@trigger.dev/sdk 4.4.5 → 4.5.0-rc.0

package/dist/commonjs/v3/test/test-session-handle.js

@@ -0,0 +1,256 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TestSessionOutputChannel = void 0;
+exports.createTestSessionHandle = createTestSessionHandle;
+const v3_1 = require("@trigger.dev/core/v3");
+const sessions_js_1 = require("../sessions.js");
+/**
+ * Stub for `SessionInputChannel.wait` that skips the apiClient round-trip
+ * the production path makes via `createSessionStreamWaitpoint`. Without
+ * this override, every test that exercises the suspend fallback (e.g.
+ * the `chat.handover` idle-timeout case) throws `ApiClientMissingError`
+ * because `apiClientManager.clientOrThrow()` runs in a test process that
+ * has no `TRIGGER_SECRET_KEY`.
+ *
+ * The promise resolves with `{ ok: false, error }` when the harness
+ * aborts its run signal — that mimics production semantics (suspended
+ * until something happens, returns cleanly on abort) without making a
+ * network call.
+ */
+class TestSessionInputChannel extends sessions_js_1.SessionInputChannel {
+    getAbortSignal;
+    constructor(sessionId, getAbortSignal) {
+        super(sessionId);
+        this.getAbortSignal = getAbortSignal;
+    }
+    // Override only the `wait` path. `on` / `once` / `peek` / `send`
+    // continue to flow through the real `sessionStreams` global, which
+    // the mock task context installs as a `TestSessionStreamManager`.
+    wait() {
+        return new v3_1.ManualWaitpointPromise((resolve) => {
+            const signal = this.getAbortSignal();
+            if (!signal) {
+                // Harness hasn't wired up its run signal yet — nothing to abort
+                // on. Stay pending; the run loop should never reach this state
+                // in practice but we don't want to throw here either.
+                return;
+            }
+            const onAbort = () => {
+                resolve({
+                    ok: false,
+                    error: new Error("session.in.wait() aborted by test harness"),
+                });
+            };
+            if (signal.aborted) {
+                onAbort();
+                return;
+            }
+            signal.addEventListener("abort", onAbort, { once: true });
+        });
+    }
+}
+function notify(state, chunk) {
+    state.chunks.push(chunk);
+    for (const listener of state.listeners) {
+        try {
+            listener(chunk);
+        }
+        catch {
+            // Never let a listener error break stream writes
+        }
+    }
+}
+async function drainInto(source, state) {
+    const readable = (0, v3_1.ensureReadableStream)(source);
+    const reader = readable.getReader();
+    try {
+        while (true) {
+            const { done, value } = await reader.read();
+            if (done)
+                return;
+            notify(state, value);
+        }
+    }
+    finally {
+        try {
+            reader.releaseLock();
+        }
+        catch {
+            // ignore
+        }
+    }
+}
+/**
+ * `.out` channel that captures writes in memory instead of piping to S2.
+ * Mirrors {@link SessionOutputChannel}'s public shape — `pipe` / `writer`
+ * / `append` / `read` — so the agent's existing code paths work unchanged.
+ */
+class TestSessionOutputChannel extends sessions_js_1.SessionOutputChannel {
+    state;
+    constructor(sessionId, state) {
+        super(sessionId);
+        this.state = state;
+    }
+    async append(value, _options) {
+        notify(this.state, value);
+    }
+    pipe(value, _options) {
+        const state = this.state;
+        const readChunks = [];
+        let resolveDone;
+        const done = new Promise((resolve) => {
+            resolveDone = resolve;
+        });
+        (async () => {
+            const readable = (0, v3_1.ensureReadableStream)(value);
+            const reader = readable.getReader();
+            try {
+                while (true) {
+                    const { done: d, value: v } = await reader.read();
+                    if (d)
+                        return;
+                    readChunks.push(v);
+                    notify(state, v);
+                }
+            }
+            finally {
+                try {
+                    reader.releaseLock();
+                }
+                catch {
+                    // ignore
+                }
