@astrosheep/keiyaku 4.5.19 → 4.5.21

package/build/src/akuma/fleet-observation.d.ts

@@ -10,6 +10,24 @@ declare const akumaObservationSchema: z.ZodObject<{
             asleep: "asleep";
             stranded: "stranded";
         }>;
+        allowed: z.ZodPipe<z.ZodArray<z.ZodEnum<{
+            "task.add": "task.add";
+            "task.addDocument": "task.addDocument";
+            "task.compose": "task.compose";
+            "task.done": "task.done";
+            "task.drop": "task.drop";
+            "task.hold": "task.hold";
+            "task.resume": "task.resume";
+            "task.start": "task.start";
+            "task.stop": "task.stop";
+            "task.update": "task.update";
+            "akuma.call": "akuma.call";
+            "akuma.kill": "akuma.kill";
+            "akuma.tell": "akuma.tell";
+            "contract.audit": "contract.audit";
+            "contract.deliver": "contract.deliver";
+            "contract.review": "contract.review";
+        }>>, z.ZodTransform<import("./allowed.js").AllowedActions, ("task.add" | "task.addDocument" | "task.compose" | "task.done" | "task.drop" | "task.hold" | "task.resume" | "task.start" | "task.stop" | "task.update" | "akuma.call" | "akuma.kill" | "akuma.tell" | "contract.audit" | "contract.deliver" | "contract.review")[]>>;
         readonly: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
             enforcement: z.ZodLiteral<"native">;
         }, z.core.$strict>, z.ZodObject<{
@@ -446,6 +464,24 @@ declare const akumaWaitResultSchema: z.ZodObject<{
                 asleep: "asleep";
                 stranded: "stranded";
             }>;
+            allowed: z.ZodPipe<z.ZodArray<z.ZodEnum<{
+                "task.add": "task.add";
+                "task.addDocument": "task.addDocument";
+                "task.compose": "task.compose";
+                "task.done": "task.done";
+                "task.drop": "task.drop";
+                "task.hold": "task.hold";
+                "task.resume": "task.resume";
+                "task.start": "task.start";
+                "task.stop": "task.stop";
+                "task.update": "task.update";
+                "akuma.call": "akuma.call";
+                "akuma.kill": "akuma.kill";
+                "akuma.tell": "akuma.tell";
+                "contract.audit": "contract.audit";
+                "contract.deliver": "contract.deliver";
+                "contract.review": "contract.review";
+            }>>, z.ZodTransform<import("./allowed.js").AllowedActions, ("task.add" | "task.addDocument" | "task.compose" | "task.done" | "task.drop" | "task.hold" | "task.resume" | "task.start" | "task.stop" | "task.update" | "akuma.call" | "akuma.kill" | "akuma.tell" | "contract.audit" | "contract.deliver" | "contract.review")[]>>;
             readonly: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
                 enforcement: z.ZodLiteral<"native">;
             }, z.core.$strict>, z.ZodObject<{
@@ -1001,6 +1037,24 @@ export declare const fleetResultSchemas: {
                     asleep: "asleep";
                     stranded: "stranded";
                 }>;
+                allowed: z.ZodPipe<z.ZodArray<z.ZodEnum<{
+                    "task.add": "task.add";
+                    "task.addDocument": "task.addDocument";
+                    "task.compose": "task.compose";
+                    "task.done": "task.done";
+                    "task.drop": "task.drop";
+                    "task.hold": "task.hold";
+                    "task.resume": "task.resume";
+                    "task.start": "task.start";
+                    "task.stop": "task.stop";
+                    "task.update": "task.update";
+                    "akuma.call": "akuma.call";
+                    "akuma.kill": "akuma.kill";
+                    "akuma.tell": "akuma.tell";
+                    "contract.audit": "contract.audit";
+                    "contract.deliver": "contract.deliver";
+                    "contract.review": "contract.review";
+                }>>, z.ZodTransform<import("./allowed.js").AllowedActions, ("task.add" | "task.addDocument" | "task.compose" | "task.done" | "task.drop" | "task.hold" | "task.resume" | "task.start" | "task.stop" | "task.update" | "akuma.call" | "akuma.kill" | "akuma.tell" | "contract.audit" | "contract.deliver" | "contract.review")[]>>;
                 readonly: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
                     enforcement: z.ZodLiteral<"native">;
                 }, z.core.$strict>, z.ZodObject<{

package/build/src/akuma/fleet-request.d.ts

@@ -24,29 +24,35 @@ declare const waitRequestSchema: z.ZodPipe<z.ZodObject<{
 declare const tellRequestSchema: z.ZodPipe<z.ZodObject<{
     target: z.ZodPipe<z.ZodString, z.ZodTransform<import("./identity.js").AkuId, string>>;
     body: z.ZodString;
+    initiator: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>, z.ZodTransform<{
     target: import("./identity.js").AkuId;
     body: string;
+    initiator?: string | undefined;
     action: "akuma.tell";
 }, {
     target: import("./identity.js").AkuId;
     body: string;
+    initiator?: string | undefined;
 }>>;
 declare const tellAnswerRequestSchema: z.ZodPipe<z.ZodObject<{
     target: z.ZodPipe<z.ZodString, z.ZodTransform<import("./identity.js").AkuId, string>>;
     body: z.ZodString;
     schemaJson: z.ZodString;
+    initiator: z.ZodOptional<z.ZodString>;
     interrupt: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strict>, z.ZodTransform<{
     target: import("./identity.js").AkuId;
     body: string;
     schemaJson: string;
+    initiator?: string | undefined;
     interrupt?: boolean | undefined;
     action: "akuma.tell-answer";
 }, {
     target: import("./identity.js").AkuId;
     body: string;
     schemaJson: string;
+    initiator?: string | undefined;
     interrupt?: boolean | undefined;
 }>>;
 declare const killRequestSchema: z.ZodPipe<z.ZodObject<{
@@ -102,12 +108,14 @@ export type FleetRequestPort = Readonly<{
         body: string;
         tellId: string;
         recordedAt: string;
+        initiator?: string;
         signal: AbortSignal;
     }>): Promise<AkumaTellResult>;
     tellAnswer?(input: Readonly<{
         target: AkumaStatus["id"];
         body: string;
         schemaJson: string;
+        initiator?: string;
         interrupt?: boolean;
         signal: AbortSignal;
     }>): Promise<unknown>;
@@ -131,6 +139,7 @@ export declare function requestForwardedFleetTellAnswer(input: Readonly<{
     target: AkumaStatus["id"];
     body: string;
     schema: Schema<unknown>;
+    initiator?: string;
     interrupt?: boolean;
     signal?: AbortSignal;
 }>): Promise<unknown>;
@@ -145,6 +154,7 @@ export declare function requestForwardedFleetTell(input: Readonly<{
     directory: string;
     target: AkumaStatus["id"];
     body: string;
+    initiator?: string;
     signal?: AbortSignal;
 }>): Promise<AkumaTellResult>;
 export declare function requestForwardedFleetKill(input: Readonly<{

