@companyhelm/runner 0.2.0 → 0.4.0

package/dist/service/thread_runtime.js

@@ -1,15 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ensureThreadRuntimeReady = ensureThreadRuntimeReady;
-const thread_lifecycle_js_1 = require("./thread_lifecycle.js");
-async function ensureThreadRuntimeReady(options) {
-    const containerService = options.containerService ?? new thread_lifecycle_js_1.ThreadContainerService();
-    if (typeof options.dindContainer === "string" && options.dindContainer.trim().length > 0) {
-        await containerService.ensureContainerRunning(options.dindContainer);
-    }
-    await containerService.ensureContainerRunning(options.runtimeContainer);
-    await containerService.ensureRuntimeContainerIdentity(options.runtimeContainer, options.user);
-    await containerService.ensureRuntimeContainerBashrc(options.runtimeContainer, options.user);
-    await containerService.ensureRuntimeContainerGitConfig(options.runtimeContainer, options.user, options.gitUserName, options.gitUserEmail);
-    await containerService.ensureRuntimeContainerTooling(options.runtimeContainer, options.user);
-}

package/dist/service/thread_turn_state.js

@@ -1,47 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.loadThreadMessageExecutionState = loadThreadMessageExecutionState;
-exports.updateThreadTurnState = updateThreadTurnState;
-const drizzle_orm_1 = require("drizzle-orm");
-const db_js_1 = require("../state/db.js");
-const schema_js_1 = require("../state/schema.js");
-async function loadThreadMessageExecutionState(stateDbPath, threadId) {
-    const { db, client } = await (0, db_js_1.initDb)(stateDbPath);
-    try {
-        return await db
-            .select({
-            id: schema_js_1.threads.id,
-            workspace: schema_js_1.threads.workspace,
-            cliSecret: schema_js_1.threads.cliSecret,
-            sdkThreadId: schema_js_1.threads.sdkThreadId,
-            model: schema_js_1.threads.model,
-            reasoningLevel: schema_js_1.threads.reasoningLevel,
-            additionalModelInstructions: schema_js_1.threads.additionalModelInstructions,
-            currentSdkTurnId: schema_js_1.threads.currentSdkTurnId,
-            isCurrentTurnRunning: schema_js_1.threads.isCurrentTurnRunning,
-            runtimeContainer: schema_js_1.threads.runtimeContainer,
-            dindContainer: schema_js_1.threads.dindContainer,
-            homeDirectory: schema_js_1.threads.homeDirectory,
-            uid: schema_js_1.threads.uid,
-            gid: schema_js_1.threads.gid,
-        })
-            .from(schema_js_1.threads)
-            .where((0, drizzle_orm_1.eq)(schema_js_1.threads.id, threadId))
-            .get();
-    }
-    finally {
-        client.close();
-    }
-}
-async function updateThreadTurnState(stateDbPath, threadId, update) {
-    const { db, client } = await (0, db_js_1.initDb)(stateDbPath);
-    try {
-        await db
-            .update(schema_js_1.threads)
-            .set(update)
-            .where((0, drizzle_orm_1.eq)(schema_js_1.threads.id, threadId));
-    }
-    finally {
-        client.close();
-    }
-}

