@probelabs/visor 0.1.144 → 0.1.145-ee

package/dist/sdk/{chunk-CLQTOZKH.mjs → chunk-I42ZCVA5.mjs}

@@ -1,11 +1,11 @@
 import {
   FailureConditionEvaluator,
   init_failure_condition_evaluator
-} from "./chunk-PQWAAGUP.mjs";
+} from "./chunk-L3XPYQ6I.mjs";
 import {
   addEvent,
   init_trace_helpers
-} from "./chunk-FG6THKK7.mjs";
+} from "./chunk-OM3WYVFI.mjs";
 import {
   createExtendedLiquid,
   init_liquid_extensions
@@ -1499,4 +1499,4 @@ export {
   evaluateTransitions,
   init_routing
 };
-//# sourceMappingURL=chunk-CLQTOZKH.mjs.map
+//# sourceMappingURL=chunk-I42ZCVA5.mjs.map

package/dist/sdk/{chunk-PQWAAGUP.mjs → chunk-L3XPYQ6I.mjs}

@@ -3,7 +3,7 @@ import {
   fallback_ndjson_exports,
   init_fallback_ndjson,
   init_trace_helpers
-} from "./chunk-FG6THKK7.mjs";
+} from "./chunk-OM3WYVFI.mjs";
 import {
   addFailIfTriggered,
   init_metrics
@@ -736,4 +736,4 @@ export {
   failure_condition_evaluator_exports,
   init_failure_condition_evaluator
 };
-//# sourceMappingURL=chunk-PQWAAGUP.mjs.map
+//# sourceMappingURL=chunk-L3XPYQ6I.mjs.map

package/dist/sdk/{chunk-FG6THKK7.mjs → chunk-OM3WYVFI.mjs}

@@ -88,7 +88,7 @@ var require_package = __commonJS({
   "package.json"(exports, module) {
     module.exports = {
       name: "@probelabs/visor",
-      version: "0.1.144",
+      version: "0.1.42",
       main: "dist/index.js",
       bin: {
         visor: "./dist/index.js"
@@ -202,7 +202,7 @@ var require_package = __commonJS({
         "@opentelemetry/sdk-node": "^0.203.0",
         "@opentelemetry/sdk-trace-base": "^1.30.1",
         "@opentelemetry/semantic-conventions": "^1.30.1",
-        "@probelabs/probe": "^0.6.0-rc259",
+        "@probelabs/probe": "^0.6.0-rc260",
         "@types/commander": "^2.12.0",
         "@types/uuid": "^10.0.0",
         acorn: "^8.16.0",
@@ -440,4 +440,4 @@ export {
   trace_helpers_exports,
   init_trace_helpers
 };
-//# sourceMappingURL=chunk-FG6THKK7.mjs.map
+//# sourceMappingURL=chunk-OM3WYVFI.mjs.map

package/dist/sdk/chunk-OM3WYVFI.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/telemetry/fallback-ndjson.ts","../../package.json","../../src/telemetry/trace-helpers.ts"],"sourcesContent":["import * as fs from 'fs';\nimport * as path from 'path';\n\nlet CURRENT_FILE: string | null = null;\nlet dirReady = false;\nlet writeChain: Promise<void> = Promise.resolve();\nfunction resolveTargetPath(outDir: string): string {\n  if (process.env.VISOR_FALLBACK_TRACE_FILE) {\n    CURRENT_FILE = process.env.VISOR_FALLBACK_TRACE_FILE;\n    return CURRENT_FILE;\n  }\n  if (CURRENT_FILE) return CURRENT_FILE;\n  const ts = new Date().toISOString().replace(/[:.]/g, '-');\n  CURRENT_FILE = path.join(outDir, `${ts}.ndjson`);\n  return CURRENT_FILE;\n}\n\nfunction isEnabled(): boolean {\n  // Enable when CLI set a fallback file (serverless mode), or when explicit file sink is enabled\n  if (process.env.VISOR_FALLBACK_TRACE_FILE) return true;\n  return (\n    process.env.VISOR_TELEMETRY_ENABLED === 'true' &&\n    (process.env.VISOR_TELEMETRY_SINK || 'file') === 'file'\n  );\n}\n\nfunction appendAsync(outDir: string, line: string): void {\n  writeChain = writeChain\n    .then(async () => {\n      if (!dirReady) {\n        try {\n          await fs.promises.mkdir(outDir, { recursive: true });\n        } catch {}\n        dirReady = true;\n      }\n      const target = resolveTargetPath(outDir);\n      await fs.promises.appendFile(target, line, 'utf8');\n    })\n    .catch(() => {});\n}\n\nexport async function flushNdjson(): Promise<void> {\n  try {\n    await writeChain;\n  } catch {}\n}\n\nexport function emitNdjsonFallback(name: string, attrs: Record<string, unknown>): void {\n  try {\n    if (!isEnabled()) return;\n    const outDir = process.env.VISOR_TRACE_DIR || path.join(process.cwd(), 'output', 'traces');\n    const line = JSON.stringify({ name, attributes: attrs }) + '\\n';\n    appendAsync(outDir, line);\n  } catch {\n    // ignore\n  }\n}\n\nexport function emitNdjsonSpanWithEvents(\n  name: string,\n  attrs: Record<string, unknown>,\n  events: Array<{ name: string; attrs?: Record<string, unknown> }>\n): void {\n  try {\n    if (!isEnabled()) return;\n    const outDir = process.env.VISOR_TRACE_DIR || path.join(process.cwd(), 'output', 'traces');\n    const line = JSON.stringify({ name, attributes: attrs, events }) + '\\n';\n    appendAsync(outDir, line);\n  } catch {\n    // ignore\n  }\n}\n","{\n  \"name\": \"@probelabs/visor\",\n  \"version\": \"0.1.42\",\n  \"main\": \"dist/index.js\",\n  \"bin\": {\n    \"visor\": \"./dist/index.js\"\n  },\n  \"exports\": {\n    \".