@namzu/sdk 27.1.0 → 29.0.0

package/dist/execution/base.js

@@ -1,11 +1,16 @@
+import { NAMZU } from '../constants/telemetry/index.js';
 import { toErrorMessage } from '../utils/error.js';
-import { getRootLogger } from '../utils/logger.js';
+import { SCOPE_ATTRIBUTE } from '../utils/log/types.js';
+import { resolveLogger } from '../utils/logger.js';
 export class BaseExecutionContext {
     log;
     ready = false;
     listeners = [];
-    constructor() {
-        this.log = getRootLogger().child({ component: this.constructor.name });
+    constructor(log) {
+        this.log = resolveLogger(log).child({
+            [SCOPE_ATTRIBUTE]: 'execution/base',
+            [NAMZU.EXECUTION_TYPE]: this.constructor.name,
+        });
     }
     async initialize() {
         try {
@@ -13,12 +18,18 @@ export class BaseExecutionContext {
             this.ready = true;
             this.emit({ type: 'context_initialized', contextId: this.id, environment: this.environment });
             this.emit({ type: 'context_ready', contextId: this.id });
-            this.log.info(`Execution context initialized: ${this.id} (${this.environment})`);
+            this.log.info('Execution context initialized', {
+                'namzu.execution.context_id': this.id,
+                'namzu.execution.environment': this.environment,
+            });
         }
         catch (err) {
             const message = toErrorMessage(err);
             this.emit({ type: 'context_error', contextId: this.id, error: message });
-            this.log.error(`Execution context initialization failed: ${this.id}`, { error: message });
+            this.log.error('Execution context initialization failed', {
+                'namzu.execution.context_id': this.id,
+                'exception.message': message,
+            });
             throw err;
         }
     }
@@ -32,7 +43,7 @@ export class BaseExecutionContext {
         finally {
             this.ready = false;
             this.emit({ type: 'context_teardown', contextId: this.id });
-            this.log.info(`Execution context torn down: ${this.id}`);
+            this.log.info('Execution context torn down', { 'namzu.execution.context_id': this.id });
         }
     }
     on(listener) {
@@ -50,7 +61,7 @@ export class BaseExecutionContext {
             }
             catch (err) {
                 this.log.error('Execution context event listener error', {
-                    error: toErrorMessage(err),
+                    'exception.message': toErrorMessage(err),
                 });
             }
         }

package/dist/execution/base.js.map

@@ -1 +1 @@
-{"version":3,"file":"base.js","sourceRoot":"","sources":["../../src/execution/base.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAClD,OAAO,EAAe,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAU/D,MAAM,OAAgB,oBAAoB;IAI/B,GAAG,CAAQ;IACX,KAAK,GAAG,KAAK,CAAA;IACf,SAAS,GAA6B,EAAE,CAAA;IAEhD;QACC,IAAI,CAAC,GAAG,GAAG,aAAa,EAAE,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAA;IACvE,CAAC;IAED,KAAK,CAAC,UAAU;QACf,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,YAAY,EAAE,CAAA;YACzB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAA;YACjB,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;YAC7F,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAA;YACxD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,kCAAkC,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,WAAW,GAAG,CAAC,CAAA;QACjF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;YACnC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;YACxE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,4CAA4C,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;YACzF,MAAM,GAAG,CAAA;QACV,CAAC;IACF,CAAC;IAED,OAAO;QACN,OAAO,IAAI,CAAC,KAAK,CAAA;IAClB,CAAC;IAED,KAAK,CAAC,QAAQ;QACb,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;QACxB,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;YAClB,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAA;YAC3D,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,gCAAgC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAA;QACzD,CAAC;IACF,CAAC;IAED,EAAE,CAAC,QAAgC;QAClC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC9B,CAAC;IAED,GAAG,CAAC,QAAgC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAC9C,IAAI,KAAK,IAAI,CAAC;YAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;IAChD,CAAC;IAES,IAAI,CAAC,KAAyB;QACvC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACvC,IAAI,CAAC;gBACJ,QAAQ,CAAC,KAAK,CAAC,CAAA;YAChB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,wCAAwC,EAAE;oBACxD,KAAK,EAAE,cAAc,CAAC,GAAG,CAAC;iBAC1B,CAAC,CAAA;YACH,CAAC;QACF,CAAC;IACF,CAAC;CAID"}
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../../src/execution/base.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,iCAAiC,CAAA;AAEvD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACvD,OAAO,EAAe,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAU/D,MAAM,OAAgB,oBAAoB;IAI/B,GAAG,CAAQ;IACX,KAAK,GAAG,KAAK,CAAA;IACf,SAAS,GAA6B,EAAE,CAAA;IAEhD,YAAY,GAAY;QACvB,IAAI,CAAC,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;YACnC,CAAC,eAAe,CAAC,EAAE,gBAAgB;YACnC,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI;SAC7C,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,UAAU;QACf,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,YAAY,EAAE,CAAA;YACzB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAA;YACjB,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;YAC7F,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAA;YACxD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,+BAA+B,EAAE;gBAC9C,4BAA4B,EAAE,IAAI,CAAC,EAAE;gBACrC,6BAA6B,EAAE,IAAI,CAAC,WAAW;aAC/C,CAAC,CAAA;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;YACnC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;YACxE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,yCAAyC,EAAE;gBACzD,4BAA4B,EAAE,IAAI,CAAC,EAAE;gBACrC,mBAAmB,EAAE,OAAO;aAC5B,CAAC,CAAA;YACF,MAAM,GAAG,CAAA;QACV,CAAC;IACF,CAAC;IAED,OAAO;QACN,OAAO,IAAI,CAAC,KAAK,CAAA;IAClB,CAAC;IAED,KAAK,CAAC,QAAQ;QACb,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;QACxB,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;YAClB,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAA;YAC3D,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,4BAA4B,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAA;QACxF,CAAC;IACF,CAAC;IAED,EAAE,CAAC,QAAgC;QAClC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC9B,CAAC;IAED,GAAG,CAAC,QAAgC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAC9C,IAAI,KAAK,IAAI,CAAC;YAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;IAChD,CAAC;IAES,IAAI,CAAC,KAAyB;QACvC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACvC,IAAI,CAAC;gBACJ,QAAQ,CAAC,KAAK,CAAC,CAAA;YAChB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,wCAAwC,EAAE;oBACxD,mBAAmB,EAAE,cAAc,CAAC,GAAG,CAAC;iBACxC,CAAC,CAAA;YACH,CAAC;QACF,CAAC;IACF,CAAC;CAID"}