package/dist/service/thread_user_message_request_store.js

@@ -1,136 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.enqueuePendingUserMessageRequestIdForTurn = enqueuePendingUserMessageRequestIdForTurn;
-exports.removePendingUserMessageRequestIdForTurn = removePendingUserMessageRequestIdForTurn;
-exports.assignPendingUserMessageRequestIdForItem = assignPendingUserMessageRequestIdForItem;
-exports.consumePendingUserMessageRequestIdForItem = consumePendingUserMessageRequestIdForItem;
-exports.clearPendingUserMessageRequestIdsForTurn = clearPendingUserMessageRequestIdsForTurn;
-const drizzle_orm_1 = require("drizzle-orm");
-const db_js_1 = require("../state/db.js");
-const schema_js_1 = require("../state/schema.js");
-async function enqueuePendingUserMessageRequestIdForTurn(stateDbPath, threadId, sdkTurnId, requestId) {
-    if (!requestId) {
-        return;
-    }
-    const { db, client } = await (0, db_js_1.initDb)(stateDbPath);
-    try {
-        await db.insert(schema_js_1.threadUserMessageRequestStore).values({
-            threadId,
-            sdkTurnId,
-            requestId,
-            sdkItemId: null,
-        });
-    }
-    finally {
-        client.close();
-    }
-}
-async function removePendingUserMessageRequestIdForTurn(stateDbPath, threadId, sdkTurnId, requestId) {
-    if (!requestId) {
-        return;
-    }
-    const { db, client } = await (0, db_js_1.initDb)(stateDbPath);
-    try {
-        await db
-            .delete(schema_js_1.threadUserMessageRequestStore)
-            .where((0, drizzle_orm_1.and)((0, drizzle_orm_1.eq)(schema_js_1.threadUserMessageRequestStore.threadId, threadId), (0, drizzle_orm_1.eq)(schema_js_1.threadUserMessageRequestStore.sdkTurnId, sdkTurnId), (0, drizzle_orm_1.eq)(schema_js_1.threadUserMessageRequestStore.requestId, requestId)));
-    }
-    finally {
-        client.close();
-    }
-}
-async function assignPendingUserMessageRequestIdForItem(stateDbPath, threadId, sdkTurnId, sdkItemId) {
-    const { db, client } = await (0, db_js_1.initDb)(stateDbPath);
-    try {
-        const [existingByItem] = await db
-            .select({
-            requestId: schema_js_1.threadUserMessageRequestStore.requestId,
-        })
-            .from(schema_js_1.threadUserMessageRequestStore)
-            .where((0, drizzle_orm_1.and)((0, drizzle_orm_1.eq)(schema_js_1.threadUserMessageRequestStore.threadId, threadId), (0, drizzle_orm_1.eq)(schema_js_1.threadUserMessageRequestStore.sdkTurnId, sdkTurnId), (0, drizzle_orm_1.eq)(schema_js_1.threadUserMessageRequestStore.sdkItemId, sdkItemId)))
-            .limit(1);
-        if (existingByItem) {
-            return existingByItem.requestId;
-        }
-        const [nextPending] = await db
-            .select({
-            id: schema_js_1.threadUserMessageRequestStore.id,
-            requestId: schema_js_1.threadUserMessageRequestStore.requestId,
-        })
-            .from(schema_js_1.threadUserMessageRequestStore)
-            .where((0, drizzle_orm_1.and)((0, drizzle_orm_1.eq)(schema_js_1.threadUserMessageRequestStore.threadId, threadId), (0, drizzle_orm_1.eq)(schema_js_1.threadUserMessageRequestStore.sdkTurnId, sdkTurnId), (0, drizzle_orm_1.isNull)(schema_js_1.threadUserMessageRequestStore.sdkItemId)))
-            .orderBy((0, drizzle_orm_1.asc)(schema_js_1.threadUserMessageRequestStore.id))
-            .limit(1);
-        if (!nextPending) {
-            return undefined;
-        }
-        const [assigned] = await db
-            .update(schema_js_1.threadUserMessageRequestStore)
-            .set({
-            sdkItemId,
-        })
