@rarebit-one/harness-kernel 0.5.1

package/dist/engines/codexDriver.js

@@ -0,0 +1,110 @@
+import { spawn } from "node:child_process";
+import { mkdtemp, readFile, rm } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import path from "node:path";
+/**
+ * The default codex driver: the single integration boundary to the OpenAI Codex
+ * CLI, mirroring claudeCodeDriver's injectable shape. It runs codex
+ * non-interactively (`codex exec`) against the prepared sandbox. The engine has
+ * already written the run's MCP servers (connectors + the runner-hosted capability
+ * server) into `config.toml` inside `opts.codexHome`; pointing the child at it via
+ * the `CODEX_HOME` env var is how codex discovers them.
+ *
+ * Invocation (verified against the OpenAI Codex CLI reference, `codex exec`):
+ *   - `-m <model>`            — model override
+ *   - `-C <cwd>`              — workspace root
+ *   - `--skip-git-repo-check` — the tarball sandbox is not a git repo; without this
+ *                               `codex exec` refuses to run ("not inside a trusted
+ *                               directory")
+ *   - `-o <file>`             — write only the assistant's final message to a file,
+ *                               which we read back as the result (cleaner than the
+ *                               formatted stdout transcript)
+ *   - `--dangerously-bypass-approvals-and-sandbox`
+ *                             — auto-approve every action (incl. MCP tool calls such
+ *                               as the runner-hosted open_issue) and disable codex's
+ *                               local sandbox. Under the default `approval: never` +
+ *                               `sandbox: read-only`, codex auto-CANCELS tool calls
+ *                               it would otherwise need approval for, so the
+ *                               capability tools never fire. This is codex's
+ *                               equivalent of the Claude Code driver's
+ *                               `bypassPermissions` and is justified the same way:
+ *                               this engine only runs inside a throwaway ephemeral
+ *                               container, so the container — not codex's sandbox —
+ *                               is the safety boundary.
+ *   - `-`                     — read the prompt from stdin
+ * The API key rides on `CODEX_API_KEY` (codex exec's dedicated, preferred key,
+ * which also avoids reading `~/.codex/auth.json`); `OPENAI_API_KEY` is set too for
+ * compatibility (codex deprioritizes it but still accepts it).
+ *
+ * Like the Claude Code driver this only runs inside a throwaway ephemeral
+ * container (enforced by CodexEngine.supports) — the container, not a human, is
+ * the safety boundary. It is exercised only when the operator sets
+ * RUNNER_ENABLE_CODEX=1; every test injects a fake driver, so no binary/network
+ * is touched in CI.
+ */
+export async function* defaultCodexDriver(opts) {
+    const controller = new AbortController();
+    const timer = opts.maxDurationMs && opts.maxDurationMs > 0
+        ? setTimeout(() => controller.abort(), opts.maxDurationMs)
+        : undefined;
+    const outDir = await mkdtemp(path.join(tmpdir(), "harness-codex-out-"));
+    const lastMessageFile = path.join(outDir, "last-message.txt");
+    try {
+        const child = spawn("codex", [
+            "exec",
+            "-m",
+            opts.model,
+            "-C",
+            opts.cwd,
+            "--skip-git-repo-check",
+            "--dangerously-bypass-approvals-and-sandbox",
+            "-o",
+            lastMessageFile,
+            "-",
+        ], {
+            cwd: opts.cwd,
+            signal: controller.signal,
+            env: {
+                ...process.env,
+                CODEX_HOME: opts.codexHome,
+                // The capability stdio MCP server reads these from its env; set them on the
+                // codex process env so the spawned server inherits them even if codex does
+                // not forward the config.toml env table (belt-and-suspenders with that table).
+                ...opts.capabilityEnv,
+                ...(opts.apiKey ? { CODEX_API_KEY: opts.apiKey, OPENAI_API_KEY: opts.apiKey } : {}),
+            },
+            stdio: ["pipe", "pipe", "pipe"],
+        });
+        child.stdin.end(opts.prompt);
+        let out = "";
+        let err = "";
+        child.stdout.setEncoding("utf8");
+        child.stderr.setEncoding("utf8");
+        child.stdout.on("data", (chunk) => (out += chunk));
+        child.stderr.on("data", (chunk) => (err += chunk));
+        const code = await new Promise((resolve, reject) => {
+            child.on("error", reject);
+            child.on("close", (c) => resolve(c ?? 0));
+        });
+        // On a FAILED run, surface a tail of codex's stderr as an assistant message so it
+        // lands in the run logs for diagnosis — codex logs MCP-server startup + tool-call
+        // activity there, which is otherwise invisible (the `-o` file holds only the final
+        // assistant message). Gated to `code !== 0`: on the happy path this tail is the
+        // full codex transcript (including the entire prompt), so emitting it every run is
+        // pure log bloat + prompt duplication.
+        if (code !== 0 && err.trim()) {
+            const tail = err.length > 4000 ? `…${err.slice(-4000)}` : err;
+            yield { kind: "assistant", text: `codex stderr:\n${tail}` };
+        }
+        // Prefer codex's final-message file; fall back to the raw stdout/stderr transcript.
+        const lastMessage = await readFile(lastMessageFile, "utf8").catch(() => "");
+        const text = lastMessage.trim() || out.trim() || err.trim();
+        yield { kind: "result", text, isError: code !== 0 };
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+        await rm(outDir, { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=codexDriver.js.map

