@enactprotocol/execution 2.2.4 → 2.3.4

package/dist/local-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-provider.d.ts","sourceRoot":"","sources":["../src/local-provider.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAQnF,OAAO,KAAK,EACV,YAAY,EAEZ,cAAc,EAEd,gBAAgB,EAEhB,iBAAiB,EACjB,eAAe,EAChB,MAAM,uBAAuB,CAAC;AAE/B;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,sCAAsC;IACtC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,6BAA6B;IAC7B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,oEAAoE;IACpE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;GAKG;AACH,qBAAa,sBAAuB,YAAW,iBAAiB;IAC9D,QAAQ,CAAC,IAAI,WAAW;IACxB,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,OAAO,CAAqB;gBAExB,MAAM,GAAE,mBAAwB;IAK5C;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAIjC;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAIrC;;OAEG;IACG,SAAS,IAAI,OAAO,CAAC,YAAY,CAAC;IAQxC;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAI3B;;OAEG;IACH,OAAO,CAAC,YAAY;IA2BpB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IA+BzB;;OAEG;YACW,QAAQ;IAYtB;;OAEG;IACH,OAAO,CAAC,UAAU;IA2DlB;;OAEG;IACG,OAAO,CACX,QAAQ,EAAE,YAAY,EACtB,KAAK,EAAE,cAAc,EACrB,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,eAAe,CAAC;IAmE3B;;OAEG;IACG,IAAI,CACR,QAAQ,EAAE,YAAY,EACtB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,eAAe,CAAC;IAQ3B;;OAEG;IACG,aAAa,CACjB,QAAQ,EAAE,YAAY,EACtB,eAAe,EAAE,eAAe,EAChC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,cAAc,EACrB,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,eAAe,CAAC;IAgJ3B;;OAEG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;CAGhC;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAErD;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,GAChD,OAAO,GAAG,WAAW,CAWvB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,GAAE,mBAAwB,GAAG,sBAAsB,CAE5F"}

package/dist/local-provider.js

@@ -0,0 +1,369 @@
+/**
+ * Local Execution Provider
+ *
+ * Executes commands directly on the host system without containerization.
+ * This is faster but provides no isolation or sandboxing.
+ */
+import { spawn } from "node:child_process";
+import { existsSync } from "node:fs";
+import { join } from "node:path";
+import { applyDefaults, getEffectiveInputSchema, prepareActionCommand, prepareCommand, validateInputs, } from "@enactprotocol/shared";
+/**
+ * Provider for executing commands directly on the host system
+ *
+ * WARNING: This provider offers no sandboxing or isolation.
+ * Commands have full access to the filesystem and network.
+ */
+export class LocalExecutionProvider {
+    name = "local";
+    defaultTimeout;
+    workdir;
+    constructor(config = {}) {
+        this.defaultTimeout = config.defaultTimeout ?? 300000; // 5 minutes
+        this.workdir = config.workdir;
+    }
+    /**
+     * Initialize the provider
+     */
+    async initialize() {
+        // No initialization needed for local execution
+    }
+    /**
+     * Check if the provider is available (always true for local)
+     */
+    async isAvailable() {
+        return true;
+    }
+    /**
+     * Get provider health status
+     */
+    async getHealth() {
+        return {
+            healthy: true,
+            runtime: "docker", // N/A but required by interface
+            consecutiveFailures: 0,
+        };
+    }
+    /**
+     * Generate a unique execution ID
+     */
+    generateExecutionId() {
+        return `local-${Date.now()}-${Math.random().toString(36).slice(2, 9)}`;
+    }
+    /**
+     * Parse a timeout string to milliseconds
+     */
+    parseTimeout(timeout) {
+        if (!timeout) {
+            return this.defaultTimeout ?? 300000;
+        }
+        const match = timeout.match(/^(\d+)(ms|s|m|h)?$/);
+        if (!match) {
+            return this.defaultTimeout ?? 300000;
+        }
+        const value = Number.parseInt(match[1] ?? "300000", 10);
+        const unit = match[2] ?? "ms";
+        switch (unit) {
+            case "ms":
+                return value;
+            case "s":
+                return value * 1000;
+            case "m":
+                return value * 60000;
+            case "h":
+                return value * 3600000;
+            default:
+                return value;
+        }
+    }
+    /**
+     * Create an error result
