@assemblyline-agents/runtime 0.1.0

package/dist/runtime-types.d.ts

@@ -0,0 +1,397 @@
+import type { AgentHarness, AgentManifest, ConnectionPrincipal, ContentCaptureLevel, ContentCapturePolicy, JsonObject, JsonSchema, JsonValue, MemoryListInput, MemoryReadInput, MemorySearchInput, MemoryWriteInput, ReasoningLevel, ResourceKind, ResourceMetadata, SandboxSession, SandboxSnapshotPolicy, ScheduleTriggerDefinition, TriggerTarget } from "@assemblyline-agents/core";
+import type { ChannelTurn } from "./channel.js";
+import type { EvalRunOptions } from "./eval-run-options.js";
+import type { CheckpointRetentionPolicy } from "./checkpoints.js";
+import type { SemaphoreAdmission } from "./concurrency.js";
+import type { ConnectionAuthorizationSessionStore, ConnectionGrantStore, ConnectionToolMetadata, RuntimeConnectionRegistry } from "./connections.js";
+import type { RuntimePause } from "./harness-continuation.js";
+import type { RuntimeLogger } from "./logging.js";
+import type { SchedulerAdapter } from "./scheduler.js";
+import type { CoreToolPolicy } from "./security.js";
+import type { ConnectionDefinitionStore, ScheduleStore, SkillStore } from "./self-improvement.js";
+import type { DeliveryObligation, MemoryDocument, MemoryEmbeddingProvider, MemoryScope, MemorySearchResult, RunEvent, RunRecord, StateAdapter, StateStores, ToolCallRecord } from "./state.js";
+import type { TelemetrySink, TelemetrySpan } from "./telemetry.js";
+/**
+ * Runtime option/result/adapter contracts shared by the OpenEveRuntime class
+ * and its extracted helper modules. Types only — the runtime's values stay in
+ * `index.ts` (or their own modules) so this file can sit at the bottom of the
+ * module graph.
+ */
+export type BlobVisibility = "private" | "public";
+export interface BlobPutOptions {
+    contentType?: string;
+    visibility?: BlobVisibility;
+}
+export interface BlobAdapter {
+    put(key: string, value: string | Uint8Array, contentTypeOrOptions?: string | BlobPutOptions): Promise<BlobRecord>;
+    get(key: string): Promise<Uint8Array | undefined>;
+}
+export interface BlobRecord {
+    id: string;
+    key: string;
+    uri: string;
+    sha256: string;
+    contentType?: string;
+    size: number;
+    visibility?: BlobVisibility;
+}
+export interface SandboxAdapter {
+    provider?: string;
+    acquire(run: RunRecord): Promise<SandboxSession>;
+    create?(run: RunRecord, input?: SandboxCreateInput): Promise<SandboxSession>;
+    lookup?(input: SandboxLookupInput): Promise<SandboxLookupResult | undefined>;
+    connect?(input: SandboxReconnectInput): Promise<SandboxSession | undefined>;
+    wake?(input: SandboxReconnectInput): Promise<SandboxSession | undefined>;
+    pauseOrRetain?(session: SandboxSession, input?: {
+        dirty?: boolean;
+        reason?: string;
+    }): Promise<void>;
+    disposeClean?(session: SandboxSession): Promise<void>;
+}
+export interface SandboxCreateInput {
+    sessionKey: string;
+    snapshotId?: string;
+    metadata?: JsonObject;
+}
+export interface SandboxLookupInput {
+    sessionKey: string;
+    runId: string;
+    agentRevision: string;
+    manifest?: JsonObject;
+}
+export interface SandboxLookupResult {
+    sandboxId: string;
+    state?: "live" | "warm";
+    root?: string;
+    manifest?: JsonObject;
+}
+export interface SandboxReconnectInput {
+    runId: string;
+    sandboxId: string;
+    sessionKey?: string;
+    root?: string;
+    manifest?: JsonObject;
+}
+export interface MemoryEmbeddingBackfillResult {
+    enabled: boolean;
+    processed: number;
+    skipped: number;
+    model?: string;
+}
+export interface MemoryDocumentBackfillResult {
+    scanned: number;
+    backfilled: number;
+    skipped: number;
+}
+export interface MemoryStore {
+    list(scope: MemoryScope, input?: MemoryListInput): Promise<MemoryDocument[]>;
+    search(scope: MemoryScope, input: MemorySearchInput): Promise<MemorySearchResult[]>;
+    read(scope: MemoryScope, input: MemoryReadInput): Promise<MemoryDocument | undefined>;
+    write(scope: MemoryScope, input: MemoryWriteInput): Promise<MemoryDocument>;
+}
+export interface RuntimeSandboxHandle {
+    current(): SandboxSession | undefined;
+    get(): Promise<SandboxSession>;
+    getWrapped(): Promise<SandboxSession>;
+    dispose(): Promise<void>;
+}
+export interface SandboxTombstone {
+    path: string;
+    deletedAt?: string;
+    runId?: string;
+}
+export interface ResourceProjectionPolicy {
+    maxFiles?: number;
+    maxTotalBytes?: number;
+    allowedKinds?: ResourceKind[];
+    allowWritable?: boolean;
+}
