@qduc/term2 0.9.3 → 0.10.0

package/dist/services/agent-runtime/types.d.ts

@@ -0,0 +1,198 @@
+import type { NormalizedUsage } from '../../utils/ai/token-usage.js';
+/** Named convenience tier. */
+export type ModelTier = 'efficient' | 'balanced' | 'capable';
+/** Relative tier adjustment against a parent agent. */
+export interface RelativeModelPolicy {
+    tier: 'lower' | 'same' | 'higher';
+    /** Request a reasoning-capable model with the given effort level when adjusting. */
+    reasoning?: 'low' | 'medium' | 'high';
+}
+/** Exact model override. */
+export interface ExactModelPolicy {
+    provider: string;
+    model: string;
+}
+/** Model selection policy for an agent. */
+export type ModelPolicy = ModelTier | RelativeModelPolicy | ExactModelPolicy;
+/**
+ * Public agent permission shape.
+ *
+ * Fine-grained filesystem globs and network host scopes are resolved
+ * and enforced at tool-invocation time. Omitted scopes inherit from
+ * parent or default to no authority for public custom agents; legacy
+ * trusted role presets retain their coarse behavior through explicit
+ * host scopes (undefined = no fine-grained restriction).
+ */
+export interface AgentPermissions {
+    /** Requested tool names (subset of available tools). */
+    tools?: ReadonlyArray<string>;
+    /** Filesystem access scopes. Empty array = explicitly no authority. Omitted = no restriction beyond coarse flags. */
+    filesystem?: {
+        read?: string[];
+        write?: string[];
+    };
+    /** Network access scopes. Empty array = explicitly no authority. Omitted = no restriction beyond coarse flags. */
+    network?: {
+        hosts?: string[];
+    };
+    /** Nested agent creation policy. */
+    agents?: {
+        create?: boolean;
+        maxDepth?: number;
+        allowedModels?: ModelPolicy[];
+    };
+}
+/**
+ * Internal coarse permission shape used by legacy subagent adapters
+ * and tool-policy resolution. Not part of the public API.
+ */
+export interface ResolvedAgentPermissions {
+    canRead: boolean;
+    canWrite: boolean;
+    canRunShell: boolean;
+    canSearchWeb: boolean;
+    canUseNestedAgents: boolean;
+}
+/**
+ * Resource limits for an agent run.
+ *
+ * Child limits are always clamped to parent maxima.
+ * - `timeoutMs` is enforced via AbortSignal cancellation.
+ * - `maxTurns`, `maxChildren`, `maxDepth`, `maxConcurrency` are
+ *   enforced by the execution-tree budget (ExecutionBudget).
+ * - `maxTokens` is passed to the model provider as a cap and also
+ *   accounted across the tree via ExecutionBudget; aggregate usage
+ *   exceeding the budget cancels/cancels further child work. Not a
+ *   hard pre-call token count.
+ * - `maxCost` is a typed preflight rejection only. No provider-neutral
+ *   pricing is available; requesting `maxCost` when unsupported by the
+ *   runner produces a `limit_validation_error`.
+ */
+export interface AgentLimits {
+    /** Maximum model turns before forced termination. */
+    maxTurns?: number;
+    /** Maximum total tokens across all model calls (provider cap + post-usage tree enforcement). */
+    maxTokens?: number;
+    /** Maximum estimated cost in USD (typed preflight rejection only, not enforced). */
+    maxCost?: number;
+    /** Hard timeout in milliseconds enforced via AbortSignal. */
+    timeoutMs?: number;
+    /** Maximum concurrent child agents (including nested subagents). */
+    maxChildren?: number;
+    /** Maximum nesting depth for child agents (0 = no children). */
+    maxDepth?: number;
+    /** Maximum concurrent agent children. */
+    maxConcurrency?: number;
+}
+/** Input for a one-shot agent run. */
+export interface RunInput {
+    /** The task description. */
+    task: string;
+    /**
+     * Explicit context injected into the child's instructions.
+     * Accepts ordinary object literals; internally serialized with
+     * stable deterministic key ordering.
+     */
+    context?: Record<string, unknown>;
+    /**
+     * Attachments the agent can inspect.
+     * Currently limited to plain-text content references.
+     */
+    attachments?: ReadonlyArray<RunAttachment>;
+    /** Structured output schema request. */
+    output?: RunOutputFormat;
+    /** Cancellation signal propagated from parent to child execution. */
+    signal?: AbortSignal;
+}
+/**
+ * An attachment the agent can inspect during its run.
+ * Only textual MIME types are supported; binary types are rejected
+ * with a typed validation error. Attachments are supplied data,
+ * not filesystem references.
+ */
+export interface RunAttachment {
+    name: string;
+    content: string;
+    mimeType?: string;
+}
+/**
+ * Request for structured JSON output conforming to a JSON Schema.
+ * Supported schema keywords: type, properties, required, items, enum,
+ * additionalProperties. Other keywords are rejected with a typed error.
+ */
+export interface RunOutputFormat {
+    /** JSON Schema for structured output. */
+    schema: Record<string, unknown>;
+    /** Human-readable name for the schema (used in tool descriptors). */
+    name?: string;
+}
+/** Reference to an artifact produced or modified by an agent run. */
+export interface ArtifactReference {
+    /** Local filesystem path of the artifact. */
+    path?: string;
+    /** Remote URL of the artifact. */
+    url?: string;
+    /** Optional MIME type hint. */
+    mimeType?: string;
+}
+/** Normalized result of a one-shot agent run. */
+export interface RunResult<T = string> {
+    /** Terminal status. */
+    status: 'completed' | 'failed' | 'cancelled';
+    /** Output text when status is completed; undefined on failure or cancel. */
+    output?: T;
+    /** Artifacts the agent produced or modified. */
+    artifacts?: ReadonlyArray<ArtifactReference>;
+    /** Token usage when available. */
+    usage?: NormalizedUsage;
