@rudderhq/server 0.7.3 → 0.7.5

package/dist/services/runtime-kernel/assignment-run-guardrail.js

@@ -0,0 +1,204 @@
+import { execFile } from "node:child_process";
+import fs from "node:fs/promises";
+import path from "node:path";
+import { promisify } from "node:util";
+export const ASSIGNMENT_RUN_CONSECUTIVE_FAILURE_LIMIT = 3;
+export const ASSIGNMENT_RUN_TOTAL_FAILURE_LIMIT = 25;
+const execFileAsync = promisify(execFile);
+export function resolveProjectWorkingSetCwd(resources) {
+    const workingSet = resources.find((entry) => entry.role === "working_set"
+        && entry.resource?.kind === "directory"
+        && entry.resource.sourceType === "external"
+        && typeof entry.resource.locator === "string"
+        && path.isAbsolute(entry.resource.locator));
+    return workingSet?.resource?.locator?.trim() || null;
+}
+function compactFailureText(value) {
+    return value
+        .replace(/\x1b\[[0-9;]*m/g, "")
+        .replace(/\b[0-9a-f]{8}-[0-9a-f-]{27,}\b/gi, "<uuid>")
+        .replace(/\b\d{4}-\d{2}-\d{2}T\S+\b/g, "<timestamp>")
+        .replace(/\/[^\s:'\"]+/g, "<path>")
+        .replace(/\b\d+\b/g, "<n>")
+        .replace(/\s+/g, " ")
+        .trim()
+        .toLowerCase();
+}
+function commandIdentity(entry, toolUseId) {
+    if (!entry)
+        return `tool-use:${toolUseId}`;
+    return compactFailureText(JSON.stringify(entry.input)).slice(0, 500);
+}
+export function fingerprintToolFailure(entry, call) {
+    return `${entry.toolName ?? call?.name ?? "unknown"}:${commandIdentity(call, entry.toolUseId)}:${compactFailureText(entry.content).slice(0, 500)}`;
+}
+function inferRecoveryCommand(entry) {
+    const content = entry.content.toLowerCase();
+    if (content.includes("node_modules") || content.includes("cannot find module") || content.includes("module not found")) {
+        return "pnpm install --frozen-lockfile";
+    }
+    if (content.includes("unexpected store") || content.includes("virtual store") || content.includes("store-dir")) {
+        return "pnpm install --force";
+    }
+    return null;
+}
+export function createAssignmentRunFailureBudget() {
+    let failureCount = 0;
+    let lastFingerprint = null;
+    let consecutiveFailureCount = 0;
+    let processedEntryCount = 0;
+    let checkpoint = null;
+    const callsById = new Map();
+    return {
+        observe(entries) {
+            if (checkpoint)
+                return checkpoint;
+            const nextEntries = entries.slice(processedEntryCount);
+            processedEntryCount = entries.length;
+            for (const entry of nextEntries) {
+                if (entry.kind === "tool_call" && entry.toolUseId) {
+                    callsById.set(entry.toolUseId, entry);
+                    continue;
+                }
+                if (entry.kind !== "tool_result")
+                    continue;
+                if (!entry.isError) {
+                    lastFingerprint = null;
+                    consecutiveFailureCount = 0;
+                    continue;
+                }
+                failureCount += 1;
+                const fingerprint = fingerprintToolFailure(entry, callsById.get(entry.toolUseId));
+                consecutiveFailureCount = fingerprint === lastFingerprint ? consecutiveFailureCount + 1 : 1;
+                lastFingerprint = fingerprint;
+                const reason = consecutiveFailureCount >= ASSIGNMENT_RUN_CONSECUTIVE_FAILURE_LIMIT
+                    ? "repeated_failure"
+                    : failureCount >= ASSIGNMENT_RUN_TOTAL_FAILURE_LIMIT
+                        ? "total_failure_budget"
+                        : null;
+                if (reason) {
+                    checkpoint = {
+                        reason,
+                        failureCount,
+                        consecutiveFailureCount,
+                        fingerprint,
+                        toolName: entry.toolName ?? "unknown",
+                        unresolvedError: entry.content.slice(0, 2_000),
+                        nextRecoveryCommand: inferRecoveryCommand(entry),
+                    };
+                    return checkpoint;
+                }
+            }
+            return null;
+        },
+        snapshot() {
+            return { failureCount, consecutiveFailureCount, checkpoint };
+        },
+    };
+}
+async function pathExists(candidate) {
+    return fs.access(candidate).then(() => true, () => false);
+}
+async function readText(candidate) {
+    return fs.readFile(candidate, "utf8").catch(() => "");
+}
+function parseJsonObject(contents) {
+    try {
+        const parsed = JSON.parse(contents);
+        return parsed && typeof parsed === "object" && !Array.isArray(parsed)
+            ? parsed
+            : {};
+    }
+    catch {
+        return {};
+    }
+}
+function yamlScalar(contents, key) {
+    const match = contents.match(new RegExp(`^${key}:\\s*(.+?)\\s*$`, "m"));
+    return match?.[1]?.replace(/^['"]|['"]$/g, "").trim() || null;
+}
+async function runPreflightCommand(command, args, cwd) {
+    return execFileAsync(command, args, {
+        cwd,
+        timeout: 10_000,
+        maxBuffer: 512 * 1024,
+        env: { ...process.env, CI: "1" },
+    }).then(({ stdout }) => ({ ok: true, output: stdout.trim().slice(0, 500) }), (error) => ({
+        ok: false,
+        output: error instanceof Error ? error.message.slice(0, 500) : String(error).slice(0, 500),
+    }));
+}
+export async function inspectAssignmentRunWorkspace(input) {
+    const packageJsonPath = path.join(input.actualCwd, "package.json");
+    const pnpmLockPath = path.join(input.actualCwd, "pnpm-lock.yaml");
+    const virtualStorePath = path.join(input.actualCwd, "node_modules", ".pnpm");
+    const modulesManifestPath = path.join(input.actualCwd, "node_modules", ".modules.yaml");
+    const [cwdPresent, projectWorkingSetPresent, packageJsonPresent, pnpmLockPresent, nodeModulesPresent, pnpmVirtualStorePresent] = await Promise.all([
+        fs.stat(input.actualCwd).then((stat) => stat.isDirectory(), () => false),
+        fs.stat(input.projectWorkingSetCwd).then((stat) => stat.isDirectory(), () => false),
+        pathExists(packageJsonPath),
+        pathExists(pnpmLockPath),