package/build/src/akuma/fleet-request.js

@@ -26,7 +26,7 @@ const waitRequestSchema = z
     ...(timeoutMs === undefined ? {} : { timeoutMs }),
 }));
 const tellRequestSchema = z
-    .object({ target: akumaIdSchema, body: z.string() })
+    .object({ target: akumaIdSchema, body: z.string(), initiator: nonblankTextSchema.optional() })
     .strict()
     .transform((request) => ({ action: "akuma.tell", ...request }));
 const tellAnswerRequestSchema = z
@@ -34,6 +34,7 @@ const tellAnswerRequestSchema = z
     target: akumaIdSchema,
     body: z.string(),
     schemaJson: nonblankTextSchema,
+    initiator: nonblankTextSchema.optional(),
     interrupt: z.boolean().optional(),
 })
     .strict()
@@ -100,7 +101,8 @@ export function fleetRequestProtocol(action) {
         decodeResult: (result) => decodedFleetResult(action, result),
         decodeReference: (reference) => decodeFleetService(action, reference),
         isPermitted: (allowed) => action === "akuma.wait" ||
-            ((action === "akuma.tell" || action === "akuma.tell-answer") && allowed.includes("akuma.tell")),
+            ((action === "akuma.tell" || action === "akuma.tell-answer") && allowed.includes("akuma.tell")) ||
+            (action === "akuma.kill" && allowed.includes("akuma.kill")),
     };
 }
 export function fleetRequestCommand(action, port) {
@@ -123,6 +125,7 @@ export function fleetRequestCommand(action, port) {
                         target: request.target,
                         body: request.body,
                         tellId: facts.id,
+                        ...(request.initiator === undefined ? {} : { initiator: request.initiator }),
                         recordedAt: facts.admittedAt,
                         signal: facts.signal,
                     }),
@@ -137,6 +140,7 @@ export function fleetRequestCommand(action, port) {
                         target: request.target,
                         body: request.body,
                         schemaJson: request.schemaJson,
+                        ...(request.initiator === undefined ? {} : { initiator: request.initiator }),
                         ...(request.interrupt === undefined ? {} : { interrupt: request.interrupt }),
                         signal: facts.signal,
                     }),
@@ -170,6 +174,7 @@ export async function requestForwardedFleetTellAnswer(input) {
             target: input.target,
             body: input.body,
             schemaJson: schemaJsonText(input.schema),
+            ...(input.initiator === undefined ? {} : { initiator: input.initiator }),
             ...(input.interrupt === undefined ? {} : { interrupt: input.interrupt }),
         },
         ...(input.signal === undefined ? {} : { signal: input.signal }),
@@ -213,7 +218,12 @@ export async function requestForwardedFleetTell(input) {
     const response = await requestBodyCommand({
         directory: input.directory,
         command: fleetRequestProtocol("akuma.tell"),
-        value: { action: "akuma.tell", target: input.target, body: input.body },
+        value: {
+            action: "akuma.tell",
+            target: input.target,
+            body: input.body,
+            ...(input.initiator === undefined ? {} : { initiator: input.initiator }),
+        },
         ...(input.signal === undefined ? {} : { signal: input.signal }),
     });
     return forwardedFleetCommandResult(response, "akuma.tell");

package/build/src/akuma/heart/facts.d.ts

@@ -77,6 +77,7 @@ export type TurnStartFact = Readonly<{
     sequence: number;
     bodySequence: number;
     startedAt: string;
+    initiator?: string;
     schemaJson?: string;
 }>;
 export type TurnEndFact = Readonly<{
@@ -111,6 +112,7 @@ export type TellFact = Readonly<{
     sequence: number;
     id: string;
     body: string;
+    initiator?: string;
     schemaJson?: string;
     recordedAt: string;
     state: "pending" | "told";

package/build/src/akuma/heart/index.d.ts

@@ -77,6 +77,7 @@ export declare function beginTurn(paths: AkumaPaths, input: Readonly<{
     startedAt: string;
     call?: string;
     schemaJson?: string;
+    initiator?: string;
 }>): Promise<TurnStartFact>;
 export declare function bindTellsToTurn(paths: AkumaPaths, input: Readonly<{
     turnSequence: number;

package/build/src/akuma/heart/index.js

@@ -74,7 +74,10 @@ export async function readLifeSnapshot(paths) {
     }
 }
 function sameTellInput(existing, tell) {
-    return (existing.body === tell.body && existing.recordedAt === tell.recordedAt && existing.schemaJson === tell.schemaJson);
+    return (existing.body === tell.body &&
+        existing.recordedAt === tell.recordedAt &&
+        existing.schemaJson === tell.schemaJson &&
+        existing.initiator === tell.initiator);
 }
 export async function recordTell(paths, tell, options = {}) {
     return await withHeartTransaction(paths, (heart) => {

package/build/src/akuma/heart/rows.d.ts

@@ -31,6 +31,7 @@ export type TurnRow = Readonly<{
     answer: string | null;
     answer_json: string | null;
     schema_json: string | null;
+    initiator: string | null;
     diagnostic: string | null;
     completed_at: string | null;
 }>;
@@ -107,6 +108,7 @@ export declare function insertTurnStartFact(database: DatabaseSync, input: Reado
     startedAt: string;
     call?: string;
     schemaJson?: string;
+    initiator?: string;
 }>): TurnStartFact;
 export declare function insertTurnEndFact(database: DatabaseSync, input: Omit<TurnEndFact, "sequence">): TurnEndFact;
 export declare function finishBodyFact(database: DatabaseSync, input: Readonly<{