+    /** Typed error when status is failed or cancelled. */
+    error?: RunError;
+}
+/** Structured error from an agent run. */
+export interface RunError {
+    code: RunErrorCode;
+    message: string;
+    /** Optional cause for debugging (never exposed in public API output). */
+    cause?: unknown;
+}
+export type RunErrorCode = 'unsupported_structured_output' | 'unsupported_attachments' | 'invalid_model_policy' | 'unknown_skill' | 'unknown_tool' | 'permission_denied' | 'unsupported_permission_scope' | 'invalid_scope_pattern' | 'unsupported_limit' | 'limit_validation_error' | 'limit_exceeded' | 'scope_violation' | 'provider_error' | 'cancelled' | 'agent_error' | 'invalid_attachment' | 'invalid_schema' | 'invalid_output';
+/**
+ * Public tool name reference alias.
+ *
+ * MVP: a plain string matching known tool names in the Term2 tool set.
+ * Future: may expand to structured references (name + config overrides).
+ */
+export type ToolReference = string;
+/** Configuration used to create an agent handle. */
+export interface AgentConfig {
+    /** Required agent instructions. */
+    instructions: string;
+    /** Optional display name (defaults to "agent"). */
+    name?: string;
+    /** Model selection policy. Defaults to 'balanced'. */
+    model?: ModelPolicy;
+    /** Requested tools available to the agent. Omitted/empty = no tools. */
+    tools?: ReadonlyArray<ToolReference>;
+    /** Requested skill names. */
+    skills?: ReadonlyArray<string>;
+    /**
+     * Requested permissions. Authorizes which of the requested tools can
+     * execute and derives coarse capability flags. Effective permissions
+     * are intersected with parent.
+     */
+    permissions?: AgentPermissions;
+    /** Requested limits. Effective limits are clamped by parent. */
+    limits?: AgentLimits;
+}
+/** A configured, resolved agent ready to execute one-shot runs. */
+export interface AgentHandle {
+    readonly name: string;
+    readonly model: {
+        provider: string;
+        model: string;
+    };
+    readonly permissions: AgentPermissions;
+    readonly limits: AgentLimits;
+    run<T = string>(input: RunInput): Promise<RunResult<T>>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/services/agent-runtime/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../source/services/agent-runtime/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAIrE,8BAA8B;AAC9B,MAAM,MAAM,SAAS,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,CAAC;AAE7D,uDAAuD;AACvD,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAC;IAClC,oFAAoF;IACpF,SAAS,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;CACvC;AAED,4BAA4B;AAC5B,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,2CAA2C;AAC3C,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,mBAAmB,GAAG,gBAAgB,CAAC;AAI7E;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B,wDAAwD;IACxD,KAAK,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC9B,qHAAqH;IACrH,UAAU,CAAC,EAAE;QACX,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;KAClB,CAAC;IACF,kHAAkH;IAClH,OAAO,CAAC,EAAE;QACR,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;KAClB,CAAC;IACF,oCAAoC;IACpC,MAAM,CAAC,EAAE;QACP,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,aAAa,CAAC,EAAE,WAAW,EAAE,CAAC;KAC/B,CAAC;CACH;AAID;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;IACrB,YAAY,EAAE,OAAO,CAAC;IACtB,kBAAkB,EAAE,OAAO,CAAC;CAC7B;AAID;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,WAAW;IAC1B,qDAAqD;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gGAAgG;IAChG,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oFAAoF;IACpF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6DAA6D;IAC7D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gEAAgE;IAChE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAID,sCAAsC;AACtC,MAAM,WAAW,QAAQ;IACvB,4BAA4B;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC;;;OAGG;IACH,WAAW,CAAC,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC;IAC3C,wCAAwC;IACxC,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,qEAAqE;IACrE,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,qEAAqE;IACrE,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,qEAAqE;AACrE,MAAM,WAAW,iBAAiB;IAChC,6CAA6C;IAC7C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kCAAkC;IAClC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,+BAA+B;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,iDAAiD;AACjD,MAAM,WAAW,SAAS,CAAC,CAAC,GAAG,MAAM;IACnC,uBAAuB;IACvB,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;IAC7C,4EAA4E;IAC5E,MAAM,CAAC,EAAE,CAAC,CAAC;IACX,gDAAgD;IAChD,SAAS,CAAC,EAAE,aAAa,CAAC,iBAAiB,CAAC,CAAC;IAC7C,kCAAkC;IAClC,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,sDAAsD;IACtD,KAAK,CAAC,EAAE,QAAQ,CAAC;CAClB;AAED,0CAA0C;AAC1C,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,MAAM,YAAY,GACpB,+BAA+B,GAC/B,yBAAyB,GACzB,sBAAsB,GACtB,eAAe,GACf,cAAc,GACd,mBAAmB,GACnB,8BAA8B,GAC9B,uBAAuB,GACvB,mBAAmB,GACnB,wBAAwB,GACxB,gBAAgB,GAChB,iBAAiB,GACjB,gBAAgB,GAChB,WAAW,GACX,aAAa,GACb,oBAAoB,GACpB,gBAAgB,GAChB,gBAAgB,CAAC;AAIrB;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC;AAInC,oDAAoD;AACpD,MAAM,WAAW,WAAW;IAC1B,mCAAmC;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,mDAAmD;IACnD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sDAAsD;IACtD,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,wEAAwE;IACxE,KAAK,CAAC,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC;IACrC,6BAA6B;IAC7B,MAAM,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC/B;;;;OAIG;IACH,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,gEAAgE;IAChE,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAID,mEAAmE;AACnE,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACpD,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,GAAG,CAAC,CAAC,GAAG,MAAM,EAAE,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;CACzD"}