package/dist/engines/codexDriver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexDriver.js","sourceRoot":"","sources":["../../src/engines/codexDriver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AACxD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,IAAI,MAAM,WAAW,CAAA;AAG5B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,kBAAkB,CAAC,IAAkB;IAC1D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,MAAM,KAAK,GACT,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC;QAC1C,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,aAAa,CAAC;QAC1D,CAAC,CAAC,SAAS,CAAA;IAEf,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAA;IACvE,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAA;IAE7D,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CACjB,OAAO,EACP;YACE,MAAM;YACN,IAAI;YACJ,IAAI,CAAC,KAAK;YACV,IAAI;YACJ,IAAI,CAAC,GAAG;YACR,uBAAuB;YACvB,4CAA4C;YAC5C,IAAI;YACJ,eAAe;YACf,GAAG;SACJ,EACD;YACE,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,GAAG,EAAE;gBACH,GAAG,OAAO,CAAC,GAAG;gBACd,UAAU,EAAE,IAAI,CAAC,SAAS;gBAC1B,4EAA4E;gBAC5E,2EAA2E;gBAC3E,+EAA+E;gBAC/E,GAAG,IAAI,CAAC,aAAa;gBACrB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpF;YACD,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CACF,CAAA;QACD,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAE5B,IAAI,GAAG,GAAG,EAAE,CAAA;QACZ,IAAI,GAAG,GAAG,EAAE,CAAA;QACZ,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;QAChC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;QAChC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC,CAAA;QAC1D,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC,CAAA;QAE1D,MAAM,IAAI,GAAW,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACzD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YACzB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC3C,CAAC,CAAC,CAAA;QAEF,kFAAkF;QAClF,kFAAkF;QAClF,mFAAmF;QACnF,gFAAgF;QAChF,mFAAmF;QACnF,uCAAuC;QACvC,IAAI,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAA;YAC7D,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,kBAAkB,IAAI,EAAE,EAAE,CAAA;QAC7D,CAAC;QAED,oFAAoF;QACpF,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;QAC3E,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,IAAI,EAAE,CAAA;QAC3D,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,KAAK,CAAC,EAAE,CAAA;IACrD,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAA;QAC9B,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACpD,CAAC;AACH,CAAC"}

package/dist/engines/connectorMcp.d.ts

@@ -0,0 +1,60 @@
+import type { ConnectorConfig } from "../types.js";
+/**
+ * A serializable MCP server config — the shape both the Anthropic Agent SDK's
+ * `mcpServers` option (for its process-transport servers) and a `.mcp.json` file
+ * (for codex / external-CLI engines) understand. The runner resolves connector
+ * auth tokens caller-side, so they are inlined here as the transport
+ * expects (a bearer header for HTTP-family, `MCP_AUTH_TOKEN` env for stdio —
+ * mirroring src/connectors/mcpClient.ts, the native engine's connector client).
+ */
+export type SerializableMcpServer = {
+    type: "stdio";
+    command: string;
+    args?: string[];
+    env?: Record<string, string>;
+} | {
+    type: "http";
+    url: string;
+    headers?: Record<string, string>;
+} | {
+    type: "sse";
+    url: string;
+    headers?: Record<string, string>;
+};
+/**
+ * Translate one connector into a serializable MCP server config, or null when it
+ * isn't an MCP connector this seam can carry (a plain `http` service, or a
+ * malformed config missing its endpoint/command). Same source data the native
+ * engine's connector client consumes — one definition, every engine.
+ */
+export declare function connectorToMcpServer(config: ConnectorConfig): SerializableMcpServer | null;
+/**
+ * Build the `<name> → server config` map for a run's MCP connectors, skipping any
+ * that don't translate. Suitable both for the Agent SDK's `mcpServers` option and
+ * for a `.mcp.json` file's `mcpServers` field.
+ */
+export declare function connectorServers(connectors: ConnectorConfig[]): Record<string, SerializableMcpServer>;
+/**
+ * Write a `.mcp.json` at the sandbox root — the shape a generic CLI harness that
+ * follows the Claude Code convention reads. No-op when there are no servers.
+ * Returns the servers written (for logging / assertions).
+ *
+ * NOTE: the OpenAI Codex CLI does NOT read `.mcp.json` — it discovers MCP servers
+ * from `$CODEX_HOME/config.toml` under `[mcp_servers.<name>]`. The codex engine
+ * uses {@link writeCodexConfig} instead; this seam is kept for any generic-CLI use.
+ */
+export declare function writeMcpJson(workdir: string, servers: Record<string, SerializableMcpServer>): Promise<Record<string, SerializableMcpServer>>;
+/**
+ * Write a `config.toml` into a codex home directory so the OpenAI Codex CLI (run
+ * with `CODEX_HOME` pointed here) discovers the run's MCP servers — the run's
+ * connectors plus the runner-hosted capability server — as `[mcp_servers.<name>]`
+ * tables. This is codex's REAL discovery mechanism (it ignores `.mcp.json`).
+ *
+ * The file can carry resolved connector auth tokens (inline `http_headers`, or a
+ * stdio server's `MCP_AUTH_TOKEN` env), so callers MUST write it to a transient
+ * location outside the sandbox tree and delete it after the run — never let it
+ * reach the change set. No-op when there are no servers. Returns the path written
+ * (or null when nothing was written), for logging / assertions.
+ */
+export declare function writeCodexConfig(codexHome: string, servers: Record<string, SerializableMcpServer>): Promise<string | null>;
+//# sourceMappingURL=connectorMcp.d.ts.map

