@coralai/sps-cli 0.63.5 → 0.65.0

package/dist/openai-agent/sandbox/execution.d.ts

@@ -0,0 +1,36 @@
+import type { Agent, RunState } from '@openai/agents';
+import { type SandboxRunConfig, type SandboxClient } from '@openai/agents/sandbox';
+import type { AgentProcessStartCommandV1, JsonValue } from '../../runtime/index.js';
+import { InteractionBroker } from '../interactions/broker.js';
+import { type ManagedMcpBundle, type ManagedMcpDependencies } from '../mcp/managedMcp.js';
+import type { ProviderCapabilityPlan } from '../providerCapabilities.js';
+import type { InteractionStore } from '../storage/interaction.js';
+import { ToolExecutionLedger } from '../storage/toolLedger.js';
+export interface OpenAISandboxExecution {
+    agent: Agent;
+    sandbox: SandboxRunConfig;
+    tools: string[];
+    mcpServers: string[];
+    features: string[];
+    interactions?: InteractionBroker;
+    serializeWorkspaceState(state: RunState<any, any>): JsonValue;
+    close(): Promise<Array<{
+        code: string;
+        message: string;
+    }>>;
+}
+export interface OpenAISandboxExecutionDependencies {
+    mcp?: ManagedMcpDependencies;
+    mcpBundle?: ManagedMcpBundle;
+    sandboxClient?: SandboxClient;
+    skillsDir?: string;
+    interactions?: InteractionStore;
+    ledger?: ToolExecutionLedger;
+}
+export declare class UnsupportedSandboxProviderError extends Error {
+    readonly code = "workspace_unavailable";
+    constructor(message: string);
+}
+export declare function prepareOpenAISandboxExecution(start: AgentProcessStartCommandV1, providerPlan: ProviderCapabilityPlan, dependencies?: OpenAISandboxExecutionDependencies): Promise<OpenAISandboxExecution>;
+export declare function assertNoEscapingSymlinks(workspaceRoot: string, maximumEntries?: number): Promise<void>;
+//# sourceMappingURL=execution.d.ts.map

package/dist/openai-agent/sandbox/execution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution.d.ts","sourceRoot":"","sources":["../../../src/openai-agent/sandbox/execution.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EASL,KAAK,gBAAgB,EACrB,KAAK,aAAa,EACnB,MAAM,wBAAwB,CAAC;AAKhC,OAAO,KAAK,EACV,0BAA0B,EAC1B,SAAS,EACV,MAAM,wBAAwB,CAAC;AAKhC,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAE9D,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC5B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAM/D,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,KAAK,CAAC;IACb,OAAO,EAAE,gBAAgB,CAAC;IAC1B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,YAAY,CAAC,EAAE,iBAAiB,CAAC;IACjC,uBAAuB,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,SAAS,CAAC;IAC9D,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;CAC5D;AAED,MAAM,WAAW,kCAAkC;IACjD,GAAG,CAAC,EAAE,sBAAsB,CAAC;IAC7B,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,MAAM,CAAC,EAAE,mBAAmB,CAAC;CAC9B;AAED,qBAAa,+BAAgC,SAAQ,KAAK;IACxD,QAAQ,CAAC,IAAI,2BAA2B;gBAE5B,OAAO,EAAE,MAAM;CAI5B;AAED,wBAAsB,6BAA6B,CACjD,KAAK,EAAE,0BAA0B,EACjC,YAAY,EAAE,sBAAsB,EACpC,YAAY,GAAE,kCAAuC,GACpD,OAAO,CAAC,sBAAsB,CAAC,CAmNjC;AAED,wBAAsB,wBAAwB,CAC5C,aAAa,EAAE,MAAM,EACrB,cAAc,SAAU,GACvB,OAAO,CAAC,IAAI,CAAC,CAiCf"}