+export interface ResolvedResourceProjectionPolicy {
+    maxFiles: number;
+    maxTotalBytes: number;
+    allowedKinds: Set<ResourceKind>;
+    allowWritable: boolean;
+}
+export interface ResolvedResource {
+    metadata: ResourceMetadata;
+    contents: string | Uint8Array;
+}
+export interface ResourceProjectionSelector {
+    path: string;
+    sandboxPath?: string;
+    writable?: boolean;
+}
+export interface RuntimeOptions {
+    manifest: AgentManifest;
+    /** Built artifact root used for runtime module-cache package resolution. */
+    artifactRoot?: string;
+    state?: StateAdapter | StateStores;
+    blob?: BlobAdapter;
+    sandbox?: SandboxAdapter;
+    scheduler?: SchedulerAdapter;
+    /** Persist delivery obligations without invoking channel senders (for evals and dry runs). */
+    deliveryMode?: "send" | "record-only";
+    /**
+     * Test/eval seam: replace named tool executions with canned implementations.
+     * A stub wins over built-in and authored tool modules (the authored module
+     * is never imported). Approval gates, tool-call recording, run events, and
+     * model-output bounding still apply; connection tools are not stubbable.
+     */
+    toolStubs?: Record<string, (input: unknown) => unknown | Promise<unknown>>;
+    /** Optional pi model catalog override, forwarded to `piAgentHarness({ models })`. */
+    models?: unknown;
+    /** Provider-prefix model harnesses; `agentHarness` remains higher precedence. */
+    modelHarnesses?: Record<string, AgentHarness>;
+    /**
+     * Embedder/test seam over the internal AgentHarness contract. When set, it
+     * replaces the default pi engine for primary and pi-kind subagent turns.
+     */
+    agentHarness?: AgentHarness;
+    devMode?: boolean;
+    sourceBundle?: Record<string, string>;
+    connections?: Record<string, unknown>;
+    env?: Record<string, string | undefined>;
+    fetch?: typeof fetch;
+    telemetry?: TelemetrySink;
+    /** Host/gateway-supplied instrumentation overrides; win over `instrumentation.ts`. */
+    instrumentation?: RuntimeInstrumentationOverride;
+    logger?: RuntimeLogger;
+    connectionGrantStore?: ConnectionGrantStore;
+    connectionAuthorizationSessionStore?: ConnectionAuthorizationSessionStore;
+    connectionCallbackBaseUrl?: string;
+    skillStore?: SkillStore;
+    scheduleStore?: ScheduleStore;
+    connectionDefinitionStore?: ConnectionDefinitionStore;
+    schedulerEnabled?: boolean;
+    schedulerTickMs?: number;
+    now?: () => Date;
+    sandboxSnapshotPolicy?: SandboxSnapshotPolicy;
+    memoryStore?: MemoryStore;
+    sandboxSyncInline?: boolean;
+    sandboxSyncLeaseMs?: number;
+    sandboxSyncBatchSize?: number;
+    sandboxSyncMaxAttempts?: number;
+    deliveryQueueLeaseMs?: number;
+    deliveryQueueBatchSize?: number;
+    deliveryQueueMaxAttempts?: number;
+    deliveryQueueIntervalMs?: number;
+    runHeartbeatMs?: number;
+    /** Wall-clock cap per active run execution segment (env `OPENEVE_MAX_RUN_DURATION_MS`). Default 1h; 0 disables. */
+    maxRunDurationMs?: number;
+    runRecoveryIntervalMs?: number;
+    /** Max simultaneously executing brand-new runs (env `OPENEVE_MAX_CONCURRENT_RUNS`). Default Infinity. Resumes never count against this. */
+    maxConcurrentRuns?: number;
+    /** Max brand-new runs waiting for a slot before rejection (env `OPENEVE_MAX_QUEUED_RUNS`). Default 0. */
+    maxQueuedRuns?: number;
+    checkpointRetention?: CheckpointRetentionPolicy;
+    memoryEmbeddingProvider?: MemoryEmbeddingProvider;
+    memoryEmbeddingsEnabled?: boolean;
+    resourceProjectionPolicy?: ResourceProjectionPolicy;
+    coreToolPolicy?: CoreToolPolicy;
+}
+export interface DynamicConnectionGrantInput {
+    token: string;
+    principal?: ConnectionPrincipal;
+    principalKey?: string;
+}
+export interface RunAgentOptions {
+    message: string;
+    model?: string;
+    toolName?: string;
+    input?: unknown;
+    approve?: boolean;
+    channel?: string;
+    recentHistory?: string[];
+    attachments?: JsonObject[];
+    turn?: ChannelTurn;
+    metadata?: JsonObject;
+    eventId?: string;
+    userId?: string;
+    conversationId?: string;
+    projectId?: string;
+    delivery?: JsonObject;
+    existingRun?: RunRecord;
+    target?: TriggerTarget;
+    promptContext?: JsonObject;
+    trustedAttachmentProvider?: string;
+    /**
+     * Eval harness options (tool stubs, approval auto-resolve, record-only
+     * delivery). Persisted verbatim into RunRecord.input.eval so the block is
+     * auditable in run detail and survives crash-resume.