package/dist/execution/code-runtime/types.d.ts

@@ -0,0 +1,114 @@
+/**
+ * Running a program the MODEL wrote.
+ *
+ * A model that can write a loop can do in one call what currently costs
+ * twenty: filter a list, retry with backoff, fan out over files. Every one
+ * of those is a control-flow shape the tool loop expresses by taking a full
+ * model turn per step, at full context size, with the whole conversation
+ * resent each time.
+ *
+ * The problem is that the program is untrusted text. It is not "code the
+ * operator installed" — it is a string the model produced, possibly under
+ * the influence of a web page it was told to summarise. So the seam is
+ * defined here in terms of what a backend must GUARANTEE rather than what
+ * it may offer, and the guarantees are the interesting part:
+ *
+ *  - **No ambient capability.** The program gets what the host passes and
+ *    nothing else: no filesystem, no network, no process, no `require`. A
+ *    backend that cannot withhold those is not a backend for this.
+ *  - **Everything it can do, it does by asking.** The only channel out is a
+ *    call back into the host, which is what makes NZ-EXEC-06's dispatch
+ *    through the run's own `ToolRegistry` possible — the program cannot
+ *    reach a tool the run did not grant, because it cannot reach anything.
+ *  - **Bounded.** Wall clock and output, both enforced by the backend
+ *    rather than requested of the program.
+ *
+ * `internal and unexported` is the task's own wording and is kept: a seam
+ * with one backend and no consumer is a guess at what a consumer needs.
+ * NZ-EXEC-06 is the consumer, and the surface joins the public API in the
+ * commit that has one.
+ */
+/** A call the program made back into the host. */
+export interface HostCallRequest {
+    /** Which capability, by the name the host offered. */
+    readonly name: string;
+    readonly input: unknown;
+}
+export interface HostCallResult {
+    readonly ok: boolean;
+    readonly value?: unknown;
+    readonly error?: string;
+}
+/**
+ * What the host will answer.
+ *
+ * A function rather than a table, so the host decides per call. NZ-EXEC-06
+ * makes this the run's `ToolRegistry` and its permission gate, which is
+ * exactly the point: the program's reach is the run's reach, resolved at
+ * the moment of the call rather than frozen when the program started.
+ */
+export type HostCallHandler = (request: HostCallRequest) => Promise<HostCallResult>;
+export interface RunCodeOptions {
+    /** The program. Untrusted text, from the model. */
+    readonly source: string;
+    /** Names the program may call. Anything else is refused by the backend. */
+    readonly allowedCalls: readonly string[];
+    readonly onHostCall: HostCallHandler;
+    /** Hard wall clock. Enforced by the backend, not asked of the program. */
+    readonly timeoutMs: number;
+    /**
+     * Cap on what the program may print.
+     *
+     * Enforced, and truncation is REPORTED. A program whose output was cut
+     * silently is a model reading a partial answer as a whole one — the same
+     * rule the tool-output cap and the background-job buffer already follow.
+     */
+    readonly maxOutputBytes: number;
+    readonly signal?: AbortSignal;
+}
+export type CodeRunOutcome = {
+    readonly status: 'completed';
+    readonly result: unknown;
+} | {
+    readonly status: 'failed';
+    readonly error: string;
+} | {
+    readonly status: 'timed-out';
+} | {
+    readonly status: 'cancelled';
+};
+export interface CodeRunResult {
+    readonly outcome: CodeRunOutcome;
+    /** Whatever the program printed, in order. */
+    readonly output: string;
+    readonly outputTruncated: boolean;
+    /** Every host call it made, in order, with what it got back. */
+    readonly calls: readonly {
+        readonly name: string;
+        readonly ok: boolean;
+    }[];
+}
+/**
+ * A backend that can run one of these.
+ *
+ * One method, deliberately. A backend with a `prepare`/`run`/`dispose`
+ * lifecycle invites a caller to reuse an instance across programs, and two
+ * model-authored programs sharing a runtime share whatever the first one
+ * left in it.
+ */
+export interface CodeRuntime {
+    readonly id: string;
+    run(options: RunCodeOptions): Promise<CodeRunResult>;
+}
+/** A program that asked for a capability it was not granted. */
+export declare class HostCallDeniedError extends Error {
+    readonly details: {
+        name: string;
+        allowed: readonly string[];
+    };
+    constructor(details: {
+        name: string;
+        allowed: readonly string[];
+    });
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/execution/code-runtime/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/execution/code-runtime/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,kDAAkD;AAClD,MAAM,WAAW,eAAe;IAC/B,sDAAsD;IACtD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CACvB;AAED,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAA;IACpB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CACvB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,eAAe,KAAK,OAAO,CAAC,cAAc,CAAC,CAAA;AAEnF,MAAM,WAAW,cAAc;IAC9B,mDAAmD;IACnD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,2EAA2E;IAC3E,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAA;IACxC,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAA;IACpC,0EAA0E;IAC1E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B;;;;;;OAMG;IACH,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAC7B;AAED,MAAM,MAAM,cAAc,GACvB;IAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GAC1D;IAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;CAAE,GAChC;IAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;CAAE,CAAA;AAEnC,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;IAChC,8CAA8C;IAC9C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAA;IACjC,gEAAgE;IAChE,QAAQ,CAAC,KAAK,EAAE,SAAS;QACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;QACrB,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAA;KACpB,EAAE,CAAA;CACH;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,GAAG,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;CACpD;AAED,gEAAgE;AAChE,qBAAa,mBAAoB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAA;gBAElD,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE;CAOjE"}

