@finalai/final-agent-provider 0.10.0 → 0.11.0

package/dist/modules/sandboxes/guide.mjs

@@ -1,119 +0,0 @@
-import {
-  NetworkPolicy
-} from "@finalai/agent-provider";
-import { canonicalJson, sha256Hex } from "./bytes.mjs";
-import {
-  computerParametersSchema,
-  computerTemplateSchema,
-  ComputerWorkspacePolicy
-} from "./environment.mjs";
-const ARTIFACT_KEY_VERSION = 1;
-const PROJECT_ARTIFACT_CAPTURE_PROTOCOL_VERSION = 2;
-const DEFAULT_COMPUTER_IMAGE = "lineage:sandbox";
-const computerNeedsBuild = (inputs) => inputs.template.build.steps.length > 0 || inputs.template.build.verify.length > 0;
-const computeComputerArtifactKey = async (inputs) => {
-  if (!computerNeedsBuild(inputs)) {
-    const hex2 = await sha256Hex(canonicalJson({ v: ARTIFACT_KEY_VERSION, image: inputs.image }));
-    return `img-${hex2.slice(0, 16)}`;
-  }
-  const hex = await sha256Hex(
-    canonicalJson({
-      v: ARTIFACT_KEY_VERSION,
-      image: inputs.image,
-      build: inputs.template.build,
-      diskGb: inputs.diskGb
-    })
-  );
-  return `pa-g${hex.slice(0, 16)}-c${PROJECT_ARTIFACT_CAPTURE_PROTOCOL_VERSION}`;
-};
-const toNetworkPolicy = (option) => {
-  if (option == null) return void 0;
-  if (option instanceof Object) return { mode: option.mode, allow: option.allow };
-  return { mode: option, allow: [] };
-};
-const mergeComputerParameters = (base, override) => {
-  const repositories = /* @__PURE__ */ new Map();
-  for (const repository of [...base.repositories ?? [], ...override.repositories ?? []]) {
-    repositories.set(repository.alias, repository);
-  }
-  return {
-    repositories: [...repositories.values()],
-    variables: [.../* @__PURE__ */ new Set([...base.variables ?? [], ...override.variables ?? []])],
-    workspace: override.workspace ?? base.workspace ?? ComputerWorkspacePolicy.Session,
-    networkPolicy: toNetworkPolicy(override.networkPolicy) ?? toNetworkPolicy(base.networkPolicy) ?? { mode: NetworkPolicy.AllowAll, allow: [] },
-    env: { ...base.env, ...override.env }
-  };
-};
-const fromVersion = (version, override) => {
-  const template = computerTemplateSchema.safeParse(version.templateConfig);
-  if (!template.success) {
-    throw new Error(
-      `computer setup guide ${version.slug} v${version.number} has an invalid template`
-    );
-  }
-  const defaults = computerParametersSchema.safeParse(version.defaultParameters);
-  if (!defaults.success) {
-    throw new Error(
-      `computer setup guide ${version.slug} v${version.number} has invalid default parameters`
-    );
-  }
-  return {
-    image: version.image,
-    template: template.data,
-    parameters: mergeComputerParameters(defaults.data, override),
-    guide: {
-      guideId: version.guideId,
-      versionId: version.versionId,
-      slug: version.slug,
-      title: version.title,
-      number: version.number,
-      preparedArtifact: version.preparedArtifact
-    },
-    instructionsMarkdown: version.instructionsMarkdown
-  };
-};
-const imageOnly = (image, override) => ({
-  image,
-  template: computerTemplateSchema.parse({}),
-  parameters: mergeComputerParameters({ workspace: ComputerWorkspacePolicy.Ephemeral }, override),
-  guide: null,
-  instructionsMarkdown: null
-});
-const resolveComputerSpec = async (args) => {
-  const { options } = args;
-  if ("guide" in options) {
-    const version = await args.guides.get({
-      ref: options.guide.ref,
-      version: options.guide.version
-    });
-    if (version == null) {
-      throw new Error(
-        `computer setup guide ${options.guide.ref}@${options.guide.version} was not found`
-      );
-    }
-    return fromVersion(version, options.parameters);
-  }
-  if ("inline" in options) {
-    return {
-      image: options.inline.image,
-      template: options.inline.template,
-      parameters: mergeComputerParameters(
-        { repositories: options.inline.repositories, variables: options.inline.variables },
-        options.parameters
-      ),
-      guide: null,
-      instructionsMarkdown: null
-    };
-  }
-  if ("image" in options) return imageOnly(options.image, options.parameters);
-  const fallback = await args.guides.default();
-  return fallback == null ? imageOnly(args.defaultImage, options.parameters) : fromVersion(fallback, options.parameters);
-};
-export {
-  DEFAULT_COMPUTER_IMAGE,
-  computeComputerArtifactKey,
-  computerNeedsBuild,
-  mergeComputerParameters,
-  resolveComputerSpec
-};
-//# sourceMappingURL=guide.mjs.map

package/dist/modules/sandboxes/guide.mjs.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../../src/sandboxes/guide.ts"],
-  "sourcesContent": ["import {\n  NetworkPolicy,\n  type SandboxGuidesIface,\n  type SandboxGuideVersionIface,\n} from '@finalai/agent-provider';\nimport { canonicalJson, sha256Hex } from \"./bytes.mjs\";\nimport {\n  computerParametersSchema,\n  computerTemplateSchema,\n  ComputerWorkspacePolicy,\n  type ComputerEnvironmentOptions,\n  type ComputerNetworkPolicyOption,\n  type ComputerParametersIface,\n  type ComputerRepositoryIface,\n  type ComputerTemplateIface,\n} from \"./environment.mjs\";\n\n// Computer setup guides: resolving a reference (or an inline guide) into the\n// build-time inputs that define the base and the start-time inputs applied per\n// computer.\n\n// One saved version (agent.computer_setup_guide_versions), as the platform\n// serves it to every provider through the contract's `guides` reader.\nexport type ComputerGuideVersionIface = SandboxGuideVersionIface;\n\nexport interface ResolvedNetworkPolicyIface {\n  mode: NetworkPolicy;\n  allow: string[];\n}\n\nexport interface ResolvedComputerParametersIface {\n  repositories: ComputerRepositoryIface[];\n  variables: string[];\n  workspace: ComputerWorkspacePolicy;\n  networkPolicy: ResolvedNetworkPolicyIface;\n  env: Record<string, string>;\n}\n\nexport interface ResolvedComputerSpecIface {\n  image: string;\n  template: ComputerTemplateIface;\n  parameters: ResolvedComputerParametersIface;\n  guide: Pick<\n    ComputerGuideVersionIface,\n    'guideId' | 'versionId' | 'slug' | 'title' | 'number' | 'preparedArtifact'\n  > | null;\n  instructionsMarkdown: string | null;\n}\n\n// Bumped when the meaning of the build inputs changes (forces rebuilds).\nconst ARTIFACT_KEY_VERSION = 1;\n// Part of a built base's key; bumping it rebuilds every guide's base.\nconst PROJECT_ARTIFACT_CAPTURE_PROTOCOL_VERSION = 2;\nexport const DEFAULT_COMPUTER_IMAGE = 'lineage:sandbox';\n\nexport interface ComputerBuildInputsIface {\n  image: string;\n  template: ComputerTemplateIface;\n  diskGb: number | null;\n}\n\n// Build steps and verify steps are the only build-time inputs besides the image.