+     */
+    createErrorResult(toolName, executionId, startTime, code, message) {
+        const endTime = new Date();
+        return {
+            success: false,
+            output: {
+                stdout: "",
+                stderr: message,
+                exitCode: 1,
+            },
+            metadata: {
+                toolName,
+                containerImage: "local",
+                startTime,
+                endTime,
+                durationMs: endTime.getTime() - startTime.getTime(),
+                cached: false,
+                executionId,
+            },
+            error: {
+                code,
+                message,
+            },
+        };
+    }
+    /**
+     * Run build commands if specified
+     */
+    async runBuild(build, cwd, env) {
+        const commands = Array.isArray(build) ? build : [build];
+        for (const command of commands) {
+            await this.runCommand(command.split(/\s+/), cwd, env, 600000); // 10 min timeout for build
+        }
+    }
+    /**
+     * Run a command and return the output
+     */
+    runCommand(commandArray, cwd, env, timeoutMs) {
+        return new Promise((resolve, reject) => {
+            const [cmd, ...args] = commandArray;
+            if (!cmd) {
+                reject(new Error("Empty command"));
+                return;
+            }
+            const child = spawn(cmd, args, {
+                cwd,
+                env: { ...process.env, ...env },
+                stdio: ["pipe", "pipe", "pipe"],
+            });
+            let stdout = "";
+            let stderr = "";
+            let timedOut = false;
+            const timer = setTimeout(() => {
+                timedOut = true;
+                child.kill("SIGTERM");
+                setTimeout(() => child.kill("SIGKILL"), 5000);
+            }, timeoutMs);
+            child.stdout?.on("data", (data) => {
+                stdout += data.toString();
+            });
+            child.stderr?.on("data", (data) => {
+                stderr += data.toString();
+            });
+            child.on("error", (error) => {
+                clearTimeout(timer);
+                reject(error);
+            });
+            child.on("close", (exitCode) => {
+                clearTimeout(timer);
+                if (timedOut) {
+                    reject(new Error("TIMEOUT"));
+                    return;
+                }
+                resolve({
+                    stdout,
+                    stderr,
+                    exitCode: exitCode ?? 1,
+                });
+            });
+        });
+    }
+    /**
+     * Execute a tool (for compatibility - uses manifest.command)
+     */
+    async execute(manifest, input, options = {}) {
+        const startTime = new Date();
+        const executionId = this.generateExecutionId();
+        if (!manifest.command) {
+            return this.createErrorResult(manifest.name, executionId, startTime, "COMMAND_ERROR", "No command specified in manifest");
+        }
+        const workdir = options.workdir ?? this.workdir ?? process.cwd();
+        const timeoutMs = this.parseTimeout(options.timeout ?? manifest.timeout);
+        // Build environment
+        const env = {
+            ...input.envOverrides,
+        };
+        try {
+            // Interpolate parameters and prepare command array
+            const commandArray = prepareCommand(manifest.command, input.params);
+            const output = await this.runCommand(commandArray, workdir, env, timeoutMs);
+            const endTime = new Date();
+            const metadata = {
+                toolName: manifest.name,
+                containerImage: "local",
+                startTime,
+                endTime,
+                durationMs: endTime.getTime() - startTime.getTime(),
+                cached: false,
+                executionId,
+            };
+            if (output.exitCode !== 0) {
+                return {
+                    success: false,
+                    output,
+                    metadata,
+                    error: {
+                        code: "COMMAND_ERROR",
+                        message: `Command exited with code ${output.exitCode}`,
+                    },
+                };
+            }
