@stigmer/runner 0.1.0-dev.20261017020314.g644422724c27

package/dist/agent-host/entry.js

@@ -0,0 +1,137 @@
+/**
+ * The agent host process: the runner's own entry started as `main.js
+ * agent-host` by the runner's supervisor (`supervisor.ts`), serving the
+ * runner over the pipe on fd 3 until that pipe closes.
+ *
+ * What this process installs for the engines it runs, and the runner's
+ * process never does:
+ *
+ *  - the model registry's route through the runner's local proxy
+ *    (`shared/registry-endpoint.ts`), and on a runner that calls its
+ *    providers directly, the provider lanes (`shared/model-lanes.ts`);
+ *  - the per-turn approval-receipt keys the runner hands it
+ *    (`shared/fingerprint-secret.ts`);
+ *  - telemetry, when the runner's settings say so (`otel-export.ts`), under
+ *    the runner's service name with this process's role on the resource
+ *    (`otel.ts`), exported to the runner's local proxy, which forwards it
+ *    to the operator's collector with a login this process never holds
+ *    (`agent-proxy/otlp-forward.ts`). The host reads no telemetry setting
+ *    of its own: until the runner's configuration arrives it exports
+ *    nothing, and then exactly what the runner decided.
+ *
+ * `main.ts` has already guarded the pipes and installed the rejection and
+ * exception handlers before it hands over, as it does for every mode. The
+ * secret capture runs here too: the runner starts the host with an
+ * environment that holds none of its secrets, and the capture keeps that
+ * true even for a host started some other way.
+ *
+ * The host exits when its channel closes, after giving every booted
+ * adapter its shutdown (bounded, because an exit is the point): the runner
+ * closes the channel when it is done with the host, and its death closes
+ * it too, so a runner killed outright leaves no host behind.
+ *
+ * Shape: {@link runAgentHostProcess} is the whole of it over injected
+ * process facts, which the tests drive in-process; {@link runAgentHost} is
+ * only the process boundary, booted under plain Node by
+ * `scripts/verify-agent-host-boot.mjs`.
+ */
+import { Socket } from "node:net";
+import { HARNESS_ADAPTERS } from "../harness-adapters.js";
+import { initMetrics, initTracing } from "../otel.js";
+import { TELEMETRY_OFF, adoptTelemetrySettings } from "../otel-export.js";
+import { supplyExecutionFingerprintKeys } from "../shared/fingerprint-secret.js";
+import { routeModelCallsThroughLanes } from "../shared/model-lanes.js";
+import { routeRegistryThrough } from "../shared/registry-endpoint.js";
+import { captureRunnerSecrets } from "../shared/runner-credential-store.js";
+import { streamChannel } from "./channel.js";
+import { serveAgentHost } from "./host.js";
+import { AGENT_HOST_CHANNEL_FD } from "./protocol.js";
+/** The bound on the adapters' shutdown once the channel has closed. */
+export const SHUTDOWN_GRACE_MS = 10_000;
+/** The process role this host reports on its telemetry resource. */
+const PROCESS_ROLE = "agent-host";
+/** Serve the runner until the channel closes, then shut the adapters down and exit. */
+export async function runAgentHostProcess(host) {
+    captureRunnerSecrets();
+    adoptTelemetrySettings(TELEMETRY_OFF);
+    const telemetry = { flush: null };
+    const server = serveAgentHost(host.channel, host.rows, {
+        onConfigured: async (config) => {
+            // The Cursor SDK's whole backend is the Cursor lane. The SDK reads this
+            // on import and again per call, so it stays set; the shells and hooks
+            // the runner's code starts leave it out (`shared/shell-env.ts`), and
+            // only commands the SDK starts itself inherit it.
+            if (config.cursorEndpoint !== null)
+                process.env.CURSOR_BACKEND_URL = config.cursorEndpoint;
+            routeRegistryThrough(config.proxyEndpoint, config.token);
+            if (!config.platformProxied)
+                routeModelCallsThroughLanes(config.proxyEndpoint, config.token);
+            adoptTelemetrySettings(config.telemetry);
+            try {
+                telemetry.flush = await host.initTelemetry({ endpoint: config.proxyEndpoint, token: config.token });
+            }
+            catch (err) {
+                // Telemetry is never a reason to refuse a turn.
+                host.log(`[agent-host] telemetry not started: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        },
+    });
+    supplyExecutionFingerprintKeys((executionId) => server.fingerprintKey(executionId));
+    const reason = await server.closed;
+    host.log(`[agent-host] channel closed (${reason.message}); shutting down`);
+    await withinGrace((async () => {
+        for (const row of [...server.booted].reverse()) {
+            try {
+                await row.adapter.shutdown();
+            }
+            catch (err) {
+                host.log(`[agent-host] ${row.adapter.name} shutdown failed: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        }
+        await telemetry.flush?.();
+    })(), host.shutdownGraceMs ?? SHUTDOWN_GRACE_MS);
+    host.exit(0);
+}
+/** The process boundary: fd 3, the real adapter table, the real telemetry and `process.exit`. */
+export async function runAgentHost() {
+    /* v8 ignore start -- @preserve: the process boundary; its logic is runAgentHostProcess (tested in-process) and scripts/verify-agent-host-boot.mjs boots this under plain Node */
+    // The host shares the runner's process group, so a daemon's stop or a
+    // terminal's Ctrl-C reaches it too. It ignores both and exits when its pipe
+    // closes: the runner drains its turns first and shuts the harnesses down,
+    // and a runner that dies outright closes the pipe with it.
+    process.on("SIGTERM", () => { });
+    process.on("SIGINT", () => { });
+    // Set only so Electron would run this entry as Node (`supervisor.ts`
+    // `agentHostCommand`); the processes an agent starts here never see it.
+    if (process.versions.electron !== undefined)
+        delete process.env.ELECTRON_RUN_AS_NODE;
+    const socket = new Socket({ fd: AGENT_HOST_CHANNEL_FD, readable: true, writable: true });
+    await runAgentHostProcess({
+        channel: streamChannel(socket, socket),
+        rows: HARNESS_ADAPTERS,
+        initTelemetry: async (lane) => {
+            const tracing = await initTracing("stigmer-runner", { processRole: PROCESS_ROLE, lane });
+            const metrics = await initMetrics("stigmer-runner", { processRole: PROCESS_ROLE, lane });
+            if (!tracing && !metrics)
+                return null;
+            return async () => {
+                await metrics?.();
+                await tracing?.();
+            };
+        },
+        exit: (code) => process.exit(code),
+        log: (message) => console.log(message),
+    });
+    /* v8 ignore stop */
+}
+function withinGrace(work, graceMs) {
+    return new Promise((resolve) => {
+        const timer = setTimeout(resolve, graceMs);
+        timer.unref();
+        void work.finally(() => {
+            clearTimeout(timer);
+            resolve();
+        });
+    });
+}
+//# sourceMappingURL=entry.js.map