package/dist/engines/connectorMcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connectorMcp.d.ts","sourceRoot":"","sources":["../../src/engines/connectorMcp.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAElD;;;;;;;GAOG;AACH,MAAM,MAAM,qBAAqB,GAC7B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GACjF;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAC/D;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAAA;AASlE;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,eAAe,GAAG,qBAAqB,GAAG,IAAI,CA8B1F;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,eAAe,EAAE,GAC5B,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAOvC;AAED;;;;;;;;GAQG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,GAC7C,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAKhD;AA2CD;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CACpC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,GAC7C,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAMxB"}

package/dist/engines/connectorMcp.js

@@ -0,0 +1,137 @@
+import { writeFile } from "node:fs/promises";
+import path from "node:path";
+function bearerHeaders(config) {
+    if (config.auth?.type === "bearer" && config.auth.token) {
+        return { Authorization: `Bearer ${config.auth.token}` };
+    }
+    return undefined;
+}
+/**
+ * Translate one connector into a serializable MCP server config, or null when it
+ * isn't an MCP connector this seam can carry (a plain `http` service, or a
+ * malformed config missing its endpoint/command). Same source data the native
+ * engine's connector client consumes — one definition, every engine.
+ */
+export function connectorToMcpServer(config) {
+    if (config.kind !== "mcp")
+        return null;
+    switch (config.transport) {
+        case "stdio": {
+            if (!config.command)
+                return null;
+            const env = config.auth?.type === "bearer" && config.auth.token
+                ? { MCP_AUTH_TOKEN: config.auth.token }
+                : undefined;
+            return {
+                type: "stdio",
+                command: config.command,
+                ...(config.args && config.args.length > 0 ? { args: config.args } : {}),
+                ...(env ? { env } : {}),
+            };
+        }
+        case "streamable_http": {
+            if (!config.endpoint)
+                return null;
+            const headers = bearerHeaders(config);
+            return { type: "http", url: config.endpoint, ...(headers ? { headers } : {}) };
+        }
+        case "sse": {
+            if (!config.endpoint)
+                return null;
+            const headers = bearerHeaders(config);
+            return { type: "sse", url: config.endpoint, ...(headers ? { headers } : {}) };
+        }
+        default:
+            return null;
+    }
+}
+/**
+ * Build the `<name> → server config` map for a run's MCP connectors, skipping any
+ * that don't translate. Suitable both for the Agent SDK's `mcpServers` option and
+ * for a `.mcp.json` file's `mcpServers` field.
+ */
+export function connectorServers(connectors) {
+    const servers = {};
+    for (const config of connectors) {
+        const server = connectorToMcpServer(config);
+        if (server)
+            servers[config.name] = server;
+    }
+    return servers;
+}
+/**
+ * Write a `.mcp.json` at the sandbox root — the shape a generic CLI harness that
+ * follows the Claude Code convention reads. No-op when there are no servers.
+ * Returns the servers written (for logging / assertions).
+ *
+ * NOTE: the OpenAI Codex CLI does NOT read `.mcp.json` — it discovers MCP servers
+ * from `$CODEX_HOME/config.toml` under `[mcp_servers.<name>]`. The codex engine
+ * uses {@link writeCodexConfig} instead; this seam is kept for any generic-CLI use.
+ */
+export async function writeMcpJson(workdir, servers) {
+    if (Object.keys(servers).length === 0)
+        return servers;
+    const file = path.join(workdir, ".mcp.json");
+    await writeFile(file, `${JSON.stringify({ mcpServers: servers }, null, 2)}\n`);
+    return servers;
+}
+/** Escape a string for a TOML basic (double-quoted) string. */
+function tomlString(value) {
+    const escaped = value
+        .replace(/\\/g, "\\\\")
+        .replace(/"/g, '\\"')
+        .replace(/\n/g, "\\n")
+        .replace(/\r/g, "\\r")
+        .replace(/\t/g, "\\t");
+    return `"${escaped}"`;
+}
+/** Serialize a `{ KEY: "value" }` map as a TOML inline table with quoted keys. */
+function tomlInlineTable(map) {
+    const pairs = Object.entries(map).map(([k, v]) => `${tomlString(k)} = ${tomlString(v)}`);
+    return `{ ${pairs.join(", ")} }`;
+}
+/** Render one MCP server as a `[mcp_servers."<name>"]` TOML section. */
+function codexServerSection(name, server) {
+    const lines = [`[mcp_servers.${tomlString(name)}]`];
+    if (server.type === "stdio") {
+        lines.push(`command = ${tomlString(server.command)}`);
+        if (server.args && server.args.length > 0) {
+            lines.push(`args = [${server.args.map(tomlString).join(", ")}]`);
+        }
+        if (server.env && Object.keys(server.env).length > 0) {
+            lines.push(`env = ${tomlInlineTable(server.env)}`);
+        }