\nexport const computerNeedsBuild = (inputs: Pick<ComputerBuildInputsIface, 'template'>): boolean =>\n  inputs.template.build.steps.length > 0 || inputs.template.build.verify.length > 0;\n\n// The base's identity: a hash of the build-time inputs only (no guide id, no\n// start-time inputs), so identical guides share one base. B6 stores the same key in\n// computer_setup_guide_versions.build_artifact_key.\nexport const computeComputerArtifactKey = async (\n  inputs: ComputerBuildInputsIface,\n): Promise<string> => {\n  if (!computerNeedsBuild(inputs)) {\n    const hex = await sha256Hex(canonicalJson({ v: ARTIFACT_KEY_VERSION, image: inputs.image }));\n    return `img-${hex.slice(0, 16)}`;\n  }\n  const hex = await sha256Hex(\n    canonicalJson({\n      v: ARTIFACT_KEY_VERSION,\n      image: inputs.image,\n      build: inputs.template.build,\n      diskGb: inputs.diskGb,\n    }),\n  );\n  return `pa-g${hex.slice(0, 16)}-c${PROJECT_ARTIFACT_CAPTURE_PROTOCOL_VERSION}`;\n};\n\nconst toNetworkPolicy = (\n  option: ComputerNetworkPolicyOption | undefined,\n): ResolvedNetworkPolicyIface | undefined => {\n  if (option == null) return undefined;\n  if (option instanceof Object) return { mode: option.mode, allow: option.allow };\n  return { mode: option, allow: [] };\n};\n\n// Saved defaults overridden by the binding: repositories merge by alias, variables\n// union by name, env merges by key, scalars replace.\nexport const mergeComputerParameters = (\n  base: ComputerParametersIface,\n  override: ComputerParametersIface,\n): ResolvedComputerParametersIface => {\n  const repositories = new Map<string, ComputerRepositoryIface>();\n  for (const repository of [...(base.repositories ?? []), ...(override.repositories ?? [])]) {\n    repositories.set(repository.alias, repository);\n  }\n  return {\n    repositories: [...repositories.values()],\n    variables: [...new Set([...(base.variables ?? []), ...(override.variables ?? [])])],\n    workspace: override.workspace ?? base.workspace ?? ComputerWorkspacePolicy.Session,\n    networkPolicy: toNetworkPolicy(override.networkPolicy) ??\n      toNetworkPolicy(base.networkPolicy) ?? { mode: NetworkPolicy.AllowAll, allow: [] },\n    env: { ...base.env, ...override.env },\n  };\n};\n\nconst fromVersion = (\n  version: ComputerGuideVersionIface,\n  override: ComputerParametersIface,\n): ResolvedComputerSpecIface => {\n  const template = computerTemplateSchema.safeParse(version.templateConfig);\n  if (!template.success) {\n    throw new Error(\n      `computer setup guide ${version.slug} v${version.number} has an invalid template`,\n    );\n  }\n  const defaults = computerParametersSchema.safeParse(version.defaultParameters);\n  if (!defaults.success) {\n    throw new Error(\n      `computer setup guide ${version.slug} v${version.number} has invalid default parameters`,\n    );\n  }\n  return {\n    image: version.image,\n    template: template.data,\n    parameters: mergeComputerParameters(defaults.data, override),\n    guide: {\n      guideId: version.guideId,\n      versionId: version.versionId,\n      slug: version.slug,\n      title: version.title,\n      number: version.number,\n      preparedArtifact: version.preparedArtifact,\n    },\n    instructionsMarkdown: version.instructionsMarkdown,\n  };\n};\n\nconst imageOnly = (\n  image: string,\n  override: ComputerParametersIface,\n): ResolvedComputerSpecIface => ({\n  image,\n  template: computerTemplateSchema.parse({}),\n  parameters: mergeComputerParameters({ workspace: ComputerWorkspacePolicy.Ephemeral }, override),\n  guide: null,\n  instructionsMarkdown: null,\n});\n\n// Guides come from the contract's `guides` reader (the session's organization).\nexport const resolveComputerSpec = async (args: {\n  options: ComputerEnvironmentOptions;\n  guides: SandboxGuidesIface;\n  defaultImage: string;\n}): Promise<ResolvedComputerSpecIface> => {\n  const { options } = args;\n  if ('guide' in options) {\n    const version = await args.guides.get({\n      ref: options.guide.ref,\n      version: options.guide.version,\n    });\n    if (version == null) {\n      throw new Error(\n        `computer setup guide ${options.guide.ref}@${options.guide.version} was not found`,\n      );\n    }\n    return fromVersion(version, options.parameters);\n  }\n  if ('inline' in options) {\n    return {\n      image: options.inline.image,\n      template: options.inline.template,\n      parameters: mergeComputerParameters(\n        { repositories: options.inline.repositories, variables: options.inline.variables },\n        options.parameters,\n      ),\n      guide: null,\n      instructionsMarkdown: null,\n    };\n  }\n  if ('image' in options) return imageOnly(options.image, options.parameters);\n  const fallback = await args.guides.default();\n  return fallback == null\n    ? imageOnly(args.defaultImage, options.parameters)\n    : fromVersion(fallback, options.parameters);\n};\n"],
-  "mappings": "AAAA;AAAA,EACE;AAAA,OAGK;AACP,SAAS,eAAe,iBAAiB;AACzC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAMK;AAmCP,MAAM,uBAAuB;AAE7B,MAAM,4CAA4C;AAC3C,MAAM,yBAAyB;AAS/B,MAAM,qBAAqB,CAAC,WACjC,OAAO,SAAS,MAAM,MAAM,SAAS,KAAK,OAAO,SAAS,MAAM,OAAO,SAAS;AAK3E,MAAM,6BAA6B,OACxC,WACoB;AACpB,MAAI,CAAC,mBAAmB,MAAM,GAAG;AAC/B,UAAMA,OAAM,MAAM,UAAU,cAAc,EAAE,GAAG,sBAAsB,OAAO,OAAO,MAAM,CAAC,CAAC;AAC3F,WAAO,OAAOA,KAAI,MAAM,GAAG,EAAE,CAAC;AAAA,EAChC;AACA,QAAM,MAAM,MAAM;AAAA,IAChB,cAAc;AAAA,MACZ,GAAG;AAAA,MACH,OAAO,OAAO;AAAA,MACd,OAAO,OAAO,SAAS;AAAA,MACvB,QAAQ,OAAO;AAAA,IACjB,CAAC;AAAA,EACH;AACA,SAAO,OAAO,IAAI,MAAM,GAAG,EAAE,CAAC,KAAK,yCAAyC;AAC9E;AAEA,MAAM,kBAAkB,CACtB,WAC2C;AAC3C,MAAI,UAAU,KAAM,QAAO;AAC3B,MAAI,kBAAkB,OAAQ,QAAO,EAAE,MAAM,OAAO,MAAM,OAAO,OAAO,MAAM;AAC9E,SAAO,EAAE,MAAM,QAAQ,OAAO,CAAC,EAAE;AACnC;AAIO,MAAM,0BAA0B,CACrC,MACA,aACoC;AACpC,QAAM,eAAe,oBAAI,IAAqC;AAC9D,aAAW,cAAc,CAAC,GAAI,KAAK,gBAAgB,CAAC,GAAI,GAAI,SAAS,gBAAgB,CAAC,CAAE,GAAG;AACzF,iBAAa,IAAI,WAAW,OAAO,UAAU;AAAA,EAC/C;AACA,SAAO;AAAA,IACL,cAAc,CAAC,GAAG,aAAa,OAAO,CAAC;AAAA,IACvC,WAAW,CAAC,GAAG,oBAAI,IAAI,CAAC,GAAI,KAAK,aAAa,CAAC,GAAI,GAAI,SAAS,aAAa,CAAC,CAAE,CAAC,CAAC;AAAA,IAClF,WAAW,SAAS,aAAa,KAAK,aAAa,wBAAwB;AAAA,IAC3E,eAAe,gBAAgB,SAAS,aAAa,KACnD,gBAAgB,KAAK,aAAa,KAAK,EAAE,MAAM,cAAc,UAAU,OAAO,CAAC,EAAE;AAAA,IACnF,KAAK,EAAE,GAAG,KAAK,KAAK,GAAG,SAAS,IAAI;AAAA,EACtC;AACF;AAEA,MAAM,cAAc,CAClB,SACA,aAC8B;AAC9B,QAAM,WAAW,uBAAuB,UAAU,QAAQ,cAAc;AACxE,MAAI,CAAC,SAAS,SAAS;AACrB,UAAM,IAAI;AAAA,MACR,wBAAwB,QAAQ,IAAI,KAAK,QAAQ,MAAM;AAAA,IACzD;AAAA,EACF;AACA,QAAM,WAAW,yBAAyB,UAAU,QAAQ,iBAAiB;AAC7E,MAAI,CAAC,SAAS,SAAS;AACrB,UAAM,IAAI;AAAA,MACR,wBAAwB,QAAQ,IAAI,KAAK,QAAQ,MAAM;AAAA,IACzD;AAAA,EACF;AACA,SAAO;AAAA,IACL,OAAO,QAAQ;AAAA,IACf,UAAU,SAAS;AAAA,IACnB,YAAY,wBAAwB,SAAS,MAAM,QAAQ;AAAA,IAC3D,OAAO;AAAA,MACL,SAAS,QAAQ;AAAA,MACjB,WAAW,QAAQ;AAAA,MACnB,MAAM,QAAQ;AAAA,MACd,OAAO,QAAQ;AAAA,MACf,QAAQ,QAAQ;AAAA,MAChB,kBAAkB,QAAQ;AAAA,IAC5B;AAAA,IACA,sBAAsB,QAAQ;AAAA,EAChC;AACF;AAEA,MAAM,YAAY,CAChB,OACA,cAC+B;AAAA,EAC/B;AAAA,EACA,UAAU,uBAAuB,MAAM,CAAC,CAAC;AAAA,EACzC,YAAY,wBAAwB,EAAE,WAAW,wBAAwB,UAAU,GAAG,QAAQ;AAAA,EAC9F,OAAO;AAAA,EACP,sBAAsB;AACxB;AAGO,MAAM,sBAAsB,OAAO,SAIA;AACxC,QAAM,EAAE,QAAQ,IAAI;AACpB,MAAI,WAAW,SAAS;AACtB,UAAM,UAAU,MAAM,KAAK,OAAO,IAAI;AAAA,MACpC,KAAK,QAAQ,MAAM;AAAA,MACnB,SAAS,QAAQ,MAAM;AAAA,IACzB,CAAC;AACD,QAAI,WAAW,MAAM;AACnB,YAAM,IAAI;AAAA,QACR,wBAAwB,QAAQ,MAAM,GAAG,IAAI,QAAQ,MAAM,OAAO;AAAA,MACpE;AAAA,IACF;AACA,WAAO,YAAY,SAAS,QAAQ,UAAU;AAAA,EAChD;AACA,MAAI,YAAY,SAAS;AACvB,WAAO;AAAA,MACL,OAAO,QAAQ,OAAO;AAAA,MACtB,UAAU,QAAQ,OAAO;AAAA,MACzB,YAAY;AAAA,QACV,EAAE,cAAc,QAAQ,OAAO,cAAc,WAAW,QAAQ,OAAO,UAAU;AAAA,QACjF,QAAQ;AAAA,MACV;AAAA,MACA,OAAO;AAAA,MACP,sBAAsB;AAAA,IACxB;AAAA,EACF;AACA,MAAI,WAAW,QAAS,QAAO,UAAU,QAAQ,OAAO,QAAQ,UAAU;AAC1E,QAAM,WAAW,MAAM,KAAK,OAAO,QAAQ;AAC3C,SAAO,YAAY,OACf,UAAU,KAAK,cAAc,QAAQ,UAAU,IAC/C,YAAY,UAAU,QAAQ,UAAU;AAC9C;",