package/dist/agent-host/entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entry.js","sourceRoot":"","sources":["../../src/agent-host/entry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAElC,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAsB,MAAM,mBAAmB,CAAC;AAC9F,OAAO,EAAE,8BAA8B,EAAE,MAAM,iCAAiC,CAAC;AACjF,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAoB,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAEtD,uEAAuE;AACvE,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAExC,oEAAoE;AACpE,MAAM,YAAY,GAAG,YAAY,CAAC;AAalC,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAsB;IAC9D,oBAAoB,EAAE,CAAC;IACvB,sBAAsB,CAAC,aAAa,CAAC,CAAC;IACtC,MAAM,SAAS,GAA4C,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAC3E,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;QACrD,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YAC7B,wEAAwE;YACxE,sEAAsE;YACtE,qEAAqE;YACrE,kDAAkD;YAClD,IAAI,MAAM,CAAC,cAAc,KAAK,IAAI;gBAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,MAAM,CAAC,cAAc,CAAC;YAC3F,oBAAoB,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YACzD,IAAI,CAAC,MAAM,CAAC,eAAe;gBAAE,2BAA2B,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7F,sBAAsB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACzC,IAAI,CAAC;gBACH,SAAS,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,aAAa,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YACtG,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,gDAAgD;gBAChD,IAAI,CAAC,GAAG,CAAC,uCAAuC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACtG,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IACH,8BAA8B,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC,CAAC;IAEpF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC;IACnC,IAAI,CAAC,GAAG,CAAC,gCAAgC,MAAM,CAAC,OAAO,kBAAkB,CAAC,CAAC;IAC3E,MAAM,WAAW,CACf,CAAC,KAAK,IAAI,EAAE;QACV,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YAC/C,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC/B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,CAAC,gBAAgB,GAAG,CAAC,OAAO,CAAC,IAAI,qBAAqB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACpH,CAAC;QACH,CAAC;QACD,MAAM,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;IAC5B,CAAC,CAAC,EAAE,EACJ,IAAI,CAAC,eAAe,IAAI,iBAAiB,CAC1C,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACf,CAAC;AAED,iGAAiG;AACjG,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,iLAAiL;IACjL,sEAAsE;IACtE,4EAA4E;IAC5E,0EAA0E;IAC1E,2DAA2D;IAC3D,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAChC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC/B,qEAAqE;IACrE,wEAAwE;IACxE,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IACrF,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,EAAE,EAAE,qBAAqB,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACzF,MAAM,mBAAmB,CAAC;QACxB,OAAO,EAAE,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC;QACtC,IAAI,EAAE,gBAAgB;QACtB,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC5B,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,gBAAgB,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;YACzF,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,gBAAgB,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;YACzF,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC;YACtC,OAAO,KAAK,IAAI,EAAE;gBAChB,MAAM,OAAO,EAAE,EAAE,CAAC;gBAClB,MAAM,OAAO,EAAE,EAAE,CAAC;YACpB,CAAC,CAAC;QACJ,CAAC;QACD,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAClC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;KACvC,CAAC,CAAC;IACH,oBAAoB;AACtB,CAAC;AAED,SAAS,WAAW,CAAC,IAAmB,EAAE,OAAe;IACvD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC3C,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;YACrB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/agent-host/environment.d.ts

