@relayflows/sdk 2.0.0

package/dist/work-package-validator.d.ts

@@ -0,0 +1,15 @@
+export type NextWorkPackageRefusalReason = 'nonexistent_repo_path' | 'test_claim_without_evidence';
+export type NextWorkPackageValidation = {
+    accepted: true;
+} | {
+    accepted: false;
+    reason: NextWorkPackageRefusalReason;
+};
+/** Resolve a referenced path. Injectable so validation is deterministic in tests. */
+export type WorkPackagePathExists = (path: string) => boolean;
+/**
+ * Validate claims and repository references in an ops/NEXT.md work package.
+ * Refusals are values so a caller cannot mistake an unchecked package for work.
+ */
+export declare function validateNextWorkPackage(markdown: string, pathExists?: WorkPackagePathExists): NextWorkPackageValidation;
+//# sourceMappingURL=work-package-validator.d.ts.map

package/dist/work-package-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"work-package-validator.d.ts","sourceRoot":"","sources":["../src/work-package-validator.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,4BAA4B,GACpC,uBAAuB,GACvB,6BAA6B,CAAC;AAElC,MAAM,MAAM,yBAAyB,GACjC;IAAE,QAAQ,EAAE,IAAI,CAAA;CAAE,GAClB;IAAE,QAAQ,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,4BAA4B,CAAA;CAAE,CAAC;AAE9D,qFAAqF;AACrF,MAAM,MAAM,qBAAqB,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;AAQ9D;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,MAAM,EAChB,UAAU,GAAE,qBAAyC,GACpD,yBAAyB,CA4B3B"}

package/dist/work-package-validator.js

@@ -0,0 +1,72 @@
+import { existsSync } from 'node:fs';
+const defaultPathExists = (path) => existsSync(path);
+const INLINE_CODE = /(?<!`)`([^`\n]+)`(?!`)/g;
+const REPO_PATH = /^[A-Za-z_][A-Za-z0-9._-]*(?:\/[A-Za-z0-9._-]+)+$/;
+const TEST_RESULT_CLAIM = /(?:\b(?:all|both|one|two|three|four|five|six|seven|eight|nine|ten|\d+|tests?|test suite|checks?|build)\b[^\n]{0,60}\b(?:green|pass(?:ed|es|ing)?|succeed(?:ed|s)?|tested)\b|\b(?:is|are|was|were|has been|have been)\b[^\n]{0,60}\btested\b)/i;
+/**
+ * Validate claims and repository references in an ops/NEXT.md work package.
+ * Refusals are values so a caller cannot mistake an unchecked package for work.
+ */
+export function validateNextWorkPackage(markdown, pathExists = defaultPathExists) {
+    for (const path of referencedRepoPaths(markdown)) {
+        if (!pathExists(path))
+            return { accepted: false, reason: 'nonexistent_repo_path' };
+    }
+    const lines = markdown.split(/\r?\n/);
+    const fencedLines = findFencedLines(lines);
+    for (const [index, line] of lines.entries()) {
+        if (fencedLines.has(index) || !TEST_RESULT_CLAIM.test(line))
+            continue;
+        // A REQUIREMENT is not a CLAIM. "npm test must be green" states what has to
+        // become true; "All three tests pass" asserts it already is. Only the
+        // second needs evidence (review, PR #50).
+        //
+        // The discriminator is MODALITY, not location. A first attempt at this
+        // exempted every line under a "Definition of done" heading, which let the
+        // PR #19 artifact through — its claim "All three tests pass." sits under
+        // exactly that heading and is precisely what this must catch.
+        //
+        // The modal check was already here but keyed only on "pass", so "must be
+        // green" and "must be clean" still tripped it.
+        if (/\b(?:must|should|will|needs? to|has to)\b[^\n]{0,40}\b(?:pass|passing|green|clean|succeed)\b/i.test(line)) {
+            continue;
+        }
+        if (!hasNearbyTranscript(lines, fencedLines, index)) {
+            return { accepted: false, reason: 'test_claim_without_evidence' };
+        }
+    }
+    return { accepted: true };
+}
+function referencedRepoPaths(markdown) {
+    return [...markdown.matchAll(INLINE_CODE)]
+        .map((match) => match[1] ?? '')
+        .filter((candidate) => REPO_PATH.test(candidate));
+}
+function findFencedLines(lines) {
+    const fenced = new Set();
+    let open = false;
+    for (const [index, line] of lines.entries()) {
+        if (/^\s*```/.test(line)) {
+            fenced.add(index);
+            open = !open;
+        }
+        else if (open) {
+            fenced.add(index);
+        }
+    }
+    return fenced;
+}
+function hasNearbyTranscript(lines, fenced, claimIndex) {
+    const nearby = lines
+        .map((line, index) => ({ line, index }))
+        .filter(({ index }) => fenced.has(index) && Math.abs(index - claimIndex) <= 10)
+        .map(({ line }) => line.trim())
+        .filter((line) => line.length > 0 && !line.startsWith('```'));
+    const commandIndex = nearby.findIndex(isCommandLine);
+    return commandIndex >= 0 && nearby.some((line, index) => index > commandIndex && !isCommandLine(line));
+}
+function isCommandLine(line) {
+    const command = line.startsWith('$ ') ? line.slice(2) : line;
+    return /^(?:cd\s+\S+\s*&&\s*)?(?:npm|node|cargo|sh|pnpm|yarn|pytest|go)\b/.test(command);
+}
+//# sourceMappingURL=work-package-validator.js.map

