@boardwalk-labs/runner 0.2.7 → 0.2.8

package/dist/runtime/program_runner.d.ts

@@ -91,6 +91,7 @@ export type ProgramResult = {
     error: {
         code: string;
         message: string;
+        hint?: string;
     };
 };
 /**

package/dist/runtime/program_runner.js

@@ -100,6 +100,18 @@ export function assertProgramRootOutsideWorkspace(programRoot, workspaceRoot) {
         throw new AppError(ErrorCode.VALIDATION_FAILED, `The program root "${programRoot}" is inside the workspace "${workspaceRoot}"; the extracted program must live outside it.`);
     }
 }
+/** An engine `EngineError` carries a one-line actionable `hint` alongside its message. It reaches us
+ *  as a thrown value across the SDK/engine package boundary, so DUCK-TYPE it rather than `instanceof`
+ *  (a dual-package copy of the class would defeat the check) — any thrown error carrying a non-empty
+ *  string `hint` is surfaced. Without this the hint is dropped here, and on a hosted run there is no
+ *  other place it could survive: the runner reports a failure as `{ code, message, hint? }` and the
+ *  broker persists exactly that. */
+function errorHint(err) {
+    if (typeof err !== "object" || err === null)
+        return undefined;
+    const hint = err.hint;
+    return typeof hint === "string" && hint !== "" ? hint : undefined;
+}
 /**
  * Run a workflow program to completion. Installs the host + input, extracts the VERIFIED artifact +
  * dynamic-imports its entry (which runs the body), and returns the terminal result. Always tears the
@@ -137,6 +149,10 @@ export async function runWorkflowProgram(args, deps) {
         const redactText = deps.redactText ?? ((s) => s);
         // Redact BEFORE both sinks: the message can carry a secret the program resolved then threw.
         const message = redactText(err instanceof Error ? err.message : String(err));
+        // The hint is author-facing guidance ("write `builtins: [...]`"); redact it too — it is built from
+        // the same untrusted inputs as the message and could echo a resolved secret.
+        const rawHint = errorHint(err);
+        const hint = rawHint === undefined ? undefined : redactText(rawHint);
         log.error("program_failed", { runId: args.runId, error: message });
         return {
             kind: "failed",
@@ -145,6 +161,7 @@ export async function runWorkflowProgram(args, deps) {
                 // `code` is the error class name (e.g. "Error", "AppError"), not user content — left as-is.
                 code: err instanceof Error ? err.name : "PROGRAM_ERROR",
                 message,
+                ...(hint === undefined ? {} : { hint }),
             },
         };
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boardwalk-labs/runner",
-  "version": "0.2.7",
+  "version": "0.2.8",
   "description": "Boardwalk self-hosted runner: execute cloud-scheduled runs on your own machines. Currently: the canonical runner contract types.",
   "license": "Apache-2.0",
   "repository": {