@burtson-labs/host-kit 0.4.32 → 0.4.34

package/dist/artifacts.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Bandit Artifacts (cloud) — publish a shareable artifact to S3Api and get back
+ * a URL anyone with the link can open.
+ *
+ * Cloud users' Burtson JWT authenticates to every Burtson API (confirmed), so
+ * this talks to S3Api directly — no gateway proxy, no service credential. The
+ * upload is per-user scoped and quota-bounded server-side (see S3Api's
+ * ArtifactController); this client just posts the bytes with the caller's token
+ * and returns the shareable URL S3Api mints.
+ *
+ * Host-agnostic (fetch + FormData/Blob, standard in the Node the CLI and
+ * extension run on), so both hosts share one implementation. Local-only users
+ * never call this — it requires a cloud token, keeping the offline path offline.
+ */
+export interface PublishArtifactOptions {
+    /** S3Api base URL, e.g. https://s3.burtson.ai (no trailing slash needed). */
+    s3ApiBaseUrl: string;
+    /** The user's Bandit cloud token (same JWT used for every Burtson API). */
+    token: string;
+    /** Artifact bytes (a report, a file) or text. */
+    content: Uint8Array | string;
+    /** File name — its extension drives how the artifact renders when shared. */
+    filename: string;
+    /** MIME type; defaults by extension, else application/octet-stream. */
+    contentType?: string;
+    /** Injectable for tests / non-global-fetch runtimes. */
+    fetchImpl?: typeof fetch;
+}
+export interface PublishedArtifact {
+    /** Absolute shareable URL (open in any browser). */
+    url: string;
+    /** Server object key (owner-prefixed). */
+    key: string;
+    size: number;
+}
+/** Best-effort MIME guess from a filename extension. */
+export declare function guessContentType(filename: string): string;
+/**
+ * Upload an artifact and return its shareable URL. Throws on a non-2xx (with
+ * the status + server message) so callers can surface a clear failure — this
+ * is user-initiated ("share this"), so silent failure would be worse than an
+ * error.
+ */
+export declare function publishArtifact(opts: PublishArtifactOptions): Promise<PublishedArtifact>;
+//# sourceMappingURL=artifacts.d.ts.map

package/dist/artifacts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifacts.d.ts","sourceRoot":"","sources":["../src/artifacts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,sBAAsB;IACrC,6EAA6E;IAC7E,YAAY,EAAE,MAAM,CAAC;IACrB,2EAA2E;IAC3E,KAAK,EAAE,MAAM,CAAC;IACd,iDAAiD;IACjD,OAAO,EAAE,UAAU,GAAG,MAAM,CAAC;IAC7B,6EAA6E;IAC7E,QAAQ,EAAE,MAAM,CAAC;IACjB,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wDAAwD;IACxD,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAChC,oDAAoD;IACpD,GAAG,EAAE,MAAM,CAAC;IACZ,0CAA0C;IAC1C,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wDAAwD;AACxD,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAczD;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA0B9F"}

package/dist/artifacts.js

@@ -0,0 +1,73 @@
+"use strict";
+/**
+ * Bandit Artifacts (cloud) — publish a shareable artifact to S3Api and get back
+ * a URL anyone with the link can open.
+ *
+ * Cloud users' Burtson JWT authenticates to every Burtson API (confirmed), so
+ * this talks to S3Api directly — no gateway proxy, no service credential. The
+ * upload is per-user scoped and quota-bounded server-side (see S3Api's
+ * ArtifactController); this client just posts the bytes with the caller's token
+ * and returns the shareable URL S3Api mints.
+ *
+ * Host-agnostic (fetch + FormData/Blob, standard in the Node the CLI and
+ * extension run on), so both hosts share one implementation. Local-only users
+ * never call this — it requires a cloud token, keeping the offline path offline.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.guessContentType = guessContentType;
+exports.publishArtifact = publishArtifact;
+/** Best-effort MIME guess from a filename extension. */
+function guessContentType(filename) {
+    const ext = filename.slice(filename.lastIndexOf('.')).toLowerCase();
+    switch (ext) {
+        case '.html':
+        case '.htm': return 'text/html';
+        case '.md': return 'text/markdown';
+        case '.txt':
+        case '.log': return 'text/plain';
+        case '.json': return 'application/json';
+        case '.csv': return 'text/csv';
+        case '.pdf': return 'application/pdf';
+        case '.png': return 'image/png';
+        case '.jpg':
+        case '.jpeg': return 'image/jpeg';
+        case '.svg': return 'image/svg+xml';
+        default: return 'application/octet-stream';
+    }
+}
+/**
+ * Upload an artifact and return its shareable URL. Throws on a non-2xx (with
+ * the status + server message) so callers can surface a clear failure — this
+ * is user-initiated ("share this"), so silent failure would be worse than an
+ * error.
+ */
+async function publishArtifact(opts) {
+    const fetchImpl = opts.fetchImpl ?? fetch;
+    const base = opts.s3ApiBaseUrl.replace(/\/$/, '');
+    const contentType = opts.contentType ?? guessContentType(opts.filename);
+    const bytes = typeof opts.content === 'string' ? new TextEncoder().encode(opts.content) : opts.content;
+    const form = new FormData();
+    // Field name must match S3Api's UploadRequest.File. Don't set a
+    // Content-Type header ourselves — fetch derives the multipart boundary.
+    // Cast: Uint8Array is a valid BlobPart at runtime; the cast only sidesteps
+    // TS 5.7's ArrayBufferLike/SharedArrayBuffer generic strictness.
+    form.append('File', new Blob([bytes], { type: contentType }), opts.filename);
+    const res = await fetchImpl(`${base}/api/artifact`, {
+        method: 'POST',
+        headers: { authorization: `Bearer ${opts.token}` },
+        body: form,
+    });
+    if (!res.ok) {
+        let detail = '';
+        try {
+            detail = (await res.json())?.message ?? '';
+        }
+        catch { /* non-JSON */ }
+        throw new Error(`artifact upload failed: HTTP ${res.status}${detail ? ` — ${detail}` : ''}`);
+    }
+    const body = (await res.json());
+    if (!body.url)
+        throw new Error('artifact upload succeeded but no URL was returned');
+    return { url: body.url, key: body.key ?? '', size: body.size ?? bytes.byteLength };
+}
+//# sourceMappingURL=artifacts.js.map

