@runtypelabs/sdk 1.9.2 → 1.10.0

package/dist/index.cjs

@@ -1966,7 +1966,7 @@ var TOOL_NAME_PATTERN = /^[A-Za-z][A-Za-z0-9_]{1,63}$/;
 var DEFAULT_MAX_CODE_LENGTH = 12e3;
 var DEFAULT_MAX_TIMEOUT_MS = 3e4;
 var DEFAULT_BLOCKED_CODE_PATTERNS = [
-  /\b(?:child_process|fs|net|tls|http|https|os)\b/i,
+  /\b(?:child_process|fs|net|tls|os)\b/i,
   /\b(?:process|Deno|Bun)\b/i,
   /\b(?:require|import)\s*\(/i,
   /\beval\s*\(/i,
@@ -2785,7 +2785,7 @@ var executionPhase = {
           `After that, you may update "${normalizedPlanPath}" with progress.`
         ].join(" ");
       }
-      if (normalizedPathArg && normalizedPathArg !== normalizedPlanPath) {
+      if (!ctx.state.isCreationTask && normalizedPathArg && normalizedPathArg !== normalizedPlanPath) {
         const allowedWriteTargets = new Set(
           [
             normalizedPlanPath,
@@ -2802,6 +2802,23 @@ var executionPhase = {
           ].join(" ");
         }
       }
+      if (ctx.state.isCreationTask && normalizedPathArg && normalizedPathArg !== normalizedPlanPath) {
+        const outputRoot = ctx.state.outputRoot ? ctx.state.outputRoot.trim().replace(/\\/g, "/").replace(/\/+/g, "/").replace(/\/$/, "") || void 0 : void 0;
+        if (!outputRoot) {
+          return [
+            `Blocked by marathon execution guard: creation tasks require outputRoot. Writes outside the plan are not allowed.`,
+            `Plan path: "${normalizedPlanPath}". Create files only under the configured output root.`
+          ].join(" ");
+        }
+        const rootPrefix = outputRoot + "/";
+        const isUnderRoot = normalizedPathArg === outputRoot || normalizedPathArg.startsWith(rootPrefix);
+        if (!isUnderRoot) {
+          return [
+            `Blocked by marathon execution guard: ${toolName} must target the plan or paths under outputRoot "${outputRoot}/".`,
+            `"${normalizedPathArg}" is outside the allowed output root.`
+          ].join(" ");
+        }
+      }
     }
     return void 0;
   },
@@ -2814,6 +2831,17 @@ var executionPhase = {
   },
   buildRecoveryMessage(state) {
     const recent = state.sessions.slice(-2);
+    if (recent.length >= 2 && recent.every(
+      (session) => session.verificationAttempted === true && session.wroteFiles !== true
+    )) {
+      return [
+        "Recovery instruction:",
+        "You have attempted verification in multiple sessions but none passed, and no files were written.",
+        "If the project lacks test/lint/build tooling, verification cannot succeed.",
+        "Focus on completing any remaining implementation. Signal TASK_COMPLETE when done.",
+        "Do not retry run_check unless you have a specific command likely to succeed."
+      ].join("\n");
+    }
     const normalizedPlanPath = typeof state.planPath === "string" && state.planPath.trim() ? normalizeCandidatePath(state.planPath) : void 0;
     const recentPlanOnlyLoop = Boolean(normalizedPlanPath) && recent.length === 2 && recent.every((session) => {
       const specificActionKeys = (session.actionKeys || []).map((actionKey) => actionKey.replace(/\\/g, "/")).filter((actionKey) => !actionKey.startsWith("server:"));
@@ -4786,6 +4814,7 @@ var _AgentsEndpoint = class _AgentsEndpoint {
       bestCandidateVerified: false,
       verificationAttempted: false,
       verificationPassed: false,
+      verificationBlocked: false,
       localToolLoopGuardTriggered: false
     };
   }
@@ -5007,6 +5036,7 @@ var _AgentsEndpoint = class _AgentsEndpoint {
       if (typeof parsed.success !== "boolean") return void 0;
       return {
         success: parsed.success,
+        ...typeof parsed.blocked === "boolean" ? { blocked: parsed.blocked } : {},
         ...typeof parsed.command === "string" ? { command: parsed.command } : {},
         ...typeof parsed.output === "string" ? { output: parsed.output } : {},
         ...typeof parsed.error === "string" ? { error: parsed.error } : {}
@@ -5234,9 +5264,11 @@ var _AgentsEndpoint = class _AgentsEndpoint {
       bestCandidateVerified: Boolean(resumeState.bestCandidateVerified),