+     */
+    eval?: EvalRunOptions;
+    /**
+     * Pre-acquired capacity admission from a host entry point that claimed the
+     * slot before consuming an idempotency key. Internal; `run()` releases it.
+     */
+    admission?: SemaphoreAdmission;
+    /**
+     * Begin the originating channel lifecycle as soon as the admitted run starts,
+     * in parallel with runtime initialization and durable run creation. Internal;
+     * accepted HTTP ingress sets this so typing indicators are not gated on setup.
+     */
+    startChannelTurnEarly?: boolean;
+    /**
+     * Invoked as soon as the run record exists, before execution starts.
+     * Streaming hosts use it to attach a live event stream to the run id;
+     * events emitted before the attach are recoverable from the event log.
+     */
+    onRunCreated?: (run: RunRecord) => Promise<void> | void;
+}
+export interface RunAgentResult {
+    run: RunRecord;
+    events: RunEvent[];
+    toolCalls: ToolCallRecord[];
+    deliveries: DeliveryObligation[];
+    response?: string;
+    /** Parsed final output when the agent declares outputSchema. */
+    output?: JsonValue;
+    waitingForApproval?: boolean;
+    waitingForInput?: boolean;
+    waitingForConnection?: boolean;
+}
+export interface ConnectionAuthorizationCallbackResult {
+    status: number;
+    body: JsonObject;
+    runResult?: RunAgentResult;
+}
+export interface ContextBundle {
+    id: string;
+    agentRevision: string;
+    instructions: string;
+    activeEvent: JsonObject;
+    recentHistory: string[];
+    memoryFilesystem: Record<string, string>;
+    fileManifest: JsonObject;
+    attachments: JsonObject[];
+    skills: JsonObject[];
+    skillFilesystem: Record<string, string>;
+    tools: JsonObject[];
+    capabilities: JsonObject[];
+    channels: JsonObject[];
+    trustBoundaries: string[];
+}
+export interface ScheduleExecutionResult {
+    schedule: string;
+    dueAt: string;
+    idempotencyKey: string;
+    status: "completed" | "failed" | "skipped";
+    runId?: string;
+    error?: string;
+}
+export interface AutomationEventDispatchResult {
+    automation: string;
+    eventId: string;
+    idempotencyKey: string;
+    status: "completed" | "failed" | "skipped";
+    runId?: string;
+    error?: string;
+}
+export interface RuntimeScheduleExecution {
+    source: "manifest" | "dynamic";
+    scheduleId: string;
+    resultSchedule: string;
+    dueAtIso: string;
+    idempotencyKey: string;
+    message: string;
+    channel: string;
+    trigger?: ScheduleTriggerDefinition;
+    target?: TriggerTarget;
+    automationEvent?: import("@assemblyline-agents/core").AutomationEvent;
+    metadata: JsonObject;
+    definition: JsonObject;
+    userId?: string;
+    conversationId?: string;
+    projectId?: string;
+    delivery?: JsonObject;
+    turnMetadata?: JsonObject;
+}
+export interface FilesystemSyncResult {
+    memoryRevision: string;
+    memoryFiles: BlobRecord[];
+    artifacts: BlobRecord[];
+    fileRevisions: JsonObject[];
+}
+/** Engine-neutral session state the runtime persists alongside an opaque harness continuation. */
+export interface HarnessLoopSession {
+    modelSpec: string;
+    reasoning?: ReasoningLevel | undefined;
+    systemPrompt: string;
+    outputSchema?: JsonSchema | undefined;
+    maxIterations?: number | undefined;
+    sessionId: string;
+    channel: string;
+    conversationId?: string;
+    activeSkills: Set<string>;
+    defaultToolNames: Set<string>;
+    discoveredConnectionTools: Map<string, ConnectionToolMetadata>;
+    /** Provider-reported input tokens of the most recent model request; the next turn's compaction gate. */
+    lastInputTokens?: number;
+}
+/** Mutable per-loop runtime state shared between the harness context callbacks. */
+export interface HarnessLoopState {
+    run: () => RunRecord;
+    setRun: (run: RunRecord) => void;
+    sandboxHandle: RuntimeSandboxHandle;
+    activeSkills: Set<string>;
+    defaultToolNames: Set<string>;
+    connectionRegistry: RuntimeConnectionRegistry;
+    discoveredConnectionTools: Map<string, ConnectionToolMetadata>;
+    setPause: (pause: RuntimePause) => void;
+}
+/** Engine-neutral fields restored from a persisted harness continuation checkpoint. */
+export type DeliverySendResult = {
+    ok: true;
+    metadata?: JsonObject;
+    attempts?: number;
+} | {
+    ok: false;
+    error: string;
+    attempts?: number;
+    retryable?: boolean;
+};
+export interface RuntimeInstrumentationDefinition {
+    serviceName?: string;
+    requiredEnv?: string[];
+    setup?: (context: {
+        agentName: string;
+        manifest: AgentManifest;
+        env: Record<string, string | undefined>;
+    }) => Promise<unknown> | unknown;
+    recordInputs?: boolean;
