@tangle-network/agent-runtime 0.340.0 → 0.342.0

package/dist/{sandbox-profile-compat-DRr3JwDx.js → sandbox-profile-compat-FN2kab2-.js}

@@ -9,9 +9,9 @@ import { spawn } from "node:child_process";
 import { lstat, mkdir, mkdtemp, open, readFile, readdir, readlink, realpath, rename, rm, stat, writeFile } from "node:fs/promises";
 import { homedir, tmpdir } from "node:os";
 import { Readable } from "node:stream";
-import { pipeline } from "node:stream/promises";
-import { extract, pack } from "tar-stream";
 import { isAnyArrayBuffer, isSharedArrayBuffer } from "node:util/types";
+import { extract, pack } from "tar-stream";
+import { pipeline } from "node:stream/promises";
 //#region src/runtime/supervise/deadline.ts
 const MAX_TIMER_DELAY_MS = 2147483647;
 const DEFAULT_SUCCESSFUL_SHUTDOWN_MS = 5e3;
@@ -694,74 +694,6 @@ function deepFreezeCandidate(value, seen = /* @__PURE__ */ new Set()) {
 	return Object.freeze(value);
 }
 //#endregion
-//#region src/candidate-execution/artifact-streams.ts
-/** Verify the complete stream, including its final digest, before accepting its consumer's result. */
-async function* verifiedArtifactChunks(artifact, port, signal) {
-	signal?.throwIfAborted();
-	if (!("content" in artifact) && !port.readStream) throw new Error("streaming workspace artifacts require readStream");
-	const chunks = "content" in artifact ? [Buffer.from(artifact.content, "base64")] : port.readStream(artifact, { signal });
-	const hash = createHash("sha256");
-	let byteLength = 0;
-	for await (const chunk of chunks) {
-		signal?.throwIfAborted();
-		if (!(chunk instanceof Uint8Array)) throw new Error("candidate artifact emitted a non-byte chunk");
-		byteLength += chunk.byteLength;
-		if (byteLength > artifact.byteLength) throw new Error("candidate artifact exceeds its declared length");
-		hash.update(chunk);
-		yield chunk;
-	}
-	signal?.throwIfAborted();
-	if (byteLength !== artifact.byteLength || `sha256:${hash.digest("hex")}` !== artifact.sha256) throw new Error("candidate artifact failed digest or length verification");
-}
-const selfVerifyingPuts = /* @__PURE__ */ new WeakMap();
-/**
-* Declare that this exact putStream resolves only after reading its stored object back from where
-* this exact readStream reads it, and matching its digest and length. The claim belongs to the
-* pair, so a wrapper that replaces either function never inherits it.
-*/
-function markPutStreamVerified(putStream, readStream) {
-	selfVerifyingPuts.set(putStream, readStream);
-}
-/** Whether a port's putStream already read back what its readStream will return. */
-function putStreamVerifiedBy(port) {
-	return port.putStream !== void 0 && port.readStream !== void 0 && selfVerifyingPuts.get(port.putStream) === port.readStream;
-}
-/** Stream evaluator evidence into its existing store and verify durable readback before returning. */
-async function persistCandidateOutputArtifactStream(port, input) {
-	if (!port.putStream || !port.readStream) throw new Error("streaming workspace persistence requires putStream and readStream");
-	input.signal?.throwIfAborted();
-	const hash = createHash("sha256");
-	let byteLength = 0;
-	let consumed = false;
-	async function* checked() {
-		for await (const chunk of input.chunks) {
-			input.signal?.throwIfAborted();
-			if (!(chunk instanceof Uint8Array)) throw new Error("candidate artifact emitted a non-byte chunk");
-			byteLength += chunk.byteLength;
-			if (byteLength > input.maxBytes) throw new Error("candidate workspace archive exceeds maxArchiveBytes");
-			hash.update(chunk);
-			yield chunk;
-		}
-		consumed = true;
-		input.signal?.throwIfAborted();
-	}
-	const chunks = checked();
-	try {
-		const ref = agentCandidateArtifactRefSchema.parse(await port.putStream({
-			executionId: input.executionId,
-			purpose: input.purpose,
-			chunks,
-			...input.signal ? { signal: input.signal } : {}
-		}));
-		input.signal?.throwIfAborted();
-		if (!consumed || ref.sha256 !== `sha256:${hash.digest("hex")}` || ref.byteLength !== byteLength) throw new Error("candidate output locator does not identify the submitted bytes");
-		if (!putStreamVerifiedBy(port)) for await (const _chunk of verifiedArtifactChunks(ref, port, input.signal));
-		return immutableCandidateValue(ref);
-	} finally {
-		await chunks.return(void 0);
-	}
-}
-//#endregion
 //#region src/candidate-execution/artifacts.ts
 function artifactCacheKey(artifact) {
 	return `${artifact.sha256}:${artifact.byteLength}`;
@@ -1483,6 +1415,74 @@ function workspaceTarHeader(name, mode, size) {
 	};
 }
 //#endregion
+//#region src/candidate-execution/artifact-streams.ts
+/** Verify the complete stream, including its final digest, before accepting its consumer's result. */
+async function* verifiedArtifactChunks(artifact, port, signal) {
+	signal?.throwIfAborted();
+	if (!("content" in artifact) && !port.readStream) throw new Error("streaming workspace artifacts require readStream");
+	const chunks = "content" in artifact ? [Buffer.from(artifact.content, "base64")] : port.readStream(artifact, { signal });
+	const hash = createHash("sha256");
+	let byteLength = 0;
+	for await (const chunk of chunks) {
+		signal?.throwIfAborted();
+		if (!(chunk instanceof Uint8Array)) throw new Error("candidate artifact emitted a non-byte chunk");
+		byteLength += chunk.byteLength;
+		if (byteLength > artifact.byteLength) throw new Error("candidate artifact exceeds its declared length");
+		hash.update(chunk);
+		yield chunk;
+	}
+	signal?.throwIfAborted();
+	if (byteLength !== artifact.byteLength || `sha256:${hash.digest("hex")}` !== artifact.sha256) throw new Error("candidate artifact failed digest or length verification");
+}
+const selfVerifyingPuts = /* @__PURE__ */ new WeakMap();
+/**
+* Declare that this exact putStream resolves only after reading its stored object back from where
+* this exact readStream reads it, and matching its digest and length. The claim belongs to the
+* pair, so a wrapper that replaces either function never inherits it.