package/dist/work-package-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"work-package-validator.js","sourceRoot":"","sources":["../src/work-package-validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAarC,MAAM,iBAAiB,GAA0B,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AAC5E,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAC9C,MAAM,SAAS,GAAG,kDAAkD,CAAC;AACrE,MAAM,iBAAiB,GACrB,+OAA+O,CAAC;AAElP;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAAgB,EAChB,aAAoC,iBAAiB;IAErD,KAAK,MAAM,IAAI,IAAI,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IACrF,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAC3C,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5C,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QACtE,4EAA4E;QAC5E,sEAAsE;QACtE,0CAA0C;QAC1C,EAAE;QACF,uEAAuE;QACvE,0EAA0E;QAC1E,yEAAyE;QACzE,8DAA8D;QAC9D,EAAE;QACF,yEAAyE;QACzE,+CAA+C;QAC/C,IAAI,+FAA+F,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/G,SAAS;QACX,CAAC;QACD,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,EAAE,CAAC;YACpD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;QACpE,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,OAAO,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;SACvC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SAC9B,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,eAAe,CAAC,KAAe;IACtC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5C,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAClB,IAAI,GAAG,CAAC,IAAI,CAAC;QACf,CAAC;aAAM,IAAI,IAAI,EAAE,CAAC;YAChB,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAe,EAAE,MAAmB,EAAE,UAAkB;IACnF,MAAM,MAAM,GAAG,KAAK;SACjB,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;SACvC,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;SAC9E,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC9B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IAChE,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IACrD,OAAO,YAAY,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,YAAY,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;AACzG,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,OAAO,mEAAmE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC3F,CAAC"}

package/dist/worker-cli.d.ts

@@ -0,0 +1,16 @@
+import { type WrapperSessionLimits } from './wrapper-session.js';
+/** Present only when a dispatched agent step carries a journaled wake context. */
+export declare const WAKE_CONTEXT_ENV = "RELAYFLOW_WAKE_CONTEXT";
+/**
+ * Private wrapper model variable name. Ambient values are scrubbed; a wrapper
+ * may set it inside the already-identified process from the session request.
+ * Raw Claude/Codex adapters receive provider-native model flags.
+ */
+export declare const MODEL_ENV = "RELAYFLOW_MODEL";
+export interface WorkerCliResult {
+    exit_code: number | null;
+    stdout_tail: string;
+    stderr_tail: string;
+}
+export declare function runAgentCli(cli: string, instruction: string, wakeContext: unknown, model?: string, wrapperLimits?: Partial<WrapperSessionLimits>): Promise<WorkerCliResult>;
+//# sourceMappingURL=worker-cli.d.ts.map