+    recordOutputs?: boolean;
+    captureContent?: ContentCaptureLevel | ContentCapturePolicy;
+    functionId?: string;
+    telemetry?: unknown;
+}
+/** Host/gateway-supplied instrumentation overrides (win over instrumentation.ts). */
+export interface RuntimeInstrumentationOverride {
+    serviceName?: string;
+    functionId?: string;
+    recordInputs?: boolean;
+    recordOutputs?: boolean;
+    captureContent?: ContentCaptureLevel | ContentCapturePolicy;
+}
+/** Fully-resolved content-capture policy (all defaults filled in). */
+export interface ResolvedCapturePolicy {
+    level: ContentCaptureLevel;
+    maxChars: number;
+    redact: boolean;
+    redactKeys: string[];
+    sampleRate: number;
+    includeToolIO: boolean;
+}
+export interface RuntimeInstrumentationConfig {
+    recordInputs: boolean;
+    recordOutputs: boolean;
+    functionId: string;
+    serviceName: string;
+    contentCapture: ResolvedCapturePolicy;
+}
+export interface EmitSpanOptions {
+    parentSpanId?: string;
+    spanId?: string;
+    traceId?: string;
+    status?: TelemetrySpan["status"];
+}
+//# sourceMappingURL=runtime-types.d.ts.map

package/dist/runtime-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-types.d.ts","sourceRoot":"","sources":["../src/runtime-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,UAAU,EACV,UAAU,EACV,SAAS,EACT,eAAe,EACf,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,qBAAqB,EACrB,yBAAyB,EACzB,aAAa,EACd,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,KAAK,EACV,mCAAmC,EACnC,oBAAoB,EACpB,sBAAsB,EACtB,yBAAyB,EAC1B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EACV,yBAAyB,EACzB,aAAa,EACb,UAAU,EACX,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAEV,kBAAkB,EAClB,cAAc,EACd,uBAAuB,EACvB,WAAW,EACX,kBAAkB,EAClB,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,WAAW,EACX,cAAc,EACf,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEnE;;;;;GAKG;AAEH,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,QAAQ,CAAC;AAElD,MAAM,WAAW,cAAc;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,cAAc,CAAC;CAC7B;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,UAAU,EAAE,oBAAoB,CAAC,EAAE,MAAM,GAAG,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAClH,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;CACnD;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,cAAc,CAAC;CAC7B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACjD,MAAM,CAAC,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7E,MAAM,CAAC,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAAC;IAC7E,OAAO,CAAC,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IAC5E,IAAI,CAAC,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IACzE,aAAa,CAAC,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrG,YAAY,CAAC,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,UAAU,CAAC;CACvB;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,UAAU,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,UAAU,CAAC;CACvB;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,UAAU,CAAC;CACvB;AAED,MAAM,WAAW,6BAA6B;IAC5C,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAC7E,MAAM,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IACpF,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IACtF,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CAC7E;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,IAAI,cAAc,GAAG,SAAS,CAAC;IACtC,GAAG,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;IAC/B,UAAU,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;IACtC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,YAAY,EAAE,CAAC;IAC9B,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;IAChC,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,QAAQ,EAAE,MAAM,GAAG,UAAU,CAAC;CAC/B;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,aAAa,CAAC;IACxB,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,YAAY,GAAG,WAAW,CAAC;IACnC,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,8FAA8F;IAC9F,YAAY,CAAC,EAAE,MAAM,GAAG,aAAa,CAAC;IACtC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3E,qFAAqF;IACrF,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,iFAAiF;IACjF,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC9C;;;OAGG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,sFAAsF;IACtF,eAAe,CAAC,EAAE,8BAA8B,CAAC;IACjD,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C,mCAAmC,CAAC,EAAE,mCAAmC,CAAC;IAC1E,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,yBAAyB,CAAC,EAAE,yBAAyB,CAAC;IACtD,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IAC9C,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mHAAmH;IACnH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,2IAA2I;IAC3I,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,yGAAyG;IACzG,