@sweny-ai/core 0.1.180 → 0.1.182

package/dist/harness/sandbox-wrapper.js

@@ -35,7 +35,9 @@
  * socat for step 1: install it with `npm i -g @anthropic-ai/sandbox-runtime`, or
  * point `SWENY_SRT_PATH` at the binary. Linux also needs bubblewrap, socat and
  * ripgrep, and unprivileged user namespaces (Ubuntu 23.10+:
- * `sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0`).
+ * `sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0`; Ubuntu 26.04
+ * also `sudo apparmor_parser -R /etc/apparmor.d/bwrap-userns-restrict`, see
+ * {@link usernsHint}).
  *
  * Modes are the step 1 modes, unchanged (`SWENY_SANDBOX`, default `auto` in CI
  * and `off` locally): `off` never wraps; `auto` wraps when a wrapper is
@@ -47,7 +49,7 @@ import { existsSync, realpathSync } from "node:fs";
 import { lstat, mkdir, mkdtemp, realpath, rm, writeFile } from "node:fs/promises";
 import { homedir, tmpdir } from "node:os";
 import * as path from "node:path";
-import { DEFAULT_SANDBOX_DOMAINS, parseList, resolveSandboxMode } from "../agent-env.js";
+import { DEFAULT_SANDBOX_DOMAINS, parseList, probeLine, resolveSandboxMode, usernsHint, } from "../agent-env.js";
 import { runStateRoot } from "../journal.js";
 import { policyGate } from "./policy.js";
 // ─── srt settings ────────────────────────────────────────────────
@@ -256,14 +258,8 @@ async function srtWorks(srtPath, env) {
             execFile(srtPath, ["--settings", settings, "--", "true"], { env: { PATH: env.PATH ?? "", HOME: dir }, timeout: 30_000 }, (err, _stdout, stderr) => {
                 if (!err)
                     return resolve(undefined);
-                const first = String(stderr || err.message)
-                    .trim()
-                    .split("\n")[0] || "unknown error";
-                const userns = /user namespace|uid map|setting up uid|Operation not permitted|Permission denied/i.test(String(stderr));
-                resolve(`srt cannot sandbox on this host (${first})` +
-                    (userns
-                        ? "; unprivileged user namespaces look restricted (Ubuntu 23.10+: sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0)"
-                        : ""));
+                const first = probeLine(String(stderr || err.message));
+                resolve(`srt cannot sandbox on this host (${first})${usernsHint(String(stderr))}`);
             });
         });
     }

package/dist/inputs.d.ts

@@ -69,37 +69,18 @@ export interface WorkflowInputField {
 }
 /** Declared input contract for a workflow. Keys are field names. */
 export type WorkflowInputs = Record<string, WorkflowInputField>;
-export declare const workflowInputsZ: z.ZodRecord<z.ZodString, z.ZodEffects<z.ZodObject<{
-    type: z.ZodEnum<["string", "number", "boolean", "string[]"]>;
+export declare const workflowInputsZ: z.ZodRecord<z.ZodString, z.ZodObject<{
+    type: z.ZodEnum<{
+        string: "string";
+        number: "number";
+        boolean: "boolean";
+        "string[]": "string[]";
+    }>;
     description: z.ZodOptional<z.ZodString>;
     required: z.ZodOptional<z.ZodBoolean>;
     default: z.ZodOptional<z.ZodUnknown>;
-    enum: z.ZodOptional<z.ZodArray<z.ZodUnknown, "many">>;
-}, "strict", z.ZodTypeAny, {
-    type: "string" | "number" | "boolean" | "string[]";
-    description?: string | undefined;
-    required?: boolean | undefined;
-    default?: unknown;
-    enum?: unknown[] | undefined;
-}, {
-    type: "string" | "number" | "boolean" | "string[]";
-    description?: string | undefined;
-    required?: boolean | undefined;
-    default?: unknown;
-    enum?: unknown[] | undefined;
-}>, {
-    type: "string" | "number" | "boolean" | "string[]";
-    description?: string | undefined;
-    required?: boolean | undefined;
-    default?: unknown;
-    enum?: unknown[] | undefined;
-}, {
-    type: "string" | "number" | "boolean" | "string[]";
-    description?: string | undefined;
-    required?: boolean | undefined;
-    default?: unknown;
-    enum?: unknown[] | undefined;
-}>>;
+    enum: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
+}, z.core.$strict>>;
 /** A single validation error against the declared input contract. */
 export interface InputValidationError {
     field: string;

package/dist/inputs.js

@@ -101,7 +101,7 @@ const workflowInputFieldZ = z
         }
     }
 });
-export const workflowInputsZ = z.record(workflowInputFieldZ);
+export const workflowInputsZ = z.record(z.string(), workflowInputFieldZ);
 /**
  * Validate the caller's raw input object against the workflow's declared
  * `inputs` block. Applies defaults for omitted optional fields. Surfaces