package/build/src/akuma/heart/rows.js

@@ -72,6 +72,7 @@ export function decodeTurnRow(row) {
         bodySequence: row.body_sequence,
         startedAt: row.started_at,
         ...(row.schema_json === null || row.schema_json === undefined ? {} : { schemaJson: row.schema_json }),
+        ...(row.initiator == null ? {} : { initiator: row.initiator }),
     };
     if (row.outcome === null)
         return start;
@@ -192,8 +193,8 @@ export function markBodyHung(database, input) {
 export function insertTurnStartFact(database, input) {
     const sequence = Number(database.prepare("INSERT INTO timeline(kind) VALUES ('turn-start')").run().lastInsertRowid);
     database
-        .prepare("INSERT INTO turns(sequence, body_sequence, started_at, schema_json) VALUES (?, ?, ?, ?)")
-        .run(sequence, input.bodySequence, input.startedAt, input.schemaJson ?? null);
+        .prepare("INSERT INTO turns(sequence, body_sequence, started_at, schema_json, initiator) VALUES (?, ?, ?, ?, ?)")
+        .run(sequence, input.bodySequence, input.startedAt, input.schemaJson ?? null, input.initiator ?? null);
     if (input.call !== undefined) {
         const callSequence = Number(database.prepare("INSERT INTO timeline(kind) VALUES ('call')").run().lastInsertRowid);
         database
@@ -205,6 +206,7 @@ export function insertTurnStartFact(database, input) {
         sequence,
         bodySequence: input.bodySequence,
         startedAt: input.startedAt,
+        ...(input.initiator === undefined ? {} : { initiator: input.initiator }),
         ...(input.schemaJson === undefined ? {} : { schemaJson: input.schemaJson }),
     };
 }
@@ -286,21 +288,21 @@ export function killFactForBody(database, bodySequence) {
 export function lastAnsweredTurnFact(database) {
     const row = database
         .prepare(`SELECT sequence, body_sequence, started_at, end_sequence, outcome, history_id,
-    session_json, answer, answer_json, schema_json, diagnostic, completed_at FROM turns WHERE outcome = 'answered' ORDER BY end_sequence DESC LIMIT 1`)
+    session_json, answer, answer_json, schema_json, initiator, diagnostic, completed_at FROM turns WHERE outcome = 'answered' ORDER BY end_sequence DESC LIMIT 1`)
         .get();
     return row === undefined ? null : decodeTurnRow(row);
 }
 export function answeredTurnFact(database, turnSequence) {
     const row = database
         .prepare(`SELECT sequence, body_sequence, started_at, end_sequence, outcome, history_id,
-    session_json, answer, answer_json, schema_json, diagnostic, completed_at FROM turns WHERE outcome = 'answered' AND sequence = ?`)
+    session_json, answer, answer_json, schema_json, initiator, diagnostic, completed_at FROM turns WHERE outcome = 'answered' AND sequence = ?`)
         .get(turnSequence);
     return row === undefined ? null : decodeTurnRow(row);
 }
 export function turnFact(database, turnSequence) {
     const row = database
         .prepare(`SELECT sequence, body_sequence, started_at, end_sequence, outcome, history_id,
-    session_json, answer, answer_json, schema_json, diagnostic, completed_at FROM turns WHERE sequence = ?`)
+    session_json, answer, answer_json, schema_json, initiator, diagnostic, completed_at FROM turns WHERE sequence = ?`)
         .get(turnSequence);
     return row === undefined ? null : decodeTurnRow(row);
 }