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,yBAAyB,CAAC;IAChD,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;IAClD,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,wBAAwB,CAAC,EAAE,wBAAwB,CAAC;IACpD,cAAc,CAAC,EAAE,cAAc,CAAC;CACjC;AAED,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC;IAC3B,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,QAAQ,CAAC,EAAE,UAAU,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,UAAU,CAAC;IACtB,WAAW,CAAC,EAAE,SAAS,CAAC;IACxB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,aAAa,CAAC,EAAE,UAAU,CAAC;IAC3B,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC;;;;OAIG;IACH,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB;;;OAGG;IACH,SAAS,CAAC,EAAE,kBAAkB,CAAC;IAC/B;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;;;OAIG;IACH,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CACzD;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,SAAS,CAAC;IACf,MAAM,EAAE,QAAQ,EAAE,CAAC;IACnB,SAAS,EAAE,cAAc,EAAE,CAAC;IAC5B,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gEAAgE;IAChE,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED,MAAM,WAAW,qCAAqC;IACpD,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,UAAU,CAAC;IACjB,SAAS,CAAC,EAAE,cAAc,CAAC;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,UAAU,CAAC;IACxB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,YAAY,EAAE,UAAU,CAAC;IACzB,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,YAAY,EAAE,UAAU,EAAE,CAAC;IAC3B,QAAQ,EAAE,UAAU,EAAE,CAAC;IACvB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC3C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC3C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,yBAAyB,CAAC;IACpC,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,eAAe,CAAC,EAAE,OAAO,2BAA2B,EAAE,eAAe,CAAC;IACtE,QAAQ,EAAE,UAAU,CAAC;IACrB,UAAU,EAAE,UAAU,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,UAAU,CAAC;IACtB,YAAY,CAAC,EAAE,UAAU,CAAC;CAC3B;AAED,MAAM,WAAW,oBAAoB;IACnC,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,SAAS,EAAE,UAAU,EAAE,CAAC;IACxB,aAAa,EAAE,UAAU,EAAE,CAAC;CAC7B;AAED,kGAAkG;AAClG,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IACvC,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IACtC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1B,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,yBAAyB,EAAE,GAAG,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IAC/D,wGAAwG;IACxG,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,mFAAmF;AACnF,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,SAAS,CAAC;IACrB,MAAM,EAAE,CAAC,GAAG,EAAE,SAAS,KAAK,IAAI,CAAC;IACjC,aAAa,EAAE,oBAAoB,CAAC;IACpC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1B,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,kBAAkB,EAAE,yBAAyB,CAAC;IAC9C,yBAAyB,EAAE,GAAG,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IAC/D,QAAQ,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAAC;CACzC;AAED,uFAAuF;AACvF,MAAM,MAAM,kBAAkB,GAC1B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GACtD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAEzE,MAAM,WAAW,gCAAgC;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,aAAa,CAAC;QACxB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;KACzC,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IACjC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,cAAc,CAAC,EAAE,mBAAmB,GAAG,oBAAoB,CAAC;IAC5D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,qFAAqF;AACrF,MAAM,WAAW,8BAA8B;IAC7C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,cAAc,CAAC,EAAE,mBAAmB,GAAG,oBAAoB,CAAC;CAC7D;AAED,sEAAsE;AACtE,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,mBAAmB,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,4BAA4B;IAC3C,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,EAAE,OAAO,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,qBAAqB,CAAC;CACvC;AAED,MAAM,WAAW,eAAe;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;CAClC"}

package/dist/runtime-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=runtime-types.js.map

package/dist/runtime-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-types.js","sourceRoot":"","sources":["../src/runtime-types.ts"],"names":[],"mappings":""}

package/dist/runtime-util.d.ts

@@ -0,0 +1,45 @@
+import type { AgentManifest, CompiledTool, ConnectionApprovalDefinition, ConnectionPrincipal, ContentCaptureLevel, ContentCapturePolicy, DurableStepOptions, JsonObject } from "@assemblyline-agents/core";
+import type { RuntimeInstrumentationDefinition } from "./runtime-types.js";
+import type { DynamicScheduleRecord } from "./self-improvement.js";
+/**
+ * Small pure runtime helpers shared across the runtime class and its
+ * extracted modules: hashing, timestamps, schedule due-times, redaction and
+ * normalization utilities with no runtime state of their own.