-  "names": ["hex"]
-}

package/dist/modules/sandboxes/workspace-setup.d.mts

@@ -1,42 +0,0 @@
-import type { NetworkSandboxSessionIface, SandboxRepositoriesIface, SandboxRepositoryCloneSourceIface } from '@finalai/agent-provider/sandbox';
-import { type ComputerRepositoryIface, type ComputerTemplateIface } from "./environment.mjs";
-import type { SandboxTransportIface } from "./transport.mjs";
-export declare const WORKSPACE_ROOT = "/workspaces";
-export interface GuideCommandIface {
-    name: string;
-    path: string;
-    description: string | null;
-    cwd: string;
-    timeoutMs: number;
-}
-export declare const guideCommands: (template: ComputerTemplateIface) => Promise<GuideCommandIface[]>;
-export declare const GUIDE_COMMAND_PROTOCOL = "guide-command-v1";
-export declare const installGuideCommands: (args: {
-    sandbox: Pick<NetworkSandboxSessionIface, "run">;
-    template: ComputerTemplateIface;
-}) => Promise<void>;
-export type RepositoryCloneSourceIface = SandboxRepositoryCloneSourceIface;
-export interface SetupLogIface {
-    (message: string, fields?: Record<string, string | number | boolean | null>): void;
-}
-export declare const repositoryPath: (alias: string) => string;
-export declare const mountRepositories: (args: {
-    sandbox: NetworkSandboxSessionIface;
-    repositories: ComputerRepositoryIface[];
-    resolver: SandboxRepositoriesIface;
-    log: SetupLogIface;
-}) => Promise<void>;
-export declare const runWorkspaceSetup: (args: {
-    sandbox: NetworkSandboxSessionIface;
-    template: ComputerTemplateIface;
-    repositories: ComputerRepositoryIface[];
-    log: SetupLogIface;
-}) => Promise<string | null>;
-export declare const startServices: (args: {
-    sandbox: NetworkSandboxSessionIface;
-    transport: SandboxTransportIface;
-    template: ComputerTemplateIface;
-    env: Record<string, string>;
-    randomUuid: () => string;
-    log: SetupLogIface;
-}) => Promise<string[]>;

package/dist/modules/sandboxes/workspace-setup.mjs

@@ -1,242 +0,0 @@
-import { canonicalJson, sha256Hex } from "./bytes.mjs";
-import {
-  TemplateWhenMissing
-} from "./environment.mjs";
-import { shellQuote } from "./paths.mjs";
-const WORKSPACE_ROOT = "/workspaces";
-const SETUP_MARKER_ROOT = "/workspaces/.final/setup";
-const guideCommands = async (template) => {
-  const hash = await sha256Hex(canonicalJson(template.commands));
-  return Object.entries(template.commands).map(([name, command]) => ({
-    name,
-    path: `${WORKSPACE_ROOT}/.final/commands/${hash}/${name}`,
-    description: command.description,
-    cwd: stepCwd(command.cwd),
-    timeoutMs: command.timeoutMinutes * 6e4
-  }));
-};
-const GUIDE_COMMAND_PROTOCOL = "guide-command-v1";
-const INSTALL_GUIDE_COMMANDS_SCRIPT = `# ${GUIDE_COMMAND_PROTOCOL}
-import json, os, stat, sys, uuid
-p = json.load(sys.stdin)
-flags = os.O_RDONLY | os.O_DIRECTORY | os.O_NOFOLLOW
-root = os.open('/', flags)
-try:
-    for part in p['root'].split('/'):
-        if not part:
-            continue
-        if part in ('.', '..'):
-            raise ValueError('invalid command root')
-        try:
-            os.mkdir(part, dir_fd=root)
-        except FileExistsError:
-            pass
-        child = os.open(part, flags, dir_fd=root)
-        os.close(root)
-        root = child
-    for name, content in p['files'].items():
-        if '/' in name or name in ('.', '..'):
-            raise ValueError('invalid command name')
-        temporary = '.command-' + uuid.uuid4().hex
-        try:
-            fd = os.open(temporary, os.O_WRONLY | os.O_CREAT | os.O_EXCL | os.O_NOFOLLOW, 0o700, dir_fd=root)
-            with os.fdopen(fd, 'wb') as f:
-                f.write(content.encode('utf-8'))
-            try:
-                os.link(temporary, name, src_dir_fd=root, dst_dir_fd=root, follow_symlinks=False)
-            except FileExistsError:
-                fd = os.open(name, os.O_RDONLY | os.O_NOFOLLOW | os.O_NONBLOCK, dir_fd=root)
-                with os.fdopen(fd, 'rb') as f:
-                    if not stat.S_ISREG(os.fstat(f.fileno()).st_mode) or f.read(len(content.encode('utf-8')) + 1) != content.encode('utf-8'):
-                        raise ValueError('guide command differs from its pinned source')
-        finally:
-            os.unlink(temporary, dir_fd=root)
-finally:
-    os.close(root)
-`;
-const installGuideCommands = async (args) => {
-  const commands = await guideCommands(args.template);
-  const first = commands[0];
-  if (first == null) return;
-  const files = {};
-  for (const command of commands) {
-    const source = args.template.commands[command.name];
-    if (source == null) throw new Error("guide command source is missing");
-    const missingExit = source.whenMissing === TemplateWhenMissing.Fail ? 1 : 0;
-    files[command.name] = `#!/bin/bash
-set -eu
-if [ ! -d ${shellQuote(command.cwd)} ]; then
-  printf '%s\\n' ${shellQuote(`guide command ${command.name}: missing ${command.cwd}`)} >&2
-  exit ${missingExit}
-fi
-cd -- ${shellQuote(command.cwd)}
-exec timeout --signal=TERM --kill-after=10s ${source.timeoutMinutes * 60}s bash -c ${shellQuote(source.run)} ${shellQuote(command.name)} "$@"
-`;
-  }
-  const result = await args.sandbox.run({
-    command: "python3",
-    args: ["-c", INSTALL_GUIDE_COMMANDS_SCRIPT],
-    cwd: "/",
-    stdin: JSON.stringify({ root: first.path.slice(0, first.path.lastIndexOf("/")), files }),
-    timeoutMs: 6e4
-  });
-  if (result.exitCode !== 0)
-    throw new Error(`guide command installation failed: ${result.stderr.trim().slice(-2e3)}`);
-};
-const isGitUrl = (value) => /^(https?:\/\/|ssh:\/\/|git@)/.test(value);
-const repositoryPath = (alias) => `${WORKSPACE_ROOT}/${alias}`;
-const stepCwd = (cwd) => cwd === "." ? WORKSPACE_ROOT : repositoryPath(cwd);