package/build/src/akuma/heart/schema.d.ts

@@ -2,5 +2,5 @@ import type { DatabaseSync } from "node:sqlite";
 export declare function assertHeartSchemaVersion(database: DatabaseSync): void;
 export declare function assertLeashSchemaVersion(database: DatabaseSync): void;
 export declare function heartSchemaIsCurrent(database: DatabaseSync): boolean;
-export declare const HEART_SCHEMA = "\n  CREATE TABLE IF NOT EXISTS akuma_schema (\n    singleton INTEGER PRIMARY KEY CHECK (singleton = 1),\n    version INTEGER NOT NULL CHECK (version = 28)\n  ) STRICT;\n  INSERT OR IGNORE INTO akuma_schema(singleton, version) VALUES (1, 28);\n  CREATE TABLE IF NOT EXISTS soul (\n    singleton INTEGER PRIMARY KEY CHECK (singleton = 1),\n    soul_json TEXT NOT NULL CHECK (json_valid(soul_json))\n  ) STRICT;\n  CREATE TABLE IF NOT EXISTS bodies (\n    sequence INTEGER PRIMARY KEY AUTOINCREMENT,\n    leash_taken_at TEXT NOT NULL,\n    hung_diagnostic TEXT,\n    hung_at TEXT,\n    end TEXT CHECK (end IN ('exited', 'broke-off', 'put-down')),\n    ended_at TEXT,\n    CHECK ((hung_diagnostic IS NULL AND hung_at IS NULL)\n      OR (hung_diagnostic IS NOT NULL AND hung_at IS NOT NULL))\n  ) STRICT;\n  CREATE TABLE IF NOT EXISTS sessions (\n    sequence INTEGER PRIMARY KEY AUTOINCREMENT,\n    provider TEXT NOT NULL,\n    coordinate_json TEXT NOT NULL CHECK (json_valid(coordinate_json)),\n    cwd TEXT NOT NULL,\n    options_json TEXT NOT NULL CHECK (json_valid(options_json)),\n    admitted_at TEXT NOT NULL\n  ) STRICT;\n  CREATE TABLE IF NOT EXISTS turns (\n    sequence INTEGER PRIMARY KEY REFERENCES timeline(sequence) ON DELETE CASCADE,\n    body_sequence INTEGER NOT NULL REFERENCES bodies(sequence),\n    started_at TEXT NOT NULL,\n    end_sequence INTEGER UNIQUE REFERENCES timeline(sequence) ON DELETE SET NULL,\n    outcome TEXT CHECK (outcome IN ('answered', 'failed', 'invalid-output')),\n    history_id TEXT UNIQUE,\n    session_json TEXT CHECK (session_json IS NULL OR json_valid(session_json)),\n    answer TEXT,\n    answer_json TEXT CHECK (answer_json IS NULL OR json_valid(answer_json)),\n    schema_json TEXT CHECK (schema_json IS NULL OR json_valid(schema_json)),\n    diagnostic TEXT,\n    completed_at TEXT,\n    CHECK (\n      (outcome = 'answered' AND session_json IS NOT NULL AND answer IS NOT NULL AND diagnostic IS NULL\n        AND ((schema_json IS NULL AND answer_json IS NULL) OR (schema_json IS NOT NULL AND answer_json IS NOT NULL)))\n      OR (outcome = 'failed' AND history_id IS NULL AND session_json IS NULL AND answer IS NULL\n        AND answer_json IS NULL AND diagnostic IS NOT NULL)\n      OR (outcome = 'invalid-output' AND answer IS NOT NULL AND answer_json IS NULL\n        AND diagnostic IS NOT NULL AND schema_json IS NOT NULL)\n      OR (outcome IS NULL AND end_sequence IS NULL AND history_id IS NULL AND session_json IS NULL\n        AND answer IS NULL AND answer_json IS NULL AND diagnostic IS NULL AND completed_at IS NULL)\n    )\n  ) STRICT;\n  CREATE TABLE IF NOT EXISTS timeline (\n    sequence INTEGER PRIMARY KEY AUTOINCREMENT,\n    kind TEXT NOT NULL CHECK (kind IN ('turn-start', 'call', 'activity', 'tell', 'turn-end'))\n  ) STRICT;\n  CREATE TABLE IF NOT EXISTS activity_retention (\n    singleton INTEGER PRIMARY KEY CHECK (singleton = 1),\n    checked_sequence INTEGER NOT NULL\n  ) STRICT;\n  INSERT OR IGNORE INTO activity_retention(singleton, checked_sequence) VALUES (1, 0);\n  CREATE TABLE IF NOT EXISTS calls (\n    sequence INTEGER PRIMARY KEY REFERENCES timeline(sequence) ON DELETE CASCADE,\n    turn_sequence INTEGER NOT NULL REFERENCES turns(sequence) ON DELETE CASCADE,\n    body TEXT NOT NULL,\n    at TEXT NOT NULL\n  ) STRICT;\n  CREATE TABLE IF NOT EXISTS activity (\n    sequence INTEGER PRIMARY KEY REFERENCES timeline(sequence) ON DELETE CASCADE,\n    turn_sequence INTEGER NOT NULL REFERENCES turns(sequence) ON DELETE CASCADE,\n    event_json TEXT NOT NULL CHECK (json_valid(event_json)),\n    at TEXT NOT NULL\n  ) STRICT;\n  CREATE TABLE IF NOT EXISTS tells (\n    id TEXT PRIMARY KEY,\n    sequence INTEGER NOT NULL UNIQUE REFERENCES timeline(sequence) ON DELETE CASCADE,\n    body TEXT NOT NULL,\n    schema_json TEXT CHECK (schema_json IS NULL OR json_valid(schema_json)),\n    recorded_at TEXT NOT NULL\n  ) STRICT;\n  CREATE TABLE IF NOT EXISTS tell_bindings (\n    sequence INTEGER PRIMARY KEY AUTOINCREMENT,\n    tell_id TEXT NOT NULL REFERENCES tells(id) ON DELETE CASCADE,\n    turn_sequence INTEGER NOT NULL REFERENCES turns(sequence) ON DELETE CASCADE,\n    bound_at TEXT NOT NULL,\n    UNIQUE (tell_id, turn_sequence)\n  ) STRICT;\n  CREATE TABLE IF NOT EXISTS tell_deliveries (\n    sequence INTEGER PRIMARY KEY AUTOINCREMENT,\n    tell_id TEXT NOT NULL REFERENCES tells(id) ON DELETE CASCADE,\n    route TEXT NOT NULL CHECK (route IN ('launch', 'live')),\n    turn_sequence INTEGER NOT NULL REFERENCES turns(sequence) ON DELETE CASCADE,\n    fence TEXT NOT NULL,\n    receipt TEXT CHECK (receipt IN ('unavailable', 'required')),\n    delivered_at TEXT NOT NULL,\n    CHECK ((route = 'launch' AND receipt IS NULL) OR (route = 'live' AND receipt IS NOT NULL)),\n    UNIQUE (tell_id, turn_sequence, fence)\n  ) STRICT;\n  CREATE TABLE IF NOT EXISTS tell_receipts (\n    sequence INTEGER PRIMARY KEY AUTOINCREMENT,\n    evidence TEXT NOT NULL CHECK (evidence IN ('exact', 'fence')),\n    tell_id TEXT REFERENCES tells(id) ON DELETE CASCADE,\n    turn_sequence INTEGER REFERENCES turns(sequence) ON DELETE CASCADE,\n    fence TEXT,\n    kind TEXT NOT NULL,\n    received_at TEXT NOT NULL,\n    CHECK (\n      (evidence = 'exact' AND tell_id IS NOT NULL AND turn_sequence IS NULL AND fence IS NULL)\n      OR (evidence = 'fence' AND tell_id IS NULL AND turn_sequence IS NOT NULL AND fence IS NOT NULL)\n    )\n  ) STRICT;\n  CREATE UNIQUE INDEX IF NOT EXISTS tell_receipts_exact\n    ON tell_receipts(tell_id, kind);\n  CREATE UNIQUE INDEX IF NOT EXISTS tell_receipts_fence\n    ON tell_receipts(turn_sequence, fence, kind);\n  CREATE TABLE IF NOT EXISTS tell_dispositions (\n    body_sequence INTEGER PRIMARY KEY REFERENCES bodies(sequence),\n    decided_at TEXT NOT NULL,\n    resolved_at TEXT\n  ) STRICT;\n  CREATE TABLE IF NOT EXISTS tell_disposition_members (\n    body_sequence INTEGER NOT NULL REFERENCES tell_dispositions(body_sequence) ON DELETE CASCADE,\n    tell_id TEXT NOT NULL REFERENCES tells(id),\n    PRIMARY KEY (body_sequence, tell_id)\n  ) STRICT;\n  CREATE INDEX IF NOT EXISTS calls_by_turn ON calls(turn_sequence);\n  CREATE INDEX IF NOT EXISTS activity_by_turn ON activity(turn_sequence);\n  CREATE INDEX IF NOT EXISTS tell_bindings_by_turn ON tell_bindings(turn_sequence);\n  CREATE INDEX IF NOT EXISTS tell_deliveries_by_turn ON tell_deliveries(turn_sequence);\n  CREATE INDEX IF NOT EXISTS tell_disposition_members_by_tell ON tell_disposition_members(tell_id);\n  CREATE TABLE IF NOT EXISTS requests (\n    sequence INTEGER PRIMARY KEY AUTOINCREMENT,\n    id TEXT NOT NULL UNIQUE,\n    requester TEXT NOT NULL,\n    action TEXT NOT NULL,\n    payload_json TEXT NOT NULL CHECK (json_valid(payload_json)),\n    admitted_at TEXT NOT NULL,\n    state TEXT NOT NULL CHECK (state IN ('admitted', 'reserved', 'begun', 'served', 'refused', 'voided', 'unproven')),\n    child TEXT,\n    service_json TEXT CHECK (service_json IS NULL OR json_valid(service_json)),\n    diagnostic TEXT,\n    evidence TEXT,\n    CHECK (\n      (state = 'admitted' AND child IS NULL AND service_json IS NULL AND diagnostic IS NULL AND evidence IS NULL)\n      OR (state = 'reserved' AND child IS NOT NULL AND service_json IS NULL\n        AND diagnostic IS NULL AND evidence IS NULL)\n      OR (state = 'begun' AND child IS NULL AND service_json IS NULL AND diagnostic IS NULL AND evidence IS NULL)\n      OR (state = 'served'\n        AND ((child IS NOT NULL AND service_json IS NULL)\n          OR (child IS NULL AND service_json IS NOT NULL))\n        AND diagnostic IS NULL AND evidence IS NULL)\n      OR (state = 'refused' AND child IS NULL AND service_json IS NULL AND diagnostic IS NOT NULL AND evidence IS NULL)\n      OR (state = 'voided' AND child IS NULL AND service_json IS NULL AND diagnostic IS NULL AND evidence IS NOT NULL)\n      OR (state = 'unproven' AND child IS NULL AND service_json IS NULL AND diagnostic IS NULL AND evidence IS NOT NULL)\n    )\n  ) STRICT;\n  CREATE TABLE IF NOT EXISTS control (\n    kind TEXT PRIMARY KEY CHECK (kind IN ('stop', 'pause')),\n    value_json TEXT NOT NULL CHECK (json_valid(value_json)),\n    at TEXT NOT NULL\n  ) STRICT;\n  CREATE TABLE IF NOT EXISTS kills (\n    sequence INTEGER PRIMARY KEY AUTOINCREMENT,\n    body_sequence INTEGER NOT NULL UNIQUE REFERENCES bodies(sequence),\n    evidence TEXT NOT NULL CHECK (evidence = 'killed'),\n    at TEXT NOT NULL\n  ) STRICT;\n";