package/dist/services/agent-runtime/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../source/services/agent-runtime/types.ts"],"names":[],"mappings":""}

package/dist/services/agent-runtime/workflow/workflow-evaluator.d.ts

@@ -0,0 +1,17 @@
+import { Worker } from 'node:worker_threads';
+import type { AgentRuntime } from '../agent-runtime.js';
+import { type JsonValue, type WorkflowEvaluator, type WorkflowInput, type WorkflowLimits, type WorkflowResult } from './workflow-types.js';
+export interface WorkflowEvaluatorDeps {
+    runtime: Pick<AgentRuntime, 'agent'>;
+    parentTools: readonly string[];
+    limits?: Partial<WorkflowLimits>;
+    /** Allows callers/tests to report captured workflow console output without exposing it to code. */
+    onConsole?: (values: JsonValue[]) => void;
+    workerFactory?: (code: string, syncTimeoutMs: number) => Worker;
+}
+export declare class WorkflowEvaluatorImpl implements WorkflowEvaluator {
+    #private;
+    constructor(deps: WorkflowEvaluatorDeps);
+    evaluate(input: WorkflowInput): Promise<WorkflowResult>;
+}
+//# sourceMappingURL=workflow-evaluator.d.ts.map

package/dist/services/agent-runtime/workflow/workflow-evaluator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-evaluator.d.ts","sourceRoot":"","sources":["../../../../source/services/agent-runtime/workflow/workflow-evaluator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGxD,OAAO,EAGL,KAAK,SAAS,EAGd,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,cAAc,EAGpB,MAAM,qBAAqB,CAAC;AAkB7B,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACrC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,MAAM,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACjC,mGAAmG;IACnG,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,IAAI,CAAC;IAC1C,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,KAAK,MAAM,CAAC;CACjE;AAmBD,qBAAa,qBAAsB,YAAW,iBAAiB;;IAI7D,YAAY,IAAI,EAAE,qBAAqB,EAGtC;IAEK,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,CA+K5D;CAiGF"}