+        pathExists(path.join(input.actualCwd, "node_modules")),
+        pathExists(virtualStorePath),
+    ]);
+    const packageJson = packageJsonPresent ? parseJsonObject(await readText(packageJsonPath)) : {};
+    const expectedPackageManager = typeof packageJson.packageManager === "string" ? packageJson.packageManager : null;
+    const modulesManifest = nodeModulesPresent ? await readText(modulesManifestPath) : "";
+    const installedPackageManager = yamlScalar(modulesManifest, "packageManager");
+    const configuredStoreDir = yamlScalar(modulesManifest, "storeDir");
+    const configuredVirtualStoreDir = yamlScalar(modulesManifest, "virtualStoreDir");
+    const nodeCommand = packageJsonPresent ? await runPreflightCommand("node", ["--version"], input.actualCwd) : null;
+    const pnpmCommand = pnpmLockPresent ? await runPreflightCommand("pnpm", ["--version"], input.actualCwd) : null;
+    const dependencyGraph = pnpmLockPresent && nodeModulesPresent && pnpmVirtualStorePresent
+        ? await runPreflightCommand("pnpm", ["list", "--depth", "-1", "--offline", "--json"], input.actualCwd)
+        : null;
+    const packageManagerMatches = !expectedPackageManager
+        || !installedPackageManager
+        || expectedPackageManager === installedPackageManager;
+    const storeDirPresent = !configuredStoreDir || await pathExists(path.isAbsolute(configuredStoreDir) ? configuredStoreDir : path.join(input.actualCwd, configuredStoreDir));
+    const virtualStoreMatches = !configuredVirtualStoreDir || configuredVirtualStoreDir === ".pnpm";
+    const ready = cwdPresent
+        && projectWorkingSetPresent
+        && (!packageJsonPresent || Boolean(nodeCommand?.ok))
+        && (!pnpmLockPresent || Boolean(pnpmCommand?.ok))
+        && (!packageJsonPresent || nodeModulesPresent)
+        && (!pnpmLockPresent || pnpmVirtualStorePresent)
+        && packageManagerMatches
+        && storeDirPresent
+        && virtualStoreMatches
+        && (!dependencyGraph || dependencyGraph.ok);
+    const recoveryCommand = ready
+        ? null
+        : pnpmLockPresent
+            ? (packageManagerMatches && storeDirPresent && virtualStoreMatches
+                ? "pnpm install --frozen-lockfile"
+                : "pnpm install --force")
+            : packageJsonPresent
+                ? "npm install"
+                : null;
+    return {
+        actualCwd: input.actualCwd,
+        projectWorkingSetCwd: input.projectWorkingSetCwd,
+        cwdPresent,
+        projectWorkingSetPresent,
+        cwdMatchesProjectWorkingSet: path.resolve(input.actualCwd) === path.resolve(input.projectWorkingSetCwd),
+        packageManager: pnpmLockPresent ? "pnpm" : packageJsonPresent ? "unknown" : "none",
+        packageJsonPresent,
+        pnpmLockPresent,
+        nodeModulesPresent,
+        pnpmVirtualStorePresent,
+        expectedPackageManager,
+        installedPackageManager,
+        configuredStoreDir,
+        configuredVirtualStoreDir,
+        packageManagerMatches,
+        storeDirPresent,
+        virtualStoreMatches,
+        nodeCommandAvailable: nodeCommand?.ok ?? null,
+        pnpmCommandAvailable: pnpmCommand?.ok ?? null,
+        dependencyGraphAvailable: dependencyGraph?.ok ?? null,
+        ready,
+        recoveryCommand,
+    };
+}
+//# sourceMappingURL=assignment-run-guardrail.js.map

package/dist/services/runtime-kernel/assignment-run-guardrail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assignment-run-guardrail.js","sourceRoot":"","sources":["../../../src/services/runtime-kernel/assignment-run-guardrail.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,CAAC,MAAM,wCAAwC,GAAG,CAAC,CAAC;AAC1D,MAAM,CAAC,MAAM,kCAAkC,GAAG,EAAE,CAAC;AAIrD,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAa1C,MAAM,UAAU,2BAA2B,CACzC,SAGE;IAEF,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC1C,KAAK,CAAC,IAAI,KAAK,aAAa;WACzB,KAAK,CAAC,QAAQ,EAAE,IAAI,KAAK,WAAW;WACpC,KAAK,CAAC,QAAQ,CAAC,UAAU,KAAK,UAAU;WACxC,OAAO,KAAK,CAAC,QAAQ,CAAC,OAAO,KAAK,QAAQ;WAC1C,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9C,OAAO,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;AACvD,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO,KAAK;SACT,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC;SAC9B,OAAO,CAAC,kCAAkC,EAAE,QAAQ,CAAC;SACrD,OAAO,CAAC,4BAA4B,EAAE,aAAa,CAAC;SACpD,OAAO,CAAC,eAAe,EAAE,QAAQ,CAAC;SAClC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC;SAC1B,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE;SACN,WAAW,EAAE,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CAAC,KAA2B,EAAE,SAAiB;IACrE,IAAI,CAAC,KAAK;QAAE,OAAO,YAAY,SAAS,EAAE,CAAC;IAC3C,OAAO,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAkB,EAAE,IAAe;IACxE,OAAO,GAAG,KAAK,CAAC,QAAQ,IAAI,IAAI,EAAE,IAAI,IAAI,SAAS,IAAI,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AACrJ,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAkB;IAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACvH,OAAO,gCAAgC,CAAC;IAC1C,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/G,OAAO,sBAAsB,CAAC;IAChC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,gCAAgC;IAC9C,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,eAAe,GAAkB,IAAI,CAAC;IAC1C,IAAI,uBAAuB,GAAG,CAAC,CAAC;IAChC,IAAI,mBAAmB,GAAG,CAAC,CAAC;IAC5B,IAAI,UAAU,GAA4C,IAAI,CAAC;IAC/D,MAAM,SAAS,GAAG,IAAI,GAAG,EAAoB,CAAC;IAE9C,OAAO;QACL,OAAO,CAAC,OAA0B;YAChC,IAAI,UAAU;gBAAE,OAAO,UAAU,CAAC;YAClC,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACvD,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC;YACrC,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;gBAChC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;oBAClD,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;oBACtC,SAAS;gBACX,CAAC;gBACD,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa;oBAAE,SAAS;gBAC3C,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;oBACnB,eAAe,GAAG,IAAI,CAAC;oBACvB,uBAAuB,GAAG,CAAC,CAAC;oBAC5B,SAAS;gBACX,CAAC;gBACD,YAAY,IAAI,CAAC,CAAC;gBAClB,MAAM,WAAW,GAAG,sBAAsB,CAAC,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;gBAClF,uBAAuB,GAAG,WAAW,KAAK,eAAe,CAAC,CAAC,CAAC,uBAAuB,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5F,eAAe,GAAG,WAAW,CAAC;gBAC9B,MAAM,MAAM,GAAG,uBAAuB,IAAI,wCAAwC;oBAChF,CAAC,CAAC,kBAAkB;oBACpB,CAAC,CAAC,YAAY,IAAI,kCAAkC;wBAClD,CAAC,CAAC,sBAAsB;wBACxB,CAAC,CAAC,IAAI,CAAC;gBACX,IAAI,MAAM,EAAE,CAAC;oBACX,UAAU,GAAG;wBACX,MAAM;wBACN,YAAY;wBACZ,uBAAuB;wBACvB,WAAW;wBACX,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,SAAS;wBACrC,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC;wBAC9C,mBAAmB,EAAE,oBAAoB,CAAC,KAAK,CAAC;qBACjD,CAAC;oBACF,OAAO,UAAU,CAAC;gBACpB,CAAC;YACH,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,QAAQ;YACN,OAAO,EAAE,YAAY,EAAE,uBAAuB,EAAE,UAAU,EAAE,CAAC;QAC/D,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,SAAiB;IACzC,OAAO,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,SAAiB;IACvC,OAAO,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB;IACvC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACpC,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACnE,CAAC,CAAC,MAAiC;YACnC,CAAC,CAAC,EAAE,CAAC;IACT,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB,EAAE,GAAW;IAC/C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,iBAAiB,EAAE,GAAG,CAAC,CAAC,CAAC;IACxE,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;AAChE,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,OAAe,EAAE,IAAc,EAAE,GAAW;IAC7E,OAAO,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE;QAClC,GAAG;QACH,OAAO,EAAE,MAAM;QACf,SAAS,EAAE,GAAG,GAAG,IAAI;QACrB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE;KACjC,CAAC,CAAC,IAAI,CACL,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,EACnE,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC;QACnB,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;KAC3F,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,KAGnD;IACC,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IACnE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IAClE,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;IAC7E,MAAM,mBAAmB,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC;IACxF,MAAM,CAAC,UAAU,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,eAAe,EAAE,kBAAkB,EAAE,uBAAuB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACjJ,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC;QACxE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC;QACnF,UAAU,CAAC,eAAe,CAAC;QAC3B,UAAU,CAAC,YAAY,CAAC;QACxB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QACtD,UAAU,CAAC,gBAAgB,CAAC;KAC7B,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,kBAAkB,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/F,MAAM,sBAAsB,GAAG,OAAO,WAAW,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC;IAClH,MAAM,eAAe,GAAG,kBAAkB,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,MAAM,uBAAuB,GAAG,UAAU,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC;IAC9E,MAAM,kBAAkB,GAAG,UAAU,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;IACnE,MAAM,yBAAyB,GAAG,UAAU,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;IACjF,MAAM,WAAW,GAAG,kBAAkB,CAAC,CAAC,CAAC,MAAM,mBAAmB,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClH,MAAM,WAAW,GAAG,eAAe,CAAC,CAAC,CAAC,MAAM,mBAAmB,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/G,MAAM,eAAe,GAAG,eAAe,IAAI,kBAAkB,IAAI,uBAAuB;QACtF,CAAC,CAAC,MAAM,mBAAmB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC;QACtG,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,qBAAqB,GAAG,CAAC,sBAAsB;WAChD,CAAC,uBAAuB;WACxB,sBAAsB,KAAK,uBAAuB,CAAC;IACxD,MAAM,eAAe,GAAG,CAAC,kBAAkB,IAAI,MAAM,UAAU,CAC7D,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAC1G,CAAC;IACF,MAAM,mBAAmB,GAAG,CAAC,yBAAyB,IAAI,yBAAyB,KAAK,OAAO,CAAC;IAChG,MAAM,KAAK,GAAG,UAAU;WACnB,wBAAwB;WACxB,CAAC,CAAC,kBAAkB,IAAI,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;WACjD,CAAC,CAAC,eAAe,IAAI,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;WAC9C,CAAC,CAAC,kBAAkB,IAAI,kBAAkB,CAAC;WAC3C,CAAC,CAAC,eAAe,IAAI,uBAAuB,CAAC;WAC7C,qBAAqB;WACrB,eAAe;WACf,mBAAmB;WACnB,CAAC,CAAC,eAAe,IAAI,eAAe,CAAC,EAAE,CAAC,CAAC;IAC9C,MAAM,eAAe,GAAG,KAAK;QAC3B,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,eAAe;YACf,CAAC,CAAC,CAAC,qBAAqB,IAAI,eAAe,IAAI,mBAAmB;gBAC9D,CAAC,CAAC,gCAAgC;gBAClC,CAAC,CAAC,sBAAsB,CAAC;YAC7B,CAAC,CAAC,kBAAkB;gBAClB,CAAC,CAAC,aAAa;gBACf,CAAC,CAAC,IAAI,CAAC;IACb,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;QAChD,UAAU;QACV,wBAAwB;QACxB,2BAA2B,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC;QACvG,cAAc,EAAE,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;QAClF,kBAAkB;QAClB,eAAe;QACf,kBAAkB;QAClB,uBAAuB;QACvB,sBAAsB;QACtB,uBAAuB;QACvB,kBAAkB;QAClB,yBAAyB;QACzB,qBAAqB;QACrB,eAAe;QACf,mBAAmB;QACnB,oBAAoB,EAAE,WAAW,EAAE,EAAE,IAAI,IAAI;QAC7C,oBAAoB,EAAE,WAAW,EAAE,EAAE,IAAI,IAAI;QAC7C,wBAAwB,EAAE,eAAe,EAAE,EAAE,IAAI,IAAI;QACrD,KAAK;QACL,eAAe;KAChB,CAAC;AACJ,CAAC"}

package/dist/services/runtime-kernel/assignment-run-guardrail.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=assignment-run-guardrail.test.d.ts.map

package/dist/services/runtime-kernel/assignment-run-guardrail.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assignment-run-guardrail.test.d.ts","sourceRoot":"","sources":["../../../src/services/runtime-kernel/assignment-run-guardrail.test.ts"],"names":[],"mappings":""}

package/dist/services/runtime-kernel/assignment-run-guardrail.test.js

@@ -0,0 +1,114 @@
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { afterEach, describe, expect, it } from "vitest";
+import { ASSIGNMENT_RUN_TOTAL_FAILURE_LIMIT, createAssignmentRunFailureBudget, fingerprintToolFailure, inspectAssignmentRunWorkspace, resolveProjectWorkingSetCwd, } from "./assignment-run-guardrail.js";
+const tempDirs = [];
+afterEach(async () => {
+    await Promise.all(tempDirs.splice(0).map((dir) => fs.rm(dir, { recursive: true, force: true })));
+});
+function failure(content, toolUseId = "tool-1", toolName = "exec_command") {
+    return {
+        kind: "tool_result",
+        ts: new Date().toISOString(),
+        toolUseId,
+        toolName,
+        content,
+        isError: true,
+    };
+}
+function call(command, toolUseId = "tool-1") {
+    return {
+        kind: "tool_call",
+        ts: new Date().toISOString(),
+        name: "exec_command",
+        toolUseId,
+        input: { cmd: command },
+    };
+}
+describe("assignment run guardrail", () => {
+    it("normalizes dynamic paths, timestamps, ids, and numbers in failure fingerprints", () => {