package/dist/worker-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-cli.d.ts","sourceRoot":"","sources":["../src/worker-cli.ts"],"names":[],"mappings":"AAMA,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,sBAAsB,CAAC;AAG9B,kFAAkF;AAClF,eAAO,MAAM,gBAAgB,2BAA2B,CAAC;AAEzD;;;;GAIG;AACH,eAAO,MAAM,SAAS,oBAAoB,CAAC;AAE3C,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,wBAAsB,WAAW,CAC/B,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,OAAO,EACpB,KAAK,CAAC,EAAE,MAAM,EACd,aAAa,CAAC,EAAE,OAAO,CAAC,oBAAoB,CAAC,GAC5C,OAAO,CAAC,eAAe,CAAC,CAiC1B"}

package/dist/worker-cli.js

@@ -0,0 +1,77 @@
+import { spawn } from 'node:child_process';
+import { agentExecution, cliAdapterKind, } from './cli-adapter.js';
+import { runWrapperSession, } from './wrapper-session.js';
+import { wrapperEnvironment } from './wrapper-runtime.js';
+/** Present only when a dispatched agent step carries a journaled wake context. */
+export const WAKE_CONTEXT_ENV = 'RELAYFLOW_WAKE_CONTEXT';
+/**
+ * Private wrapper model variable name. Ambient values are scrubbed; a wrapper
+ * may set it inside the already-identified process from the session request.
+ * Raw Claude/Codex adapters receive provider-native model flags.
+ */
+export const MODEL_ENV = 'RELAYFLOW_MODEL';
+export async function runAgentCli(cli, instruction, wakeContext, model, wrapperLimits) {
+    const kind = cliAdapterKind(cli);
+    if (kind === 'relayflows-wrapper-v1') {
+        return runWrapperSession(cli, instruction, wakeContext, model, wrapperEnvironment(process.env), wrapperLimits);
+    }
+    const env = { ...process.env };
+    delete env[WAKE_CONTEXT_ENV];
+    delete env[MODEL_ENV];
+    const invocation = agentExecution(kind, instruction, model);
+    if (wakeContext !== undefined) {
+        try {
+            env[WAKE_CONTEXT_ENV] = JSON.stringify(wakeContext);
+        }
+        catch (error) {
+            return {
+                exit_code: null,
+                stdout_tail: '',
+                stderr_tail: `wake_context could not be JSON-serialized for the CLI: ${String(error)}`,
+            };
+        }
+    }
+    if (invocation.modelEnv !== undefined)
+        env[MODEL_ENV] = invocation.modelEnv;
+    return spawnInvocation(cli, invocation, env);
+}
+function spawnInvocation(cli, invocation, env) {
+    return new Promise((resolve) => {
+        const child = spawn(cli, invocation.args, { stdio: ['ignore', 'pipe', 'pipe'], env });
+        const stdout = [];
+        const stderr = [];
+        let settled = false;
+        let timer;
+        const finish = (result) => {
+            if (settled)
+                return;
+            settled = true;
+            if (timer !== undefined)
+                clearTimeout(timer);
+            resolve(result);
+        };
+        child.stdout.on('data', (chunk) => stdout.push(chunk));
+        child.stderr.on('data', (chunk) => stderr.push(chunk));
+        child.once('error', (error) => finish({
+            exit_code: null,
+            stdout_tail: Buffer.concat(stdout).toString('utf8'),
+            stderr_tail: error.message,
+        }));
+        child.once('close', (code) => finish({
+            exit_code: code,
+            stdout_tail: Buffer.concat(stdout).toString('utf8'),
+            stderr_tail: Buffer.concat(stderr).toString('utf8'),
+        }));
+        if (invocation.timeoutMs > 0) {
+            timer = setTimeout(() => {
+                child.kill('SIGTERM');
+                finish({
+                    exit_code: null,
+                    stdout_tail: Buffer.concat(stdout).toString('utf8'),
+                    stderr_tail: `CLI invocation timed out after ${invocation.timeoutMs}ms.`,
+                });
+            }, invocation.timeoutMs);
+        }
+    });
+}
+//# sourceMappingURL=worker-cli.js.map