package/dist/openai-agent/sandbox/execution.js

@@ -0,0 +1,239 @@
+import { cp, lstat, mkdir, readdir, realpath, rm } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { dirname, relative, resolve, sep } from 'node:path';
+import { SandboxAgent, compaction, filesystem, localBindMountStrategy, localDir, mount, shell, skills, } from '@openai/agents/sandbox';
+import { localDirLazySkillSource, UnixLocalSandboxClient, } from '@openai/agents/sandbox/local';
+import { createEchoTool, SPS_ECHO_TOOL_NAME, } from '../agentFactory.js';
+import { InteractionBroker } from '../interactions/broker.js';
+import { buildOpenAIAgentInstructions } from '../instructions.js';
+import { prepareManagedMcp, } from '../mcp/managedMcp.js';
+import { ToolExecutionLedger } from '../storage/toolLedger.js';
+import { configureLedgerTools } from '../tools/ledgerTools.js';
+import { createProductionDockerClient } from './productionDocker.js';
+const TOOL_TIMEOUT_MS = 60_000;
+export class UnsupportedSandboxProviderError extends Error {
+    code = 'workspace_unavailable';
+    constructor(message) {
+        super(message);
+        this.name = 'UnsupportedSandboxProviderError';
+    }
+}
+export async function prepareOpenAISandboxExecution(start, providerPlan, dependencies = {}) {
+    if (start.sandbox.provider !== 'unix_local' &&
+        start.sandbox.provider !== 'docker') {
+        throw new UnsupportedSandboxProviderError(`Sandbox provider ${start.sandbox.provider} is not available in this worker build`);
+    }
+    if (start.sandbox.profile === 'production' &&
+        start.sandbox.provider !== 'docker') {
+        throw new UnsupportedSandboxProviderError('Production sandbox profile requires the Docker provider');
+    }
+    await assertNoEscapingSymlinks(start.cwd);
+    // SPS 技能主目录(`sps setup` 装于此;claude 项目 .claude/skills 也软链到这)——openai 用同一源,
+    // 技能集与 claude 一致。授权只读(extraPathGrants)+ 物化进 sandbox 的 .agents/skills,不越权、不拷进项目。
+    const baseSkillsDir = dependencies.skillsDir ?? resolve(homedir(), '.coral', 'skills');
+    // 卡片 skill 白名单(env SPS_CARD_SKILLS,逗号分隔;来源卡片 frontmatter,经 RuntimeSessionRuntime 透传)。
+    // 给了则只暴露这些技能:在 sessionRoot 下建过滤视图目录(拷允许且存在的技能),skillsDir 指它;否则用全量。
+    const allowedSkills = (process.env.SPS_CARD_SKILLS ?? '')
+        .split(',')
+        .map((s) => s.trim())
+        .filter((s) => /^[A-Za-z0-9_-]+$/.test(s));
+    let skillsDir = baseSkillsDir;
+    if (allowedSkills.length) {
+        const viewDir = resolve(start.sessionRoot, 'skills-view');
+        await rm(viewDir, { recursive: true, force: true });
+        await mkdir(viewDir, { recursive: true });
+        for (const name of allowedSkills) {
+            try {
+                await cp(resolve(baseSkillsDir, name), resolve(viewDir, name), { recursive: true });
+            }
+            catch {
+                /* 技能不存在于主目录 → 跳过 */
+            }
+        }
+        skillsDir = viewDir;
+    }
+    const mcp = dependencies.mcpBundle ??
+        (await prepareManagedMcp(start, dependencies.mcp));
+    const interactionBroker = dependencies.interactions
+        ? new InteractionBroker(start, dependencies.interactions)
+        : undefined;
+    const configureTools = (tools) => configureLedgerTools((interactionBroker?.configureCapabilityTools(tools) ??
+        tools)
+        // codex 不认 hosted apply_patch(400 Unsupported tool type)→ 从能力工具里剔除。
+        .filter((tool) => providerPlan.hostedApplyPatch || tool.type !== 'apply_patch')
+        .map((tool) => tool.type === 'function'
+        ? {
+            ...tool,
+            timeoutMs: TOOL_TIMEOUT_MS,
+            timeoutBehavior: 'raise_exception',
+        }
+        : tool), start, dependencies.ledger ?? new ToolExecutionLedger(start.sessionRoot));
+    const capabilities = [
+        filesystem({ configureTools }),
+        shell({ configureTools }),
+        skills({
+            lazyFrom: localDirLazySkillSource({
+                src: skillsDir,
+                baseDir: dirname(skillsDir),
+            }),
+            skillsPath: '.agents/skills',
+        }),
+        ...(providerPlan.compaction ? [compaction()] : []),
+    ];
+    const manifest = {
+        version: 1,
+        root: '/workspace',
+        entries: {
+            repo: start.sandbox.provider === 'docker'
+                ? localDir({
+                    src: start.cwd,
+                    description: 'SPS-authorized isolated project workspace copy',
+                })
+                : mount({
+                    source: start.cwd,
+                    mountPath: '/workspace/repo',
+                    readOnly: false,
+                    mountStrategy: localBindMountStrategy(),
+                    description: 'SPS-authorized project workspace',
+                }),
+        },
+        extraPathGrants: [
+            {
+                path: skillsDir,
+                readOnly: true,
+                description: 'Read-only SPS skill source',
+            },
+        ],
+    };
+    const agent = new SandboxAgent({
+        name: `sps-openai-agent-v${start.agentBundleVersion}`,