\": {\n      \"require\": \"./dist/index.js\",\n      \"import\": \"./dist/index.js\"\n    },\n    \"./sdk\": {\n      \"types\": \"./dist/sdk/sdk.d.ts\",\n      \"import\": \"./dist/sdk/sdk.mjs\",\n      \"require\": \"./dist/sdk/sdk.js\"\n    },\n    \"./cli\": {\n      \"require\": \"./dist/index.js\"\n    }\n  },\n  \"files\": [\n    \"dist/\",\n    \"defaults/\",\n    \"action.yml\",\n    \"README.md\",\n    \"LICENSE\"\n  ],\n  \"publishConfig\": {\n    \"access\": \"public\",\n    \"registry\": \"https://registry.npmjs.org/\"\n  },\n  \"scripts\": {\n    \"build:cli\": \"ncc build src/index.ts -o dist && cp -r defaults dist/ && cp -r output dist/ && cp -r docs dist/ && cp -r examples dist/ && cp -r src/debug-visualizer/ui dist/debug-visualizer/ && node scripts/inject-version.js && echo '#!/usr/bin/env node' | cat - dist/index.js > temp && mv temp dist/index.js && chmod +x dist/index.js\",\n    \"build:sdk\": \"tsup src/sdk.ts --dts --sourcemap --format esm,cjs --out-dir dist/sdk\",\n    \"build\": \"./scripts/build-oss.sh\",\n    \"build:ee\": \"npm run build:cli && npm run build:sdk\",\n    \"test\": \"jest && npm run test:yaml\",\n    \"test:unit\": \"jest\",\n    \"prepublishOnly\": \"npm run build\",\n    \"test:watch\": \"jest --watch\",\n    \"test:coverage\": \"jest --coverage\",\n    \"test:ee\": \"jest --testPathPatterns='tests/ee' --testPathIgnorePatterns='/node_modules/' --no-coverage\",\n    \"test:manual:bash\": \"RUN_MANUAL_TESTS=true jest tests/manual/bash-config-manual.test.ts\",\n    \"lint\": \"eslint src tests --ext .ts\",\n    \"lint:fix\": \"eslint src tests --ext .ts --fix\",\n    \"format\": \"prettier --write src tests\",\n    \"format:check\": \"prettier --check src tests\",\n    \"clean\": \"\",\n    \"clean:traces\": \"node scripts/clean-traces.js\",\n    \"prebuild\": \"npm run clean && node scripts/generate-config-schema.js\",\n    \"pretest\": \"npm run clean:traces && node scripts/generate-config-schema.js && npm run build:cli\",\n    \"pretest:unit\": \"npm run clean:traces && node scripts/generate-config-schema.js && npm run build:cli\",\n    \"test:with-build\": \"npm run build:cli && jest\",\n    \"test:yaml\": \"node dist/index.js test --progress compact\",\n    \"test:yaml:parallel\": \"node dist/index.js test --progress compact --max-parallel 4\",\n    \"prepare\": \"husky\",\n    \"pre-commit\": \"lint-staged\",\n    \"deploy:site\": \"cd site && npx wrangler pages deploy . --project-name=visor-site --commit-dirty=true\",\n    \"deploy:worker\": \"npx wrangler deploy\",\n    \"deploy\": \"npm run deploy:site && npm run deploy:worker\",\n    \"publish:ee\": \"./scripts/publish-ee.sh\",\n    \"release\": \"./scripts/release.sh\",\n    \"release:patch\": \"./scripts/release.sh patch\",\n    \"release:minor\": \"./scripts/release.sh minor\",\n    \"release:major\": \"./scripts/release.sh major\",\n    \"release:prerelease\": \"./scripts/release.sh prerelease\",\n    \"docs:validate\": \"node scripts/validate-readme-links.js\",\n    \"workshop:setup\": \"npm install -D reveal-md@6.1.2\",\n    \"workshop:serve\": \"cd workshop && reveal-md slides.md -w\",\n    \"workshop:export\": \"reveal-md workshop/slides.md --static workshop/build\",\n    \"workshop:pdf\": \"reveal-md workshop/slides.md --print workshop/Visor-Workshop.pdf --print-size letter\",\n    \"workshop:pdf:ci\": \"reveal-md workshop/slides.md --print workshop/Visor-Workshop.pdf --print-size letter --puppeteer-launch-args=\\\"--no-sandbox --disable-dev-shm-usage\\\"\",\n    \"workshop:pdf:a4\": \"reveal-md workshop/slides.md --print workshop/Visor-Workshop-A4.pdf --print-size A4\",\n    \"workshop:build\": \"npm run workshop:export && npm run workshop:pdf\",\n    \"simulate:issue\": \"TS_NODE_TRANSPILE_ONLY=1 ts-node scripts/simulate-gh-run.ts --event issues --action opened --debug\",\n    \"simulate:comment\": \"TS_NODE_TRANSPILE_ONLY=1 ts-node scripts/simulate-gh-run.ts --event issue_comment --action created --debug\"\n  },\n  \"keywords\": [\n    \"code-review\",\n    \"ai\",\n    \"github-action\",\n    \"cli\",\n    \"pr-review\",\n    \"visor\"\n  ],\n  \"author\": \"Probe Labs\",\n  \"license\": \"MIT\",\n  \"description\": \"AI workflow engine for code review, assistants, and automation — orchestrate checks, MCP tools, and AI providers with YAML-driven pipelines\",\n  \"repository\": {\n    \"type\": \"git\",\n    \"url\": \"git+https://github.com/probelabs/visor.git\"\n  },\n  \"bugs\": {\n    \"url\": \"https://github.com/probelabs/visor/issues\"\n  },\n  \"homepage\": \"https://github.com/probelabs/visor#readme\",\n  \"dependencies\": {\n    \"@actions/core\": \"^1.11.1\",\n    \"@apidevtools/swagger-parser\": \"^12.1.0\",\n    \"@modelcontextprotocol/sdk\": \"^1.25.3\",\n    \"@nyariv/sandboxjs\": \"github:probelabs/SandboxJS#f1c13b8eee98734a8ea024061eada4aa9a9ff2e9\",\n    \"@octokit/action\": \"^8.0.2\",\n    \"@octokit/auth-app\": \"^8.1.0\",\n    \"@octokit/core\": \"^7.0.3\",\n    \"@octokit/rest\": \"^22.0.0\",\n    \"@opentelemetry/api\": \"^1.9.0\",\n    \"@opentelemetry/core\": \"^1.30.1\",\n    \"@opentelemetry/exporter-trace-otlp-grpc\": \"^0.203.0\",\n    \"@opentelemetry/exporter-trace-otlp-http\": \"^0.203.0\",\n    \"@opentelemetry/instrumentation\": \"^0.203.0\",\n    \"@opentelemetry/resources\": \"^1.30.1\",\n    \"@opentelemetry/sdk-metrics\": \"^1.30.1\",\n    \"@opentelemetry/sdk-node\": \"^0.203.0\",\n    \"@opentelemetry/sdk-trace-base\": \"^1.30.1\",\n    \"@opentelemetry/semantic-conventions\": \"^1.30.1\",\n    \"@probelabs/probe\": \"^0.6.0-rc260\",\n    \"@types/commander\": \"^2.12.0\",\n    \"@types/uuid\": \"^10.0.0\",\n    \"acorn\": \"^8.16.0\",\n    \"acorn-walk\": \"^8.3.5\",\n    \"ajv\": \"^8.17.1\",\n    \"ajv-formats\": \"^3.0.1\",\n    \"better-sqlite3\": \"^11.0.0\",\n    \"blessed\": \"^0.1.81\",\n    \"cli-table3\": \"^0.6.5\",\n    \"commander\": \"^14.0.0\",\n    \"deepmerge\": \"^4.3.1\",\n    \"dotenv\": \"^17.2.3\",\n    \"ignore\": \"^7.0.5\",\n    \"js-yaml\": \"^4.1.0\",\n    \"jsonpath-plus\": \"^10.4.0\",\n    \"liquidjs\": \"^10.21.1\",\n    \"minimatch\": \"^10.2.2\",\n    \"node-cron\": \"^3.0.3\",\n    \"open\": \"^9.1.0\",\n    \"simple-git\": \"^3.28.0\",\n    \"uuid\": \"^11.1.0\",\n    \"ws\": \"^8.18.3\"\n  },\n  \"optionalDependencies\": {\n    \"@anthropic/claude-code-sdk\": \"npm:null@*\",\n    \"@open-policy-agent/opa-wasm\": \"^1.10.0\",\n    \"knex\": \"^3.1.0\",\n    \"mysql2\": \"^3.11.0\",\n    \"pg\": \"^8.13.0\",\n    \"tedious\": \"^19.0.0\"\n  },\n  \"devDependencies\": {\n    \"@eslint/js\": \"^9.34.0\",\n    \"@kie/act-js\": \"^2.6.2\",\n    \"@kie/mock-github\": \"^2.0.1\",\n    \"@swc/core\": \"^1.13.2\",\n    \"@swc/jest\": \"^0.2.37\",\n    \"@types/better-sqlite3\": \"^7.6.0\",\n    \"@types/blessed\": \"^0.1.27\",\n    \"@types/jest\": \"^30.0.0\",\n    \"@types/js-yaml\": \"^4.0.9\",\n    \"@types/node\": \"^24.3.0\",\n    \"@types/node-cron\": \"^3.0.11\",\n    \"@types/ws\": \"^8.18.1\",\n    \"@typescript-eslint/eslint-plugin\": \"^8.42.0\",\n    \"@typescript-eslint/parser\": \"^8.42.0\",\n    \"@vercel/ncc\": \"^0.38.4\",\n    \"eslint\": \"^9.34.0\",\n    \"eslint-config-prettier\": \"^10.1.8\",\n    \"eslint-plugin-prettier\": \"^5.5.4\",\n    \"husky\": \"^9.1.7\",\n    \"jest\": \"^30.1.3\",\n    \"lint-staged\": \"^16.1.6\",\n    \"prettier\": \"^3.6.2\",\n    \"reveal-md\": \"^6.1.2\",\n    \"ts-json-schema-generator\": \"^1.5.1\",\n    \"ts-node\": \"^10.9.2\",\n    \"tsup\": \"^8.5.0\",\n    \"typescript\": \"^5.9.2\",\n    \"wrangler\": \"^3.0.0\"\n  },\n  \"peerDependenciesMeta\": {\n    \"@anthropic/claude-code-sdk\": {\n      \"optional\": true\n    }\n  },\n  \"directories\": {\n    \"test\": \"tests\"\n  },\n  \"lint-staged\": {\n    \"src/**/*.{ts,js}\": [\n      \"eslint --fix\",\n      \"prettier --write\"\n    ],\n    \"tests/**/*.{ts,js}\": [\n      \"eslint --fix\",\n      \"prettier --write\"\n    ],\n    \"*.