+        const first = failure("2026-08-13T01:02:03Z /tmp/run-123 failed with code 1");
+        const second = failure("2026-08-13T02:03:04Z /private/run-456 failed with code 2");
+        expect(fingerprintToolFailure(first, call("pnpm test", "tool-1"))).toBe(fingerprintToolFailure(second, call("pnpm test", "tool-2")));
+    });
+    it("checkpoints after the same failure fingerprint occurs three times", () => {
+        const budget = createAssignmentRunFailureBudget();
+        expect(budget.observe([call("pnpm test", "tool-1"), failure("Cannot find module /tmp/a", "tool-1")])).toBeNull();
+        expect(budget.observe([
+            call("pnpm test", "tool-1"),
+            failure("Cannot find module /tmp/a", "tool-1"),
+            call("pnpm test", "tool-2"),
+            failure("Cannot find module /tmp/b", "tool-2"),
+        ])).toBeNull();
+        expect(budget.observe([
+            call("pnpm test", "tool-1"),
+            failure("Cannot find module /tmp/a", "tool-1"),
+            call("pnpm test", "tool-2"),
+            failure("Cannot find module /tmp/b", "tool-2"),
+            call("pnpm test", "tool-3"),
+            failure("Cannot find module /tmp/c", "tool-3"),
+        ])).toMatchObject({
+            reason: "repeated_failure",
+            failureCount: 3,
+            consecutiveFailureCount: 3,
+            nextRecoveryCommand: "pnpm install --frozen-lockfile",
+        });
+    });
+    it("resets repeated failure streaks after a successful tool result", () => {
+        const budget = createAssignmentRunFailureBudget();
+        const entries = [
+            call("pnpm test", "tool-1"), failure("same error", "tool-1"),
+            call("pnpm test", "tool-ok"), { ...failure("ok", "tool-ok"), isError: false },
+            call("pnpm test", "tool-2"), failure("same error", "tool-2"),
+            call("pnpm test", "tool-3"), failure("same error", "tool-3"),
+        ];
+        expect(budget.observe(entries)).toBeNull();
+        expect(budget.snapshot()).toMatchObject({ consecutiveFailureCount: 2 });
+    });
+    it("does not combine identical errors from different commands", () => {
+        const budget = createAssignmentRunFailureBudget();
+        const entries = [
+            call("pnpm test", "tool-1"), failure("same error", "tool-1"),
+            call("pnpm typecheck", "tool-2"), failure("same error", "tool-2"),
+            call("pnpm test", "tool-3"), failure("same error", "tool-3"),
+        ];
+        expect(budget.observe(entries)).toBeNull();
+        expect(budget.snapshot()).toMatchObject({ consecutiveFailureCount: 1 });
+    });
+    it("checkpoints at the total failure budget when fingerprints vary", () => {
+        const budget = createAssignmentRunFailureBudget();
+        const entries = Array.from({ length: ASSIGNMENT_RUN_TOTAL_FAILURE_LIMIT }, (_, index) => [
+            call(`tool-${index}`, `tool-${index}`),
+            failure(`distinct failure marker-${String.fromCharCode(65 + index)} value`, `tool-${index}`, `tool-${index}`),
+        ]).flat();
+        expect(budget.observe(entries)).toMatchObject({
+            reason: "total_failure_budget",
+            failureCount: ASSIGNMENT_RUN_TOTAL_FAILURE_LIMIT,
+        });
+    });
+    it("reports workspace and package-manager readiness without mutating the repo", async () => {
+        const cwd = await fs.mkdtemp(path.join(os.tmpdir(), "assignment-preflight-"));
+        tempDirs.push(cwd);
+        await fs.writeFile(path.join(cwd, "package.json"), "{}", "utf8");
+        await fs.writeFile(path.join(cwd, "pnpm-lock.yaml"), "lockfileVersion: '9.0'", "utf8");
+        await expect(inspectAssignmentRunWorkspace({ actualCwd: cwd, projectWorkingSetCwd: cwd })).resolves.toMatchObject({
+            cwdMatchesProjectWorkingSet: true,
+            packageManager: "pnpm",
+            packageJsonPresent: true,
+            nodeModulesPresent: false,
+            recoveryCommand: "pnpm install --frozen-lockfile",
+        });
+    });
+    it("resolves only an external directory working set as the project repo root", () => {
+        expect(resolveProjectWorkingSetCwd([
+            { role: "reference", resource: { kind: "directory", sourceType: "external", locator: "/tmp/reference" } },
+            { role: "working_set", resource: { kind: "file", sourceType: "external", locator: "/tmp/readme.md" } },
+            { role: "working_set", resource: { kind: "directory", sourceType: "external", locator: "/tmp/repo" } },
+        ])).toBe("/tmp/repo");
+        expect(resolveProjectWorkingSetCwd([
+            { role: "working_set", resource: { kind: "directory", sourceType: "library", locator: "projects/rudder" } },
+        ])).toBeNull();
+    });
+});
+//# sourceMappingURL=assignment-run-guardrail.test.js.map

package/dist/services/runtime-kernel/assignment-run-guardrail.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assignment-run-guardrail.test.js","sourceRoot":"","sources":["../../../src/services/runtime-kernel/assignment-run-guardrail.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,EACL,kCAAkC,EAClC,gCAAgC,EAChC,sBAAsB,EACtB,6BAA6B,EAC7B,2BAA2B,GAC5B,MAAM,+BAA+B,CAAC;AAEvC,MAAM,QAAQ,GAAa,EAAE,CAAC;AAE9B,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACnG,CAAC,CAAC,CAAC;AAEH,SAAS,OAAO,CAAC,OAAe,EAAE,SAAS,GAAG,QAAQ,EAAE,QAAQ,GAAG,cAAc;IAC/E,OAAO;QACL,IAAI,EAAE,aAAsB;QAC5B,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC5B,SAAS;QACT,QAAQ;QACR,OAAO;QACP,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,OAAe,EAAE,SAAS,GAAG,QAAQ;IACjD,OAAO;QACL,IAAI,EAAE,WAAoB;QAC1B,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC5B,IAAI,EAAE,cAAc;QACpB,SAAS;QACT,KAAK,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE;KACxB,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,KAAK,GAAG,OAAO,CAAC,sDAAsD,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,OAAO,CAAC,0DAA0D,CAAC,CAAC;QACnF,MAAM,CAAC,sBAAsB,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CACrE,sBAAsB,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAC5D,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,MAAM,GAAG,gCAAgC,EAAE,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