+        model: start.provider.model,
+        baseInstructions: buildOpenAIAgentInstructions(start),
+        instructions: 'Complete the task using the authorized workspace and the tools exposed in this run.',
+        defaultManifest: manifest,
+        capabilities,
+        tools: [
+            ...configureLedgerTools([createEchoTool(), ...mcp.functionTools], start, dependencies.ledger ?? new ToolExecutionLedger(start.sessionRoot)),
+            ...(interactionBroker?.tools() ?? []),
+        ],
+        mcpServers: [],
+        mcpConfig: {
+            convertSchemasToStrict: false,
+            includeServerInToolNames: true,
+            errorFunction: null,
+        },
+    });
+    const workspaceBaseDir = resolve(start.sessionRoot, 'sandbox-workspaces');
+    if (!dependencies.sandboxClient) {
+        await mkdir(workspaceBaseDir, { recursive: true });
+    }
+    const archiveLimits = {
+        maxInputBytes: 64 * 1024 * 1024,
+        maxExtractedBytes: 256 * 1024 * 1024,
+        maxMembers: 100_000,
+    };
+    const client = dependencies.sandboxClient ??
+        (start.sandbox.provider === 'docker'
+            ? createProductionDockerClient({
+                workspaceBaseDir,
+                image: process.env.SPS_OPENAI_SANDBOX_IMAGE ??
+                    'node:22-bookworm-slim',
+                archiveLimits,
+                concurrencyLimits: {
+                    manifestEntries: 1_024,
+                    localDirFiles: 250_000,
+                },
+            }, start.cwd)
+            : new UnixLocalSandboxClient({
+                workspaceBaseDir,
+                archiveLimits,
+                concurrencyLimits: {
+                    manifestEntries: 1_024,
+                    localDirFiles: 250_000,
+                },
+            }));
+    return {
+        agent,
+        sandbox: { client },
+        tools: [
+            SPS_ECHO_TOOL_NAME,
+            ...(interactionBroker
+                ? ['present_choices', 'present_form']
+                : []),
+            'view_image',
+            ...(providerPlan.hostedApplyPatch ? ['apply_patch'] : []),
+            'exec_command',
+            'write_stdin',
+            'load_skill',
+            ...mcp.qualifiedToolNames,
+        ],
+        mcpServers: mcp.serverNames,
+        ...(interactionBroker ? { interactions: interactionBroker } : {}),
+        features: [
+            'streaming',
+            'multi_turn_agent_loop',
+            'cancellation',
+            'usage',
+            'sandbox',
+            'filesystem',
+            'shell',
+            'skills',
+            ...(providerPlan.compaction ? ['compaction'] : []),
+        ],
+        serializeWorkspaceState(state) {
+            return {
+                sandbox: state._sandbox
+                    ? JSON.parse(JSON.stringify(state._sandbox))
+                    : null,
+                manifest: {
+                    root: '/workspace',
+                    entries: ['repo'],
+                    sandboxProvider: start.sandbox.provider,
+                },
+            };
+        },
+        async close() {
+            return (await mcp.close()).map((failure) => ({
+                code: 'mcp_close_failed',
+                message: `${failure.server}: ${failure.error}`,
+            }));
+        },
+    };
+}
+export async function assertNoEscapingSymlinks(workspaceRoot, maximumEntries = 250_000) {
+    const canonicalRoot = await realpath(workspaceRoot);
+    const pending = [canonicalRoot];
+    let visited = 0;
+    while (pending.length > 0) {
+        const directory = pending.pop();
+        for (const entry of await readdir(directory, { withFileTypes: true })) {
+            visited += 1;
+            if (visited > maximumEntries) {
+                throw new UnsupportedSandboxProviderError(`Workspace exceeds the ${maximumEntries} entry security scan limit`);
+            }
+            const candidate = resolve(directory, entry.name);
+            if (entry.isSymbolicLink()) {
+                const target = await realpath(candidate).catch(() => null);
+                if (!target || !isWithin(canonicalRoot, target)) {
+                    throw new UnsupportedSandboxProviderError(`Workspace symlink escapes the authorized root: ${candidate}`);
+                }
+                continue;
+            }
+            // `.claude` 是 SPS/Claude 工具目录(技能软链指向仓外的 SPS 技能库、settings、hooks),
+            // 非 agent 可编辑的项目源;其技能软链天然"越权",但 openai worker 的技能由独立 skills
+            // capability 提供、不靠项目 `.claude/skills`。故把整个 `.claude` 子树排除出越权扫描。
+            if (entry.isDirectory() && entry.name === '.claude')
+                continue;
+            if (entry.isDirectory()) {
+                const stats = await lstat(candidate);
+                if (stats.isDirectory())
+                    pending.push(candidate);
+            }
+        }
+    }
+}
+function isWithin(root, candidate) {
+    const path = relative(root, candidate);
+    return path === '' || (!path.startsWith(`..${sep}`) && path !== '..');
+}
+//# sourceMappingURL=execution.js.map

