@sema-agent/server 1.185.0

package/dist/observability/otel-exporter.js

@@ -0,0 +1,95 @@
+const CUMULATIVE = 2;
+const nano = (ms) => (BigInt(ms) * 1000000n).toString();
+const attrs = (labels) => Object.entries(labels).map(([key, v]) => ({ key, value: { stringValue: String(v) } }));
+export function buildOtlpPayload(snap, opts) {
+    const start = nano(opts.startMs);
+    const now = nano(opts.nowMs);
+    const metrics = [];
+    for (const c of snap.counters) {
+        if (c.series.length === 0)
+            continue;
+        metrics.push({
+            name: c.name,
+            description: c.help,
+            sum: {
+                dataPoints: c.series.map((s) => ({ attributes: attrs(s.labels), startTimeUnixNano: start, timeUnixNano: now, asDouble: s.value })),
+                aggregationTemporality: CUMULATIVE,
+                isMonotonic: true,
+            },
+        });
+    }
+    for (const g of snap.gauges) {
+        if (g.series.length === 0)
+            continue;
+        metrics.push({
+            name: g.name,
+            description: g.help,
+            gauge: { dataPoints: g.series.map((s) => ({ attributes: attrs(s.labels), timeUnixNano: now, asDouble: s.value })) },
+        });
+    }
+    for (const h of snap.histograms) {
+        if (h.series.length === 0)
+            continue;
+        metrics.push({
+            name: h.name,
+            description: h.help,
+            histogram: {
+                dataPoints: h.series.map((s) => {
+                    const bucketCounts = [];
+                    let prev = 0;
+                    for (let i = 0; i < h.buckets.length; i++) {
+                        bucketCounts.push(String(s.counts[i] - prev));
+                        prev = s.counts[i];
+                    }
+                    bucketCounts.push(String(s.count - prev));
+                    return { attributes: attrs(s.labels), startTimeUnixNano: start, timeUnixNano: now, count: String(s.count), sum: s.sum, bucketCounts, explicitBounds: h.buckets };
+                }),
+                aggregationTemporality: CUMULATIVE,
+            },
+        });
+    }
+    return {
+        resourceMetrics: [
+            {
+                resource: { attributes: [{ key: "service.name", value: { stringValue: opts.serviceName } }] },
+                scopeMetrics: [{ scope: { name: opts.serviceName }, metrics }],
+            },
+        ],
+    };
+}
+export function startOtlpExporter(metrics, opts) {
+    const startMs = Date.now();
+    const url = `${opts.endpoint}/v1/metrics`;
+    const fetchImpl = opts.fetchImpl ?? fetch;
+    let inFlight = false;
+    const exportOnce = async () => {
+        if (inFlight)
+            return;
+        inFlight = true;
+        try {
+            const payload = buildOtlpPayload(metrics.snapshot(), { serviceName: opts.serviceName, startMs, nowMs: Date.now() });
+            const res = await fetchImpl(url, {
+                method: "POST",
+                headers: { "content-type": "application/json", ...opts.headers },
+                body: JSON.stringify(payload),
+                signal: AbortSignal.timeout(Math.max(1_000, opts.intervalMs)),
+            });
+            if (!res.ok)
+                opts.onError?.(new Error(`OTLP export HTTP ${res.status}`));
+        }
+        catch (err) {
+            opts.onError?.(err);
+        }
+        finally {
+            inFlight = false;
+        }
+    };
+    const timer = setInterval(() => void exportOnce(), opts.intervalMs);
+    timer.unref?.();
+    return {
+        stop() {
+            clearInterval(timer);
+        },
+    };
+}
+//# sourceMappingURL=otel-exporter.js.map

package/dist/observability/otel-exporter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"otel-exporter.js","sourceRoot":"","sources":["../../src/observability/otel-exporter.ts"],"names":[],"mappings":"AASA,MAAM,UAAU,GAAG,CAAC,CAAC;AAErB,MAAM,IAAI,GAAG,CAAC,EAAU,EAAU,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,QAAU,CAAC,CAAC,QAAQ,EAAE,CAAC;AAC1E,MAAM,KAAK,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAGzH,MAAM,UAAU,gBAAgB,CAAC,IAAoB,EAAE,IAA6D;IAClH,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,MAAM,OAAO,GAAc,EAAE,CAAC;IAE9B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACpC,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,IAAI;YACnB,GAAG,EAAE;gBACH,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBAClI,sBAAsB,EAAE,UAAU;gBAClC,WAAW,EAAE,IAAI;aAClB;SACF,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5B,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACpC,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,IAAI;YACnB,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE;SACpH,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACpC,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,IAAI;YACnB,SAAS,EAAE;gBACT,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;oBAG7B,MAAM,YAAY,GAAa,EAAE,CAAC;oBAClC,IAAI,IAAI,GAAG,CAAC,CAAC;oBACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;wBAC1C,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,CAAC,CAAC;wBAC/C,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;oBACtB,CAAC;oBACD,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC;oBAC1C,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;gBACnK,CAAC,CAAC;gBACF,sBAAsB,EAAE,UAAU;aACnC;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,eAAe,EAAE;YACf;gBACE,QAAQ,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE;gBAC7F,YAAY,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC;aAC/D;SACF;KACF,CAAC;AACJ,CAAC;AAYD,MAAM,UAAU,iBAAiB,CAAC,OAAuC,EAAE,IAAyB;IAClG,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,QAAQ,aAAa,CAAC;IAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAI1C,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,UAAU,GAAG,KAAK,IAAmB,EAAE;QAC3C,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,IAAI,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACpH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;gBAC/B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE;gBAChE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAC7B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;aAC9D,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,KAAK,CAAC,oBAAoB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;gBAAS,CAAC;YACT,QAAQ,GAAG,KAAK,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,UAAU,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACpE,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAChB,OAAO;QACL,IAAI;YACF,aAAa,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/observability/principal-context.d.ts

