX_ROUNDS_HARD_CAP;
+exports.createBudgetTracker = createBudgetTracker;
+exports.resolveBudget = resolveBudget;

package/dist/agent-runners/budget.d.cts

@@ -0,0 +1,40 @@
+//#region src/agent-runners/budget.d.ts
+/**
+ * S11 — Budget hierarchy.
+ *
+ * Budget flows: manifest default → caller _budget_override (only narrowing) →
+ * parent remaining is hard upper bound.
+ */
+declare const MAX_ROUNDS_HARD_CAP = 50;
+declare const DEFAULT_MAX_ROUNDS = 6;
+declare const DEFAULT_TOTAL_TOKENS = 80000;
+interface BudgetConfig {
+  maxRounds?: number;
+  totalTokens?: number;
+}
+interface ResolvedBudget {
+  maxRounds: number;
+  totalTokens: number;
+  warnings: Array<{
+    code: string;
+    message: string;
+  }>;
+}
+declare function resolveBudget(opts: {
+  manifest?: BudgetConfig;
+  callerOverride?: BudgetConfig;
+  parentRemaining?: number;
+}): ResolvedBudget;
+interface BudgetTracker {
+  readonly maxTokens: number;
+  readonly maxRounds: number;
+  readonly used: number;
+  readonly remaining: number;
+  readonly signal: AbortSignal;
+  consumeTokens(tokens: number): void;
+  isExhausted(): boolean;
+}
+declare function createBudgetTracker(budget: ResolvedBudget): BudgetTracker;
+//#endregion
+export { BudgetConfig, BudgetTracker, DEFAULT_MAX_ROUNDS, DEFAULT_TOTAL_TOKENS, MAX_ROUNDS_HARD_CAP, ResolvedBudget, createBudgetTracker, resolveBudget };
+//# sourceMappingURL=budget.d.cts.map

package/dist/agent-runners/budget.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget.d.cts","names":[],"sources":["../../src/agent-runners/budget.ts"],"mappings":";;AAOA;;;;;cAAa,mBAAA;AAAA,cACA,kBAAA;AAAA,cACA,oBAAA;AAAA,UAEI,YAAA;EACf,SAAA;EACA,WAAA;AAAA;AAAA,UAGe,cAAA;EACf,SAAA;EACA,WAAA;EACA,QAAA,EAAU,KAAA;IAAQ,IAAA;IAAc,OAAA;EAAA;AAAA;AAAA,iBAGlB,aAAA,CAAc,IAAA;EAC5B,QAAA,GAAW,YAAA;EACX,cAAA,GAAiB,YAAA;EACjB,eAAA;AAAA,IACE,cAAA;AAAA,UAmDa,aAAA;EAAA,SACN,SAAA;EAAA,SACA,SAAA;EAAA,SACA,IAAA;EAAA,SACA,SAAA;EAAA,SACA,MAAA,EAAQ,WAAA;EACjB,aAAA,CAAc,MAAA;EACd,WAAA;AAAA;AAAA,iBAGc,mBAAA,CAAoB,MAAA,EAAQ,cAAA,GAAiB,aAAA"}

package/dist/agent-runners/budget.d.mts

@@ -0,0 +1,40 @@
+//#region src/agent-runners/budget.d.ts
+/**
+ * S11 — Budget hierarchy.
+ *
+ * Budget flows: manifest default → caller _budget_override (only narrowing) →
+ * parent remaining is hard upper bound.
+ */
+declare const MAX_ROUNDS_HARD_CAP = 50;
+declare const DEFAULT_MAX_ROUNDS = 6;
+declare const DEFAULT_TOTAL_TOKENS = 80000;
+interface BudgetConfig {
+  maxRounds?: number;
+  totalTokens?: number;
+}
+interface ResolvedBudget {
+  maxRounds: number;
+  totalTokens: number;
+  warnings: Array<{
+    code: string;
+    message: string;
+  }>;
+}
+declare function resolveBudget(opts: {
+  manifest?: BudgetConfig;
+  callerOverride?: BudgetConfig;
+  parentRemaining?: number;
+}): ResolvedBudget;
+interface BudgetTracker {
+  readonly maxTokens: number;
+  readonly maxRounds: number;
+  readonly used: number;
+  readonly remaining: number;
+  readonly signal: AbortSignal;
+  consumeTokens(tokens: number): void;
+  isExhausted(): boolean;
+}
+declare function createBudgetTracker(budget: ResolvedBudget): BudgetTracker;
+//#endregion
+export { BudgetConfig, BudgetTracker, DEFAULT_MAX_ROUNDS, DEFAULT_TOTAL_TOKENS, MAX_ROUNDS_HARD_CAP, ResolvedBudget, createBudgetTracker, resolveBudget };
+//# sourceMappingURL=budget.d.mts.map

package/dist/agent-runners/budget.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget.d.mts","names":[],"sources":["../../src/agent-runners/budget.ts"],"mappings":";;AAOA;;;;;cAAa,mBAAA;AAAA,cACA,kBAAA;AAAA,cACA,oBAAA;AAAA,UAEI,YAAA;EACf,SAAA;EACA,WAAA;AAAA;AAAA,UAGe,cAAA;EACf,SAAA;EACA,WAAA;EACA,QAAA,EAAU,KAAA;IAAQ,IAAA;IAAc,OAAA;EAAA;AAAA;AAAA,iBAGlB,aAAA,CAAc,IAAA;EAC5B,QAAA,GAAW,YAAA;EACX,cAAA,GAAiB,YAAA;EACjB,eAAA;AAAA,IACE,cAAA;AAAA,UAmDa,aAAA;EAAA,SACN,SAAA;EAAA,SACA,SAAA;EAAA,SACA,IAAA;EAAA,SACA,SAAA;EAAA,SACA,MAAA,EAAQ,WAAA;EACjB,aAAA,CAAc,MAAA;EACd,WAAA;AAAA;AAAA,iBAGc,mBAAA,CAAoB,MAAA,EAAQ,cAAA,GAAiB,aAAA"}