package/dist/execution/code-runtime/types.js

@@ -0,0 +1,40 @@
+/**
+ * Running a program the MODEL wrote.
+ *
+ * A model that can write a loop can do in one call what currently costs
+ * twenty: filter a list, retry with backoff, fan out over files. Every one
+ * of those is a control-flow shape the tool loop expresses by taking a full
+ * model turn per step, at full context size, with the whole conversation
+ * resent each time.
+ *
+ * The problem is that the program is untrusted text. It is not "code the
+ * operator installed" — it is a string the model produced, possibly under
+ * the influence of a web page it was told to summarise. So the seam is
+ * defined here in terms of what a backend must GUARANTEE rather than what
+ * it may offer, and the guarantees are the interesting part:
+ *
+ *  - **No ambient capability.** The program gets what the host passes and
+ *    nothing else: no filesystem, no network, no process, no `require`. A
+ *    backend that cannot withhold those is not a backend for this.
+ *  - **Everything it can do, it does by asking.** The only channel out is a
+ *    call back into the host, which is what makes NZ-EXEC-06's dispatch
+ *    through the run's own `ToolRegistry` possible — the program cannot
+ *    reach a tool the run did not grant, because it cannot reach anything.
+ *  - **Bounded.** Wall clock and output, both enforced by the backend
+ *    rather than requested of the program.
+ *
+ * `internal and unexported` is the task's own wording and is kept: a seam
+ * with one backend and no consumer is a guess at what a consumer needs.
+ * NZ-EXEC-06 is the consumer, and the surface joins the public API in the
+ * commit that has one.
+ */
+/** A program that asked for a capability it was not granted. */
+export class HostCallDeniedError extends Error {
+    details;
+    constructor(details) {
+        super(`The program called "${details.name}", which it was not granted. Available: ${details.allowed.length > 0 ? details.allowed.join(', ') : '(none)'}`);
+        this.name = 'HostCallDeniedError';
+        this.details = details;
+    }
+}
+//# sourceMappingURL=types.js.map

package/dist/execution/code-runtime/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/execution/code-runtime/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AA2EH,gEAAgE;AAChE,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACpC,OAAO,CAA8C;IAE9D,YAAY,OAAqD;QAChE,KAAK,CACJ,uBAAuB,OAAO,CAAC,IAAI,2CAA2C,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAClJ,CAAA;QACD,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAA;QACjC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACvB,CAAC;CACD"}

package/dist/execution/code-runtime/worker.d.ts

@@ -0,0 +1,6 @@
+import { type CodeRunResult, type CodeRuntime, type RunCodeOptions } from './types.js';
+export declare class WorkerCodeRuntime implements CodeRuntime {
+    readonly id = "worker_threads";
+    run(options: RunCodeOptions): Promise<CodeRunResult>;
+}
+//# sourceMappingURL=worker.d.ts.map

package/dist/execution/code-runtime/worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../../../src/execution/code-runtime/worker.ts"],"names":[],"mappings":"AAEA,OAAO,EACN,KAAK,aAAa,EAClB,KAAK,WAAW,EAEhB,KAAK,cAAc,EACnB,MAAM,YAAY,CAAA;AA2FnB,qBAAa,iBAAkB,YAAW,WAAW;IACpD,QAAQ,CAAC,EAAE,oBAAmB;IAExB,GAAG,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;CAoK1D"}