@@ -0,0 +1,36 @@
+/**
+ * The environment the agent host starts with — and so the base environment
+ * of every process the agent's turn starts there: the native shell
+ * (`shared/shell-env.ts` builds it from the host's `process.env`), the
+ * hooks, the MCP servers' base.
+ *
+ * Today it is the environment the agent's tools have always seen: the
+ * runner's own, without the runner's secrets. The boot capture has already
+ * moved every one of them out of `process.env`
+ * (`shared/runner-credential-store.ts`); the names are dropped here too, as
+ * the shell's environment drops them (`SHELL_ENV_DENYLIST`), so a secret
+ * planted after the capture still never reaches the host. The operator's
+ * settings, the user's own environment on a local runner (their cloud CLI
+ * logins among them), and the engines' non-secret settings all pass, as
+ * they did when the engines ran in the runner's process.
+ *
+ * Where the runner starts the host as the agent user (a container shape,
+ * `shared/agent-identity.ts`), it is an allow-list instead: the host holds
+ * nothing the agent may not have (#2016). What passes is what a process
+ * needs to run (the path, the locale, the time zone, a terminal, a temporary
+ * directory), the network's proxy and trust settings, and the engines' and
+ * the runner's non-secret settings (`CURSOR_`, `STIGMER_`, `OTEL_` and
+ * `NODE_` names, the runner's secrets still dropped, among them the
+ * collector's login, which the host never needs because it exports through
+ * the runner's local proxy (`agent-proxy/otlp-forward.ts`); any other
+ * `OTEL_*_HEADERS`, which carry a token, and `NODE_AUTH_TOKEN`, an npm
+ * registry's, are held back too). A cloud credential
+ * the operator gave the runner (`AWS_*`, `GOOGLE_APPLICATION_CREDENTIALS`,
+ * `AZURE_*`) does not pass: the runner's model lanes sign for the host
+ * (`agent-proxy/lanes.ts`). An operator who wants more names in the agent's
+ * environment lists them in `STIGMER_AGENT_ENV_PASSTHROUGH`, comma-separated.
+ */
+/** The operator's own additions to a separating runner's agent environment. */
+export declare const AGENT_ENV_PASSTHROUGH = "STIGMER_AGENT_ENV_PASSTHROUGH";
+/** The host's environment, from this process's current one. */
+export declare function agentHostEnvironment(env?: NodeJS.ProcessEnv, separating?: boolean): NodeJS.ProcessEnv;