package/dist/openai-agent/sandbox/execution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution.js","sourceRoot":"","sources":["../../../src/openai-agent/sandbox/execution.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAE5D,OAAO,EACL,YAAY,EACZ,UAAU,EACV,UAAU,EACV,sBAAsB,EACtB,QAAQ,EACR,KAAK,EACL,KAAK,EACL,MAAM,GAGP,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,8BAA8B,CAAC;AAKtC,OAAO,EACL,cAAc,EACd,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EACL,iBAAiB,GAGlB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AAErE,MAAM,eAAe,GAAG,MAAM,CAAC;AAsB/B,MAAM,OAAO,+BAAgC,SAAQ,KAAK;IAC/C,IAAI,GAAG,uBAAuB,CAAC;IAExC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;IAChD,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,KAAiC,EACjC,YAAoC,EACpC,eAAmD,EAAE;IAErD,IACE,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,YAAY;QACvC,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,EACnC,CAAC;QACD,MAAM,IAAI,+BAA+B,CACvC,oBAAoB,KAAK,CAAC,OAAO,CAAC,QAAQ,wCAAwC,CACnF,CAAC;IACJ,CAAC;IACD,IACE,KAAK,CAAC,OAAO,CAAC,OAAO,KAAK,YAAY;QACtC,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,EACnC,CAAC;QACD,MAAM,IAAI,+BAA+B,CACvC,yDAAyD,CAC1D,CAAC;IACJ,CAAC;IACD,MAAM,wBAAwB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAE1C,0EAA0E;IAC1E,gFAAgF;IAChF,MAAM,aAAa,GAAG,YAAY,CAAC,SAAS,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACvF,sFAAsF;IACtF,mEAAmE;IACnE,MAAM,aAAa,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC;SACtD,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,IAAI,SAAS,GAAG,aAAa,CAAC;IAC9B,IAAI,aAAa,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAC1D,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACtF,CAAC;YAAC,MAAM,CAAC;gBACP,oBAAoB;YACtB,CAAC;QACH,CAAC;QACD,SAAS,GAAG,OAAO,CAAC;IACtB,CAAC;IACD,MAAM,GAAG,GACP,YAAY,CAAC,SAAS;QACtB,CAAC,MAAM,iBAAiB,CAAC,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,MAAM,iBAAiB,GAAG,YAAY,CAAC,YAAY;QACjD,CAAC,CAAC,IAAI,iBAAiB,CAAC,KAAK,EAAE,YAAY,CAAC,YAAY,CAAC;QACzD,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,cAAc,GAAG,CAA6B,KAAU,EAAO,EAAE,CACrE,oBAAoB,CAClB,CACA,iBAAiB,EAAE,wBAAwB,CAAC,KAAgB,CAAC;QAC7D,KAAK,CACJ;QACD,oEAAoE;SACnE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,gBAAgB,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC;SAC9E,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACZ,IAAI,CAAC,IAAI,KAAK,UAAU;QACtB,CAAC,CAAE;YACC,GAAG,IAAI;YACP,SAAS,EAAE,eAAe;YAC1B,eAAe,EAAE,iBAAiB;SAC7B;QACT,CAAC,CAAE,IAAU,CACL,EACZ,KAAK,EACL,YAAY,CAAC,MAAM,IAAI,IAAI,mBAAmB,CAAC,KAAK,CAAC,WAAW,CAAC,CAC3D,CAAC;IACX,MAAM,YAAY,GAAG;QACnB,UAAU,CAAC,EAAE,cAAc,EAAE,CAAC;QAC9B,KAAK,CAAC,EAAE,cAAc,EAAE,CAAC;QACzB,MAAM,CAAC;YACL,QAAQ,EAAE,uBAAuB,CAAC;gBAChC,GAAG,EAAE,SAAS;gBACd,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC;aAC5B,CAAC;YACF,UAAU,EAAE,gBAAgB;SAC7B,CAAC;QACF,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,CAAC;IACF,MAAM,QAAQ,GAAG;QACf,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE;YACP,IAAI,EACF,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ;gBACjC,CAAC,CAAC,QAAQ,CAAC;oBACP,GAAG,EAAE,KAAK,CAAC,GAAG;oBACd,WAAW,EAAE,gDAAgD;iBAC9D,CAAC;gBACJ,CAAC,CAAC,KAAK,CAAC;oBACJ,MAAM,EAAE,KAAK,CAAC,GAAG;oBACjB,SAAS,EAAE,iBAAiB;oBAC5B,QAAQ,EAAE,KAAK;oBACf,aAAa,EAAE,sBAAsB,EAAE;oBACvC,WAAW,EAAE,kCAAkC;iBAChD,CAAC;SACT;QACD,eAAe,EAAE;YACf;gBACE,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE,IAAI;gBACd,WAAW,EAAE,4BAA4B;aAC1C;SACF;KACF,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC;QAC7B,IAAI,EAAE,qBAAqB,KAAK,CAAC,kBAAkB,EAAE;QACrD,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK;QAC3B,gBAAgB,EAAE,4BAA4B,CAAC,KAAK,CAAC;QACrD,YAAY,EACV,qFAAqF;QACvF,eAAe,EAAE,QAAQ;QACzB,YAAY;QACZ,KAAK,EAAE;YACL,GAAG,oBAAoB,CACrB,CAAC,cAAc,EAAE,EAAE,GAAG,GAAG,CAAC,aAAa,CAAC,EACxC,KAAK,EACL,YAAY,CAAC,MAAM,IAAI,IAAI,mBAAmB,CAAC,KAAK,CAAC,WAAW,CAAC,CAClE;YACD,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;SACtC;QACD,UAAU,EAAE,EAAE;QACd,SAAS,EAAE;YACT,sBAAsB,EAAE,KAAK;YAC7B,wBAAwB,EAAE,IAAI;YAC9B,aAAa,EAAE,IAAI;SACpB;KACF,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,OAAO,CAC9B,KAAK,CAAC,WAAW,EACjB,oBAAoB,CACrB,CAAC;IACF,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC;QAChC,MAAM,KAAK,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,aAAa,GAAG;QACpB,aAAa,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;QAC/B,iBAAiB,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;QACpC,UAAU,EAAE,OAAO;KACpB,CAAC;IACF,MAAM,MAAM,GACV,YAAY,CAAC,aAAa;QAC1B,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ;YAClC,CAAC,CAAC,4BAA4B,CAAC;gBAC3B,gBAAgB;gBAChB,KAAK,EACH,OAAO,CAAC,GAAG,CAAC,wBAAwB;oBACpC,uBAAuB;gBACzB,aAAa;gBACb,iBAAiB,EAAE;oBACjB,eAAe,EAAE,KAAK;oBACtB,aAAa,EAAE,OAAO;iBACvB;aACF,EAAE,KAAK,CAAC,GAAG,CAAC;YACf,CAAC,CAAC,IAAI,sBAAsB,CAAC;gBACzB,gBAAgB;gBAChB,aAAa;gBACb,iBAAiB,EAAE;oBACjB,eAAe,EAAE,KAAK;oBACtB,aAAa,EAAE,OAAO;iBACvB;aACF,CAAC,CAAC,CAAC;IAEV,OAAO;QACL,KAAK;QACL,OAAO,EAAE,EAAE,MAAM,EAAE;QACnB,KAAK,EAAE;YACL,kBAAkB;YAClB,GAAG,CAAC,iBAAiB;gBACnB,CAAC,CAAC,CAAC,iBAAiB,EAAE,cAAc,CAAC;gBACrC,CAAC,CAAC,EAAE,CAAC;YACP,YAAY;YACZ,GAAG,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,cAAc;YACd,aAAa;YACb,YAAY;YACZ,GAAG,GAAG,CAAC,kBAAkB;SAC1B;QACD,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,QAAQ,EAAE;YACR,WAAW;YACX,uBAAuB;YACvB,cAAc;YACd,OAAO;YACP,SAAS;YACT,YAAY;YACZ,OAAO;YACP,QAAQ;YACR,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACnD;QACD,uBAAuB,CAAC,KAAK;YAC3B,OAAO;gBACL,OAAO,EAAE,KAAK,CAAC,QAAQ;oBACrB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;oBAC5C,CAAC,CAAC,IAAI;gBACR,QAAQ,EAAE;oBACR,IAAI,EAAE,YAAY;oBAClB,OAAO,EAAE,CAAC,MAAM,CAAC;oBACjB,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;iBACxC;aACF,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,KAAK;YACT,OAAO,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBAC3C,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,GAAG,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,KAAK,EAAE;aAC/C,CAAC,CAAC,CAAC;QACN,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,aAAqB,EACrB,cAAc,GAAG,OAAO;IAExB,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,CAAC,aAAa,CAAC,CAAC;IAChC,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAG,CAAC;QACjC,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACtE,OAAO,IAAI,CAAC,CAAC;YACb,IAAI,OAAO,GAAG,cAAc,EAAE,CAAC;gBAC7B,MAAM,IAAI,+BAA+B,CACvC,yBAAyB,cAAc,4BAA4B,CACpE,CAAC;YACJ,CAAC;YACD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC3D,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC;oBAChD,MAAM,IAAI,+BAA+B,CACvC,kDAAkD,SAAS,EAAE,CAC9D,CAAC;gBACJ,CAAC;gBACD,SAAS;YACX,CAAC;YACD,iEAAiE;YACjE,4DAA4D;YAC5D,gEAAgE;YAChE,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;gBAAE,SAAS;YAC9D,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;gBACrC,IAAI,KAAK,CAAC,WAAW,EAAE;oBAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,SAAiB;IAC/C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACvC,OAAO,IAAI,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC;AACxE,CAAC"}

