@sandagent/daemon 0.9.8 → 0.9.9-beta.0

package/dist/coding-run-env.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Merge `POST /api/coding/run` body `env` into the daemon process environment.
+ * Kept in-package so `@sandagent/daemon` does not depend on `@sandagent/manager`.
+ * Only string values and valid env-style keys are accepted.
+ */
+/**
+ * Normalize `body.env` from JSON (string keys and string values only).
+ */
+export declare function sanitizeCodingRunBodyEnv(parsed: unknown): Record<string, string> | undefined;
+export interface CodingRunBodyWithEnv {
+    env?: unknown;
+}
+/**
+ * Merge daemon `process.env` with optional inline `env` from the request JSON.
+ */
+export declare function mergeCodingRunProcessEnv(daemonEnv: Record<string, string>, body: CodingRunBodyWithEnv): Record<string, string>;
+//# sourceMappingURL=coding-run-env.d.ts.map

package/dist/coding-run-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coding-run-env.d.ts","sourceRoot":"","sources":["../src/coding-run-env.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,OAAO,GACd,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAUpC;AAED,MAAM,WAAW,oBAAoB;IACnC,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACjC,IAAI,EAAE,oBAAoB,GACzB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAKxB"}

package/dist/index.js

@@ -206788,6 +206788,28 @@ var DaemonRouter = class {
 import * as http3 from "node:http";
 import { URL as URL2 } from "node:url";
 
+// src/coding-run-env.ts
+function isValidEnvKey(key) {
+  return /^[A-Za-z_][A-Za-z0-9_]*$/.test(key);
+}
+function sanitizeCodingRunBodyEnv(parsed) {
+  if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+    return void 0;
+  }
+  const out = {};
+  for (const [k2, v2] of Object.entries(parsed)) {
+    if (!isValidEnvKey(k2)) continue;
+    if (typeof v2 === "string") out[k2] = v2;
+  }
+  return Object.keys(out).length > 0 ? out : void 0;
+}
+function mergeCodingRunProcessEnv(daemonEnv, body) {
+  let merged = { ...daemonEnv };
+  const inline2 = sanitizeCodingRunBodyEnv(body.env);
+  if (inline2) merged = { ...merged, ...inline2 };
+  return merged;
+}
+
 // src/multipart.ts
 function parseMultipart(contentType, body) {
   const match2 = contentType.match(/boundary=(?:"([^"]+)"|([^\s;]+))/);
@@ -262142,7 +262164,7 @@ function createPiRunner(options2 = {}) {
   if (model == null) {
     const baseUrlEnvKey = `${provider.toUpperCase().replace(/-/g, "_")}_BASE_URL`;
     const apiKeyEnvKey = `${provider.toUpperCase().replace(/-/g, "_")}_API_KEY`;
-    const baseUrl = process.env[baseUrlEnvKey] ?? process.env.OPENAI_BASE_URL;
+    const baseUrl = getEnvValue(options2.env, baseUrlEnvKey) ?? getEnvValue(options2.env, "OPENAI_BASE_URL");
     if (!baseUrl) {
       throw new Error(`Pi runner: model "${modelSpec}" not found in built-in catalog. Set ${baseUrlEnvKey} (or OPENAI_BASE_URL) to auto-register it.`);
     }
@@ -262458,7 +262480,16 @@ async function sandagentRun(req, res, env2) {
     }
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    res.write(`${JSON.stringify({ error: msg })}
+    res.write(`data: ${JSON.stringify({ type: "error", errorText: msg })}
+
+`);
+    res.write(
+      `data: ${JSON.stringify({ type: "finish", finishReason: "error" })}
+
+`
+    );
+    res.write(`data: [DONE]
+
 `);
   } finally {
     res.end();
@@ -262483,10 +262514,11 @@ function createDaemon(config) {
       const pathname = url.pathname;
       if (method === "POST" && pathname === "/api/coding/run") {
         const body2 = safeJsonParse(await readBody(req));
+        const mergedEnv = mergeCodingRunProcessEnv(env2, body2);
         return sandagentRun(
           body2,
           res,
-          env2
+          mergedEnv
         );
       }
       if (method === "POST" && pathname === "/api/fs/upload") {

package/dist/nextjs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"nextjs.d.ts","sourceRoot":"","sources":["../src/nextjs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAQH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,IASzD,KAAK,OAAO,KAAG,OAAO,CAAC,QAAQ,CAAC,CAkD/C"}
+{"version":3,"file":"nextjs.d.ts","sourceRoot":"","sources":["../src/nextjs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AASH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,IASzD,KAAK,OAAO,KAAG,OAAO,CAAC,QAAQ,CAAC,CAmD/C"}

package/dist/nextjs.js

@@ -206415,6 +206415,28 @@ var require_lib4 = __commonJS({
   }
 });
 