package/dist/execution/code-runtime/worker.js

@@ -0,0 +1,248 @@
+import { Worker } from 'node:worker_threads';
+import { HostCallDeniedError, } from './types.js';
+/**
+ * A `worker_threads` backend.
+ *
+ * Chosen over `vm` because `vm` is not a sandbox and its own documentation
+ * says so: a context shares the process, so a program that reaches a
+ * constructor from the host realm is out — `this.constructor.constructor`
+ * on any leaked object is the whole escape, and it fits in a tweet. A
+ * worker is a separate V8 isolate with its own heap; escaping it means
+ * escaping V8.
+ *
+ * Chosen over a subprocess because a subprocess is a process: it inherits
+ * an environment, it can be a fork bomb, and killing it is the process-tree
+ * problem `process/kill-tree.ts` exists for. A worker is cheaper to start,
+ * cheaper to kill, and cannot outlive the process that made it.
+ *
+ * What a worker does NOT give, stated because it is the reason this is not
+ * the whole answer: a worker shares the process's filesystem and network
+ * access. It is not confined by anything the OS enforces. What confines the
+ * program here is that it is handed a scope with nothing in it — no
+ * `require`, no `process`, no `fetch` — and a single channel back to the
+ * host. That is a language-level boundary, and a language-level boundary is
+ * exactly as strong as the enumeration of what was withheld. So a host that
+ * needs an OS boundary runs this inside a sandbox that has one, and this
+ * comment is here so nobody concludes the worker was the boundary.
+ */
+/**
+ * The worker's own body, as source.
+ *
+ * Inlined rather than a separate file because a separate file has to be
+ * findable at runtime, and this package is consumed as `dist/` by hosts
+ * whose bundlers rewrite paths. A string has no path.
+ */
+const WORKER_SOURCE = `
+const { parentPort, workerData } = require('node:worker_threads')
+
+// Every host call is a request/response over the port, keyed by an id so
+// several can be in flight — a program that awaits two calls at once is
+// ordinary, and a channel that could only carry one would silently
+// serialise them.
+const pending = new Map()
+let nextId = 0
+
+function hostCall(name, input) {
+	const id = ++nextId
+	return new Promise((resolve, reject) => {
+		pending.set(id, { resolve, reject })
+		parentPort.postMessage({ kind: 'call', id, name, input })
+	})
+}
+
+// Posted as it happens, NOT batched until the end. A program that printed
+// its progress and then hung has told the host where it got to, and a
+// buffer that only ships on completion loses exactly the output a timeout
+// most needs to explain itself.
+function print(...parts) {
+	parentPort.postMessage({
+		kind: 'print',
+		line: parts.map((p) => (typeof p === 'string' ? p : JSON.stringify(p))).join(' '),
+	})
+}
+
+parentPort.on('message', (message) => {
+	if (message.kind !== 'call-result') return
+	const entry = pending.get(message.id)
+	if (!entry) return
+	pending.delete(message.id)
+	if (message.ok) entry.resolve(message.value)
+	else entry.reject(new Error(message.error))
+})
+
+async function main() {
+	// The scope the program runs in, and everything it has. Built with
+	// \`new Function\` over an explicit parameter list rather than with
+	// \`with\` or a Proxy: the parameters SHADOW the outer names, so a
+	// program writing \`require\` gets the parameter, and the parameter is
+	// undefined.
+	const names = ['call', 'print', 'require', 'process', 'module', 'exports', 'globalThis', 'fetch']
+	const values = [hostCall, print, undefined, undefined, undefined, undefined, undefined, undefined]
+	const body = new Function(...names, '"use strict";return (async () => {' + workerData.source + '\\n})()')
+	return await body(...values)
+}
+
+main().then(
+	(result) => parentPort.postMessage({ kind: 'done', result }),
+	(error) => parentPort.postMessage({ kind: 'error', error: String(error && error.message || error) }),
+)
+`;
+export class WorkerCodeRuntime {
+    id = 'worker_threads';
+    async run(options) {
+        const allowed = new Set(options.allowedCalls);
+        const calls = [];
+        let output = '';
+        let truncated = false;
+        const appendOutput = (lines) => {
+            for (const line of lines) {
+                if (truncated)
+                    return;
+                const next = output.length === 0 ? line : `${output}\n${line}`;
+                if (Buffer.byteLength(next) > options.maxOutputBytes) {
+                    // Cut at the LINE that would exceed, and say so. A cut
+                    // mid-JSON produces output a reader cannot parse and cannot
+                    // tell was cut.
+                    truncated = true;
+                    return;
+                }
+                output = next;
+            }
+        };
+        const worker = new Worker(WORKER_SOURCE, {
+            eval: true,
+            workerData: { source: options.source },
+            // Nothing from the host's environment.
+            //
+            // **Unobservable today, and kept deliberately.** `process` is
+            // shadowed in the program's scope, so nothing the program can
+            // write reaches `process.env` either way — a mutation removing
+            // this line passes every test, correctly. It is defence behind the
+            // shadowing rather than beside it: the shadowing is a
+            // language-level boundary, exactly as strong as the enumeration of
+            // what was withheld, and the day that enumeration misses something
+            // this is what the leak finds. The cost is one empty object.
+            env: {},
+            // No stdio inheritance: the program prints through `print`, which
+            // is bounded. A worker writing to the host's stdout would bypass
+            // the cap and interleave with the operator's own output.
+            stdout: true,
+            stderr: true,
+        });
+        return await new Promise((resolve) => {
+            let settled = false;
+            const finish = (result) => {
+                // The Promise already ignores a second `resolve`, so removing
+                // this guard changes no result — a mutation removing it
+                // survives, correctly. It is kept because it also stops a
+                // second `terminate()` and a second `clearTimeout` on a worker
+                // that has already gone, and because `finish` is called from
+                // four places whose ordering is decided by the worker: `done`
+                // then `exit` is the ordinary sequence, not an edge case.
+                if (settled)
+                    return;
+                settled = true;
+                clearTimeout(deadline);
+                options.signal?.removeEventListener('abort', onAbort);
+                void worker.terminate();
+                resolve(result);
+            };
+            const deadline = setTimeout(() => {
+                finish({ outcome: { status: 'timed-out' }, output, outputTruncated: truncated, calls });
+            }, options.timeoutMs);
+            const onAbort = () => {
+                finish({ outcome: { status: 'cancelled' }, output, outputTruncated: truncated, calls });
+            };
+            options.signal?.addEventListener('abort', onAbort, { once: true });
+            if (options.signal?.aborted) {
+                onAbort();
+                return;
+            }
+            worker.on('message', (message) => {
+                if (message.kind === 'call') {
+                    const name = String(message.name);
+                    const id = message.id;
+                    if (!allowed.has(name)) {
+                        // Refused HERE, not in the worker. The allow-list lives on
+                        // the host side because a check inside the worker is a
+                        // check the program shares a heap with.
+                        calls.push({ name, ok: false });
+                        worker.postMessage({
+                            kind: 'call-result',
+                            id,
+                            ok: false,
+                            error: new HostCallDeniedError({ name, allowed: options.allowedCalls }).message,
+                        });
+                        return;
+                    }
+                    void options
+                        .onHostCall({ name, input: message.input })
+                        .then((result) => {
+                        calls.push({ name, ok: result.ok });
+                        worker.postMessage({
+                            kind: 'call-result',
+                            id,
+                            ok: result.ok,
+                            value: result.value,
+                            error: result.error,
+                        });
+                    })
+                        .catch((err) => {
+                        calls.push({ name, ok: false });
+                        worker.postMessage({
+                            kind: 'call-result',
+                            id,
+                            ok: false,
+                            error: err instanceof Error ? err.message : String(err),
+                        });
+                    });
+                    return;
+                }
+                if (message.kind === 'print') {
+                    appendOutput([String(message.line)]);
+                    return;
+                }
+                if (message.kind === 'done') {
+                    finish({
+                        outcome: { status: 'completed', result: message.result },
+                        output,
+                        outputTruncated: truncated,
+                        calls,
+                    });
+                    return;
+                }
+                if (message.kind === 'error') {
+                    finish({
+                        outcome: { status: 'failed', error: String(message.error) },
+                        output,
+                        outputTruncated: truncated,
+                        calls,
+                    });
+                }
+            });
+            worker.on('error', (err) => {
+                // A worker that died before reporting anything. Its output is
+                // whatever it had already sent, which is nothing — reporting an
+                // empty string here is honest rather than a loss.
+                finish({
+                    outcome: { status: 'failed', error: err.message },
+                    output,
+                    outputTruncated: truncated,
+                    calls,
+                });
+            });
+            worker.on('exit', (code) => {
+                // Only reached when the worker exited without a `done` or
+                // `error` message — a hard crash, or a program that called
+                // `process.exit` through something we failed to withhold.
+                finish({
+                    outcome: { status: 'failed', error: `The program exited with code ${code}.` },
+                    output,
+                    outputTruncated: truncated,
+                    calls,
+                });
+            });
+        });
+    }
+}
+//# sourceMappingURL=worker.js.map