,2BAA2B,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACjH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;YACpB,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC;YAC3B,OAAO,CAAC,2BAA2B,EAAE,QAAQ,CAAC;YAC9C,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC;YAC3B,OAAO,CAAC,2BAA2B,EAAE,QAAQ,CAAC;SAC/C,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACf,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;YACpB,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC;YAC3B,OAAO,CAAC,2BAA2B,EAAE,QAAQ,CAAC;YAC9C,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC;YAC3B,OAAO,CAAC,2BAA2B,EAAE,QAAQ,CAAC;YAC9C,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC;YAC3B,OAAO,CAAC,2BAA2B,EAAE,QAAQ,CAAC;SAC/C,CAAC,CAAC,CAAC,aAAa,CAAC;YAChB,MAAM,EAAE,kBAAkB;YAC1B,YAAY,EAAE,CAAC;YACf,uBAAuB,EAAE,CAAC;YAC1B,mBAAmB,EAAE,gCAAgC;SACtD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,MAAM,GAAG,gCAAgC,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG;YACd,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC;YAC5D,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE;YAC7E,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC;YAC5D,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC;SAC7D,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,uBAAuB,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,MAAM,GAAG,gCAAgC,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG;YACd,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC;YAC5D,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC;YACjE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC;SAC7D,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,uBAAuB,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,MAAM,GAAG,gCAAgC,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,kCAAkC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;YACvF,IAAI,CAAC,QAAQ,KAAK,EAAE,EAAE,QAAQ,KAAK,EAAE,CAAC;YACtC,OAAO,CAAC,2BAA2B,MAAM,CAAC,YAAY,CAAC,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,QAAQ,KAAK,EAAE,EAAE,QAAQ,KAAK,EAAE,CAAC;SAC9G,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC;YAC5C,MAAM,EAAE,sBAAsB;YAC9B,YAAY,EAAE,kCAAkC;SACjD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAC;QAC9E,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACjE,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,wBAAwB,EAAE,MAAM,CAAC,CAAC;QAEvF,MAAM,MAAM,CAAC,6BAA6B,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC;YAChH,2BAA2B,EAAE,IAAI;YACjC,cAAc,EAAE,MAAM;YACtB,kBAAkB,EAAE,IAAI;YACxB,kBAAkB,EAAE,KAAK;YACzB,eAAe,EAAE,gCAAgC;SAClD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,MAAM,CAAC,2BAA2B,CAAC;YACjC,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAAE;YACzG,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAAE;YACtG,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE;SACvG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACtB,MAAM,CAAC,2BAA2B,CAAC;YACjC,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE;SAC5G,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACjB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/services/runtime-kernel/heartbeat.d.ts

@@ -1,9 +1,12 @@
 import type { Db } from "@rudderhq/db";
+import { heartbeatRuns } from "@rudderhq/db";
 import type { AgentSkillAnalytics, HeartbeatRun } from "@rudderhq/shared";
 import { type BudgetEnforcementScope } from "../budgets.js";
 export { prioritizeProjectWorkspaceCandidatesForRun, type ResolvedWorkspaceForRun } from "../agent-run-context.js";
+import type { WakeupOptions } from "./heartbeat.core.js";
 export declare function heartbeatService(db: Db, testHooks?: {
     afterIssuePromotionCommitted?: (outcome: unknown) => Promise<void> | void;
+    beforeRunClaim?: (run: typeof heartbeatRuns.$inferSelect) => Promise<void> | void;
     beforeRunExecutionLeaseRenewal?: (input: {
         runId: string;
         ownerToken: string;
@@ -756,6 +759,15 @@ export declare function heartbeatService(db: Db, testHooks?: {
         retryOfRunId: string | null;
         processLossRetryCount: number;
     }[]>;
+    resumePendingWakeupRequests: (opts?: {
+        orgId?: string;
+        startImmediately?: boolean;
+    }) => Promise<{
+        checked: number;
+        resumed: number;
+        deferred: number;
+        terminalized: number;
+    }>;
     resumeQueuedRuns: () => Promise<void>;
     tickTimers: (now?: Date) => Promise<{
         checked: number;

package/dist/services/runtime-kernel/heartbeat.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"heartbeat.d.ts","sourceRoot":"","sources":["../../../src/services/runtime-kernel/heartbeat.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AAWvC,OAAO,KAAK,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAwB1E,OAAO,EAAiB,KAAK,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAa3E,OAAO,EAAE,0CAA0C,EAAE,KAAK,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AA6GnH,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,EAAE,EACN,SAAS,CAAC,EAAE;IACV,4BAA4B,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC1E,8BAA8B,CAAC,EAAE,CAAC,KAAK,EAAE;QACvC,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC;KACpB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC5B;sBAu4DyB,MAAM;;;;kBAiCrB,MAAM,YACH,MAAM,UACR,MAAM,YACL;QAAE,SAAS,CAAC,EAAE,IAAI,CAAC;QAAC,OAAO,CAAC,EAAE,IAAI,CAAA;KAAE;sCA4EpC,MAAM,SACR;QACL,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,GAAG,CAAC,EAAE,IAAI,CAAC;QACX,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,qBAAqB,CAAC,EAAE,MAAM,CAAC;KAChC,KACA,OAAO,CAAC,mBAAmB,CAAC;2CAOtB,MAAM,SACN;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,IAAI,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,KAC/E,OAAO,CAAC,mBAAmB,CAAC;oBA/+DJ,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+BA4/DA,MAAM;;;;;;;;;;;;;;;;;;gCAmBL,MAAM;;;;;;;;;;;;;mCAWH,MAAM,SAAS;QAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE;;;;;;;;;;;;;;;;;;;wBAmC3D,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBAOH,MAAM,SAAS;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE;;;;;;;;;sBA+BnE,MAAM,WACP,OAAO,GAAG,YAAY,GAAG,QAAQ,GAAG,WAAW,GAAG,YAAY,oBACrD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,kBACzB,QAAQ,GAAG,MAAM,GAAG,UAAU,GAAG,QAAQ,UAChD;QAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE;qCAjvEqoC,aAAc;;;;;;4BA4R1sC,CAAC,EAAC,aAAc;0BACI,CAAC;WAC3C,CAAC;;+BAsjB0C,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;8BAgwBb;QAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,IAAI,CAAC;QAAC,cAAc,CAAC,EAAE,IAAI,CAAA;KAAE;;;;8BAIhE;QAAE,eAAe,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,IAAI,CAAC;QAAC,cAAc,CAAC,EAAE,IAAI,CAAA;KAAE;;;;8BAI/D;QAAE,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,IAAI,CAAC;QAAC,cAAc,CAAC,EAAE,IAAI,CAAA;KAAE;;;;0CAoThD,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBA+ZpC,MAAM;oCAEO,MAAM;;oCAIA,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkB/C"}