-            .where((0, drizzle_orm_1.and)((0, drizzle_orm_1.eq)(schema_js_1.threadUserMessageRequestStore.id, nextPending.id), (0, drizzle_orm_1.isNull)(schema_js_1.threadUserMessageRequestStore.sdkItemId)))
-            .returning({
-            requestId: schema_js_1.threadUserMessageRequestStore.requestId,
-        });
-        if (assigned) {
-            return assigned.requestId;
-        }
-        const [racedAssignment] = await db
-            .select({
-            requestId: schema_js_1.threadUserMessageRequestStore.requestId,
-        })
-            .from(schema_js_1.threadUserMessageRequestStore)
-            .where((0, drizzle_orm_1.and)((0, drizzle_orm_1.eq)(schema_js_1.threadUserMessageRequestStore.threadId, threadId), (0, drizzle_orm_1.eq)(schema_js_1.threadUserMessageRequestStore.sdkTurnId, sdkTurnId), (0, drizzle_orm_1.eq)(schema_js_1.threadUserMessageRequestStore.sdkItemId, sdkItemId)))
-            .limit(1);
-        return racedAssignment?.requestId;
-    }
-    finally {
-        client.close();
-    }
-}
-async function consumePendingUserMessageRequestIdForItem(stateDbPath, threadId, sdkTurnId, sdkItemId) {
-    const { db, client } = await (0, db_js_1.initDb)(stateDbPath);
-    try {
-        const [existingByItem] = await db
-            .select({
-            id: schema_js_1.threadUserMessageRequestStore.id,
-            requestId: schema_js_1.threadUserMessageRequestStore.requestId,
-        })
-            .from(schema_js_1.threadUserMessageRequestStore)
-            .where((0, drizzle_orm_1.and)((0, drizzle_orm_1.eq)(schema_js_1.threadUserMessageRequestStore.threadId, threadId), (0, drizzle_orm_1.eq)(schema_js_1.threadUserMessageRequestStore.sdkTurnId, sdkTurnId), (0, drizzle_orm_1.eq)(schema_js_1.threadUserMessageRequestStore.sdkItemId, sdkItemId)))
-            .limit(1);
-        if (existingByItem) {
-            await db.delete(schema_js_1.threadUserMessageRequestStore).where((0, drizzle_orm_1.eq)(schema_js_1.threadUserMessageRequestStore.id, existingByItem.id));
-            return existingByItem.requestId;
-        }
-        const [nextPending] = await db
-            .select({
-            id: schema_js_1.threadUserMessageRequestStore.id,
-            requestId: schema_js_1.threadUserMessageRequestStore.requestId,
-        })
-            .from(schema_js_1.threadUserMessageRequestStore)
-            .where((0, drizzle_orm_1.and)((0, drizzle_orm_1.eq)(schema_js_1.threadUserMessageRequestStore.threadId, threadId), (0, drizzle_orm_1.eq)(schema_js_1.threadUserMessageRequestStore.sdkTurnId, sdkTurnId), (0, drizzle_orm_1.isNull)(schema_js_1.threadUserMessageRequestStore.sdkItemId)))
-            .orderBy((0, drizzle_orm_1.asc)(schema_js_1.threadUserMessageRequestStore.id))
-            .limit(1);
-        if (!nextPending) {
-            return undefined;
-        }
-        await db.delete(schema_js_1.threadUserMessageRequestStore).where((0, drizzle_orm_1.eq)(schema_js_1.threadUserMessageRequestStore.id, nextPending.id));
-        return nextPending.requestId;
-    }
-    finally {
-        client.close();
-    }
-}
-async function clearPendingUserMessageRequestIdsForTurn(stateDbPath, threadId, sdkTurnId) {
-    const { db, client } = await (0, db_js_1.initDb)(stateDbPath);
-    try {
-        await db
-            .delete(schema_js_1.threadUserMessageRequestStore)
-            .where((0, drizzle_orm_1.and)((0, drizzle_orm_1.eq)(schema_js_1.threadUserMessageRequestStore.threadId, threadId), (0, drizzle_orm_1.eq)(schema_js_1.threadUserMessageRequestStore.sdkTurnId, sdkTurnId)));
-    }
-    finally {
-        client.close();
-    }
-}