package/dist/execution/code-runtime/worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.js","sourceRoot":"","sources":["../../../src/execution/code-runtime/worker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAE5C,OAAO,EAGN,mBAAmB,GAEnB,MAAM,YAAY,CAAA;AAEnB;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;;;;;;GAMG;AACH,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsDrB,CAAA;AAED,MAAM,OAAO,iBAAiB;IACpB,EAAE,GAAG,gBAAgB,CAAA;IAE9B,KAAK,CAAC,GAAG,CAAC,OAAuB;QAChC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;QAC7C,MAAM,KAAK,GAAoC,EAAE,CAAA;QACjD,IAAI,MAAM,GAAG,EAAE,CAAA;QACf,IAAI,SAAS,GAAG,KAAK,CAAA;QAErB,MAAM,YAAY,GAAG,CAAC,KAAwB,EAAQ,EAAE;YACvD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBAC1B,IAAI,SAAS;oBAAE,OAAM;gBACrB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,KAAK,IAAI,EAAE,CAAA;gBAC9D,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;oBACtD,uDAAuD;oBACvD,4DAA4D;oBAC5D,gBAAgB;oBAChB,SAAS,GAAG,IAAI,CAAA;oBAChB,OAAM;gBACP,CAAC;gBACD,MAAM,GAAG,IAAI,CAAA;YACd,CAAC;QACF,CAAC,CAAA;QAED,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,aAAa,EAAE;YACxC,IAAI,EAAE,IAAI;YACV,UAAU,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;YACtC,uCAAuC;YACvC,EAAE;YACF,8DAA8D;YAC9D,8DAA8D;YAC9D,+DAA+D;YAC/D,mEAAmE;YACnE,sDAAsD;YACtD,mEAAmE;YACnE,mEAAmE;YACnE,6DAA6D;YAC7D,GAAG,EAAE,EAAE;YACP,kEAAkE;YAClE,iEAAiE;YACjE,yDAAyD;YACzD,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,IAAI;SACZ,CAAC,CAAA;QAEF,OAAO,MAAM,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,EAAE;YACnD,IAAI,OAAO,GAAG,KAAK,CAAA;YACnB,MAAM,MAAM,GAAG,CAAC,MAAqB,EAAQ,EAAE;gBAC9C,8DAA8D;gBAC9D,wDAAwD;gBACxD,0DAA0D;gBAC1D,+DAA+D;gBAC/D,6DAA6D;gBAC7D,8DAA8D;gBAC9D,0DAA0D;gBAC1D,IAAI,OAAO;oBAAE,OAAM;gBACnB,OAAO,GAAG,IAAI,CAAA;gBACd,YAAY,CAAC,QAAQ,CAAC,CAAA;gBACtB,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;gBACrD,KAAK,MAAM,CAAC,SAAS,EAAE,CAAA;gBACvB,OAAO,CAAC,MAAM,CAAC,CAAA;YAChB,CAAC,CAAA;YAED,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE;gBAChC,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;YACxF,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAA;YAErB,MAAM,OAAO,GAAG,GAAS,EAAE;gBAC1B,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;YACxF,CAAC,CAAA;YACD,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YAClE,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;gBAC7B,OAAO,EAAE,CAAA;gBACT,OAAM;YACP,CAAC;YAED,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAgC,EAAE,EAAE;gBACzD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;oBAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;oBACjC,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,CAAA;oBACrB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;wBACxB,2DAA2D;wBAC3D,uDAAuD;wBACvD,wCAAwC;wBACxC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;wBAC/B,MAAM,CAAC,WAAW,CAAC;4BAClB,IAAI,EAAE,aAAa;4BACnB,EAAE;4BACF,EAAE,EAAE,KAAK;4BACT,KAAK,EAAE,IAAI,mBAAmB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,OAAO;yBAC/E,CAAC,CAAA;wBACF,OAAM;oBACP,CAAC;oBACD,KAAK,OAAO;yBACV,UAAU,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;yBAC1C,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;wBAChB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAA;wBACnC,MAAM,CAAC,WAAW,CAAC;4BAClB,IAAI,EAAE,aAAa;4BACnB,EAAE;4BACF,EAAE,EAAE,MAAM,CAAC,EAAE;4BACb,KAAK,EAAE,MAAM,CAAC,KAAK;4BACnB,KAAK,EAAE,MAAM,CAAC,KAAK;yBACnB,CAAC,CAAA;oBACH,CAAC,CAAC;yBACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;wBACvB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;wBAC/B,MAAM,CAAC,WAAW,CAAC;4BAClB,IAAI,EAAE,aAAa;4BACnB,EAAE;4BACF,EAAE,EAAE,KAAK;4BACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;yBACvD,CAAC,CAAA;oBACH,CAAC,CAAC,CAAA;oBACH,OAAM;gBACP,CAAC;gBAED,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC9B,YAAY,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;oBACpC,OAAM;gBACP,CAAC;gBAED,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;oBAC7B,MAAM,CAAC;wBACN,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;wBACxD,MAAM;wBACN,eAAe,EAAE,SAAS;wBAC1B,KAAK;qBACL,CAAC,CAAA;oBACF,OAAM;gBACP,CAAC;gBAED,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC9B,MAAM,CAAC;wBACN,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;wBAC3D,MAAM;wBACN,eAAe,EAAE,SAAS;wBAC1B,KAAK;qBACL,CAAC,CAAA;gBACH,CAAC;YACF,CAAC,CAAC,CAAA;YAEF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC1B,8DAA8D;gBAC9D,gEAAgE;gBAChE,kDAAkD;gBAClD,MAAM,CAAC;oBACN,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE;oBACjD,MAAM;oBACN,eAAe,EAAE,SAAS;oBAC1B,KAAK;iBACL,CAAC,CAAA;YACH,CAAC,CAAC,CAAA;YAEF,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBAC1B,0DAA0D;gBAC1D,2DAA2D;gBAC3D,0DAA0D;gBAC1D,MAAM,CAAC;oBACN,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,gCAAgC,IAAI,GAAG,EAAE;oBAC7E,MAAM;oBACN,eAAe,EAAE,SAAS;oBAC1B,KAAK;iBACL,CAAC,CAAA;YACH,CAAC,CAAC,CAAA;QACH,CAAC,CAAC,CAAA;IACH,CAAC;CACD"}