+                resolveDone();
+            }
+        })().catch(() => {
+            resolveDone();
+        });
+        const replayStream = new ReadableStream({
+            async start(controller) {
+                await done;
+                for (const chunk of readChunks)
+                    controller.enqueue(chunk);
+                controller.close();
+            },
+        });
+        const emptyResult = {};
+        return {
+            get stream() {
+                return replayStream;
+            },
+            waitUntilComplete: async () => {
+                await done;
+                return emptyResult;
+            },
+        };
+    }
+    writer(options) {
+        let controller;
+        const ongoing = [];
+        const state = this.state;
+        const stream = new ReadableStream({
+            start(c) {
+                controller = c;
+            },
+        });
+        const safeEnqueue = (data) => {
+            try {
+                controller.enqueue(data);
+            }
+            catch {
+                // Stream already closed
+            }
+        };
+        try {
+            const result = options.execute({
+                write(part) {
+                    safeEnqueue(part);
+                    notify(state, part);
+                },
+                merge(streamArg) {
+                    ongoing.push(drainInto(streamArg, state).catch(() => { }));
+                },
+            });
+            if (result) {
+                ongoing.push(result.catch(() => { }));
+            }
+        }
+        catch {
+            // Swallow — tests can inspect state.chunks
+        }
+        const done = (async () => {
+            while (ongoing.length > 0) {
+                await ongoing.shift();
+            }
+        })().finally(() => {
+            try {
+                controller.close();
+            }
+            catch {
+                // Already closed
+            }
+        });
+        const emptyResult = {};
+        return {
+            get stream() {
+                return stream;
+            },
+            waitUntilComplete: async () => {
+                await done;
+                return emptyResult;
+            },
+        };
+    }
+    async read(_options) {
+        throw new Error("TestSessionOutputChannel.read() is not supported in the mock-chat-agent harness — " +
+            "inspect `harness.allChunks` / `harness.allRawChunks` instead.");
+    }
+    /**
+     * Override the one-shot control-record path. In production this goes
+     * direct to S2 with header-form records; in tests we project it back
+     * into the chunk-shape the harness already understands (the listener
+     * watches for `{type: "trigger:turn-complete"}` to drive turn-complete
+     * latches). Returns an empty `StreamWriteResult` — tests don't observe
+     * the seq_num, and trim seeding only matters in production.
+     */
+    async writeControl(subtype, extraHeaders) {
+        const synthetic = { type: `trigger:${subtype}` };
+        if (extraHeaders) {
+            for (const [name, value] of extraHeaders) {
+                if (name === "public-access-token") {
+                    synthetic.publicAccessToken = value;
+                }
+            }
+        }
+        notify(this.state, synthetic);
+        return {};
+    }
+    /**
+     * No-op in the mock harness. Production trims keep `session.out` bounded;
+     * the in-memory `state.chunks` array doesn't need trimming and tests
+     * that care about trim behaviour exercise it via the real S2 code path.
+     */
+    async trimTo(_earliestSeqNum) {
+        // Intentionally a no-op for the mock harness.
+    }
+}
+exports.TestSessionOutputChannel = TestSessionOutputChannel;
+/**
+ * Construct a {@link SessionHandle} whose `.out` channel captures writes in
+ * memory and whose `.in` channel routes through the `sessionStreams`
+ * global for record subscriptions (`on` / `once` / `peek`) but stubs
+ * `wait()` to skip the apiClient round-trip — see
+ * {@link TestSessionInputChannel}.
+ *
+ * `getAbortSignal` lets the channel observe the harness's run signal so
+ * `wait()` resolves cleanly on close. Pass a getter (not the signal
+ * directly) so the channel reads it lazily — the harness creates its
+ * `AbortController` after the override is installed.