package/dist/services/agent-runtime/workflow/workflow-evaluator.js

@@ -0,0 +1,314 @@
+import { createWorkflowSandbox } from './workflow-sandbox.js';
+import { DEFAULT_WORKFLOW_LIMITS, isJsonValue, } from './workflow-types.js';
+// Models differ in how they inspect a workspace: GPT-family models generally
+// use shell, while others use dedicated file/search tools. These interfaces
+// represent the same delegated read capability; shell mutation is still
+// blocked by the child runtime's command-level tool policy.
+const WORKFLOW_READ_INTERFACES = new Set([
+    'shell',
+    'read_file',
+    'grep',
+    'glob',
+    'read_code_outline',
+    'code_context_search',
+]);
+const WORKFLOW_EDITOR_TOOLS = new Set(['apply_patch', 'search_replace', 'create_file']);
+const WORKFLOW_WEB_TOOLS = new Set(['web_search', 'web_fetch']);
+const WORKFLOW_PROHIBITED_TOOLS = new Set(['ask_user', 'run_subagent', 'run_agent_workflow']);
+function bytes(value) {
+    return Buffer.byteLength(JSON.stringify(value), 'utf8');
+}
+function isJsonObject(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value) && isJsonValue(value);
+}
+function isOutputTransport(value) {
+    if (!isJsonObject(value) || !isJsonObject(value.schema))
+        return false;
+    return value.name === undefined || typeof value.name === 'string';
+}
+function safeMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+export class WorkflowEvaluatorImpl {
+    #deps;
+    #limits;
+    constructor(deps) {
+        this.#deps = deps;
+        this.#limits = { ...DEFAULT_WORKFLOW_LIMITS, ...deps.limits };
+    }
+    async evaluate(input) {
+        const runs = [];
+        if (typeof input.code !== 'string')
+            return this.#failure('runtime_error', 'Workflow code must be a string', runs);
+        if (Buffer.byteLength(input.code, 'utf8') > this.#limits.maxCodeBytes) {
+            return this.#failure('code_too_large', 'Workflow code exceeds the configured size limit', runs);
+        }
+        let worker;
+        try {
+            worker =
+                this.#deps.workerFactory?.(input.code, this.#limits.timeoutMs) ??
+                    createWorkflowSandbox(input.code, this.#limits.timeoutMs, this.#limits.maxConsoleBytes);
+        }
+        catch (error) {
+            return this.#failure('sandbox_unavailable', `Workflow sandbox is unavailable: ${safeMessage(error)}`, runs);
+        }
+        const controller = new AbortController();
+        const onAbort = () => {
+            controller.abort();
+            failFromParentAbort?.();
+        };
+        let failFromParentAbort;
+        let admissions = 0;
+        let active = 0;
+        const waiting = [];
+        let settled = false;
+        let timer;
+        const cancelWaiting = () => {
+            for (const waiter of waiting.splice(0))
+                waiter(undefined);
+        };
+        const grantPermit = () => {
+            active++;
+            let released = false;
+            return () => {
+                if (released)
+                    return;
+                released = true;
+                active--;
+                const waiter = waiting.shift();
+                if (waiter)
+                    waiter(grantPermit());
+            };
+        };
+        const acquire = async () => {
+            if (settled || controller.signal.aborted)
+                return undefined;
+            if (active < this.#limits.maxConcurrency) {
+                return grantPermit();
+            }
+            return new Promise((resolve) => waiting.push(resolve));
+        };
+        const result = await new Promise((resolve) => {
+            const finish = (value) => {
+                if (settled)
+                    return;
+                settled = true;
+                cancelWaiting();
+                resolve(value);
+            };
+            const fail = (code, message) => finish(this.#failure(code, message, runs));
+            const timeout = () => {
+                controller.abort();
+                fail('timeout', 'Workflow exceeded its configured timeout');
+            };
+            failFromParentAbort = () => fail('timeout', 'Workflow was cancelled by its parent');
+            timer = setTimeout(timeout, this.#limits.timeoutMs);
+            if (input.signal?.aborted) {
+                onAbort();
+            }
+            input.signal?.addEventListener('abort', onAbort, { once: true });
+            let consoleBytes = 0;
+            worker.on('message', async (message) => {
+                if (settled)
+                    return;
+                if (message?.type === 'console.log') {
+                    if (Array.isArray(message.values) && message.values.every((value) => isJsonValue(value))) {
+                        const size = bytes(message.values);
+                        if (size <= this.#limits.maxConsoleBytes && consoleBytes + size <= this.#limits.maxConsoleBytes) {
+                            consoleBytes += size;
+                            this.#deps.onConsole?.(message.values);
+                        }
+                    }
+                    return;
+                }
+                if (message?.type === 'workflow.complete') {
+                    if (!isJsonValue(message.output) || bytes(message.output) > this.#limits.maxOutputBytes) {
+                        fail('invalid_output', 'Workflow output must be JSON-safe and within the configured size limit');
+                    }
+                    else
+                        finish({ ok: true, output: message.output, runs });
+                    return;
+                }
+                if (message?.type === 'workflow.error') {
+                    const errorMessage = safeMessage(message.error?.message ?? 'Workflow failed');
+                    fail(message.syntax ? 'syntax_error' : /timed out/i.test(errorMessage) ? 'timeout' : 'runtime_error', errorMessage);
+                    return;
+                }
+                if (message?.type === 'agent.run') {
+                    const request = this.#validateRequest(message.config, message.input);
+                    if ('error' in request) {
+                        if (request.error.code === 'approval_required')
+                            fail('approval_required', request.error.message);
+                        else
+                            worker.postMessage({
+                                type: 'agent.result',
+                                requestId: message.requestId,
+                                result: { ok: false, error: request.error },
+                            });
+                        return;
+                    }
+                    admissions++;
+                    const runId = admissions;
+                    if (runId > this.#limits.maxRuns) {
+                        fail('limit_exceeded', 'Workflow exceeded its maximum number of agent runs');
+                        return;
+                    }
+                    runs[runId - 1] = {
+                        runId,
+                        requestedName: request.config.name,
+                        name: request.config.name,
+                        ok: false,
+                        durationMs: 0,
+                        errorCode: 'cancelled',
+                    };
+                    const releasePermit = await acquire();
+                    if (!releasePermit)
+                        return;
+                    if (settled || controller.signal.aborted) {