package/dist/{connector/execution → execution}/factory.d.ts

@@ -1,7 +1,7 @@
-import type { BaseExecutionContext } from '../../execution/base.js';
-import { LocalExecutionContext, type LocalExecutionContextOptions } from '../../execution/local.js';
-import type { ExecutionContextConfig } from '../../types/connector/index.js';
+import type { ExecutionContextConfig } from '../types/connector/index.js';
+import type { BaseExecutionContext } from './base.js';
 import { HybridExecutionContext, type HybridExecutionContextOptions } from './hybrid.js';
+import { LocalExecutionContext, type LocalExecutionContextOptions } from './local.js';
 import { RemoteExecutionContext, type RemoteExecutionContextOptions } from './remote.js';
 export declare class ExecutionContextFactory {
     static create(config: ExecutionContextConfig): BaseExecutionContext;

package/dist/execution/factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../src/execution/factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AACzE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAA;AACrD,OAAO,EAAE,sBAAsB,EAAE,KAAK,6BAA6B,EAAE,MAAM,aAAa,CAAA;AACxF,OAAO,EAAE,qBAAqB,EAAE,KAAK,4BAA4B,EAAE,MAAM,YAAY,CAAA;AACrF,OAAO,EAAE,sBAAsB,EAAE,KAAK,6BAA6B,EAAE,MAAM,aAAa,CAAA;AAExF,qBAAa,uBAAuB;IACnC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,GAAG,oBAAoB;IAkCnE,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,4BAA4B,GAAG,qBAAqB;IAIhF,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,6BAA6B,GAAG,sBAAsB;IAInF,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,6BAA6B,GAAG,sBAAsB;CAGnF"}

package/dist/{connector/execution → execution}/factory.js

@@ -1,5 +1,5 @@
-import { LocalExecutionContext } from '../../execution/local.js';
 import { HybridExecutionContext } from './hybrid.js';
+import { LocalExecutionContext } from './local.js';
 import { RemoteExecutionContext } from './remote.js';
 export class ExecutionContextFactory {
     static create(config) {

package/dist/execution/factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.js","sourceRoot":"","sources":["../../src/execution/factory.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,sBAAsB,EAAsC,MAAM,aAAa,CAAA;AACxF,OAAO,EAAE,qBAAqB,EAAqC,MAAM,YAAY,CAAA;AACrF,OAAO,EAAE,sBAAsB,EAAsC,MAAM,aAAa,CAAA;AAExF,MAAM,OAAO,uBAAuB;IACnC,MAAM,CAAC,MAAM,CAAC,MAA8B;QAC3C,QAAQ,MAAM,CAAC,WAAW,EAAE,CAAC;YAC5B,KAAK,OAAO;gBACX,OAAO,uBAAuB,CAAC,WAAW,CAAC;oBAC1C,EAAE,EAAE,MAAM,CAAC,EAAE;oBACb,GAAG,EAAE,MAAM,CAAC,GAAG;oBACf,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,KAAK,EAAE,MAAM,CAAC,KAAK;iBACnB,CAAC,CAAA;YAEH,KAAK,QAAQ;gBACZ,OAAO,uBAAuB,CAAC,YAAY,CAAC;oBAC3C,EAAE,EAAE,MAAM,CAAC,EAAE;oBACb,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,YAAY,EAAE,MAAM,CAAC,YAAY;iBACjC,CAAC,CAAA;YAEH,KAAK,QAAQ;gBACZ,OAAO,uBAAuB,CAAC,YAAY,CAAC;oBAC3C,EAAE,EAAE,MAAM,CAAC,EAAE;oBACb,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,eAAe,EAAE,MAAM,CAAC,eAAe;iBACvC,CAAC,CAAA;YAEH,OAAO,CAAC,CAAC,CAAC;gBACT,MAAM,WAAW,GAAU,MAAM,CAAA;gBACjC,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;YACnF,CAAC;QACF,CAAC;IACF,CAAC;IAED,MAAM,CAAC,WAAW,CAAC,OAAqC;QACvD,OAAO,IAAI,qBAAqB,CAAC,OAAO,CAAC,CAAA;IAC1C,CAAC;IAED,MAAM,CAAC,YAAY,CAAC,OAAsC;QACzD,OAAO,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAA;IAC3C,CAAC;IAED,MAAM,CAAC,YAAY,CAAC,OAAsC;QACzD,OAAO,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAA;IAC3C,CAAC;CACD"}

