@karowanorg/orc-core 0.1.0 → 0.1.2

package/dist/contracts.d.ts

@@ -35,8 +35,6 @@ export interface Proc {
     pid: number | undefined;
 }
 export interface Executor {
-    /** undefined for local; the ssh destination string otherwise (e.g. "build@ci-box"). */
-    readonly host: string | undefined;
     spawn(cmd: string[], opts?: SpawnOptions): Proc;
     /** Run a command to completion, capturing output. */
     run(cmd: string[], opts?: SpawnOptions & {
@@ -80,7 +78,6 @@ export interface LeafRequest {
     reasoningEffort?: string;
     readOnly: boolean;
     cwd: string;
-    host?: string;
     approvalMode: ApprovalMode;
     sessionId?: string;
     idleTimeoutMs?: number | false;
@@ -95,6 +92,8 @@ export interface LeafRequest {
      */
     sandbox?: boolean;
     sandboxDirs?: string[];
+    /** Permit outbound network while retaining the requested filesystem sandbox. */
+    networkAccess?: boolean;
 }
 export type HarnessEvent = {
     kind: "tool-call-open";
@@ -175,7 +174,6 @@ export interface ThunkSpec {
     schema?: Json;
     readOnly: boolean;
     cwd?: string;
-    host?: string;
     phase?: string;
     idleTimeoutMs?: number | false;
     groupId?: string;
@@ -261,7 +259,6 @@ export interface LeafTraceRecord {
     harness?: string;
     model?: string;
     reasoningEffort?: string;
-    host?: string;
     cwd?: string;
     readOnly: boolean;
     startMs: number;
@@ -320,12 +317,12 @@ export interface RunManifest {
     programPath: string;
     programSha256: string;
     cwd: string;
-    host?: string;
     brief: string;
     allowWrites: boolean;
     approvalMode: ApprovalMode;
     sandbox: boolean;
     sandboxDirs: string[];
+    networkAccess: boolean;
     maxParallel: number;
     idleTimeoutMs: number | false;
     /** Reactive USD cap: the run fails once observed estimated cost exceeds this. */
@@ -343,7 +340,6 @@ export interface LeafStatus {
     status: "pending" | "running" | "ok" | "error";
     readOnly: boolean;
     harness?: string;
-    host?: string;
     startMs?: number;
     endMs?: number;
     error?: string;

package/dist/engine.js

@@ -74,7 +74,6 @@ const BOOTSTRAP = String.raw `
       schema: o.schema,
       readOnly: o.readOnly === false ? false : true,
       cwd: o.cwd,
-      host: o.host,
       phase: o.phase,
       idleTimeoutMs: normTimeout(o.idleTimeout),
       groupId: o.__groupId,

package/dist/status.js

@@ -61,7 +61,6 @@ export function projectStatus(manifest, journal, traces) {
         if (tr.attempt < currentAttempt)
             continue;
         leaf.harness = tr.harness;
-        leaf.host = tr.host;
         leaf.startMs = tr.startMs;
         leaf.endMs = tr.endMs;
         if (tr.status === "running" && (tr.attempt > currentAttempt || leaf.status === "pending")) {

package/dist/supervisor.d.ts

@@ -4,17 +4,17 @@ export interface Registry {
     harnesses: Map<string, Harness>;
     extensions: Map<string, ExtensionLeaf>;
     defaultHarness: string;
-    executorFor(host: string | undefined): Executor;
+    executor: Executor;
 }
 export interface LaunchOptions {
     programPath: string;
     cwd?: string;
-    host?: string;
     brief: string;
     allowWrites?: boolean;
     approvalMode?: RunManifest["approvalMode"];
     sandbox?: boolean;
     sandboxDirs?: string[];
+    networkAccess?: boolean;
     maxParallel?: number;
     idleTimeout?: number | false;
     budgetUsd?: number;