+ */
+function createTestSessionHandle(sessionId, state, getAbortSignal = () => undefined) {
+    return new sessions_js_1.SessionHandle(sessionId, {
+        in: new TestSessionInputChannel(sessionId, getAbortSignal),
+        out: new TestSessionOutputChannel(sessionId, state),
+    });
+}
+//# sourceMappingURL=test-session-handle.js.map

package/dist/commonjs/v3/test/test-session-handle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-session-handle.js","sourceRoot":"","sources":["../../../../src/v3/test/test-session-handle.ts"],"names":[],"mappings":";;;AAmSA,0DASC;AAtSD,6CAAoF;AACpF,gDAMwB;AAExB;;;;;;;;;;;;GAYG;AACH,MAAM,uBAAwB,SAAQ,iCAAmB;IACP;IAAhD,YAAY,SAAiB,EAAmB,cAA6C;QAC3F,KAAK,CAAC,SAAS,CAAC,CAAC;QAD6B,mBAAc,GAAd,cAAc,CAA+B;IAE7F,CAAC;IAED,iEAAiE;IACjE,mEAAmE;IACnE,kEAAkE;IAClE,IAAI;QACF,OAAO,IAAI,2BAAsB,CAAI,CAAC,OAAqD,EAAE,EAAE;YAC7F,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;YACrC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,gEAAgE;gBAChE,+DAA+D;gBAC/D,sDAAsD;gBACtD,OAAO;YACT,CAAC;YACD,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,OAAO,CAAC;oBACN,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,IAAI,KAAK,CAAC,2CAA2C,CAAC;iBAC9D,CAAC,CAAC;YACL,CAAC,CAAC;YACF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,OAAO,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAaD,SAAS,MAAM,CAAC,KAA0B,EAAE,KAAc;IACxD,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,QAAQ,CAAC,KAAK,CAAC,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,iDAAiD;QACnD,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,MAA4C,EAC5C,KAA0B;IAE1B,MAAM,QAAQ,GAAG,IAAA,yBAAoB,EAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,OAAO;YACjB,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAa,wBAAyB,SAAQ,kCAAoB;IAG7C;IAFnB,YACE,SAAiB,EACA,KAA0B;QAE3C,KAAK,CAAC,SAAS,CAAC,CAAC;QAFA,UAAK,GAAL,KAAK,CAAqB;IAG7C,CAAC;IAED,KAAK,CAAC,MAAM,CAAI,KAAQ,EAAE,QAAmC;QAC3D,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;IAED,IAAI,CACF,KAA2C,EAC3C,QAAmC;QAEnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,MAAM,UAAU,GAAQ,EAAE,CAAC;QAC3B,IAAI,WAAwB,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YACzC,WAAW,GAAG,OAAO,CAAC;QACxB,CAAC,CAAC,CAAC;QAEH,CAAC,KAAK,IAAI,EAAE;YACV,MAAM,QAAQ,GAAG,IAAA,yBAAoB,EAAC,KAAK,CAAC,CAAC;YAC7C,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,OAAO,IAAI,EAAE,CAAC;oBACZ,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;oBAClD,IAAI,CAAC;wBAAE,OAAO;oBACd,UAAU,CAAC,IAAI,CAAC,CAAM,CAAC,CAAC;oBACxB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBACnB,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC;oBACH,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvB,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,WAAW,EAAE,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;YACd,WAAW,EAAE,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,IAAI,cAAc,CAAI;YACzC,KAAK,CAAC,KAAK,CAAC,UAAU;gBACpB,MAAM,IAAI,CAAC;gBACX,KAAK,MAAM,KAAK,IAAI,UAAU;oBAAE,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC1D,UAAU,CAAC,KAAK,EAAE,CAAC;YACrB,CAAC;SACF,CAAC,CAAC;QAEH,MAAM,WAAW,GAAsB,EAAE,CAAC;QAE1C,OAAO;YACL,IAAI,MAAM;gBACR,OAAO,YAAsC,CAAC;YAChD,CAAC;YACD,iBAAiB,EAAE,KAAK,IAAI,EAAE;gBAC5B,MAAM,IAAI,CAAC;gBACX,OAAO,WAAW,CAAC;YACrB,CAAC;SACF,CAAC;IACJ,CAAC;IAED,MAAM,CAAI,OAA+B;QACvC,IAAI,UAA+C,CAAC;QACpD,MAAM,OAAO,GAAoB,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QAEzB,MAAM,MAAM,GAAG,IAAI,cAAc,CAAI;YACnC,KAAK,CAAC,CAAC;gBACL,UAAU,GAAG,CAAC,CAAC;YACjB,CAAC;SACF,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,CAAC,IAAO,EAAE,EAAE;YAC9B,IAAI,CAAC;gBACH,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;YAC1B,CAAC;QACH,CAAC,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;gBAC7B,KAAK,CAAC,IAAI;oBACR,WAAW,CAAC,IAAI,CAAC,CAAC;oBAClB,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBACtB,CAAC;gBACD,