package/dist/state/daemon_state.js

@@ -1,83 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.RUNNER_DAEMON_STATE_ID = void 0;
-exports.readCurrentDaemonState = readCurrentDaemonState;
-exports.claimCurrentDaemonState = claimCurrentDaemonState;
-exports.clearCurrentDaemonState = clearCurrentDaemonState;
-const drizzle_orm_1 = require("drizzle-orm");
-const db_js_1 = require("./db.js");
-const schema_js_1 = require("./schema.js");
-const process_js_1 = require("../utils/process.js");
-exports.RUNNER_DAEMON_STATE_ID = "runner";
-async function readCurrentDaemonState(stateDbPath) {
-    const { db, client } = await (0, db_js_1.initDb)(stateDbPath);
-    try {
-        const existing = await db.select().from(schema_js_1.daemonState).where((0, drizzle_orm_1.eq)(schema_js_1.daemonState.id, exports.RUNNER_DAEMON_STATE_ID)).all();
-        const row = existing[0];
-        if (!row) {
-            return null;
-        }
-        return {
-            id: row.id,
-            pid: row.pid ?? null,
-            logPath: row.logPath ?? null,
-            startedAt: row.startedAt,
-            updatedAt: row.updatedAt,
-        };
-    }
-    finally {
-        client.close();
-    }
-}
-async function claimCurrentDaemonState(stateDbPath, pid, logPath) {
-    const now = new Date().toISOString();
-    const { client } = await (0, db_js_1.initDb)(stateDbPath);
-    try {
-        await client.execute("BEGIN IMMEDIATE");
-        try {
-            const existing = await client.execute({
-                sql: "SELECT pid FROM daemon_state WHERE id = ?",
-                args: [exports.RUNNER_DAEMON_STATE_ID],
-            });
-            const row = existing.rows[0];
-            const currentPid = typeof row?.pid === "number" ? row.pid : row?.pid == null ? null : Number(row.pid);
-            if (currentPid && currentPid !== pid && (0, process_js_1.isProcessRunning)(currentPid)) {
-                throw new Error(`Another companyhelm daemon is already running with pid ${currentPid}.`);
-            }
-            await client.execute({
-                sql: "INSERT INTO daemon_state (id, pid, log_path, started_at, updated_at) VALUES (?, ?, ?, ?, ?) " +
-                    "ON CONFLICT(id) DO UPDATE SET pid = excluded.pid, log_path = excluded.log_path, started_at = excluded.started_at, updated_at = excluded.updated_at",
-                args: [exports.RUNNER_DAEMON_STATE_ID, pid, logPath, now, now],
-            });
-            await client.execute("COMMIT");
-        }
-        catch (error) {
-            await client.execute("ROLLBACK");
-            throw error;
-        }
-    }
-    finally {
-        client.close();
-    }
-}
-async function clearCurrentDaemonState(stateDbPath, pid) {
-    const now = new Date().toISOString();
-    const { db, client } = await (0, db_js_1.initDb)(stateDbPath);
-    try {
-        const existing = await db.select().from(schema_js_1.daemonState).where((0, drizzle_orm_1.eq)(schema_js_1.daemonState.id, exports.RUNNER_DAEMON_STATE_ID)).all();
-        const current = existing[0];
-        if (!current || current.pid !== pid) {
-            return;
-        }
-        await db
-            .update(schema_js_1.daemonState)
-            .set({
-            pid: null,
-            updatedAt: now,
-        })
-            .where((0, drizzle_orm_1.eq)(schema_js_1.daemonState.id, exports.RUNNER_DAEMON_STATE_ID));
-    }
-    finally {
-        client.close();
-    }
-}

package/dist/state/db.js

@@ -1,63 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.initDb = initDb;
-const client_1 = require("@libsql/client");
-const libsql_1 = require("drizzle-orm/libsql");
-const migrator_1 = require("drizzle-orm/libsql/migrator");
-const node_fs_1 = require("node:fs");
-const node_path_1 = require("node:path");
-const node_path_2 = require("node:path");
-const schema = __importStar(require("./schema.js"));
-const path_js_1 = require("../utils/path.js");
-async function reconcileLegacyThreadsSchema(client) {
-    const pragmaResult = await client.execute("PRAGMA table_info('threads')");
-    const columnNames = new Set(pragmaResult.rows.map((row) => String(row.name ?? "")));
-    if (columnNames.has("sdk_id") && !columnNames.has("sdk_thread_id")) {
-        await client.execute("ALTER TABLE threads RENAME COLUMN sdk_id TO sdk_thread_id");
-    }
-}
-async function initDb(stateDbPath) {
-    const resolved = (0, path_js_1.expandHome)(stateDbPath);
-    const dir = (0, node_path_1.dirname)(resolved);
-    if (!(0, node_fs_1.existsSync)(dir)) {
-        (0, node_fs_1.mkdirSync)(dir, { recursive: true });
-    }
-    const client = (0, client_1.createClient)({ url: `file:${resolved}` });
-    const db = (0, libsql_1.drizzle)(client, { schema });
-    await (0, migrator_1.migrate)(db, { migrationsFolder: (0, node_path_2.join)(__dirname, "..", "..", "drizzle") });
-    await reconcileLegacyThreadsSchema(client);
-    return { db, client };
-}