+    }
+    else {
+        // Codex speaks Streamable HTTP over `url`; it has no distinct SSE transport, so
+        // an `sse` connector is carried the same way (a legacy SSE-only endpoint may not
+        // work). Resolved bearer tokens ride inline in `http_headers` (Authorization),
+        // which is exactly why the config file must be written pre-run and deleted after.
+        lines.push(`url = ${tomlString(server.url)}`);
+        if (server.headers && Object.keys(server.headers).length > 0) {
+            lines.push(`http_headers = ${tomlInlineTable(server.headers)}`);
+        }
+    }
+    return lines.join("\n");
+}
+/**
+ * Write a `config.toml` into a codex home directory so the OpenAI Codex CLI (run
+ * with `CODEX_HOME` pointed here) discovers the run's MCP servers — the run's
+ * connectors plus the runner-hosted capability server — as `[mcp_servers.<name>]`
+ * tables. This is codex's REAL discovery mechanism (it ignores `.mcp.json`).
+ *
+ * The file can carry resolved connector auth tokens (inline `http_headers`, or a
+ * stdio server's `MCP_AUTH_TOKEN` env), so callers MUST write it to a transient
+ * location outside the sandbox tree and delete it after the run — never let it
+ * reach the change set. No-op when there are no servers. Returns the path written
+ * (or null when nothing was written), for logging / assertions.
+ */
+export async function writeCodexConfig(codexHome, servers) {
+    if (Object.keys(servers).length === 0)
+        return null;
+    const sections = Object.entries(servers).map(([name, server]) => codexServerSection(name, server));
+    const file = path.join(codexHome, "config.toml");
+    await writeFile(file, `${sections.join("\n\n")}\n`);
+    return file;
+}
+//# sourceMappingURL=connectorMcp.js.map

package/dist/engines/connectorMcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connectorMcp.js","sourceRoot":"","sources":["../../src/engines/connectorMcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAA;AAgB5B,SAAS,aAAa,CAAC,MAAuB;IAC5C,IAAI,MAAM,CAAC,IAAI,EAAE,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACxD,OAAO,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAA;IACzD,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAuB;IAC1D,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,IAAI,CAAA;IAEtC,QAAQ,MAAM,CAAC,SAAS,EAAE,CAAC;QACzB,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAA;YAChC,MAAM,GAAG,GACP,MAAM,CAAC,IAAI,EAAE,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK;gBACjD,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE;gBACvC,CAAC,CAAC,SAAS,CAAA;YACf,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxB,CAAA;QACH,CAAC;QACD,KAAK,iBAAiB,CAAC,CAAC,CAAC;YACvB,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAA;YACjC,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;YACrC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;QAChF,CAAC;QACD,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAA;YACjC,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;YACrC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;QAC/E,CAAC;QACD;YACE,OAAO,IAAI,CAAA;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,UAA6B;IAE7B,MAAM,OAAO,GAA0C,EAAE,CAAA;IACzD,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAA;QAC3C,IAAI,MAAM;YAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAA;IAC3C,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAe,EACf,OAA8C;IAE9C,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAA;IACrD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;IAC5C,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;IAC9E,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,+DAA+D;AAC/D,SAAS,UAAU,CAAC,KAAa;IAC/B,MAAM,OAAO,GAAG,KAAK;SAClB,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;SACpB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IACxB,OAAO,IAAI,OAAO,GAAG,CAAA;AACvB,CAAC;AAED,kFAAkF;AAClF,SAAS,eAAe,CAAC,GAA2B;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IACxF,OAAO,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAA;AAClC,CAAC;AAED,wEAAwE;AACxE,SAAS,kBAAkB,CAAC,IAAY,EAAE,MAA6B;IACrE,MAAM,KAAK,GAAG,CAAC,gBAAgB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACnD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,aAAa,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACrD,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAClE,CAAC;QACD,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrD,KAAK,CAAC,IAAI,CAAC,SAAS,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACpD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,gFAAgF;QAChF,iFAAiF;QACjF,+EAA+E;QAC/E,kFAAkF;QAClF,KAAK,CAAC,IAAI,CAAC,SAAS,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC7C,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7D,KAAK,CAAC,IAAI,CAAC,kBAAkB,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACjE,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,SAAiB,EACjB,OAA8C;IAE9C,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAClD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;IAClG,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAA;IAChD,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACnD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/engines/index.d.ts