package/dist/artifacts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifacts.js","sourceRoot":"","sources":["../src/artifacts.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;AA0BH,4CAcC;AAQD,0CA0BC;AAjDD,wDAAwD;AACxD,SAAgB,gBAAgB,CAAC,QAAgB;IAC/C,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACpE,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,OAAO,CAAC;QAAC,KAAK,MAAM,CAAC,CAAC,OAAO,WAAW,CAAC;QAC9C,KAAK,KAAK,CAAC,CAAC,OAAO,eAAe,CAAC;QACnC,KAAK,MAAM,CAAC;QAAC,KAAK,MAAM,CAAC,CAAC,OAAO,YAAY,CAAC;QAC9C,KAAK,OAAO,CAAC,CAAC,OAAO,kBAAkB,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,OAAO,UAAU,CAAC;QAC/B,KAAK,MAAM,CAAC,CAAC,OAAO,iBAAiB,CAAC;QACtC,KAAK,MAAM,CAAC,CAAC,OAAO,WAAW,CAAC;QAChC,KAAK,MAAM,CAAC;QAAC,KAAK,OAAO,CAAC,CAAC,OAAO,YAAY,CAAC;QAC/C,KAAK,MAAM,CAAC,CAAC,OAAO,eAAe,CAAC;QACpC,OAAO,CAAC,CAAC,OAAO,0BAA0B,CAAC;IAC7C,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,eAAe,CAAC,IAA4B;IAChE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAClD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;IAEvG,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;IAC5B,gEAAgE;IAChE,wEAAwE;IACxE,2EAA2E;IAC3E,iEAAiE;IACjE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,CAAC,KAA4B,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAEpG,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,IAAI,eAAe,EAAE;QAClD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,EAAE;QAClD,IAAI,EAAE,IAAI;KACX,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,CAAC;YAAC,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAA2B,CAAA,EAAE,OAAO,IAAI,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;QACpG,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA+B,CAAC;IAC9D,IAAI,CAAC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACpF,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;AACrF,CAAC"}

package/dist/index.d.ts

@@ -2,6 +2,9 @@ export { loadMemory, loadCombinedMemory, appendMemory, consolidateMemory, type M
 export { loadMemoryIndex, renderMemoryIndexBlock, writeMemoryTopic, migrateMemoryToBanditDir, MAX_INDEX_BYTES, MAX_MEMORY_FILE_BYTES, MEMORY_DIR, MEMORY_INDEX_FILE, BANDIT_DIR, BANDIT_MEMORY_DIR, BANDIT_MEMORY_INDEX_FILE, type MemoryIndex, type MemoryIndexEntry, type MemoryWarnFn } from './memoryIndex';
 export { buildReadMemoryTool } from './tools/readMemoryTool';
 export { lessonsPath, loadLessons, addLesson, clearLessons, type AddLessonResult } from './lessons';
+export { publishArtifact, guessContentType, type PublishArtifactOptions, type PublishedArtifact } from './artifacts';
+export { buildPublishArtifactTool } from './tools/publishArtifactTool';
+export { LocalSandboxExecutor, AntonSandboxExecutor, createSandboxExecutor, ANTON_EXEC_CONTRACT, type SandboxExecutor, type SandboxExecOptions, type SandboxExecResult, type SandboxConfig, } from './sandbox';
 export { RUNNER_PROTOCOL_VERSION, type RemoteRunMode, type RemoteTask, type RunnerEvent, type RunnerGateway } from './runner/contract';
 export { HttpRunnerGateway, type HttpGatewayOptions } from './runner/httpGateway';
 export { RemoteSession, type RemoteSessionOptions } from './runner/remoteSession';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACzB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,gBAAgB,EAChB,wBAAwB,EACxB,eAAe,EACf,qBAAqB,EACrB,UAAU,EACV,iBAAiB,EACjB,UAAU,EACV,iBAAiB,EACjB,wBAAwB,EACxB,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EAClB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAE7D,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,eAAe,EAAE,MAAM,WAAW,CAAC;AAIpG,OAAO,EACL,uBAAuB,EACvB,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,aAAa,EACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,iBAAiB,EAAE,KAAK,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAClF,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAClF,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACrB,MAAM,OAAO,CAAC;AACf,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,EACvB,oBAAoB,EACpB,sBAAsB,EACtB,6BAA6B,EAC7B,uBAAuB,EACxB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,EACrB,oBAAoB,EACpB,YAAY,EACb,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,QAAQ,EACR,KAAK,SAAS,EACd,KAAK,QAAQ,EACb,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACtB,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,qBAAqB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC3B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,YAAY,EACZ,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,WAAW,EACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,eAAe,EACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,WAAW,EACX,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,iBAAiB,EACvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EACL,SAAS,EACT,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,KAAK,oBAAoB,EACzB,iBAAiB,EAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC/G,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,mBAAmB,EACnB,YAAY,EACZ,uBAAuB,EACvB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,SAAS,EACd,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,aAAa,EACnB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,2BAA2B,EAC3B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC5B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,kBAAkB,EAClB,WAAW,EACX,aAAa,EACb,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACxB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,WAAW,EACX,WAAW,EACX,kBAAkB,EAClB,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,kBAAkB,EAClB,uBAAuB,EACvB,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACpB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,yBAAyB,EACzB,kBAAkB,EAClB,aAAa,EACb,KAAK,eAAe,EACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,eAAe,EACf,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC5B,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACzB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,gBAAgB,EAChB,wBAAwB,EACxB,eAAe,EACf,qBAAqB,EACrB,UAAU,EACV,iBAAiB,EACjB,UAAU,EACV,iBAAiB,EACjB,wBAAwB,EACxB,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EAClB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAE7D,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,eAAe,EAAE,MAAM,WAAW,CAAC;AAEpG,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,KAAK,sBAAsB,EAAE,KAAK,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACrH,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAGvE,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,aAAa,GACnB,MAAM,WAAW,CAAC;AAInB,OAAO,EACL,uBAAuB,EACvB,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,aAAa,EACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,iBAAiB,EAAE,KAAK,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAClF,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAClF,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACrB,MAAM,OAAO,CAAC;AACf,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,EACvB,oBAAoB,EACpB,sBAAsB,EACtB,6BAA6B,EAC7B,uBAAuB,EACxB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,EACrB,oBAAoB,EACpB,YAAY,EACb,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,QAAQ,EACR,KAAK,SAAS,EACd,KAAK,QAAQ,EACb,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACtB,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,qBAAqB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC3B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,YAAY,EACZ,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,WAAW,EACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,eAAe,EACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,WAAW,EACX,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,iBAAiB,EACvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EACL,SAAS,EACT,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,KAAK,oBAAoB,EACzB,iBAAiB,EAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC/G,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,mBAAmB,EACnB,YAAY,EACZ,uBAAuB,EACvB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,SAAS,EACd,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,aAAa,EACnB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,2BAA2B,EAC3B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC5B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,kBAAkB,EAClB,WAAW,EACX,aAAa,EACb,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACxB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,WAAW,EACX,WAAW,EACX,kBAAkB,EAClB,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,kBAAkB,EAClB,uBAAuB,EACvB,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACpB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,yBAAyB,EACzB,kBAAkB,EAClB,aAAa,EACb,KAAK,eAAe,EACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,eAAe,EACf,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC5B,MAAM,eAAe,CAAC"}