+            return {
+                success: true,
+                output,
+                metadata,
+            };
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            let code = "COMMAND_ERROR";
+            if (message === "TIMEOUT") {
+                code = "TIMEOUT";
+            }
+            return this.createErrorResult(manifest.name, executionId, startTime, code, message);
+        }
+    }
+    /**
+     * Execute a raw command
+     */
+    async exec(manifest, command, options = {}) {
+        const execManifest = {
+            ...manifest,
+            command,
+        };
+        return this.execute(execManifest, { params: {} }, options);
+    }
+    /**
+     * Execute an action from ACTIONS.yaml
+     */
+    async executeAction(manifest, actionsManifest, actionName, action, input, options = {}) {
+        const startTime = new Date();
+        const executionId = this.generateExecutionId();
+        // Get effective inputSchema (defaults to empty if not provided)
+        const effectiveSchema = getEffectiveInputSchema(action);
+        // Validate inputs against action's inputSchema
+        const validation = validateInputs(input.params, effectiveSchema);
+        if (!validation.valid) {
+            const errorMessages = validation.errors.map((e) => `${e.path}: ${e.message}`);
+            return this.createErrorResult(`${manifest.name}:${actionName}`, executionId, startTime, "VALIDATION_ERROR", `Input validation failed: ${errorMessages.join(", ")}`);
+        }
+        // Apply defaults to inputs
+        const params = applyDefaults(input.params, effectiveSchema);
+        // Prepare the command using {{param}} template system
+        let commandArray;
+        try {
+            const actionCommand = action.command;
+            if (typeof actionCommand === "string") {
+                // String-form command (no templates allowed - validation ensures this)
+                commandArray = actionCommand.split(/\s+/).filter((s) => s.length > 0);
+            }
+            else {
+                // Array-form command with {{param}} templates
+                commandArray = prepareActionCommand(actionCommand, params, effectiveSchema);
+            }
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            return this.createErrorResult(`${manifest.name}:${actionName}`, executionId, startTime, "COMMAND_ERROR", `Failed to prepare action command: ${message}`);
+        }
+        if (commandArray.length === 0) {
+            return this.createErrorResult(`${manifest.name}:${actionName}`, executionId, startTime, "COMMAND_ERROR", "Action command is empty");
+        }
+        const workdir = options.workdir ?? this.workdir ?? process.cwd();
+        const timeoutMs = this.parseTimeout(options.timeout ?? manifest.timeout);
+        // Build environment
+        const env = {
+            ...input.envOverrides,
+        };
+        // Add env from actions manifest
+        if (actionsManifest.env) {
+            for (const [key, envVar] of Object.entries(actionsManifest.env)) {
+                if (envVar.default && !env[key]) {
+                    env[key] = envVar.default;
+                }
+            }
+        }
+        try {
+            // Run build commands if present
+            if (actionsManifest.build) {
+                await this.runBuild(actionsManifest.build, workdir, env);
+            }
+            // Execute the action command
+            const output = await this.runCommand(commandArray, workdir, env, timeoutMs);
+            const endTime = new Date();
+            const metadata = {
+                toolName: `${manifest.name}:${actionName}`,
+                containerImage: "local",
+                startTime,
+                endTime,
+                durationMs: endTime.getTime() - startTime.getTime(),
+                cached: false,
+                executionId,
+            };
+            if (manifest.version) {
+                metadata.toolVersion = manifest.version;
+            }
+            if (output.exitCode !== 0) {
+                return {
+                    success: false,
+                    output,
+                    metadata,
+                    error: {
+                        code: "COMMAND_ERROR",