package/dist/agent-runners/budget.mjs

@@ -0,0 +1,67 @@
+//#region src/agent-runners/budget.ts
+/**
+* S11 — Budget hierarchy.
+*
+* Budget flows: manifest default → caller _budget_override (only narrowing) →
+* parent remaining is hard upper bound.
+*/
+const MAX_ROUNDS_HARD_CAP = 50;
+const DEFAULT_MAX_ROUNDS = 6;
+const DEFAULT_TOTAL_TOKENS = 8e4;
+function resolveBudget(opts) {
+	const warnings = [];
+	let maxRounds = opts.manifest?.maxRounds ?? DEFAULT_MAX_ROUNDS;
+	let totalTokens = opts.manifest?.totalTokens ?? DEFAULT_TOTAL_TOKENS;
+	if (maxRounds > MAX_ROUNDS_HARD_CAP) throw new Error(`BUDGET_INVALID: max_rounds ${maxRounds} exceeds hard cap ${MAX_ROUNDS_HARD_CAP}`);
+	if (opts.callerOverride) {
+		const ov = opts.callerOverride;
+		if (ov.maxRounds != null) {
+			if (ov.maxRounds < 0) throw new Error("BUDGET_INVALID: negative max_rounds");
+			if (ov.maxRounds <= maxRounds) maxRounds = ov.maxRounds;
+			else warnings.push({
+				code: "BUDGET_OVERRIDE_CLAMPED",
+				message: `Requested max_rounds ${ov.maxRounds} clamped to manifest ${maxRounds}`
+			});
+		}
+		if (ov.totalTokens != null) {
+			if (ov.totalTokens < 0) throw new Error("BUDGET_INVALID: negative total_tokens");
+			if (ov.totalTokens <= totalTokens) totalTokens = ov.totalTokens;
+			else warnings.push({
+				code: "BUDGET_OVERRIDE_CLAMPED",
+				message: `Requested total_tokens ${ov.totalTokens} clamped to manifest ${totalTokens}`
+			});
+		}
+	}
+	if (opts.parentRemaining != null && opts.parentRemaining < totalTokens) totalTokens = opts.parentRemaining;
+	return {
+		maxRounds,
+		totalTokens,
+		warnings
+	};
+}
+function createBudgetTracker(budget) {
+	const ac = new AbortController();
+	let used = 0;
+	return {
+		maxTokens: budget.totalTokens,
+		maxRounds: budget.maxRounds,
+		get used() {
+			return used;
+		},
+		get remaining() {
+			return budget.totalTokens - used;
+		},
+		signal: ac.signal,
+		consumeTokens(tokens) {
+			used += tokens;
+			if (used >= budget.totalTokens) ac.abort();
+		},
+		isExhausted() {
+			return used >= budget.totalTokens;
+		}
+	};
+}
+
+//#endregion
+export { DEFAULT_MAX_ROUNDS, DEFAULT_TOTAL_TOKENS, MAX_ROUNDS_HARD_CAP, createBudgetTracker, resolveBudget };
+//# sourceMappingURL=budget.mjs.map