+                        releasePermit();
+                        return;
+                    }
+                    const started = Date.now();
+                    try {
+                        const handle = this.#deps.runtime.agent(request.config);
+                        const child = await handle.run({ ...request.input, signal: controller.signal });
+                        const normalized = this.#normalizeRun(child);
+                        const resolved = handle;
+                        runs[runId - 1] = {
+                            runId,
+                            requestedName: request.config.name,
+                            name: resolved.name ?? request.config.name,
+                            ...(resolved.model ? { provider: resolved.model.provider, model: resolved.model.model } : {}),
+                            ok: normalized.ok,
+                            durationMs: Date.now() - started,
+                            usage: normalized.usage,
+                            errorCode: normalized.errorCode,
+                        };
+                        worker.postMessage({ type: 'agent.result', requestId: message.requestId, result: normalized.result });
+                    }
+                    catch (error) {
+                        const messageText = safeMessage(error);
+                        runs[runId - 1] = {
+                            runId,
+                            requestedName: request.config.name,
+                            name: request.config.name,
+                            ok: false,
+                            durationMs: Date.now() - started,
+                            errorCode: 'agent_error',
+                        };
+                        worker.postMessage({
+                            type: 'agent.result',
+                            requestId: message.requestId,
+                            result: { ok: false, error: { code: 'agent_error', message: messageText } },
+                        });
+                    }
+                    finally {
+                        releasePermit();
+                    }
+                }
+            });
+            worker.once('error', (error) => fail('sandbox_unavailable', `Workflow sandbox failed: ${safeMessage(error)}`));
+            worker.once('exit', (code) => {
+                if (!settled)
+                    fail('sandbox_unavailable', `Workflow sandbox exited unexpectedly (${code})`);
+            });
+        });
+        if (timer)
+            clearTimeout(timer);
+        input.signal?.removeEventListener('abort', onAbort);
+        controller.abort();
+        await worker.terminate().catch(() => undefined);
+        return result;
+    }
+    #validateRequest(config, input) {
+        if (!config ||
+            typeof config !== 'object' ||
+            typeof config.instructions !== 'string' ||
+            (config.name !== undefined &&
+                typeof config.name !== 'string') ||
+            (config.model !== undefined &&
+                !['lower', 'default', 'higher'].includes(config.model)) ||
+            !(input && typeof input === 'object') ||
+            typeof input.task !== 'string')
+            return { error: { code: 'agent_error', message: 'Invalid workflow agent configuration or run input' } };
+        const raw = config;
+        const requested = raw.tools ?? [];
+        if (!Array.isArray(requested) || requested.some((tool) => typeof tool !== 'string'))
+            return { error: { code: 'agent_error', message: 'Workflow tools must be strings' } };
+        const parentCanReadWorkspace = this.#deps.parentTools.some((tool) => WORKFLOW_READ_INTERFACES.has(tool));
+        const parentCanWriteWorkspace = this.#deps.parentTools.some((tool) => WORKFLOW_EDITOR_TOOLS.has(tool));
+        for (const tool of requested) {
+            if (WORKFLOW_READ_INTERFACES.has(tool)) {
+                if (!parentCanReadWorkspace)
+                    return {
+                        error: { code: 'permission_denied', message: `Tool '${tool}' requires parent workspace read access` },
+                    };
+                continue;
+            }
+            if (WORKFLOW_EDITOR_TOOLS.has(tool)) {
+                if (!parentCanWriteWorkspace)
+                    return {
+                        error: { code: 'permission_denied', message: `Tool '${tool}' requires parent workspace write access` },
+                    };
+                continue;
+            }
+            if (WORKFLOW_WEB_TOOLS.has(tool)) {
+                if (!this.#deps.parentTools.includes(tool))
+                    return {
+                        error: { code: 'permission_denied', message: `Tool '${tool}' is not available to the parent agent` },
+                    };
+                continue;
+            }
+            if (WORKFLOW_PROHIBITED_TOOLS.has(tool))
+                return { error: { code: 'approval_required', message: `Tool '${tool}' is not permitted in workflows` } };
+            return {
+                error: {
+                    code: 'approval_required',
+                    message: `Tool '${tool}' requires approval or is not permitted in workflows`,
+                },
+            };
+        }
+        const runInput = input;
+        if (runInput.context !== undefined && !isJsonObject(runInput.context))
+            return { error: { code: 'agent_error', message: 'Workflow run context must be a JSON-safe object' } };
+        if (runInput.output !== undefined && !isOutputTransport(runInput.output))
+            return { error: { code: 'agent_error', message: 'Workflow output format must be JSON-safe transport data' } };
+        return {
+            config: {
+                name: raw.name,
+                instructions: raw.instructions,
+                // Workflow runtimes are rooted at the existing subagent bridge rather
+                // than at the interactive agent, so relative policies have no runtime
+                // parent. Resolve the public relative tiers to the configured tiers.
+                model: raw.model === 'lower' ? 'efficient' : raw.model === 'higher' ? 'capable' : undefined,
+                tools: requested,
+                permissions: { tools: requested },
+            },
+            input: {
+                task: runInput.task,
+                ...(runInput.context === undefined ? {} : { context: runInput.context }),
+                ...(runInput.output === undefined ? {} : { output: runInput.output }),
+            },
+        };
+    }
+    #normalizeRun(run) {
+        if (run.status === 'completed' && isJsonValue(run.output)) {
+            const result = { ok: true, output: run.output };
+            if (run.usage !== undefined)
+                result.usage = run.usage;
+            return { ok: true, usage: run.usage, result, errorCode: undefined };
+        }
+        const code = run.error?.code ?? (run.status === 'cancelled' ? 'cancelled' : 'invalid_output');
+        const result = {
+            ok: false,
+            error: { code, message: run.error?.message ?? 'Agent returned non-JSON-safe output' },
+        };
+        if (run.usage !== undefined)
+            result.usage = run.usage;
+        return { ok: false, usage: run.usage, errorCode: code, result };
+    }
+    #failure(code, message, runs) {
+        return { ok: false, error: { code, message }, runs };
+    }
+}
+//# sourceMappingURL=workflow-evaluator.js.map