package/dist/state/schema.js

@@ -1,60 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.daemonState = exports.threadUserMessageRequestStore = exports.threads = exports.llmModels = exports.agentSdks = void 0;
-const sqlite_core_1 = require("drizzle-orm/sqlite-core");
-// ── agent_sdks ──────────────────────────────────────────────────────────────
-exports.agentSdks = (0, sqlite_core_1.sqliteTable)("agent_sdks", {
-    name: (0, sqlite_core_1.text)("name").primaryKey(),
-    authentication: (0, sqlite_core_1.text)("authentication", {
-        enum: ["unauthenticated", "host", "dedicated", "api-key"],
-    }).notNull(),
-    status: (0, sqlite_core_1.text)("status", { enum: ["unconfigured", "configured"] }).notNull(),
-});
-// ── llm_models ──────────────────────────────────────────────────────────────
-exports.llmModels = (0, sqlite_core_1.sqliteTable)("llm_models", {
-    name: (0, sqlite_core_1.text)("name").primaryKey(),
-    sdkName: (0, sqlite_core_1.text)("sdk_name")
-        .notNull()
-        .references(() => exports.agentSdks.name, { onDelete: "cascade" }),
-    reasoningLevels: (0, sqlite_core_1.text)("reasoning_levels", { mode: "json" })
-        .$type(),
-});
-// -- threads ──────────────────────────────────────────────────────────────────
-exports.threads = (0, sqlite_core_1.sqliteTable)("threads", {
-    id: (0, sqlite_core_1.text)("id").primaryKey(),
-    sdkThreadId: (0, sqlite_core_1.text)("sdk_thread_id"),
-    cliSecret: (0, sqlite_core_1.text)("cli_secret"),
-    model: (0, sqlite_core_1.text)("model").notNull(),
-    reasoningLevel: (0, sqlite_core_1.text)("reasoning_level").notNull(),
-    additionalModelInstructions: (0, sqlite_core_1.text)("additional_model_instructions"),
-    status: (0, sqlite_core_1.text)("status", { enum: ["pending", "ready", "deleting"] }).notNull(),
-    currentSdkTurnId: (0, sqlite_core_1.text)("current_sdk_turn_id"),
-    isCurrentTurnRunning: (0, sqlite_core_1.integer)("is_current_turn_running", { mode: "boolean" }).notNull(),
-    workspace: (0, sqlite_core_1.text)("workspace").notNull(),
-    runtimeContainer: (0, sqlite_core_1.text)("runtime_container").notNull(),
-    dindContainer: (0, sqlite_core_1.text)("dind_container"),
-    // home directory within the container
-    homeDirectory: (0, sqlite_core_1.text)("home_directory").notNull(),
-    // uid of the user within the container
-    uid: (0, sqlite_core_1.integer)("uid").notNull(),
-    // gid of the user within the container
-    gid: (0, sqlite_core_1.integer)("gid").notNull(),
-});
-// -- thread_user_message_request_store ----------------------------------------
-exports.threadUserMessageRequestStore = (0, sqlite_core_1.sqliteTable)("thread_user_message_request_store", {
-    id: (0, sqlite_core_1.integer)("id").primaryKey({ autoIncrement: true }),
-    threadId: (0, sqlite_core_1.text)("thread_id")
-        .notNull()
-        .references(() => exports.threads.id, { onDelete: "cascade" }),
-    sdkTurnId: (0, sqlite_core_1.text)("sdk_turn_id").notNull(),
-    requestId: (0, sqlite_core_1.text)("request_id").notNull(),
-    sdkItemId: (0, sqlite_core_1.text)("sdk_item_id"),
-});
-// -- daemon_state ------------------------------------------------------------
-exports.daemonState = (0, sqlite_core_1.sqliteTable)("daemon_state", {
-    id: (0, sqlite_core_1.text)("id").primaryKey(),
-    pid: (0, sqlite_core_1.integer)("pid"),
-    logPath: (0, sqlite_core_1.text)("log_path"),
-    startedAt: (0, sqlite_core_1.text)("started_at").notNull(),
-    updatedAt: (0, sqlite_core_1.text)("updated_at").notNull(),
-});