KAAK,CAAC,SAAS;oBACb,OAAO,CAAC,IAAI,CACV,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAC5C,CAAC;gBACJ,CAAC;aACF,CAAC,CAAC;YAEH,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,2CAA2C;QAC7C,CAAC;QAED,MAAM,IAAI,GAAkB,CAAC,KAAK,IAAI,EAAE;YACtC,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;YACxB,CAAC;QACH,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YAChB,IAAI,CAAC;gBACH,UAAU,CAAC,KAAK,EAAE,CAAC;YACrB,CAAC;YAAC,MAAM,CAAC;gBACP,iBAAiB;YACnB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,WAAW,GAAsB,EAAE,CAAC;QAE1C,OAAO;YACL,IAAI,MAAM;gBACR,OAAO,MAAgC,CAAC;YAC1C,CAAC;YACD,iBAAiB,EAAE,KAAK,IAAI,EAAE;gBAC5B,MAAM,IAAI,CAAC;gBACX,OAAO,WAAW,CAAC;YACrB,CAAC;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAI,QAAqC;QACjD,MAAM,IAAI,KAAK,CACb,oFAAoF;YAClF,+DAA+D,CAClE,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,YAAY,CAChB,OAAe,EACf,YAAuD;QAEvD,MAAM,SAAS,GAA4B,EAAE,IAAI,EAAE,WAAW,OAAO,EAAE,EAAE,CAAC;QAC1E,IAAI,YAAY,EAAE,CAAC;YACjB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,YAAY,EAAE,CAAC;gBACzC,IAAI,IAAI,KAAK,qBAAqB,EAAE,CAAC;oBACnC,SAAS,CAAC,iBAAiB,GAAG,KAAK,CAAC;gBACtC,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC9B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM,CAAC,eAAuB;QAClC,8CAA8C;IAChD,CAAC;CACF;AAzKD,4DAyKC;AAED;;;;;;;;;;;GAWG;AACH,SAAgB,uBAAuB,CACrC,SAAiB,EACjB,KAA0B,EAC1B,iBAAgD,GAAG,EAAE,CAAC,SAAS;IAE/D,OAAO,IAAI,2BAAa,CAAC,SAAS,EAAE;QAClC,EAAE,EAAE,IAAI,uBAAuB,CAAC,SAAS,EAAE,cAAc,CAAC;QAC1D,GAAG,EAAE,IAAI,wBAAwB,CAAC,SAAS,EAAE,KAAK,CAAC;KACpD,CAAC,CAAC;AACL,CAAC"}

package/dist/commonjs/version.js

@@ -1,5 +1,5 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.VERSION = void 0;
-exports.VERSION = "4.4.5";
+exports.VERSION = "4.5.0-rc.0";
 //# sourceMappingURL=version.js.map

package/dist/esm/v3/agentSkillsRuntime.d.ts

@@ -0,0 +1,28 @@
+export type BashSkillInput = {
+    /** Absolute path to the skill's root (used as `cwd`). */
+    skillPath: string;
+    /** The bash command to run. */
+    command: string;
+    /** Optional abort signal forwarded to `spawn()`. */
+    abortSignal?: AbortSignal;
+};
+export type BashSkillResult = {
+    exitCode: number | null;
+    stdout: string;
+    stderr: string;
+} | {
+    error: string;
+};
+export type ReadFileInSkillInput = {
+    /** Absolute path to the skill's root — the relative path must resolve inside it. */
+    skillPath: string;
+    /** Relative path the tool caller supplied. */
+    relativePath: string;
+};
+export type ReadFileInSkillResult = {
+    content: string;
+} | {
+    error: string;
+};
+export declare function readFileInSkill({ skillPath, relativePath, }: ReadFileInSkillInput): Promise<ReadFileInSkillResult>;
+export declare function runBashInSkill({ skillPath, command, abortSignal, }: BashSkillInput): Promise<BashSkillResult>;

package/dist/esm/v3/agentSkillsRuntime.js

@@ -0,0 +1,136 @@
+import { spawn } from "node:child_process";
+import * as fs from "node:fs/promises";
+import * as nodePath from "node:path";
+/**
+ * Server-only runtime for the auto-injected skill tools
+ * (`loadSkill` / `readFile` / `bash`) that `chat.agent({ skills })`
+ * wires up. Split off from `./ai.ts` so the chat-agent surface in
+ * `@trigger.dev/sdk/ai` stays importable from client bundles —
+ * Next.js + Webpack reject top-level `node:*` imports anywhere in a
+ * client graph, even when a consumer only pulls in types.
+ *
+ * The SDK's `ai.ts` loads this module via a computed-string dynamic
+ * import inside each tool's `execute` — webpack treats the
+ * expression as an unknown dependency and skips static tracing, so
+ * the node-only symbols here never surface in a client build. The
+ * module resolves fine at runtime on a server worker because the
+ * relative path (`./agentSkillsRuntime.js`) lands next to `ai.js` in
+ * the emitted dist.