-const runOrThrow = async (sandbox, label, options) => {
-  const result = await sandbox.run(options);
-  if (result.exitCode !== 0) {
-    throw new Error(
-      `${label} failed (exit ${result.exitCode}): ${result.stderr.trim().slice(-2e3)}`
-    );
-  }
-};
-const mountRepositories = async (args) => {
-  for (const repository of args.repositories) {
-    const destination = repositoryPath(repository.alias);
-    if (await args.sandbox.stat({ path: `${destination}/.git` }) != null) {
-      await runOrThrow(args.sandbox, `existing checkout ${repository.alias}`, {
-        command: `git -C ${shellQuote(destination)} rev-parse --verify HEAD`,
-        shell: true,
-        cwd: "/",
-        timeoutMs: 3e4
-      });
-      continue;
-    }
-    const source = await args.resolver.cloneSource({
-      repository: repository.repository,
-      ref: repository.ref
-    }) ?? (isGitUrl(repository.repository) ? { url: repository.repository, ref: repository.ref, authorization: null } : null);
-    if (source == null) {
-      throw new Error(
-        `repository ${repository.repository} (${repository.alias}) cannot be resolved to a clone source`
-      );
-    }
-    const env = source.authorization == null ? {} : {
-      GIT_CONFIG_COUNT: "1",
-      GIT_CONFIG_KEY_0: "http.extraHeader",
-      GIT_CONFIG_VALUE_0: `Authorization: ${source.authorization}`
-    };
-    const checkout = source.ref == null ? "" : ` && git -C ${shellQuote(destination)} checkout --quiet ${shellQuote(source.ref)}`;
-    args.log("computer_sandbox.repository_clone", { alias: repository.alias });
-    await runOrThrow(args.sandbox, `clone ${repository.alias}`, {
-      command: `set -eu; mkdir -p ${WORKSPACE_ROOT}; git clone --quiet -- ${shellQuote(source.url)} ${shellQuote(destination)}${checkout} && git -C ${shellQuote(destination)} rev-parse --verify HEAD`,
-      shell: true,
-      cwd: "/",
-      env: { GIT_TERMINAL_PROMPT: "0", ...env },
-      timeoutMs: 20 * 6e4
-    });
-  }
-};
-const aliasMissing = async (sandbox, cwd) => cwd !== "." && await sandbox.stat({ path: repositoryPath(cwd) }) == null;
-const runWorkspaceSetup = async (args) => {
-  const steps = args.template.workspace.setup;
-  if (steps.length === 0) return null;
-  const hash = (await sha256Hex(
-    canonicalJson({
-      steps,
-      repositories: args.repositories.map((repository) => [
-        repository.alias,
-        repository.repository,
-        repository.ref
-      ])
-    })
-  )).slice(0, 24);
-  const marker = `${SETUP_MARKER_ROOT}/${hash}`;
-  if (await args.sandbox.stat({ path: marker }) != null) return hash;
-  for (const [index, step] of steps.entries()) {
-    if (await aliasMissing(args.sandbox, step.cwd)) {
-      if (step.whenMissing === TemplateWhenMissing.Fail) {
-        throw new Error(
-          `workspace setup step ${index + 1} needs /workspaces/${step.cwd}, which is missing`
-        );
-      }
-      continue;
-    }
-    args.log("computer_sandbox.setup_step", { index });
-    try {
-      await runOrThrow(args.sandbox, `workspace setup step ${index + 1}`, {
-        command: `set -eu
-${step.run}`,
-        shell: true,
-        cwd: stepCwd(step.cwd),
-        timeoutMs: step.timeoutMinutes * 6e4
-      });
-    } catch (error) {
-      if (step.required) throw error;
-      args.log("computer_sandbox.setup_step_failed", { index, required: false });
-    }
-  }
-  await args.sandbox.writeTextFile({ path: marker, content: (/* @__PURE__ */ new Date()).toISOString() });
-  return hash;
-};
-const readyScript = (url, timeoutSeconds) => `
-end=$(( $(date +%s) + ${timeoutSeconds} ))
-while :; do
-  code=$(curl -s -o /dev/null -w '%{http_code}' ${shellQuote(url)} || true)
-  if [ "$code" -ge 200 ] 2>/dev/null && [ "$code" -lt 500 ]; then exit 0; fi
-  if [ "$(date +%s)" -ge "$end" ]; then exit 1; fi
-  sleep 2
-done`;
-const startServices = async (args) => {
-  const started = [];
-  for (const service of args.template.services) {
-    if (await aliasMissing(args.sandbox, service.cwd)) {
-      if (service.whenMissing === TemplateWhenMissing.Fail) {
-        throw new Error(
-          `service ${service.name} needs /workspaces/${service.cwd}, which is missing`
-        );
-      }
-      continue;
-    }
-    await args.transport.exec({
-      id: args.randomUuid(),
-      command: `exec bash -lc ${shellQuote(service.run)}`,
-      cwd: stepCwd(service.cwd),
-      env: args.env,
-      timeoutMs: null
-    });
-    started.push(service.name);
-    args.log("computer_sandbox.service_started", { service: service.name });
-  }
-  await Promise.all(
-    args.template.services.filter((service) => service.ready != null && started.includes(service.name)).map(async (service) => {
-      const ready = service.ready;
-      if (ready == null) return;
-      const result = await args.sandbox.run({
-        command: readyScript(ready.url, ready.timeoutSeconds),
-        shell: true,
-        cwd: "/",
-        timeoutMs: (ready.timeoutSeconds + 30) * 1e3
-      });
-      if (result.exitCode === 0) {
-        args.log("computer_sandbox.service_ready", { service: service.name });
-        return;
-      }
-      if (service.required) {
-        throw new Error(
-          `service ${service.name} was not ready at ${ready.url} within ${ready.timeoutSeconds} s`
-        );
-      }
-      args.log("computer_sandbox.service_ready_timeout", {
-        service: service.name,
-        required: false
-      });
-    })
-  );
-  return started;
-};
-export {
-  GUIDE_COMMAND_PROTOCOL,
-  WORKSPACE_ROOT,
-  guideCommands,
-  installGuideCommands,
-  mountRepositories,
-  repositoryPath,
-  runWorkspaceSetup,
-  startServices
-};
-//# sourceMappingURL=workspace-setup.mjs.map

package/dist/modules/sandboxes/workspace-setup.mjs.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../../src/sandboxes/workspace-setup.ts"],