+                        message: `Action "${actionName}" exited with code ${output.exitCode}`,
+                        ...(output.stderr && { details: { stderr: output.stderr } }),
+                    },
+                };
+            }
+            // Validate output against outputSchema if defined
+            if (action.outputSchema && output.stdout) {
+                try {
+                    const parsed = JSON.parse(output.stdout);
+                    output.parsed = parsed;
+                }
+                catch {
+                    // Output is not JSON - that's OK, leave as string
+                }
+            }
+            return {
+                success: true,
+                output,
+                metadata,
+            };
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            let code = "COMMAND_ERROR";
+            if (message.startsWith("BUILD_ERROR:") || message.includes("build")) {
+                code = "BUILD_ERROR";
+            }
+            else if (message === "TIMEOUT") {
+                code = "TIMEOUT";
+            }
+            return this.createErrorResult(`${manifest.name}:${actionName}`, executionId, startTime, code, message);
+        }
+    }
+    /**
+     * Shutdown the provider (no-op for local)
+     */
+    async shutdown() {
+        // Nothing to clean up
+    }
+}
+/**
+ * Check if a directory has a Containerfile or Dockerfile
+ */
+export function hasContainerfile(dir) {
+    return existsSync(join(dir, "Containerfile")) || existsSync(join(dir, "Dockerfile"));
+}
+/**
+ * Determine the execution mode based on skill directory and options
+ */
+export function selectExecutionMode(skillDir, options) {
+    if (options.local) {
+        return "local";
+    }
+    if (options.container) {
+        return "container";
+    }
+    // Default: container if Containerfile exists, else local
+    return hasContainerfile(skillDir) ? "container" : "local";
+}
+/**
+ * Create a local execution provider
+ */
+export function createLocalProvider(config = {}) {
+    return new LocalExecutionProvider(config);
+}
+//# sourceMappingURL=local-provider.js.map

package/dist/local-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-provider.js","sourceRoot":"","sources":["../src/local-provider.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EACL,aAAa,EACb,uBAAuB,EACvB,oBAAoB,EACpB,cAAc,EACd,cAAc,GACf,MAAM,uBAAuB,CAAC;AAwB/B;;;;;GAKG;AACH,MAAM,OAAO,sBAAsB;IACxB,IAAI,GAAG,OAAO,CAAC;IAChB,cAAc,CAAS;IACvB,OAAO,CAAqB;IAEpC,YAAY,SAA8B,EAAE;QAC1C,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,CAAC,YAAY;QACnE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU;QACd,+CAA+C;IACjD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS;QACb,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,QAAQ,EAAE,gCAAgC;YACnD,mBAAmB,EAAE,CAAC;SACvB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,mBAAmB;QACzB,OAAO,SAAS,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IACzE,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,OAAgB;QACnC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,cAAc,IAAI,MAAM,CAAC;QACvC,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,cAAc,IAAI,MAAM,CAAC;QACvC,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,EAAE,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QAE9B,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,IAAI;gBACP,OAAO,KAAK,CAAC;YACf,KAAK,GAAG;gBACN,OAAO,KAAK,GAAG,IAAI,CAAC;YACtB,KAAK,GAAG;gBACN,OAAO,KAAK,GAAG,KAAK,CAAC;YACvB,KAAK,GAAG;gBACN,OAAO,KAAK,GAAG,OAAO,CAAC;YACzB;gBACE,OAAO,KAAK,CAAC;QACjB,CAAC;IACH,CAAC;IAED;;OAEG;IACK,iBAAiB,CACvB,QAAgB,EAChB,WAAmB,EACnB,SAAe,EACf,IAAwB,EACxB,OAAe;QAEf,MAAM,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC;QAC3B,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE;gBACN,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,OAAO;gBACf,QAAQ,EAAE,CAAC;aACZ;YACD,QAAQ,EAAE;gBACR,QAAQ;gBACR,cAAc,EAAE,OAAO;gBACvB,SAAS;gBACT,OAAO;gBACP,UAAU,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE;gBACnD,MAAM,EAAE,KAAK;gBACb,WAAW;aACZ;YACD,KAAK,EAAE;gBACL,IAAI;gBACJ,OAAO;aACR;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,QAAQ,CACpB,KAAwB,EACxB,GAAW,EACX,GAA2B;QAE3B,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAExD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