package/dist/index.js

@@ -1,7 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.evaluateSecurityGuard = exports.runHooks = exports.persistAllowEntry = exports.loadHookSettings = exports.mcpToolCachePath = exports.pruneMcpToolCache = exports.saveMcpToolEntry = exports.loadMcpToolCache = exports.mcpTrustPath = exports.revokeMcpFingerprint = exports.approveMcpFingerprint = exports.loadApprovedMcpFingerprints = exports.buildCustomServerConfig = exports.looksLikeGmailCredentialsPath = exports.buildGmailServerConfig = exports.looksLikeGitLabToken = exports.buildGitLabServerConfig = exports.looksLikeSlackTeamId = exports.looksLikeSlackToken = exports.buildSlackServerConfig = exports.looksLikeGitHubToken = exports.buildGitHubServerConfig = exports.addMcpServerToConfig = exports.persistMcpActivation = exports.globalMcpServersPath = exports.registerMcpServersFromDisk = exports.loadMcpServersConfig = exports.RemoteSession = exports.HttpRunnerGateway = exports.RUNNER_PROTOCOL_VERSION = exports.clearLessons = exports.addLesson = exports.loadLessons = exports.lessonsPath = exports.buildReadMemoryTool = exports.BANDIT_MEMORY_INDEX_FILE = exports.BANDIT_MEMORY_DIR = exports.BANDIT_DIR = exports.MEMORY_INDEX_FILE = exports.MEMORY_DIR = exports.MAX_MEMORY_FILE_BYTES = exports.MAX_INDEX_BYTES = exports.migrateMemoryToBanditDir = exports.writeMemoryTopic = exports.renderMemoryIndexBlock = exports.loadMemoryIndex = exports.consolidateMemory = exports.appendMemory = exports.loadCombinedMemory = exports.loadMemory = void 0;
-exports.CheckpointStore = exports.isChatCapable = exports.suggestOllamaMatch = exports.listInstalledOllamaModels = exports.formatTurnTraceMarkdown = exports.summarizeTurnTrace = exports.parseTurnLog = exports.readTurnTraceById = exports.readTurnTrace = exports.listTurnTraces = exports.listTurnTraceFiles = exports.previewText = exports.openTurnLog = exports.SessionPermissionStore = exports.mergePolicies = exports.emptyPolicy = exports.evaluatePermission = exports.InMemoryBackgroundTaskStore = exports.buildInsightsAiCallback = exports.buildAiInput = exports.writeInsightsReport = exports.renderInsightsHtml = exports.computeInsights = exports.parseTestOutput = exports.buildTestCommand = exports.detectTestFramework = exports.buildTestRunTool = exports.buildListTasksTool = exports.buildCheckTaskTool = exports.buildTaskTool = exports.buildRememberTool = exports.buildWebSearchTool = exports.buildWebFetchTool = exports.buildTodoWriteTool = exports.TodoStore = exports.expandMentions = exports.CYCLE_MODES = exports.PERMISSION_MODES = exports.AutoApprovalLedger = exports.nextCycleMode = exports.isPermissionMode = exports.decidePermission = exports.shouldAutoApprove = exports.resolvePermissionMode = exports.policyIncludes = exports.commandSignature = exports.grantRuleFor = exports.classifyRisk = void 0;
+exports.loadMcpToolCache = exports.mcpTrustPath = exports.revokeMcpFingerprint = exports.approveMcpFingerprint = exports.loadApprovedMcpFingerprints = exports.buildCustomServerConfig = exports.looksLikeGmailCredentialsPath = exports.buildGmailServerConfig = exports.looksLikeGitLabToken = exports.buildGitLabServerConfig = exports.looksLikeSlackTeamId = exports.looksLikeSlackToken = exports.buildSlackServerConfig = exports.looksLikeGitHubToken = exports.buildGitHubServerConfig = exports.addMcpServerToConfig = exports.persistMcpActivation = exports.globalMcpServersPath = exports.registerMcpServersFromDisk = exports.loadMcpServersConfig = exports.RemoteSession = exports.HttpRunnerGateway = exports.RUNNER_PROTOCOL_VERSION = exports.ANTON_EXEC_CONTRACT = exports.createSandboxExecutor = exports.AntonSandboxExecutor = exports.LocalSandboxExecutor = exports.buildPublishArtifactTool = exports.guessContentType = exports.publishArtifact = exports.clearLessons = exports.addLesson = exports.loadLessons = exports.lessonsPath = exports.buildReadMemoryTool = exports.BANDIT_MEMORY_INDEX_FILE = exports.BANDIT_MEMORY_DIR = exports.BANDIT_DIR = exports.MEMORY_INDEX_FILE = exports.MEMORY_DIR = exports.MAX_MEMORY_FILE_BYTES = exports.MAX_INDEX_BYTES = exports.migrateMemoryToBanditDir = exports.writeMemoryTopic = exports.renderMemoryIndexBlock = exports.loadMemoryIndex = exports.consolidateMemory = exports.appendMemory = exports.loadCombinedMemory = exports.loadMemory = void 0;
+exports.summarizeTurnTrace = exports.parseTurnLog = exports.readTurnTraceById = exports.readTurnTrace = exports.listTurnTraces = exports.listTurnTraceFiles = exports.previewText = exports.openTurnLog = exports.SessionPermissionStore = exports.mergePolicies = exports.emptyPolicy = exports.evaluatePermission = exports.InMemoryBackgroundTaskStore = exports.buildInsightsAiCallback = exports.buildAiInput = exports.writeInsightsReport = exports.renderInsightsHtml = exports.computeInsights = exports.parseTestOutput = exports.buildTestCommand = exports.detectTestFramework = exports.buildTestRunTool = exports.buildListTasksTool = exports.buildCheckTaskTool = exports.buildTaskTool = exports.buildRememberTool = exports.buildWebSearchTool = exports.buildWebFetchTool = exports.buildTodoWriteTool = exports.TodoStore = exports.expandMentions = exports.CYCLE_MODES = exports.PERMISSION_MODES = exports.AutoApprovalLedger = exports.nextCycleMode = exports.isPermissionMode = exports.decidePermission = exports.shouldAutoApprove = exports.resolvePermissionMode = exports.policyIncludes = exports.commandSignature = exports.grantRuleFor = exports.classifyRisk = exports.evaluateSecurityGuard = exports.runHooks = exports.persistAllowEntry = exports.loadHookSettings = exports.mcpToolCachePath = exports.pruneMcpToolCache = exports.saveMcpToolEntry = void 0;
+exports.CheckpointStore = exports.isChatCapable = exports.suggestOllamaMatch = exports.listInstalledOllamaModels = exports.formatTurnTraceMarkdown = void 0;
 var memory_1 = require("./memory");
 Object.defineProperty(exports, "loadMemory", { enumerable: true, get: function () { return memory_1.loadMemory; } });
 Object.defineProperty(exports, "loadCombinedMemory", { enumerable: true, get: function () { return memory_1.loadCombinedMemory; } });
@@ -27,6 +28,19 @@ Object.defineProperty(exports, "lessonsPath", { enumerable: true, get: function
 Object.defineProperty(exports, "loadLessons", { enumerable: true, get: function () { return lessons_1.loadLessons; } });
 Object.defineProperty(exports, "addLesson", { enumerable: true, get: function () { return lessons_1.addLesson; } });
 Object.defineProperty(exports, "clearLessons", { enumerable: true, get: function () { return lessons_1.clearLessons; } });
+// Bandit Artifacts (cloud) — publish a shareable artifact to S3Api, get a URL.
+var artifacts_1 = require("./artifacts");
+Object.defineProperty(exports, "publishArtifact", { enumerable: true, get: function () { return artifacts_1.publishArtifact; } });
+Object.defineProperty(exports, "guessContentType", { enumerable: true, get: function () { return artifacts_1.guessContentType; } });
+var publishArtifactTool_1 = require("./tools/publishArtifactTool");
+Object.defineProperty(exports, "buildPublishArtifactTool", { enumerable: true, get: function () { return publishArtifactTool_1.buildPublishArtifactTool; } });
+// Sandbox execution seam — swappable boundary for running commands (local host
+// today; Firecracker microVM via anton once its exec endpoint lands).
+var sandbox_1 = require("./sandbox");
+Object.defineProperty(exports, "LocalSandboxExecutor", { enumerable: true, get: function () { return sandbox_1.LocalSandboxExecutor; } });
+Object.defineProperty(exports, "AntonSandboxExecutor", { enumerable: true, get: function () { return sandbox_1.AntonSandboxExecutor; } });
+Object.defineProperty(exports, "createSandboxExecutor", { enumerable: true, get: function () { return sandbox_1.createSandboxExecutor; } });
+Object.defineProperty(exports, "ANTON_EXEC_CONTRACT", { enumerable: true, get: function () { return sandbox_1.ANTON_EXEC_CONTRACT; } });
 // Remote control: the local-runner ↔ gateway transport + live-session driver.
 // Host-agnostic (only fetch + ReadableStream), so BOTH the CLI and the VS Code
 // extension import the SAME RemoteSession — one proven mechanism, not two copies.