package/dist/worker-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-cli.js","sourceRoot":"","sources":["../src/worker-cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EACL,cAAc,EACd,cAAc,GAEf,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,iBAAiB,GAElB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE1D,kFAAkF;AAClF,MAAM,CAAC,MAAM,gBAAgB,GAAG,wBAAwB,CAAC;AAEzD;;;;GAIG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,iBAAiB,CAAC;AAQ3C,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAW,EACX,WAAmB,EACnB,WAAoB,EACpB,KAAc,EACd,aAA6C;IAE7C,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAEjC,IAAI,IAAI,KAAK,uBAAuB,EAAE,CAAC;QACrC,OAAO,iBAAiB,CACtB,GAAG,EACH,WAAW,EACX,WAAW,EACX,KAAK,EACL,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,EAC/B,aAAa,CACd,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAsB,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAClD,OAAO,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC7B,OAAO,GAAG,CAAC,SAAS,CAAC,CAAC;IACtB,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IAE5D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,GAAG,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,SAAS,EAAE,IAAI;gBACf,WAAW,EAAE,EAAE;gBACf,WAAW,EAAE,0DAA0D,MAAM,CAAC,KAAK,CAAC,EAAE;aACvF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,UAAU,CAAC,QAAQ,KAAK,SAAS;QAAE,GAAG,CAAC,SAAS,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC;IAC5E,OAAO,eAAe,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,eAAe,CACtB,GAAW,EACX,UAAyB,EACzB,GAAsB;IAEtB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACtF,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,KAAiC,CAAC;QACtC,MAAM,MAAM,GAAG,CAAC,MAAuB,EAAQ,EAAE;YAC/C,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,KAAK,KAAK,SAAS;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YAC7C,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/D,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/D,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC;YACpC,SAAS,EAAE,IAAI;YACf,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YACnD,WAAW,EAAE,KAAK,CAAC,OAAO;SAC3B,CAAC,CAAC,CAAC;QACJ,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC;YACnC,SAAS,EAAE,IAAI;YACf,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YACnD,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;SACpD,CAAC,CAAC,CAAC;QACJ,IAAI,UAAU,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;YAC7B,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBACtB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,MAAM,CAAC;oBACL,SAAS,EAAE,IAAI;oBACf,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;oBACnD,WAAW,EAAE,kCAAkC,UAAU,CAAC,SAAS,KAAK;iBACzE,CAAC,CAAC;YACL,CAAC,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/worker.d.ts

@@ -0,0 +1,57 @@
+import { EventEmitter } from 'node:events';
+import type { JournalClient } from './journal-client.js';
+import type { Pins } from './protocol.js';
+export { MODEL_ENV, WAKE_CONTEXT_ENV } from './worker-cli.js';
+export interface AgentWorkerOptions {
+    workerId: string;
+    pins: Pins;
+    capacity?: number;
+}
+/**
+ * Executes dispatched agent steps using their declared CLI.
+ *
+ * Shutdown contract (close): async and drain-aware. The caller may await
+ * close() to guarantee every dispatch this worker started before close
+ * was called has either completed its stepComplete journal write or
+ * thrown out through the worker's `error` event. Dispatches that arrive
+ * AFTER close begins are ignored. Idempotent.
+ *
+ * Not implemented: releasing the worker registration with the kernel.
+ * `sdk/src/protocol.ts` has no `workerRelease` verb today, so on close()
+ * the kernel keeps this workerId in its registry until its lease expires.
+ * When workerRelease lands, add a client call at the top of close()
+ * (before the drain) so the kernel stops routing dispatches during
+ * shutdown.
+ */
+export declare class AgentWorker extends EventEmitter {
+    private readonly client;
+    private readonly options;
+    private attached;
+    private closing;
+    private readonly inFlight;
+    constructor(client: JournalClient, options: AgentWorkerOptions);
+    attach(): Promise<void>;
+    /**
+     * Async, drain-aware shutdown. Awaits every dispatch in-flight; ignores
+     * dispatches that arrive after close() begins. Idempotent.
+     *
+     * A prior synchronous close() did NOT drain, so a caller shutting
+     * mid-dispatch could silently lose an in-flight step's stepComplete
+     * journal write when the socket was immediately shut. This closes
+     * that hole.
+     */
+    close(): Promise<void>;
+    private readonly onDispatch;
+    private execute;
+}
+/**
+ * Return an object-shaped JSON payload parsed from `stdout`, or
+ * `null` when stdout is empty, non-JSON, or JSON-of-a-scalar/array.
+ * The object-only restriction matches how `json_schema` gates are
+ * authored — a scalar or array sneaking through would confuse both
+ * the schema and downstream readers who expect field lookups on
+ * `output`. Text-emitting tools and non-object JSON both fall
+ * through to the CliResult wrapper preserved by the caller.
+ */
+export declare function parseJsonOutput(stdout: string): Record<string, unknown> | null;
+//# sourceMappingURL=worker.d.ts.map