package/dist/services/agent-runtime/workflow/workflow-evaluator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-evaluator.js","sourceRoot":"","sources":["../../../../source/services/agent-runtime/workflow/workflow-evaluator.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EACL,uBAAuB,EACvB,WAAW,GAUZ,MAAM,qBAAqB,CAAC;AAE7B,6EAA6E;AAC7E,4EAA4E;AAC5E,wEAAwE;AACxE,4DAA4D;AAC5D,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC;IACvC,OAAO;IACP,WAAW;IACX,MAAM;IACN,MAAM;IACN,mBAAmB;IACnB,qBAAqB;CACtB,CAAC,CAAC;AACH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,gBAAgB,EAAE,aAAa,CAAC,CAAC,CAAC;AACxF,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC;AAChE,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,cAAc,EAAE,oBAAoB,CAAC,CAAC,CAAC;AAW9F,SAAS,KAAK,CAAC,KAAc;IAC3B,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC;AACpG,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,OAAO,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;AACpE,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,OAAO,qBAAqB;IACvB,KAAK,CAAwB;IAC7B,OAAO,CAAiB;IAEjC,YAAY,IAA2B;QACrC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,uBAAuB,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAoB;QACjC,MAAM,IAAI,GAAyB,EAAE,CAAC;QACtC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,gCAAgC,EAAE,IAAI,CAAC,CAAC;QAClH,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YACtE,OAAO,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,iDAAiD,EAAE,IAAI,CAAC,CAAC;QAClG,CAAC;QAED,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM;gBACJ,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;oBAC9D,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC5F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,QAAQ,CAAC,qBAAqB,EAAE,oCAAoC,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9G,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,mBAAmB,EAAE,EAAE,CAAC;QAC1B,CAAC,CAAC;QACF,IAAI,mBAA6C,CAAC;QAClD,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,MAAM,OAAO,GAAuD,EAAE,CAAC;QACvE,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,KAAgD,CAAC;QACrD,MAAM,aAAa,GAAG,GAAG,EAAE;YACzB,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;gBAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAC5D,CAAC,CAAC;QACF,MAAM,WAAW,GAAG,GAAiB,EAAE;YACrC,MAAM,EAAE,CAAC;YACT,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,OAAO,GAAG,EAAE;gBACV,IAAI,QAAQ;oBAAE,OAAO;gBACrB,QAAQ,GAAG,IAAI,CAAC;gBAChB,MAAM,EAAE,CAAC;gBACT,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;gBAC/B,IAAI,MAAM;oBAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YACpC,CAAC,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,KAAK,IAAuC,EAAE;YAC5D,IAAI,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAO,SAAS,CAAC;YAC3D,IAAI,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;gBACzC,OAAO,WAAW,EAAE,CAAC;YACvB,CAAC;YACD,OAAO,IAAI,OAAO,CAA2B,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QACnF,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAiB,CAAC,OAAO,EAAE,EAAE;YAC3D,MAAM,MAAM,GAAG,CAAC,KAAqB,EAAE,EAAE;gBACvC,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,aAAa,EAAE,CAAC;gBAChB,OAAO,CAAC,KAAK,CAAC,CAAC;YACjB,CAAC,CAAC;YACF,MAAM,IAAI,GAAG,CAAC,IAA2B,EAAE,OAAe,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;YAC1G,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,UAAU,CAAC,KAAK,EAAE,CAAC;gBACnB,IAAI,CAAC,SAAS,EAAE,0CAA0C,CAAC,CAAC;YAC9D,CAAC,CAAC;YACF,mBAAmB,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,sCAAsC,CAAC,CAAC;YACpF,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACpD,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;gBAC1B,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAEjE,IAAI,YAAY,GAAG,CAAC,CAAC;YACrB,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,OAAY,EAAE,EAAE;gBAC1C,IAAI,OAAO;oBAAE,OAAO;gBACpB,IAAI,OAAO,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;oBACpC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;wBAClG,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;wBACnC,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,YAAY,GAAG,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;4BAChG,YAAY,IAAI,IAAI,CAAC;4BACrB,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;wBACzC,CAAC;oBACH,CAAC;oBACD,OAAO;gBACT,CAAC;gBACD,IAAI,OAAO,EAAE,IAAI,KAAK,mBAAmB,EAAE,CAAC;oBAC1C,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;wBACxF,IAAI,CAAC,gBAAgB,EAAE,wEAAwE,CAAC,CAAC;oBACnG,CAAC;;wBAAM,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC1D,OAAO;gBACT,CAAC;gBACD,IAAI,OAAO,EAAE,IAAI,KAAK,gBAAgB,EAAE,CAAC;oBACvC,MAAM,YAAY,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,IAAI,iBAAiB,CAAC,CAAC;oBAC9E,IAAI,CACF,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,EAC/F,YAAY,CACb,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,IAAI,OAAO,EAAE,IAAI,KAAK,WAAW,EAAE,CAAC;oBAClC,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;oBACrE,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;wBACvB,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,mBAAmB;4BAAE,IAAI,CAAC,mBAAmB,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;;4BAE/F,MAAM,CAAC,WAAW,CAAC;gCACjB,IAAI,EAAE,cAAc;gCACpB,SAAS,EAAE,OAAO,CAAC,SAAS;gCAC5B,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE;6BAC5C,CAAC,CAAC;wBACL,OAAO;oBACT,CAAC;oBACD,UAAU,EAAE,CAAC;oBACb,MAAM,KAAK,GAAG,UAAU,CAAC;oBACzB,IAAI,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;wBACjC,IAAI,CAAC,gBAAgB,EAAE,oDAAoD,CAAC,CAAC;wBAC7E,OAAO;oBACT,CAAC;oBACD,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG;wBAChB,KAAK;wBACL,