+*/
+function markPutStreamVerified(putStream, readStream) {
+	selfVerifyingPuts.set(putStream, readStream);
+}
+/** Whether a port's putStream already read back what its readStream will return. */
+function putStreamVerifiedBy(port) {
+	return port.putStream !== void 0 && port.readStream !== void 0 && selfVerifyingPuts.get(port.putStream) === port.readStream;
+}
+/** Stream evaluator evidence into its existing store and verify durable readback before returning. */
+async function persistCandidateOutputArtifactStream(port, input) {
+	if (!port.putStream || !port.readStream) throw new Error("streaming workspace persistence requires putStream and readStream");
+	input.signal?.throwIfAborted();
+	const hash = createHash("sha256");
+	let byteLength = 0;
+	let consumed = false;
+	async function* checked() {
+		for await (const chunk of input.chunks) {
+			input.signal?.throwIfAborted();
+			if (!(chunk instanceof Uint8Array)) throw new Error("candidate artifact emitted a non-byte chunk");
+			byteLength += chunk.byteLength;
+			if (byteLength > input.maxBytes) throw new Error("candidate workspace archive exceeds maxArchiveBytes");
+			hash.update(chunk);
+			yield chunk;
+		}
+		consumed = true;
+		input.signal?.throwIfAborted();
+	}
+	const chunks = checked();
+	try {
+		const ref = agentCandidateArtifactRefSchema.parse(await port.putStream({
+			executionId: input.executionId,
+			purpose: input.purpose,
+			chunks,
+			...input.signal ? { signal: input.signal } : {}
+		}));
+		input.signal?.throwIfAborted();
+		if (!consumed || ref.sha256 !== `sha256:${hash.digest("hex")}` || ref.byteLength !== byteLength) throw new Error("candidate output locator does not identify the submitted bytes");
+		if (!putStreamVerifiedBy(port)) for await (const _chunk of verifiedArtifactChunks(ref, port, input.signal));
+		return immutableCandidateValue(ref);
+	} finally {
+		await chunks.return(void 0);
+	}
+}
+//#endregion
 //#region src/candidate-execution/git-materialize.ts
 async function verifyCandidateCode(code, repositories, patchBytes) {
 	if (code.kind === "disabled") return void 0;
@@ -2528,6 +2528,6 @@ function refuseSandboxProfileField(field, context = "candidate profile") {
 	throw new ValidationError(`${context} field ${field} is refused: Sandbox's Interface 4.0.0 cannot carry it yet, and Runtime does not drop it`);
 }
 //#endregion
-export { isAbortError as $, verifyWorkspaceSnapshotArtifacts as A, sha256Bytes$1 as B, candidateWorkspaceManifest as C, armDeadlineTimer as Ct, verifyBytes as D, singleFlightTeardown as Dt, readVerifiedArtifact as E, isDeadlineAbortReason as Et, canonicalCandidateDocument as F, addTokenUsage as G, hasControlCharacter as H, deepFreezeCandidate as I, cloneTokenUsage as J, chargedTokens as K, embeddedCandidateArtifact as L, verifiedArtifactChunks as M, canonicalCandidateBytes$1 as N, verifyMaterializedProfileWorkspace as O, teardownExecutor as Ot, canonicalCandidateDigest$1 as P, hasCompleteCacheBreakdown as Q, immutableCandidateValue as R, artifactCacheKey as S, ROOT_DEADLINE_REASON as St, readMaterializedWorkspaceFiles as T, checkInIdleMs as Tt, abortError as U, verifyCanonicalCandidateDocument as V, addSpend as W, errorMessage as X, deleteBoxSafe as Y, fnv1a32Hex as Z, workspaceLimits as _, withBudgetResources as _t, materializeAgentCandidateWorkspaceFromArtifacts as a, roundBoxMinutes as at, isWellFormedUnicode as b, DEADLINE_CHECK_IN_MESSAGE as bt, verifyAgentCandidateWorkspaceTree as c, throwAbort as ct, readCandidateGitHubResource as d, withTimeout as dt, isAsyncIterable as et, verifyCandidateCode as f, zeroSpend as ft, verifyAgentCandidateWorkspaceArchive