@@ -0,0 +1,5 @@
+import { AsyncLocalStorage } from "node:async_hooks";
+export declare const principalContext: AsyncLocalStorage<string>;
+export declare function withPrincipal<T>(principal: string | undefined, fn: () => T): T;
+export declare function currentPrincipal(): string | undefined;
+//# sourceMappingURL=principal-context.d.ts.map

package/dist/observability/principal-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"principal-context.d.ts","sourceRoot":"","sources":["../../src/observability/principal-context.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,eAAO,MAAM,gBAAgB,2BAAkC,CAAC;AAGhE,wBAAgB,aAAa,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAE9E;AAGD,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,SAAS,CAErD"}

package/dist/observability/principal-context.js

@@ -0,0 +1,9 @@
+import { AsyncLocalStorage } from "node:async_hooks";
+export const principalContext = new AsyncLocalStorage();
+export function withPrincipal(principal, fn) {
+    return principal ? principalContext.run(principal, fn) : fn();
+}
+export function currentPrincipal() {
+    return principalContext.getStore();
+}
+//# sourceMappingURL=principal-context.js.map

package/dist/observability/principal-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"principal-context.js","sourceRoot":"","sources":["../../src/observability/principal-context.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,iBAAiB,EAAU,CAAC;AAGhE,MAAM,UAAU,aAAa,CAAI,SAA6B,EAAE,EAAW;IACzE,OAAO,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAChE,CAAC;AAGD,MAAM,UAAU,gBAAgB;IAC9B,OAAO,gBAAgB,CAAC,QAAQ,EAAE,CAAC;AACrC,CAAC"}

package/dist/observability/rate-limit.d.ts

@@ -0,0 +1,18 @@
+export interface RateDecision {
+    allowed: boolean;
+    retryAfterSec: number;
+    remaining: number;
+}
+export interface RateGate {
+    check(key: string): RateDecision;
+    sweep(now?: number): void;
+}
+export declare class RateLimiter implements RateGate {
+    private readonly limit;
+    private readonly windowMs;
+    private readonly windows;
+    constructor(limit: number, windowMs?: number);
+    check(key: string): RateDecision;
+    sweep(now?: number): void;
+}
+//# sourceMappingURL=rate-limit.d.ts.map

package/dist/observability/rate-limit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../src/observability/rate-limit.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB;AAID,MAAM,WAAW,QAAQ;IACvB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,CAAC;IACjC,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,qBAAa,WAAY,YAAW,QAAQ;IAIxC,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAJ3B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyD;gBAG9D,KAAK,EAAE,MAAM,EACb,QAAQ,SAAS;IAGpC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY;IAgBhC,KAAK,CAAC,GAAG,SAAa,GAAG,IAAI;CAG9B"}

package/dist/observability/rate-limit.js

@@ -0,0 +1,30 @@
+export class RateLimiter {
+    limit;
+    windowMs;
+    windows = new Map();
+    constructor(limit, windowMs = 60_000) {
+        this.limit = limit;
+        this.windowMs = windowMs;
+    }
+    check(key) {
+        if (this.limit <= 0)
+            return { allowed: true, retryAfterSec: 0, remaining: Number.POSITIVE_INFINITY };
+        const now = Date.now();
+        let w = this.windows.get(key);
+        if (!w || w.resetAt <= now) {
+            w = { resetAt: now + this.windowMs, count: 0 };
+            this.windows.set(key, w);
+        }
+        w.count += 1;
+        if (w.count > this.limit) {
+            return { allowed: false, retryAfterSec: Math.max(1, Math.ceil((w.resetAt - now) / 1000)), remaining: 0 };
+        }
+        return { allowed: true, retryAfterSec: 0, remaining: this.limit - w.count };
+    }
+    sweep(now = Date.now()) {
+        for (const [k, w] of this.windows)
+            if (w.resetAt <= now)
+                this.windows.delete(k);
+    }
+}
+//# sourceMappingURL=rate-limit.js.map

package/dist/observability/rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../../src/observability/rate-limit.ts"],"names":[],"mappings":"AAoBA,MAAM,OAAO,WAAW;IAIH;IACA;IAJF,OAAO,GAAG,IAAI,GAAG,EAA8C,CAAC;IAEjF,YACmB,KAAa,EACb,WAAW,MAAM;QADjB,UAAK,GAAL,KAAK,CAAQ;QACb,aAAQ,GAAR,QAAQ,CAAS;IACjC,CAAC;IAEJ,KAAK,CAAC,GAAW;QACf,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,iBAAiB,EAAE,CAAC;QACrG,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,GAAG,EAAE,CAAC;YAC3B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YAC/C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC3B,CAAC;QACD,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QACb,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YACzB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QAC3G,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC;IAC9E,CAAC;IAGD,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACpB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,CAAC,OAAO,IAAI,GAAG;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAClF,CAAC;CACF"}