package/dist/agent-runners/budget.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget.mjs","names":[],"sources":["../../src/agent-runners/budget.ts"],"sourcesContent":["/**\n * S11 — Budget hierarchy.\n *\n * Budget flows: manifest default → caller _budget_override (only narrowing) →\n * parent remaining is hard upper bound.\n */\n\nexport const MAX_ROUNDS_HARD_CAP = 50;\nexport const DEFAULT_MAX_ROUNDS = 6;\nexport const DEFAULT_TOTAL_TOKENS = 80_000;\n\nexport interface BudgetConfig {\n  maxRounds?: number;\n  totalTokens?: number;\n}\n\nexport interface ResolvedBudget {\n  maxRounds: number;\n  totalTokens: number;\n  warnings: Array<{ code: string; message: string }>;\n}\n\nexport function resolveBudget(opts: {\n  manifest?: BudgetConfig;\n  callerOverride?: BudgetConfig;\n  parentRemaining?: number;\n}): ResolvedBudget {\n  const warnings: Array<{ code: string; message: string }> = [];\n\n  let maxRounds = opts.manifest?.maxRounds ?? DEFAULT_MAX_ROUNDS;\n  let totalTokens = opts.manifest?.totalTokens ?? DEFAULT_TOTAL_TOKENS;\n\n  if (maxRounds > MAX_ROUNDS_HARD_CAP) {\n    throw new Error(\n      `BUDGET_INVALID: max_rounds ${maxRounds} exceeds hard cap ${MAX_ROUNDS_HARD_CAP}`,\n    );\n  }\n\n  if (opts.callerOverride) {\n    const ov = opts.callerOverride;\n\n    if (ov.maxRounds != null) {\n      if (ov.maxRounds < 0) {\n        throw new Error(\"BUDGET_INVALID: negative max_rounds\");\n      }\n      if (ov.maxRounds <= maxRounds) {\n        maxRounds = ov.maxRounds;\n      } else {\n        warnings.push({\n          code: \"BUDGET_OVERRIDE_CLAMPED\",\n          message: `Requested max_rounds ${ov.maxRounds} clamped to manifest ${maxRounds}`,\n        });\n      }\n    }\n\n    if (ov.totalTokens != null) {\n      if (ov.totalTokens < 0) {\n        throw new Error(\"BUDGET_INVALID: negative total_tokens\");\n      }\n      if (ov.totalTokens <= totalTokens) {\n        totalTokens = ov.totalTokens;\n      } else {\n        warnings.push({\n          code: \"BUDGET_OVERRIDE_CLAMPED\",\n          message: `Requested total_tokens ${ov.totalTokens} clamped to manifest ${totalTokens}`,\n        });\n      }\n    }\n  }\n\n  if (opts.parentRemaining != null && opts.parentRemaining < totalTokens) {\n    totalTokens = opts.parentRemaining;\n  }\n\n  return { maxRounds, totalTokens, warnings };\n}\n\nexport interface BudgetTracker {\n  readonly maxTokens: number;\n  readonly maxRounds: number;\n  readonly used: number;\n  readonly remaining: number;\n  readonly signal: AbortSignal;\n  consumeTokens(tokens: number): void;\n  isExhausted(): boolean;\n}\n\nexport function createBudgetTracker(budget: ResolvedBudget): BudgetTracker {\n  const ac = new AbortController();\n  let used = 0;\n\n  return {\n    maxTokens: budget.totalTokens,\n    maxRounds: budget.maxRounds,\n    get used() {\n      return used;\n    },\n    get remaining() {\n      return budget.totalTokens - used;\n    },\n    signal: ac.signal,\n    consumeTokens(tokens: number) {\n      used += tokens;\n      if (used >= budget.totalTokens) {\n        ac.abort();\n      }\n    },\n    isExhausted() {\n      return used >= budget.totalTokens;\n    },\n  };\n}\n"],"mappings":";;;;;;;AAOA,MAAa,sBAAsB;AACnC,MAAa,qBAAqB;AAClC,MAAa,uBAAuB;AAapC,SAAgB,cAAc,MAIX;CACjB,MAAM,WAAqD,EAAE;CAE7D,IAAI,YAAY,KAAK,UAAU,aAAa;CAC5C,IAAI,cAAc,KAAK,UAAU,eAAe;AAEhD,KAAI,YAAY,oBACd,OAAM,IAAI,MACR,8BAA8B,UAAU,oBAAoB,sBAC7D;AAGH,KAAI,KAAK,gBAAgB;EACvB,MAAM,KAAK,KAAK;AAEhB,MAAI,GAAG,aAAa,MAAM;AACxB,OAAI,GAAG,YAAY,EACjB,OAAM,IAAI,MAAM,sCAAsC;AAExD,OAAI,GAAG,aAAa,UAClB,aAAY,GAAG;OAEf,UAAS,KAAK;IACZ,MAAM;IACN,SAAS,wBAAwB,GAAG,UAAU,uBAAuB;IACtE,CAAC;;AAIN,MAAI,GAAG,eAAe,MAAM;AAC1B,OAAI,GAAG,cAAc,EACnB,OAAM,IAAI,MAAM,wCAAwC;AAE1D,OAAI,GAAG,eAAe,YACpB,eAAc,GAAG;OAEjB,UAAS,KAAK;IACZ,MAAM;IACN,SAAS,0BAA0B,GAAG,YAAY,uBAAuB;IAC1E,CAAC;;;AAKR,KAAI,KAAK,mBAAmB,QAAQ,KAAK,kBAAkB,YACzD,eAAc,KAAK;AAGrB,QAAO;EAAE;EAAW;EAAa;EAAU;;AAa7C,SAAgB,oBAAoB,QAAuC;CACzE,MAAM,KAAK,IAAI,iBAAiB;CAChC,IAAI,OAAO;AAEX,QAAO;EACL,WAAW,OAAO;EAClB,WAAW,OAAO;EAClB,IAAI,OAAO;AACT,UAAO;;EAET,IAAI,YAAY;AACd,UAAO,OAAO,cAAc;;EAE9B,QAAQ,GAAG;EACX,cAAc,QAAgB;AAC5B,WAAQ;AACR,OAAI,QAAQ,OAAO,YACjB,IAAG,OAAO;;EAGd,cAAc;AACZ,UAAO,QAAQ,OAAO;;EAEzB"}

package/dist/agent-runners/code-runner.cjs

@@ -0,0 +1,61 @@
+const require_scoped_afs = require('../program/scoped-afs.cjs');
+require('../program/session-hierarchy.cjs');
+let ufo = require("ufo");
+let _aigne_afs_agent = require("@aigne/afs-agent");
+
+//#region src/agent-runners/code-runner.ts
+const DEFAULT_CODE_AGENT_MOUNT = "/modules/code-agent";
+const VALID_ENGINES = new Set([
+	"auto",
+	"claude-sdk",
+	"claude-cli",
+	"codex",
+	"queryFn"
+]);
+function errorEnvelope(code, message) {
+	return {
+		success: false,
+		error: {
+			code,
+			message
+		}
+	};
+}
+const codeRunner = async (input, context) => {
+	const { manifest } = context;
+	const codeBlock = manifest.code;
+	if (!codeBlock || typeof codeBlock.engine !== "string" || codeBlock.engine.length === 0) return errorEnvelope("CODE_ENGINE_MISSING", "manifest.code.engine is required for type: code agents");
+	if (!VALID_ENGINES.has(codeBlock.engine)) return errorEnvelope("CODE_ENGINE_UNKNOWN", `Unknown code engine "${codeBlock.engine}" — expected one of: ${[...VALID_ENGINES].join(", ")}`);
+	const chain = context.chain ?? [];
+	(0, _aigne_afs_agent.checkSpawnDepth)(chain, manifest.maxSpawnDepth);
+	const { session: sessionId, parentSession } = require_scoped_afs.resolveChildSession(context.afs, context, _aigne_afs_agent.deriveChildSession);
+	const inputKey = manifest.inputKey ?? "message";
+	const prompt = String(input[inputKey] ?? "");
+	if (!prompt) return errorEnvelope("CODE_INPUT_MISSING", `input["${inputKey}"] is required`);
+	const queryPath = (0, ufo.joinURL)(codeBlock.mount ?? DEFAULT_CODE_AGENT_MOUNT, "/.actions/query");
+	const execArgs = { prompt };
+	if (codeBlock.command) execArgs.command = codeBlock.command;
+	for (const [key, value] of Object.entries(input)) {
+		if (key === inputKey) continue;
+		if (key.startsWith("_")) continue;
+		if (key in execArgs) continue;
+		execArgs[key] = value;
+	}
+	try {
+		const result = await context.afs.exec(queryPath, execArgs, {});
+		const data = result.data ?? {};
+		const meta = data._meta && typeof data._meta === "object" ? data._meta : {};
+		meta.session = sessionId;
+		meta.parent_session = parentSession;
+		meta.chain = [...chain, sessionId ?? "root"];
+		meta.engine = codeBlock.engine;
+		data._meta = meta;
+		result.data = data;
+		return result;
+	} catch (err) {
+		return errorEnvelope("CODE_RUN_FAILED", err instanceof Error ? err.message : String(err));
+	}
+};
+
+//#endregion
+exports.codeRunner = codeRunner;