{json,md,yml,yaml}\": [\n      \"prettier --write\"\n    ]\n  }\n}\n","import { context as otContext, Span, SpanStatusCode, trace, Attributes } from './lazy-otel';\n\nexport function getTracer() {\n  return trace.getTracer('visor');\n}\n\nexport async function withActiveSpan<T>(\n  name: string,\n  attrs: Record<string, unknown> | undefined,\n  fn: (span: Span) => Promise<T>\n): Promise<T> {\n  const tracer = getTracer();\n  // Preserve parent context via tracer API; avoid logging parent IDs to stdout\n  // Avoid noisy stdout logs that break JSON consumers\n  return await new Promise<T>((resolve, reject) => {\n    const callback = async (span: Span) => {\n      // console.debug(`[trace] Span callback invoked for: [trace_id=${ctx.traceId} span_id=${ctx.spanId}] ${name} span: true`);\n      try {\n        const res = await fn(span);\n        // console.debug('[trace] Span execution completed for:', name);\n        resolve(res);\n      } catch (err) {\n        // console.debug('[trace] Span execution errored for:', name, err);\n        try {\n          if (err instanceof Error) span.recordException(err);\n          span.setStatus({ code: SpanStatusCode.ERROR });\n        } catch {}\n        reject(err);\n      } finally {\n        try {\n          // console.debug('[trace] Ending span:', name);\n          span.end();\n        } catch {}\n      }\n    };\n    // startActiveSpan should use the current active context to set parent automatically\n    const options = attrs ? { attributes: attrs as Attributes } : {};\n    tracer.startActiveSpan(name, options, callback);\n  });\n}\n\nexport function addEvent(name: string, attrs?: Record<string, unknown>): void {\n  const span = trace.getSpan(otContext.active());\n  if (span) {\n    try {\n      span.addEvent(name, attrs as Attributes);\n    } catch {\n      // ignore\n    }\n  }\n  // Fallback NDJSON emission for serverless/file sink when SDK may be inactive\n  try {\n    const { emitNdjsonSpanWithEvents } = require('./fallback-ndjson');\n    emitNdjsonSpanWithEvents('visor.event', {}, [{ name, attrs }]);\n    if (name === 'fail_if.triggered') {\n      emitNdjsonSpanWithEvents('visor.event', {}, [\n        { name: 'fail_if.evaluated', attrs },\n        { name: 'fail_if.triggered', attrs },\n      ]);\n    }\n  } catch {}\n}\n\nexport function setSpanAttributes(attrs: Record<string, unknown>): void {\n  const span = trace.getSpan(otContext.active());\n  if (!span) return;\n  try {\n    for (const [k, v] of Object.entries(attrs)) span.setAttribute(k, v as never);\n  } catch {\n    // ignore\n  }\n}\n\nexport function setSpanError(err: unknown): void {\n  const span = trace.getSpan(otContext.active());\n  if (!span) return;\n  try {\n    if (err instanceof Error) span.recordException(err);\n    span.setStatus({ code: SpanStatusCode.ERROR });\n  } catch {\n    // ignore\n  }\n}\n\n/**\n * Return standard visor.* resource attributes for the root `visor.run` span.\n * Reads version from package.json / env and git commit short SHA from env.\n */\nexport function getVisorRunAttributes(): Record<string, string> {\n  const attrs: Record<string, string> = {};\n  try {\n    attrs['visor.version'] =\n      process.env.VISOR_VERSION || (require('../../package.json')?.version ?? 'dev');\n  } catch {\n    attrs['visor.version'] = 'dev';\n  }\n  const commitShort = process.env.VISOR_COMMIT_SHORT || '';\n  const commitFull = process.env.VISOR_COMMIT_SHA || process.env.VISOR_COMMIT || '';\n  if (commitShort) {\n    attrs['visor.commit'] = commitShort;\n  }\n  if (commitFull) {\n    attrs['visor.commit.sha'] = commitFull;\n  }\n  return attrs;\n}\n\n// Internal helper for tests: write a minimal run marker to NDJSON when using file sink\nlet __ndjsonPath: string | null = null;\nexport function __getOrCreateNdjsonPath(): string | null {\n  try {\n    // If sink is explicitly set to non-file, skip. If unset, still allow when a trace dir/file is configured.\n    if (process.env.VISOR_TELEMETRY_SINK && process.env.VISOR_TELEMETRY_SINK !== 'file')\n      return null;\n    const path = require('path');\n    const fs = require('fs');\n    // Prefer explicit fallback file path if set by the CLI\n    if (process.env.VISOR_FALLBACK_TRACE_FILE) {\n      __ndjsonPath = process.env.VISOR_FALLBACK_TRACE_FILE;\n      const dir = path.dirname(__ndjsonPath);\n      if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });\n      return __ndjsonPath;\n    }\n    const outDir = process.env.VISOR_TRACE_DIR || path.join(process.cwd(), 'output', 'traces');\n    if (!fs.existsSync(outDir)) fs.mkdirSync(outDir, { recursive: true });\n    if (!