package/dist/observability/tool-trace.d.ts

@@ -0,0 +1,6 @@
+import type { Hooks } from "@sema-agent/core";
+import type { Logger } from "./logger.js";
+import type { Metrics } from "./metrics.js";
+export declare function createPermissionDeniedMeter(metrics: Pick<Metrics, "inc">): Hooks;
+export declare function createToolTracer(logger: Logger): Hooks;
+//# sourceMappingURL=tool-trace.d.ts.map

package/dist/observability/tool-trace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-trace.d.ts","sourceRoot":"","sources":["../../src/observability/tool-trace.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAiB5C,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,KAAK,CAMhF;AAiBD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAgDtD"}

package/dist/observability/tool-trace.js

@@ -0,0 +1,73 @@
+import { redactSecrets } from "../trace/redact.js";
+const KNOWN_DENY_SOURCES = new Set(["policy", "hook", "safety", "shellGate", "planMode"]);
+export function createPermissionDeniedMeter(metrics) {
+    return {
+        permissionDenied(payload) {
+            metrics.inc("permission_denied_total", { source: KNOWN_DENY_SOURCES.has(payload.source) ? payload.source : "other" });
+        },
+    };
+}
+export function createToolTracer(logger) {
+    return {
+        preToolUse(toolName, input, ctx) {
+            logger.info("tool_trace", { phase: "pre", id: ctx.toolCallId, tool: toolName, arg: summarize(input) });
+            return undefined;
+        },
+        postToolUse(toolName, _input, output, ctx) {
+            logger.info("tool_trace", {
+                phase: "post",
+                id: ctx.toolCallId,
+                tool: toolName,
+                isError: output.isError,
+                out: textOf(output.content),
+            });
+            return undefined;
+        },
+        postToolUseFailure(toolName, _input, failure, ctx) {
+            logger.info("tool_trace", {
+                phase: "post",
+                id: ctx.toolCallId,
+                tool: toolName,
+                isError: true,
+                isInterrupt: failure.isInterrupt,
+                ...(failure.durationMs !== undefined ? { durationMs: failure.durationMs } : {}),
+                out: clip(redactSecrets(failure.error), 200),
+            });
+            return undefined;
+        },
+        permissionDenied(payload) {
+            logger.info("tool_trace", {
+                phase: "denied",
+                id: payload.toolCallId,
+                tool: payload.toolName,
+                source: payload.source,
+                reason: clip(redactSecrets(payload.reason), 200),
+                arg: summarize(payload.input),
+            });
+        },
+    };
+}
+function summarize(input) {
+    if (!input || typeof input !== "object")
+        return { v: clip(String(input), 120) };
+    const o = input;
+    const s = {};
+    for (const k of ["path", "file_path", "command", "cmd", "pattern", "glob", "old_string", "new_string"]) {
+        if (typeof o[k] === "string")
+            s[k] = clip(redactSecrets(o[k]), 120);
+    }
+    if (typeof o.content === "string")
+        s.contentLen = o.content.length;
+    return Object.keys(s).length ? s : { keys: Object.keys(o) };
+}
+function textOf(content) {
+    const text = content
+        .map((c) => (c && typeof c === "object" && typeof c.text === "string" ? c.text : ""))
+        .join("")
+        .trim();
+    return clip(redactSecrets(text), 200);
+}
+function clip(s, n) {
+    return s.length > n ? `${s.slice(0, n)}…(${s.length})` : s;
+}
+//# sourceMappingURL=tool-trace.js.map

package/dist/observability/tool-trace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-trace.js","sourceRoot":"","sources":["../../src/observability/tool-trace.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAKnD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;AAW1F,MAAM,UAAU,2BAA2B,CAAC,OAA6B;IACvE,OAAO;QACL,gBAAgB,CAAC,OAAO;YACtB,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,EAAE,MAAM,EAAE,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACxH,CAAC;KACF,CAAC;AACJ,CAAC;AAiBD,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,OAAO;QACL,UAAU,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG;YAC7B,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACvG,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG;YACvC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE;gBACxB,KAAK,EAAE,MAAM;gBACb,EAAE,EAAE,GAAG,CAAC,UAAU;gBAClB,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;aAC5B,CAAC,CAAC;YACH,OAAO,SAAS,CAAC;QACnB,CAAC;QAKD,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG;YAC/C,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE;gBACxB,KAAK,EAAE,MAAM;gBACb,EAAE,EAAE,GAAG,CAAC,UAAU;gBAClB,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/E,GAAG,EAAE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC;aAC7C,CAAC,CAAC;YACH,OAAO,SAAS,CAAC;QACnB,CAAC;QAMD,gBAAgB,CAAC,OAAO;YACtB,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE;gBACxB,KAAK,EAAE,QAAQ;gBACf,EAAE,EAAE,OAAO,CAAC,UAAU;gBACtB,IAAI,EAAE,OAAO,CAAC,QAAQ;gBACtB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC;gBAChD,GAAG,EAAE,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC;aAC9B,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAGD,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IAChF,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,MAAM,CAAC,GAA4B,EAAE,CAAC;IAItC,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,CAAC,EAAE,CAAC;QACvG,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ;YAAE,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAW,CAAC,EAAE,GAAG,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAAE,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACnE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9D,CAAC;AAED,SAAS,MAAM,CAAC,OAA2B;IACzC,MAAM,IAAI,GAAG,OAAO;SACjB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAQ,CAAwB,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,CAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SAClI,IAAI,CAAC,EAAE,CAAC;SACR,IAAI,EAAE,CAAC;IACV,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,IAAI,CAAC,CAAS,EAAE,CAAS;IAChC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC"}