package/dist/worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../src/worker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,IAAI,EAAqB,MAAM,eAAe,CAAC;AAI7D,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAE9D,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,IAAI,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,WAAY,SAAQ,YAAY;IAMzC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAN1B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiC;gBAGvC,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,kBAAkB;IAKxC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAkB7B;;;;;;;;OAQG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAW5B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAQzB;YAEY,OAAO;CAmCtB;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAa9E"}

package/dist/worker.js

@@ -0,0 +1,129 @@
+import { EventEmitter } from 'node:events';
+import { runAgentCli } from './worker-cli.js';
+export { MODEL_ENV, WAKE_CONTEXT_ENV } from './worker-cli.js';
+/**
+ * Executes dispatched agent steps using their declared CLI.
+ *
+ * Shutdown contract (close): async and drain-aware. The caller may await
+ * close() to guarantee every dispatch this worker started before close
+ * was called has either completed its stepComplete journal write or
+ * thrown out through the worker's `error` event. Dispatches that arrive
+ * AFTER close begins are ignored. Idempotent.
+ *
+ * Not implemented: releasing the worker registration with the kernel.
+ * `sdk/src/protocol.ts` has no `workerRelease` verb today, so on close()
+ * the kernel keeps this workerId in its registry until its lease expires.
+ * When workerRelease lands, add a client call at the top of close()
+ * (before the drain) so the kernel stops routing dispatches during
+ * shutdown.
+ */
+export class AgentWorker extends EventEmitter {
+    client;
+    options;
+    attached = false;
+    closing = false;
+    inFlight = new Set();
+    constructor(client, options) {
+        super();
+        this.client = client;
+        this.options = options;
+    }
+    async attach() {
+        if (this.attached)
+            throw new Error('agent worker: already attached');
+        if (this.closing)
+            throw new Error('agent worker: cannot attach a closed worker (construct a new one)');
+        this.client.on('step.dispatch', this.onDispatch);
+        try {
+            await this.client.workerAttach(this.options.workerId, ['agent'], this.options.pins, this.options.capacity);
+            this.attached = true;
+        }
+        catch (error) {
+            this.client.off('step.dispatch', this.onDispatch);
+            throw error;
+        }
+    }
+    /**
+     * Async, drain-aware shutdown. Awaits every dispatch in-flight; ignores
+     * dispatches that arrive after close() begins. Idempotent.
+     *
+     * A prior synchronous close() did NOT drain, so a caller shutting
+     * mid-dispatch could silently lose an in-flight step's stepComplete
+     * journal write when the socket was immediately shut. This closes
+     * that hole.
+     */
+    async close() {
+        if (this.closing)
+            return;
+        this.closing = true;
+        this.client.off('step.dispatch', this.onDispatch);
+        const pending = Array.from(this.inFlight);
+        if (pending.length > 0) {
+            await Promise.allSettled(pending);
+        }
+        this.attached = false;
+    }
+    onDispatch = (dispatch) => {
+        if (this.closing)
+            return;
+        if (dispatch.step_type !== 'agent')
+            return;
+        const running = this.execute(dispatch).catch((error) => {
+            this.emit('error', error);
+        });
+        this.inFlight.add(running);
+        void running.finally(() => { this.inFlight.delete(running); });
+    };
+    async execute(dispatch) {
+        const spec = dispatch.spec;
+        const result = typeof spec.cli === 'string' && typeof spec.instruction === 'string'
+            ? await runAgentCli(spec.cli, spec.instruction, dispatch.wake_context, spec.model)
+            : { exit_code: null, stdout_tail: '', stderr_tail: 'agent step has no declared CLI' };
+        const completionReason = result.exit_code === 0 ? 'success' : 'worker_error';
+        // Output shape: if the CLI's stdout parses as JSON, promote THAT
+        // as the step's `output` value so `json_schema` verification
+        // validates the analysis payload, not a wrapper around stdout.
+        // On the JSON path the CliResult (exit_code / stdout_tail /
+        // stderr_tail) is DISCARDED from `output` — the schema author
+        // wrote a shape for the analysis, not for the process wrapper.
+        // Non-JSON stdout falls back to the wrapper so text-emitting
+        // tools still round-trip usefully.
+        //
+        // Implicit contract: CLIs signal errors via non-zero exit, not by
+        // emitting an error JSON with exit 0. `completionReason` is
+        // derived from exit code, so a CLI that exits 0 while emitting
+        // `{"error":...}` will report success with an error payload.
+        const output = parseJsonOutput(result.stdout_tail) ?? result;
+        await this.client.stepComplete(dispatch.run_id, dispatch.step_id, dispatch.attempt, dispatch.idempotency_key, completionReason, {
+            output,
+            started_pins: dispatch.pins,
+            end_pins: dispatch.pins,
+        });
+    }
+}
+/**
+ * Return an object-shaped JSON payload parsed from `stdout`, or
+ * `null` when stdout is empty, non-JSON, or JSON-of-a-scalar/array.
+ * The object-only restriction matches how `json_schema` gates are
+ * authored — a scalar or array sneaking through would confuse both
+ * the schema and downstream readers who expect field lookups on
+ * `output`. Text-emitting tools and non-object JSON both fall
+ * through to the CliResult wrapper preserved by the caller.
+ */
+export function parseJsonOutput(stdout) {
+    const trimmed = stdout.trim();
+    if (trimmed === '')
+        return null;
+    let parsed;
+    try {
+        parsed = JSON.parse(trimmed);
+    }
+    catch {
+        return null;
+    }
+    if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
+        return null;
+    }
+    return parsed;
+}
+//# sourceMappingURL=worker.js.map