package/dist/agent-runners/code-runner.mjs

@@ -0,0 +1,61 @@
+import { resolveChildSession } from "../program/scoped-afs.mjs";
+import { checkSpawnDepth, deriveChildSession } from "../program/session-hierarchy.mjs";
+import { joinURL } from "ufo";
+
+//#region src/agent-runners/code-runner.ts
+const DEFAULT_CODE_AGENT_MOUNT = "/modules/code-agent";
+const VALID_ENGINES = new Set([
+	"auto",
+	"claude-sdk",
+	"claude-cli",
+	"codex",
+	"queryFn"
+]);
+function errorEnvelope(code, message) {
+	return {
+		success: false,
+		error: {
+			code,
+			message
+		}
+	};
+}
+const codeRunner = async (input, context) => {
+	const { manifest } = context;
+	const codeBlock = manifest.code;
+	if (!codeBlock || typeof codeBlock.engine !== "string" || codeBlock.engine.length === 0) return errorEnvelope("CODE_ENGINE_MISSING", "manifest.code.engine is required for type: code agents");
+	if (!VALID_ENGINES.has(codeBlock.engine)) return errorEnvelope("CODE_ENGINE_UNKNOWN", `Unknown code engine "${codeBlock.engine}" — expected one of: ${[...VALID_ENGINES].join(", ")}`);
+	const chain = context.chain ?? [];
+	checkSpawnDepth(chain, manifest.maxSpawnDepth);
+	const { session: sessionId, parentSession } = resolveChildSession(context.afs, context, deriveChildSession);
+	const inputKey = manifest.inputKey ?? "message";
+	const prompt = String(input[inputKey] ?? "");
+	if (!prompt) return errorEnvelope("CODE_INPUT_MISSING", `input["${inputKey}"] is required`);
+	const queryPath = joinURL(codeBlock.mount ?? DEFAULT_CODE_AGENT_MOUNT, "/.actions/query");
+	const execArgs = { prompt };
+	if (codeBlock.command) execArgs.command = codeBlock.command;
+	for (const [key, value] of Object.entries(input)) {
+		if (key === inputKey) continue;
+		if (key.startsWith("_")) continue;
+		if (key in execArgs) continue;
+		execArgs[key] = value;
+	}
+	try {
+		const result = await context.afs.exec(queryPath, execArgs, {});
+		const data = result.data ?? {};
+		const meta = data._meta && typeof data._meta === "object" ? data._meta : {};
+		meta.session = sessionId;
+		meta.parent_session = parentSession;
+		meta.chain = [...chain, sessionId ?? "root"];
+		meta.engine = codeBlock.engine;
+		data._meta = meta;
+		result.data = data;
+		return result;
+	} catch (err) {
+		return errorEnvelope("CODE_RUN_FAILED", err instanceof Error ? err.message : String(err));
+	}
+};
+
+//#endregion
+export { codeRunner };
+//# sourceMappingURL=code-runner.mjs.map