package/dist/orchestration/hardened-vm-runner.d.ts

@@ -0,0 +1,26 @@
+import { type WorkflowScriptRunner, type WorkflowPrimitives } from "@sema-agent/core";
+export interface HardenedVmLimits {
+    totalTimeoutMs?: number;
+    syncTimeoutMs?: number;
+    maxAgents?: number;
+    concurrency?: number;
+    maxHeapMb?: number;
+}
+export interface HardenedMembrane {
+    bridge(hostFn: (...args: unknown[]) => unknown): (...a: unknown[]) => Promise<unknown>;
+    dataIn(value: unknown): unknown;
+    ctxEval(trustedSource: string): unknown;
+}
+export declare function scopedPhaseGate(phase: WorkflowPrimitives["phase"]): {
+    enter(title: string): Promise<number>;
+    exit(token: number, ok: boolean, err?: string): Promise<void>;
+};
+export declare function orchestrationGlobals(primitives: WorkflowPrimitives, scriptArgs: unknown, limits?: HardenedVmLimits): (m: HardenedMembrane) => Record<string, unknown>;
+export declare function createHardenedVmRunner(limits?: HardenedVmLimits): WorkflowScriptRunner;
+export declare function runInHardenedVm(opts: {
+    code: string;
+    bindings?: (m: HardenedMembrane) => Record<string, unknown>;
+    limits?: HardenedVmLimits;
+    signal?: AbortSignal;
+}): Promise<unknown>;
+//# sourceMappingURL=hardened-vm-runner.d.ts.map

package/dist/orchestration/hardened-vm-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hardened-vm-runner.d.ts","sourceRoot":"","sources":["../../src/orchestration/hardened-vm-runner.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACxB,MAAM,kBAAkB,CAAC;AA2C1B,MAAM,WAAW,gBAAgB;IAE/B,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,WAAW,CAAC,EAAE,MAAM,CAAC;IAGrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AA+DD,MAAM,WAAW,gBAAgB;IAI/B,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,GAAG,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAEvF,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC;IAGhC,OAAO,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC;CACzC;AAkJD,wBAAgB,eAAe,CAAC,KAAK,EAAE,kBAAkB,CAAC,OAAO,CAAC,GAAG;IACnE,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/D,CA6BA;AAQD,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,kBAAkB,EAC9B,UAAU,EAAE,OAAO,EACnB,MAAM,GAAE,gBAAqB,GAC5B,CAAC,CAAC,EAAE,gBAAgB,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA0DlD;AAKD,wBAAgB,sBAAsB,CAAC,MAAM,GAAE,gBAAqB,GAAG,oBAAoB,CAgB1F;AAgBD,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,gBAAgB,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5D,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,OAAO,CAAC,CAOnB"}