,2BAA2B;QAC5F,CAAC;IACH,CAAC;IAED;;OAEG;IACK,UAAU,CAChB,YAAsB,EACtB,GAAW,EACX,GAA2B,EAC3B,SAAiB;QAEjB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,YAAY,CAAC;YACpC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;gBACnC,OAAO;YACT,CAAC;YAED,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;gBAC7B,GAAG;gBACH,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE;gBAC/B,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;aAChC,CAAC,CAAC;YAEH,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;YAErB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,QAAQ,GAAG,IAAI,CAAC;gBAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;YAChD,CAAC,EAAE,SAAS,CAAC,CAAC;YAEd,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;gBACxC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;gBACxC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC1B,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE;gBAC7B,YAAY,CAAC,KAAK,CAAC,CAAC;gBAEpB,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;oBAC7B,OAAO;gBACT,CAAC;gBAED,OAAO,CAAC;oBACN,MAAM;oBACN,MAAM;oBACN,QAAQ,EAAE,QAAQ,IAAI,CAAC;iBACxB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CACX,QAAsB,EACtB,KAAqB,EACrB,UAA4B,EAAE;QAE9B,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAE/C,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC,iBAAiB,CAC3B,QAAQ,CAAC,IAAI,EACb,WAAW,EACX,SAAS,EACT,eAAe,EACf,kCAAkC,CACnC,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACjE,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC;QAEzE,oBAAoB;QACpB,MAAM,GAAG,GAA2B;YAClC,GAAG,KAAK,CAAC,YAAY;SACtB,CAAC;QAEF,IAAI,CAAC;YACH,mDAAmD;YACnD,MAAM,YAAY,GAAG,cAAc,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YACpE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;YAE5E,MAAM,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAsB;gBAClC,QAAQ,EAAE,QAAQ,CAAC,IAAI;gBACvB,cAAc,EAAE,OAAO;gBACvB,SAAS;gBACT,OAAO;gBACP,UAAU,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE;gBACnD,MAAM,EAAE,KAAK;gBACb,WAAW;aACZ,CAAC;YAEF,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC1B,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM;oBACN,QAAQ;oBACR,KAAK,EAAE;wBACL,IAAI,EAAE,eAAe;wBACrB,OAAO,EAAE,4BAA4B,MAAM,CAAC,QAAQ,EAAE;qBACvD;iBACF,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM;gBACN,QAAQ;aACT,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,IAAI,IAAI,GAAuB,eAAe,CAAC;YAE/C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,IAAI,GAAG,SAAS,CAAC;YACnB,CAAC;YAED,OAAO,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CACR,QAAsB,EACtB,OAAe,EACf,UAA4B,EAAE;QAE9B,MAAM,YAAY,GAAiB;YACjC,GAAG,QAAQ;YACX,OAAO;SACR,CAAC;QACF,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,QAAsB,EACtB,eAAgC,EAChC,UAAkB,EAClB,MAAc,EACd,KAAqB,EACrB,UAA4B,EAAE;QAE9B,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAE/C,gEAAgE;QAChE,MAAM,eAAe,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAExD,+CAA+C;QAC/C,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QACjE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9E,OAAO,IAAI,CAAC,iBAAiB,CAC3B,GAAG,QAAQ,CAAC,IAAI,IAAI,UAAU,EAAE,EAChC,WAAW,EACX,SAAS,EACT,kBAAkB,EAClB,4BAA4B,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvD,CAAC;QACJ,CAAC;QAED,2BAA2B;QAC3B,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QAE5D,sDAAsD;QACtD,IAAI,YAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC;YACrC,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;gBACtC,uEAAuE;gBACvE,YAAY,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACxE,CAAC;iBAAM,CAAC;gBACN,8CAA8C;gBAC9C,YAAY,GAAG,oBAAoB,CAAC,aAAa,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO,IAAI,CAAC,iBAAiB,CAC3B,GAAG,QAAQ,CAAC,IAAI,IAAI,UAAU,EAAE,EAChC,WAAW,EACX,SAAS,EACT,eAAe,EACf,qCAAqC,OAAO,EAAE,CAC/C,CAAC;QACJ,CAAC;QAED,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,iBAAiB,CAC3B,GAAG,QAAQ,CAAC,IAAI,IAAI,UAAU,EAAE,EAChC,WAAW,EACX,SAAS,EACT,eAAe,EACf,yBAAyB,CAC1B,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACjE,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC;QAEzE,oBAAoB;QACpB,MAAM,GAAG,GAA2B;YAClC,GAAG,KAAK,CAAC,YAAY;SACtB,CAAC;QAEF,gCAAgC;QAChC,IAAI,eAAe,CAAC,GAAG,EAAE,CAAC;YACxB,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChE,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBAChC,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;gBAC5B,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,gCAAgC;YAChC,IAAI,eAAe,CAAC,KAAK,EAAE,CAAC;gBAC1B,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YAC3D,CAAC;YAED,6BAA6B;YAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;YAE5E,MAAM,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAsB;gBAClC,QAAQ,EAAE,GAAG,QAAQ,CAAC,IAAI,IAAI,UAAU,EAAE;gBAC1C,cAAc,EAAE,OAAO;gBACvB,SAAS;gBACT,OAAO;gBACP,UAAU,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE;gBACnD,MAAM,EAAE,KAAK;gBACb,WAAW;aACZ,CAAC;YAEF,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACrB,QAAQ,CAAC,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC;YAC1C,CAAC;YAED,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC1B,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM;oBACN,QAAQ;oBACR,KAAK,EAAE;wBACL,IAAI,EAAE,eAAe;wBACrB,OAAO,EAAE,WAAW,UAAU,sBAAsB,MAAM,CAAC,QAAQ,EAAE;wBACrE,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;qBAC7D;iBACF,CAAC;YACJ,CAAC;YAED,kDAAkD;YAClD,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBACzC,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;oBACzC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;gBACzB,CAAC;gBAAC,MAAM,CAAC;oBACP,kDAAkD;gBACpD,CAAC;YACH,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM;gBACN,QAAQ;aACT,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,IAAI,IAAI,GAAuB,eAAe,CAAC;YAE/C,IAAI,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBACpE,IAAI,GAAG,aAAa,CAAC;YACvB,CAAC;iBAAM,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBACjC,IAAI,GAAG,SAAS,CAAC;YACnB,CAAC;YAED,OAAO,IAAI,CAAC,iBAAiB,CAC3B,GAAG,QAAQ,CAAC,IAAI,IAAI,UAAU,EAAE,EAChC,WAAW,EACX,SAAS,EACT,IAAI,EACJ,OAAO,CACR,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ;QACZ,sBAAsB;IACxB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC;AACvF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAgB,EAChB,OAAiD;IAEjD,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,yDAAyD;IACzD,OAAO,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC;AAC5D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAA8B,EAAE;IAClE,OAAO,IAAI,sBAAsB,CAAC,MAAM,CAAC,CAAC;AAC5C,CAAC"}

package/dist/provider.d.ts

@@ -4,7 +4,7 @@
  * Main execution provider that uses Dagger SDK to run
  * containerized commands for Enact tools.
  */
-import type { ToolManifest } from "@enactprotocol/shared";
+import type { Action, ActionsManifest, ToolManifest } from "@enactprotocol/shared";
 import type { ContainerRuntime, EngineHealth, ExecutionInput, ExecutionOptions, ExecutionProvider, ExecutionResult } from "@enactprotocol/shared";
 /**
  * Configuration for the Dagger execution provider
@@ -53,6 +53,22 @@ export declare class DaggerExecutionProvider implements ExecutionProvider {
      * Execute a raw command in a tool's container
      */
     exec(manifest: ToolManifest, command: string, options?: ExecutionOptions): Promise<ExecutionResult>;
+    /**
+     * Execute an action from ACTIONS.yaml
+     *
+     * This method uses the {{param}} template system which:
+     * - Passes commands directly to execve() (no shell interpolation)
+     * - Each template becomes a single argument regardless of content
+     * - Omits arguments for optional params without values
+     *
+     * @param manifest - The skill manifest (SKILL.md)
+     * @param actionsManifest - The actions manifest (ACTIONS.yaml)
+     * @param actionName - The name of the action to execute
+     * @param action - The specific action definition to execute
+     * @param input - Execution input with params
+     * @param options - Execution options
+     */
+    executeAction(manifest: ToolManifest, actionsManifest: ActionsManifest, actionName: string, action: Action, input: ExecutionInput, options?: ExecutionOptions): Promise<ExecutionResult>;
     /**
      * Shutdown the provider
      */
@@ -61,6 +77,13 @@ export declare class DaggerExecutionProvider implements ExecutionProvider {
      * Run the container and capture output
      */
     private runContainer;
+    /**
+     * Run action container with direct exec (no shell wrapper)
+     *
+     * This is the key difference from runContainer - commands are passed
+     * directly to execve() without shell interpolation, preventing injection.