package/dist/agent-host/environment.js

@@ -0,0 +1,72 @@
+/**
+ * The environment the agent host starts with — and so the base environment
+ * of every process the agent's turn starts there: the native shell
+ * (`shared/shell-env.ts` builds it from the host's `process.env`), the
+ * hooks, the MCP servers' base.
+ *
+ * Today it is the environment the agent's tools have always seen: the
+ * runner's own, without the runner's secrets. The boot capture has already
+ * moved every one of them out of `process.env`
+ * (`shared/runner-credential-store.ts`); the names are dropped here too, as
+ * the shell's environment drops them (`SHELL_ENV_DENYLIST`), so a secret
+ * planted after the capture still never reaches the host. The operator's
+ * settings, the user's own environment on a local runner (their cloud CLI
+ * logins among them), and the engines' non-secret settings all pass, as
+ * they did when the engines ran in the runner's process.
+ *
+ * Where the runner starts the host as the agent user (a container shape,
+ * `shared/agent-identity.ts`), it is an allow-list instead: the host holds
+ * nothing the agent may not have (#2016). What passes is what a process
+ * needs to run (the path, the locale, the time zone, a terminal, a temporary
+ * directory), the network's proxy and trust settings, and the engines' and
+ * the runner's non-secret settings (`CURSOR_`, `STIGMER_`, `OTEL_` and
+ * `NODE_` names, the runner's secrets still dropped, among them the
+ * collector's login, which the host never needs because it exports through
+ * the runner's local proxy (`agent-proxy/otlp-forward.ts`); any other
+ * `OTEL_*_HEADERS`, which carry a token, and `NODE_AUTH_TOKEN`, an npm
+ * registry's, are held back too). A cloud credential
+ * the operator gave the runner (`AWS_*`, `GOOGLE_APPLICATION_CREDENTIALS`,
+ * `AZURE_*`) does not pass: the runner's model lanes sign for the host
+ * (`agent-proxy/lanes.ts`). An operator who wants more names in the agent's
+ * environment lists them in `STIGMER_AGENT_ENV_PASSTHROUGH`, comma-separated.
+ */
+import { agentIdentity } from "../shared/agent-identity.js";
+import { RUNNER_SECRET_ENV_KEYS } from "../shared/runner-credential-keys.js";
+const RUNNER_SECRETS = new Set(RUNNER_SECRET_ENV_KEYS);
+/** The names a separating runner's host is started with, besides the prefixes below. */
+const ALLOWED_NAMES = new Set([
+    "PATH",
+    "LANG",
+    "LANGUAGE",
+    "TZ",
+    "TERM",
+    "TMPDIR",
+    "SHELL",
+    "HTTP_PROXY",
+    "HTTPS_PROXY",
+    "NO_PROXY",
+    "http_proxy",
+    "https_proxy",
+    "no_proxy",
+    "SSL_CERT_FILE",
+    "SSL_CERT_DIR",
+]);
+const ALLOWED_PREFIXES = ["LC_", "CURSOR_", "STIGMER_", "OTEL_", "NODE_"];
+/** Names under those prefixes that carry a credential, not a setting: a collector's auth headers (`OTEL_EXPORTER_OTLP_HEADERS` and its per-signal forms) and an npm registry's token. */
+const CARRIES_A_CREDENTIAL = /^(?:OTEL_.*_HEADERS|NODE_AUTH_TOKEN)$/;
+/** The operator's own additions to a separating runner's agent environment. */
+export const AGENT_ENV_PASSTHROUGH = "STIGMER_AGENT_ENV_PASSTHROUGH";
+/** The host's environment, from this process's current one. */
+export function agentHostEnvironment(env = process.env, separating = agentIdentity() !== null) {
+    const passthrough = new Set((env[AGENT_ENV_PASSTHROUGH] ?? "").split(",").map((name) => name.trim()).filter((name) => name.length > 0));
+    const out = {};
+    for (const [name, value] of Object.entries(env)) {
+        if (value === undefined || RUNNER_SECRETS.has(name))
+            continue;
+        if (separating && !passthrough.has(name) && (!(ALLOWED_NAMES.has(name) || ALLOWED_PREFIXES.some((prefix) => name.startsWith(prefix))) || CARRIES_A_CREDENTIAL.test(name)))
+            continue;
+        out[name] = value;
+    }
+    return out;
+}
+//# sourceMappingURL=environment.js.map