package/dist/openai-agent/sandbox/productionDocker.d.ts

@@ -0,0 +1,17 @@
+import type { SandboxClient } from '@openai/agents/sandbox';
+import { type DockerSandboxClientOptions } from '@openai/agents/sandbox/local';
+export interface ProductionDockerLimits {
+    cpus: number;
+    memoryMb: number;
+    processCount: number;
+    network: 'none';
+}
+export declare const DEFAULT_PRODUCTION_DOCKER_LIMITS: ProductionDockerLimits;
+export type DockerCommandRunner = (args: string[]) => Promise<void>;
+export declare function hardenDockerContainer(containerId: string, limits?: ProductionDockerLimits, run?: DockerCommandRunner): Promise<void>;
+/**
+ * SDK Docker client wrapped with fail-closed host-enforced resource limits.
+ * The session is not returned to the agent until hardening succeeds.
+ */
+export declare function createProductionDockerClient(options: DockerSandboxClientOptions, sourceWorkspace: string, limits?: ProductionDockerLimits, run?: DockerCommandRunner): SandboxClient;
+//# sourceMappingURL=productionDocker.d.ts.map

package/dist/openai-agent/sandbox/productionDocker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"productionDocker.d.ts","sourceRoot":"","sources":["../../../src/openai-agent/sandbox/productionDocker.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,aAAa,EAGd,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAEL,KAAK,0BAA0B,EAGhC,MAAM,8BAA8B,CAAC;AAKtC,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,eAAO,MAAM,gCAAgC,EAAE,sBAK9C,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,CAChC,IAAI,EAAE,MAAM,EAAE,KACX,OAAO,CAAC,IAAI,CAAC,CAAC;AAEnB,wBAAsB,qBAAqB,CACzC,WAAW,EAAE,MAAM,EACnB,MAAM,GAAE,sBAAyD,EACjE,GAAG,GAAE,mBAA+B,GACnC,OAAO,CAAC,IAAI,CAAC,CAiBf;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,0BAA0B,EACnC,eAAe,EAAE,MAAM,EACvB,MAAM,GAAE,sBAAyD,EACjE,GAAG,GAAE,mBAA+B,GACnC,aAAa,CAoDf"}

package/dist/openai-agent/sandbox/productionDocker.js

@@ -0,0 +1,76 @@
+import { execFile } from 'node:child_process';
+import { cp } from 'node:fs/promises';
+import { resolve } from 'node:path';
+import { promisify } from 'node:util';
+import { DockerSandboxClient, } from '@openai/agents/sandbox/local';
+import { Manifest } from '@openai/agents/sandbox';
+const execFileAsync = promisify(execFile);
+export const DEFAULT_PRODUCTION_DOCKER_LIMITS = {
+    cpus: 2,
+    memoryMb: 2_048,
+    processCount: 256,
+    network: 'none',
+};
+export async function hardenDockerContainer(containerId, limits = DEFAULT_PRODUCTION_DOCKER_LIMITS, run = runDocker) {
+    if (!/^[a-zA-Z0-9][a-zA-Z0-9_.-]+$/.test(containerId)) {
+        throw new Error('Docker returned an unsafe container id');
+    }
+    await run([
+        'update',
+        '--cpus',
+        String(limits.cpus),
+        '--memory',
+        `${limits.memoryMb}m`,
+        '--pids-limit',
+        String(limits.processCount),
+        containerId,
+    ]);
+    if (limits.network === 'none') {
+        await run(['network', 'disconnect', '-f', 'bridge', containerId]);
+    }
+}
+/**
+ * SDK Docker client wrapped with fail-closed host-enforced resource limits.
+ * The session is not returned to the agent until hardening succeeds.
+ */
+export function createProductionDockerClient(options, sourceWorkspace, limits = DEFAULT_PRODUCTION_DOCKER_LIMITS, run = runDocker) {
+    const delegate = new DockerSandboxClient(options);
+    const harden = async (session) => {
+        try {
+            await hardenDockerContainer(session.state.containerId, limits, run);
+            return session;
+        }
+        catch (error) {
+            await session.delete().catch(() => undefined);
+            throw new Error(`Production Docker sandbox hardening failed: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    };
+    return {
+        backendId: 'docker',
+        supportsDefaultOptions: true,
+        create: (async (args, manifestOptions) => harden(args instanceof Manifest
+            ? await delegate.create(args, manifestOptions)
+            : await delegate.create(args))),
+        resume: (state, resumeOptions) => delegate.resume(state, resumeOptions).then(harden),
+        serializeSessionState: async (state) => {
+            const dockerState = state;
+            // Docker receives an isolated localDir copy. Materialize successful
+            // creates/updates back into the explicitly authorized project before the
+            // SDK deletes its owned workspace.
+            await cp(resolve(dockerState.workspaceRootPath, 'repo'), sourceWorkspace, {
+                recursive: true,
+                force: true,
+                preserveTimestamps: true,
+            });
+            return delegate.serializeSessionState(dockerState);
+        },
+        deserializeSessionState: (state) => delegate.deserializeSessionState(state),
+    };
+}
+async function runDocker(args) {
+    await execFileAsync('docker', args, {
+        timeout: 15_000,
+        maxBuffer: 1024 * 1024,
+    });
+}
+//# sourceMappingURL=productionDocker.js.map