+ */
+export declare function byteLength(value: string | Uint8Array): number;
+export declare function dueTimeForSchedule(schedule: AgentManifest["scheduleRegistrations"][number], now: Date, lookbackMs: number): Date | undefined;
+export declare function dynamicScheduleMessage(schedule: DynamicScheduleRecord): string;
+export declare function durableStepEventData(key: string, options?: DurableStepOptions): JsonObject;
+export declare function normalizeConnectionApproval(policy: ConnectionApprovalDefinition | undefined): {
+    mode: "never" | "always" | "once";
+    reason?: string;
+};
+export declare function stringValue(value: unknown): string;
+export declare function sanitizeLocalSandboxKey(value: string): string;
+export declare function hashJson(value: unknown): string;
+export declare function randomHex(bytes: number): string;
+export declare function isInstrumentationDefinition(value: unknown): value is RuntimeInstrumentationDefinition;
+export declare function toolRequiresSandbox(tool: CompiledTool): boolean;
+export declare function connectionPrincipalKeyForGrant(principal: ConnectionPrincipal): string;
+export declare const DEFAULT_CONTENT_MAX_CHARS = 8000;
+export declare const FULL_CONTENT_MAX_CHARS = 200000;
+/** Fills a bare level or partial policy with all defaults (usage-level default). */
+export declare function normalizeCapturePolicy(value: ContentCaptureLevel | ContentCapturePolicy | undefined): {
+    level: ContentCaptureLevel;
+    maxChars: number;
+    redact: boolean;
+    redactKeys: string[];
+    sampleRate: number;
+    includeToolIO: boolean;
+};
+export declare function clampUnitInterval(value: number): number;
+export declare function timestamp(): string;
+export declare function currentModulePath(metaUrl: string): string;
+/**
+ * Durable-state scope for an agent: pinned `agent.id` when declared, else the
+ * content-addressed revision. Exported so hosts and the eval runner can seed
+ * durable stores (memory, sandbox sessions) under the same scope the runtime
+ * will read from.
+ */
+export declare function durableAgentScopeForManifest(manifest: AgentManifest): string;
+//# sourceMappingURL=runtime-util.d.ts.map

package/dist/runtime-util.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-util.d.ts","sourceRoot":"","sources":["../src/runtime-util.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,aAAa,EACb,YAAY,EACZ,4BAA4B,EAC5B,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,EAClB,UAAU,EACX,MAAM,2BAA2B,CAAC;AAEnC,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAEnE;;;;GAIG;AAEH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAE7D;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,aAAa,CAAC,uBAAuB,CAAC,CAAC,MAAM,CAAC,EACxD,GAAG,EAAE,IAAI,EACT,UAAU,EAAE,MAAM,GACjB,IAAI,GAAG,SAAS,CAalB;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,qBAAqB,GAAG,MAAM,CAE9E;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,kBAAkB,GAAG,UAAU,CAI1F;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,4BAA4B,GAAG,SAAS,GAAG;IAAE,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAWpJ;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAGlD;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAG7D;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAE/C;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,gCAAgC,CAErG;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAE/D;AAED,wBAAgB,8BAA8B,CAAC,SAAS,EAAE,mBAAmB,GAAG,MAAM,CAErF;AAED,eAAO,MAAM,yBAAyB,OAAQ,CAAC;AAC/C,eAAO,MAAM,sBAAsB,SAAU,CAAC;AAE9C,oFAAoF;AACpF,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,mBAAmB,GAAG,oBAAoB,GAAG,SAAS,GAAG;IACrG,KAAK,EAAE,mBAAmB,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,OAAO,CAAC;CACxB,CAaA;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGvD;AAGD,wBAAgB,SAAS,IAAI,MAAM,CAElC;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,CAG5E"}

package/dist/runtime-util.js

@@ -0,0 +1,116 @@
+import { createHash, randomUUID } from "node:crypto";
+import { fileURLToPath } from "node:url";
+import { CronExpressionParser } from "cron-parser";
+import { safeJson } from "./json-util.js";
+/**
+ * Small pure runtime helpers shared across the runtime class and its
+ * extracted modules: hashing, timestamps, schedule due-times, redaction and
+ * normalization utilities with no runtime state of their own.