package/dist/worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.js","sourceRoot":"","sources":["../src/worker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAI3C,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE9C,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAQ9D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,WAAY,SAAQ,YAAY;IAMxB;IACA;IANX,QAAQ,GAAG,KAAK,CAAC;IACjB,OAAO,GAAG,KAAK,CAAC;IACP,QAAQ,GAAuB,IAAI,GAAG,EAAE,CAAC;IAE1D,YACmB,MAAqB,EACrB,OAA2B;QAE5C,KAAK,EAAE,CAAC;QAHS,WAAM,GAAN,MAAM,CAAe;QACrB,YAAO,GAAP,OAAO,CAAoB;IAG9C,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACrE,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACvG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,eAAe,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAC5B,IAAI,CAAC,OAAO,CAAC,QAAQ,EACrB,CAAC,OAAO,CAAC,EACT,IAAI,CAAC,OAAO,CAAC,IAAI,EACjB,IAAI,CAAC,OAAO,CAAC,QAAQ,CACtB,CAAC;YACF,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YAClD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;IACxB,CAAC;IAEgB,UAAU,GAAG,CAAC,QAA2B,EAAQ,EAAE;QAClE,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,QAAQ,CAAC,SAAS,KAAK,OAAO;YAAE,OAAO;QAC3C,MAAM,OAAO,GAAkB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC7E,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3B,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,QAA2B;QAC/C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAgC,CAAC;QACvD,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;YACjF,CAAC,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC;YAClF,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,gCAAgC,EAAE,CAAC;QACxF,MAAM,gBAAgB,GAAG,MAAM,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC;QAE7E,iEAAiE;QACjE,6DAA6D;QAC7D,+DAA+D;QAC/D,4DAA4D;QAC5D,8DAA8D;QAC9D,+DAA+D;QAC/D,6DAA6D;QAC7D,mCAAmC;QACnC,EAAE;QACF,kEAAkE;QAClE,4DAA4D;QAC5D,+DAA+D;QAC/D,6DAA6D;QAC7D,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC;QAE7D,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAC5B,QAAQ,CAAC,MAAM,EACf,QAAQ,CAAC,OAAO,EAChB,QAAQ,CAAC,OAAO,EAChB,QAAQ,CAAC,eAAe,EACxB,gBAAgB,EAChB;YACE,MAAM;YACN,YAAY,EAAE,QAAQ,CAAC,IAAI;YAC3B,QAAQ,EAAE,QAAQ,CAAC,IAAI;SACxB,CACF,CAAC;IACJ,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,MAAiC,CAAC;AAC3C,CAAC"}