package/dist/agent-runners/code-runner.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-runner.mjs","names":[],"sources":["../../src/agent-runners/code-runner.ts"],"sourcesContent":["/**\n * Phase C1 — `code` agent runner.\n *\n * A thin wrapper that dispatches `type: code` agents to a mounted\n * `@aigne/afs-code-agent` provider via AFS-only I/O. The runner owns nothing\n * of its own: session / budget / tool projection all come from the scope\n * handed in by `projectForChild`, so the same path-based contract that\n * governs the AI, ASH, team, and orchestrator runners applies here too.\n *\n * Why so little code?\n *   - The code-agent provider already exposes `/.actions/query` (stateless\n *     one-shot) and `/sessions/.actions/create` (session-scoped). Re-binding\n *     prompts and streaming results is the provider's job, not the runner's.\n *   - Scope-first session derivation is handled by `resolveChildSession`,\n *     shared with the four sibling runners. When the caller layered a\n *     `projectForChild` scope on top of `ctx.afs`, its exec middleware\n *     (budget, hooks) automatically runs around `ctx.afs.exec`.\n *   - Phase 2 plugs a sandbox provider in *between* this runner and the\n *     underlying engine (mount replacement, no runner change required).\n *\n * Unknown engine values emerge in two places: manifest parse (zod enum) and\n * runtime (when a synthetic manifest bypasses the parser). The runner guards\n * the runtime path explicitly so `CODE_ENGINE_UNKNOWN` is never silently\n * forwarded as an empty prompt.\n */\n\nimport type { AFSExecResult } from \"@aigne/afs\";\nimport { joinURL } from \"ufo\";\nimport type { RunnerContext } from \"../program/agent-runner-registry.js\";\nimport { resolveChildSession } from \"../program/scoped-afs.js\";\nimport { checkSpawnDepth, deriveChildSession } from \"../program/session-hierarchy.js\";\n\nconst DEFAULT_CODE_AGENT_MOUNT = \"/modules/code-agent\";\nconst VALID_ENGINES = new Set([\"auto\", \"claude-sdk\", \"claude-cli\", \"codex\", \"queryFn\"]);\n\ninterface CodeManifestBlock {\n  engine?: string;\n  mount?: string;\n  command?: string;\n}\n\nfunction errorEnvelope(code: string, message: string): AFSExecResult {\n  return { success: false, error: { code, message } };\n}\n\nexport const codeRunner = async (\n  input: Record<string, unknown>,\n  context: RunnerContext,\n): Promise<AFSExecResult> => {\n  const { manifest } = context;\n  const codeBlock = (manifest as { code?: CodeManifestBlock }).code;\n\n  if (!codeBlock || typeof codeBlock.engine !== \"string\" || codeBlock.engine.length === 0) {\n    return errorEnvelope(\n      \"CODE_ENGINE_MISSING\",\n      \"manifest.code.engine is required for type: code agents\",\n    );\n  }\n\n  if (!VALID_ENGINES.has(codeBlock.engine)) {\n    return errorEnvelope(\n      \"CODE_ENGINE_UNKNOWN\",\n      `Unknown code engine \"${codeBlock.engine}\" — expected one of: ${[...VALID_ENGINES].join(\", \")}`,\n    );\n  }\n\n  const chain = context.chain ?? [];\n  checkSpawnDepth(chain, manifest.maxSpawnDepth);\n\n  const { session: sessionId, parentSession } = resolveChildSession(\n    context.afs,\n    context,\n    deriveChildSession,\n  );\n\n  const inputKey = manifest.inputKey ?? \"message\";\n  const prompt = String(input[inputKey] ?? \"\");\n  if (!prompt) {\n    return errorEnvelope(\"CODE_INPUT_MISSING\", `input[\"${inputKey}\"] is required`);\n  }\n\n  const mount = codeBlock.mount ?? DEFAULT_CODE_AGENT_MOUNT;\n  const queryPath = joinURL(mount, \"/.actions/query\");\n\n  // Only forward fields the provider understands. Environment variables\n  // and internal context flags (`_chain`, `_parent_session`, etc.) must\n  // not cross the provider boundary — `env-whitelist.ts` is the single\n  // authority for env vars (C1 only wires through; full allowlist\n  // enforcement lands in P6+).\n  const execArgs: Record<string, unknown> = { prompt };\n  if (codeBlock.command) execArgs.command = codeBlock.command;\n\n  // Forward user-supplied scalars that aren't reserved. Mirrors `aiRunner`'s\n  // pass-through behaviour so callers can hand meta fields (e.g. `priority`,\n  // `cwd`) to the provider without inventing a new manifest knob.\n  for (const [key, value] of Object.entries(input)) {\n    if (key === inputKey) continue;\n    if (key.startsWith(\"_\")) continue;\n    if (key in execArgs) continue;\n    execArgs[key] = value;\n  }\n\n  try {\n    const result = await context.afs.exec!(queryPath, execArgs, {});\n    const data = ((result as { data?: Record<string, unknown> }).data ?? {}) as Record<\n      string,\n      unknown\n    >;\n    const meta = (data._meta && typeof data._meta === \"object\" ? data._meta : {}) as Record<\n      string,\n      unknown\n    >;\n    meta.session = sessionId;\n    meta.parent_session = parentSession;\n    meta.chain = [...chain, sessionId ?? \"root\"];\n    meta.engine = codeBlock.engine;\n    data._meta = meta;\n    (result as { data?: Record<string, unknown> }).data = data;\n    return result;\n  } catch (err) {\n    // Provider / transport failures collapse to an error envelope so the\n    // parent never sees an uncaught throw (Data-loss contract).\n    const message = err instanceof Error ? err.message : String(err);\n    return errorEnvelope(\"CODE_RUN_FAILED\", message);\n  }\n};\n"],"mappings":";;;;;AAgCA,MAAM,2BAA2B;AACjC,MAAM,gBAAgB,IAAI,IAAI;CAAC;CAAQ;CAAc;CAAc;CAAS;CAAU,CAAC;AAQvF,SAAS,cAAc,MAAc,SAAgC;AACnE,QAAO;EAAE,SAAS;EAAO,OAAO;GAAE;GAAM;GAAS;EAAE;;AAGrD,MAAa,aAAa,OACxB,OACA,YAC2B;CAC3B,MAAM,EAAE,aAAa;CACrB,MAAM,YAAa,SAA0C;AAE7D,KAAI,CAAC,aAAa,OAAO,UAAU,WAAW,YAAY,UAAU,OAAO,WAAW,EACpF,QAAO,cACL,uBACA,yDACD;AAGH,KAAI,CAAC,cAAc,IAAI,UAAU,OAAO,CACtC,QAAO,cACL,uBACA,wBAAwB,UAAU,OAAO,uBAAuB,CAAC,GAAG,cAAc,CAAC,KAAK,KAAK,GAC9F;CAGH,MAAM,QAAQ,QAAQ,SAAS,EAAE;AACjC,iBAAgB,OAAO,SAAS,cAAc;CAE9C,MAAM,EAAE,SAAS,WAAW,kBAAkB,oBAC5C,QAAQ,KACR,SACA,mBACD;CAED,MAAM,WAAW,SAAS,YAAY;CACtC,MAAM,SAAS,OAAO,MAAM,aAAa,GAAG;AAC5C,KAAI,CAAC,OACH,QAAO,cAAc,sBAAsB,UAAU,SAAS,gBAAgB;CAIhF,MAAM,YAAY,QADJ,UAAU,SAAS,0BACA,kBAAkB;CAOnD,MAAM,WAAoC,EAAE,QAAQ;AACpD,KAAI,UAAU,QAAS,UAAS,UAAU,UAAU;AAKpD,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,MAAM,EAAE;AAChD,MAAI,QAAQ,SAAU;AACtB,MAAI,IAAI,WAAW,IAAI,CAAE;AACzB,MAAI,OAAO,SAAU;AACrB,WAAS,OAAO;;AAGlB,KAAI;EACF,MAAM,SAAS,MAAM,QAAQ,IAAI,KAAM,WAAW,UAAU,EAAE,CAAC;EAC/D,MAAM,OAAS,OAA8C,QAAQ,EAAE;EAIvE,MAAM,OAAQ,KAAK,SAAS,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ,EAAE;AAI5E,OAAK,UAAU;AACf,OAAK,iBAAiB;AACtB,OAAK,QAAQ,CAAC,GAAG,OAAO,aAAa,OAAO;AAC5C,OAAK,SAAS,UAAU;AACxB,OAAK,QAAQ;AACb,EAAC,OAA8C,OAAO;AACtD,SAAO;UACA,KAAK;AAIZ,SAAO,cAAc,mBADL,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,CAChB"}