package/dist/orchestration/hardened-vm-runner.js

@@ -0,0 +1,217 @@
+import vm from "node:vm";
+import { splitWorkflowMeta, WorkflowScriptError, } from "@sema-agent/core";
+const DEFAULTS = {
+    totalTimeoutMs: 600_000,
+    syncTimeoutMs: 5_000,
+    maxAgents: 1000,
+    concurrency: 12,
+    maxHeapMb: 128,
+};
+const PROTO_TAMPER_KEYS = ["__proto__", "constructor", "prototype"];
+function scrubProtoDeep(value) {
+    if (value === null || typeof value !== "object")
+        return;
+    if (Array.isArray(value)) {
+        for (const el of value)
+            scrubProtoDeep(el);
+        return;
+    }
+    for (const key of Object.getOwnPropertyNames(value)) {
+        if (PROTO_TAMPER_KEYS.includes(key)) {
+            Reflect.deleteProperty(value, key);
+            continue;
+        }
+        scrubProtoDeep(value[key]);
+    }
+}
+function sterilizingParse(json) {
+    const parsed = JSON.parse(json);
+    scrubProtoDeep(parsed);
+    return parsed;
+}
+function marshalOut(value) {
+    let json;
+    try {
+        json = JSON.stringify(value === undefined ? null : value);
+    }
+    catch (err) {
+        throw new WorkflowScriptError(`value is not JSON-serializable: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    return sterilizingParse(json === undefined ? "null" : json);
+}
+async function runHardened(opts) {
+    const cfg = { ...DEFAULTS, ...opts.limits };
+    const { signal } = opts;
+    if (signal?.aborted)
+        throw new WorkflowScriptError("hardened-vm aborted before start");
+    const sandbox = { __proto__: null };
+    const ctx = vm.createContext(sandbox, { codeGeneration: { strings: false, wasm: false } });
+    vm.runInContext(`(() => {
+       const block = (l) => { throw new Error(l + " is unavailable in workflow scripts (nondeterministic — breaks resume). Pass timestamps via args; vary by index for randomness."); };
+       Date.now = () => block("Date.now()");
+       Math.random = () => block("Math.random()");
+       const RealDate = Date;
+       Date = new Proxy(RealDate, {
+         construct(t, a) { if (a.length === 0) block("new Date()"); return Reflect.construct(t, a); },
+         apply() { return block("Date()"); },
+       });
+       // Live catch 2026-07-03: the null-proto sandbox never HAD timers (CC parity — by design), but a bare
+       // ReferenceError told the model nothing. Self-explaining stubs, same posture as the Date.now block.
+       const noTimer = (n) => { throw new Error(n + " is unavailable in workflow scripts — for delayed/scheduled work use CronCreate (delay) or await agent(...)."); };
+       for (const n of ["setTimeout", "setInterval", "setImmediate", "queueMicrotask"]) {
+         globalThis[n] = () => noTimer(n + "()");
+       }
+     })()`, ctx);
+    const ctxJsonParse = vm.runInContext("(s => JSON.parse(s))", ctx);
+    const dataIn = (v) => {
+        const clean = JSON.parse(JSON.stringify(v === undefined ? null : v));
+        scrubProtoDeep(clean);
+        return ctxJsonParse(JSON.stringify(clean));
+    };
+    const mkBridge = vm.runInContext(`(hostCall => async function (...a) {
+       const r = JSON.parse(await hostCall(JSON.stringify(a)));
+       if (r.ok) return r.v;
+       const e = new Error(r.err); e.name = r.name || "Error"; throw e;
+     })`, ctx);
+    const bridge = (hostFn) => mkBridge(async (argsJson) => {
+        try {
+            const out = await hostFn(...sterilizingParse(argsJson));
+            return JSON.stringify({ ok: true, v: out ?? null });
+        }
+        catch (e) {
+            return JSON.stringify({
+                ok: false,
+                err: e instanceof Error ? e.message : String(e),
+                name: e instanceof Error ? e.name : "Error",
+            });
+        }
+    });
+    const membrane = { bridge, dataIn, ctxEval: (src) => vm.runInContext(src, ctx) };
+    for (const [name, value] of Object.entries(opts.buildGlobals(membrane)))
+        sandbox[name] = value;
+    let invocation;
+    try {
+        invocation = new vm.Script(`(async function () {\n${opts.body}\n})()`, { filename: "hardened-vm-script.js" });
+    }
+    catch (err) {
+        throw new WorkflowScriptError(`script failed to compile: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    const scriptPromise = invocation.runInContext(ctx, { timeout: cfg.syncTimeoutMs });
+    let timer;
+    let onAbort;
+    try {
+        const result = await Promise.race([
+            scriptPromise,
+            new Promise((_, reject) => {
+                timer = setTimeout(() => reject(new WorkflowScriptError(`script exceeded totalTimeoutMs (${cfg.totalTimeoutMs})`)), cfg.totalTimeoutMs);
+                timer.unref?.();
+                if (signal) {
+                    onAbort = () => reject(new WorkflowScriptError("hardened-vm aborted"));
+                    signal.addEventListener("abort", onAbort, { once: true });
+                }
+            }),
+        ]);