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;AAAA,mCAQkB;AAPhB,oGAAA,UAAU,OAAA;AACV,4GAAA,kBAAkB,OAAA;AAClB,sGAAA,YAAY,OAAA;AACZ,2GAAA,iBAAiB,OAAA;AAKnB,6CAeuB;AAdrB,8GAAA,eAAe,OAAA;AACf,qHAAA,sBAAsB,OAAA;AACtB,+GAAA,gBAAgB,OAAA;AAChB,uHAAA,wBAAwB,OAAA;AACxB,8GAAA,eAAe,OAAA;AACf,oHAAA,qBAAqB,OAAA;AACrB,yGAAA,UAAU,OAAA;AACV,gHAAA,iBAAiB,OAAA;AACjB,yGAAA,UAAU,OAAA;AACV,gHAAA,iBAAiB,OAAA;AACjB,uHAAA,wBAAwB,OAAA;AAK1B,yDAA6D;AAApD,qHAAA,mBAAmB,OAAA;AAC5B,+EAA+E;AAC/E,qCAAoG;AAA3F,sGAAA,WAAW,OAAA;AAAE,sGAAA,WAAW,OAAA;AAAE,oGAAA,SAAS,OAAA;AAAE,uGAAA,YAAY,OAAA;AAC1D,8EAA8E;AAC9E,+EAA+E;AAC/E,kFAAkF;AAClF,8CAM2B;AALzB,mHAAA,uBAAuB,OAAA;AAMzB,oDAAkF;AAAzE,gHAAA,iBAAiB,OAAA;AAC1B,wDAAkF;AAAzE,8GAAA,aAAa,OAAA;AACtB,6BAMe;AALb,2GAAA,oBAAoB,OAAA;AACpB,iHAAA,0BAA0B,OAAA;AAC1B,2GAAA,oBAAoB,OAAA;AACpB,2GAAA,oBAAoB,OAAA;AACpB,2GAAA,oBAAoB,OAAA;AAEtB,iDAWyB;AAVvB,wHAAA,uBAAuB,OAAA;AACvB,qHAAA,oBAAoB,OAAA;AACpB,uHAAA,sBAAsB,OAAA;AACtB,oHAAA,mBAAmB,OAAA;AACnB,qHAAA,oBAAoB,OAAA;AACpB,wHAAA,uBAAuB,OAAA;AACvB,qHAAA,oBAAoB,OAAA;AACpB,uHAAA,sBAAsB,OAAA;AACtB,8HAAA,6BAA6B,OAAA;AAC7B,wHAAA,uBAAuB,OAAA;AAEzB,uCAKoB;AAJlB,uHAAA,2BAA2B,OAAA;AAC3B,iHAAA,qBAAqB,OAAA;AACrB,gHAAA,oBAAoB,OAAA;AACpB,wGAAA,YAAY,OAAA;AAEd,+CAKwB;AAJtB,gHAAA,gBAAgB,OAAA;AAChB,gHAAA,gBAAgB,OAAA;AAChB,iHAAA,iBAAiB,OAAA;AACjB,gHAAA,gBAAgB,OAAA;AAElB,iCAUiB;AATf,yGAAA,gBAAgB,OAAA;AAChB,0GAAA,iBAAiB,OAAA;AACjB,iGAAA,QAAQ,OAAA;AAQV,iDAKyB;AAJvB,sHAAA,qBAAqB,OAAA;AAKvB,yCAKqB;AAJnB,yGAAA,YAAY,OAAA;AAKd,2CAOsB;AANpB,0GAAA,YAAY,OAAA;AACZ,8GAAA,gBAAgB,OAAA;AAChB,4GAAA,cAAc,OAAA;AAKhB,mDAgB0B;AAfxB,uHAAA,qBAAqB,OAAA;AACrB,mHAAA,iBAAiB,OAAA;AACjB,kHAAA,gBAAgB,OAAA;AAChB,kHAAA,gBAAgB,OAAA;AAChB,+GAAA,aAAa,OAAA;AACb,oHAAA,kBAAkB,OAAA;AAClB,kHAAA,gBAAgB,OAAA;AAChB,6GAAA,WAAW,OAAA;AASb,uCAAiE;AAAxD,0GAAA,cAAc,OAAA;AACvB,iDAO4B;AAN1B,uGAAA,SAAS,OAAA;AACT,gHAAA,kBAAkB,OAAA;AAClB,+GAAA,iBAAiB,OAAA;AACjB,gHAAA,kBAAkB,OAAA;AAElB,+GAAA,iBAAiB,OAAA;AAEnB,6CAA+G;AAAtG,yGAAA,aAAa,OAAA;AAAE,8GAAA,kBAAkB,OAAA;AAAE,8GAAA,kBAAkB,OAAA;AAC9D,mDAO6B;AAN3B,+GAAA,gBAAgB,OAAA;AAChB,kHAAA,mBAAmB,OAAA;AACnB,+GAAA,gBAAgB,OAAA;AAChB,8GAAA,eAAe,OAAA;AAIjB,uCAaoB;AAZlB,2GAAA,eAAe,OAAA;AACf,8GAAA,kBAAkB,OAAA;AAClB,+GAAA,mBAAmB,OAAA;AACnB,wGAAA,YAAY,OAAA;AACZ,mHAAA,uBAAuB,OAAA;AASzB,qDAM2B;AALzB,8HAAA,2BAA2B,OAAA;AAM7B,6CAOuB;AANrB,iHAAA,kBAAkB,OAAA;AAClB,0GAAA,WAAW,OAAA;AACX,4GAAA,aAAa,OAAA;AACb,qHAAA,sBAAsB,OAAA;AAIxB,qCAgBmB;AAfjB,sGAAA,WAAW,OAAA;AACX,sGAAA,WAAW,OAAA;AACX,6GAAA,kBAAkB,OAAA;AAClB,yGAAA,cAAc,OAAA;AACd,wGAAA,aAAa,OAAA;AACb,4GAAA,iBAAiB,OAAA;AACjB,uGAAA,YAAY,OAAA;AACZ,6GAAA,kBAAkB,OAAA;AAClB,kHAAA,uBAAuB,OAAA;AAQzB,+CAKwB;AAJtB,yHAAA,yBAAyB,OAAA;AACzB,kHAAA,kBAAkB,OAAA;AAClB,6GAAA,aAAa,OAAA;AAGf,6CAKuB;AAJrB,8GAAA,eAAe,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;AAAA,mCAQkB;AAPhB,oGAAA,UAAU,OAAA;AACV,4GAAA,kBAAkB,OAAA;AAClB,sGAAA,YAAY,OAAA;AACZ,2GAAA,iBAAiB,OAAA;AAKnB,6CAeuB;AAdrB,8GAAA,eAAe,OAAA;AACf,qHAAA,sBAAsB,OAAA;AACtB,+GAAA,gBAAgB,OAAA;AAChB,uHAAA,wBAAwB,OAAA;AACxB,8GAAA,eAAe,OAAA;AACf,oHAAA,qBAAqB,OAAA;AACrB,yGAAA,UAAU,OAAA;AACV,gHAAA,iBAAiB,OAAA;AACjB,yGAAA,UAAU,OAAA;AACV,gHAAA,iBAAiB,OAAA;AACjB,uHAAA,wBAAwB,OAAA;AAK1B,yDAA6D;AAApD,qHAAA,mBAAmB,OAAA;AAC5B,+EAA+E;AAC/E,qCAAoG;AAA3F,sGAAA,WAAW,OAAA;AAAE,sGAAA,WAAW,OAAA;AAAE,oGAAA,SAAS,OAAA;AAAE,uGAAA,YAAY,OAAA;AAC1D,+EAA+E;AAC/E,yCAAqH;AAA5G,4GAAA,eAAe,OAAA;AAAE,6GAAA,gBAAgB,OAAA;AAC1C,mEAAuE;AAA9D,+HAAA,wBAAwB,OAAA;AACjC,+EAA+E;AAC/E,sEAAsE;AACtE,qCASmB;AARjB,+GAAA,oBAAoB,OAAA;AACpB,+GAAA,oBAAoB,OAAA;AACpB,gHAAA,qBAAqB,OAAA;AACrB,8GAAA,mBAAmB,OAAA;AAMrB,8EAA8E;AAC9E,+EAA+E;AAC/E,kFAAkF;AAClF,8CAM2B;AALzB,mHAAA,uBAAuB,OAAA;AAMzB,oDAAkF;AAAzE,gHAAA,iBAAiB,OAAA;AAC1B,wDAAkF;AAAzE,8GAAA,aAAa,OAAA;AACtB,6BAMe;AALb,2GAAA,oBAAoB,OAAA;AACpB,iHAAA,0BAA0B,OAAA;AAC1B,2GAAA,oBAAoB,OAAA;AACpB,2GAAA,oBAAoB,OAAA;AACpB,2GAAA,oBAAoB,OAAA;AAEtB,iDAWyB;AAVvB,wHAAA,uBAAuB,OAAA;AACvB,qHAAA,oBAAoB,OAAA;AACpB,uHAAA,sBAAsB,OAAA;AACtB,oHAAA,mBAAmB,OAAA;AACnB,qHAAA,oBAAoB,OAAA;AACpB,wHAAA,uBAAuB,OAAA;AACvB,qHAAA,oBAAoB,OAAA;AACpB,uHAAA,sBAAsB,OAAA;AACtB,8HAAA,6BAA6B,OAAA;AAC7B,wHAAA,uBAAuB,OAAA;AAEzB,uCAKoB;AAJlB,uHAAA,2BAA2B,OAAA;AAC3B,iHAAA,qBAAqB,OAAA;AACrB,gHAAA,oBAAoB,OAAA;AACpB,wGAAA,YAAY,OAAA;AAEd,+CAKwB;AAJtB,gHAAA,gBAAgB,OAAA;AAChB,gHAAA,gBAAgB,OAAA;AAChB,iHAAA,iBAAiB,OAAA;AACjB,gHAAA,gBAAgB,OAAA;AAElB,iCAUiB;AATf,yGAAA,gBAAgB,OAAA;AAChB,0GAAA,iBAAiB,OAAA;AACjB,iGAAA,QAAQ,OAAA;AAQV,iDAKyB;AAJvB,sHAAA,qBAAqB,OAAA;AAKvB,yCAKqB;AAJnB,yGAAA,YAAY,OAAA;AAKd,2CAOsB;AANpB,0GAAA,YAAY,OAAA;AACZ,8GAAA,gBAAgB,OAAA;AAChB,4GAAA,cAAc,OAAA;AAKhB,mDAgB0B;AAfxB,uHAAA,qBAAqB,OAAA;AACrB,mHAAA,iBAAiB,OAAA;AACjB,kHAAA,gBAAgB,OAAA;AAChB,kHAAA,gBAAgB,OAAA;AAChB,+GAAA,aAAa,OAAA;AACb,oHAAA,kBAAkB,OAAA;AAClB,kHAAA,gBAAgB,OAAA;AAChB,6GAAA,WAAW,OAAA;AASb,uCAAiE;AAAxD,0GAAA,cAAc,OAAA;AACvB,iDAO4B;AAN1B,uGAAA,SAAS,OAAA;AACT,gHAAA,kBAAkB,OAAA;AAClB,+GAAA,iBAAiB,OAAA;AACjB,gHAAA,kBAAkB,OAAA;AAElB,+GAAA,iBAAiB,OAAA;AAEnB,6CAA+G;AAAtG,yGAAA,aAAa,OAAA;AAAE,8GAAA,kBAAkB,OAAA;AAAE,8GAAA,kBAAkB,OAAA;AAC9D,mDAO6B;AAN3B,+GAAA,gBAAgB,OAAA;AAChB,kHAAA,mBAAmB,OAAA;AACnB,+GAAA,gBAAgB,OAAA;AAChB,8GAAA,eAAe,OAAA;AAIjB,uCAaoB;AAZlB,2GAAA,eAAe,OAAA;AACf,8GAAA,kBAAkB,OAAA;AAClB,+GAAA,mBAAmB,OAAA;AACnB,wGAAA,YAAY,OAAA;AACZ,mHAAA,uBAAuB,OAAA;AASzB,qDAM2B;AALzB,8HAAA,2BAA2B,OAAA;AAM7B,6CAOuB;AANrB,iHAAA,kBAAkB,OAAA;AAClB,0GAAA,WAAW,OAAA;AACX,4GAAA,aAAa,OAAA;AACb,qHAAA,sBAAsB,OAAA;AAIxB,qCAgBmB;AAfjB,sGAAA,WAAW,OAAA;AACX,sGAAA,WAAW,OAAA;AACX,6GAAA,kBAAkB,OAAA;AAClB,yGAAA,cAAc,OAAA;AACd,wGAAA,aAAa,OAAA;AACb,4GAAA,iBAAiB,OAAA;AACjB,uGAAA,YAAY,OAAA;AACZ,6GAAA,kBAAkB,OAAA;AAClB,kHAAA,uBAAuB,OAAA;AAQzB,+CAKwB;AAJtB,yHAAA,yBAAyB,OAAA;AACzB,kHAAA,kBAAkB,OAAA;AAClB,6GAAA,aAAa,OAAA;AAGf,6CAKuB;AAJrB,8GAAA,eAAe,OAAA"}