@@ -0,0 +1,33 @@
+import { type DomainToolFactory } from "./native.js";
+import { type CapabilityToolFactory } from "./claudeCode.js";
+import type { AgentEngine } from "./types.js";
+export type { AgentEngine, EngineContext, EngineResult, EngineSupport, RunSpec } from "./types.js";
+/**
+ * The application-supplied seams an engine needs. The kernel defines no domain
+ * tools and no application capabilities, so anything product-specific reaches
+ * the engines through here rather than being baked in.
+ */
+export interface EngineSelection {
+    /** Extra tools for the in-process loop, beyond the generic primitives. */
+    domainTools?: DomainToolFactory;
+    /** The capability surface exposed to Claude Code over its in-process MCP server. */
+    capabilityTools?: CapabilityToolFactory;
+    /**
+     * Entrypoint script the codex engine spawns to serve its capability surface.
+     * Required to select `codex` — a child process cannot be handed a closure, so
+     * the application must own that script.
+     */
+    capabilityServerScript?: string;
+}
+/**
+ * Resolve the agent harness for a run from the workflow's `provider.engine`.
+ * Defaults to the native loop; an unknown name also falls back to native (the
+ * safe default), so a typo can't silently route to nothing. Capability gating
+ * (isolation, enablement) is the engine's own `supports()` responsibility.
+ *
+ * Selecting `codex` without `capabilityServerScript` throws rather than
+ * defaulting: the alternative is an external engine that comes up with an empty
+ * capability surface, which looks like a working run that quietly emits nothing.
+ */
+export declare function selectEngine(name?: string | null, selection?: EngineSelection): AgentEngine;
+//# sourceMappingURL=index.d.ts.map

package/dist/engines/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/engines/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAClE,OAAO,EAAoB,KAAK,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AAE9E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAE7C,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAElG;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,0EAA0E;IAC1E,WAAW,CAAC,EAAE,iBAAiB,CAAA;IAC/B,oFAAoF;IACpF,eAAe,CAAC,EAAE,qBAAqB,CAAA;IACvC;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAA;CAChC;AAED;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,SAAS,GAAE,eAAoB,GAAG,WAAW,CAgB/F"}

package/dist/engines/index.js

@@ -0,0 +1,29 @@
+import { NativeEngine } from "./native.js";
+import { ClaudeCodeEngine } from "./claudeCode.js";
+import { CodexEngine } from "./codex.js";
+/**
+ * Resolve the agent harness for a run from the workflow's `provider.engine`.
+ * Defaults to the native loop; an unknown name also falls back to native (the
+ * safe default), so a typo can't silently route to nothing. Capability gating
+ * (isolation, enablement) is the engine's own `supports()` responsibility.
+ *
+ * Selecting `codex` without `capabilityServerScript` throws rather than
+ * defaulting: the alternative is an external engine that comes up with an empty
+ * capability surface, which looks like a working run that quietly emits nothing.
+ */
+export function selectEngine(name, selection = {}) {
+    switch (name) {
+        case "claude-code":
+            return new ClaudeCodeEngine(undefined, selection.capabilityTools);
+        case "codex": {
+            if (!selection.capabilityServerScript) {
+                throw new Error("the codex engine requires selection.capabilityServerScript — the capability surface is " +
+                    "injected, and an external process cannot be handed one implicitly");
+            }
+            return new CodexEngine(undefined, selection.capabilityServerScript);
+        }
+        default:
+            return new NativeEngine(selection.domainTools ? { domainTools: selection.domainTools } : {});
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/engines/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/engines/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAA0B,MAAM,aAAa,CAAA;AAClE,OAAO,EAAE,gBAAgB,EAA8B,MAAM,iBAAiB,CAAA;AAC9E,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAuBxC;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAAC,IAAoB,EAAE,YAA6B,EAAE;IAChF,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,aAAa;YAChB,OAAO,IAAI,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,eAAe,CAAC,CAAA;QACnE,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,IAAI,CAAC,SAAS,CAAC,sBAAsB,EAAE,CAAC;gBACtC,MAAM,IAAI,KAAK,CACb,yFAAyF;oBACvF,mEAAmE,CACtE,CAAA;YACH,CAAC;YACD,OAAO,IAAI,WAAW,CAAC,SAAS,EAAE,SAAS,CAAC,sBAAsB,CAAC,CAAA;QACrE,CAAC;QACD;YACE,OAAO,IAAI,YAAY,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IAChG,CAAC;AACH,CAAC"}