as g, resourceTelemetry as gt, captureAgentCandidateWorkspaceFiles as h, assertResources as ht, captureAgentCandidateWorkspaceTreeToArtifacts as i, randomUuid as it, markPutStreamVerified as j, verifyMaterializedWorkspace as k, teardownSurfaces as kt, captureAgentCandidateWorkspace as l, throwIfAborted as lt, verifyTaskOutcomePatch as m, addResourceSpend as mt, refuseSandboxProfileField as n, promptCacheTokenClasses as nt, readAgentCandidateWorkspaceArtifactFiles as o, sleep as ot, verifyTaskCheckout as p, zeroTokenUsage as pt, cloneSpend as q, captureAgentCandidateWorkspaceToArtifacts as r, randomSuffix as rt, verifyAgentCandidateWorkspaceArtifacts as s, stringifySafe as st, assertSandboxProfileCompatibility as t, mapWithConcurrency as tt, createAgentCandidateWorkspacePort as u, unmeteredSpend as ut, persistCandidateOutputArtifact as v, ACCEPTED_RESULT_GRACE_MS as vt, captureMaterializedWorkspace as w, boundedChildDeadlineAt as wt, WorkspaceScanLimitError as x, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as xt, assertExactObjectKeys as y, CHILD_DEADLINE_REASON as yt, omitTopLevelDigest as z };
+export { isAbortError as $, verifyMaterializedProfileWorkspace as A, sha256Bytes$1 as B, WorkspaceScanLimitError as C, armDeadlineTimer as Ct, readMaterializedWorkspaceFiles as D, singleFlightTeardown as Dt, captureMaterializedWorkspace as E, isDeadlineAbortReason as Et, canonicalCandidateDocument as F, addTokenUsage as G, hasControlCharacter as H, deepFreezeCandidate as I, cloneTokenUsage as J, chargedTokens as K, embeddedCandidateArtifact as L, verifyWorkspaceSnapshotArtifacts as M, canonicalCandidateBytes$1 as N, readVerifiedArtifact as O, teardownExecutor as Ot, canonicalCandidateDigest$1 as P, hasCompleteCacheBreakdown as Q, immutableCandidateValue as R, isWellFormedUnicode as S, ROOT_DEADLINE_REASON as St, candidateWorkspaceManifest as T, checkInIdleMs as Tt, abortError as U, verifyCanonicalCandidateDocument as V, addSpend as W, errorMessage as X, deleteBoxSafe as Y, fnv1a32Hex as Z, captureAgentCandidateWorkspaceFiles as _, withBudgetResources as _t, materializeAgentCandidateWorkspaceFromArtifacts as a, roundBoxMinutes as at, persistCandidateOutputArtifact as b, DEADLINE_CHECK_IN_MESSAGE as bt, verifyAgentCandidateWorkspaceTree as c, throwAbort as ct, readCandidateGitHubResource as d, withTimeout as dt, isAsyncIterable as et, verifyCandidateCode as f, zeroSpend as ft, verifiedArtifactChunks as g, resourceTelemetry as gt, markPutStreamVerified as h, assertResources as ht, captureAgentCandidateWorkspaceTreeToArtifacts as i, randomUuid as it, verifyMaterializedWorkspace as j, verifyBytes as k, teardownSurfaces as kt, captureAgentCandidateWorkspace as l, throwIfAborted as lt, verifyTaskOutcomePatch as m, addResourceSpend as mt, refuseSandboxProfileField as n, promptCacheTokenClasses as nt, readAgentCandidateWorkspaceArtifactFiles as o, sleep as ot, verifyTaskCheckout as p, zeroTokenUsage as pt, cloneSpend as q, captureAgentCandidateWorkspaceToArtifacts as r, randomSuffix as rt, verifyAgentCandidateWorkspaceArtifacts as s, stringifySafe as st, assertSandboxProfileCompatibility as t, mapWithConcurrency as tt, createAgentCandidateWorkspacePort as u, unmeteredSpend as ut, verifyAgentCandidateWorkspaceArchive as v, ACCEPTED_RESULT_GRACE_MS as vt, artifactCacheKey as w, boundedChildDeadlineAt as wt, assertExactObjectKeys as x, DEFAULT_SUCCESSFUL_SHUTDOWN_MS as xt, workspaceLimits as y, CHILD_DEADLINE_REASON as yt, omitTopLevelDigest as z };
 
-//# sourceMappingURL=sandbox-profile-compat-DRr3JwDx.js.map
+//# sourceMappingURL=sandbox-profile-compat-FN2kab2-.js.map