package/dist/agent-host/environment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.js","sourceRoot":"","sources":["../../src/agent-host/environment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAE7E,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC,sBAAsB,CAAC,CAAC;AAE5E,wFAAwF;AACxF,MAAM,aAAa,GAAwB,IAAI,GAAG,CAAC;IACjD,MAAM;IACN,MAAM;IACN,UAAU;IACV,IAAI;IACJ,MAAM;IACN,QAAQ;IACR,OAAO;IACP,YAAY;IACZ,aAAa;IACb,UAAU;IACV,YAAY;IACZ,aAAa;IACb,UAAU;IACV,eAAe;IACf,cAAc;CACf,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAU,CAAC;AAEnF,yLAAyL;AACzL,MAAM,oBAAoB,GAAG,uCAAuC,CAAC;AAErE,+EAA+E;AAC/E,MAAM,CAAC,MAAM,qBAAqB,GAAG,+BAA+B,CAAC;AAErE,+DAA+D;AAC/D,MAAM,UAAU,oBAAoB,CAAC,MAAyB,OAAO,CAAC,GAAG,EAAE,aAAsB,aAAa,EAAE,KAAK,IAAI;IACvH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IACxI,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,IAAI,KAAK,KAAK,SAAS,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC9D,IAAI,UAAU,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAE,SAAS;QACpL,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACpB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/agent-host/failed-boot.d.ts

@@ -0,0 +1,15 @@
+/**
+ * What a composition root releases when its boot fails after the agent host
+ * started (`runner.ts`, `runner-manager.ts`): the harnesses, then the local
+ * proxy. An embedder that catches the factory's error is otherwise left a
+ * live host child, whose pipes hold its event loop open.
+ *
+ * No imports, on purpose: both roots import it statically, and their static
+ * graphs stay what `__tests__/harness-boot-order.test.ts` pins.
+ */
+/** Filled by the root's body once the host is up. */
+export interface HostedBoot {
+    release?: () => Promise<void>;
+}
+/** Run `build`; when it fails, release what `boot` names (a failure there is logged) and rethrow. */
+export declare function releasingOnFailure<T>(build: (boot: HostedBoot) => Promise<T>): Promise<T>;

package/dist/agent-host/failed-boot.js

@@ -0,0 +1,26 @@
+/**
+ * What a composition root releases when its boot fails after the agent host
+ * started (`runner.ts`, `runner-manager.ts`): the harnesses, then the local
+ * proxy. An embedder that catches the factory's error is otherwise left a
+ * live host child, whose pipes hold its event loop open.
+ *
+ * No imports, on purpose: both roots import it statically, and their static
+ * graphs stay what `__tests__/harness-boot-order.test.ts` pins.
+ */
+/** Run `build`; when it fails, release what `boot` names (a failure there is logged) and rethrow. */
+export async function releasingOnFailure(build) {
+    const boot = {};
+    try {
+        return await build(boot);
+    }
+    catch (err) {
+        try {
+            await boot.release?.();
+        }
+        catch (releaseErr) {
+            console.warn(`[agent-host] releasing the agent host after a failed boot failed: ${releaseErr instanceof Error ? releaseErr.message : String(releaseErr)}`);
+        }
+        throw err;
+    }
+}
+//# sourceMappingURL=failed-boot.js.map

package/dist/agent-host/failed-boot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"failed-boot.js","sourceRoot":"","sources":["../../src/agent-host/failed-boot.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAOH,qGAAqG;AACrG,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAI,KAAuC;IACjF,MAAM,IAAI,GAAe,EAAE,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,OAAO,CAAC,IAAI,CAAC,qEAAqE,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC7J,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/agent-host/fs-service.d.ts