package/dist/agent-runners/env-whitelist.cjs

@@ -0,0 +1,36 @@
+
+//#region src/agent-runners/env-whitelist.ts
+function resolveEnv(whitelist) {
+	if (!whitelist?.length) return Object.freeze({});
+	const allowed = new Set(whitelist);
+	return new Proxy(Object.create(null), {
+		get(_target, prop) {
+			if (typeof prop !== "string") return void 0;
+			if (!allowed.has(prop)) return void 0;
+			return process.env[prop];
+		},
+		has(_target, prop) {
+			return typeof prop === "string" && allowed.has(prop);
+		},
+		ownKeys() {
+			return [...allowed];
+		},
+		getOwnPropertyDescriptor(_target, prop) {
+			if (typeof prop !== "string" || !allowed.has(prop)) return void 0;
+			return {
+				configurable: true,
+				enumerable: true,
+				value: process.env[prop]
+			};
+		},
+		set() {
+			return false;
+		},
+		deleteProperty() {
+			return false;
+		}
+	});
+}
+
+//#endregion
+exports.resolveEnv = resolveEnv;

package/dist/agent-runners/env-whitelist.d.cts

@@ -0,0 +1,5 @@
+//#region src/agent-runners/env-whitelist.d.ts
+declare function resolveEnv(whitelist: string[] | undefined): Record<string, string | undefined>;
+//#endregion
+export { resolveEnv };
+//# sourceMappingURL=env-whitelist.d.cts.map

package/dist/agent-runners/env-whitelist.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-whitelist.d.cts","names":[],"sources":["../../src/agent-runners/env-whitelist.ts"],"mappings":";iBAAgB,UAAA,CAAW,SAAA,yBAAkC,MAAA"}

package/dist/agent-runners/env-whitelist.d.mts

@@ -0,0 +1,5 @@
+//#region src/agent-runners/env-whitelist.d.ts
+declare function resolveEnv(whitelist: string[] | undefined): Record<string, string | undefined>;
+//#endregion
+export { resolveEnv };
+//# sourceMappingURL=env-whitelist.d.mts.map

package/dist/agent-runners/env-whitelist.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-whitelist.d.mts","names":[],"sources":["../../src/agent-runners/env-whitelist.ts"],"mappings":";iBAAgB,UAAA,CAAW,SAAA,yBAAkC,MAAA"}

package/dist/agent-runners/env-whitelist.mjs

@@ -0,0 +1,36 @@
+//#region src/agent-runners/env-whitelist.ts
+function resolveEnv(whitelist) {
+	if (!whitelist?.length) return Object.freeze({});
+	const allowed = new Set(whitelist);
+	return new Proxy(Object.create(null), {
+		get(_target, prop) {
+			if (typeof prop !== "string") return void 0;
+			if (!allowed.has(prop)) return void 0;
+			return process.env[prop];
+		},
+		has(_target, prop) {
+			return typeof prop === "string" && allowed.has(prop);
+		},
+		ownKeys() {
+			return [...allowed];
+		},
+		getOwnPropertyDescriptor(_target, prop) {
+			if (typeof prop !== "string" || !allowed.has(prop)) return void 0;
+			return {
+				configurable: true,
+				enumerable: true,
+				value: process.env[prop]
+			};
+		},
+		set() {
+			return false;
+		},
+		deleteProperty() {
+			return false;
+		}
+	});
+}
+
+//#endregion
+export { resolveEnv };
+//# sourceMappingURL=env-whitelist.mjs.map