__ndjsonPath) {\n      const ts = new Date().toISOString().replace(/[:.]/g, '-');\n      __ndjsonPath = path.join(outDir, `${ts}.ndjson`);\n    }\n    return __ndjsonPath;\n  } catch {\n    return null;\n  }\n}\nexport function _appendRunMarker(): void {\n  try {\n    const fs = require('fs');\n    const p = __getOrCreateNdjsonPath();\n    if (!p) return;\n    const line = { name: 'visor.run', attributes: { started: true } };\n    fs.appendFileSync(p, JSON.stringify(line) + '\\n', 'utf8');\n  } catch {}\n}\n"],"mappings":";;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,YAAY,QAAQ;AACpB,YAAY,UAAU;AAKtB,SAAS,kBAAkB,QAAwB;AACjD,MAAI,QAAQ,IAAI,2BAA2B;AACzC,mBAAe,QAAQ,IAAI;AAC3B,WAAO;AAAA,EACT;AACA,MAAI,aAAc,QAAO;AACzB,QAAM,MAAK,oBAAI,KAAK,GAAE,YAAY,EAAE,QAAQ,SAAS,GAAG;AACxD,iBAAoB,UAAK,QAAQ,GAAG,EAAE,SAAS;AAC/C,SAAO;AACT;AAEA,SAAS,YAAqB;AAE5B,MAAI,QAAQ,IAAI,0BAA2B,QAAO;AAClD,SACE,QAAQ,IAAI,4BAA4B,WACvC,QAAQ,IAAI,wBAAwB,YAAY;AAErD;AAEA,SAAS,YAAY,QAAgB,MAAoB;AACvD,eAAa,WACV,KAAK,YAAY;AAChB,QAAI,CAAC,UAAU;AACb,UAAI;AACF,cAAS,YAAS,MAAM,QAAQ,EAAE,WAAW,KAAK,CAAC;AAAA,MACrD,QAAQ;AAAA,MAAC;AACT,iBAAW;AAAA,IACb;AACA,UAAM,SAAS,kBAAkB,MAAM;AACvC,UAAS,YAAS,WAAW,QAAQ,MAAM,MAAM;AAAA,EACnD,CAAC,EACA,MAAM,MAAM;AAAA,EAAC,CAAC;AACnB;AAEA,eAAsB,cAA6B;AACjD,MAAI;AACF,UAAM;AAAA,EACR,QAAQ;AAAA,EAAC;AACX;AAEO,SAAS,mBAAmB,MAAc,OAAsC;AACrF,MAAI;AACF,QAAI,CAAC,UAAU,EAAG;AAClB,UAAM,SAAS,QAAQ,IAAI,mBAAwB,UAAK,QAAQ,IAAI,GAAG,UAAU,QAAQ;AACzF,UAAM,OAAO,KAAK,UAAU,EAAE,MAAM,YAAY,MAAM,CAAC,IAAI;AAC3D,gBAAY,QAAQ,IAAI;AAAA,EAC1B,QAAQ;AAAA,EAER;AACF;AAEO,SAAS,yBACd,MACA,OACA,QACM;AACN,MAAI;AACF,QAAI,CAAC,UAAU,EAAG;AAClB,UAAM,SAAS,QAAQ,IAAI,mBAAwB,UAAK,QAAQ,IAAI,GAAG,UAAU,QAAQ;AACzF,UAAM,OAAO,KAAK,UAAU,EAAE,MAAM,YAAY,OAAO,OAAO,CAAC,IAAI;AACnE,gBAAY,QAAQ,IAAI;AAAA,EAC1B,QAAQ;AAAA,EAER;AACF;AAvEA,IAGI,cACA,UACA;AALJ;AAAA;AAAA;AAGA,IAAI,eAA8B;AAClC,IAAI,WAAW;AACf,IAAI,aAA4B,QAAQ,QAAQ;AAAA;AAAA;;;ACLhD;AAAA;AAAA;AAAA,MACE,MAAQ;AAAA,MACR,SAAW;AAAA,MACX,MAAQ;AAAA,MACR,KAAO;AAAA,QACL,OAAS;AAAA,MACX;AAAA,MACA,SAAW;AAAA,QACT,KAAK;AAAA,UACH,SAAW;AAAA,UACX,QAAU;AAAA,QACZ;AAAA,QACA,SAAS;AAAA,UACP,OAAS;AAAA,UACT,QAAU;AAAA,UACV,SAAW;AAAA,QACb;AAAA,QACA,SAAS;AAAA,UACP,SAAW;AAAA,QACb;AAAA,MACF;AAAA,MACA,OAAS;AAAA,QACP;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MACA,eAAiB;AAAA,QACf,QAAU;AAAA,QACV,UAAY;AAAA,MACd;AAAA,MACA,SAAW;AAAA,QACT,aAAa;AAAA,QACb,aAAa;AAAA,QACb,OAAS;AAAA,QACT,YAAY;AAAA,QACZ,MAAQ;AAAA,QACR,aAAa;AAAA,QACb,gBAAkB;AAAA,QAClB,cAAc;AAAA,QACd,iBAAiB;AAAA,QACjB,WAAW;AAAA,QACX,oBAAoB;AAAA,QACpB,MAAQ;AAAA,QACR,YAAY;AAAA,QACZ,QAAU;AAAA,QACV,gBAAgB;AAAA,QAChB,OAAS;AAAA,QACT,gBAAgB;AAAA,QAChB,UAAY;AAAA,QACZ,SAAW;AAAA,QACX,gBAAgB;AAAA,QAChB,mBAAmB;AAAA,QACnB,aAAa;AAAA,QACb,sBAAsB;AAAA,QACtB,SAAW;AAAA,QACX,cAAc;AAAA,QACd,eAAe;AAAA,QACf,iBAAiB;AAAA,QACjB,QAAU;AAAA,QACV,cAAc;AAAA,QACd,SAAW;AAAA,QACX,iBAAiB;AAAA,QACjB,iBAAiB;AAAA,QACjB,iBAAiB;AAAA,QACjB,sBAAsB;AAAA,QACtB,iBAAiB;AAAA,QACjB,kBAAkB;AAAA,QAClB,kBAAkB;AAAA,QAClB,mBAAmB;AAAA,QACnB,gBAAgB;AAAA,QAChB,mBAAmB;AAAA,QACnB,mBAAmB;AAAA,QACnB,kBAAkB;AAAA,QAClB,kBAAkB;AAAA,QAClB,oBAAoB;AAAA,MACtB;AAAA,MACA,UAAY;AAAA,QACV;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MACA,QAAU;AAAA,MACV,SAAW;AAAA,MACX,aAAe;AAAA,MACf,YAAc;AAAA,QACZ,MAAQ;AAAA,QACR,KAAO;AAAA,MACT;AAAA,MACA,MAAQ;AAAA,QACN,KAAO;AAAA,MACT;AAAA,MACA,UAAY;AAAA,MACZ,cAAgB;AAAA,QACd,iBAAiB;AAAA,QACjB,+BAA+B;AAAA,QAC/B,6BAA6B;AAAA,QAC7B,qBAAqB;AAAA,QACrB,mBAAmB;AAAA,QACnB,qBAAqB;AAAA,QACrB,iBAAiB;AAAA,QACjB,iBAAiB;AAAA,QACjB,sBAAsB;AAAA,QACtB,uBAAuB;AAAA,QACvB,2CAA2C;AAAA,QAC3C,2CAA2C;AAAA,QAC3C,kCAAkC;AAAA,QAClC,4BAA4B;AAAA,QAC5B,8BAA8B;AAAA,QAC9B,2BAA2B;AAAA,QAC3B,iCAAiC;AAAA,QACjC,uCAAuC;AAAA,QACvC,oBAAoB;AAAA,QACpB,oBAAoB;AAAA,QACpB,eAAe;AAAA,QACf,OAAS;AAAA,QACT,cAAc;AAAA,QACd,KAAO;AAAA,QACP,eAAe;AAAA,QACf,kBAAkB;AAAA,QAClB,SAAW;AAAA,QACX,cAAc;AAAA,QACd,WAAa;AAAA,QACb,WAAa;AAAA,QACb,QAAU;AAAA,QACV,QAAU;AAAA,QACV,WAAW;AAAA,QACX,iBAAiB;AAAA,QACjB,UAAY;AAAA,QACZ,WAAa;AAAA,QACb,aAAa;AAAA,QACb,MAAQ;AAAA,QACR,cAAc;AAAA,QACd,MAAQ;AAAA,QACR,IAAM;AAAA,MACR;AAAA,MACA,sBAAwB;AAAA,QACtB,8BAA8B;AAAA,QAC9B,+BAA+B;AAAA,QAC/B,MAAQ;AAAA,QACR,QAAU;AAAA,QACV,IAAM;AAAA,QACN,SAAW;AAAA,MACb;AAAA,MACA,iBAAmB;AAAA,QACjB,cAAc;AAAA,QACd,eAAe;AAAA,QACf,oBAAoB;AAAA,QACpB,aAAa;AAAA,QACb,aAAa;AAAA,QACb,yBAAyB;AAAA,QACzB,kBAAkB;AAAA,QAClB,eAAe;AAAA,QACf,kBAAkB;AAAA,QAClB,eAAe;AAAA,QACf,oBAAoB;AAAA,QACpB,aAAa;AAAA,QACb,oCAAoC;AAAA,QACpC,6BAA6B;AAAA,QAC7B,eAAe;AAAA,QACf,QAAU;AAAA,QACV,0BAA0B;AAAA,QAC1B,0BAA0B;AAAA,QAC1B,OAAS;AAAA,QACT,MAAQ;AAAA,QACR,eAAe;AAAA,QACf,UAAY;AAAA,QACZ,aAAa;AAAA,QACb,4BAA4B;AAAA,QAC5B,WAAW;AAAA,QACX,MAAQ;AAAA,QACR,YAAc;AAAA,QACd,UAAY;AAAA,MACd;AAAA,MACA,sBAAwB;AAAA,QACtB,8BAA8B;AAAA,UAC5B,UAAY;AAAA,QACd;AAAA,MACF;AAAA,MACA,aAAe;AAAA,QACb,MAAQ;AAAA,MACV;AAAA,MACA,eAAe;AAAA,QACb,oBAAoB;AAAA,UAClB;AAAA,UACA;AAAA,QACF;AAAA,QACA,sBAAsB;AAAA,UACpB;AAAA,UACA;AAAA,QACF;AAAA,QACA,wBAAwB;AAAA,UACtB;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA;AAAA;;;ACvMA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAEO,SAAS,YAAY;AAC1B,SAAO,MAAM,UAAU,OAAO;AAChC;AAEA,eAAsB,eACpB,MACA,OACA,IACY;AACZ,QAAM,SAAS,UAAU;AAGzB,SAAO,MAAM,IAAI,QAAW,CAAC,SAAS,WAAW;AAC/C,UAAM,WAAW,OAAO,SAAe;AAErC,UAAI;AACF,cAAM,MAAM,MAAM,GAAG,IAAI;AAEzB,gBAAQ,GAAG;AAAA,MACb,SAAS,KAAK;AAEZ,YAAI;AACF,cAAI,eAAe,MAAO,MAAK,gBAAgB,GAAG;AAClD,eAAK,UAAU,EAAE,MAAM,eAAe,MAAM,CAAC;AAAA,QAC/C,QAAQ;AAAA,QAAC;AACT,eAAO,GAAG;AAAA,MACZ,UAAE;AACA,YAAI;AAEF,eAAK,IAAI;AAAA,QACX,QAAQ;AAAA,QAAC;AAAA,MACX;AAAA,IACF;AAEA,UAAM,UAAU,QAAQ,EAAE,YAAY,MAAoB,IAAI,CAAC;AAC/D,WAAO,gBAAgB,MAAM,SAAS,QAAQ;AAAA,EAChD,CAAC;AACH;AAEO,SAAS,SAAS,MAAc,OAAuC;AAC5E,QAAM,OAAO,MAAM,QAAQ,QAAU,OAAO,CAAC;AAC7C,MAAI,MAAM;AACR,QAAI;AACF,WAAK,SAAS,MAAM,KAAmB;AAAA,IACzC,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,MAAI;AACF,UAAM,EAAE,0BAAAA,0BAAyB,IAAI;AACrC,IAAAA,0BAAyB,eAAe,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC,CAAC;AAC7D,QAAI,SAAS,qBAAqB;AAChC,MAAAA,0BAAyB,eAAe,CAAC,GAAG;AAAA,QAC1C,EAAE,MAAM,qBAAqB,MAAM;AAAA,QACnC,EAAE,MAAM,qBAAqB,MAAM;AAAA,MACrC,CAAC;AAAA,IACH;AAAA,EACF,QAAQ;AAAA,EAAC;AACX;AAEO,SAAS,kBAAkB,OAAsC;AACtE,QAAM,OAAO,MAAM,QAAQ,QAAU,OAAO,CAAC;AAC7C,MAAI,CAAC,KAAM;AACX,MAAI;AACF,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,KAAK,EAAG,MAAK,aAAa,GAAG,CAAU;AAAA,EAC7E,QAAQ;AAAA,EAER;AACF;AAEO,SAAS,aAAa,KAAoB;AAC/C,QAAM,OAAO,MAAM,QAAQ,QAAU,OAAO,CAAC;AAC7C,MAAI,CAAC,KAAM;AACX,MAAI;AACF,QAAI,eAAe,MAAO,MAAK,gBAAgB,GAAG;AAClD,SAAK,UAAU,EAAE,MAAM,eAAe,MAAM,CAAC;AAAA,EAC/C,QAAQ;AAAA,EAER;AACF;AAMO,SAAS,wBAAgD;AAC9D,QAAM,QAAgC,CAAC;AACvC,MAAI;AACF,UAAM,eAAe,IACnB,QAAQ,IAAI,kBAAkB,mBAA+B,WAAW;AAAA,EAC5E,QAAQ;AACN,UAAM,eAAe,IAAI;AAAA,EAC3B;AACA,QAAM,cAAc,QAAQ,IAAI,sBAAsB;AACtD,QAAM,aAAa,QAAQ,IAAI,oBAAoB,QAAQ,IAAI,gBAAgB;AAC/E,MAAI,aAAa;AACf,UAAM,cAAc,IAAI;AAAA,EAC1B;AACA,MAAI,YAAY;AACd,UAAM,kBAAkB,IAAI;AAAA,EAC9B;AACA,SAAO;AACT;AAIO,SAAS,0BAAyC;AACvD,MAAI;AAEF,QAAI,QAAQ,IAAI,wBAAwB,QAAQ,IAAI,yBAAyB;AAC3E,aAAO;AACT,UAAMC,QAAO,UAAQ,MAAM;AAC3B,UAAMC,MAAK,UAAQ,IAAI;AAEvB,QAAI,QAAQ,IAAI,2BAA2B;AACzC,qBAAe,QAAQ,IAAI;AAC3B,YAAM,MAAMD,MAAK,QAAQ,YAAY;AACrC,UAAI,CAACC,IAAG,WAAW,GAAG,EAAG,CAAAA,IAAG,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;AAC9D,aAAO;AAAA,IACT;AACA,UAAM,SAAS,QAAQ,IAAI,mBAAmBD,MAAK,KAAK,QAAQ,IAAI,GAAG,UAAU,QAAQ;AACzF,QAAI,CAACC,IAAG,WAAW,MAAM,EAAG,CAAAA,IAAG,UAAU,QAAQ,EAAE,WAAW,KAAK,CAAC;AACpE,QAAI,CAAC,cAAc;AACjB,YAAM,MAAK,oBAAI,KAAK,GAAE,YAAY,EAAE,QAAQ,SAAS,GAAG;AACxD,qBAAeD,MAAK,KAAK,QAAQ,GAAG,EAAE,SAAS;AAAA,IACjD;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AACO,SAAS,mBAAyB;AACvC,MAAI;AACF,UAAMC,MAAK,UAAQ,IAAI;AACvB,UAAM,IAAI,wBAAwB;AAClC,QAAI,CAAC,EAAG;AACR,UAAM,OAAO,EAAE,MAAM,aAAa,YAAY,EAAE,SAAS,KAAK,EAAE;AAChE,IAAAA,IAAG,eAAe,GAAG,KAAK,UAAU,IAAI,IAAI,MAAM,MAAM;AAAA,EAC1D,QAAQ;AAAA,EAAC;AACX;AA9IA,IA4GI;AA5GJ;AAAA;AAAA;AA4GA,IAAI,eAA8B;AAAA;AAAA;","names":["emitNdjsonSpanWithEvents","path","fs"]}

package/dist/sdk/{chunk-AKCHIYWU.mjs → chunk-YOKAA4IU.mjs}

@@ -2728,6 +2728,11 @@ var init_config_schema = __esm({
         SandboxConfig: {
           type: "object",
           properties: {
+            engine: {
+              type: "string",
+              enum: ["docker", "bubblewrap", "seatbelt"],
+              description: "Sandbox engine type: 'docker' (default), 'bubblewrap' (Linux namespaces), or 'seatbelt' (macOS sandbox-exec)"
+            },
             image: {
               type: "string",
               description: 'Docker image to use (e.g., "node:20-alpine")'
@@ -4104,92 +4109,120 @@ ${errors}`);
             message: `Sandbox name '${name}' contains invalid characters. Only letters, numbers, dots, hyphens, underscores allowed.`
           });
         }
-        const modes = [