+{"version":3,"file":"heartbeat.d.ts","sourceRoot":"","sources":["../../../src/services/runtime-kernel/heartbeat.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAOL,aAAa,EAGd,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAwB1E,OAAO,EAAiB,KAAK,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAa3E,OAAO,EAAE,0CAA0C,EAAE,KAAK,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAEnH,OAAO,KAAK,EAA0C,aAAa,EAAE,MAAM,qBAAqB,CAAC;AA2GjG,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,EAAE,EACN,SAAS,CAAC,EAAE;IACV,4BAA4B,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC1E,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,aAAa,CAAC,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAClF,8BAA8B,CAAC,EAAE,CAAC,KAAK,EAAE;QACvC,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC;KACpB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC5B;sBAo/DyB,MAAM;;;;kBAiCrB,MAAM,YACH,MAAM,UACR,MAAM,YACL;QAAE,SAAS,CAAC,EAAE,IAAI,CAAC;QAAC,OAAO,CAAC,EAAE,IAAI,CAAA;KAAE;sCA4EpC,MAAM,SACR;QACL,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,GAAG,CAAC,EAAE,IAAI,CAAC;QACX,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,qBAAqB,CAAC,EAAE,MAAM,CAAC;KAChC,KACA,OAAO,CAAC,mBAAmB,CAAC;2CAOtB,MAAM,SACN;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,IAAI,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,KAC/E,OAAO,CAAC,mBAAmB,CAAC;oBA5lEJ,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+BAymEA,MAAM;;;;;;;;;;;;;;;;;;gCAmBL,MAAM;;;;;;;;;;;;;mCAWH,MAAM,SAAS;QAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE;;;;;;;;;;;;;;;;;;;wBAmC3D,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBAOH,MAAM,SAAS;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE;;;;;;;;;sBA+BnE,MAAM,WACP,OAAO,GAAG,YAAY,GAAG,QAAQ,GAAG,WAAW,GAAG,YAAY,oBACrD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,kBACzB,QAAQ,GAAG,MAAM,GAAG,UAAU,GAAG,QAAQ,UAChD;QAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE;;;;;;;4BApkEtE,CAAC;0BAC6B,CAAC;WACjC,CAAA;;+BAwjBsC,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;8BAoyBb;QAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,IAAI,CAAC;QAAC,cAAc,CAAC,EAAE,IAAI,CAAA;KAAE;;;;8BAIhE;QAAE,eAAe,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,IAAI,CAAC;QAAC,cAAc,CAAC,EAAE,IAAI,CAAA;KAAE;;;;8BAI/D;QAAE,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,IAAI,CAAC;QAAC,cAAc,CAAC,EAAE,IAAI,CAAA;KAAE;;;;0CAuThD,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yCAwGR;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,gBAAgB,CAAC,EAAE,OAAO,CAAA;KAAE;;;;;;;;;;;;uBA8X1E,MAAM;oCAEO,MAAM;;oCAIA,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkB/C"}

package/dist/services/runtime-kernel/heartbeat.execute.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"heartbeat.execute.d.ts","sourceRoot":"","sources":["../../../src/services/runtime-kernel/heartbeat.execute.ts"],"names":[],"mappings":"AAyDA,OAAO,EAAE,0CAA0C,EAAE,KAAK,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAsCnH,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,GAAG;wBA2CxB,MAAM,SAAS;QAAE,iBAAiB,CAAC,EAAE,OAAO,CAAA;KAAE;EAuvChF"}
+{"version":3,"file":"heartbeat.execute.d.ts","sourceRoot":"","sources":["../../../src/services/runtime-kernel/heartbeat.execute.ts"],"names":[],"mappings":"AAiEA,OAAO,EAAE,0CAA0C,EAAE,KAAK,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAsCnH,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,GAAG;wBA2CxB,MAAM,SAAS;QAAE,iBAAiB,CAAC,EAAE,OAAO,CAAA;KAAE;EA83ChF"}

package/dist/services/runtime-kernel/heartbeat.execute.js

@@ -1,4 +1,4 @@
-import { heartbeatRuns, issues, projects } from "@rudderhq/db";
+import { goals, heartbeatRuns, issues, projects } from "@rudderhq/db";
 import { resolveAgentRunScene, } from "@rudderhq/shared";
 import { and, eq, sql } from "drizzle-orm";
 import { createLocalAgentJwt } from "../../agent-auth-jwt.js";
@@ -11,7 +11,9 @@ import { buildExecutionWorkspaceAdapterConfig, issueExecutionWorkspaceModeForPer
 import { summarizeHeartbeatRunResultJson } from "../heartbeat-run-summary.js";
 import { publishLiveEvent } from "../live-events.js";
 import { isManagedWorkspaceConfigurationError, isWorkspacePermissionPreflightError, preflightManagedAgentWorkspace, } from "../managed-workspace-preflight.js";
+import { listProjectResourceAttachments } from "../resource-catalog.js";
 import { buildWorkspaceReadyComment, cleanupExecutionWorkspaceArtifacts, ensureRuntimeServicesForRun, persistAdapterManagedRuntimeServices, realizeExecutionWorkspace, releaseRuntimeServicesForRun } from "../workspace-runtime.js";
+import { createAssignmentRunFailureBudget, inspectAssignmentRunWorkspace, resolveProjectWorkingSetCwd, } from "./assignment-run-guardrail.js";
 import { executeAdapterWithModelFallbacks } from "./model-fallback.js";
 export { prioritizeProjectWorkspaceCandidatesForRun } from "../agent-run-context.js";
 import * as heartbeatCore from "./heartbeat.core.js";
@@ -196,6 +198,12 @@ export function createHeartbeatExecuteHandlers(context) {
             await ensureRuntimeState(agent);
             const context = parseObject(run.contextSnapshot);
             delete context.rudderGitIdentity;
+            const assignmentContinuationAttempt = Math.max(0, Math.floor(Number(context.assignmentGuardrailContinuationAttempt) || 0));
+            const assignmentGuardrailEnabled = run.invocationSource === "assignment"
+                || context.wakeSource === "assignment"
+                || assignmentContinuationAttempt > 0;
+            const assignmentFailureBudget = assignmentGuardrailEnabled ? createAssignmentRunFailureBudget() : null;