package/dist/agent-runners/env-whitelist.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-whitelist.mjs","names":[],"sources":["../../src/agent-runners/env-whitelist.ts"],"sourcesContent":["export function resolveEnv(whitelist: string[] | undefined): Record<string, string | undefined> {\n  if (!whitelist?.length) return Object.freeze({});\n\n  const allowed = new Set(whitelist);\n  return new Proxy(Object.create(null), {\n    get(_target, prop: string) {\n      if (typeof prop !== \"string\") return undefined;\n      if (!allowed.has(prop)) return undefined;\n      return process.env[prop];\n    },\n    has(_target, prop: string) {\n      return typeof prop === \"string\" && allowed.has(prop);\n    },\n    ownKeys() {\n      return [...allowed];\n    },\n    getOwnPropertyDescriptor(_target, prop: string) {\n      if (typeof prop !== \"string\" || !allowed.has(prop)) return undefined;\n      return { configurable: true, enumerable: true, value: process.env[prop] };\n    },\n    set() {\n      return false;\n    },\n    deleteProperty() {\n      return false;\n    },\n  });\n}\n"],"mappings":";AAAA,SAAgB,WAAW,WAAqE;AAC9F,KAAI,CAAC,WAAW,OAAQ,QAAO,OAAO,OAAO,EAAE,CAAC;CAEhD,MAAM,UAAU,IAAI,IAAI,UAAU;AAClC,QAAO,IAAI,MAAM,OAAO,OAAO,KAAK,EAAE;EACpC,IAAI,SAAS,MAAc;AACzB,OAAI,OAAO,SAAS,SAAU,QAAO;AACrC,OAAI,CAAC,QAAQ,IAAI,KAAK,CAAE,QAAO;AAC/B,UAAO,QAAQ,IAAI;;EAErB,IAAI,SAAS,MAAc;AACzB,UAAO,OAAO,SAAS,YAAY,QAAQ,IAAI,KAAK;;EAEtD,UAAU;AACR,UAAO,CAAC,GAAG,QAAQ;;EAErB,yBAAyB,SAAS,MAAc;AAC9C,OAAI,OAAO,SAAS,YAAY,CAAC,QAAQ,IAAI,KAAK,CAAE,QAAO;AAC3D,UAAO;IAAE,cAAc;IAAM,YAAY;IAAM,OAAO,QAAQ,IAAI;IAAO;;EAE3E,MAAM;AACJ,UAAO;;EAET,iBAAiB;AACf,UAAO;;EAEV,CAAC"}

package/dist/agent-runners/guide-rails.cjs

@@ -0,0 +1,47 @@
+let ufo = require("ufo");
+
+//#region src/agent-runners/guide-rails.ts
+function decideFromPayload(data) {
+	if (!data || typeof data !== "object") return { abort: false };
+	const d = data;
+	if (d.abort === true) return {
+		abort: true,
+		reason: typeof d.reason === "string" ? d.reason : void 0
+	};
+	if ("output" in d) return {
+		abort: false,
+		output: d.output
+	};
+	return { abort: false };
+}
+async function runGuideRails(afs, guideRailPaths, input, output, opts) {
+	let current = output;
+	let rewritten = false;
+	for (const rawPath of guideRailPaths) {
+		const path = rawPath.startsWith("/") ? rawPath : (0, ufo.joinURL)(opts.mountPath, rawPath);
+		try {
+			const res = await afs.exec(path, {
+				input,
+				output: current
+			}, {});
+			const decision = decideFromPayload(res?.data ?? res);
+			if (decision.abort) return decision;
+			if (decision.output !== void 0) {
+				current = decision.output;
+				rewritten = true;
+			}
+		} catch (err) {
+			return {
+				abort: true,
+				reason: `GuideRail "${rawPath}" raised: ${err instanceof Error ? err.message : String(err)}`
+			};
+		}
+	}
+	return rewritten ? {
+		abort: false,
+		output: current
+	} : { abort: false };
+}
+
+//#endregion
+exports.runGuideRails = runGuideRails;

package/dist/agent-runners/guide-rails.d.cts

@@ -0,0 +1,16 @@
+import { AFSRoot } from "@aigne/afs";
+
+//#region src/agent-runners/guide-rails.d.ts
+interface GuideRailResult {
+  abort: boolean;
+  reason?: string;
+  /** When set, rail requested the output be replaced with this value. */
+  output?: unknown;
+}
+interface RunGuideRailsOptions {
+  mountPath: string;
+}
+declare function runGuideRails(afs: AFSRoot, guideRailPaths: readonly string[], input: Record<string, unknown>, output: unknown, opts: RunGuideRailsOptions): Promise<GuideRailResult>;
+//#endregion
+export { GuideRailResult, RunGuideRailsOptions, runGuideRails };
+//# sourceMappingURL=guide-rails.d.cts.map

package/dist/agent-runners/guide-rails.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guide-rails.d.cts","names":[],"sources":["../../src/agent-runners/guide-rails.ts"],"mappings":";;;UAGiB,eAAA;EACf,KAAA;EACA,MAAA;EAF8B;EAI9B,MAAA;AAAA;AAAA,UAGe,oBAAA;EACf,SAAA;AAAA;AAAA,iBAaoB,aAAA,CACpB,GAAA,EAAK,OAAA,EACL,cAAA,qBACA,KAAA,EAAO,MAAA,mBACP,MAAA,WACA,IAAA,EAAM,oBAAA,GACL,OAAA,CAAQ,eAAA"}

package/dist/agent-runners/guide-rails.d.mts

@@ -0,0 +1,16 @@
+import { AFSRoot } from "@aigne/afs";
+
+//#region src/agent-runners/guide-rails.d.ts
+interface GuideRailResult {
+  abort: boolean;
+  reason?: string;
+  /** When set, rail requested the output be replaced with this value. */
+  output?: unknown;
+}
+interface RunGuideRailsOptions {
+  mountPath: string;
+}
+declare function runGuideRails(afs: AFSRoot, guideRailPaths: readonly string[], input: Record<string, unknown>, output: unknown, opts: RunGuideRailsOptions): Promise<GuideRailResult>;
+//#endregion
+export { GuideRailResult, RunGuideRailsOptions, runGuideRails };
+//# sourceMappingURL=guide-rails.d.mts.map

