@mettlelabs/mettle 0.0.0-beta.1-linux-arm64 → 0.0.0-beta.2-darwin-arm64

package/harness/{chunk-msg872ea.mjs → chunk-h1td5kq9.mjs}

@@ -7,16 +7,16 @@ import {
   digest,
   captureEvidence,
   RUNTIME_VERSION
-} from "./chunk-2gt4cy7x.mjs";
-import {
-  PostgresJournal
-} from "./chunk-7bg2gnv2.mjs";
+} from "./chunk-rd80vvc5.mjs";
 import {
   PROBE_TOOL,
   SANDBOX_TOOLS,
+  PostgresJournal
+} from "./chunk-c7dx5mdd.mjs";
+import {
   dockerJson,
   SandboxWorker
-} from "./chunk-xqyc4ca2.mjs";
+} from "./chunk-9dg1btk1.mjs";
 
 // apps/harness/src/execution/tool-executor.ts
 import { setTimeout as sleep } from "node:timers/promises";
@@ -24,6 +24,8 @@ var APPROVAL_TTL_MS = 600000;
 var INTERRUPTED = "The operator interrupted this call while it ran; its outcome is unknown.";
 var SETTLED_FAILURES = new Set([
   "tool_denied",
+  "work_denied",
+  "coverage_denied",
   "approval_denied",
   "approval_expired",
   "invalid_artifact",
@@ -38,6 +40,9 @@ var SETTLED_FAILURES = new Set([
   "candidate_denied",
   "candidate_conflict",
   "repository_bound",
+  "source_busy",
+  "source_unavailable",
+  "source_encoding",
   "scanner_denied",
   "web_denied",
   "sandbox_task_failed",
@@ -85,6 +90,10 @@ class ToolExecutor {
     }, tool.idempotent === true);
     if (cachedRef)
       return this.cached(cachedRef, tool);
+    if (tool.unavailableReason) {
+      await this.journal.failAction(this.lease, callId, tool.unavailableReason, "tool_denied");
+      throw new HarnessError("tool_denied", tool.unavailableReason);
+    }
     const approval = await this.requested(callId, tool, args, summary);
     await this.hooks.at?.("after-intent");
     if (this.signal.aborted)
@@ -102,7 +111,13 @@ class ToolExecutor {
     }
     if (this.signal.aborted)
       throw new HarnessError("stop_requested", "Execution cancelled before dispatch.");
-    await this.journal.dispatchAction(this.lease, callId);
+    try {
+      await this.journal.dispatchAction(this.lease, callId);
+    } catch (error) {
+      if (error instanceof HarnessError && error.code === "tool_denied")
+        await this.journal.failAction(this.lease, callId, error.message, error.code);
+      throw error;
+    }
     await this.hooks.at?.("after-dispatch");
     let ref;
     try {
@@ -191,13 +206,18 @@ class SandboxJournal {
     this.journal = journal;
     this.lease = lease;
   }
-  async reserve(callId, workerId, image, policyDigest, binding = { tool: PROBE_TOOL, args: {} }) {
+  async reserve(callId, workerId, image, policyDigest, binding = { tool: PROBE_TOOL, args: {} }, page) {
     if (!SANDBOX_TOOLS.includes(binding.tool) || binding.tool === PROBE_TOOL && digest(binding.args) !== digest({}))
       throw new HarnessError("sandbox_denied", "Only an approved isolated observation or fixed probe may reserve a sandbox.");
     return this.journal.fenced(this.lease, async ({ client }) => {
       const action = await client.query("SELECT 1 FROM harness_mastra.actions WHERE run_id=$1 AND call_id=$2 AND tool=$4 AND args_digest=$3 AND state='dispatched'", [this.lease.runId, callId, digest(binding.args), binding.tool]);
       if (!action.rowCount)
         throw new HarnessError("sandbox_denied", "A sandbox requires the exact committed observation dispatch.");
+      if (page) {
+        const available = await client.query("SELECT count(*)::int AS count,clock_timestamp()<$2::timestamptz AS active FROM harness_mastra.browser_pages WHERE run_id=$1 AND NOT closed", [this.lease.runId, page.expiresAt]);