-  "sourcesContent": ["import type {\n  NetworkSandboxSessionIface,\n  SandboxRepositoriesIface,\n  SandboxRepositoryCloneSourceIface,\n} from '@finalai/agent-provider/sandbox';\nimport { canonicalJson, sha256Hex } from \"./bytes.mjs\";\nimport {\n  TemplateWhenMissing,\n  type ComputerRepositoryIface,\n  type ComputerTemplateIface,\n} from \"./environment.mjs\";\nimport { shellQuote } from \"./paths.mjs\";\nimport type { SandboxTransportIface } from \"./transport.mjs\";\n\n// Start-time inputs: repositories, named commands, setup once per workspace and services.\n\nexport const WORKSPACE_ROOT = '/workspaces';\nconst SETUP_MARKER_ROOT = '/workspaces/.final/setup';\n\nexport interface GuideCommandIface {\n  name: string;\n  path: string;\n  description: string | null;\n  cwd: string;\n  timeoutMs: number;\n}\n\nexport const guideCommands = async (\n  template: ComputerTemplateIface,\n): Promise<GuideCommandIface[]> => {\n  const hash = await sha256Hex(canonicalJson(template.commands));\n  return Object.entries(template.commands).map(([name, command]) => ({\n    name,\n    path: `${WORKSPACE_ROOT}/.final/commands/${hash}/${name}`,\n    description: command.description,\n    cwd: stepCwd(command.cwd),\n    timeoutMs: command.timeoutMinutes * 60_000,\n  }));\n};\n\n// Pin directories and publish complete scripts without following workspace symlinks.\nexport const GUIDE_COMMAND_PROTOCOL = 'guide-command-v1';\nconst INSTALL_GUIDE_COMMANDS_SCRIPT = `# ${GUIDE_COMMAND_PROTOCOL}\nimport json, os, stat, sys, uuid\np = json.load(sys.stdin)\nflags = os.O_RDONLY | os.O_DIRECTORY | os.O_NOFOLLOW\nroot = os.open('/', flags)\ntry:\n    for part in p['root'].split('/'):\n        if not part:\n            continue\n        if part in ('.', '..'):\n            raise ValueError('invalid command root')\n        try:\n            os.mkdir(part, dir_fd=root)\n        except FileExistsError:\n            pass\n        child = os.open(part, flags, dir_fd=root)\n        os.close(root)\n        root = child\n    for name, content in p['files'].items():\n        if '/' in name or name in ('.', '..'):\n            raise ValueError('invalid command name')\n        temporary = '.command-' + uuid.uuid4().hex\n        try:\n            fd = os.open(temporary, os.O_WRONLY | os.O_CREAT | os.O_EXCL | os.O_NOFOLLOW, 0o700, dir_fd=root)\n            with os.fdopen(fd, 'wb') as f:\n                f.write(content.encode('utf-8'))\n            try:\n                os.link(temporary, name, src_dir_fd=root, dst_dir_fd=root, follow_symlinks=False)\n            except FileExistsError:\n                fd = os.open(name, os.O_RDONLY | os.O_NOFOLLOW | os.O_NONBLOCK, dir_fd=root)\n                with os.fdopen(fd, 'rb') as f:\n                    if not stat.S_ISREG(os.fstat(f.fileno()).st_mode) or f.read(len(content.encode('utf-8')) + 1) != content.encode('utf-8'):\n                        raise ValueError('guide command differs from its pinned source')\n        finally:\n            os.unlink(temporary, dir_fd=root)\nfinally:\n    os.close(root)\n`;\n\nexport const installGuideCommands = async (args: {\n  sandbox: Pick<NetworkSandboxSessionIface, 'run'>;\n  template: ComputerTemplateIface;\n}): Promise<void> => {\n  const commands = await guideCommands(args.template);\n  const first = commands[0];\n  if (first == null) return;\n  const files: Record<string, string> = {};\n  for (const command of commands) {\n    const source = args.template.commands[command.name];\n    if (source == null) throw new Error('guide command source is missing');\n    const missingExit = source.whenMissing === TemplateWhenMissing.Fail ? 1 : 0;\n    files[command.name] =\n      `#!/bin/bash\\nset -eu\\nif [ ! -d ${shellQuote(command.cwd)} ]; then\\n  printf '%s\\\\n' ${shellQuote(`guide command ${command.name}: missing ${command.cwd}`)} >&2\\n  exit ${missingExit}\\nfi\\ncd -- ${shellQuote(command.cwd)}\\nexec timeout --signal=TERM --kill-after=10s ${source.timeoutMinutes * 60}s bash -c ${shellQuote(source.run)} ${shellQuote(command.name)} \"$@\"\\n`;\n  }\n  const result = await args.sandbox.run({\n    command: 'python3',\n    args: ['-c', INSTALL_GUIDE_COMMANDS_SCRIPT],\n    cwd: '/',\n    stdin: JSON.stringify({ root: first.path.slice(0, first.path.lastIndexOf('/')), files }),\n    timeoutMs: 60_000,\n  });\n  if (result.exitCode !== 0)\n    throw new Error(`guide command installation failed: ${result.stderr.trim().slice(-2000)}`);\n};\n\nexport type RepositoryCloneSourceIface = SandboxRepositoryCloneSourceIface;\n\nexport interface SetupLogIface {\n  (message: string, fields?: Record<string, string | number | boolean | null>): void;\n}\n\nconst isGitUrl = (value: string): boolean => /^(https?:\\/\\/|ssh:\\/\\/|git@)/.test(value);\n\nexport const repositoryPath = (alias: string): string => `${WORKSPACE_ROOT}/${alias}`;\n\nconst stepCwd = (cwd: string): string => (cwd === '.' ? WORKSPACE_ROOT : repositoryPath(cwd));\n\nconst runOrThrow = async (\n  sandbox: Pick<NetworkSandboxSessionIface, 'run'>,\n  label: string,\n  options: Parameters<NetworkSandboxSessionIface['run']>[0],\n): Promise<void> => {\n  const result = await sandbox.run(options);\n  if (result.exitCode !== 0) {\n    throw new Error(\n      `${label} failed (exit ${result.exitCode}): ${result.stderr.trim().slice(-2000)}`,\n    );\n  }\n};\n\nexport const mountRepositories = async (args: {\n  sandbox: NetworkSandboxSessionIface;\n  repositories: ComputerRepositoryIface[];\n  // The contract's repository credentials (the start context's `repositories`).\n  resolver: SandboxRepositoriesIface;\n  log: SetupLogIface;\n}): Promise<void> => {\n  for (const repository of args.repositories) {\n    const destination = repositoryPath(repository.alias);\n    if ((await args.sandbox.stat({ path: `${destination}/.git` })) != null) {\n      await runOrThrow(args.sandbox, `existing checkout ${repository.alias}`, {\n        command: `git -C ${shellQuote(destination)} rev-parse --verify HEAD`,\n        shell: true,\n        cwd: '/',\n        timeoutMs: 30_000,\n      });\n      continue;\n    }\n    const source =\n      (await args.resolver.cloneSource({\n        repository: repository.repository,\n        ref: repository.ref,\n      })) ??\n      (isGitUrl(repository.repository)\n        ? { url: repository.repository, ref: repository.ref, authorization: null }\n        : null);\n    if (source == null) {\n      throw new Error(\n        `repository ${repository.repository} (${repository.alias}) cannot be resolved to a clone source`,\n      );\n    }\n    // GIT_CONFIG_* applies the header for this process only.\n    const env: Record<string, string> =\n      source.authorization == null\n        ? {}\n        : {\n            GIT_CONFIG_COUNT: '1',\n            GIT_CONFIG_KEY_0: 'http.extraHeader',\n            GIT_CONFIG_VALUE_0: `Authorization: ${source.authorization}`,\n          };\n    const checkout =\n      source.ref == null\n        ? ''\n        : ` && git -C ${shellQuote(destination)} checkout --quiet ${shellQuote(source.ref)}`;\n    args.log('computer_sandbox.repository_clone', { alias: repository.alias });\n    await runOrThrow(args.sandbox, `clone ${repository.alias}`, {\n      command: `set -eu; mkdir -p ${WORKSPACE_ROOT}; git clone --quiet -- ${shellQuote(source.url)} ${shellQuote(destination)}${checkout} && git -C ${shellQuote(destination)} rev-parse --verify HEAD`,\n      shell: true,\n      cwd: '/',\n      env: { GIT_TERMINAL_PROMPT: '0', ...env },\n      timeoutMs: 20 * 60_000,\n    });\n  }\n};\n\nconst aliasMissing = async (sandbox: NetworkSandboxSessionIface, cwd: string): Promise<boolean> =>\n  cwd !