+export declare const HEART_SCHEMA = "\n  CREATE TABLE IF NOT EXISTS akuma_schema (\n    singleton INTEGER PRIMARY KEY CHECK (singleton = 1),\n    version INTEGER NOT NULL CHECK (version = 29)\n  ) STRICT;\n  INSERT OR IGNORE INTO akuma_schema(singleton, version) VALUES (1, 29);\n  CREATE TABLE IF NOT EXISTS soul (\n    singleton INTEGER PRIMARY KEY CHECK (singleton = 1),\n    soul_json TEXT NOT NULL CHECK (json_valid(soul_json))\n  ) STRICT;\n  CREATE TABLE IF NOT EXISTS bodies (\n    sequence INTEGER PRIMARY KEY AUTOINCREMENT,\n    leash_taken_at TEXT NOT NULL,\n    hung_diagnostic TEXT,\n    hung_at TEXT,\n    end TEXT CHECK (end IN ('exited', 'broke-off', 'put-down')),\n    ended_at TEXT,\n    CHECK ((hung_diagnostic IS NULL AND hung_at IS NULL)\n      OR (hung_diagnostic IS NOT NULL AND hung_at IS NOT NULL))\n  ) STRICT;\n  CREATE TABLE IF NOT EXISTS sessions (\n    sequence INTEGER PRIMARY KEY AUTOINCREMENT,\n    provider TEXT NOT NULL,\n    coordinate_json TEXT NOT NULL CHECK (json_valid(coordinate_json)),\n    cwd TEXT NOT NULL,\n    options_json TEXT NOT NULL CHECK (json_valid(options_json)),\n    admitted_at TEXT NOT NULL\n  ) STRICT;\n  CREATE TABLE IF NOT EXISTS turns (\n    sequence INTEGER PRIMARY KEY REFERENCES timeline(sequence) ON DELETE CASCADE,\n    body_sequence INTEGER NOT NULL REFERENCES bodies(sequence),\n    started_at TEXT NOT NULL,\n    initiator TEXT,\n    end_sequence INTEGER UNIQUE REFERENCES timeline(sequence) ON DELETE SET NULL,\n    outcome TEXT CHECK (outcome IN ('answered', 'failed', 'invalid-output')),\n    history_id TEXT UNIQUE,\n    session_json TEXT CHECK (session_json IS NULL OR json_valid(session_json)),\n    answer TEXT,\n    answer_json TEXT CHECK (answer_json IS NULL OR json_valid(answer_json)),\n    schema_json TEXT CHECK (schema_json IS NULL OR json_valid(schema_json)),\n    diagnostic TEXT,\n    completed_at TEXT,\n    CHECK (\n      (outcome = 'answered' AND session_json IS NOT NULL AND answer IS NOT NULL AND diagnostic IS NULL\n        AND ((schema_json IS NULL AND answer_json IS NULL) OR (schema_json IS NOT NULL AND answer_json IS NOT NULL)))\n      OR (outcome = 'failed' AND history_id IS NULL AND session_json IS NULL AND answer IS NULL\n        AND answer_json IS NULL AND diagnostic IS NOT NULL)\n      OR (outcome = 'invalid-output' AND answer IS NOT NULL AND answer_json IS NULL\n        AND diagnostic IS NOT NULL AND schema_json IS NOT NULL)\n      OR (outcome IS NULL AND end_sequence IS NULL AND history_id IS NULL AND session_json IS NULL\n        AND answer IS NULL AND answer_json IS NULL AND diagnostic IS NULL AND completed_at IS NULL)\n    )\n  ) STRICT;\n  CREATE TABLE IF NOT EXISTS timeline (\n    sequence INTEGER PRIMARY KEY AUTOINCREMENT,\n    kind TEXT NOT NULL CHECK (kind IN ('turn-start', 'call', 'activity', 'tell', 'turn-end'))\n  ) STRICT;\n  CREATE TABLE IF NOT EXISTS activity_retention (\n    singleton INTEGER PRIMARY KEY CHECK (singleton = 1),\n    checked_sequence INTEGER NOT NULL\n  ) STRICT;\n  INSERT OR IGNORE INTO activity_retention(singleton, checked_sequence) VALUES (1, 0);\n  CREATE TABLE IF NOT EXISTS calls (\n    sequence INTEGER PRIMARY KEY REFERENCES timeline(sequence) ON DELETE CASCADE,\n    turn_sequence INTEGER NOT NULL REFERENCES turns(sequence) ON DELETE CASCADE,\n    body TEXT NOT NULL,\n    at TEXT NOT NULL\n  ) STRICT;\n  CREATE TABLE IF NOT EXISTS activity (\n    sequence INTEGER PRIMARY KEY REFERENCES timeline(sequence) ON DELETE CASCADE,\n    turn_sequence INTEGER NOT NULL REFERENCES turns(sequence) ON DELETE CASCADE,\n    event_json TEXT NOT NULL CHECK (json_valid(event_json)),\n    at TEXT NOT NULL\n  ) STRICT;\n  CREATE TABLE IF NOT EXISTS tells (\n    id TEXT PRIMARY KEY,\n    sequence INTEGER NOT NULL UNIQUE REFERENCES timeline(sequence) ON DELETE CASCADE,\n    body TEXT NOT NULL,\n    initiator TEXT,\n    schema_json TEXT CHECK (schema_json IS NULL OR json_valid(schema_json)),\n    recorded_at TEXT NOT NULL\n  ) STRICT;\n  CREATE TABLE IF NOT EXISTS tell_bindings (\n    sequence INTEGER PRIMARY KEY AUTOINCREMENT,\n    tell_id TEXT NOT NULL REFERENCES tells(id) ON DELETE CASCADE,\n    turn_sequence INTEGER NOT NULL REFERENCES turns(sequence) ON DELETE CASCADE,\n    bound_at TEXT NOT NULL,\n    UNIQUE (tell_id, turn_sequence)\n  ) STRICT;\n  CREATE TABLE IF NOT EXISTS tell_deliveries (\n    sequence INTEGER PRIMARY KEY AUTOINCREMENT,\n    tell_id TEXT NOT NULL REFERENCES tells(id) ON DELETE CASCADE,\n    route TEXT NOT NULL CHECK (route IN ('launch', 'live')),\n    turn_sequence INTEGER NOT NULL REFERENCES turns(sequence) ON DELETE CASCADE,\n    fence TEXT NOT NULL,\n    receipt TEXT CHECK (receipt IN ('unavailable', 'required')),\n    delivered_at TEXT NOT NULL,\n    CHECK ((route = 'launch' AND receipt IS NULL) OR (route = 'live' AND receipt IS NOT NULL)),\n    UNIQUE (tell_id, turn_sequence, fence)\n  ) STRICT;\n  CREATE TABLE IF NOT EXISTS tell_receipts (\n    sequence INTEGER PRIMARY KEY AUTOINCREMENT,\n    evidence TEXT NOT NULL CHECK (evidence IN ('exact', 'fence')),\n    tell_id TEXT REFERENCES tells(id) ON DELETE CASCADE,\n    turn_sequence INTEGER REFERENCES turns(sequence) ON DELETE CASCADE,\n    fence TEXT,\n    kind TEXT NOT NULL,\n    received_at TEXT NOT NULL,\n    CHECK (\n      (evidence = 'exact' AND tell_id IS NOT NULL AND turn_sequence IS NULL AND fence IS NULL)\n      OR (evidence = 'fence' AND tell_id IS NULL AND turn_sequence IS NOT NULL AND fence IS NOT NULL)\n    )\n  ) STRICT;\n  CREATE UNIQUE INDEX IF NOT EXISTS tell_receipts_exact\n    ON tell_receipts(tell_id, kind);\n  CREATE UNIQUE INDEX IF NOT EXISTS tell_receipts_fence\n    ON tell_receipts(turn_sequence, fence, kind);\n  CREATE TABLE IF NOT EXISTS tell_dispositions (\n    body_sequence INTEGER PRIMARY KEY REFERENCES bodies(sequence),\n    decided_at TEXT NOT NULL,\n    resolved_at TEXT\n  ) STRICT;\n  CREATE TABLE IF NOT EXISTS tell_disposition_members (\n    body_sequence INTEGER NOT NULL REFERENCES tell_dispositions(body_sequence) ON DELETE CASCADE,\n    tell_id TEXT NOT NULL REFERENCES tells(id),\n    PRIMARY KEY (body_sequence, tell_id)\n  ) STRICT;\n  CREATE INDEX IF NOT EXISTS calls_by_turn ON calls(turn_sequence);\n  CREATE INDEX IF NOT EXISTS activity_by_turn ON activity(turn_sequence);\n  CREATE INDEX IF NOT EXISTS tell_bindings_by_turn ON tell_bindings(turn_sequence);\n  CREATE INDEX IF NOT EXISTS tell_deliveries_by_turn ON tell_deliveries(turn_sequence);\n  CREATE INDEX IF NOT EXISTS tell_disposition_members_by_tell ON tell_disposition_members(tell_id);\n  CREATE TABLE IF NOT EXISTS requests (\n    sequence INTEGER PRIMARY KEY AUTOINCREMENT,\n    id TEXT NOT NULL UNIQUE,\n    requester TEXT NOT NULL,\n    action TEXT NOT NULL,\n    payload_json TEXT NOT NULL CHECK (json_valid(payload_json)),\n    admitted_at TEXT NOT NULL,\n    state TEXT NOT NULL CHECK (state IN ('admitted', 'reserved', 'begun', 'served', 'refused', 'voided', 'unproven')),\n    child TEXT,\n    service_json TEXT CHECK (service_json IS NULL OR json_valid(service_json)),\n    diagnostic TEXT,\n    evidence TEXT,\n    CHECK (\n      (state = 'admitted' AND child IS NULL AND service_json IS NULL AND diagnostic IS NULL AND evidence IS NULL)\n      OR (state = 'reserved' AND child IS NOT NULL AND service_json IS NULL\n        AND diagnostic IS NULL AND evidence IS NULL)\n      OR (state = 'begun' AND child IS NULL AND service_json IS NULL AND diagnostic IS NULL AND evidence IS NULL)\n      OR (state = 'served'\n        AND ((child IS NOT NULL AND service_json IS NULL)\n          OR (child IS NULL AND service_json IS NOT NULL))\n        AND diagnostic IS NULL AND evidence IS NULL)\n      OR (state = 'refused' AND child IS NULL AND service_json IS NULL AND diagnostic IS NOT NULL AND evidence IS NULL)\n      OR (state = 'voided' AND child IS NULL AND service_json IS NULL AND diagnostic IS NULL AND evidence IS NOT NULL)\n      OR (state = 'unproven' AND child IS NULL AND service_json IS NULL AND diagnostic IS NULL AND evidence IS NOT NULL)\n    )\n  ) STRICT;\n  CREATE TABLE IF NOT EXISTS control (\n    kind TEXT PRIMARY KEY CHECK (kind IN ('stop', 'pause')),\n    value_json TEXT NOT NULL CHECK (json_valid(value_json)),\n    at TEXT NOT NULL\n  ) STRICT;\n  CREATE TABLE IF NOT EXISTS kills (\n    sequence INTEGER PRIMARY KEY AUTOINCREMENT,\n    body_sequence INTEGER NOT NULL UNIQUE REFERENCES bodies(sequence),\n    evidence TEXT NOT NULL CHECK (evidence = 'killed'),\n    at TEXT NOT NULL\n  ) STRICT;\n";
 export declare const LEASH_SCHEMA = "\n  PRAGMA journal_mode=DELETE;\n  CREATE TABLE IF NOT EXISTS leash_schema (\n    singleton INTEGER PRIMARY KEY CHECK (singleton = 1),\n    version INTEGER NOT NULL CHECK (version = 4)\n  ) STRICT;\n  INSERT OR IGNORE INTO leash_schema(singleton, version) VALUES (1, 4);\n  CREATE TABLE IF NOT EXISTS seal (\n    singleton INTEGER PRIMARY KEY CHECK (singleton = 1),\n    evidence TEXT NOT NULL,\n    at TEXT NOT NULL\n  ) STRICT;\n";