@@ -0,0 +1,18 @@
+/**
+ * The host's side of the agent's file and process operations
+ * (`shared/agent-fs.ts`): each `fs` or `exec` call the runner makes is
+ * performed here, by the host process, so with the agent's rights. The
+ * runner's side is `remote-fs.ts`.
+ *
+ * A failure is an answer, not a failed call: a filesystem error comes back
+ * with its errno code, and a process that exits non-zero comes back with
+ * its code and output, so the runner rebuilds the error its caller expects.
+ * A process output larger than one message is left in a file of the host's
+ * own, which the runner reads by range and removes.
+ */
+import { type AgentFs } from "../shared/agent-fs.js";
+import { type ExecReply, type ExecRequest, type FsReply, type FsRequest } from "./protocol.js";
+/** Perform one file operation here. */
+export declare function serveFs(request: FsRequest, fs?: AgentFs): Promise<FsReply>;
+/** Run one process here, with this process's environment plus the request's, or the request's alone. */
+export declare function serveExec(request: ExecRequest, fs?: AgentFs): Promise<ExecReply>;

package/dist/agent-host/fs-service.js

@@ -0,0 +1,133 @@
+/**
+ * The host's side of the agent's file and process operations
+ * (`shared/agent-fs.ts`): each `fs` or `exec` call the runner makes is
+ * performed here, by the host process, so with the agent's rights. The
+ * runner's side is `remote-fs.ts`.
+ *
+ * A failure is an answer, not a failed call: a filesystem error comes back
+ * with its errno code, and a process that exits non-zero comes back with
+ * its code and output, so the runner rebuilds the error its caller expects.
+ * A process output larger than one message is left in a file of the host's
+ * own, which the runner reads by range and removes.
+ */
+import { randomBytes } from "node:crypto";
+import { appendFile, open, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { AgentExecError, kindOf, localAgentFs } from "../shared/agent-fs.js";
+import { FS_CHUNK_BYTES } from "./protocol.js";
+/** Perform one file operation here. */
+export async function serveFs(request, fs = localAgentFs) {
+    try {
+        return { ok: await perform(request, fs) };
+    }
+    catch (err) {
+        const failed = err;
+        return {
+            error: {
+                message: failed.message ?? String(err),
+                code: typeof failed.code === "string" ? failed.code : null,
+                syscall: failed.syscall ?? null,
+                path: failed.path ?? null,
+            },
+        };
+    }
+}
+async function perform(request, fs) {
+    switch (request.op) {
+        case "read":
+            return readRange(request.path, request.offset, Math.min(request.length, FS_CHUNK_BYTES));
+        case "write": {
+            const data = Buffer.from(request.data, "base64");
+            if (request.append)
+                await appendFile(request.path, data);
+            else
+                await fs.writeFile(request.path, data, request.mode === null ? undefined : { mode: request.mode });
+            return null;
+        }
+        case "mkdir":
+            await fs.mkdir(request.path, { recursive: request.recursive, ...(request.mode === null ? {} : { mode: request.mode }) });
+            return null;
+        case "rm":
+            await fs.rm(request.path, { recursive: request.recursive, force: request.force });
+            return null;
+        case "rmdir":
+            await fs.rmdir(request.path);
+            return null;
+        case "unlink":
+            await fs.unlink(request.path);
+            return null;
+        case "access":
+            await fs.access(request.path);
+            return null;
+        case "readlink":
+            return fs.readlink(request.path);
+        case "realpath":
+            return fs.realpath(request.path);
+        case "stat":
+        case "lstat": {
+            const stats = request.op === "stat" ? await fs.stat(request.path) : await fs.lstat(request.path);
+            return { size: stats.size, mode: stats.mode, mtimeMs: stats.mtimeMs, ctimeMs: stats.ctimeMs, ino: stats.ino, kind: kindOf(stats) };
+        }
+        case "rename":
+            await fs.rename(request.from, request.to);
+            return null;
+        case "copyFile":
+            await fs.copyFile(request.from, request.to);
+            return null;
+        case "cp":
+            await fs.cp(request.from, request.to, { recursive: request.recursive, errorOnExist: request.errorOnExist, force: request.force, verbatimSymlinks: request.verbatimSymlinks });
+            return null;
+        case "readdir":
+            return (await fs.readdir(request.path, { recursive: request.recursive })).map((entry) => ({ name: entry.name, parentPath: entry.parentPath, kind: kindOf(entry) }));
+        case "symlink":
+            await fs.symlink(request.target, request.path);
+            return null;
+    }
+}
+/** `length` bytes of `path` from `offset`, and the file's whole size: one open, so the range and the size agree. */
+async function readRange(path, offset, length) {
+    const handle = await open(path, "r");
+    try {
+        const { size } = await handle.stat();
+        const buffer = Buffer.alloc(Math.max(0, Math.min(length, size - offset)));
+        const { bytesRead } = await handle.read(buffer, 0, buffer.length, offset);
+        return { data: buffer.subarray(0, bytesRead).toString("base64"), size };
+    }
+    finally {
+        await handle.close();
+    }
+}
+/** Run one process here, with this process's environment plus the request's, or the request's alone. */
+export async function serveExec(request, fs = localAgentFs) {
+    const options = {
+        ...(request.cwd === null ? {} : { cwd: request.cwd }),
+        env: request.env,
+        replaceEnv: request.replaceEnv,
+        ...(request.timeoutMs === null ? {} : { timeoutMs: request.timeoutMs }),
+        maxBuffer: request.maxBuffer,
+        ...(request.input === null ? {} : { input: Buffer.from(request.input, "base64") }),
+    };
+    try {
+        const { stdout, stderr } = await fs.execFile(request.file, request.args, options);
+        return { stdout: await outputWire(stdout), stderr: await outputWire(stderr), failure: null };
+    }
+    catch (err) {
+        if (err instanceof AgentExecError) {
+            return {
+                stdout: await outputWire(err.stdout),
+                stderr: await outputWire(err.stderr),
+                failure: { message: err.message, code: err.code, signal: err.signal },
+            };
+        }
+        return { stdout: { inline: "" }, stderr: { inline: "" }, failure: { message: err instanceof Error ? err.message : String(err), code: null, signal: null } };
+    }
+}
+async function outputWire(output) {
+    if (output.length <= FS_CHUNK_BYTES)
+        return { inline: output.toString("base64") };
+    const spill = join(tmpdir(), `stigmer-exec-${randomBytes(12).toString("hex")}`);
+    await writeFile(spill, output, { mode: 0o600 });
+    return { spill, size: output.length };
+}
+//# sourceMappingURL=fs-service.js.map