+ *
+ * Public subpath: `@trigger.dev/sdk/ai/skills-runtime`. Customers
+ * who want to eagerly bundle the runtime server-side (e.g. warming
+ * it on worker bootstrap) can import from there.
+ */
+const DEFAULT_BASH_OUTPUT_BYTES = 64 * 1024;
+const DEFAULT_READ_FILE_BYTES = 1024 * 1024;
+function truncate(s, limit) {
+    if (s.length <= limit)
+        return s;
+    return s.slice(0, limit) + `\n…[truncated ${s.length - limit} bytes]`;
+}
+/**
+ * Path-traversal guard: confirm `relative` resolves inside `root`,
+ * even after symlinks are followed. Throws if it escapes via `..`, an
+ * absolute prefix, or a symlink that points outside. Returns the
+ * resolved real path.
+ *
+ * `fs.realpath` only works on paths that exist, so when the resolved
+ * path doesn't exist yet (e.g. writing a new file) we fall back to
+ * the lexical check — a non-existent path can't traverse a symlink
+ * to escape since the symlink doesn't exist either.
+ */
+async function safeJoinInside(root, relative) {
+    if (nodePath.isAbsolute(relative)) {
+        throw new Error(`Path must be relative to the skill directory: ${relative}`);
+    }
+    const realRoot = await fs.realpath(nodePath.resolve(root));
+    const resolved = nodePath.resolve(realRoot, relative);
+    let real = resolved;
+    try {
+        real = await fs.realpath(resolved);
+    }
+    catch (err) {
+        if (err.code !== "ENOENT") {
+            throw err;
+        }
+        // Path doesn't exist yet; fall through with the lexical resolve.
+    }
+    const normalized = realRoot + nodePath.sep;
+    if (real !== realRoot && !real.startsWith(normalized)) {
+        throw new Error(`Path escapes the skill directory: ${relative}`);
+    }
+    return real;
+}
+export async function readFileInSkill({ skillPath, relativePath, }) {
+    let absolute;
+    try {
+        absolute = await safeJoinInside(skillPath, relativePath);
+    }
+    catch (err) {
+        return { error: err.message };
+    }
+    try {
+        const content = await fs.readFile(absolute, "utf8");
+        return { content: truncate(content, DEFAULT_READ_FILE_BYTES) };
+    }
+    catch (err) {
+        return { error: err.message };
+    }
+}
+export async function runBashInSkill({ skillPath, command, abortSignal, }) {
+    return new Promise((resolvePromise) => {
+        let child;
+        try {
+            child = spawn("bash", ["-c", command], {
+                cwd: skillPath,
+                signal: abortSignal,
+            });
+        }
+        catch (err) {
+            resolvePromise({ error: err.message });
+            return;
+        }
+        // Cap stdout/stderr accumulation at the byte budget so an
+        // LLM-generated command (`cat /dev/zero`, `yes`) can't OOM the
+        // worker. Track total seen length separately so the truncation
+        // notice still reports how much was dropped.
+        let stdout = "";
+        let stderr = "";
+        let stdoutSeen = 0;
+        let stderrSeen = 0;
+        const limit = DEFAULT_BASH_OUTPUT_BYTES;
+        child.stdout?.on("data", (chunk) => {
+            const text = chunk.toString();
+            stdoutSeen += text.length;
+            if (stdout.length >= limit)
+                return;
+            const remaining = limit - stdout.length;
+            stdout += text.length > remaining ? text.slice(0, remaining) : text;
+        });
+        child.stderr?.on("data", (chunk) => {
+            const text = chunk.toString();
+            stderrSeen += text.length;
+            if (stderr.length >= limit)
+                return;
+            const remaining = limit - stderr.length;
+            stderr += text.length > remaining ? text.slice(0, remaining) : text;
+        });
+        child.once("close", (code) => {
+            const stdoutFinal = stdoutSeen > stdout.length
+                ? `${stdout}\n…[truncated ${stdoutSeen - stdout.length} bytes]`
+                : stdout;
+            const stderrFinal = stderrSeen > stderr.length
+                ? `${stderr}\n…[truncated ${stderrSeen - stderr.length} bytes]`
+                : stderr;
+            resolvePromise({
+                exitCode: code,
+                stdout: stdoutFinal,
+                stderr: stderrFinal,