+        if (binding.tool !== "web_browse" || page.operation !== "open" || available.rows[0].count >= 4 || !available.rows[0].active)
+          throw new HarnessError("browser_page_denied", "A live page requires an open operation, active grant and fewer than four retained pages.");
+      }
       const record = {
         runId: this.lease.runId,
         callId,
@@ -220,9 +240,69 @@ class SandboxJournal {
       ]);
       if (!inserted.rowCount)
         throw new HarnessError("uncertain_execution", "A prior sandbox reservation cannot be executed again.");
+      if (page)
+        await client.query("INSERT INTO harness_mastra.browser_pages(run_id,page_id,sandbox_call,owner_call,child_id,identity_id,binding_digest,epoch,expires_at) VALUES($1,$2,$3,$3,$4,$5,$6,$7,LEAST($8::timestamptz,clock_timestamp()+interval '10 minutes'))", [
+          record.runId,
+          page.id,
+          callId,
+          this.lease.child?.id ?? null,
+          page.identity,
+          page.digest,
+          this.lease.epoch,
+          page.expiresAt
+        ]);
       return record;
     });
   }
+  async acquirePage(callId, args, page) {
+    return this.journal.fenced(this.lease, async ({ client }) => {
+      const result = await client.query(`SELECT s.run_id AS "runId",s.call_id AS "callId",s.epoch,s.worker_id AS "workerId",s.name,s.image,s.policy_digest AS "policyDigest",s.container_id AS "containerId",s.state
+         FROM harness_mastra.browser_pages p JOIN harness_mastra.sandboxes s ON s.run_id=p.run_id AND s.call_id=p.sandbox_call
+         JOIN harness_mastra.actions a ON a.run_id=p.run_id AND a.call_id=$3
+         WHERE p.run_id=$1 AND p.page_id=$2 AND NOT p.closed AND p.owner_call IS NULL AND p.epoch=$4 AND p.child_id IS NOT DISTINCT FROM $5 AND p.identity_id=$6 AND p.binding_digest=$7 AND clock_timestamp()<p.expires_at
+         AND s.state='running' AND a.tool='web_browse' AND a.state='dispatched' AND a.args_digest=$8 AND a.child_id IS NOT DISTINCT FROM $5 FOR UPDATE OF p`, [
+        this.lease.runId,
+        page.id,
+        callId,
+        this.lease.epoch,
+        this.lease.child?.id ?? null,
+        page.identity,
+        page.digest,
+        digest(args)
+      ]);
+      if (page.operation === "open" || result.rowCount !== 1)
+        throw new HarnessError("browser_page_lost", "The page is absent, busy, expired, closed, or belongs to another identity, child, grant or worker epoch. Open a new page; previous actions are never replayed.");
+      await client.query("UPDATE harness_mastra.browser_pages SET owner_call=$3 WHERE run_id=$1 AND page_id=$2", [this.lease.runId, page.id, callId]);
+      return result.rows[0];
+    });
+  }
+  async suspendPages() {
+    await this.journal.fenced(this.lease, async ({ client }) => {
+      await client.query("UPDATE harness_mastra.browser_pages SET suspended_owner=$3 WHERE run_id=$1 AND epoch=$2 AND NOT closed AND owner_call IS NULL AND EXISTS (SELECT 1 FROM harness_mastra.approvals approval JOIN harness_mastra.actions action ON action.run_id=approval.run_id AND action.call_id=approval.call_id WHERE approval.run_id=$1 AND action.state='prepared')", [this.lease.runId, this.lease.epoch, this.lease.owner]);
+    }, "settlement");
+  }
+  async resumePages(previous) {
+    if (previous.runId !== this.lease.runId || previous.epoch + 1 !== this.lease.epoch)
+      throw new HarnessError("browser_page_lost", "Only the next owner can resume an approval suspension.");
+    await this.journal.fenced(this.lease, async ({ client }) => {