package/build/src/akuma/heart/schema.js

@@ -1,4 +1,4 @@
-const HEART_SCHEMA_VERSION = 28;
+const HEART_SCHEMA_VERSION = 29;
 const LEASH_SCHEMA_VERSION = 4;
 function assertSchemaVersion(database, table, expected) {
     const row = database.prepare(`SELECT version FROM ${table} WHERE singleton = 1`).get();
@@ -52,6 +52,7 @@ export const HEART_SCHEMA = `
     sequence INTEGER PRIMARY KEY REFERENCES timeline(sequence) ON DELETE CASCADE,
     body_sequence INTEGER NOT NULL REFERENCES bodies(sequence),
     started_at TEXT NOT NULL,
+    initiator TEXT,
     end_sequence INTEGER UNIQUE REFERENCES timeline(sequence) ON DELETE SET NULL,
     outcome TEXT CHECK (outcome IN ('answered', 'failed', 'invalid-output')),
     history_id TEXT UNIQUE,
@@ -97,6 +98,7 @@ export const HEART_SCHEMA = `
     id TEXT PRIMARY KEY,
     sequence INTEGER NOT NULL UNIQUE REFERENCES timeline(sequence) ON DELETE CASCADE,
     body TEXT NOT NULL,
+    initiator TEXT,
     schema_json TEXT CHECK (schema_json IS NULL OR json_valid(schema_json)),
     recorded_at TEXT NOT NULL
   ) STRICT;