package/dist/engines/native.d.ts

@@ -0,0 +1,55 @@
+import { type ContextProvider } from "../context/types.js";
+import { type Loop } from "../loop.js";
+import type { Tool } from "../tools/registry.js";
+import type { AgentEngine, EngineContext, EngineResult, EngineSupport, RunSpec } from "./types.js";
+/**
+ * Builds the non-generic tools a run gets on top of the primitives, gated by the
+ * same permissions allowlist. An application closes over whatever sinks it wants
+ * the results to land in — the kernel neither supplies nor inspects them.
+ */
+export type DomainToolFactory = (allowed?: string[]) => Tool[];
+export interface NativeEngineOptions {
+    /**
+     * Application tools composed in alongside the generic primitives. Defaults to
+     * none: the kernel ships no domain tools, because what a run may emit is the
+     * application's vocabulary. Pass a factory to add them.
+     */
+    domainTools?: DomainToolFactory;
+    /**
+     * Extra context sources asked for fragments at run time, appended after the
+     * spec's own pre-assembled `context`. Absent (the default) means the prompt is
+     * built from `spec.context` alone, exactly as before this seam existed.
+     */
+    contextProviders?: ContextProvider[];
+    /**
+     * The control loop that drives the run. Defaults to `nativeLoop` — the loop
+     * this engine has always run — so an engine constructed without one is
+     * unchanged. Pass your own to change control flow (a confirmation gate, a
+     * plan-then-execute shape) without forking the engine or the loop.
+     */
+    loop?: Loop;
+}
+/**
+ * The in-process native engine: the provider-neutral tool-use loop over the
+ * general-purpose primitives (run_code, read_file, list_files, http_fetch) plus
+ * the run's domain tools and MCP connectors. This is the default engine and the
+ * only one safe to run on a warm shared host — the primitives are the isolation
+ * boundary.
+ */
+export declare class NativeEngine implements AgentEngine {
+    readonly name = "native";
+    private readonly domainTools;
+    private readonly contextProviders;
+    private readonly loop;
+    constructor(options?: NativeEngineOptions);
+    supports(): EngineSupport;
+    run(spec: RunSpec, ctx: EngineContext): Promise<EngineResult>;
+    /**
+     * The run's context text: the spec's own pre-assembled context, then whatever
+     * the configured providers contribute. With no providers this returns
+     * `spec.context` unchanged, so the prompt is byte-identical to a run that
+     * predates the seam.
+     */
+    private buildContext;
+}
+//# sourceMappingURL=native.d.ts.map

package/dist/engines/native.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native.d.ts","sourceRoot":"","sources":["../../src/engines/native.ts"],"names":[],"mappings":"AACA,OAAO,EAAkC,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAE1F,OAAO,EAA6B,KAAK,IAAI,EAAE,MAAM,YAAY,CAAA;AAKjE,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAA;AAEhD,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAElG;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE,CAAA;AAE9D,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,WAAW,CAAC,EAAE,iBAAiB,CAAA;IAC/B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,eAAe,EAAE,CAAA;IACpC;;;;;OAKG;IACH,IAAI,CAAC,EAAE,IAAI,CAAA;CACZ;AAED;;;;;;GAMG;AACH,qBAAa,YAAa,YAAW,WAAW;IAC9C,QAAQ,CAAC,IAAI,YAAW;IAExB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAmB;IAC/C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAmB;IACpD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAM;gBAEf,OAAO,GAAE,mBAAwB;IAM7C,QAAQ,IAAI,aAAa;IAInB,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;IAsDnE;;;;;OAKG;YACW,YAAY;CAY3B"}