       ...resumeState.verificationRequired !== void 0 ? { verificationRequired: resumeState.verificationRequired } : {},
       lastVerificationPassed: Boolean(resumeState.lastVerificationPassed),
+      ...resumeState.consecutiveBlockedVerificationSessions !== void 0 ? { consecutiveBlockedVerificationSessions: resumeState.consecutiveBlockedVerificationSessions } : {},
       ...resumeState.isCreationTask !== void 0 ? { isCreationTask: resumeState.isCreationTask } : {},
       ...resumeState.workflowVariant !== void 0 ? { workflowVariant: resumeState.workflowVariant } : {},
-      ...resumeState.workflowState !== void 0 ? { workflowState: resumeState.workflowState } : {}
+      ...resumeState.workflowState !== void 0 ? { workflowState: resumeState.workflowState } : {},
+      ...typeof resumeState.outputRoot === "string" && resumeState.outputRoot.trim() ? { outputRoot: resumeState.outputRoot.trim().replace(/\\/g, "/").replace(/\/+/g, "/") } : {}
     };
   }
   buildPhaseInstructions(state, workflow) {
@@ -5363,6 +5395,10 @@ var _AgentsEndpoint = class _AgentsEndpoint {
             } else if (state.workflowPhase === "execution") {
               trace.executionFileWritten = true;
               trace.verificationPassed = false;
+              if (!this.isMarathonArtifactPath(normalizedPathArg)) {
+                trace.bestCandidatePath = normalizedPathArg;
+                trace.bestCandidateReason = "written by agent during execution";
+              }
               if (normalizedBestCandidatePath && normalizedPathArg === normalizedBestCandidatePath) {
                 trace.bestCandidateWritten = true;
               }
@@ -5372,6 +5408,9 @@ var _AgentsEndpoint = class _AgentsEndpoint {
           if (verificationResult) {
             trace.verificationAttempted = true;
             trace.verificationPassed = verificationResult.success;
+            if (verificationResult.blocked) {
+              trace.verificationBlocked = true;
+            }
           }
           const summarizedResult = verificationResult ? [
             verificationResult.command || "verification",
@@ -5694,6 +5733,7 @@ var _AgentsEndpoint = class _AgentsEndpoint {
     };
     state.workflowVariant = classifiedVariant;
     state.isCreationTask = seededResumeState?.isCreationTask ?? state.workflowVariant === "create";
+    state.outputRoot = seededResumeState?.outputRoot ?? (state.isCreationTask ? "public/" : void 0);
     this.updateWorkflowPhase(state, this.createEmptyToolTrace(), workflow);
     let recordId;
     const localToolNames = options.localTools ? Object.keys(options.localTools) : void 0;
@@ -5865,6 +5905,7 @@ var _AgentsEndpoint = class _AgentsEndpoint {
         hadTextOutput: Boolean(sessionResult.result.trim()),
         verificationAttempted: sessionTrace.verificationAttempted,
         verificationPassed: sessionTrace.verificationPassed,
+        verificationBlocked: sessionTrace.verificationBlocked || void 0,
         bestCandidatePath: sessionTrace.bestCandidatePath || void 0,
         actionKeys: sessionTrace.actionKeys.slice(-5),
         completedAt: (/* @__PURE__ */ new Date()).toISOString()
@@ -5905,6 +5946,21 @@ var _AgentsEndpoint = class _AgentsEndpoint {
       }
       if (sessionTrace.verificationAttempted) {
         state.lastVerificationPassed = sessionTrace.verificationPassed;
+        if (sessionTrace.verificationBlocked && !sessionTrace.verificationPassed) {
+          state.consecutiveBlockedVerificationSessions = (state.consecutiveBlockedVerificationSessions || 0) + 1;
+        } else {
+          state.consecutiveBlockedVerificationSessions = 0;
+        }
+      }
+      if ((state.consecutiveBlockedVerificationSessions || 0) >= 2 && state.verificationRequired) {
+        state.verificationRequired = false;
+        state.lastVerificationPassed = true;
+        if (!state.planWritten) {
+          state.planWritten = true;
+        }
+        if (!state.bestCandidateVerified) {
+          state.bestCandidateVerified = true;
+        }
       }
       const modelKey = options.model || "default";
       if (!state.costByModel) state.costByModel = {};