-          config.image ? "image" : null,
-          config.dockerfile || config.dockerfile_inline ? "dockerfile" : null,
-          config.compose ? "compose" : null
-        ].filter(Boolean);
-        if (modes.length === 0) {
-          errors.push({
-            field: `sandboxes.${name}`,
-            message: `Sandbox '${name}' must specify one of: image, dockerfile, dockerfile_inline, or compose`
-          });
-        } else if (modes.length > 1) {
-          errors.push({
-            field: `sandboxes.${name}`,
-            message: `Sandbox '${name}' has multiple modes (${modes.join(", ")}). Specify exactly one.`
-          });
-        }
-        if (config.compose && !config.service) {
+        if (config.engine && !["docker", "bubblewrap", "seatbelt"].includes(config.engine)) {
           errors.push({
-            field: `sandboxes.${name}.service`,
-            message: `Sandbox '${name}' uses compose mode but is missing required 'service' field`
+            field: `sandboxes.${name}.engine`,
+            message: `Sandbox '${name}' has invalid engine '${config.engine}'. Must be 'docker', 'bubblewrap', or 'seatbelt'.`
           });
         }
-        if (config.dockerfile && /\.\./.test(config.dockerfile)) {
-          errors.push({
-            field: `sandboxes.${name}.dockerfile`,
-            message: `Dockerfile path '${config.dockerfile}' in sandbox '${name}' must not contain '..' path traversal`
-          });
-        }
-        if (config.compose && /\.\./.test(config.compose)) {
-          errors.push({
-            field: `sandboxes.${name}.compose`,
-            message: `Compose file path '${config.compose}' in sandbox '${name}' must not contain '..' path traversal`
-          });
-        }
-        if (config.workdir) {
-          if (!config.workdir.startsWith("/")) {
+        const isNativeEngine = config.engine === "bubblewrap" || config.engine === "seatbelt";
+        if (isNativeEngine) {
+          const dockerOnlyFields = [
+            ["image", config.image],
+            ["dockerfile", config.dockerfile],
+            ["dockerfile_inline", config.dockerfile_inline],
+            ["compose", config.compose],
+            ["service", config.service],
+            ["cache", config.cache],
+            ["visor_path", config.visor_path],
+            ["resources", config.resources]
+          ];
+          for (const [field, value] of dockerOnlyFields) {
+            if (value !== void 0) {
+              errors.push({
+                field: `sandboxes.${name}.${field}`,
+                message: `Sandbox '${name}' uses ${config.engine} engine but has Docker-only field '${field}'. Remove it or switch to engine: docker.`
+              });
+            }
+          }
+        } else {
+          const modes = [
+            config.image ? "image" : null,
+            config.dockerfile || config.dockerfile_inline ? "dockerfile" : null,
+            config.compose ? "compose" : null
+          ].filter(Boolean);
+          if (modes.length === 0) {
             errors.push({
-              field: `sandboxes.${name}.workdir`,
-              message: `Workdir '${config.workdir}' in sandbox '${name}' must be an absolute path (start with /)`
+              field: `sandboxes.${name}`,
+              message: `Sandbox '${name}' must specify one of: image, dockerfile, dockerfile_inline, or compose`
+            });
+          } else if (modes.length > 1) {
+            errors.push({
+              field: `sandboxes.${name}`,
+              message: `Sandbox '${name}' has multiple modes (${modes.join(", ")}). Specify exactly one.`
             });
           }
-          if (/\.\./.test(config.workdir)) {
+          if (config.compose && !config.service) {
             errors.push({
-              field: `sandboxes.${name}.workdir`,
-              message: `Workdir '${config.workdir}' in sandbox '${name}' must not contain '..' path traversal`
+              field: `sandboxes.${name}.service`,
+              message: `Sandbox '${name}' uses compose mode but is missing required 'service' field`
             });
           }
-        }
-        if (config.visor_path) {
-          if (!config.visor_path.startsWith("/")) {
+          if (config.dockerfile && /\.\./.test(config.dockerfile)) {