package/dist/agent-host/fs-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs-service.js","sourceRoot":"","sources":["../../src/agent-host/fs-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,YAAY,EAAgB,MAAM,uBAAuB,CAAC;AAC3F,OAAO,EAAE,cAAc,EAAqG,MAAM,eAAe,CAAC;AAElJ,uCAAuC;AACvC,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAkB,EAAE,KAAc,YAAY;IAC1E,IAAI,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;IAC5C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAA4B,CAAC;QAC5C,OAAO;YACL,KAAK,EAAE;gBACL,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC;gBACtC,IAAI,EAAE,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;gBAC1D,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;gBAC/B,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI;aAC1B;SACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,OAAkB,EAAE,EAAW;IACpD,QAAQ,OAAO,CAAC,EAAE,EAAE,CAAC;QACnB,KAAK,MAAM;YACT,OAAO,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;QAC3F,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACjD,IAAI,OAAO,CAAC,MAAM;gBAAE,MAAM,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;;gBACpD,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YACxG,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,OAAO;YACV,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YACzH,OAAO,IAAI,CAAC;QACd,KAAK,IAAI;YACP,MAAM,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;YAClF,OAAO,IAAI,CAAC;QACd,KAAK,OAAO;YACV,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,KAAK,QAAQ;YACX,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,KAAK,QAAQ;YACX,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,KAAK,UAAU;YACb,OAAO,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnC,KAAK,UAAU;YACb,OAAO,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnC,KAAK,MAAM,CAAC;QACZ,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,KAAK,GAAG,OAAO,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACjG,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACrI,CAAC;QACD,KAAK,QAAQ;YACX,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,KAAK,UAAU;YACb,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,KAAK,IAAI;YACP,MAAM,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAC9K,OAAO,IAAI,CAAC;QACd,KAAK,SAAS;YACZ,OAAO,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACtK,KAAK,SAAS;YACZ,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAC/C,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,oHAAoH;AACpH,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,MAAc,EAAE,MAAc;IACnE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAC1E,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC;IAC1E,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,wGAAwG;AACxG,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAoB,EAAE,KAAc,YAAY;IAC9E,MAAM,OAAO,GAAG;QACd,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;QACrD,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;QACvE,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;KACnF,CAAC;IACF,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAClF,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC/F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,cAAc,EAAE,CAAC;YAClC,OAAO;gBACL,MAAM,EAAE,MAAM,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC;gBACpC,MAAM,EAAE,MAAM,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC;gBACpC,OAAO,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE;aACtE,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;IAC9J,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,MAAc;IACtC,IAAI,MAAM,CAAC,MAAM,IAAI,cAAc;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IAClF,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChF,MAAM,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAChD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;AACxC,CAAC"}