package/dist/engines/native.js

@@ -0,0 +1,117 @@
+import { resolveLoopLimits } from "../agent.js";
+import { assembleContext, renderContext } from "../context/types.js";
+import { runEventEmitter } from "../events.js";
+import { nativeLoop, runWithEvents } from "../loop.js";
+import { asChatModel } from "../models/chat.js";
+import { selectProvider } from "../providers/index.js";
+import { secretsToEnv } from "../secrets.js";
+import { primitiveTools, connectorTools } from "../tools/registry.js";
+/**
+ * The in-process native engine: the provider-neutral tool-use loop over the
+ * general-purpose primitives (run_code, read_file, list_files, http_fetch) plus
+ * the run's domain tools and MCP connectors. This is the default engine and the
+ * only one safe to run on a warm shared host — the primitives are the isolation
+ * boundary.
+ */
+export class NativeEngine {
+    name = "native";
+    domainTools;
+    contextProviders;
+    loop;
+    constructor(options = {}) {
+        this.domainTools = options.domainTools ?? (() => []);
+        this.contextProviders = options.contextProviders ?? [];
+        this.loop = options.loop ?? nativeLoop;
+    }
+    supports() {
+        return { ok: true };
+    }
+    async run(spec, ctx) {
+        const provider = selectProvider(spec.provider.preferred, {
+            model: spec.provider.model,
+            credentials: spec.provider.credentials,
+        });
+        ctx.log(`provider: ${provider.name}`);
+        // General-purpose primitives (secrets injected as env) + the run's connectors.
+        const env = secretsToEnv(spec.secrets);
+        const allowed = Array.isArray(spec.permissions.tools) ? spec.permissions.tools : undefined;
+        const allowHosts = Array.isArray(spec.permissions.hosts) ? spec.permissions.hosts : undefined;
+        // Generic primitives + the application's own domain tools, both gated by the
+        // run's permissions allowlist. Anything the domain tools collect goes to
+        // sinks the application owns; the kernel never sees them.
+        const primitives = [
+            ...primitiveTools(spec.workdir, env, allowed, allowHosts),
+            ...this.domainTools(allowed),
+        ];
+        // Connector tools are NOT re-gated by permissions.tools: the caller
+        // already authorized them per connector (scope + grants) when it populated
+        // connectors, and their names are namespaced `<connector>__<tool>`.
+        const connectors = await connectorTools(spec.connectors);
+        try {
+            const tools = [...primitives, ...connectors.tools];
+            ctx.log(`tools: ${tools.map((t) => t.spec.name).join(", ") || "(none)"}`);
+            // Budgets are resolved before the call: a loop is handed numbers, not
+            // optionals, so a second implementation cannot accidentally run to a
+            // different ceiling than the one the kernel ships.
+            const result = await runWithEvents(this.loop, {
+                model: asChatModel(provider),
+                system: buildSystemPrompt(spec.workflow, spec.workspaceId, spec.workflowPath),
+                userPrompt: buildUserPrompt(spec.workflow, await this.buildContext(spec, ctx), spec.inputs),
+                tools,
+                limits: resolveLoopLimits(spec.limits),
+            }, 
+            // The bookends come from `runWithEvents`, so an application's own loop
+            // gets them without having to know they exist.
+            { log: ctx.log, events: runEventEmitter(ctx.emit, ctx.log) });
+            return { text: result.text };
+        }
+        finally {
+            // Connectors are only needed during the loop; close them here (the engine
+            // opened them) regardless of how run() exits.
+            await connectors.close();
+        }
+    }
+    /**
+     * The run's context text: the spec's own pre-assembled context, then whatever
+     * the configured providers contribute. With no providers this returns
+     * `spec.context` unchanged, so the prompt is byte-identical to a run that
+     * predates the seam.
+     */
+    async buildContext(spec, ctx) {
+        if (this.contextProviders.length === 0)
+            return spec.context;
+        const fragments = await assembleContext(this.contextProviders, spec, ctx.log);
+        if (fragments.length === 0)
+            return spec.context;
+        ctx.log(`context: ${fragments.length} fragment(s) from ${this.contextProviders.length} provider(s)`);
+        const assembled = renderContext(fragments);
+        return spec.context ? `${spec.context}\n\n${assembled}` : assembled;
+    }
+}
+function buildSystemPrompt(workflow, workspaceId, workflowPath) {
+    return [
+        "You are an autonomous workflow executing in an isolated workspace sandbox.",
+        `Workspace: ${workspaceId}`,
+        `Workflow: ${workflow.name ?? workflowPath}`,
+        "Use the provided tools to inspect the workspace, run the repo's own code, and",
+        "call connectors as needed. Delegate anything that must be precise or",
+        "reproducible (calculations, dates, side effects) to code via run_code rather",
+        "than doing it yourself. When finished, reply with the workflow's output as",
+        "Markdown and no further tool calls.",
+    ].join("\n");
+}
+function buildUserPrompt(workflow, context, inputs) {
+    const inputsJson = JSON.stringify(inputs ?? {}, null, 2);
+    return [
+        workflow.prompt ?? `Execute the "${workflow.name}" workflow.`,
+        "",
+        "## Inputs",
+        "```json",
+        inputsJson,
+        "```",
+        "",
+        "## Workspace context",
+        context || "(no context files matched)",
+    ].join("\n");
+}
+//# sourceMappingURL=native.js.map