             errors.push({
-              field: `sandboxes.${name}.visor_path`,
-              message: `visor_path '${config.visor_path}' in sandbox '${name}' must be an absolute path (start with /)`
+              field: `sandboxes.${name}.dockerfile`,
+              message: `Dockerfile path '${config.dockerfile}' in sandbox '${name}' must not contain '..' path traversal`
             });
           }
-          if (/\.\./.test(config.visor_path)) {
+          if (config.compose && /\.\./.test(config.compose)) {
             errors.push({
-              field: `sandboxes.${name}.visor_path`,
-              message: `visor_path '${config.visor_path}' in sandbox '${name}' must not contain '..' path traversal`
+              field: `sandboxes.${name}.compose`,
+              message: `Compose file path '${config.compose}' in sandbox '${name}' must not contain '..' path traversal`
             });
           }
-        }
-        if (config.cache?.paths) {
-          for (const p of config.cache.paths) {
-            if (!p.startsWith("/")) {
+          if (config.visor_path) {
+            if (!config.visor_path.startsWith("/")) {
               errors.push({
-                field: `sandboxes.${name}.cache.paths`,
-                message: `Cache path '${p}' in sandbox '${name}' must be absolute (start with /)`,
-                value: p
+                field: `sandboxes.${name}.visor_path`,
+                message: `visor_path '${config.visor_path}' in sandbox '${name}' must be an absolute path (start with /)`
               });
             }
-            if (/\.\./.test(p)) {
+            if (/\.\./.test(config.visor_path)) {
               errors.push({
-                field: `sandboxes.${name}.cache.paths`,
-                message: `Cache path '${p}' in sandbox '${name}' must not contain '..' path traversal`,
-                value: p
+                field: `sandboxes.${name}.visor_path`,
+                message: `visor_path '${config.visor_path}' in sandbox '${name}' must not contain '..' path traversal`
+              });
+            }
+          }
+          if (config.cache?.paths) {
+            for (const p of config.cache.paths) {
+              if (!p.startsWith("/")) {
+                errors.push({
+                  field: `sandboxes.${name}.cache.paths`,
+                  message: `Cache path '${p}' in sandbox '${name}' must be absolute (start with /)`,
+                  value: p
+                });
+              }
+              if (/\.\./.test(p)) {
+                errors.push({
+                  field: `sandboxes.${name}.cache.paths`,
+                  message: `Cache path '${p}' in sandbox '${name}' must not contain '..' path traversal`,
+                  value: p
+                });
+              }
+            }
+          }
+          if (config.resources?.cpu !== void 0) {
+            if (typeof config.resources.cpu !== "number" || config.resources.cpu <= 0) {
+              errors.push({
+                field: `sandboxes.${name}.resources.cpu`,
+                message: `CPU limit in sandbox '${name}' must be a positive number`,
+                value: config.resources.cpu
               });
             }
           }
         }
-        if (config.resources?.cpu !== void 0) {
-          if (typeof config.resources.cpu !== "number" || config.resources.cpu <= 0) {
+        if (config.workdir) {
+          if (!config.workdir.startsWith("/")) {
             errors.push({
-              field: `sandboxes.${name}.resources.cpu`,
-              message: `CPU limit in sandbox '${name}' must be a positive number`,
-              value: config.resources.cpu
+              field: `sandboxes.${name}.workdir`,
+              message: `Workdir '${config.workdir}' in sandbox '${name}' must be an absolute path (start with /)`
+            });
+          }
+          if (/\.\./.test(config.workdir)) {
+            errors.push({
+              field: `sandboxes.${name}.workdir`,
+              message: `Workdir '${config.workdir}' in sandbox '${name}' must not contain '..' path traversal`
             });
           }
         }
@@ -4933,4 +4966,4 @@ export {
   config_exports,
   init_config
 };
-//# sourceMappingURL=chunk-AKCHIYWU.mjs.map
+//# sourceMappingURL=chunk-YOKAA4IU.mjs.map