package/dist/{connector/execution → execution}/hybrid.d.ts

@@ -1,6 +1,7 @@
-import { BaseExecutionContext } from '../../execution/base.js';
-import { LocalExecutionContext } from '../../execution/local.js';
-import type { CommandExecutor, CommandOptions, CommandResult, ExecutionCapability, ExecutionEnvironment, ExecutionRoutingStrategy, HybridExecutionContextConfig, RemoteTarget } from '../../types/connector/index.js';
+import type { CommandExecutor, CommandOptions, CommandResult, ExecutionCapability, ExecutionEnvironment, ExecutionRoutingStrategy, HybridExecutionContextConfig, RemoteTarget } from '../types/connector/index.js';
+import type { Logger } from '../utils/logger.js';
+import { BaseExecutionContext } from './base.js';
+import { LocalExecutionContext } from './local.js';
 import { RemoteExecutionContext } from './remote.js';
 export interface HybridExecutionContextOptions {
     id: string;
@@ -13,6 +14,7 @@ export interface HybridExecutionContextOptions {
     };
     remotes: RemoteTarget[];
     routingStrategy?: ExecutionRoutingStrategy;
+    log?: Logger;
 }
 export declare class HybridExecutionContext extends BaseExecutionContext implements CommandExecutor {
     readonly id: string;

package/dist/execution/hybrid.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hybrid.d.ts","sourceRoot":"","sources":["../../src/execution/hybrid.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACX,eAAe,EACf,cAAc,EACd,aAAa,EACb,mBAAmB,EACnB,oBAAoB,EACpB,wBAAwB,EACxB,4BAA4B,EAC5B,YAAY,EACZ,MAAM,6BAA6B,CAAA;AACpC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAA;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AAEpD,MAAM,WAAW,6BAA6B;IAC7C,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE;QACN,GAAG,EAAE,MAAM,CAAA;QACX,QAAQ,CAAC,EAAE,OAAO,CAAA;QAClB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,YAAY,CAAC,EAAE,mBAAmB,EAAE,CAAA;QACpC,KAAK,CAAC,EAAE,MAAM,CAAA;KACd,CAAA;IACD,OAAO,EAAE,YAAY,EAAE,CAAA;IACvB,eAAe,CAAC,EAAE,wBAAwB,CAAA;IAC1C,GAAG,CAAC,EAAE,MAAM,CAAA;CACZ;AAED,qBAAa,sBAAuB,SAAQ,oBAAqB,YAAW,eAAe;IAC1F,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAW;IAErD,OAAO,CAAC,QAAQ,CAAuB;IACvC,OAAO,CAAC,UAAU,CAAiD;IACnE,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,eAAe,CAA0B;IACjD,OAAO,CAAC,eAAe,CAAI;gBAEf,OAAO,EAAE,6BAA6B;cA8BlC,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;cAgB7B,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAS3C,QAAQ,IAAI,qBAAqB;IAIjC,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,sBAAsB,GAAG,SAAS;IAI/D,UAAU,IAAI,sBAAsB,EAAE;IAItC,kBAAkB,IAAI,wBAAwB;IAI9C,kBAAkB,CAAC,QAAQ,EAAE,wBAAwB,GAAG,IAAI;IAKtD,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC;IAQlC,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC;IAQrC,cAAc,CACnB,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,MAAM,EAAO,EACnB,OAAO,CAAC,EAAE,cAAc,GACtB,OAAO,CAAC,aAAa,CAAC;IAwCzB,QAAQ,IAAI,4BAA4B;IAcxC,OAAO,CAAC,uBAAuB;IAS/B,OAAO,CAAC,oBAAoB;CAS5B"}

package/dist/{connector/execution → execution}/hybrid.js

@@ -1,5 +1,5 @@
-import { BaseExecutionContext } from '../../execution/base.js';
-import { LocalExecutionContext } from '../../execution/local.js';
+import { BaseExecutionContext } from './base.js';
+import { LocalExecutionContext } from './local.js';
 import { RemoteExecutionContext } from './remote.js';
 export class HybridExecutionContext extends BaseExecutionContext {
     id;
@@ -10,7 +10,7 @@ export class HybridExecutionContext extends BaseExecutionContext {
     routingStrategy;
     roundRobinIndex = 0;
     constructor(options) {
-        super();
+        super(options.log);
         this.id = options.id;
         this.remoteTargets = options.remotes;
         this.routingStrategy = options.routingStrategy ?? 'local-first';
@@ -21,6 +21,7 @@ export class HybridExecutionContext extends BaseExecutionContext {
             envVars: options.local.envVars,
             capabilities: options.local.capabilities,
             shell: options.local.shell,
+            log: options.log,
         });
         this.localCtx.on((event) => this.emit(event));
         for (const [i, target] of options.remotes.entries()) {
@@ -28,6 +29,7 @@ export class HybridExecutionContext extends BaseExecutionContext {
             const remote = new RemoteExecutionContext({
                 id: remoteId,
                 target,
+                log: options.log,
             });
             remote.on((event) => this.emit(event));
             this.remoteCtxs.set(remoteId, remote);
@@ -40,7 +42,11 @@ export class HybridExecutionContext extends BaseExecutionContext {
             initPromises.push(remote.initialize());
         }
         await Promise.all(initPromises);
-        this.log.info(`Hybrid context initialized: local(${this.localCtx.getCwd()}) + ${this.remoteCtxs.size} remote(s), strategy=${this.routingStrategy}`);
+        this.log.info('Hybrid context initialized', {
+            'namzu.execution.local_cwd': this.localCtx.getCwd(),
+            'namzu.execution.remote_count': this.remoteCtxs.size,
+            'namzu.execution.routing_strategy': this.routingStrategy,
+        });
     }
     async doTeardown() {
         const teardownPromises = [];