+            });
+        });
+        child.once("error", (err) => {
+            resolvePromise({ error: err.message });
+        });
+    });
+}
+//# sourceMappingURL=agentSkillsRuntime.js.map

package/dist/esm/v3/agentSkillsRuntime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentSkillsRuntime.js","sourceRoot":"","sources":["../../../src/v3/agentSkillsRuntime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,QAAQ,MAAM,WAAW,CAAC;AAEtC;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,yBAAyB,GAAG,EAAE,GAAG,IAAI,CAAC;AAC5C,MAAM,uBAAuB,GAAG,IAAI,GAAG,IAAI,CAAC;AAwB5C,SAAS,QAAQ,CAAC,CAAS,EAAE,KAAa;IACxC,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK;QAAE,OAAO,CAAC,CAAC;IAChC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,iBAAiB,CAAC,CAAC,MAAM,GAAG,KAAK,SAAS,CAAC;AACxE,CAAC;AAED;;;;;;;;;;GAUG;AACH,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,QAAgB;IAC1D,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,iDAAiD,QAAQ,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACtD,IAAI,IAAI,GAAG,QAAQ,CAAC;IACpB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,iEAAiE;IACnE,CAAC;IACD,MAAM,UAAU,GAAG,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC;IAC3C,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,qCAAqC,QAAQ,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EACpC,SAAS,EACT,YAAY,GACS;IACrB,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;IAC3C,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACpD,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC,EAAE,CAAC;IACjE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EACnC,SAAS,EACT,OAAO,EACP,WAAW,GACI;IACf,OAAO,IAAI,OAAO,CAAkB,CAAC,cAAc,EAAE,EAAE;QACrD,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YACH,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE;gBACrC,GAAG,EAAE,SAAS;gBACd,MAAM,EAAE,WAAW;aACpB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,cAAc,CAAC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QAED,0DAA0D;QAC1D,+DAA+D;QAC/D,+DAA+D;QAC/D,6CAA6C;QAC7C,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,MAAM,KAAK,GAAG,yBAAyB,CAAC;QACxC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;YAClD,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC9B,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC;YAC1B,IAAI,MAAM,CAAC,MAAM,IAAI,KAAK;gBAAE,OAAO;YACnC,MAAM,SAAS,GAAG,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;YACxC,MAAM,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACtE,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;YAClD,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC9B,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC;YAC1B,IAAI,MAAM,CAAC,MAAM,IAAI,KAAK;gBAAE,OAAO;YACnC,MAAM,SAAS,GAAG,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;YACxC,MAAM,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACtE,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAmB,EAAE,EAAE;YAC1C,MAAM,WAAW,GACf,UAAU,GAAG,MAAM,CAAC,MAAM;gBACxB,CAAC,CAAC,GAAG,MAAM,iBAAiB,UAAU,GAAG,MAAM,CAAC,MAAM,SAAS;gBAC/D,CAAC,CAAC,MAAM,CAAC;YACb,MAAM,WAAW,GACf,UAAU,GAAG,MAAM,CAAC,MAAM;gBACxB,CAAC,CAAC,GAAG,MAAM,iBAAiB,UAAU,GAAG,MAAM,CAAC,MAAM,SAAS;gBAC/D,CAAC,CAAC,MAAM,CAAC;YACb,cAAc,CAAC;gBACb,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE,WAAW;aACpB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;YACjC,cAAc,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/esm/v3/ai-shared.d.ts

@@ -0,0 +1,173 @@
+/**
+ * Browser-safe primitives shared between `@trigger.dev/sdk/ai` (server) and
+ * `@trigger.dev/sdk/chat` / `@trigger.dev/sdk/chat/react` (client).
+ *
+ * This module exists to keep `ai.ts` reachable only from the server graph.
+ * `ai.ts` weighs in at ~7000 lines and statically imports the agent-skills
+ * runtime (which uses `node:child_process` / `node:fs/promises`). When a
+ * browser bundle imports a runtime value from `ai.ts` — historically the
+ * `PENDING_MESSAGE_INJECTED_TYPE` constant in `chat-react.ts` — the bundler
+ * traces `ai.ts`'s entire module graph into the client chunk and hits the
+ * `node:` builtins, which Turbopack rejects outright (and webpack flags as
+ * a "Critical dependency" warning).
+ *
+ * Anything in this file MUST stay free of `node:*` imports and free of any
+ * import from `ai.ts`.