+        return marshalOut(result);
+    }
+    catch (err) {
+        if (err instanceof WorkflowScriptError)
+            throw err;
+        throw new WorkflowScriptError(`script failed at runtime: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+        if (signal && onAbort)
+            signal.removeEventListener("abort", onAbort);
+    }
+}
+export function scopedPhaseGate(phase) {
+    let seq = 0;
+    const open = new Map();
+    return {
+        async enter(title) {
+            let release;
+            const gate = new Promise((res) => (release = res));
+            const settled = Promise.resolve(phase(title, async () => {
+                const r = await gate;
+                if (!r.ok)
+                    throw new Error(r.err ?? "phase body failed");
+            }));
+            settled.catch(() => undefined);
+            await Promise.race([settled, Promise.resolve()]);
+            const token = ++seq;
+            open.set(token, { release, settled });
+            return token;
+        },
+        async exit(token, ok, err) {
+            const o = open.get(token);
+            if (!o)
+                return;
+            open.delete(token);
+            o.release({ ok, ...(err !== undefined ? { err } : {}) });
+            await o.settled.catch(() => undefined);
+        },
+    };
+}
+export function orchestrationGlobals(primitives, scriptArgs, limits = {}) {
+    const cfg = { ...DEFAULTS, ...limits };
+    return (m) => {
+        let agentCount = 0;
+        const agent = m.bridge(async (spec, opts) => {
+            if (++agentCount > cfg.maxAgents) {
+                throw new Error(`workflow exceeded maxAgents (${cfg.maxAgents}) — runaway fan-out backstop`);
+            }
+            return primitives.agent(spec, opts);
+        });
+        const log = m.ctxEval("(h => (msg) => h(String(msg)))")((s) => primitives.log(s));
+        const budget = m.ctxEval("((t,s,r)=>Object.freeze({__proto__:null,total:t,spent:()=>s(),remaining:()=>r()}))")(primitives.budget.total, () => primitives.budget.spent(), () => primitives.budget.remaining());
+        const parallel = m.ctxEval(`(limit => async (thunks) => {
+           const out = new Array(thunks.length); let i = 0;
+           const worker = async () => { while (i < thunks.length) { const k = i++; try { out[k] = await thunks[k](); } catch { out[k] = null; } } };
+           await Promise.all(Array.from({ length: Math.min(limit, thunks.length) }, worker));
+           return out;
+         })`)(cfg.concurrency);
+        const pipeline = m.ctxEval(`(limit => async (items, ...stages) => {
+           const out = new Array(items.length); let i = 0;
+           const worker = async () => { while (i < items.length) { const k = i++; let v = items[k]; try { for (const s of stages) v = await s(v, items[k], k); out[k] = v; } catch { out[k] = null; } } };
+           await Promise.all(Array.from({ length: Math.min(limit, items.length) }, worker));
+           return out;
+         })`)(cfg.concurrency);
+        const gate = scopedPhaseGate((t, b) => primitives.phase(t, b));
+        const phaseMark = m.bridge(async (title) => void (await primitives.phase(String(title), undefined)));
+        const phaseEnter = m.bridge(async (title) => gate.enter(String(title)));
+        const phaseExit = m.bridge(async (token, ok, err) => gate.exit(Number(token), ok === true, err === undefined || err === null ? undefined : String(err)));
+        const phase = m.ctxEval(`((mark, enter, exit) => async (title, body) => {
+           if (body === undefined) { await mark(title); return undefined; }
+           const tok = await enter(title);
+           try { const out = await body(); await exit(tok, true); return out; }
+           catch (e) { try { await exit(tok, false, e && e.message ? String(e.message) : String(e)); } catch {} throw e; }
+         })`)(phaseMark, phaseEnter, phaseExit);
+        return { agent, parallel, pipeline, phase, log, budget, args: m.dataIn(scriptArgs) };
+    };
+}
+export function createHardenedVmRunner(limits = {}) {
+    const cfg = { ...DEFAULTS, ...limits };
+    return {
+        safeForUntrustedScripts: true,
+        async run({ scriptSource, primitives, scriptArgs, signal }) {
+            const { meta, body } = splitWorkflowMeta(scriptSource);
+            const result = await runHardened({
+                body,
+                limits: cfg,
+                ...(signal ? { signal } : {}),
+                buildGlobals: orchestrationGlobals(primitives, scriptArgs, cfg),
+            });
+            return { result, meta: marshalOut(meta) };
+        },
+    };
+}
+export async function runInHardenedVm(opts) {
+    return runHardened({
+        body: opts.code,
+        buildGlobals: opts.bindings ?? (() => ({})),
+        ...(opts.limits ? { limits: opts.limits } : {}),
+        ...(opts.signal ? { signal: opts.signal } : {}),
+    });
+}
+//# sourceMappingURL=hardened-vm-runner.js.map