package/dist/sandbox.d.ts

@@ -0,0 +1,103 @@
+/**
+ * Sandbox execution seam — the boundary that lets Bandit run a command inside
+ * a hard isolation boundary (a Firecracker microVM) instead of directly on the
+ * host filesystem.
+ *
+ * WHY: Bandit's safety today is BEHAVIORAL — host-kit's decidePermission gates
+ * whether a command runs, but if it runs, it runs on your real machine. That's
+ * fine with a human at the keyboard; it is NOT fine for the autonomy we now
+ * ship (remote control, graph auto-routing) where nobody is watching. A microVM
+ * is a HARD boundary: a compromised model output, a prompt-injection, or a bad
+ * tool call physically cannot reach the host. This seam is what a caller routes
+ * `runCommand` through so that boundary is swappable.
+ *
+ * The interface is deliberately tiny and backend-agnostic. Today only the local
+ * backend exists (no isolation — current behavior). The microVM backend targets
+ * the `anton` control plane (Firecracker microVMs on son-of-anton), but anton's
+ * current API deploys web apps (Caddy rootfs + bundle→serve) and does NOT yet
+ * expose command-exec-with-output — see ANTON_EXEC_CONTRACT below for exactly
+ * what it must add. Until then, selecting the anton backend fails loudly rather
+ * than silently running on the host.
+ */
+export interface SandboxExecOptions {
+    /** Working directory for the command (inside the sandbox's mounted workspace). */
+    cwd?: string;
+    /** Hard timeout in ms. A sandbox MUST kill the command at this bound. */
+    timeoutMs?: number;
+    /** Extra environment for the command. Secrets should NOT be passed here for
+     *  untrusted work — that's part of the point of the boundary. */
+    env?: Record<string, string>;
+}
+export interface SandboxExecResult {
+    stdout: string;
+    stderr: string;
+    exitCode: number;
+    /** True when the command was killed at timeoutMs. */
+    timedOut?: boolean;
+}
+/**
+ * Runs a command somewhere. `local` = the host (no isolation). `microvm` = a
+ * one-command-scoped Firecracker VM via anton (hard boundary). Callers depend
+ * on this interface, never on a concrete backend, so the boundary is a config
+ * switch, not a rewrite.
+ */
+export interface SandboxExecutor {
+    readonly kind: 'local' | 'microvm';
+    exec(command: string, opts?: SandboxExecOptions): Promise<SandboxExecResult>;
+    /** Release any per-executor resources (VM teardown, etc.). */
+    dispose?(): Promise<void>;
+}
+/**
+ * The HTTP contract anton must implement for microVM exec (it doesn't yet).
+ * Documented here as the single source of truth for the two-repo work:
+ *
+ *   POST {antonBaseUrl}/sessions              → { id }                  (create VM)
+ *   POST {antonBaseUrl}/sessions/{id}/exec    { command, cwd?, env?, timeoutMs? }
+ *                                             → { stdout, stderr, exitCode, timedOut? }
+ *   DELETE {antonBaseUrl}/sessions/{id}                                 (teardown)
+ *
+ * Auth: Burtson JWT (same bearer the CLI/extension already hold). The VM mounts
+ * ONLY the workspace, has NO host mount, and NO network egress by default.
+ */
+export declare const ANTON_EXEC_CONTRACT = "POST /sessions/{id}/exec {command,cwd?,env?,timeoutMs?} -> {stdout,stderr,exitCode}";
+/** The host backend — no isolation, current behavior. A microVM backend
+ *  implements the same interface against anton once its exec endpoint lands. */
+export declare class LocalSandboxExecutor implements SandboxExecutor {
+    readonly kind: "local";
+    exec(command: string, opts?: SandboxExecOptions): Promise<SandboxExecResult>;
+}
+/**
+ * The microVM backend — a client for anton's exec API (ANTON_EXEC_CONTRACT).
+ * Each exec creates a fresh VM, runs the command, tears it down: one-command
+ * isolation, so nothing persists or leaks between calls. Built + tested here
+ * against the contract; it goes live the moment anton ships the endpoint (the
+ * anton side stages the command as the VM's run.sh, boots, returns output).
+ */
+export declare class AntonSandboxExecutor implements SandboxExecutor {
+    private readonly opts;
+    readonly kind: "microvm";
+    constructor(opts: {
+        baseUrl: string;
+        token: string;
+        fetchImpl?: typeof fetch;
+    });
+    private get fetchImpl();
+    private headers;
+    exec(command: string, opts?: SandboxExecOptions): Promise<SandboxExecResult>;
+}
+export interface SandboxConfig {
+    /** 'local' (default) or 'microvm'. */
+    mode?: 'local' | 'microvm';
+    /** anton node-agent base URL, required for 'microvm'. */
+    antonBaseUrl?: string;
+    /** Bearer token for anton (Burtson JWT). */
+    token?: string;
+}
+/**
+ * Pick a backend from config. Defaults to local. `microvm` is accepted but the
+ * anton backend is not implemented yet, so this throws with a precise reason
+ * rather than degrading to local (silent degrade would defeat the safety goal —
+ * you'd think you were sandboxed and not be).
+ */
+export declare function createSandboxExecutor(config?: SandboxConfig, localFactory?: () => SandboxExecutor): SandboxExecutor;
+//# sourceMappingURL=sandbox.d.ts.map

package/dist/sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../src/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,WAAW,kBAAkB;IACjC,kFAAkF;IAClF,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,yEAAyE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;qEACiE;IACjE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,SAAS,CAAC;IACnC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC7E,8DAA8D;IAC9D,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,mBAAmB,wFAAwF,CAAC;AAEzH;gFACgF;AAChF,qBAAa,oBAAqB,YAAW,eAAe;IAC1D,QAAQ,CAAC,IAAI,EAAG,OAAO,CAAU;IAE3B,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,kBAAuB,GAAG,OAAO,CAAC,iBAAiB,CAAC;CA0BvF;AAED;;;;;;GAMG;AACH,qBAAa,oBAAqB,YAAW,eAAe;IAGxD,OAAO,CAAC,QAAQ,CAAC,IAAI;IAFvB,QAAQ,CAAC,IAAI,EAAG,SAAS,CAAU;gBAEhB,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;KAAE;IAGrF,OAAO,KAAK,SAAS,GAAyD;IAC9E,OAAO,CAAC,OAAO;IAIT,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,kBAAuB,GAAG,OAAO,CAAC,iBAAiB,CAAC;CA2BvF;AAED,MAAM,WAAW,aAAa;IAC5B,sCAAsC;IACtC,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC3B,yDAAyD;IACzD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4CAA4C;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,GAAE,aAAkB,EAC1B,YAAY,GAAE,MAAM,eAAkD,GACrE,eAAe,CAcjB"}