package/dist/wrapper-runtime.d.ts

@@ -0,0 +1,10 @@
+export interface WrapperIdentity {
+    executable: string;
+    fingerprint: string;
+}
+/** Build a wrapper environment from a closed list; ambient credentials never cross. */
+export declare function wrapperEnvironment(source: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+/** Resolve and fingerprint the exact executable that will enter the private protocol. */
+export declare function captureWrapperIdentity(cli: string, env: NodeJS.ProcessEnv): WrapperIdentity;
+export declare function sameWrapperIdentity(cli: string, env: NodeJS.ProcessEnv, expected: WrapperIdentity): boolean;
+//# sourceMappingURL=wrapper-runtime.d.ts.map

package/dist/wrapper-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrapper-runtime.d.ts","sourceRoot":"","sources":["../src/wrapper-runtime.ts"],"names":[],"mappings":"AAsBA,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,uFAAuF;AACvF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAO/E;AAED,yFAAyF;AACzF,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,CAAC,UAAU,GACrB,eAAe,CAgBjB;AAED,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,QAAQ,EAAE,eAAe,GACxB,OAAO,CAQT"}

package/dist/wrapper-runtime.js

@@ -0,0 +1,83 @@
+import { accessSync, constants, realpathSync, statSync } from 'node:fs';
+import { delimiter, isAbsolute, join, resolve } from 'node:path';
+const WRAPPER_ENV_ALLOWLIST = [
+    'PATH',
+    'HOME',
+    'TMPDIR',
+    'TMP',
+    'TEMP',
+    'SHELL',
+    'LANG',
+    'LC_ALL',
+    'LC_CTYPE',
+    'TZ',
+    'USER',
+    'LOGNAME',
+    'SystemRoot',
+    'ComSpec',
+    'PATHEXT',
+    'WINDIR',
+];
+/** Build a wrapper environment from a closed list; ambient credentials never cross. */
+export function wrapperEnvironment(source) {
+    const env = {};
+    for (const name of WRAPPER_ENV_ALLOWLIST) {
+        const value = source[name];
+        if (value !== undefined)
+            env[name] = value;
+    }
+    return env;
+}
+/** Resolve and fingerprint the exact executable that will enter the private protocol. */
+export function captureWrapperIdentity(cli, env) {
+    const executable = realpathSync(resolveWrapperExecutable(cli, env));
+    accessSync(executable, constants.X_OK);
+    const stat = statSync(executable, { bigint: true });
+    if (!stat.isFile())
+        throw new Error('resolved wrapper is not a regular file');
+    return {
+        executable,
+        fingerprint: [
+            stat.dev,
+            stat.ino,
+            stat.mode,
+            stat.size,
+            stat.mtimeNs,
+            stat.ctimeNs,
+        ].join(':'),
+    };
+}
+export function sameWrapperIdentity(cli, env, expected) {
+    try {
+        const current = captureWrapperIdentity(cli, env);
+        return current.executable === expected.executable
+            && current.fingerprint === expected.fingerprint;
+    }
+    catch {
+        return false;
+    }
+}
+function resolveWrapperExecutable(cli, env) {
+    if (isAbsolute(cli) || cli.includes('/') || cli.includes('\\'))
+        return resolve(cli);
+    const path = env.PATH;
+    if (path === undefined)
+        throw new Error('PATH is unavailable while resolving the wrapper');
+    const extensions = process.platform === 'win32'
+        ? (env.PATHEXT ?? '.EXE;.CMD;.BAT;.COM').split(';')
+        : [''];
+    for (const directory of path.split(delimiter)) {
+        for (const extension of extensions) {
+            const candidate = join(directory || '.', `${cli}${extension}`);
+            try {
+                accessSync(candidate, constants.X_OK);
+                return candidate;
+            }
+            catch {
+                // Continue through the deterministic PATH candidate list.
+            }
+        }
+    }
+    throw new Error(`wrapper executable ${JSON.stringify(cli)} was not found on PATH`);
+}
+//# sourceMappingURL=wrapper-runtime.js.map