+// src/coding-run-env.ts
+function isValidEnvKey(key) {
+  return /^[A-Za-z_][A-Za-z0-9_]*$/.test(key);
+}
+function sanitizeCodingRunBodyEnv(parsed) {
+  if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+    return void 0;
+  }
+  const out = {};
+  for (const [k2, v2] of Object.entries(parsed)) {
+    if (!isValidEnvKey(k2)) continue;
+    if (typeof v2 === "string") out[k2] = v2;
+  }
+  return Object.keys(out).length > 0 ? out : void 0;
+}
+function mergeCodingRunProcessEnv(daemonEnv, body) {
+  let merged = { ...daemonEnv };
+  const inline2 = sanitizeCodingRunBodyEnv(body.env);
+  if (inline2) merged = { ...merged, ...inline2 };
+  return merged;
+}
+
 // src/multipart.ts
 function parseMultipart(contentType, body) {
   const match2 = contentType.match(/boundary=(?:"([^"]+)"|([^\s;]+))/);
@@ -262138,7 +262160,7 @@ function createPiRunner(options2 = {}) {
   if (model == null) {
     const baseUrlEnvKey = `${provider.toUpperCase().replace(/-/g, "_")}_BASE_URL`;
     const apiKeyEnvKey = `${provider.toUpperCase().replace(/-/g, "_")}_API_KEY`;
-    const baseUrl = process.env[baseUrlEnvKey] ?? process.env.OPENAI_BASE_URL;
+    const baseUrl = getEnvValue(options2.env, baseUrlEnvKey) ?? getEnvValue(options2.env, "OPENAI_BASE_URL");
     if (!baseUrl) {
       throw new Error(`Pi runner: model "${modelSpec}" not found in built-in catalog. Set ${baseUrlEnvKey} (or OPENAI_BASE_URL) to auto-register it.`);
     }
@@ -262451,8 +262473,15 @@ function codingRunStream(req, env2) {
       } catch (err) {
         const msg = err instanceof Error ? err.message : String(err);
         controller.enqueue(
-          new TextEncoder().encode(`${JSON.stringify({ error: msg })}
-`)
+          new TextEncoder().encode(
+            `data: ${JSON.stringify({ type: "error", errorText: msg })}
+
+data: ${JSON.stringify({ type: "finish", finishReason: "error" })}
+
+data: [DONE]
+
+`
+          )
         );
       } finally {
         controller.close();
@@ -262485,7 +262514,8 @@ function createNextHandler(opts) {
     const method = req.method ?? "GET";
     if (method === "POST" && pathname === "/api/coding/run") {
       const body = await req.json().catch(() => ({}));
-      return codingRunStream(body, env2);
+      const mergedEnv = mergeCodingRunProcessEnv(env2, body);
+      return codingRunStream(body, mergedEnv);
     }
     if (method === "POST" && pathname === "/api/fs/upload") {
       try {

package/dist/routes/coding.d.ts

@@ -9,6 +9,8 @@ export interface RunRequest {
     resume?: string;
     skillPaths?: string[];
     cwd?: string;
+    /** Inline runner env (string map); same keys override. */
+    env?: Record<string, string>;
 }
 /**
  * POST /api/coding/run — Node http.ServerResponse version (standalone daemon)

package/dist/routes/coding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"coding.d.ts","sourceRoot":"","sources":["../../src/routes/coding.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,IAAI,MAAM,WAAW,CAAC;AAGvC,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,UAAU,EACf,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC1B,OAAO,CAAC,IAAI,CAAC,CAkCf;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,UAAU,EACf,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC1B,QAAQ,CA0CV"}
+{"version":3,"file":"coding.d.ts","sourceRoot":"","sources":["../../src/routes/coding.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,IAAI,MAAM,WAAW,CAAC;AAGvC,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,UAAU,EACf,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC1B,OAAO,CAAC,IAAI,CAAC,CAwCf;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,UAAU,EACf,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC1B,QAAQ,CA8CV"}

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAQlC,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,CAAC,MAAM,CAgG9D"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AASlC,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,CAAC,MAAM,CAiG9D"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sandagent/daemon",
-  "version": "0.9.8",
+  "version": "0.9.9-beta.0",
   "description": "SandAgent Daemon - Unified API gateway for sandbox services (file, git, volumes)",
   "type": "module",
   "bin": {