package/dist/templates/app_server_bootstrap.sh.j2

@@ -1,52 +0,0 @@
-set -euo pipefail
-
-AGENT_USER={{ agent_user }}
-AGENT_HOME={{ agent_home }}
-AGENT_UID={{ agent_uid }}
-AGENT_GID={{ agent_gid }}
-CODEX_AUTH_PATH={{ codex_auth_path }}
-APP_SERVER_COMMAND={{ app_server_command }}
-EXISTING_UID_USER=""
-
-if getent passwd "$AGENT_UID" >/dev/null 2>&1; then
-  EXISTING_UID_USER="$(getent passwd "$AGENT_UID" | cut -d: -f1)"
-  AGENT_USER="$EXISTING_UID_USER"
-fi
-
-AGENT_GROUP="$AGENT_USER"
-if getent group "$AGENT_GID" >/dev/null 2>&1; then
-  AGENT_GROUP="$(getent group "$AGENT_GID" | cut -d: -f1)"
-elif getent group "$AGENT_USER" >/dev/null 2>&1; then
-  groupmod -g "$AGENT_GID" "$AGENT_USER"
-  AGENT_GROUP="$AGENT_USER"
-else
-  groupadd -g "$AGENT_GID" "$AGENT_USER"
-  AGENT_GROUP="$AGENT_USER"
-fi
-
-if id -u "$AGENT_USER" >/dev/null 2>&1; then
-  usermod -u "$AGENT_UID" -g "$AGENT_GROUP" -d "$AGENT_HOME" -s /bin/bash "$AGENT_USER" || true
-else
-  useradd -m -d "$AGENT_HOME" -u "$AGENT_UID" -g "$AGENT_GROUP" -s /bin/bash "$AGENT_USER"
-fi
-
-SUDOERS_FILE="/etc/sudoers.d/90-companyhelm-agent"
-if command -v sudo >/dev/null 2>&1; then
-  install -d -m 0750 /etc/sudoers.d
-  printf '%s\n' "$AGENT_USER ALL=(ALL) NOPASSWD:ALL" > "$SUDOERS_FILE"
-  chmod 0440 "$SUDOERS_FILE"
-  if command -v visudo >/dev/null 2>&1; then
-    visudo -cf "$SUDOERS_FILE" >/dev/null
-  fi
-fi
-
-mkdir -p "$AGENT_HOME"
-chown "$AGENT_UID:$AGENT_GID" "$AGENT_HOME" || true
-
-if [ -n "${CODEX_AUTH_PATH:-}" ]; then
-  mkdir -p "$(dirname "$CODEX_AUTH_PATH")"
-  chown -R "$AGENT_UID:$AGENT_GID" "$(dirname "$CODEX_AUTH_PATH")" || true
-fi
-
-export HOME="$AGENT_HOME"
-exec sudo -n -E -H -u "$AGENT_USER" bash -lc "$APP_SERVER_COMMAND"

package/dist/templates/provisioning/runtime_agent_metadata.sh.j2

@@ -1,8 +0,0 @@
-set -euo pipefail
-AGENT_HOME={{agent_home}}
-METADATA_ROOT={{metadata_root}}
-
-install -d -m 0755 "$AGENT_HOME/.companyhelm"
-install -d -m 0755 "$METADATA_ROOT"
-
-{{file_blocks}}

package/dist/templates/provisioning/runtime_bashrc.sh.j2

@@ -1,7 +0,0 @@
-set -euo pipefail
-AGENT_HOME={{agent_home}}
-BASHRC_CONTENT={{bashrc_content}}
-
-install -d -m 0755 "$AGENT_HOME"
-printf '%s' "$BASHRC_CONTENT" > "$AGENT_HOME/.bashrc"
-chmod 0644 "$AGENT_HOME/.bashrc"

package/dist/templates/provisioning/runtime_codex_config.sh.j2

@@ -1,7 +0,0 @@
-set -euo pipefail
-AGENT_HOME={{agent_home}}
-CONFIG_CONTENT={{config_content}}
-
-install -d -m 0755 "$AGENT_HOME/.codex"
-printf '%s' "$CONFIG_CONTENT" > "$AGENT_HOME/.codex/config.toml"
-chmod 0644 "$AGENT_HOME/.codex/config.toml"

package/dist/templates/provisioning/runtime_git_config.sh.j2

@@ -1,28 +0,0 @@
-set -euo pipefail
-DEFAULT_GIT_USER_NAME={{default_git_user_name}}
-DEFAULT_GIT_USER_EMAIL={{default_git_user_email}}
-
-if ! command -v git >/dev/null 2>&1; then
-  exit 0
-fi
-
-if ! git config --global --get user.name >/dev/null 2>&1; then
-  git config --global user.name "$DEFAULT_GIT_USER_NAME"
-fi
-if ! git config --global --get user.email >/dev/null 2>&1; then
-  git config --global user.email "$DEFAULT_GIT_USER_EMAIL"
-fi
-
-if [ ! -d /workspace ]; then
-  exit 0
-fi
-
-while IFS= read -r -d '' git_dir; do
-  repo_root="$(dirname "$git_dir")"
-  if ! git -C "$repo_root" config --local --get user.name >/dev/null 2>&1; then
-    git -C "$repo_root" config --local user.name "$DEFAULT_GIT_USER_NAME"
-  fi
-  if ! git -C "$repo_root" config --local --get user.email >/dev/null 2>&1; then
-    git -C "$repo_root" config --local user.email "$DEFAULT_GIT_USER_EMAIL"
-  fi
-done < <(find /workspace -type d -name .git -print0 2>/dev/null || true)