package/dist/wrapper-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrapper-runtime.js","sourceRoot":"","sources":["../src/wrapper-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEjE,MAAM,qBAAqB,GAAG;IAC5B,MAAM;IACN,MAAM;IACN,QAAQ;IACR,KAAK;IACL,MAAM;IACN,OAAO;IACP,MAAM;IACN,QAAQ;IACR,UAAU;IACV,IAAI;IACJ,MAAM;IACN,SAAS;IACT,YAAY;IACZ,SAAS;IACT,SAAS;IACT,QAAQ;CACA,CAAC;AAOX,uFAAuF;AACvF,MAAM,UAAU,kBAAkB,CAAC,MAAyB;IAC1D,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,qBAAqB,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAC7C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,sBAAsB,CACpC,GAAW,EACX,GAAsB;IAEtB,MAAM,UAAU,GAAG,YAAY,CAAC,wBAAwB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACpE,UAAU,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC9E,OAAO;QACL,UAAU;QACV,WAAW,EAAE;YACX,IAAI,CAAC,GAAG;YACR,IAAI,CAAC,GAAG;YACR,IAAI,CAAC,IAAI;YACT,IAAI,CAAC,IAAI;YACT,IAAI,CAAC,OAAO;YACZ,IAAI,CAAC,OAAO;SACb,CAAC,IAAI,CAAC,GAAG,CAAC;KACZ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,GAAW,EACX,GAAsB,EACtB,QAAyB;IAEzB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,sBAAsB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACjD,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;eAC5C,OAAO,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,GAAW,EAAE,GAAsB;IACnE,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;IACpF,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IACtB,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAC3F,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO;QAC7C,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,qBAAqB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;QACnD,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACT,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9C,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,GAAG,EAAE,GAAG,GAAG,GAAG,SAAS,EAAE,CAAC,CAAC;YAC/D,IAAI,CAAC;gBACH,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;gBACtC,OAAO,SAAS,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBACP,0DAA0D;YAC5D,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;AACrF,CAAC"}

package/dist/wrapper-session.d.ts

@@ -0,0 +1,16 @@
+export interface WrapperSessionLimits {
+    handshakeTimeoutMs: number;
+    executionTimeoutMs: number;
+    maxOutputBytes: number;
+}
+export interface WrapperSessionResult {
+    exit_code: number | null;
+    stdout_tail: string;
+    stderr_tail: string;
+}
+/**
+ * Identify and execute a custom wrapper in one pinned process. No private
+ * request is written until its declared path still names the captured file.
+ */
+export declare function runWrapperSession(cli: string, instruction: string, wakeContext: unknown, model: string | undefined, env: NodeJS.ProcessEnv, overrides?: Partial<WrapperSessionLimits>): Promise<WrapperSessionResult>;
+//# sourceMappingURL=wrapper-session.d.ts.map

package/dist/wrapper-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrapper-session.d.ts","sourceRoot":"","sources":["../src/wrapper-session.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,oBAAoB;IACnC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAiBD;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,OAAO,EACpB,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,SAAS,GAAE,OAAO,CAAC,oBAAoB,CAAM,GAC5C,OAAO,CAAC,oBAAoB,CAAC,CAyB/B"}