package/build/src/akuma/heart/tells.js

@@ -52,6 +52,7 @@ function decodeTellRows(database, rows) {
         sequence: row.sequence,
         id: row.id,
         body: row.body,
+        ...(row.initiator === null ? {} : { initiator: row.initiator }),
         ...(row.schema_json === null ? {} : { schemaJson: row.schema_json }),
         state: row.state,
         recordedAt: row.recorded_at,
@@ -63,7 +64,7 @@ export function tellFactsAtSequences(database, sequences) {
     if (sequences.length === 0)
         return [];
     const rows = database
-        .prepare(`SELECT sequence, id, body, schema_json, recorded_at, ${tellStateSql} AS state
+        .prepare(`SELECT sequence, id, body, initiator, schema_json, recorded_at, ${tellStateSql} AS state
     FROM tells WHERE sequence IN (SELECT value FROM json_each(?)) ORDER BY sequence`)
         .all(JSON.stringify(sequences));
     return decodeTellRows(database, rows);
@@ -74,13 +75,13 @@ export function hasPendingTell(database) {
 export function insertTellFact(database, tell) {
     const sequence = Number(database.prepare("INSERT INTO timeline(kind) VALUES ('tell')").run().lastInsertRowid);
     database
-        .prepare("INSERT INTO tells(id, sequence, body, schema_json, recorded_at) VALUES (?, ?, ?, ?, ?)")
-        .run(tell.id, sequence, tell.body, tell.schemaJson ?? null, tell.recordedAt);
+        .prepare("INSERT INTO tells(id, sequence, body, initiator, schema_json, recorded_at) VALUES (?, ?, ?, ?, ?, ?)")
+        .run(tell.id, sequence, tell.body, tell.initiator ?? null, tell.schemaJson ?? null, tell.recordedAt);
     return sequence;
 }
 export function tellFact(database, id) {
     const row = database
-        .prepare(`SELECT sequence, id, body, schema_json, recorded_at, ${tellStateSql} AS state
+        .prepare(`SELECT sequence, id, body, initiator, schema_json, recorded_at, ${tellStateSql} AS state
     FROM tells WHERE id = ?`)
         .get(id);
     return row === undefined ? null : decodeTellRows(database, [row])[0];
@@ -119,7 +120,7 @@ export function tellIdsForFence(database, turnSequence, fence) {
 }
 export function pendingTellFacts(database) {
     const rows = database
-        .prepare(`SELECT sequence, id, body, schema_json, recorded_at, ${tellStateSql} AS state FROM tells
+        .prepare(`SELECT sequence, id, body, initiator, schema_json, recorded_at, ${tellStateSql} AS state FROM tells
     WHERE ${tellStateSql} = 'pending' ORDER BY sequence`)
         .all();
     return decodeTellRows(database, rows);

package/build/src/akuma/heart/timeline.js

@@ -57,7 +57,7 @@ function decodeTimelineRows(database, rows) {
     const facts = new Map();
     const turns = database
         .prepare(`SELECT sequence, body_sequence, started_at, end_sequence, outcome,
-    history_id, session_json, answer, answer_json, schema_json, diagnostic, completed_at FROM turns
+    history_id, session_json, answer, answer_json, schema_json, initiator, diagnostic, completed_at FROM turns
     WHERE sequence IN (SELECT value FROM json_each(?)) OR end_sequence IN (SELECT value FROM json_each(?))`)
         .all(sequences("turn-start"), sequences("turn-end"));
     for (const row of turns) {

package/build/src/akuma/provider-recipe.d.ts

@@ -4,6 +4,7 @@ export type ProviderOptions = Readonly<{
     effort?: string;
     readonly?: true;
     network?: "disabled" | "enabled";
+    sandbox?: "full-access";
     systemPrompt?: string;
     systemPromptMode?: SystemPromptMode;
 }>;

package/build/src/akuma/provider-recipe.js

@@ -33,6 +33,10 @@ export function decodeProviderOptions(value) {
     if (network !== undefined && network !== "disabled" && network !== "enabled") {
         throw new TypeError("provider option network must be disabled, enabled");
     }
+    const sandbox = options.sandbox;
+    if (sandbox !== undefined && sandbox !== "full-access") {
+        throw new TypeError("provider option sandbox must be full-access");
+    }
     const systemPrompt = optionText(options, "systemPrompt", "allow");
     const systemPromptMode = options.systemPromptMode;
     if (systemPromptMode !== undefined) {
@@ -48,6 +52,7 @@ export function decodeProviderOptions(value) {
         ...(effort === undefined ? {} : { effort }),
         ...(options.readonly === undefined ? {} : { readonly: true }),
         ...(network === undefined ? {} : { network }),
+        ...(sandbox === undefined ? {} : { sandbox }),
         ...(systemPrompt === undefined ? {} : { systemPrompt }),
         ...(systemPromptMode === undefined ? {} : { systemPromptMode }),
     });

package/build/src/akuma/provider.d.ts

@@ -1,7 +1,7 @@
 import { decodeResumeCoordinate, encodeResumeCoordinate, type ResumeCoordinate } from "./coordinate.js";
 import type { ProviderOptions, ReadonlyRestraint } from "./provider-recipe.js";
 export type { ResumeCoordinate } from "./coordinate.js";
-export declare const AKUMA_REQUESTS_ENV = "AKUMA_REQUESTS";
+export { AKUMA_REQUESTS_ENV } from "./providers/execution-environment.js";
 export declare const AGENT_EVENT_TEXT_LIMIT = 16384;
 export declare const AGENT_THOUGHT_TEXT_LIMIT = 4000;
 export declare const AGENT_EVENT_QUEUE_LIMIT = 256;

package/build/src/akuma/provider.js

@@ -1,5 +1,5 @@
 import { decodeResumeCoordinate, encodeResumeCoordinate } from "./coordinate.js";
-export const AKUMA_REQUESTS_ENV = "AKUMA_REQUESTS";
+export { AKUMA_REQUESTS_ENV } from "./providers/execution-environment.js";
 export const AGENT_EVENT_TEXT_LIMIT = 16_384;
 export const AGENT_THOUGHT_TEXT_LIMIT = 4_000;
 export const AGENT_EVENT_QUEUE_LIMIT = 256;

package/build/src/akuma/providers/acp/core.js

@@ -1,7 +1,8 @@
 import { Readable, Writable } from "node:stream";
 import { spawnStdioProcess } from "../../../runtime/proc/stdio.js";
 import { abortable } from "../../abort.js";
-import { AKUMA_REQUESTS_ENV, AgentEventChannel, } from "../../provider.js";
+import { AgentEventChannel, } from "../../provider.js";
+import { akumaExecutionEnvironment } from "../execution-environment.js";
 import { EMPTY_ACP_EVENT_STATE, flushAcpEvents, mapAcpUpdate, } from "./events.js";
 function diagnostic(acp, error) {
     if (!(error instanceof Error))
@@ -156,11 +157,7 @@ export async function startAcpSession(launch, input, dependencies = {}, custody)
     const child = (dependencies.spawnProcess ?? spawnStdioProcess)({
         argv: launch.argv,
         cwd: input.cwd,
-        env: {
-            ...globalThis.process.env,
-            ...launch.env,
-            ...(input.requests === undefined ? {} : { [AKUMA_REQUESTS_ENV]: input.requests.dir }),
-        },
+        env: akumaExecutionEnvironment(globalThis.process.env, launch.env, input.requests?.dir),
     });
     custody?.own({
         closed: child.exited.then(() => undefined),