package/dist/orchestration/hardened-vm-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hardened-vm-runner.js","sourceRoot":"","sources":["../../src/orchestration/hardened-vm-runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EACL,iBAAiB,EACjB,mBAAmB,GAGpB,MAAM,kBAAkB,CAAC;AAyD1B,MAAM,QAAQ,GAA+B;IAC3C,cAAc,EAAE,OAAO;IACvB,aAAa,EAAE,KAAK;IACpB,SAAS,EAAE,IAAI;IACf,WAAW,EAAE,EAAE;IACf,SAAS,EAAE,GAAG;CACf,CAAC;AAGF,MAAM,iBAAiB,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;AAWpE,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO;IACxD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,EAAE,IAAI,KAAK;YAAE,cAAc,CAAC,EAAE,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,IAAI,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,OAAO,CAAC,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACnC,SAAS;QACX,CAAC;QACD,cAAc,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAGD,SAAS,gBAAgB,CAAC,IAAY;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IAC3C,cAAc,CAAC,MAAM,CAAC,CAAC;IACvB,OAAO,MAAM,CAAC;AAChB,CAAC;AAKD,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,mBAAmB,CAC3B,mCAAmC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACtF,CAAC;IACJ,CAAC;IACD,OAAO,gBAAgB,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAC9D,CAAC;AAuBD,KAAK,UAAU,WAAW,CAAC,IAK1B;IACC,MAAM,GAAG,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5C,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACxB,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,mBAAmB,CAAC,kCAAkC,CAAC,CAAC;IAGvF,MAAM,OAAO,GAA4B,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC7D,MAAM,GAAG,GAAG,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IAG3F,EAAE,CAAC,YAAY,CACb;;;;;;;;;;;;;;;UAeM,EACN,GAAG,CACJ,CAAC;IAGF,MAAM,YAAY,GAAG,EAAE,CAAC,YAAY,CAAC,sBAAsB,EAAE,GAAG,CAA2B,CAAC;IAC5F,MAAM,MAAM,GAAG,CAAC,CAAU,EAAE,EAAE;QAG5B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAY,CAAC;QAChF,cAAc,CAAC,KAAK,CAAC,CAAC;QACtB,OAAO,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC;IAGF,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAC9B;;;;QAII,EACJ,GAAG,CACmF,CAAC;IACzF,MAAM,MAAM,GAAG,CAAC,MAAuC,EAAE,EAAE,CACzD,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;QAC1B,IAAI,CAAC;YAGH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,GAAI,gBAAgB,CAAC,QAAQ,CAAe,CAAC,CAAC;YACvE,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,EAAE,EAAE,KAAK;gBACT,GAAG,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC/C,IAAI,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO;aAC5C,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IACL,MAAM,QAAQ,GAAqB,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;IAGnG,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAE/F,IAAI,UAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,UAAU,GAAG,IAAI,EAAE,CAAC,MAAM,CAAC,yBAAyB,IAAI,CAAC,IAAI,QAAQ,EAAE,EAAE,QAAQ,EAAE,uBAAuB,EAAE,CAAC,CAAC;IAChH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,mBAAmB,CAC3B,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAChF,CAAC;IACJ,CAAC;IAGD,MAAM,aAAa,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,aAAa,EAAE,CAAqB,CAAC;IAGvG,IAAI,KAAgD,CAAC;IACrD,IAAI,OAAiC,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YAChC,aAAa;YACb,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAC/B,KAAK,GAAG,UAAU,CAChB,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,mBAAmB,CAAC,mCAAmC,GAAG,CAAC,cAAc,GAAG,CAAC,CAAC,EAC/F,GAAG,CAAC,cAAc,CACnB,CAAC;gBACF,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;gBAChB,IAAI,MAAM,EAAE,CAAC;oBACX,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,mBAAmB,CAAC,qBAAqB,CAAC,CAAC,CAAC;oBACvE,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC5D,CAAC;YACH,CAAC,CAAC;SACH,CAAC,CAAC;QAGH,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QAOb,IAAI,GAAG,YAAY,mBAAmB;YAAE,MAAM,GAAG,CAAC;QAClD,MAAM,IAAI,mBAAmB,CAAC,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjH,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,MAAM,IAAI,OAAO;YAAE,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtE,CAAC;AACH,CAAC;AAmBD,MAAM,UAAU,eAAe,CAAC,KAAkC;IAIhE,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,MAAM,IAAI,GAAG,IAAI,GAAG,EAA8F,CAAC;IACnH,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,KAAK;YACf,IAAI,OAAoD,CAAC;YACzD,MAAM,IAAI,GAAG,IAAI,OAAO,CAAgC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC;YAClF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAC7B,KAAK,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;gBACtB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC;gBACrB,IAAI,CAAC,CAAC,CAAC,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,mBAAmB,CAAC,CAAC;YAC3D,CAAC,CAAC,CACH,CAAC;YACF,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAG/B,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACjD,MAAM,KAAK,GAAG,EAAE,GAAG,CAAC;YACpB,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;YACtC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG;YACvB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,CAAC;gBAAE,OAAO;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnB,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACzD,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACzC,CAAC;KACF,CAAC;AACJ,CAAC;AAQD,MAAM,UAAU,oBAAoB,CAClC,UAA8B,EAC9B,UAAmB,EACnB,SAA2B,EAAE;IAE7B,MAAM,GAAG,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;IACvC,OAAO,CAAC,CAAC,EAAE,EAAE;QACX,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YAC1C,IAAI,EAAE,UAAU,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,CAAC,SAAS,8BAA8B,CAAC,CAAC;YAC/F,CAAC;YACD,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QACH,MAAM,GAAG,GAAI,CAAC,CAAC,OAAO,CAAC,gCAAgC,CAA2D,CAChH,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CACzB,CAAC;QACF,MAAM,MAAM,GACV,CAAC,CAAC,OAAO,CAAC,oFAAoF,CAK/F,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QACjG,MAAM,QAAQ,GACZ,CAAC,CAAC,OAAO,CACP;;;;;YAKI,CAEP,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACnB,MAAM,QAAQ,GACZ,CAAC,CAAC,OAAO,CACP;;;;;YAKI,CAEP,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAGnB,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;QACrG,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACxE,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACzJ,MAAM,KAAK,GACT,CAAC,CAAC,OAAO,CACP;;;;;YAKI,CAEP,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;QACpC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;IACvF,CAAC,CAAC;AACJ,CAAC;AAKD,MAAM,UAAU,sBAAsB,CAAC,SAA2B,EAAE;IAClE,MAAM,GAAG,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;IACvC,OAAO;QACL,uBAAuB,EAAE,IAAI;QAC7B,KAAK,CAAC,GAAG,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE;YACxD,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;YACvD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC;gBAC/B,IAAI;gBACJ,MAAM,EAAE,GAAG;gBACX,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7B,YAAY,EAAE,oBAAoB,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,CAAC;aAChE,CAAC,CAAC;YAEH,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,CAAgB,EAAE,CAAC;QAC3D,CAAC;KACF,CAAC;AACJ,CAAC;AAgBD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAKrC;IACC,OAAO,WAAW,CAAC;QACjB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,YAAY,EAAE,IAAI,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3C,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChD,CAAC,CAAC;AACL,CAAC"}