+ */
+import type { Task, AnyTask } from "@trigger.dev/core/v3";
+import type { ModelMessage, UIMessage } from "ai";
+/**
+ * Message-part `type` value for the pending-message data part the agent
+ * injects when a follow-up message arrives mid-turn.
+ */
+export declare const PENDING_MESSAGE_INJECTED_TYPE: "data-pending-message-injected";
+/**
+ * The wire payload shape sent by `TriggerChatTransport`.
+ * Uses `metadata` to match the AI SDK's `ChatRequestOptions` field name.
+ *
+ * Slim wire: at most ONE message per record. The agent runtime
+ * reconstructs prior history at run boot from a durable S3 snapshot +
+ * `session.out` replay (or `hydrateMessages` if registered). The wire is
+ * delta-only — see plan `vivid-humming-bonbon.md`.
+ */
+export type ChatTaskWirePayload<TMessage extends UIMessage = UIMessage, TMetadata = unknown> = {
+    /**
+     * The single message being delivered on this trigger. Set for:
+     *   - `submit-message`: the new user message OR a tool-approval-responded
+     *     assistant message (with `state: "approval-responded"` tool parts).
+     *   - `regenerate-message`: omitted (the agent slices its own history).
+     *   - `preload` / `close` / `action`: omitted.
+     *   - `handover-prepare`: omitted (use `headStartMessages` instead).
+     */
+    message?: TMessage;
+    /**
+     * Bespoke escape hatch for `chat.headStart`. The customer's HTTP route
+     * handler ships full `UIMessage[]` history at the very first turn — before
+     * any snapshot exists. The route handler isn't subject to the
+     * `MAX_APPEND_BODY_BYTES` cap on `/in/append` because it goes through the
+     * customer's own HTTP endpoint. Used ONLY by `trigger: "handover-prepare"`.
+     * Ignored on every other trigger.
+     */
+    headStartMessages?: TMessage[];
+    chatId: string;
+    trigger: "submit-message" | "regenerate-message" | "preload" | "close" | "action"
+    /**
+     * The customer's `chat.handover` route handler kicked us off in
+     * parallel with the first-turn `streamText` running in the warm
+     * Next.js process. The run sits idle on `session.in` waiting for
+     * a `kind: "handover"` (continue from tool execution) or
+     * `kind: "handover-skip"` (handler finished pure-text, exit
+     * cleanly). See `chat.handover` in `@trigger.dev/sdk/chat-server`.
+     */
+     | "handover-prepare";
+    messageId?: string;
+    metadata?: TMetadata;
+    /** Custom action payload when `trigger` is `"action"`. Validated against `actionSchema` on the backend. */
+    action?: unknown;
+    /** Whether this run is continuing an existing chat whose previous run ended. */
+    continuation?: boolean;
+    /** The run ID of the previous run (only set when `continuation` is true). */
+    previousRunId?: string;
+    /** Override idle timeout for this run (seconds). Set by transport.preload(). */
+    idleTimeoutInSeconds?: number;
+    /**
+     * The friendlyId of the Session primitive backing this chat. The
+     * transport opens (or lazy-creates) the session with
+     * `externalId = chatId` on first message, then sends this friendlyId
+     * through to the run so the agent can attach to `.in` / `.out`
+     * without needing to round-trip through the control plane again.
+     * Optional for backward-compat while the migration is in flight;
+     * required once the legacy run-scoped stream path is removed.
+     */
+    sessionId?: string;
+};
+/**
+ * One chunk on the chat input stream. `kind` discriminates the variants —
+ * a single ordered stream now carries all the signals the old three-stream
+ * split did (`chat-messages`, `chat-stop`, plus action messages piggybacked
+ * on `chat-messages`).
+ */
+export type ChatInputChunk<TMessage extends UIMessage = UIMessage, TMetadata = unknown> = {
+    kind: "message";
+    /**
+     * Full wire payload for a new user message or regeneration. Mirrors
+     * what the legacy `chat-messages` input stream carried.
+     */
+    payload: ChatTaskWirePayload<TMessage, TMetadata>;
+} | {
+    kind: "stop";
+    /** Optional human-readable reason. Maps to the legacy `chat-stop` record. */
+    message?: string;
+} | {
+    /**
+     * Sent by `chat.headStart` when the customer's first-turn
+     * `streamText` finishes. The agent run (currently parked in
+     * `handover-prepare`) wakes, seeds its accumulators with
+     * `partialAssistantMessage`, and runs the normal turn loop
+     * (`onChatStart` → `onTurnStart` → … → `onTurnComplete`).