package/dist/agent-host/host-sink.d.ts

@@ -0,0 +1,63 @@
+/**
+ * The agent host's `TurnSink`: what an adapter running in the host sees as
+ * the runtime, built over the host's own copy of the turn's rows and status
+ * and answered by the runner over the pipe (`protocol.ts`).
+ *
+ * The adapter folds its engine into this copy synchronously, exactly as it
+ * folds into the runtime's rows when it runs in the runner's process:
+ * the copy, its transcript builder (`harness/transcript/builder.ts`) and
+ * the setup timeline are all local, so the adapter's code path is the one
+ * it always had. What leaves the host:
+ *
+ *  - `requestPersist` ships the adapter-owned fields as of the request
+ *    (`codec.ts`) and resolves when the runtime's chokepoint has written
+ *    them, with the runtime-owned fields that changed since applied to the
+ *    copy. Single-flight with one coalesced follow-up, as the chokepoint is
+ *    (`harness/persist-chokepoint.ts`), so a fast stream does not queue a
+ *    snapshot per request; it never rejects.
+ *  - `recordActivity`, `reportUsage` and every event the builder folds are
+ *    notices: the runtime's watchdog, cost cap and turn timeline read them.
+ *  - `reportProgress` and `bindHarnessState` are calls, because the
+ *    contract lets an adapter await them. `bindHarnessState` sends the
+ *    engine-minted id alone: the runtime records it through the session's
+ *    door, and nothing on the session record the adapter holds changes.
+ *  - `bindCasObservations` keeps the reader here and tells the runtime one
+ *    exists; the runtime pulls through `readCasObservations`.
+ *
+ * The stop is the runner's: its `stopTurn` notice aborts {@link HostTurn.stop},
+ * which is the adapter's `stopSignal`. One cause is also seen here, because
+ * it must land synchronously: the cost cap. The runtime stops a turn inside
+ * `reportUsage` on the delta that reaches the cap, so in-process the engine
+ * stops at its next step boundary; a stop that crossed the pipe would land a
+ * step later, with the next model call already in flight. So the host watches
+ * the same deltas with the same rule (`harness/cost-cap-watch.ts`) and aborts
+ * locally; the terminal is still the runtime's, from its own watch.
+ */
+import { type RunStatus } from "@stigmer/apis/ai/stigmer/agentic/run/v1/api_pb";
+import { type TurnRows } from "../gen/turn/ai/stigmer/runner/turn/v1/rows_pb.js";
+import type { TurnInput, TurnSink } from "../harness/types.js";
+import { type TimingRecorderWire } from "../shared/cold-start-timing.js";
+import type { CasTouchedReader } from "../shared/filereview/cas-touched.js";
+import type { HostNotices, HostCalls, RunnerCalls, RunnerNotices } from "./protocol.js";
+import type { Peer } from "./channel.js";
+/** The host's side of the pipe: it calls the runner and answers the runner's calls. */
+export type HostPeer = Peer<RunnerCalls, HostCalls, HostNotices, RunnerNotices>;
+/** One turn the host is running: its sink, its stop, and the CAS reader the adapter bound. */
+export declare class HostTurn {
+    private readonly peer;
+    readonly turnId: string;
+    readonly sink: TurnSink;
+    readonly status: RunStatus;
+    readonly rows: TurnRows;
+    private readonly stopController;
+    private casReader;
+    private persistInFlight;
+    private persistFollowUp;
+    constructor(peer: HostPeer, turnId: string, input: TurnInput, status: string, rows: string, timing: TimingRecorderWire);
+    /** The runtime's stop fired. */
+    stop(reason: string): void;
+    /** The reader the adapter bound, if any. */
+    get cas(): CasTouchedReader | undefined;
+    private requestPersist;
+    private persistNow;
+}