package/dist/orchestration/hardened-vm-worker-runner.d.ts

@@ -0,0 +1,4 @@
+import { type WorkflowScriptRunner } from "@sema-agent/core";
+import { type HardenedVmLimits } from "./hardened-vm-runner.js";
+export declare function createWorkerHardenedVmRunner(limits?: HardenedVmLimits): WorkflowScriptRunner;
+//# sourceMappingURL=hardened-vm-worker-runner.d.ts.map

package/dist/orchestration/hardened-vm-worker-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hardened-vm-worker-runner.d.ts","sourceRoot":"","sources":["../../src/orchestration/hardened-vm-worker-runner.ts"],"names":[],"mappings":"AACA,OAAO,EAAuB,KAAK,oBAAoB,EAAqB,MAAM,kBAAkB,CAAC;AACrG,OAAO,EAAmB,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAyBjF,wBAAgB,4BAA4B,CAAC,MAAM,GAAE,gBAAqB,GAAG,oBAAoB,CAiFhG"}

package/dist/orchestration/hardened-vm-worker-runner.js

@@ -0,0 +1,79 @@
+import { Worker } from "node:worker_threads";
+import { WorkflowScriptError } from "@sema-agent/core";
+import { scopedPhaseGate } from "./hardened-vm-runner.js";
+const DEFAULTS = { totalTimeoutMs: 600_000, syncTimeoutMs: 5_000, maxAgents: 1000, concurrency: 12, maxHeapMb: 128 };
+const IS_TS = import.meta.url.endsWith(".ts");
+const WORKER_URL = new URL(IS_TS ? "./hardened-vm-worker.ts" : "./hardened-vm-worker.js", import.meta.url);
+const WORKER_EXEC_ARGV = IS_TS ? ["--import", "tsx/esm"] : undefined;
+export function createWorkerHardenedVmRunner(limits = {}) {
+    const cfg = { ...DEFAULTS, ...limits };
+    return {
+        safeForUntrustedScripts: true,
+        run({ scriptSource, primitives, scriptArgs, signal }) {
+            if (signal?.aborted)
+                return Promise.reject(new WorkflowScriptError("worker hardened-vm aborted before start"));
+            return new Promise((resolve, reject) => {
+                const worker = new Worker(WORKER_URL, {
+                    workerData: { scriptSource, scriptArgs, limits: cfg, budgetTotal: primitives.budget.total, budgetSpent: primitives.budget.spent() },
+                    resourceLimits: { maxOldGenerationSizeMb: cfg.maxHeapMb },
+                    ...(WORKER_EXEC_ARGV ? { execArgv: WORKER_EXEC_ARGV } : {}),
+                });
+                let settled = false;
+                let timer;
+                const onAbort = () => finish(() => reject(new WorkflowScriptError("worker hardened-vm aborted")));
+                const cleanup = () => {
+                    if (timer)
+                        clearTimeout(timer);
+                    if (signal)
+                        signal.removeEventListener("abort", onAbort);
+                    void worker.terminate();
+                };
+                const finish = (settle) => {
+                    if (settled)
+                        return;
+                    settled = true;
+                    cleanup();
+                    settle();
+                };
+                timer = setTimeout(() => finish(() => reject(new WorkflowScriptError(`worker hardened-vm exceeded totalTimeoutMs (${cfg.totalTimeoutMs})`))), cfg.totalTimeoutMs + 1500);
+                timer.unref?.();
+                if (signal)
+                    signal.addEventListener("abort", onAbort, { once: true });
+                const phaseGate = scopedPhaseGate((t, b) => primitives.phase(t, b));
+                const reply = (id, p) => void p.then((value) => worker.postMessage({ type: "agentResult", id, ok: true, value: value ?? null, budgetSpent: primitives.budget.spent() }), (e) => worker.postMessage({ type: "agentResult", id, ok: false, error: e instanceof Error ? e.message : String(e), name: e instanceof Error ? e.name : "Error", budgetSpent: primitives.budget.spent() }));
+                worker.on("message", (msg) => {
+                    if (msg.type === "phaseMark" && msg.id !== undefined) {
+                        reply(msg.id, Promise.resolve(primitives.phase(String(msg.title), undefined)).then(() => null));
+                    }
+                    else if (msg.type === "phaseEnter" && msg.id !== undefined) {
+                        reply(msg.id, phaseGate.enter(String(msg.title)));
+                    }
+                    else if (msg.type === "phaseExit" && msg.id !== undefined) {
+                        reply(msg.id, phaseGate.exit(Number(msg.token), msg.ok === true, msg.err === undefined ? undefined : String(msg.err)).then(() => null));
+                    }
+                    else if (msg.type === "agent" && msg.id !== undefined) {
+                        const args = (msg.args ?? []);
+                        void Promise.resolve()
+                            .then(() => primitives.agent(args[0], args[1]))
+                            .then((value) => worker.postMessage({ type: "agentResult", id: msg.id, ok: true, value: value ?? null, budgetSpent: primitives.budget.spent() }), (e) => worker.postMessage({ type: "agentResult", id: msg.id, ok: false, error: e instanceof Error ? e.message : String(e), name: e instanceof Error ? e.name : "Error", budgetSpent: primitives.budget.spent() }));
+                    }
+                    else if (msg.type === "log") {
+                        primitives.log(String(msg.msg));
+                    }
+                    else if (msg.type === "done") {
+                        finish(() => resolve({ result: msg.result, meta: (msg.meta ?? { name: "workflow", description: "" }) }));
+                    }
+                    else if (msg.type === "error") {
+                        finish(() => reject(new WorkflowScriptError(msg.message ?? "worker hardened-vm script failed")));
+                    }
+                });
+                worker.on("error", (err) => finish(() => reject(new WorkflowScriptError(`worker hardened-vm crashed (likely heap/OOM): ${err.message}`))));
+                worker.on("exit", (code) => {
+                    if (!settled)
+                        finish(() => reject(new WorkflowScriptError(`worker hardened-vm exited (code ${code}) before completing — likely terminated for a resource-limit hit`)));
+                });
+            });
+        },
+    };
+}
+//# sourceMappingURL=hardened-vm-worker-runner.js.map