package/dist/templates/provisioning/runtime_identity.sh.j2

@@ -1,65 +0,0 @@
-set -euo pipefail
-AGENT_USER={{agent_user}}
-AGENT_HOME={{agent_home}}
-AGENT_UID={{agent_uid}}
-AGENT_GID={{agent_gid}}
-
-AGENT_GROUP="$AGENT_USER"
-EXISTING_GID_GROUP="$(getent group "$AGENT_GID" | cut -d: -f1 || true)"
-if [ -n "$EXISTING_GID_GROUP" ] && [ "$EXISTING_GID_GROUP" != "$AGENT_USER" ] && ! getent group "$AGENT_USER" >/dev/null 2>&1; then
-  groupmod -n "$AGENT_USER" "$EXISTING_GID_GROUP"
-fi
-if getent group "$AGENT_USER" >/dev/null 2>&1; then
-  if [ "$(getent group "$AGENT_USER" | cut -d: -f3)" != "$AGENT_GID" ]; then
-    groupmod -g "$AGENT_GID" "$AGENT_USER"
-  fi
-else
-  groupadd -g "$AGENT_GID" "$AGENT_USER"
-fi
-
-EXISTING_UID_USER="$(getent passwd "$AGENT_UID" | cut -d: -f1 || true)"
-if [ -n "$EXISTING_UID_USER" ] && [ "$EXISTING_UID_USER" != "$AGENT_USER" ] && ! id -u "$AGENT_USER" >/dev/null 2>&1; then
-  usermod -l "$AGENT_USER" -d "$AGENT_HOME" -g "$AGENT_GROUP" -s /bin/bash "$EXISTING_UID_USER"
-elif id -u "$AGENT_USER" >/dev/null 2>&1; then
-  usermod -u "$AGENT_UID" -g "$AGENT_GROUP" -d "$AGENT_HOME" -s /bin/bash "$AGENT_USER"
-else
-  useradd -m -d "$AGENT_HOME" -u "$AGENT_UID" -g "$AGENT_GROUP" -s /bin/bash "$AGENT_USER"
-fi
-
-install -d -m 0755 -o "$AGENT_UID" -g "$AGENT_GID" "$AGENT_HOME"
-
-SUDOERS_FILE="/etc/sudoers.d/90-companyhelm-agent"
-if command -v sudo >/dev/null 2>&1; then
-  install -d -m 0750 /etc/sudoers.d
-  printf '%s\n' "$AGENT_USER ALL=(ALL) NOPASSWD:ALL" > "$SUDOERS_FILE"
-  chmod 0440 "$SUDOERS_FILE"
-  if command -v visudo >/dev/null 2>&1; then
-    visudo -cf "$SUDOERS_FILE" >/dev/null
-  fi
-fi
-
-install -d -m 0755 -o "$AGENT_UID" -g "$AGENT_GID" "$AGENT_HOME/.codex"
-install -d -m 0755 -o "$AGENT_UID" -g "$AGENT_GID" "$AGENT_HOME/.cache"
-if [ -e "$AGENT_HOME/.codex/auth.json" ]; then
-  chown "$AGENT_UID:$AGENT_GID" "$AGENT_HOME/.codex/auth.json" || true
-fi
-
-PLAYWRIGHT_SHARED_CACHE="/ms-playwright"
-PLAYWRIGHT_DEFAULT_CACHE="$AGENT_HOME/.cache/ms-playwright"
-install -d -m 0755 "$PLAYWRIGHT_SHARED_CACHE"
-if [ "$(stat -c '%u:%g' "$PLAYWRIGHT_SHARED_CACHE" 2>/dev/null || true)" != "$AGENT_UID:$AGENT_GID" ]; then
-  chown -R "$AGENT_UID:$AGENT_GID" "$PLAYWRIGHT_SHARED_CACHE" || true
-fi
-if [ -L "$PLAYWRIGHT_DEFAULT_CACHE" ]; then
-  if [ "$(readlink "$PLAYWRIGHT_DEFAULT_CACHE" 2>/dev/null || true)" != "$PLAYWRIGHT_SHARED_CACHE" ]; then
-    rm -f "$PLAYWRIGHT_DEFAULT_CACHE"
-    ln -s "$PLAYWRIGHT_SHARED_CACHE" "$PLAYWRIGHT_DEFAULT_CACHE"
-  fi
-elif [ ! -e "$PLAYWRIGHT_DEFAULT_CACHE" ]; then
-  ln -s "$PLAYWRIGHT_SHARED_CACHE" "$PLAYWRIGHT_DEFAULT_CACHE"
-else
-  chown -R "$AGENT_UID:$AGENT_GID" "$PLAYWRIGHT_DEFAULT_CACHE" || true
-fi
-install -d -m 0755 -o "$AGENT_UID" -g "$AGENT_GID" "$AGENT_HOME/.companyhelm"
-install -d -m 0755 -o "$AGENT_UID" -g "$AGENT_GID" "$AGENT_HOME/.companyhelm/agent"
-chown -R "$AGENT_UID:$AGENT_GID" "$AGENT_HOME" || true