== '.' && (await sandbox.stat({ path: repositoryPath(cwd) })) == null;\n\nexport const runWorkspaceSetup = async (args: {\n  sandbox: NetworkSandboxSessionIface;\n  template: ComputerTemplateIface;\n  repositories: ComputerRepositoryIface[];\n  log: SetupLogIface;\n}): Promise<string | null> => {\n  const steps = args.template.workspace.setup;\n  if (steps.length === 0) return null;\n  const hash = (\n    await sha256Hex(\n      canonicalJson({\n        steps,\n        repositories: args.repositories.map((repository) => [\n          repository.alias,\n          repository.repository,\n          repository.ref,\n        ]),\n      }),\n    )\n  ).slice(0, 24);\n  const marker = `${SETUP_MARKER_ROOT}/${hash}`;\n  if ((await args.sandbox.stat({ path: marker })) != null) return hash;\n  for (const [index, step] of steps.entries()) {\n    if (await aliasMissing(args.sandbox, step.cwd)) {\n      if (step.whenMissing === TemplateWhenMissing.Fail) {\n        throw new Error(\n          `workspace setup step ${index + 1} needs /workspaces/${step.cwd}, which is missing`,\n        );\n      }\n      continue;\n    }\n    args.log('computer_sandbox.setup_step', { index });\n    try {\n      await runOrThrow(args.sandbox, `workspace setup step ${index + 1}`, {\n        command: `set -eu\\n${step.run}`,\n        shell: true,\n        cwd: stepCwd(step.cwd),\n        timeoutMs: step.timeoutMinutes * 60_000,\n      });\n    } catch (error) {\n      if (step.required) throw error;\n      args.log('computer_sandbox.setup_step_failed', { index, required: false });\n    }\n  }\n  await args.sandbox.writeTextFile({ path: marker, content: new Date().toISOString() });\n  return hash;\n};\n\nconst readyScript = (url: string, timeoutSeconds: number): string => `\nend=$(( $(date +%s) + ${timeoutSeconds} ))\nwhile :; do\n  code=$(curl -s -o /dev/null -w '%{http_code}' ${shellQuote(url)} || true)\n  if [ \"$code\" -ge 200 ] 2>/dev/null && [ \"$code\" -lt 500 ]; then exit 0; fi\n  if [ \"$(date +%s)\" -ge \"$end\" ]; then exit 1; fi\n  sleep 2\ndone`;\n\n// Starts each service as a managed process (not followed, so nothing polls its\n// output) and waits for the required ones to answer their ready check.\nexport const startServices = async (args: {\n  sandbox: NetworkSandboxSessionIface;\n  transport: SandboxTransportIface;\n  template: ComputerTemplateIface;\n  env: Record<string, string>;\n  randomUuid: () => string;\n  log: SetupLogIface;\n}): Promise<string[]> => {\n  const started: string[] = [];\n  for (const service of args.template.services) {\n    if (await aliasMissing(args.sandbox, service.cwd)) {\n      if (service.whenMissing === TemplateWhenMissing.Fail) {\n        throw new Error(\n          `service ${service.name} needs /workspaces/${service.cwd}, which is missing`,\n        );\n      }\n      continue;\n    }\n    await args.transport.exec({\n      id: args.randomUuid(),\n      command: `exec bash -lc ${shellQuote(service.run)}`,\n      cwd: stepCwd(service.cwd),\n      env: args.env,\n      timeoutMs: null,\n    });\n    started.push(service.name);\n    args.log('computer_sandbox.service_started', { service: service.name });\n  }\n  await Promise.all(\n    args.template.services\n      .filter((service) => service.ready != null && started.includes(service.name))\n      .map(async (service) => {\n        const ready = service.ready;\n        if (ready == null) return;\n        const result = await args.sandbox.run({\n          command: readyScript(ready.url, ready.timeoutSeconds),\n          shell: true,\n          cwd: '/',\n          timeoutMs: (ready.timeoutSeconds + 30) * 1000,\n        });\n        if (result.exitCode === 0) {\n          args.log('computer_sandbox.service_ready', { service: service.name });\n          return;\n        }\n        if (service.required) {\n          throw new Error(\n            `service ${service.name} was not ready at ${ready.url} within ${ready.timeoutSeconds} s`,\n          );\n        }\n        args.log('computer_sandbox.service_ready_timeout', {\n          service: service.name,\n          required: false,\n        });\n      }),\n  );\n  return started;\n};\n"],
-  "mappings": "AAKA,SAAS,eAAe,iBAAiB;AACzC;AAAA,EACE;AAAA,OAGK;AACP,SAAS,kBAAkB;AAKpB,MAAM,iBAAiB;AAC9B,MAAM,oBAAoB;AAUnB,MAAM,gBAAgB,OAC3B,aACiC;AACjC,QAAM,OAAO,MAAM,UAAU,cAAc,SAAS,QAAQ,CAAC;AAC7D,SAAO,OAAO,QAAQ,SAAS,QAAQ,EAAE,IAAI,CAAC,CAAC,MAAM,OAAO,OAAO;AAAA,IACjE;AAAA,IACA,MAAM,GAAG,cAAc,oBAAoB,IAAI,IAAI,IAAI;AAAA,IACvD,aAAa,QAAQ;AAAA,IACrB,KAAK,QAAQ,QAAQ,GAAG;AAAA,IACxB,WAAW,QAAQ,iBAAiB;AAAA,EACtC,EAAE;AACJ;AAGO,MAAM,yBAAyB;AACtC,MAAM,gCAAgC,KAAK,sBAAsB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAuC1D,MAAM,uBAAuB,OAAO,SAGtB;AACnB,QAAM,WAAW,MAAM,cAAc,KAAK,QAAQ;AAClD,QAAM,QAAQ,SAAS,CAAC;AACxB,MAAI,SAAS,KAAM;AACnB,QAAM,QAAgC,CAAC;AACvC,aAAW,WAAW,UAAU;AAC9B,UAAM,SAAS,KAAK,SAAS,SAAS,QAAQ,IAAI;AAClD,QAAI,UAAU,KAAM,OAAM,IAAI,MAAM,iCAAiC;AACrE,UAAM,cAAc,OAAO,gBAAgB,oBAAoB,OAAO,IAAI;AAC1E,UAAM,QAAQ,IAAI,IAChB;AAAA;AAAA,YAAmC,WAAW,QAAQ,GAAG,CAAC;AAAA,mBAA8B,WAAW,iBAAiB,QAAQ,IAAI,aAAa,QAAQ,GAAG,EAAE,CAAC;AAAA,SAAgB,WAAW;AAAA;AAAA,QAAe,WAAW,QAAQ,GAAG,CAAC;AAAA,8CAAiD,OAAO,iBAAiB,EAAE,aAAa,WAAW,OAAO,GAAG,CAAC,IAAI,WAAW,QAAQ,IAAI,CAAC;AAAA;AAAA,EAC1W;AACA,QAAM,SAAS,MAAM,KAAK,QAAQ,IAAI;AAAA,IACpC,SAAS;AAAA,IACT,MAAM,CAAC,MAAM,6BAA6B;AAAA,IAC1C,KAAK;AAAA,IACL,OAAO,KAAK,UAAU,EAAE,MAAM,MAAM,KAAK,MAAM,GAAG,MAAM,KAAK,YAAY,GAAG,CAAC,GAAG,MAAM,CAAC;AAAA,IACvF,WAAW;AAAA,EACb,CAAC;AACD,MAAI,OAAO,aAAa;AACtB,UAAM,IAAI,MAAM,sCAAsC,OAAO,OAAO,KAAK,EAAE,MAAM,IAAK,CAAC,EAAE;AAC7F;AAQA,MAAM,WAAW,CAAC,UAA2B,+BAA+B,KAAK,KAAK;AAE/E,MAAM,iBAAiB,CAAC,UAA0B,GAAG,cAAc,IAAI,KAAK;AAEnF,MAAM,UAAU,CAAC,QAAyB,QAAQ,MAAM,iBAAiB,eAAe,GAAG;AAE3F,MAAM,aAAa,OACjB,SACA,OACA,YACkB;AAClB,QAAM,SAAS,MAAM,QAAQ,IAAI,OAAO;AACxC,MAAI,OAAO,aAAa,GAAG;AACzB,UAAM,IAAI;AAAA,MACR,GAAG,KAAK,iBAAiB,OAAO,QAAQ,MAAM,OAAO,OAAO,KAAK,EAAE,MAAM,IAAK,CAAC;AAAA,IACjF;AAAA,EACF;AACF;AAEO,MAAM,oBAAoB,OAAO,SAMnB;AACnB,aAAW,cAAc,KAAK,cAAc;AAC1C,UAAM,cAAc,eAAe,WAAW,KAAK;AACnD,QAAK,MAAM,KAAK,QAAQ,KAAK,EAAE,MAAM,GAAG,WAAW,QAAQ,CAAC,KAAM,MAAM;AACtE,YAAM,WAAW,KAAK,SAAS,qBAAqB,WAAW,KAAK,IAAI;AAAA,QACtE,SAAS,UAAU,WAAW,WAAW,CAAC;AAAA,QAC1C,OAAO;AAAA,QACP,KAAK;AAAA,QACL,WAAW;AAAA,MACb,CAAC;AACD;AAAA,IACF;AACA,UAAM,SACH,MAAM,KAAK,SAAS,YAAY;AAAA,MAC/B,YAAY,WAAW;AAAA,MACvB,KAAK,WAAW;AAAA,IAClB,CAAC,MACA,SAAS,WAAW,UAAU,IAC3B,EAAE,KAAK,WAAW,YAAY,KAAK,WAAW,KAAK,eAAe,KAAK,IACvE;AACN,QAAI,UAAU,MAAM;AAClB,YAAM,IAAI;AAAA,QACR,cAAc,WAAW,UAAU,KAAK,WAAW,KAAK;AAAA,MAC1D;AAAA,IACF;AAEA,UAAM,MACJ,OAAO,iBAAiB,OACpB,CAAC,IACD;AAAA,MACE,kBAAkB;AAAA,MAClB,kBAAkB;AAAA,MAClB,oBAAoB,kBAAkB,OAAO,aAAa;AAAA,IAC5D;AACN,UAAM,WACJ,OAAO,OAAO,OACV,KACA,cAAc,WAAW,WAAW,CAAC,qBAAqB,WAAW,OAAO,GAAG,CAAC;AACtF,SAAK,IAAI,qCAAqC,EAAE,OAAO,WAAW,MAAM,CAAC;AACzE,UAAM,WAAW,KAAK,SAAS,SAAS,WAAW,KAAK,IAAI;AAAA,MAC1D,SAAS,qBAAqB,cAAc,0BAA0B,WAAW,OAAO,GAAG,CAAC,IAAI,WAAW,WAAW,CAAC,GAAG,QAAQ,cAAc,WAAW,WAAW,CAAC;AAAA,MACvK,OAAO;AAAA,MACP,KAAK;AAAA,MACL,KAAK,EAAE,qBAAqB,KAAK,GAAG,IAAI;AAAA,MACxC,WAAW,KAAK;AAAA,IAClB,CAAC;AAAA,EACH;AACF;AAEA,MAAM,eAAe,OAAO,SAAqC,QAC/D,QAAQ,OAAQ,MAAM,QAAQ,KAAK,EAAE,MAAM,eAAe,GAAG,EAAE,CAAC,KAAM;AAEjE,MAAM,oBAAoB,OAAO,SAKV;AAC5B,QAAM,QAAQ,KAAK,SAAS,UAAU;AACtC,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,QAAM,QACJ,MAAM;AAAA,IACJ,cAAc;AAAA,MACZ;AAAA,MACA,cAAc,KAAK,aAAa,IAAI,CAAC,eAAe;AAAA,QAClD,WAAW;AAAA,QACX,WAAW;AAAA,QACX,WAAW;AAAA,MACb,CAAC;AAAA,IACH,CAAC;AAAA,EACH,GACA,MAAM,GAAG,EAAE;AACb,QAAM,SAAS,GAAG,iBAAiB,IAAI,IAAI;AAC3C,MAAK,MAAM,KAAK,QAAQ,KAAK,EAAE,MAAM,OAAO,CAAC,KAAM,KAAM,QAAO;AAChE,aAAW,CAAC,OAAO,IAAI,KAAK,MAAM,QAAQ,GAAG;AAC3C,QAAI,MAAM,aAAa,KAAK,SAAS,KAAK,GAAG,GAAG;AAC9C,UAAI,KAAK,gBAAgB,oBAAoB,MAAM;AACjD,cAAM,IAAI;AAAA,UACR,wBAAwB,QAAQ,CAAC,sBAAsB,KAAK,GAAG;AAAA,QACjE;AAAA,MACF;AACA;AAAA,IACF;AACA,SAAK,IAAI,+BAA+B,EAAE,MAAM,CAAC;AACjD,QAAI;AACF,YAAM,WAAW,KAAK,SAAS,wBAAwB,QAAQ,CAAC,IAAI;AAAA,QAClE,SAAS;AAAA,EAAY,KAAK,GAAG;AAAA,QAC7B,OAAO;AAAA,QACP,KAAK,QAAQ,KAAK,GAAG;AAAA,QACrB,WAAW,KAAK,iBAAiB;AAAA,MACnC,CAAC;AAAA,IACH,SAAS,OAAO;AACd,UAAI,KAAK,SAAU,OAAM;AACzB,WAAK,IAAI,sCAAsC,EAAE,OAAO,UAAU,MAAM,CAAC;AAAA,IAC3E;AAAA,EACF;AACA,QAAM,KAAK,QAAQ,cAAc,EAAE,MAAM,QAAQ,UAAS,oBAAI,KAAK,GAAE,YAAY,EAAE,CAAC;AACpF,SAAO;AACT;AAEA,MAAM,cAAc,CAAC,KAAa,mBAAmC;AAAA,wBAC7C,cAAc;AAAA;AAAA,kDAEY,WAAW,GAAG,CAAC;AAAA;AAAA;AAAA;AAAA;AAQ1D,MAAM,gBAAgB,OAAO,SAOX;AACvB,QAAM,UAAoB,CAAC;AAC3B,aAAW,WAAW,KAAK,SAAS,UAAU;AAC5C,QAAI,MAAM,aAAa,KAAK,SAAS,QAAQ,GAAG,GAAG;AACjD,UAAI,QAAQ,gBAAgB,oBAAoB,MAAM;AACpD,cAAM,IAAI;AAAA,UACR,WAAW,QAAQ,IAAI,sBAAsB,QAAQ,GAAG;AAAA,QAC1D;AAAA,MACF;AACA;AAAA,IACF;AACA,UAAM,KAAK,UAAU,KAAK;AAAA,MACxB,IAAI,KAAK,WAAW;AAAA,MACpB,SAAS,iBAAiB,WAAW,QAAQ,GAAG,CAAC;AAAA,MACjD,KAAK,QAAQ,QAAQ,GAAG;AAAA,MACxB,KAAK,KAAK;AAAA,MACV,WAAW;AAAA,IACb,CAAC;AACD,YAAQ,KAAK,QAAQ,IAAI;AACzB,SAAK,IAAI,oCAAoC,EAAE,SAAS,QAAQ,KAAK,CAAC;AAAA,EACxE;AACA,QAAM,QAAQ;AAAA,IACZ,KAAK,SAAS,SACX,OAAO,CAAC,YAAY,QAAQ,SAAS,QAAQ,QAAQ,SAAS,QAAQ,IAAI,CAAC,EAC3E,IAAI,OAAO,YAAY;AACtB,YAAM,QAAQ,QAAQ;AACtB,UAAI,SAAS,KAAM;AACnB,YAAM,SAAS,MAAM,KAAK,QAAQ,IAAI;AAAA,QACpC,SAAS,YAAY,MAAM,KAAK,MAAM,cAAc;AAAA,QACpD,OAAO;AAAA,QACP,KAAK;AAAA,QACL,YAAY,MAAM,iBAAiB,MAAM;AAAA,MAC3C,CAAC;AACD,UAAI,OAAO,aAAa,GAAG;AACzB,aAAK,IAAI,kCAAkC,EAAE,SAAS,QAAQ,KAAK,CAAC;AACpE;AAAA,MACF;AACA,UAAI,QAAQ,UAAU;AACpB,cAAM,IAAI;AAAA,UACR,WAAW,QAAQ,IAAI,qBAAqB,MAAM,GAAG,WAAW,MAAM,cAAc;AAAA,QACtF;AAAA,MACF;AACA,WAAK,IAAI,0CAA0C;AAAA,QACjD,SAAS,QAAQ;AAAA,QACjB,UAAU;AAAA,MACZ,CAAC;AAAA,IACH,CAAC;AAAA,EACL;AACA,SAAO;AACT;",
-  "names": []
-}

package/dist/modules/testing/harness.d.mts

@@ -1,9 +0,0 @@
-import { type OpenHarnessSessionArgsIface, type ResolvedAgentManifestIface, type SandboxTargetEndpointIface } from '@finalai/agent-provider';
-export declare const SESSION_ID = "0192f7a0-0000-7000-8000-000000000001";
-export declare const HARNESS_SESSION_ID = "0192f7a0-0000-7000-8000-0000000000aa";
-export declare const EXPIRES_AT = "2026-10-10T00:15:00.000Z";
-export declare const computerEndpoint: SandboxTargetEndpointIface;
-export declare const deviceEndpoint: SandboxTargetEndpointIface;
-export declare const resolvedManifest: () => ResolvedAgentManifestIface;
-export declare const openArgs: (config: unknown, secrets?: Record<string, string>) => OpenHarnessSessionArgsIface;
-export declare const idSequence: (prefix: string) => (() => string);

package/dist/modules/testing/harness.mjs

@@ -1,123 +0,0 @@
-import {
-  BaseCapability,
-  CredentialRoute,
-  credentials,
-  jsonObjectSchema,
-  MANIFEST_VERSION,
-  packageRef,
-  ToolApproval
-} from "@finalai/agent-provider";
-const SESSION_ID = "0192f7a0-0000-7000-8000-000000000001";
-const HARNESS_SESSION_ID = "0192f7a0-0000-7000-8000-0000000000aa";
-const EXPIRES_AT = "2026-10-10T00:15:00.000Z";
-const computerEndpoint = {
-  target: "computer",
-  bindingId: "0192f7a0-0000-7000-8000-0000000000c1",
-  capabilities: ["shell", "files", "process"],
-  rpc: { url: "wss://agent-session.test/sandboxes/b/c1", token: "rpc-c1", expiresAt: EXPIRES_AT },
-  mcp: {
-    url: "https://agent-session.test/sandboxes/b/c1/mcp",
-    token: "mcp-c1",
-    expiresAt: EXPIRES_AT
-  }
-};
-const deviceEndpoint = {
-  target: "device",
-  bindingId: "0192f7a0-0000-7000-8000-0000000000d1",
-  capabilities: ["computerUse"],
-  rpc: null,
-  mcp: {
-    url: "https://agent-session.test/sandboxes/b/d1/mcp",
-    token: "mcp-d1",
-    expiresAt: EXPIRES_AT
-  }
-};
-const resolvedManifest = () => ({
-  version: MANIFEST_VERSION,
-  identity: { name: "Release Scout", description: null },
-  harness: {
-    harness: packageRef("@finalai/final-agent-provider/harnesses/serverless-pi"),
-    config: {}
-  },
-  mcpServers: [],
-  sandboxes: {},
-  tools: {
-    base: {
-      shell: { target: "computer" },
-      files: { target: "computer" },
-      computerUse: { target: "device" }
-    }
-  },
-  secrets: [],
-  toolPolicy: {
-    shell: ToolApproval.Ask,
-    "files.write": ToolApproval.Ask,
-    create_issue: ToolApproval.Allow
-  },
-  channels: [],
-  hooks: [],
-  schedules: [],
-  bundle: null
-});
-const openArgs = (config, secrets = {}) => ({
-  harnessSessionId: "0192f7a0-0000-7000-8000-0000000000a1",
-  session: {
-    sessionId: SESSION_ID,
-    organizationId: "0192f7a0-0000-7000-8000-0000000000o1",
-    definitionId: "0192f7a0-0000-7000-8000-0000000000e1",
-    revisionId: "0192f7a0-0000-7000-8000-0000000000r1",
-    sessionServiceUrl: "https://agent-session.test"
-  },
-  config: {
-    credentials: credentials.chain({
-      payer: "organization",
-      tryInOrder: [credentials.apiKey({ owner: "organization" }), credentials.platform()]
-    }),
-    ...jsonObjectSchema.parse(config)
-  },
-  manifest: resolvedManifest(),
-  mcpServers: [],
-  baseTools: {
-    [BaseCapability.Shell]: computerEndpoint,
-    [BaseCapability.Files]: computerEndpoint,
-    [BaseCapability.ComputerUse]: deviceEndpoint
-  },
-  sandboxes: { computer: computerEndpoint, device: deviceEndpoint },
-  credentials: {
-    brokerUrl: "https://credentials.example.com/provider",
-    grants: [
-      { route: CredentialRoute.Model, token: "grant-model", expiresAt: EXPIRES_AT },
-      { route: CredentialRoute.Mcp, token: "grant-mcp", expiresAt: EXPIRES_AT }
-    ],
-    atOpen: null,
-    refresh: {
-      url: "https://credentials.example.com/provider/refresh",
-      token: "grant-model",
-      harnessSessionId: "0192f7a0-0000-7000-8000-0000000000a1",
-      expiresAt: EXPIRES_AT
-    }
-  },
-  secrets: { get: async (name) => secrets[name] ?? null },
-  trace: {