+            let assignmentGuardrailCheckpoint = null;
             const taskKey = deriveTaskKey(context, null);
             const sessionCodec = getAgentRuntimeSessionCodec(agent.agentRuntimeType);
             const issueId = readNonEmptyString(context.issueId);
@@ -218,9 +226,25 @@ export function createHeartbeatExecuteHandlers(context) {
                     .where(and(eq(issues.id, issueId), eq(issues.orgId, agent.orgId)))
                     .then((rows) => rows[0] ?? null)
                 : null;
+            const goalId = readNonEmptyString(context.goalId);
+            const goalContext = goalId
+                ? await db
+                    .select({
+                    id: goals.id,
+                    ownerAgentId: goals.ownerAgentId,
+                    ownerAgentRuntimeOverrides: goals.ownerAgentRuntimeOverrides,
+                })
+                    .from(goals)
+                    .where(and(eq(goals.id, goalId), eq(goals.orgId, agent.orgId)))
+                    .then((rows) => rows[0] ?? null)
+                : null;
             const issueAssigneeOverrides = issueContext && issueContext.assigneeAgentId === agent.id
                 ? parseIssueAssigneeAgentRuntimeOverrides(issueContext.assigneeAgentRuntimeOverrides)
                 : null;
+            const goalOwnerOverrides = goalContext && goalContext.ownerAgentId === agent.id
+                ? parseIssueAssigneeAgentRuntimeOverrides(goalContext.ownerAgentRuntimeOverrides)
+                : null;
+            const runtimeOverrides = issueContext ? issueAssigneeOverrides : goalOwnerOverrides;
             const issueExecutionWorkspaceSettings = parseIssueExecutionWorkspaceSettings(issueContext?.executionWorkspaceSettings);
             const contextProjectId = readNonEmptyString(context.projectId);
             const executionProjectId = issueContext?.projectId ?? contextProjectId;
@@ -272,18 +296,38 @@ export function createHeartbeatExecuteHandlers(context) {
             const executionWorkspaceMode = resolveExecutionWorkspaceMode({
                 projectPolicy: projectExecutionWorkspacePolicy,
                 issueSettings: issueExecutionWorkspaceSettings,
-                legacyUseProjectWorkspace: issueAssigneeOverrides?.useProjectWorkspace ?? null,
+                legacyUseProjectWorkspace: runtimeOverrides?.useProjectWorkspace ?? null,
             });
-            const resolvedWorkspace = await runContextSvc.resolveWorkspaceForRun(agent, context, previousSessionParams, { useProjectWorkspace: executionWorkspaceMode !== "agent_default" });
+            let resolvedWorkspace = await runContextSvc.resolveWorkspaceForRun(agent, context, previousSessionParams, { useProjectWorkspace: executionWorkspaceMode !== "agent_default" });
+            let configuredProjectWorkingSetCwd = null;
+            if (assignmentGuardrailEnabled && executionProjectId) {
+                const projectResources = await listProjectResourceAttachments(db, agent.orgId, executionProjectId);
+                const projectWorkingSetCwd = resolveProjectWorkingSetCwd(projectResources);
+                configuredProjectWorkingSetCwd = projectWorkingSetCwd;
+                if (projectWorkingSetCwd) {
+                    const workingSetAvailable = await inspectAssignmentRunWorkspace({
+                        actualCwd: projectWorkingSetCwd,
+                        projectWorkingSetCwd,
+                    }).then((result) => result.cwdPresent);
+                    if (workingSetAvailable) {
+                        resolvedWorkspace = {
+                            ...resolvedWorkspace,
+                            cwd: projectWorkingSetCwd,
+                            source: "project_primary",
+                            projectId: executionProjectId,
+                        };
+                    }
+                }
+            }
             const workspaceManagedConfig = buildExecutionWorkspaceAdapterConfig({
                 agentConfig: config,
                 projectPolicy: projectExecutionWorkspacePolicy,
                 issueSettings: issueExecutionWorkspaceSettings,
                 mode: executionWorkspaceMode,
-                legacyUseProjectWorkspace: issueAssigneeOverrides?.useProjectWorkspace ?? null,
+                legacyUseProjectWorkspace: runtimeOverrides?.useProjectWorkspace ?? null,
             });
-            const mergedConfig = issueAssigneeOverrides?.agentRuntimeConfig
-                ? { ...workspaceManagedConfig, ...issueAssigneeOverrides.agentRuntimeConfig }
+            const mergedConfig = runtimeOverrides?.agentRuntimeConfig
+                ? { ...workspaceManagedConfig, ...runtimeOverrides.agentRuntimeConfig }
                 : workspaceManagedConfig;
             const { resolvedConfig, runtimeConfig, runtimeSkillEntries, secretKeys } = await runContextSvc.prepareRuntimeConfig({
                 scene: "heartbeat",
@@ -600,6 +644,26 @@ export function createHeartbeatExecuteHandlers(context) {
                     level: "info",
                     message: "run started",
                 });
+                if (assignmentGuardrailEnabled) {
+                    const workspacePreflight = await inspectAssignmentRunWorkspace({
+                        actualCwd: executionWorkspace.cwd,
+                        projectWorkingSetCwd: configuredProjectWorkingSetCwd ?? resolvedWorkspace.cwd,
+                    });
+                    await appendRunEvent(currentRun, {
+                        eventType: "runtime.assignment_preflight",
+                        stream: "system",
+                        level: workspacePreflight.cwdMatchesProjectWorkingSet ? "info" : "warn",
+                        message: workspacePreflight.cwdMatchesProjectWorkingSet
+                            ? "assignment run workspace preflight passed"
+                            : "assignment run workspace differs from project working set",
+                        payload: workspacePreflight,
+                    });
+                    if (!workspacePreflight.ready) {
+                        throw new Error(workspacePreflight.recoveryCommand