+     *
+     * What happens after that depends on `isFinal`:
+     *
+     * - `isFinal: false` — step 1 ended with `finishReason:
+     *   "tool-calls"`. The partial carries the assistant's
+     *   tool-call(s) wrapped in AI SDK's tool-approval round. The
+     *   agent's `streamText` runs the approved tools and continues
+     *   from step 2.
+     * - `isFinal: true` — step 1 ended pure-text (no tool calls).
+     *   The partial carries the final assistant text. The agent
+     *   skips the LLM call entirely (the response is already
+     *   complete on the customer side) and runs `onTurnComplete`
+     *   with the partial as `responseMessage` so persistence and
+     *   any post-turn work fire normally.
+     */
+    kind: "handover";
+    /** Customer's step-1 response messages (ModelMessage form). */
+    partialAssistantMessage: ModelMessage[];
+    /**
+     * The UI messageId the customer's handler used for its step-1
+     * assistant message. The agent reuses this so any post-handover
+     * chunks (tool-output-available, step-2 text, data-* parts
+     * written by hooks) merge into the SAME assistant message on
+     * the browser side instead of starting a new one.
+     */
+    messageId?: string;
+    /**
+     * Whether the customer's step 1 is the final response. See
+     * `kind` description above for the two branches.
+     */
+    isFinal: boolean;
+} | {
+    /**
+     * Sent by `chat.headStart` only when the customer's handler
+     * ABORTS before producing a finishReason (e.g., dispatch error,
+     * stream cancelled before any tokens). The agent run exits
+     * cleanly without firing turn hooks. Normal pure-text and
+     * tool-call finishes go through `kind: "handover"` with the
+     * appropriate `isFinal` flag.
+     */
+    kind: "handover-skip";
+};
+/**
+ * Extracts the client-data (`metadata`) type from a chat task.
+ *
+ * @example
+ * ```ts
+ * import type { InferChatClientData } from "@trigger.dev/sdk/ai";
+ * import type { myChat } from "@/trigger/chat";
+ *
+ * type MyClientData = InferChatClientData<typeof myChat>;
+ * ```
+ */
+export type InferChatClientData<TTask extends AnyTask> = TTask extends Task<string, ChatTaskWirePayload<any, infer TMetadata>, any> ? TMetadata : unknown;
+/**
+ * Extracts the UI message type from a chat task (wire payload `message` items).
+ *
+ * @example
+ * ```ts
+ * import type { InferChatUIMessage } from "@trigger.dev/sdk/ai";
+ * import type { myChat } from "@/trigger/chat";
+ *
+ * type Msg = InferChatUIMessage<typeof myChat>;
+ * ```
+ */
+export type InferChatUIMessage<TTask extends AnyTask> = TTask extends Task<string, ChatTaskWirePayload<infer TUIM extends UIMessage, any>, any> ? TUIM : UIMessage;

package/dist/esm/v3/ai-shared.js

@@ -0,0 +1,22 @@
+/**
+ * Browser-safe primitives shared between `@trigger.dev/sdk/ai` (server) and
+ * `@trigger.dev/sdk/chat` / `@trigger.dev/sdk/chat/react` (client).
+ *
+ * This module exists to keep `ai.ts` reachable only from the server graph.
+ * `ai.ts` weighs in at ~7000 lines and statically imports the agent-skills
+ * runtime (which uses `node:child_process` / `node:fs/promises`). When a
+ * browser bundle imports a runtime value from `ai.ts` — historically the
+ * `PENDING_MESSAGE_INJECTED_TYPE` constant in `chat-react.ts` — the bundler
+ * traces `ai.ts`'s entire module graph into the client chunk and hits the
+ * `node:` builtins, which Turbopack rejects outright (and webpack flags as
+ * a "Critical dependency" warning).
+ *
+ * Anything in this file MUST stay free of `node:*` imports and free of any
+ * import from `ai.ts`.
+ */
+/**
+ * Message-part `type` value for the pending-message data part the agent
+ * injects when a follow-up message arrives mid-turn.
+ */
+export const PENDING_MESSAGE_INJECTED_TYPE = "data-pending-message-injected";
+//# sourceMappingURL=ai-shared.js.map

package/dist/esm/v3/ai-shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-shared.js","sourceRoot":"","sources":["../../../src/v3/ai-shared.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAKH;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,+BAAwC,CAAC"}