package/dist/execution/hybrid.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hybrid.js","sourceRoot":"","sources":["../../src/execution/hybrid.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAA;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AAgBpD,MAAM,OAAO,sBAAuB,SAAQ,oBAAoB;IACtD,EAAE,CAAQ;IACV,WAAW,GAAyB,QAAQ,CAAA;IAE7C,QAAQ,CAAuB;IAC/B,UAAU,GAAwC,IAAI,GAAG,EAAE,CAAA;IAC3D,aAAa,CAAgB;IAC7B,eAAe,CAA0B;IACzC,eAAe,GAAG,CAAC,CAAA;IAE3B,YAAY,OAAsC;QACjD,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAClB,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,CAAA;QACpB,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,OAAO,CAAA;QACpC,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,aAAa,CAAA;QAE/D,IAAI,CAAC,QAAQ,GAAG,IAAI,qBAAqB,CAAC;YACzC,EAAE,EAAE,GAAG,OAAO,CAAC,EAAE,QAAQ;YACzB,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG;YACtB,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ;YAChC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;YAC9B,YAAY,EAAE,OAAO,CAAC,KAAK,CAAC,YAAY;YACxC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK;YAC1B,GAAG,EAAE,OAAO,CAAC,GAAG;SAChB,CAAC,CAAA;QAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;QAE7C,KAAK,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACrD,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC,EAAE,WAAW,CAAC,EAAE,CAAA;YAC5C,MAAM,MAAM,GAAG,IAAI,sBAAsB,CAAC;gBACzC,EAAE,EAAE,QAAQ;gBACZ,MAAM;gBACN,GAAG,EAAE,OAAO,CAAC,GAAG;aAChB,CAAC,CAAA;YACF,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;YACtC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QACtC,CAAC;IACF,CAAC;IAES,KAAK,CAAC,YAAY;QAC3B,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAA;QAEhC,MAAM,YAAY,GAAoB,EAAE,CAAA;QACxC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;YAC/C,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAA;QACvC,CAAC;QACD,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;QAE/B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,4BAA4B,EAAE;YAC3C,2BAA2B,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;YACnD,8BAA8B,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YACpD,kCAAkC,EAAE,IAAI,CAAC,eAAe;SACxD,CAAC,CAAA;IACH,CAAC;IAES,KAAK,CAAC,UAAU;QACzB,MAAM,gBAAgB,GAAoB,EAAE,CAAA;QAC5C,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;YAC/C,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAA;QACzC,CAAC;QACD,MAAM,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAA;QAC1C,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAA;IAC/B,CAAC;IAED,QAAQ;QACP,OAAO,IAAI,CAAC,QAAQ,CAAA;IACrB,CAAC;IAED,SAAS,CAAC,QAAgB;QACzB,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IACrC,CAAC;IAED,UAAU;QACT,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAA;IAC5C,CAAC;IAED,kBAAkB;QACjB,OAAO,IAAI,CAAC,eAAe,CAAA;IAC5B,CAAC;IAED,kBAAkB,CAAC,QAAkC;QACpD,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAA;QAC/B,IAAI,CAAC,eAAe,GAAG,CAAC,CAAA;IACzB,CAAC;IAED,KAAK,CAAC,iBAAiB;QACtB,MAAM,QAAQ,GAAoB,EAAE,CAAA;QACpC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;YAC/C,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;QAChC,CAAC;QACD,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAC5B,CAAC;IAED,KAAK,CAAC,oBAAoB;QACzB,MAAM,QAAQ,GAAoB,EAAE,CAAA;QACpC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;YAC/C,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAA;QACnC,CAAC;QACD,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;IACnC,CAAC;IAED,KAAK,CAAC,cAAc,CACnB,OAAe,EACf,OAAiB,EAAE,EACnB,OAAwB;QAExB,QAAQ,IAAI,CAAC,eAAe,EAAE,CAAC;YAC9B,KAAK,aAAa;gBACjB,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;YAE5D,KAAK,cAAc,CAAC,CAAC,CAAC;gBACrB,MAAM,eAAe,GAAG,IAAI,CAAC,uBAAuB,EAAE,CAAA;gBACtD,IAAI,eAAe,EAAE,CAAC;oBACrB,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAA;oBAC9E,OAAO,eAAe,CAAC,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;gBAC3D,CAAC;gBACD,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;YAC5D,CAAC;YAED,KAAK,aAAa,CAAC,CAAC,CAAC;gBACpB,MAAM,OAAO,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAA;gBAC3C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC1B,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;gBAC5D,CAAC;gBACD,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,MAAM,CAAA;gBACzD,IAAI,CAAC,eAAe,EAAE,CAAA;gBACtB,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;gBACnC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBAC1B,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;gBAC5D,CAAC;gBAED,IAAI,MAAM,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAC9B,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;gBAC5D,CAAC;gBACD,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAA;gBAC9E,OAAQ,MAAiC,CAAC,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;YAC9E,CAAC;YAED,OAAO,CAAC,CAAC,CAAC;gBACT,MAAM,WAAW,GAAU,IAAI,CAAC,eAAe,CAAA;gBAC/C,MAAM,IAAI,KAAK,CAAC,+BAA+B,WAAW,EAAE,CAAC,CAAA;YAC9D,CAAC;QACF,CAAC;IACF,CAAC;IAED,QAAQ;QACP,OAAO;YACN,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,WAAW,EAAE,QAAQ;YACrB,KAAK,EAAE;gBACN,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;gBAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE;gBACrC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE;aACnC;YACD,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAClD,eAAe,EAAE,IAAI,CAAC,eAAe;SACrC,CAAA;IACF,CAAC;IAEO,uBAAuB;QAC9B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;YAC/C,IAAI,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC1B,OAAO,MAAM,CAAA;YACd,CAAC;QACF,CAAC;QACD,OAAO,SAAS,CAAA;IACjB,CAAC;IAEO,oBAAoB;QAC3B,MAAM,OAAO,GAAuD,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACnF,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;YAC/C,IAAI,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC1B,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YACrB,CAAC;QACF,CAAC;QACD,OAAO,OAAO,CAAA;IACf,CAAC;CACD"}