package/build/src/akuma/providers/acp/index.js

@@ -3,6 +3,9 @@ import { decodeAcpConfig } from "./config.js";
 import { startAcpSession } from "./core.js";
 export { decodeAcpConfig } from "./config.js";
 function optionAdmission(options, config) {
+    if (options.sandbox !== undefined) {
+        return { kind: "refused", diagnostic: "ACP provider does not support the sandbox option" };
+    }
     if (options.network !== undefined) {
         return { kind: "refused", diagnostic: "ACP provider does not support the network option" };
     }

package/build/src/akuma/providers/claude/index.js

@@ -1,6 +1,7 @@
 import { randomUUID } from "node:crypto";
 import { abortable } from "../../abort.js";
-import { AKUMA_REQUESTS_ENV, AgentEventChannel, createProviderAttempt, } from "../../provider.js";
+import { AgentEventChannel, createProviderAttempt, } from "../../provider.js";
+import { akumaExecutionEnvironment } from "../execution-environment.js";
 import { emitClaudeMessage } from "./events.js";
 import { claudeUserMessage, createClaudeInput, isClaudeTurnEnded } from "./input.js";
 export { CLAUDE_MESSAGE_DISPOSITIONS, CLAUDE_SYSTEM_DISPOSITIONS } from "./events.js";
@@ -38,6 +39,12 @@ class ReceiptChannel {
     }
 }
 function admitClaudeOptions(options) {
+    if (options.sandbox === "full-access" && options.readonly === true) {
+        return { kind: "refused", diagnostic: "Claude full-access sandbox cannot combine with readonly" };
+    }
+    if (options.sandbox === "full-access" && options.network === "disabled") {
+        return { kind: "refused", diagnostic: "Claude full-access sandbox cannot combine with disabled network" };
+    }
     if (options.network !== undefined) {
         return { kind: "refused", diagnostic: "Claude provider does not support the network option" };
     }
@@ -64,18 +71,11 @@ function claudeQueryOptions(input, execution, abortController) {
         abortController,
         ...(input.requests === undefined ? {} : { additionalDirectories: [input.requests.dir] }),
         ...(execution.executable === undefined ? {} : { pathToClaudeCodeExecutable: execution.executable }),
-        ...(execution.env === undefined && input.requests === undefined
-            ? {}
-            : {
-                env: {
-                    ...process.env,
-                    ...execution.env,
-                    ...(input.requests === undefined ? {} : { [AKUMA_REQUESTS_ENV]: input.requests.dir }),
-                },
-            }),
+        env: akumaExecutionEnvironment(process.env, execution.env, input.requests?.dir),
         permissionMode: mode,
         ...(mode === "bypassPermissions" ? { allowDangerouslySkipPermissions: true } : {}),
         settingSources: ["user", "project", "local"],
+        ...(input.options.sandbox === "full-access" ? { sandbox: { enabled: false } } : {}),
         ...(input.options.model === undefined ? {} : { model: input.options.model }),
         ...(input.options.effort === undefined ? {} : { effort: input.options.effort }),
         ...(input.options.systemPrompt === undefined || input.options.systemPrompt.length === 0

package/build/src/akuma/providers/codex-app-server/index.js

@@ -1,5 +1,6 @@
 import { LineRpcProcess } from "../../../runtime/proc/line-rpc.js";
-import { AgentEventChannel, AKUMA_REQUESTS_ENV, createProviderAttempt, } from "../../provider.js";
+import { AgentEventChannel, createProviderAttempt, } from "../../provider.js";
+import { akumaExecutionEnvironment } from "../execution-environment.js";
 import { codexNotificationResult, codexObject, codexText } from "./events.js";
 export { CODEX_ITEM_DISPOSITIONS, CODEX_NOTIFICATION_DISPOSITIONS } from "./events.js";
 function diagnostic(error) {
@@ -48,6 +49,8 @@ async function steerTurn(server, state, tell) {
     return { kind: "accepted", fence: `${accepted}:${tell.id}` };
 }
 function sandbox(cwd, options, requests) {
+    if (options.sandbox === "full-access")
+        return { type: "dangerFullAccess" };
     if (options.readonly === true) {
         return { type: "readOnly", networkAccess: options.network === "enabled" };
     }
@@ -104,7 +107,7 @@ async function forkCodex(execution, input, custody) {
     const server = new LineRpcProcess({
         argv: [execution.executable ?? "codex", "app-server", "--listen", "stdio://"],
         cwd: input.cwd,
-        ...(execution.env === undefined ? {} : { env: { ...process.env, ...execution.env } }),
+        env: akumaExecutionEnvironment(process.env, execution.env),
     });
     const closed = new Promise((resolve) => server.onExit(() => resolve()));
     custody.own({
@@ -135,15 +138,7 @@ function codexServer(execution, input) {
     return new LineRpcProcess({
         argv: [execution.executable ?? "codex", "app-server", "--listen", "stdio://"],
         cwd: input.cwd,
-        ...(execution.env === undefined && input.requests === undefined
-            ? {}
-            : {
-                env: {
-                    ...process.env,
-                    ...execution.env,
-                    ...(input.requests === undefined ? {} : { [AKUMA_REQUESTS_ENV]: input.requests.dir }),
-                },
-            }),
+        env: akumaExecutionEnvironment(process.env, execution.env, input.requests?.dir),
     });
 }
 async function startCodex(execution, input, custody) {
@@ -228,6 +223,12 @@ export function createCodexAppServerProvider(input = "codex") {
     const execution = typeof input === "string" ? { name: "codex-app-server", kind: "codex-app-server", executable: input } : input;
     return {
         admitOptions(options) {
+            if (options.sandbox === "full-access" && options.readonly === true) {
+                return { kind: "refused", diagnostic: "Codex full-access sandbox cannot combine with readonly" };
+            }
+            if (options.sandbox === "full-access" && options.network === "disabled") {
+                return { kind: "refused", diagnostic: "Codex full-access sandbox cannot combine with disabled network" };
+            }
             return {
                 kind: "admitted",
                 options: Object.freeze({ ...options }),

package/build/src/akuma/providers/execution-environment.d.ts

@@ -0,0 +1,6 @@
+export declare const AKUMA_REQUESTS_ENV = "AKUMA_REQUESTS";
+declare const PARENT_HARNESS_IDENTITY_KEYS: readonly ["CLAUDE_CODE_SESSION_ID", "CLAUDE_CODE_CHILD_SESSION", "CLAUDECODE", "CODEX_THREAD_ID", "OPENCODE_SESSION_ID", "PI_SESSION_ID", "PI_SESSION_FILE", "PASEO_AGENT_ID", "SQUARE_PARTICIPANT_NAME"];
+type Environment = Readonly<Record<string, string | undefined>>;
+/** Construct the environment for one isolated Akuma execution or native child. */
+export declare function akumaExecutionEnvironment(inherited: Environment, overrides?: Environment, requests?: string, nativeIdentity?: readonly (typeof PARENT_HARNESS_IDENTITY_KEYS)[number][]): Record<string, string>;
+export {};