+ */
+export function byteLength(value) {
+    return typeof value === "string" ? Buffer.byteLength(value) : value.byteLength;
+}
+export function dueTimeForSchedule(schedule, now, lookbackMs) {
+    try {
+        const options = { currentDate: new Date(now.getTime() + 1) };
+        if (schedule.timezone)
+            options.tz = schedule.timezone;
+        const expression = CronExpressionParser.parse(schedule.cron, options);
+        const previousIso = expression.prev().toISOString();
+        if (!previousIso)
+            return undefined;
+        const dueAt = new Date(previousIso);
+        const ageMs = now.getTime() - dueAt.getTime();
+        return ageMs >= 0 && ageMs <= lookbackMs ? dueAt : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+export function dynamicScheduleMessage(schedule) {
+    return schedule.message ?? schedule.prompt;
+}
+export function durableStepEventData(key, options) {
+    const data = { key };
+    if (options?.metadata)
+        data.metadata = safeJson(options.metadata);
+    return data;
+}
+export function normalizeConnectionApproval(policy) {
+    if (policy === true)
+        return { mode: "always" };
+    if (policy === false || policy === undefined)
+        return { mode: "never" };
+    if (policy.mode === "never" || policy.mode === "always" || policy.mode === "once") {
+        const out = { mode: policy.mode };
+        if (policy.reason)
+            out.reason = policy.reason;
+        return out;
+    }
+    const out = { mode: policy.mode === "conditional" ? "always" : "never" };
+    if (policy.reason)
+        out.reason = policy.reason;
+    return out;
+}
+export function stringValue(value) {
+    if (typeof value === "number" && Number.isFinite(value))
+        return String(value);
+    return typeof value === "string" ? value.trim() : "";
+}
+export function sanitizeLocalSandboxKey(value) {
+    const clean = value.trim().replace(/[^A-Za-z0-9_.:-]/g, "-").slice(0, 160);
+    return clean || "default";
+}
+export function hashJson(value) {
+    return createHash("sha256").update(JSON.stringify(value)).digest("hex");
+}
+export function randomHex(bytes) {
+    return createHash("sha256").update(randomUUID()).digest("hex").slice(0, bytes * 2);
+}
+export function isInstrumentationDefinition(value) {
+    return Boolean(value) && typeof value === "object";
+}
+export function toolRequiresSandbox(tool) {
+    return tool.execution === "sandbox";
+}
+export function connectionPrincipalKeyForGrant(principal) {
+    return principal.type === "app" ? "app" : `user:${principal.issuer}:${principal.id}`;
+}
+export const DEFAULT_CONTENT_MAX_CHARS = 8_000;
+export const FULL_CONTENT_MAX_CHARS = 200_000;
+/** Fills a bare level or partial policy with all defaults (usage-level default). */
+export function normalizeCapturePolicy(value) {
+    const policy = value === undefined ? { level: "usage" } : typeof value === "string" ? { level: value } : value;
+    const level = policy.level ?? "usage";
+    const includesContent = level === "content" || level === "full";
+    return {
+        level,
+        maxChars: policy.maxChars ?? (level === "full" ? FULL_CONTENT_MAX_CHARS : DEFAULT_CONTENT_MAX_CHARS),
+        redact: policy.redact ?? true,
+        redactKeys: (policy.redactKeys ?? []).map((key) => key.toLowerCase()),
+        sampleRate: clampUnitInterval(policy.sampleRate ?? 1),
+        includeToolIO: policy.includeToolIO ?? includesContent
+    };
+}
+export function clampUnitInterval(value) {
+    if (!Number.isFinite(value))
+        return 1;
+    return Math.min(1, Math.max(0, value));
+}
+export function timestamp() {
+    return new Date().toISOString();
+}
+export function currentModulePath(metaUrl) {
+    return fileURLToPath(metaUrl);
+}
+/**
+ * Durable-state scope for an agent: pinned `agent.id` when declared, else the
+ * content-addressed revision. Exported so hosts and the eval runner can seed
+ * durable stores (memory, sandbox sessions) under the same scope the runtime
+ * will read from.