+     */
+    private runActionContainer;
     /**
      * Generate a unique execution ID
      */

package/dist/provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAO1D,OAAO,KAAK,EACV,gBAAgB,EAChB,YAAY,EAEZ,cAAc,EAEd,gBAAgB,EAEhB,iBAAiB,EACjB,eAAe,EAChB,MAAM,uBAAuB,CAAC;AAE/B;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,sCAAsC;IACtC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kCAAkC;IAClC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,6BAA6B;IAC7B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,sCAAsC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;GAKG;AACH,qBAAa,uBAAwB,YAAW,iBAAiB;IAC/D,QAAQ,CAAC,IAAI,YAAY;IACzB,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,eAAe,CAAiC;IACxD,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,eAAe,CAAqB;IAC5C,OAAO,CAAC,mBAAmB,CAAK;gBAEpB,MAAM,GAAE,oBAAyB;IAY7C;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAajC;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAOrC;;OAEG;IACG,SAAS,IAAI,OAAO,CAAC,YAAY,CAAC;IAwBxC;;OAEG;IACG,OAAO,CACX,QAAQ,EAAE,YAAY,EACtB,KAAK,EAAE,cAAc,EACrB,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,eAAe,CAAC;IA6J3B;;OAEG;IACG,IAAI,CACR,QAAQ,EAAE,YAAY,EACtB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,eAAe,CAAC;IAe3B;;OAEG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAK/B;;OAEG;YACW,YAAY;IA6O1B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAI3B;;OAEG;IACH,OAAO,CAAC,YAAY;IAwBpB;;OAEG;IACH,OAAO,CAAC,iBAAiB;CAgC1B;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,CAAC,EAAE,oBAAoB,GAAG,uBAAuB,CAE9F;AAED;;GAEG;AACH,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,YAAY,EACtB,KAAK,EAAE,cAAc,EACrB,OAAO,CAAC,EAAE,gBAAgB,GACzB,OAAO,CAAC,eAAe,CAAC,CAI1B"}
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AASnF,OAAO,KAAK,EACV,gBAAgB,EAChB,YAAY,EAEZ,cAAc,EAEd,gBAAgB,EAEhB,iBAAiB,EACjB,eAAe,EAChB,MAAM,uBAAuB,CAAC;AAE/B;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,sCAAsC;IACtC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kCAAkC;IAClC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,6BAA6B;IAC7B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,sCAAsC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;GAKG;AACH,qBAAa,uBAAwB,YAAW,iBAAiB;IAC/D,QAAQ,CAAC,IAAI,YAAY;IACzB,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,eAAe,CAAiC;IACxD,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,eAAe,CAAqB;IAC5C,OAAO,CAAC,mBAAmB,CAAK;gBAEpB,MAAM,GAAE,oBAAyB;IAY7C;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAajC;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAOrC;;OAEG;IACG,SAAS,IAAI,OAAO,CAAC,YAAY,CAAC;IAwBxC;;OAEG;IACG,OAAO,CACX,QAAQ,EAAE,YAAY,EACtB,KAAK,EAAE,cAAc,EACrB,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,eAAe,CAAC;IAsI3B;;OAEG;IACG,IAAI,CACR,QAAQ,EAAE,YAAY,EACtB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,eAAe,CAAC;IAe3B;;;;;;;;;;;;;;OAcG;IACG,aAAa,CACjB,QAAQ,EAAE,YAAY,EACtB,eAAe,EAAE,eAAe,EAChC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,cAAc,EACrB,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,eAAe,CAAC;IA0K3B;;OAEG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAK/B;;OAEG;YACW,YAAY;IA6O1B;;;;;OAKG;YACW,kBAAkB;IA4MhC;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAI3B;;OAEG;IACH,OAAO,CAAC,YAAY;IAwBpB;;OAEG;IACH,OAAO,CAAC,iBAAiB;CAgC1B;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,CAAC,EAAE,oBAAoB,GAAG,uBAAuB,CAE9F;AAED;;GAEG;AACH,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,YAAY,EACtB,KAAK,EAAE,cAAc,EACrB,OAAO,CAAC,EAAE,gBAAgB,GACzB,OAAO,CAAC,eAAe,CAAC,CAI1B"}