package/dist/openai-agent/sandbox/productionDocker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"productionDocker.js","sourceRoot":"","sources":["../../../src/openai-agent/sandbox/productionDocker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAMtC,OAAO,EACL,mBAAmB,GAIpB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAElD,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAS1C,MAAM,CAAC,MAAM,gCAAgC,GAA2B;IACtE,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,KAAK;IACf,YAAY,EAAE,GAAG;IACjB,OAAO,EAAE,MAAM;CAChB,CAAC;AAMF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,WAAmB,EACnB,SAAiC,gCAAgC,EACjE,MAA2B,SAAS;IAEpC,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,GAAG,CAAC;QACR,QAAQ;QACR,QAAQ;QACR,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;QACnB,UAAU;QACV,GAAG,MAAM,CAAC,QAAQ,GAAG;QACrB,cAAc;QACd,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;QAC3B,WAAW;KACZ,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QAC9B,MAAM,GAAG,CAAC,CAAC,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAC1C,OAAmC,EACnC,eAAuB,EACvB,SAAiC,gCAAgC,EACjE,MAA2B,SAAS;IAEpC,MAAM,QAAQ,GAAG,IAAI,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,KAAK,EAClB,OAA6B,EACE,EAAE;QACjC,IAAI,CAAC;YACH,MAAM,qBAAqB,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YACpE,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,+CACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IACF,OAAO;QACL,SAAS,EAAE,QAAQ;QACnB,sBAAsB,EAAE,IAAI;QAC5B,MAAM,EAAE,CAAC,KAAK,EACZ,IAAqE,EACrE,eAA4C,EAC5C,EAAE,CACF,MAAM,CACJ,IAAI,YAAY,QAAQ;YACtB,CAAC,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,eAAe,CAAC;YAC9C,CAAC,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAChC,CAA4B;QAC/B,MAAM,EAAE,CACN,KAAgC,EAChC,aAA0C,EAC1C,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QACvD,qBAAqB,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACrC,MAAM,WAAW,GAAG,KAAkC,CAAC;YACvD,oEAAoE;YACpE,yEAAyE;YACzE,mCAAmC;YACnC,MAAM,EAAE,CACN,OAAO,CAAC,WAAW,CAAC,iBAAiB,EAAE,MAAM,CAAC,EAC9C,eAAe,EACf;gBACE,SAAS,EAAE,IAAI;gBACf,KAAK,EAAE,IAAI;gBACX,kBAAkB,EAAE,IAAI;aACzB,CACF,CAAC;YACF,OAAO,QAAQ,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC;QACrD,CAAC;QACD,uBAAuB,EAAE,CAAC,KAAK,EAAE,EAAE,CACjC,QAAQ,CAAC,uBAAuB,CAAC,KAAK,CAAC;KACzB,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAc;IACrC,MAAM,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE;QAClC,OAAO,EAAE,MAAM;QACf,SAAS,EAAE,IAAI,GAAG,IAAI;KACvB,CAAC,CAAC;AACL,CAAC"}

package/dist/openai-agent/sdkContract.d.ts

@@ -0,0 +1,18 @@
+import type { Agent, MCPServer, ModelProvider, Runner, RunState, RunStreamEvent, StreamedRunResult } from '@openai/agents';
+import type { SandboxAgent } from '@openai/agents/sandbox';
+/**
+ * Compile-time boundary for the exact OpenAI Agents SDK version pinned by SPS.
+ * Keeping the unstable sandbox import here makes SDK upgrades fail at typecheck
+ * before product code is changed.
+ */
+export interface OpenAIAgentSdkContract {
+    agent: Agent<any, any>;
+    runner: Runner;
+    provider: ModelProvider;
+    stream: StreamedRunResult<any, Agent<any, any>>;
+    event: RunStreamEvent;
+    state: RunState<any, Agent<any, any>>;
+    mcpServer: MCPServer;
+    sandboxAgent: SandboxAgent;
+}
+//# sourceMappingURL=sdkContract.d.ts.map

package/dist/openai-agent/sdkContract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdkContract.d.ts","sourceRoot":"","sources":["../../src/openai-agent/sdkContract.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,KAAK,EACL,SAAS,EACT,aAAa,EACb,MAAM,EACN,QAAQ,EACR,cAAc,EACd,iBAAiB,EAClB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAE3D;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,aAAa,CAAC;IACxB,MAAM,EAAE,iBAAiB,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAChD,KAAK,EAAE,cAAc,CAAC;IACtB,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACtC,SAAS,EAAE,SAAS,CAAC;IACrB,YAAY,EAAE,YAAY,CAAC;CAC5B"}

package/dist/openai-agent/sdkContract.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sdkContract.js.map

package/dist/openai-agent/sdkContract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdkContract.js","sourceRoot":"","sources":["../../src/openai-agent/sdkContract.ts"],"names":[],"mappings":""}

package/dist/openai-agent/storage/atomic.d.ts

@@ -0,0 +1,10 @@
+export declare function assertStorageRoot(path: string): void;
+export declare function assertIdentifier(value: string, name: string): void;
+export declare function pathExists(path: string): Promise<boolean>;
+export declare function readJsonFile<T>(path: string, validate: (value: unknown) => T): Promise<T | null>;
+export declare function atomicWriteJson(path: string, value: unknown, validate?: (value: unknown) => unknown): Promise<void>;
+export declare function requireRecord(value: unknown, label: string): Record<string, unknown>;
+export declare function requireString(record: Record<string, unknown>, key: string): string;
+export declare function requireInteger(record: Record<string, unknown>, key: string, minimum?: number): number;
+export declare function isNodeError(error: unknown, code: string): error is NodeJS.ErrnoException;
+//# sourceMappingURL=atomic.d.ts.map