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI;wBAClC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI;wBACzB,EAAE,EAAE,KAAK;wBACT,UAAU,EAAE,CAAC;wBACb,SAAS,EAAE,WAAW;qBACvB,CAAC;oBACF,MAAM,aAAa,GAAG,MAAM,OAAO,EAAE,CAAC;oBACtC,IAAI,CAAC,aAAa;wBAAE,OAAO;oBAC3B,IAAI,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;wBACzC,aAAa,EAAE,CAAC;wBAChB,OAAO;oBACT,CAAC;oBACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;oBAC3B,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;wBACxD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;wBAChF,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;wBAC7C,MAAM,QAAQ,GAAG,MAAgC,CAAC;wBAClD,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG;4BAChB,KAAK;4BACL,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI;4BAClC,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI;4BAC1C,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BAC7F,EAAE,EAAE,UAAU,CAAC,EAAE;4BACjB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;4BAChC,KAAK,EAAE,UAAU,CAAC,KAAK;4BACvB,SAAS,EAAE,UAAU,CAAC,SAAS;yBAChC,CAAC;wBACF,MAAM,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;oBACxG,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;wBACvC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG;4BAChB,KAAK;4BACL,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI;4BAClC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI;4BACzB,EAAE,EAAE,KAAK;4BACT,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;4BAChC,SAAS,EAAE,aAAa;yBACzB,CAAC;wBACF,MAAM,CAAC,WAAW,CAAC;4BACjB,IAAI,EAAE,cAAc;4BACpB,SAAS,EAAE,OAAO,CAAC,SAAS;4BAC5B,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE;yBAC5E,CAAC,CAAC;oBACL,CAAC;4BAAS,CAAC;wBACT,aAAa,EAAE,CAAC;oBAClB,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE,4BAA4B,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YAC/G,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBAC3B,IAAI,CAAC,OAAO;oBAAE,IAAI,CAAC,qBAAqB,EAAE,yCAAyC,IAAI,GAAG,CAAC,CAAC;YAC9F,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QAC/B,KAAK,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACpD,UAAU,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAChD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,gBAAgB,CACd,MAAe,EACf,KAAc;QAEd,IACE,CAAC,MAAM;YACP,OAAO,MAAM,KAAK,QAAQ;YAC1B,OAAQ,MAA8B,CAAC,YAAY,KAAK,QAAQ;YAChE,CAAE,MAA8B,CAAC,IAAI,KAAK,SAAS;gBACjD,OAAQ,MAA8B,CAAC,IAAI,KAAK,QAAQ,CAAC;YAC3D,CAAE,MAA8B,CAAC,KAAK,KAAK,SAAS;gBAClD,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAE,MAA8B,CAAC,KAAe,CAAC,CAAC;YAC5F,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;YACrC,OAAQ,KAA0B,CAAC,IAAI,KAAK,QAAQ;YAEpD,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,mDAAmD,EAAE,EAAE,CAAC;QAC1G,MAAM,GAAG,GAAG,MAA6B,CAAC;QAC1C,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;YACjF,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,gCAAgC,EAAE,EAAE,CAAC;QACvF,MAAM,sBAAsB,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACzG,MAAM,uBAAuB,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACvG,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,IAAI,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvC,IAAI,CAAC,sBAAsB;oBACzB,OAAO;wBACL,KAAK,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,SAAS,IAAI,yCAAyC,EAAE;qBACtG,CAAC;gBACJ,SAAS;YACX,CAAC;YACD,IAAI,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpC,IAAI,CAAC,uBAAuB;oBAC1B,OAAO;wBACL,KAAK,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,SAAS,IAAI,0CAA0C,EAAE;qBACvG,CAAC;gBACJ,SAAS;YACX,CAAC;YACD,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACxC,OAAO;wBACL,KAAK,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,SAAS,IAAI,wCAAwC,EAAE;qBACrG,CAAC;gBACJ,SAAS;YACX,CAAC;YACD,IAAI,yBAAyB,CAAC,GAAG,CAAC,IAAI,CAAC;gBACrC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,SAAS,IAAI,iCAAiC,EAAE,EAAE,CAAC;YAC3G,OAAO;gBACL,KAAK,EAAE;oBACL,IAAI,EAAE,mBAAmB;oBACzB,OAAO,EAAE,SAAS,IAAI,sDAAsD;iBAC7E;aACF,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,KAAgC,CAAC;QAClD,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC;YACnE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,iDAAiD,EAAE,EAAE,CAAC;QACxG,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC;YACtE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,yDAAyD,EAAE,EAAE,CAAC;QAChH,OAAO;YACL,MAAM,EAAE;gBACN,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,sEAAsE;gBACtE,sEAAsE;gBACtE,qEAAqE;gBACrE,KAAK,EAAE,GAAG,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;gBAC3F,KAAK,EAAE,SAAS;gBAChB,WAAW,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE;aAClC;YACD,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ,CAAC,IAAc;gBAC7B,GAAG,CAAC,QAAQ,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAoC,EAAE,CAAC;gBACrG,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAoC,EAAE,CAAC;aACpG;SACF,CAAC;IACJ,CAAC;IAED,aAAa,CAAC,GAAmB;QAC/B,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1D,MAAM,MAAM,GAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;YACrD,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;gBAAE,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;YACtD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;QACtE,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;QAC9F,MAAM,MAAM,GAAQ;YAClB,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,IAAI,qCAAqC,EAAE;SACtF,CAAC;QACF,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;QACtD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAClE,CAAC;IAED,QAAQ,CAAC,IAA2B,EAAE,OAAe,EAAE,IAA0B;QAC/E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC;IACvD,CAAC;CACF"}