+      await client.query("UPDATE harness_mastra.browser_pages SET epoch=$4,suspended_owner=NULL WHERE run_id=$1 AND epoch=$2 AND suspended_owner=$3 AND NOT closed AND owner_call IS NULL AND clock_timestamp()<expires_at", [this.lease.runId, previous.epoch, previous.owner, this.lease.epoch]);
+    }, "settlement");
+  }
+  async releasePage(record, callId) {
+    await this.journal.fenced(this.lease, async ({ client }) => {
+      await this.assertState(record, "running", client);
+      const result = await client.query("UPDATE harness_mastra.browser_pages SET owner_call=NULL WHERE run_id=$1 AND sandbox_call=$2 AND owner_call=$3 AND epoch=$4 AND NOT closed", [this.lease.runId, record.callId, callId, this.lease.epoch]);
+      if (result.rowCount !== 1)
+        throw new HarnessError("browser_page_lost", "A different action owns this page.");
+    });
+  }
+  async pages() {
+    const retained = await this.journal.fenced(this.lease, async ({ client }) => {
+      const result = await client.query("SELECT sandbox_call FROM harness_mastra.browser_pages WHERE run_id=$1 AND NOT closed AND ($2::uuid IS NULL OR child_id=$2)", [this.lease.runId, this.lease.child?.id ?? null]);
+      return new Set(result.rows.map((row) => row.sandbox_call));
+    }, "settlement");
+    return (await this.pending()).filter((record) => retained.has(record.callId));
+  }
   async provision(record, operation) {
     await this.journal.fenced(this.lease, async ({ client }) => {
       await this.assertState(record, "reserved", client);
@@ -258,8 +338,15 @@ class SandboxJournal {
     });
   }
   async assertState(record, state, client) {
-    const result = await client.query("SELECT 1 FROM harness_mastra.sandboxes WHERE run_id=$1 AND call_id=$2 AND epoch=$3 AND name=$4 AND state=$5", [this.lease.runId, record.callId, this.lease.epoch, record.name, state]);
-    if (record.runId !== this.lease.runId || record.epoch !== this.lease.epoch || result.rowCount !== 1)
+    const result = await client.query("SELECT 1 FROM harness_mastra.sandboxes s WHERE run_id=$1 AND call_id=$2 AND epoch=$3 AND name=$4 AND state=$5 AND (epoch=$6 OR (state='running' AND EXISTS (SELECT 1 FROM harness_mastra.browser_pages p WHERE p.run_id=s.run_id AND p.sandbox_call=s.call_id AND p.epoch=$6 AND NOT p.closed AND p.owner_call IS NOT NULL)))", [
+      this.lease.runId,
+      record.callId,
+      record.epoch,
+      record.name,
+      state,
+      this.lease.epoch
+    ]);
+    if (record.runId !== this.lease.runId || result.rowCount !== 1)
       throw new HarnessError("sandbox_denied", "Sandbox ownership or lifecycle no longer permits this operation.");
   }
   async removed(record) {
@@ -267,6 +354,7 @@ class SandboxJournal {
       const result = await client.query("UPDATE harness_mastra.sandboxes SET state='removed',removed_at=clock_timestamp() WHERE run_id=$1 AND call_id=$2 AND name=$3 AND worker_id=$4", [this.lease.runId, record.callId, record.name, record.workerId]);
       if (record.runId !== this.lease.runId || !result.rowCount)
         throw new HarnessError("sandbox_denied", "Cleanup receipt does not belong to this run.");
+      await client.query("UPDATE harness_mastra.browser_pages SET closed=true,owner_call=NULL WHERE run_id=$1 AND sandbox_call=$2", [this.lease.runId, record.callId]);
       record.state = "removed";
     }, "settlement");
   }

package/harness/{chunk-4jtnt9k5.mjs → chunk-jp69h6sj.mjs}

@@ -1,6 +1,6 @@
 import {
   sha256
-} from "./chunk-2gt4cy7x.mjs";
+} from "./chunk-rd80vvc5.mjs";
 import {
   ApiPrincipalSchema,
   ApiTokenRecordSchema,