package/dist/templates/provisioning/runtime_thread_git_skills_clone.sh.j2

@@ -1,11 +0,0 @@
-set -euo pipefail
-SKILLS_ROOT={{skills_root}}
-
-install -d -m 0755 "$SKILLS_ROOT"
-
-if ! command -v git >/dev/null 2>&1; then
-  echo "git is not available in the runtime container." >&2
-  exit 1
-fi
-
-{{package_blocks}}

package/dist/templates/provisioning/runtime_thread_git_skills_link.sh.j2

@@ -1,7 +0,0 @@
-set -euo pipefail
-SKILLS_ROOT={{skills_root}}
-CODEX_SKILLS_ROOT={{codex_skills_root}}
-
-install -d -m 0755 "$CODEX_SKILLS_ROOT"
-
-{{skill_blocks}}

package/dist/templates/provisioning/runtime_tooling_validation.sh.j2

@@ -1,32 +0,0 @@
-{{bootstrap}}
-
-if ! command -v aws >/dev/null 2>&1; then
-  echo "aws CLI is not available in runtime PATH." >&2
-  echo "Fix: install awscli in the runtime image." >&2
-  exit 1
-fi
-
-if ! command -v playwright >/dev/null 2>&1; then
-  echo "playwright CLI is not available after sourcing nvm." >&2
-  echo "Fix: install playwright in the runtime image (for example: npm install --global playwright)." >&2
-  exit 1
-fi
-
-PLAYWRIGHT_CACHE_DIR="${PLAYWRIGHT_BROWSERS_PATH:-$HOME/.cache/ms-playwright}"
-if [ ! -d "$PLAYWRIGHT_CACHE_DIR" ]; then
-  echo "Playwright browser cache directory is missing: $PLAYWRIGHT_CACHE_DIR" >&2
-  echo "Fix: set PLAYWRIGHT_BROWSERS_PATH and run npx playwright install chromium during runtime image build." >&2
-  exit 1
-fi
-
-CHROMIUM_BIN="$(find "$PLAYWRIGHT_CACHE_DIR" -type f -path "*/chrome-linux/chrome" -print -quit 2>/dev/null || true)"
-if [ -z "$CHROMIUM_BIN" ]; then
-  echo "Playwright chromium binary is missing under $PLAYWRIGHT_CACHE_DIR." >&2
-  echo "Fix: run npx playwright install chromium while building the runtime image." >&2
-  exit 1
-fi
-
-if [ ! -x "$CHROMIUM_BIN" ]; then
-  echo "Playwright chromium binary exists but is not executable: $CHROMIUM_BIN" >&2
-  exit 1
-fi

package/dist/templates/runtime_bashrc.j2

@@ -1,19 +0,0 @@
-# CompanyHelm runtime shell initialization.
-# This file is generated by companyhelm-runner when a thread runtime starts.
-
-if [ -z "${NVM_DIR:-}" ] || [ ! -s "$NVM_DIR/nvm.sh" ]; then
-  for candidate in "/usr/local/nvm" "$HOME/.nvm" "/opt/nvm" "/root/.nvm"; do
-    if [ -s "$candidate/nvm.sh" ]; then
-      export NVM_DIR="$candidate"
-      break
-    fi
-  done
-fi
-
-if [ -n "${NVM_DIR:-}" ] && [ -s "$NVM_DIR/nvm.sh" ]; then
-  . "$NVM_DIR/nvm.sh"
-  nvm use --silent default >/dev/null 2>&1 || true
-  if [ -s "$NVM_DIR/bash_completion" ]; then
-    . "$NVM_DIR/bash_completion"
-  fi
-fi