package/dist/services/agent-runtime/workflow/workflow-sandbox.d.ts

@@ -0,0 +1,7 @@
+import { Worker } from 'node:worker_threads';
+/**
+ * Creates a fresh, disposable workflow worker. The worker's application-facing
+ * context is built inside workflow-worker and contains no host objects.
+ */
+export declare function createWorkflowSandbox(code: string, syncTimeoutMs: number, maxConsoleBytes?: number): Worker;
+//# sourceMappingURL=workflow-sandbox.d.ts.map

package/dist/services/agent-runtime/workflow/workflow-sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-sandbox.d.ts","sourceRoot":"","sources":["../../../../source/services/agent-runtime/workflow/workflow-sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAG7C;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,CAK3G"}

package/dist/services/agent-runtime/workflow/workflow-sandbox.js

@@ -0,0 +1,13 @@
+import { Worker } from 'node:worker_threads';
+import { WORKFLOW_WORKER_SOURCE } from './workflow-worker.js';
+/**
+ * Creates a fresh, disposable workflow worker. The worker's application-facing
+ * context is built inside workflow-worker and contains no host objects.
+ */
+export function createWorkflowSandbox(code, syncTimeoutMs, maxConsoleBytes) {
+    return new Worker(WORKFLOW_WORKER_SOURCE, {
+        eval: true,
+        workerData: { code, syncTimeoutMs, maxConsoleBytes },
+    });
+}
+//# sourceMappingURL=workflow-sandbox.js.map

package/dist/services/agent-runtime/workflow/workflow-sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-sandbox.js","sourceRoot":"","sources":["../../../../source/services/agent-runtime/workflow/workflow-sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAE9D;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,aAAqB,EAAE,eAAwB;IACjG,OAAO,IAAI,MAAM,CAAC,sBAAsB,EAAE;QACxC,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,eAAe,EAAE;KACrD,CAAC,CAAC;AACL,CAAC"}