-    traceparent: "00-0af7651916cd43dd8448eb211c80319c-b7ad6b7169203331-01",
-    tracestate: null
-  }
-});
-const idSequence = (prefix) => {
-  let next = 0;
-  return () => {
-    next += 1;
-    return `${prefix}-7000-8000-${String(next).padStart(12, "0")}`;
-  };
-};
-export {
-  EXPIRES_AT,
-  HARNESS_SESSION_ID,
-  SESSION_ID,
-  computerEndpoint,
-  deviceEndpoint,
-  idSequence,
-  openArgs,
-  resolvedManifest
-};
-//# sourceMappingURL=harness.mjs.map

package/dist/modules/testing/harness.mjs.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../../src/testing/harness.ts"],
-  "sourcesContent": ["import {\n  BaseCapability,\n  CredentialRoute,\n  credentials,\n  jsonObjectSchema,\n  MANIFEST_VERSION,\n  packageRef,\n  ToolApproval,\n  type OpenHarnessSessionArgsIface,\n  type ResolvedAgentManifestIface,\n  type SandboxTargetEndpointIface,\n} from '@finalai/agent-provider';\n\n// Shared fixtures for the harness tests (no module mocks: fakes go in through\n// each factory's fetch/now/newId seams).\n\nexport const SESSION_ID = '0192f7a0-0000-7000-8000-000000000001';\nexport const HARNESS_SESSION_ID = '0192f7a0-0000-7000-8000-0000000000aa';\nexport const EXPIRES_AT = '2026-10-10T00:15:00.000Z';\n\nexport const computerEndpoint: SandboxTargetEndpointIface = {\n  target: 'computer',\n  bindingId: '0192f7a0-0000-7000-8000-0000000000c1',\n  capabilities: ['shell', 'files', 'process'],\n  rpc: { url: 'wss://agent-session.test/sandboxes/b/c1', token: 'rpc-c1', expiresAt: EXPIRES_AT },\n  mcp: {\n    url: 'https://agent-session.test/sandboxes/b/c1/mcp',\n    token: 'mcp-c1',\n    expiresAt: EXPIRES_AT,\n  },\n};\n\nexport const deviceEndpoint: SandboxTargetEndpointIface = {\n  target: 'device',\n  bindingId: '0192f7a0-0000-7000-8000-0000000000d1',\n  capabilities: ['computerUse'],\n  rpc: null,\n  mcp: {\n    url: 'https://agent-session.test/sandboxes/b/d1/mcp',\n    token: 'mcp-d1',\n    expiresAt: EXPIRES_AT,\n  },\n};\n\nexport const resolvedManifest = (): ResolvedAgentManifestIface => ({\n  version: MANIFEST_VERSION,\n  identity: { name: 'Release Scout', description: null },\n  harness: {\n    harness: packageRef('@finalai/final-agent-provider/harnesses/serverless-pi'),\n    config: {},\n  },\n  mcpServers: [],\n  sandboxes: {},\n  tools: {\n    base: {\n      shell: { target: 'computer' },\n      files: { target: 'computer' },\n      computerUse: { target: 'device' },\n    },\n  },\n  secrets: [],\n  toolPolicy: {\n    shell: ToolApproval.Ask,\n    'files.write': ToolApproval.Ask,\n    create_issue: ToolApproval.Allow,\n  },\n  channels: [],\n  hooks: [],\n  schedules: [],\n  bundle: null,\n});\n\nexport const openArgs = (\n  config: unknown,\n  secrets: Record<string, string> = {},\n): OpenHarnessSessionArgsIface => ({\n  harnessSessionId: '0192f7a0-0000-7000-8000-0000000000a1',\n  session: {\n    sessionId: SESSION_ID,\n    organizationId: '0192f7a0-0000-7000-8000-0000000000o1',\n    definitionId: '0192f7a0-0000-7000-8000-0000000000e1',\n    revisionId: '0192f7a0-0000-7000-8000-0000000000r1',\n    sessionServiceUrl: 'https://agent-session.test',\n  },\n  config: {\n    credentials: credentials.chain({\n      payer: 'organization',\n      tryInOrder: [credentials.apiKey({ owner: 'organization' }), credentials.platform()],\n    }),\n    ...jsonObjectSchema.parse(config),\n  },\n  manifest: resolvedManifest(),\n  mcpServers: [],\n  baseTools: {\n    [BaseCapability.Shell]: computerEndpoint,\n    [BaseCapability.Files]: computerEndpoint,\n    [BaseCapability.ComputerUse]: deviceEndpoint,\n  },\n  sandboxes: { computer: computerEndpoint, device: deviceEndpoint },\n  credentials: {\n    brokerUrl: 'https://credentials.example.com/provider',\n    grants: [\n      { route: CredentialRoute.Model, token: 'grant-model', expiresAt: EXPIRES_AT },\n      { route: CredentialRoute.Mcp, token: 'grant-mcp', expiresAt: EXPIRES_AT },\n    ],\n    atOpen: null,\n    refresh: {\n      url: 'https://credentials.example.com/provider/refresh',\n      token: 'grant-model',\n      harnessSessionId: '0192f7a0-0000-7000-8000-0000000000a1',\n      expiresAt: EXPIRES_AT,\n    },\n  },\n  secrets: { get: async (name) => secrets[name] ?? null },\n  trace: {\n    traceparent: '00-0af7651916cd43dd8448eb211c80319c-b7ad6b7169203331-01',\n    tracestate: null,\n  },\n});\n\n// Monotonic ids so assertions can name them.\nexport const idSequence = (prefix: string): (() => string) => {\n  let next = 0;\n  return () => {\n    next += 1;\n    return `${prefix}-7000-8000-${String(next).padStart(12, '0')}`;\n  };\n};\n"],
-  "mappings": "AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAIK;AAKA,MAAM,aAAa;AACnB,MAAM,qBAAqB;AAC3B,MAAM,aAAa;AAEnB,MAAM,mBAA+C;AAAA,EAC1D,QAAQ;AAAA,EACR,WAAW;AAAA,EACX,cAAc,CAAC,SAAS,SAAS,SAAS;AAAA,EAC1C,KAAK,EAAE,KAAK,2CAA2C,OAAO,UAAU,WAAW,WAAW;AAAA,EAC9F,KAAK;AAAA,IACH,KAAK;AAAA,IACL,OAAO;AAAA,IACP,WAAW;AAAA,EACb;AACF;AAEO,MAAM,iBAA6C;AAAA,EACxD,QAAQ;AAAA,EACR,WAAW;AAAA,EACX,cAAc,CAAC,aAAa;AAAA,EAC5B,KAAK;AAAA,EACL,KAAK;AAAA,IACH,KAAK;AAAA,IACL,OAAO;AAAA,IACP,WAAW;AAAA,EACb;AACF;AAEO,MAAM,mBAAmB,OAAmC;AAAA,EACjE,SAAS;AAAA,EACT,UAAU,EAAE,MAAM,iBAAiB,aAAa,KAAK;AAAA,EACrD,SAAS;AAAA,IACP,SAAS,WAAW,uDAAuD;AAAA,IAC3E,QAAQ,CAAC;AAAA,EACX;AAAA,EACA,YAAY,CAAC;AAAA,EACb,WAAW,CAAC;AAAA,EACZ,OAAO;AAAA,IACL,MAAM;AAAA,MACJ,OAAO,EAAE,QAAQ,WAAW;AAAA,MAC5B,OAAO,EAAE,QAAQ,WAAW;AAAA,MAC5B,aAAa,EAAE,QAAQ,SAAS;AAAA,IAClC;AAAA,EACF;AAAA,EACA,SAAS,CAAC;AAAA,EACV,YAAY;AAAA,IACV,OAAO,aAAa;AAAA,IACpB,eAAe,aAAa;AAAA,IAC5B,cAAc,aAAa;AAAA,EAC7B;AAAA,EACA,UAAU,CAAC;AAAA,EACX,OAAO,CAAC;AAAA,EACR,WAAW,CAAC;AAAA,EACZ,QAAQ;AACV;AAEO,MAAM,WAAW,CACtB,QACA,UAAkC,CAAC,OACF;AAAA,EACjC,kBAAkB;AAAA,EAClB,SAAS;AAAA,IACP,WAAW;AAAA,IACX,gBAAgB;AAAA,IAChB,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,mBAAmB;AAAA,EACrB;AAAA,EACA,QAAQ;AAAA,IACN,aAAa,YAAY,MAAM;AAAA,MAC7B,OAAO;AAAA,MACP,YAAY,CAAC,YAAY,OAAO,EAAE,OAAO,eAAe,CAAC,GAAG,YAAY,SAAS,CAAC;AAAA,IACpF,CAAC;AAAA,IACD,GAAG,iBAAiB,MAAM,MAAM;AAAA,EAClC;AAAA,EACA,UAAU,iBAAiB;AAAA,EAC3B,YAAY,CAAC;AAAA,EACb,WAAW;AAAA,IACT,CAAC,eAAe,KAAK,GAAG;AAAA,IACxB,CAAC,eAAe,KAAK,GAAG;AAAA,IACxB,CAAC,eAAe,WAAW,GAAG;AAAA,EAChC;AAAA,EACA,WAAW,EAAE,UAAU,kBAAkB,QAAQ,eAAe;AAAA,EAChE,aAAa;AAAA,IACX,WAAW;AAAA,IACX,QAAQ;AAAA,MACN,EAAE,OAAO,gBAAgB,OAAO,OAAO,eAAe,WAAW,WAAW;AAAA,MAC5E,EAAE,OAAO,gBAAgB,KAAK,OAAO,aAAa,WAAW,WAAW;AAAA,IAC1E;AAAA,IACA,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,KAAK;AAAA,MACL,OAAO;AAAA,MACP,kBAAkB;AAAA,MAClB,WAAW;AAAA,IACb;AAAA,EACF;AAAA,EACA,SAAS,EAAE,KAAK,OAAO,SAAS,QAAQ,IAAI,KAAK,KAAK;AAAA,EACtD,OAAO;AAAA,IACL,aAAa;AAAA,IACb,YAAY;AAAA,EACd;AACF;AAGO,MAAM,aAAa,CAAC,WAAmC;AAC5D,MAAI,OAAO;AACX,SAAO,MAAM;AACX,YAAQ;AACR,WAAO,GAAG,MAAM,cAAc,OAAO,IAAI,EAAE,SAAS,IAAI,GAAG,CAAC;AAAA,EAC9D;AACF;",
-  "names": []
-}