package/dist/openai-agent/storage/atomic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic.d.ts","sourceRoot":"","sources":["../../../src/openai-agent/storage/atomic.ts"],"names":[],"mappings":"AAWA,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAOpD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAOlE;AAED,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAQ/D;AAED,wBAAsB,YAAY,CAAC,CAAC,EAClC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,CAAC,GAC9B,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAsBnB;AAED,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,OAAO,EACd,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,GACrC,OAAO,CAAC,IAAI,CAAC,CA6Cf;AAED,wBAAgB,aAAa,CAC3B,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,MAAM,GACZ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAKzB;AAED,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,GAAG,EAAE,MAAM,GACV,MAAM,CASR;AAED,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,GAAG,EAAE,MAAM,EACX,OAAO,SAAI,GACV,MAAM,CASR;AAED,wBAAgB,WAAW,CACzB,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,MAAM,GACX,KAAK,IAAI,MAAM,CAAC,cAAc,CAMhC"}

package/dist/openai-agent/storage/atomic.js

@@ -0,0 +1,112 @@
+import { mkdir, open, readFile, rename, unlink, } from 'node:fs/promises';
+import { dirname, isAbsolute, join } from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { OpenAIAgentStorageError } from './errors.js';
+export function assertStorageRoot(path) {
+    if (!isAbsolute(path)) {
+        throw new OpenAIAgentStorageError('persistence_error', `Session root must be absolute: ${path}`);
+    }
+}
+export function assertIdentifier(value, name) {
+    if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,199}$/.test(value)) {
+        throw new OpenAIAgentStorageError('persistence_error', `${name} contains unsafe path characters`);
+    }
+}
+export async function pathExists(path) {
+    try {
+        await readFile(path);
+        return true;
+    }
+    catch (error) {
+        if (isNodeError(error, 'ENOENT'))
+            return false;
+        throw error;
+    }
+}
+export async function readJsonFile(path, validate) {
+    let raw;
+    try {
+        raw = await readFile(path, 'utf8');
+    }
+    catch (error) {
+        if (isNodeError(error, 'ENOENT'))
+            return null;
+        throw new OpenAIAgentStorageError('persistence_error', `Failed to read ${path}`, error);
+    }
+    try {
+        return validate(JSON.parse(raw));
+    }
+    catch (error) {
+        if (error instanceof OpenAIAgentStorageError)
+            throw error;
+        throw new OpenAIAgentStorageError('corrupt', `Invalid JSON state in ${path}`, error);
+    }
+}
+export async function atomicWriteJson(path, value, validate) {
+    validate?.(value);
+    let serialized;
+    try {
+        serialized = `${JSON.stringify(value, null, 2)}\n`;
+    }
+    catch (error) {
+        throw new OpenAIAgentStorageError('persistence_error', `State for ${path} is not JSON serializable`, error);
+    }
+    if (serialized.includes('undefined')) {
+        // JSON.stringify removes undefined object fields; validation should make
+        // that loss explicit instead of silently changing durable meaning.
+        validate?.(JSON.parse(serialized));
+    }
+    const directory = dirname(path);
+    await mkdir(directory, { recursive: true, mode: 0o700 });
+    const temporary = join(directory, `.${randomUUID()}.tmp`);
+    let handle;
+    try {
+        handle = await open(temporary, 'wx', 0o600);
+        await handle.writeFile(serialized, 'utf8');
+        await handle.sync();
+        await handle.close();
+        handle = undefined;
+        await rename(temporary, path);
+        const directoryHandle = await open(directory, 'r');
+        try {
+            await directoryHandle.sync();
+        }
+        finally {
+            await directoryHandle.close();
+        }
+    }
+    catch (error) {
+        if (handle)
+            await handle.close().catch(() => undefined);
+        await unlink(temporary).catch(() => undefined);
+        if (error instanceof OpenAIAgentStorageError)
+            throw error;
+        throw new OpenAIAgentStorageError('persistence_error', `Atomic write failed for ${path}`, error);
+    }
+}
+export function requireRecord(value, label) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value)) {
+        throw new OpenAIAgentStorageError('corrupt', `${label} must be an object`);
+    }
+    return value;
+}
+export function requireString(record, key) {
+    const value = record[key];
+    if (typeof value !== 'string' || value.length === 0) {
+        throw new OpenAIAgentStorageError('corrupt', `${key} must be a non-empty string`);
+    }
+    return value;
+}
+export function requireInteger(record, key, minimum = 0) {
+    const value = record[key];
+    if (!Number.isInteger(value) || value < minimum) {
+        throw new OpenAIAgentStorageError('corrupt', `${key} must be an integer >= ${minimum}`);
+    }
+    return value;
+}
+export function isNodeError(error, code) {
+    return (error instanceof Error &&
+        'code' in error &&
+        error.code === code);
+}
+//# sourceMappingURL=atomic.js.map