package/dist/sandbox.js

@@ -0,0 +1,178 @@
+"use strict";
+/**
+ * Sandbox execution seam — the boundary that lets Bandit run a command inside
+ * a hard isolation boundary (a Firecracker microVM) instead of directly on the
+ * host filesystem.
+ *
+ * WHY: Bandit's safety today is BEHAVIORAL — host-kit's decidePermission gates
+ * whether a command runs, but if it runs, it runs on your real machine. That's
+ * fine with a human at the keyboard; it is NOT fine for the autonomy we now
+ * ship (remote control, graph auto-routing) where nobody is watching. A microVM
+ * is a HARD boundary: a compromised model output, a prompt-injection, or a bad
+ * tool call physically cannot reach the host. This seam is what a caller routes
+ * `runCommand` through so that boundary is swappable.
+ *
+ * The interface is deliberately tiny and backend-agnostic. Today only the local
+ * backend exists (no isolation — current behavior). The microVM backend targets
+ * the `anton` control plane (Firecracker microVMs on son-of-anton), but anton's
+ * current API deploys web apps (Caddy rootfs + bundle→serve) and does NOT yet
+ * expose command-exec-with-output — see ANTON_EXEC_CONTRACT below for exactly
+ * what it must add. Until then, selecting the anton backend fails loudly rather
+ * than silently running on the host.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AntonSandboxExecutor = exports.LocalSandboxExecutor = exports.ANTON_EXEC_CONTRACT = void 0;
+exports.createSandboxExecutor = createSandboxExecutor;
+/**
+ * The HTTP contract anton must implement for microVM exec (it doesn't yet).
+ * Documented here as the single source of truth for the two-repo work:
+ *
+ *   POST {antonBaseUrl}/sessions              → { id }                  (create VM)
+ *   POST {antonBaseUrl}/sessions/{id}/exec    { command, cwd?, env?, timeoutMs? }
+ *                                             → { stdout, stderr, exitCode, timedOut? }
+ *   DELETE {antonBaseUrl}/sessions/{id}                                 (teardown)
+ *
+ * Auth: Burtson JWT (same bearer the CLI/extension already hold). The VM mounts
+ * ONLY the workspace, has NO host mount, and NO network egress by default.
+ */
+exports.ANTON_EXEC_CONTRACT = 'POST /sessions/{id}/exec {command,cwd?,env?,timeoutMs?} -> {stdout,stderr,exitCode}';
+/** The host backend — no isolation, current behavior. A microVM backend
+ *  implements the same interface against anton once its exec endpoint lands. */
+class LocalSandboxExecutor {
+    constructor() {
+        this.kind = 'local';
+    }
+    async exec(command, opts = {}) {
+        const { spawn } = await Promise.resolve().then(() => __importStar(require('child_process')));
+        return new Promise((resolve) => {
+            const child = spawn(command, {
+                shell: true,
+                cwd: opts.cwd,
+                env: { ...process.env, ...(opts.env ?? {}) },
+            });
+            let stdout = '';
+            let stderr = '';
+            let timedOut = false;
+            const timer = opts.timeoutMs
+                ? setTimeout(() => { timedOut = true; child.kill('SIGKILL'); }, opts.timeoutMs)
+                : null;
+            child.stdout?.on('data', (d) => { stdout += d.toString(); });
+            child.stderr?.on('data', (d) => { stderr += d.toString(); });
+            child.on('close', (code) => {
+                if (timer)
+                    clearTimeout(timer);
+                resolve({ stdout, stderr, exitCode: code ?? (timedOut ? 124 : 1), timedOut });
+            });
+            child.on('error', (err) => {
+                if (timer)
+                    clearTimeout(timer);
+                resolve({ stdout, stderr: stderr + String(err), exitCode: 127 });
+            });
+        });
+    }
+}
+exports.LocalSandboxExecutor = LocalSandboxExecutor;
+/**
+ * The microVM backend — a client for anton's exec API (ANTON_EXEC_CONTRACT).
+ * Each exec creates a fresh VM, runs the command, tears it down: one-command
+ * isolation, so nothing persists or leaks between calls. Built + tested here
+ * against the contract; it goes live the moment anton ships the endpoint (the
+ * anton side stages the command as the VM's run.sh, boots, returns output).
+ */
+class AntonSandboxExecutor {
+    constructor(opts) {
+        this.opts = opts;
+        this.kind = 'microvm';
+    }
+    get fetchImpl() { return this.opts.fetchImpl ?? fetch; }
+    headers() {
+        return { authorization: `Bearer ${this.opts.token}`, 'content-type': 'application/json' };
+    }
+    async exec(command, opts = {}) {
+        const base = this.opts.baseUrl.replace(/\/$/, '');
+        // 1) create a fresh VM
+        const created = await this.fetchImpl(`${base}/sessions`, { method: 'POST', headers: this.headers() });
+        if (!created.ok)
+            throw new Error(`sandbox create failed: HTTP ${created.status}`);
+        const { id } = (await created.json());
+        try {
+            // 2) run the command in it
+            const res = await this.fetchImpl(`${base}/sessions/${encodeURIComponent(id)}/exec`, {
+                method: 'POST',
+                headers: this.headers(),
+                body: JSON.stringify({ command, cwd: opts.cwd, env: opts.env, timeoutMs: opts.timeoutMs }),
+            });
+            if (!res.ok)
+                throw new Error(`sandbox exec failed: HTTP ${res.status}`);
+            const body = (await res.json());
+            return {
+                stdout: body.stdout ?? '',
+                stderr: body.stderr ?? '',
+                exitCode: typeof body.exitCode === 'number' ? body.exitCode : 1,
+                timedOut: body.timedOut,
+            };
+        }
+        finally {
+            // 3) always tear the VM down (best-effort)
+            try {
+                await this.fetchImpl(`${base}/sessions/${encodeURIComponent(id)}`, { method: 'DELETE', headers: this.headers() });
+            }
+            catch { /* reaper will collect it */ }
+        }
+    }
+}
+exports.AntonSandboxExecutor = AntonSandboxExecutor;
+/**
+ * Pick a backend from config. Defaults to local. `microvm` is accepted but the
+ * anton backend is not implemented yet, so this throws with a precise reason
+ * rather than degrading to local (silent degrade would defeat the safety goal —
+ * you'd think you were sandboxed and not be).
+ */
+function createSandboxExecutor(config = {}, localFactory = () => new LocalSandboxExecutor()) {
+    const mode = config.mode ?? 'local';
+    if (mode === 'local')
+        return localFactory();
+    // microvm: point at anton. Missing config throws rather than degrading to
+    // host execution — if you asked for isolation you get isolation or an error,
+    // never a silent host run. (When anton lacks the exec endpoint the client
+    // errors at exec time with a clear HTTP failure — also never a host run.)
+    if (!config.antonBaseUrl || !config.token) {
+        throw new Error(`sandbox mode "microvm" requires antonBaseUrl + token (the anton node-agent exec API: ${exports.ANTON_EXEC_CONTRACT}). ` +
+            `Refusing to fall back to host execution.`);
+    }
+    return new AntonSandboxExecutor({ baseUrl: config.antonBaseUrl, token: config.token });
+}
+//# sourceMappingURL=sandbox.js.map