package/dist/supervisor.js

@@ -22,18 +22,9 @@ export function sourceRequestsWrite(source) {
 }
 export async function prepareRun(opts, registry) {
     const { bundle, sha256 } = await compileProgram(opts.programPath);
-    // For local runs, canonicalize + validate the cwd against the local FS. For
-    // remote (host) runs the cwd lives on the remote host — keep it as an
-    // absolute path and let `orc doctor --host` / the leaf validate existence.
-    let cwd;
-    if (opts.host) {
-        cwd = opts.cwd ?? ".";
-    }
-    else {
-        cwd = fs.realpathSync(path.resolve(opts.cwd ?? process.cwd()));
-        if (!fs.statSync(cwd).isDirectory())
-            throw new Error(`cwd is not a directory: ${cwd}`);
-    }
+    const cwd = fs.realpathSync(path.resolve(opts.cwd ?? process.cwd()));
+    if (!fs.statSync(cwd).isDirectory())
+        throw new Error(`cwd is not a directory: ${cwd}`);
     const brief = opts.brief?.trim();
     if (!brief)
         throw new Error("brief is required");
@@ -46,12 +37,12 @@ export async function prepareRun(opts, registry) {
         programPath: path.resolve(opts.programPath),
         programSha256: sha256,
         cwd,
-        host: opts.host,
         brief,
         allowWrites: opts.allowWrites ?? false,
         approvalMode: opts.approvalMode ?? "auto",
         sandbox: opts.sandbox ?? false,
         sandboxDirs: opts.sandboxDirs ?? [],
+        networkAccess: opts.networkAccess ?? false,
         maxParallel: Math.min(opts.maxParallel ?? DEFAULT_POLICY.maxParallel, 64),
         idleTimeoutMs: opts.idleTimeout ?? 15 * 60_000,
         budgetUsd: opts.budgetUsd,
@@ -616,9 +607,8 @@ class Supervisor {
     // -------------------------------------------------------------------------
     async executeLeaf(leaf) {
         const { spec, seq, attempt } = leaf;
-        const host = spec.host ?? this.manifest.host;
         const cwd = spec.cwd ?? this.manifest.cwd;
-        const executor = this.registry.executorFor(host);
+        const executor = this.registry.executor;
         let rev = 0;
         const startMs = Date.now();
         const toolCalls = new Map();
@@ -637,7 +627,6 @@ class Supervisor {
             phase: spec.phase,
             kind: spec.kind,
             harness: spec.kind === "agent" ? (spec.harness ?? this.manifest.defaultHarness) : undefined,
-            host,
             cwd,
             readOnly: spec.readOnly,
             startMs,
@@ -704,11 +693,11 @@ class Supervisor {
                 reasoningEffort: spec.reasoningEffort,
                 readOnly: spec.readOnly,
                 cwd,
-                host,
                 approvalMode: this.manifest.approvalMode,
                 idleTimeoutMs: leaf.idleTimeoutMs,
                 sandbox: this.manifest.sandbox,
                 sandboxDirs: this.manifest.sandboxDirs,
+                networkAccess: this.manifest.networkAccess,
             };
             let result;
             let errorMsg;
@@ -978,7 +967,7 @@ function isRetryable(error) {
     // model call and delays the real failure. Config/routing errors plus the
     // structured-output schema rejections (OpenAI/codex strict mode) are all
     // author-fixable, not transient.
-    return !/unknown harness|unknown extension|unregistered extension|fails inputSchema|not supported for remote|allow_writes|invalid_json_schema|invalid schema|unsupported schema|additionalProperties|output[\s_-]?schema|result exceeds cap|result is not valid JSON/i.test(error);
+    return !/unknown harness|unknown extension|unregistered extension|fails inputSchema|allow_writes|invalid_json_schema|invalid schema|unsupported schema|additionalProperties|output[\s_-]?schema|result exceeds cap|result is not valid JSON/i.test(error);
 }
 function attemptKey(seq, attempt) {
     return `${seq}:${attempt}`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@karowanorg/orc-core",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "license": "0BSD",
   "type": "module",
   "main": "dist/index.js",