package/dist/engines/native.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native.js","sourceRoot":"","sources":["../../src/engines/native.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,EAAE,eAAe,EAAE,aAAa,EAAwB,MAAM,qBAAqB,CAAA;AAC1F,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,EAAE,UAAU,EAAE,aAAa,EAAa,MAAM,YAAY,CAAA;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAkCrE;;;;;;GAMG;AACH,MAAM,OAAO,YAAY;IACd,IAAI,GAAG,QAAQ,CAAA;IAEP,WAAW,CAAmB;IAC9B,gBAAgB,CAAmB;IACnC,IAAI,CAAM;IAE3B,YAAY,UAA+B,EAAE;QAC3C,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;QACpD,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAA;QACtD,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,UAAU,CAAA;IACxC,CAAC;IAED,QAAQ;QACN,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;IACrB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAa,EAAE,GAAkB;QACzC,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE;YACvD,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK;YAC1B,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW;SACvC,CAAC,CAAA;QACF,GAAG,CAAC,GAAG,CAAC,aAAa,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;QAErC,+EAA+E;QAC/E,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACtC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;QAC1F,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;QAC7F,6EAA6E;QAC7E,yEAAyE;QACzE,0DAA0D;QAC1D,MAAM,UAAU,GAAG;YACjB,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,CAAC;YACzD,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC;SAC7B,CAAA;QACD,oEAAoE;QACpE,2EAA2E;QAC3E,oEAAoE;QACpE,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACxD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,CAAC,GAAG,UAAU,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;YAClD,GAAG,CAAC,GAAG,CAAC,UAAU,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAA;YAEzE,sEAAsE;YACtE,qEAAqE;YACrE,mDAAmD;YACnD,MAAM,MAAM,GAAG,MAAM,aAAa,CAChC,IAAI,CAAC,IAAI,EACT;gBACE,KAAK,EAAE,WAAW,CAAC,QAAQ,CAAC;gBAC5B,MAAM,EAAE,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC;gBAC7E,UAAU,EAAE,eAAe,CACzB,IAAI,CAAC,QAAQ,EACb,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,EAClC,IAAI,CAAC,MAAM,CACZ;gBACD,KAAK;gBACL,MAAM,EAAE,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC;aACvC;YACD,uEAAuE;YACvE,+CAA+C;YAC/C,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAC7D,CAAA;YACD,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAA;QAC9B,CAAC;gBAAS,CAAC;YACT,0EAA0E;YAC1E,8CAA8C;YAC9C,MAAM,UAAU,CAAC,KAAK,EAAE,CAAA;QAC1B,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,YAAY,CAAC,IAAa,EAAE,GAAkB;QAC1D,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,OAAO,CAAA;QAE3D,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CAAA;QAC7E,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,OAAO,CAAA;QAE/C,GAAG,CAAC,GAAG,CACL,YAAY,SAAS,CAAC,MAAM,qBAAqB,IAAI,CAAC,gBAAgB,CAAC,MAAM,cAAc,CAC5F,CAAA;QACD,MAAM,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC,CAAA;QAC1C,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,OAAO,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;IACrE,CAAC;CACF;AAED,SAAS,iBAAiB,CACxB,QAA4B,EAC5B,WAAmB,EACnB,YAAoB;IAEpB,OAAO;QACL,4EAA4E;QAC5E,cAAc,WAAW,EAAE;QAC3B,aAAa,QAAQ,CAAC,IAAI,IAAI,YAAY,EAAE;QAC5C,+EAA+E;QAC/E,sEAAsE;QACtE,8EAA8E;QAC9E,4EAA4E;QAC5E,qCAAqC;KACtC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC;AAED,SAAS,eAAe,CACtB,QAA4B,EAC5B,OAAe,EACf,MAA+B;IAE/B,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IACxD,OAAO;QACL,QAAQ,CAAC,MAAM,IAAI,gBAAgB,QAAQ,CAAC,IAAI,aAAa;QAC7D,EAAE;QACF,WAAW;QACX,SAAS;QACT,UAAU;QACV,KAAK;QACL,EAAE;QACF,sBAAsB;QACtB,OAAO,IAAI,4BAA4B;KACxC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC"}