package/dist/agent-runners/guide-rails.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guide-rails.d.mts","names":[],"sources":["../../src/agent-runners/guide-rails.ts"],"mappings":";;;UAGiB,eAAA;EACf,KAAA;EACA,MAAA;EAF8B;EAI9B,MAAA;AAAA;AAAA,UAGe,oBAAA;EACf,SAAA;AAAA;AAAA,iBAaoB,aAAA,CACpB,GAAA,EAAK,OAAA,EACL,cAAA,qBACA,KAAA,EAAO,MAAA,mBACP,MAAA,WACA,IAAA,EAAM,oBAAA,GACL,OAAA,CAAQ,eAAA"}

package/dist/agent-runners/guide-rails.mjs

@@ -0,0 +1,48 @@
+import { joinURL } from "ufo";
+
+//#region src/agent-runners/guide-rails.ts
+function decideFromPayload(data) {
+	if (!data || typeof data !== "object") return { abort: false };
+	const d = data;
+	if (d.abort === true) return {
+		abort: true,
+		reason: typeof d.reason === "string" ? d.reason : void 0
+	};
+	if ("output" in d) return {
+		abort: false,
+		output: d.output
+	};
+	return { abort: false };
+}
+async function runGuideRails(afs, guideRailPaths, input, output, opts) {
+	let current = output;
+	let rewritten = false;
+	for (const rawPath of guideRailPaths) {
+		const path = rawPath.startsWith("/") ? rawPath : joinURL(opts.mountPath, rawPath);
+		try {
+			const res = await afs.exec(path, {
+				input,
+				output: current
+			}, {});
+			const decision = decideFromPayload(res?.data ?? res);
+			if (decision.abort) return decision;
+			if (decision.output !== void 0) {
+				current = decision.output;
+				rewritten = true;
+			}
+		} catch (err) {
+			return {
+				abort: true,
+				reason: `GuideRail "${rawPath}" raised: ${err instanceof Error ? err.message : String(err)}`
+			};
+		}
+	}
+	return rewritten ? {
+		abort: false,
+		output: current
+	} : { abort: false };
+}
+
+//#endregion
+export { runGuideRails };
+//# sourceMappingURL=guide-rails.mjs.map

package/dist/agent-runners/guide-rails.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"guide-rails.mjs","names":[],"sources":["../../src/agent-runners/guide-rails.ts"],"sourcesContent":["import type { AFSRoot } from \"@aigne/afs\";\nimport { joinURL } from \"ufo\";\n\nexport interface GuideRailResult {\n  abort: boolean;\n  reason?: string;\n  /** When set, rail requested the output be replaced with this value. */\n  output?: unknown;\n}\n\nexport interface RunGuideRailsOptions {\n  mountPath: string;\n}\n\nfunction decideFromPayload(data: unknown): GuideRailResult {\n  if (!data || typeof data !== \"object\") return { abort: false };\n  const d = data as Record<string, unknown>;\n  if (d.abort === true) {\n    return { abort: true, reason: typeof d.reason === \"string\" ? d.reason : undefined };\n  }\n  if (\"output\" in d) return { abort: false, output: d.output };\n  return { abort: false };\n}\n\nexport async function runGuideRails(\n  afs: AFSRoot,\n  guideRailPaths: readonly string[],\n  input: Record<string, unknown>,\n  output: unknown,\n  opts: RunGuideRailsOptions,\n): Promise<GuideRailResult> {\n  let current = output;\n  let rewritten = false;\n  for (const rawPath of guideRailPaths) {\n    const path = rawPath.startsWith(\"/\") ? rawPath : joinURL(opts.mountPath, rawPath);\n    try {\n      const res = await afs.exec!(path, { input, output: current }, {});\n      const envelope = res as { data?: unknown } | undefined;\n      const decision = decideFromPayload(envelope?.data ?? res);\n      if (decision.abort) return decision;\n      if (decision.output !== undefined) {\n        current = decision.output;\n        rewritten = true;\n      }\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      return { abort: true, reason: `GuideRail \"${rawPath}\" raised: ${message}` };\n    }\n  }\n  return rewritten ? { abort: false, output: current } : { abort: false };\n}\n"],"mappings":";;;AAcA,SAAS,kBAAkB,MAAgC;AACzD,KAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO,EAAE,OAAO,OAAO;CAC9D,MAAM,IAAI;AACV,KAAI,EAAE,UAAU,KACd,QAAO;EAAE,OAAO;EAAM,QAAQ,OAAO,EAAE,WAAW,WAAW,EAAE,SAAS;EAAW;AAErF,KAAI,YAAY,EAAG,QAAO;EAAE,OAAO;EAAO,QAAQ,EAAE;EAAQ;AAC5D,QAAO,EAAE,OAAO,OAAO;;AAGzB,eAAsB,cACpB,KACA,gBACA,OACA,QACA,MAC0B;CAC1B,IAAI,UAAU;CACd,IAAI,YAAY;AAChB,MAAK,MAAM,WAAW,gBAAgB;EACpC,MAAM,OAAO,QAAQ,WAAW,IAAI,GAAG,UAAU,QAAQ,KAAK,WAAW,QAAQ;AACjF,MAAI;GACF,MAAM,MAAM,MAAM,IAAI,KAAM,MAAM;IAAE;IAAO,QAAQ;IAAS,EAAE,EAAE,CAAC;GAEjE,MAAM,WAAW,kBADA,KAC4B,QAAQ,IAAI;AACzD,OAAI,SAAS,MAAO,QAAO;AAC3B,OAAI,SAAS,WAAW,QAAW;AACjC,cAAU,SAAS;AACnB,gBAAY;;WAEP,KAAK;AAEZ,UAAO;IAAE,OAAO;IAAM,QAAQ,cAAc,QAAQ,YADpC,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;IACW;;;AAG/E,QAAO,YAAY;EAAE,OAAO;EAAO,QAAQ;EAAS,GAAG,EAAE,OAAO,OAAO"}