+                            ? `Assignment startup preflight failed in ${workspacePreflight.actualCwd}. Run this recovery command once before retrying: ${workspacePreflight.recoveryCommand}`
+                            : `Assignment project working set is not available: ${workspacePreflight.projectWorkingSetCwd}. Restore or remount that directory before retrying.`);
+                    }
+                }
                 handle = await runLogStore.begin({
                     orgId: run.orgId,
                     agentId: run.agentId,
@@ -661,6 +725,28 @@ export function createHeartbeatExecuteHandlers(context) {
                             parser: stdoutTranscriptParser,
                             kind: "stdout",
                         });
+                        const checkpoint = assignmentFailureBudget?.observe(executionTranscript) ?? null;
+                        if (checkpoint && !assignmentGuardrailCheckpoint) {
+                            const completedWorkSummary = [...executionTranscript]
+                                .reverse()
+                                .find((entry) => entry.kind === "assistant" && entry.text.trim())?.text
+                                .trim()
+                                .slice(0, 2_000)
+                                ?? "No reliable completed-work summary was emitted before the guardrail stopped this run.";
+                            assignmentGuardrailCheckpoint = { ...checkpoint, completedWorkSummary };
+                            const continuationRequired = assignmentContinuationAttempt < 1;
+                            await appendRunEvent(currentRun, {
+                                eventType: "runtime.assignment_guardrail",
+                                stream: "system",
+                                level: "warn",
+                                message: "assignment run failure budget reached; checkpoint requested",
+                                payload: {
+                                    ...assignmentGuardrailCheckpoint,
+                                    continuationRequired,
+                                },
+                            });
+                            executionAbortController.abort("assignment_run_failure_budget");
+                        }
                         return;
                     }
                     stderrTranscriptBuffer = appendTranscriptEntriesFromChunk({
@@ -783,7 +869,10 @@ export function createHeartbeatExecuteHandlers(context) {
                     runId: run.id,
                     agent,
                     runtime: runtimeForAdapter,
-                    config: runtimeConfig,
+                    config: {
+                        ...runtimeConfig,
+                        cwd: executionWorkspace.cwd,
+                    },
                     context,
                     onLog,
                     onMeta: onAdapterMeta,
@@ -801,6 +890,15 @@ export function createHeartbeatExecuteHandlers(context) {
                         stdoutTranscriptParser = attemptAdapter.parseStdoutLine ?? null;
                     },
                 });
+                if (assignmentGuardrailCheckpoint) {
+                    adapterResult.errorMessage = "Assignment run stopped after reaching its tool failure budget";
+                    adapterResult.errorCode = "assignment_run_failure_budget";
+                    adapterResult.exitCode = adapterResult.exitCode ?? 1;
+                    adapterResult.resultJson = {
+                        ...(adapterResult.resultJson ?? {}),
+                        assignmentGuardrailCheckpoint,
+                    };
+                }
                 const adapterManagedRuntimeServices = adapterResult.runtimeServices
                     ? await persistAdapterManagedRuntimeServices({
                         db,
@@ -1065,6 +1163,39 @@ export function createHeartbeatExecuteHandlers(context) {
                     if (ownsTerminalState || finalizedRun.terminalEffectsPending) {
                         shouldCompleteTerminalEffects = true;
                     }
+                    if (ownsTerminalState && assignmentGuardrailCheckpoint) {
+                        const continuationRequired = assignmentContinuationAttempt < 1;
+                        await appendRunEvent(finalizedRun, {
+                            eventType: "runtime.assignment_checkpoint",
+                            stream: "system",
+                            level: "warn",
+                            message: "assignment run checkpoint created",
+                            payload: {
+                                completed: assignmentGuardrailCheckpoint.completedWorkSummary,
+                                unresolvedError: assignmentGuardrailCheckpoint.unresolvedError,
+                                nextRecoveryCommand: assignmentGuardrailCheckpoint.nextRecoveryCommand,
+                                continuationRequired,
+                                failureCount: assignmentGuardrailCheckpoint.failureCount,
+                                fingerprint: assignmentGuardrailCheckpoint.fingerprint,
+                            },
+                        });
+                        if (continuationRequired) {
+                            await enqueueRecoveryRun(finalizedRun, agent, {
+                                recoveryTrigger: "automatic",
+                                source: "automation",
+                                triggerDetail: "system",
+                                wakeReason: "assignment_failure_budget_continuation",
+                                requestedByActorType: "system",
+                                requestedByActorId: null,
+                                contextPatch: {
+                                    assignmentGuardrailContinuationAttempt: assignmentContinuationAttempt + 1,
+                                    assignmentGuardrailCheckpoint,
+                                },
+                                startImmediately: false,
+                                now: new Date(),
+                            });
+                        }
+                    }
                 }
             }
             catch (err) {