package/dist/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../src/sandbox.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8IH,sDAiBC;AA9HD;;;;;;;;;;;GAWG;AACU,QAAA,mBAAmB,GAAG,qFAAqF,CAAC;AAEzH;gFACgF;AAChF,MAAa,oBAAoB;IAAjC;QACW,SAAI,GAAG,OAAgB,CAAC;IA4BnC,CAAC;IA1BC,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,OAA2B,EAAE;QACvD,MAAM,EAAE,KAAK,EAAE,GAAG,wDAAa,eAAe,GAAC,CAAC;QAChD,OAAO,IAAI,OAAO,CAAoB,CAAC,OAAO,EAAE,EAAE;YAChD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE;gBAC3B,KAAK,EAAE,IAAI;gBACX,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE;aAC7C,CAAC,CAAC;YACH,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS;gBAC1B,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,QAAQ,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;gBAC/E,CAAC,CAAC,IAAI,CAAC;YACT,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7D,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7D,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACzB,IAAI,KAAK;oBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;gBAC/B,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;YAChF,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACxB,IAAI,KAAK;oBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;gBAC/B,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;YACnE,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AA7BD,oDA6BC;AAED;;;;;;GAMG;AACH,MAAa,oBAAoB;IAE/B,YACmB,IAAkE;QAAlE,SAAI,GAAJ,IAAI,CAA8D;QAF5E,SAAI,GAAG,SAAkB,CAAC;IAGhC,CAAC;IAEJ,IAAY,SAAS,KAAmB,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC,CAAC;IACtE,OAAO;QACb,OAAO,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;IAC5F,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,OAA2B,EAAE;QACvD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAClD,uBAAuB;QACvB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,WAAW,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACtG,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAClF,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAmB,CAAC;QACxD,IAAI,CAAC;YACH,2BAA2B;YAC3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,aAAa,kBAAkB,CAAC,EAAE,CAAC,OAAO,EAAE;gBAClF,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;gBACvB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;aAC3F,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YACxE,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA+B,CAAC;YAC9D,OAAO;gBACL,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;gBACzB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;gBACzB,QAAQ,EAAE,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAC/D,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,2CAA2C;YAC3C,IAAI,CAAC;gBAAC,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,aAAa,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAAC,CAAC;YAC1H,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;CACF;AAtCD,oDAsCC;AAWD;;;;;GAKG;AACH,SAAgB,qBAAqB,CACnC,SAAwB,EAAE,EAC1B,eAAsC,GAAG,EAAE,CAAC,IAAI,oBAAoB,EAAE;IAEtE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,OAAO,CAAC;IACpC,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,YAAY,EAAE,CAAC;IAC5C,0EAA0E;IAC1E,6EAA6E;IAC7E,0EAA0E;IAC1E,0EAA0E;IAC1E,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACb,wFAAwF,2BAAmB,KAAK;YAChH,0CAA0C,CAC3C,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,oBAAoB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,YAAY,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;AACzF,CAAC"}

package/dist/tools/publishArtifactTool.d.ts

@@ -0,0 +1,6 @@
+import type { AgentTool } from '@burtson-labs/agent-core';
+export declare function buildPublishArtifactTool(opts: {
+    token: string;
+    s3ApiBaseUrl: string;
+}): AgentTool;
+//# sourceMappingURL=publishArtifactTool.d.ts.map

package/dist/tools/publishArtifactTool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publishArtifactTool.d.ts","sourceRoot":"","sources":["../../src/tools/publishArtifactTool.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,SAAS,EAAoC,MAAM,0BAA0B,CAAC;AAG5F,wBAAgB,wBAAwB,CAAC,IAAI,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAwCjG"}

package/dist/tools/publishArtifactTool.js

@@ -0,0 +1,90 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildPublishArtifactTool = buildPublishArtifactTool;
+/**
+ * `publish_artifact` — let the AGENT publish a workspace file as a shareable
+ * Bandit Artifact during a turn (so "make a README and publish it" works in one
+ * go, instead of the user having to run the /artifact slash command by hand).
+ *
+ * Thin wrapper over publishArtifact (posts straight to S3Api). Cloud-only: the
+ * host only registers this tool when a cloud token is present, so local-only
+ * runs never see it and stay fully offline.
+ */
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const artifacts_1 = require("../artifacts");
+function buildPublishArtifactTool(opts) {
+    return {
+        name: 'publish_artifact',
+        description: 'Publish a file from the workspace as a shareable Bandit Artifact and return a public URL anyone can open. ' +
+            'Use this when the user asks to "publish", "share", or "make an artifact" of a file — write the file first, then call this with its path. Cloud feature.',
+        parameters: [
+            {
+                name: 'path',
+                description: 'Workspace-relative (or absolute) path to the file to publish, e.g. "README.md".',
+                required: true
+            }
+        ],
+        async execute(params, ctx) {
+            const rel = (params.path ?? '').trim();
+            if (!rel)
+                return { output: 'Error: the `path` parameter is required.', isError: true };
+            const root = ctx.workspaceRoot ?? process.cwd();
+            const abs = path.isAbsolute(rel) ? rel : path.join(root, rel);
+            let bytes;
+            try {
+                bytes = await fs.promises.readFile(abs);
+            }
+            catch {
+                return { output: `Error: can't read "${rel}". Write the file first, then publish it.`, isError: true };
+            }
+            try {
+                const artifact = await (0, artifacts_1.publishArtifact)({
+                    s3ApiBaseUrl: opts.s3ApiBaseUrl,
+                    token: opts.token,
+                    content: new Uint8Array(bytes),
+                    filename: path.basename(abs),
+                    contentType: (0, artifacts_1.guessContentType)(path.basename(abs))
+                });
+                return { output: `Published "${path.basename(abs)}" — shareable link: ${artifact.url}` };
+            }
+            catch (err) {
+                return { output: `Error publishing artifact: ${err instanceof Error ? err.message : String(err)}`, isError: true };
+            }
+        }
+    };
+}
+//# sourceMappingURL=publishArtifactTool.js.map

package/dist/tools/publishArtifactTool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publishArtifactTool.js","sourceRoot":"","sources":["../../src/tools/publishArtifactTool.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAcA,4DAwCC;AAtDD;;;;;;;;GAQG;AACH,uCAAyB;AACzB,2CAA6B;AAE7B,4CAAiE;AAEjE,SAAgB,wBAAwB,CAAC,IAA6C;IACpF,OAAO;QACL,IAAI,EAAE,kBAAkB;QACxB,WAAW,EACT,4GAA4G;YAC5G,yJAAyJ;QAC3J,UAAU,EAAE;YACV;gBACE,IAAI,EAAE,MAAM;gBACZ,WAAW,EAAE,iFAAiF;gBAC9F,QAAQ,EAAE,IAAI;aACf;SACF;QACD,KAAK,CAAC,OAAO,CAAC,MAA8B,EAAE,GAAyB;YACrE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACvC,IAAI,CAAC,GAAG;gBAAE,OAAO,EAAE,MAAM,EAAE,0CAA0C,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAEvF,MAAM,IAAI,GAAI,GAAyD,CAAC,aAAa,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YACvG,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC9D,IAAI,KAAa,CAAC;YAClB,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,MAAM,EAAE,sBAAsB,GAAG,2CAA2C,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACzG,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAA,2BAAe,EAAC;oBACrC,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,OAAO,EAAE,IAAI,UAAU,CAAC,KAAK,CAAC;oBAC9B,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAC5B,WAAW,EAAE,IAAA,4BAAgB,EAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;iBAClD,CAAC,CAAC;gBACH,OAAO,EAAE,MAAM,EAAE,cAAc,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,uBAAuB,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC;YAC3F,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,EAAE,MAAM,EAAE,8BAA8B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACrH,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@burtson-labs/host-kit",
-  "version": "0.4.32",
+  "version": "0.4.34",
   "author": {
     "name": "Burtson Labs",
     "email": "team@burtson.ai",
@@ -22,7 +22,7 @@
     "dist"
   ],
   "dependencies": {
-    "@burtson-labs/agent-core": "1.6.49"
+    "@burtson-labs/agent-core": "1.6.51"
   },
   "devDependencies": {
     "@types/node": "^20.11.0",