+ */
+export function durableAgentScopeForManifest(manifest) {
+    const id = typeof manifest.agent.id === "string" ? manifest.agent.id.trim() : "";
+    return id ? `agent:${id}` : manifest.agentRevision;
+}
+//# sourceMappingURL=runtime-util.js.map

package/dist/runtime-util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-util.js","sourceRoot":"","sources":["../src/runtime-util.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAWnD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAI1C;;;;GAIG;AAEH,MAAM,UAAU,UAAU,CAAC,KAA0B;IACnD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,QAAwD,EACxD,GAAS,EACT,UAAkB;IAElB,IAAI,CAAC;QACH,MAAM,OAAO,GAAuC,EAAE,WAAW,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QACjG,IAAI,QAAQ,CAAC,QAAQ;YAAE,OAAO,CAAC,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC;QACtD,MAAM,UAAU,GAAG,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACtE,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACpD,IAAI,CAAC,WAAW;YAAE,OAAO,SAAS,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;QAC9C,OAAO,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAA+B;IACpE,OAAO,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAW,EAAE,OAA4B;IAC5E,MAAM,IAAI,GAAe,EAAE,GAAG,EAAE,CAAC;IACjC,IAAI,OAAO,EAAE,QAAQ;QAAE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAAgD;IAC1F,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC/C,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACvE,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAClF,MAAM,GAAG,GAA2D,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;QAC1F,IAAI,MAAM,CAAC,MAAM;YAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC9C,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,GAAG,GAA2D,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACjI,IAAI,MAAM,CAAC,MAAM;QAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9E,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAa;IACnD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3E,OAAO,KAAK,IAAI,SAAS,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAAc;IACxD,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAkB;IACpD,OAAO,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,SAA8B;IAC3E,OAAO,SAAS,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,EAAE,EAAE,CAAC;AACvF,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAK,CAAC;AAC/C,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAE9C,oFAAoF;AACpF,MAAM,UAAU,sBAAsB,CAAC,KAA6D;IAQlG,MAAM,MAAM,GACV,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IAClG,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC;IACtC,MAAM,eAAe,GAAG,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM,CAAC;IAChE,OAAO;QACL,KAAK;QACL,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,yBAAyB,CAAC;QACpG,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI;QAC7B,UAAU,EAAE,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QACrE,UAAU,EAAE,iBAAiB,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;QACrD,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,eAAe;KACvD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACtC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;AACzC,CAAC;AAGD,MAAM,UAAU,SAAS;IACvB,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAAC,QAAuB;IAClE,MAAM,EAAE,GAAG,OAAO,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACjF,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC;AACrD,CAAC"}

package/dist/sandbox-cli-client.d.ts

@@ -0,0 +1,20 @@
+import type { CompiledConnection } from "@assemblyline-agents/core";
+import type { ConnectionToolMetadata } from "./connection-stores.js";
+import type { ConnectionClient, ResolvedConnection } from "./connection-clients.js";
+import type { RuntimeConnectionRegistry } from "./connections.js";
+/**
+ * Connection client for reviewed provider CLIs that execute in the active run
+ * sandbox. Discovery stays static and host-side; only the built invocation is
+ * handed to the sandbox executor.
+ */
+export declare class SandboxCliConnectionClient implements ConnectionClient {
+    private readonly compiled;
+    private readonly resolve;
+    private readonly registry;
+    constructor(compiled: CompiledConnection, resolve: () => Promise<ResolvedConnection>, registry: RuntimeConnectionRegistry);
+    getToolMetadata(): Promise<ConnectionToolMetadata[]>;
+    executeTool(toolName: string, input: unknown): Promise<unknown>;
+    close(): Promise<void>;
+    private definition;
+}
+//# sourceMappingURL=sandbox-cli-client.d.ts.map

package/dist/sandbox-cli-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-cli-client.d.ts","sourceRoot":"","sources":["../src/sandbox-cli-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAInB,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,KAAK,EACV,gBAAgB,EAChB,kBAAkB,EACnB,MAAM,yBAAyB,CAAC;AAKjC,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAIlE;;;;GAIG;AACH,qBAAa,0BAA2B,YAAW,gBAAgB;IAE/D,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAFR,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,EAAE,MAAM,OAAO,CAAC,kBAAkB,CAAC,EAC1C,QAAQ,EAAE,yBAAyB;IAGhD,eAAe,IAAI,OAAO,CAAC,sBAAsB,EAAE,CAAC;IAcpD,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAyB/D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YAEd,UAAU;CAGzB"}