package/dist/openai-agent/storage/atomic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic.js","sourceRoot":"","sources":["../../../src/openai-agent/storage/atomic.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,EACL,IAAI,EACJ,QAAQ,EACR,MAAM,EACN,MAAM,GACP,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAEtD,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,uBAAuB,CAC/B,mBAAmB,EACnB,kCAAkC,IAAI,EAAE,CACzC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAa,EAAE,IAAY;IAC1D,IAAI,CAAC,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,uBAAuB,CAC/B,mBAAmB,EACnB,GAAG,IAAI,kCAAkC,CAC1C,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY;IAC3C,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/C,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,QAA+B;IAE/B,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9C,MAAM,IAAI,uBAAuB,CAC/B,mBAAmB,EACnB,kBAAkB,IAAI,EAAE,EACxB,KAAK,CACN,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,uBAAuB;YAAE,MAAM,KAAK,CAAC;QAC1D,MAAM,IAAI,uBAAuB,CAC/B,SAAS,EACT,yBAAyB,IAAI,EAAE,EAC/B,KAAK,CACN,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAY,EACZ,KAAc,EACd,QAAsC;IAEtC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC;IAClB,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,uBAAuB,CAC/B,mBAAmB,EACnB,aAAa,IAAI,2BAA2B,EAC5C,KAAK,CACN,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACrC,yEAAyE;QACzE,mEAAmE;QACnE,QAAQ,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,UAAU,EAAE,MAAM,CAAC,CAAC;IAC1D,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC5C,MAAM,MAAM,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,GAAG,SAAS,CAAC;QACnB,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC9B,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,eAAe,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;gBAAS,CAAC;YACT,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC;QAChC,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,MAAM;YAAE,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACxD,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,KAAK,YAAY,uBAAuB;YAAE,MAAM,KAAK,CAAC;QAC1D,MAAM,IAAI,uBAAuB,CAC/B,mBAAmB,EACnB,2BAA2B,IAAI,EAAE,EACjC,KAAK,CACN,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,KAAc,EACd,KAAa;IAEb,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,uBAAuB,CAAC,SAAS,EAAE,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,MAA+B,EAC/B,GAAW;IAEX,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,uBAAuB,CAC/B,SAAS,EACT,GAAG,GAAG,6BAA6B,CACpC,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,MAA+B,EAC/B,GAAW,EACX,OAAO,GAAG,CAAC;IAEX,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,OAAO,EAAE,CAAC;QAC5D,MAAM,IAAI,uBAAuB,CAC/B,SAAS,EACT,GAAG,GAAG,0BAA0B,OAAO,EAAE,CAC1C,CAAC;IACJ,CAAC;IACD,OAAO,KAAe,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,KAAc,EACd,IAAY;IAEZ,OAAO,CACL,KAAK,YAAY,KAAK;QACtB,MAAM,IAAI,KAAK;QACd,KAA+B,CAAC,IAAI,KAAK,IAAI,CAC/C,CAAC;AACJ,CAAC"}

package/dist/openai-agent/storage/checkpoint.d.ts

@@ -0,0 +1,38 @@
+import { RunState, type Agent, type RunContext } from '@openai/agents';
+import type { JsonValue } from '../../runtime/index.js';
+declare const CHECKPOINT_SCHEMA_VERSION = 1;
+declare const SDK_RUN_STATE_SCHEMA_VERSION = "1.13";
+export interface RunCheckpoint {
+    schemaVersion: typeof CHECKPOINT_SCHEMA_VERSION;
+    revision: number;
+    status: 'running' | 'waiting_for_input' | 'cancelled_safe';
+    serializedRunState: string;
+    sdkRunStateSchemaVersion: typeof SDK_RUN_STATE_SCHEMA_VERSION;
+    agentBundleVersion: string;
+    pending?: {
+        interactionId?: string;
+        toolCallId?: string;
+        kind: string;
+    };
+    workspaceStateRef?: string;
+    lastSafeSequence: number;
+    safeToResume: boolean;
+    createdAt: string;
+    updatedAt: string;
+    metadata?: Record<string, JsonValue>;
+}
+export type NextRunCheckpoint = Omit<RunCheckpoint, 'schemaVersion' | 'revision' | 'createdAt' | 'updatedAt'> & {
+    createdAt?: string;
+};
+export declare class RunCheckpointStore {
+    private readonly sessionRoot;
+    private readonly path;
+    private readonly lockPath;
+    constructor(sessionRoot: string);
+    load(): Promise<RunCheckpoint | null>;
+    compareAndSet(expectedRevision: number, next: NextRunCheckpoint): Promise<RunCheckpoint>;
+    clear(expectedRevision?: number): Promise<void>;
+    restore<TContext, TAgent extends Agent<any, any>>(checkpoint: RunCheckpoint, initialAgent: TAgent, agentBundleVersion: string, context?: RunContext<TContext>): Promise<RunState<TContext, TAgent>>;
+}
+export {};
+//# sourceMappingURL=checkpoint.d.ts.map

package/dist/openai-agent/storage/checkpoint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoint.d.ts","sourceRoot":"","sources":["../../../src/openai-agent/storage/checkpoint.ts"],"names":[],"mappings":"AACA,OAAO,EACL,QAAQ,EACR,KAAK,KAAK,EACV,KAAK,UAAU,EAChB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAWxD,QAAA,MAAM,yBAAyB,IAAI,CAAC;AAEpC,QAAA,MAAM,4BAA4B,SAAS,CAAC;AAE5C,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,OAAO,yBAAyB,CAAC;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,SAAS,GAAG,mBAAmB,GAAG,gBAAgB,CAAC;IAC3D,kBAAkB,EAAE,MAAM,CAAC;IAC3B,wBAAwB,EAAE,OAAO,4BAA4B,CAAC;IAC9D,kBAAkB,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,EAAE;QACR,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;IACF,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,OAAO,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;CACtC;AAED,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAClC,aAAa,EACb,eAAe,GAAG,UAAU,GAAG,WAAW,GAAG,WAAW,CACzD,GAAG;IACF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,qBAAa,kBAAkB;IAIjB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAHxC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;gBAEL,WAAW,EAAE,MAAM;IAKhD,IAAI,IAAI,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAI/B,aAAa,CACjB,gBAAgB,EAAE,MAAM,EACxB,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,aAAa,CAAC;IA2BnB,KAAK,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA0B/C,OAAO,CAAC,QAAQ,EAAE,MAAM,SAAS,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,EACpD,UAAU,EAAE,aAAa,EACzB,YAAY,EAAE,MAAM,EACpB,kBAAkB,EAAE,MAAM,EAC1B,OAAO,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,GAC7B,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;CAsBvC"}