@truefoundry/trueforge-core 0.2.0 → 0.3.0-rc.0

package/dist/core/sandbox/provider/TFYSandboxProvider.mjs

@@ -4,7 +4,7 @@ import { suppressTracing } from "@opentelemetry/core";
 import dedent from "dedent";
 import { randomUUID } from "crypto";
 import { join } from "path/posix";
-import { extractErrorLogFields } from "../../util/errorLogFields.mjs";
+import { describeUnknownError, extractErrorLogFields } from "../../util/errorLogFields.mjs";
 import { CodeModeNatsTransport } from "../codeMode/nats/CodeModeNatsTransport.mjs";
 import { DEFAULT_SANDBOX_NATS_WS_PORT } from "../constants.mjs";
 import {
@@ -15,11 +15,11 @@ import {
 } from "../SandboxErrors.mjs";
 import { absolutizeRelativeExecEnv } from "./execEnv.mjs";
 import {
-  ensureExecSuccess,
   shellEscape
 } from "./Provider.mjs";
 var DEFAULT_TIMEOUT_SECONDS = 60;
 var CLIENT_TIMEOUT_BUFFER_SECONDS = 5;
+var FILE_UPLOAD_TIMEOUT_MS = 30 * 60 * 1e3;
 var TFY_MCP_CLIENT_BIN = "mcp-client/bin";
 function withMcpClientOnPath(path) {
   const rest = path.split(":").filter((part) => part.length > 0 && part !== TFY_MCP_CLIENT_BIN);
@@ -112,13 +112,14 @@ var TFYSandboxProvider = class _TFYSandboxProvider {
         env: params.env,
         timeout: timeoutSeconds
       };
+      const execUrl = `${this.serverUrl}/exec`;
       const controller = new AbortController();
       const clientTimeoutMs = (timeoutSeconds + CLIENT_TIMEOUT_BUFFER_SECONDS) * 1e3;
       const timer = setTimeout(() => {
         controller.abort();
       }, clientTimeoutMs);
       try {
-        const response = await fetch(`${this.serverUrl}/exec`, {
+        const response = await fetch(execUrl, {
           method: "POST",
           headers: { "Content-Type": "application/json" },
           body: JSON.stringify(body),
@@ -126,19 +127,30 @@ var TFYSandboxProvider = class _TFYSandboxProvider {
         });
         if (!response.ok) {
           const text = await response.text();
-          this.logger.error(`Sandbox server returned ${String(response.status)}: ${text}`);
-          return { success: false, error: `Sandbox server returned ${String(response.status)}: ${text}` };
+          this.logger.error(`Sandbox server returned ${String(response.status)}: ${text}`, { url: execUrl });
+          return {
+            success: false,
+            error: `Sandbox server returned ${String(response.status)} from ${execUrl}: ${text}`
+          };
         }
         const result = await response.json();
         return result;
       } catch (e) {
         if (e instanceof Error && e.name === "AbortError") {
-          this.logger.error(`Sandbox exec timed out after ${String(timeoutSeconds)}s`, extractErrorLogFields(e));
-          return { success: false, error: `Sandbox exec timed out after ${String(timeoutSeconds)}s` };
+          this.logger.error(`Sandbox exec timed out after ${String(timeoutSeconds)}s`, {
+            url: execUrl,
+            ...extractErrorLogFields(e)
+          });
+          return {
+            success: false,
+            error: `Sandbox exec to ${execUrl} timed out after ${String(timeoutSeconds)}s`
+          };
         }
-        this.logger.error("Sandbox exec failed", extractErrorLogFields(e));
-        const message = e instanceof Error ? e.message : "Unknown error";
-        return { success: false, error: message };
+        this.logger.error("Sandbox exec failed", { url: execUrl, ...extractErrorLogFields(e) });
+        return {
+          success: false,
+          error: `Sandbox exec to ${execUrl} failed: ${describeUnknownError(e)}`
+        };
       } finally {
         clearTimeout(timer);
       }
@@ -179,13 +191,42 @@ var TFYSandboxProvider = class _TFYSandboxProvider {
     return Buffer.from(result.response.result.trim(), "base64");
   }
   async uploadFile(params) {
-    const encoded = params.content.toString("base64");
-    const escapedPath = shellEscape(params.remotePath);
-    const result = await this.exec({
-      sandboxId: params.sandboxId,
-      command: `echo ${shellEscape(encoded)} | base64 -d > ${escapedPath}`
+    validateSandboxOwnedByTenant({ sandboxId: params.sandboxId, tenantName: this.tenantName });
+    return context.with(suppressTracing(context.active()), async () => {
+      const query = new URLSearchParams({ sandbox_id: params.sandboxId, path: params.remotePath });
+      const uploadUrl = `${this.serverUrl}/files/upload?${query.toString()}`;
+      const bytes = params.content.byteLength;
+      this.logger.info("Uploading file to sandbox", {
+        sandboxId: params.sandboxId,
+        remotePath: params.remotePath,
+        bytes
+      });
+      let response;
+      try {
+        response = await fetch(uploadUrl, {
+          method: "POST",
+          headers: { "Content-Type": "application/octet-stream" },
+          body: params.content,
+          signal: AbortSignal.timeout(FILE_UPLOAD_TIMEOUT_MS)
+        });
+      } catch (e) {
+        throw new Error(`File upload to ${uploadUrl} failed: ${describeUnknownError(e)}`, { cause: e });
+      }
+      if (!response.ok) {
+        throw new Error(
+          `File upload to sandbox failed: Sandbox server returned ${String(response.status)} from ${uploadUrl}: ${await response.text()}`
+        );
+      }
+      const result = await response.json();
+      if (!result.success) {
+        throw new Error(`File upload to sandbox failed: ${result.error}`);
+      }
+      this.logger.info("Uploaded file to sandbox", {
+        sandboxId: params.sandboxId,
+        remotePath: params.remotePath,
+        bytes
+      });
     });
-    ensureExecSuccess(result);
   }
   // The TFY sandbox exposes a static, cluster-internal NATS WebSocket URL (no signed URLs).
   createCodeModeTransport() {

package/dist/core/sandbox/provider/TFYSandboxProvider.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/core/sandbox/provider/TFYSandboxProvider.ts"],"sourcesContent":["import { context } from '@opentelemetry/api';\nimport { suppressTracing } from '@opentelemetry/core';\nimport dedent from 'dedent';\nimport { randomUUID } from 'node:crypto';\nimport { join } from 'node:path/posix';\nimport type { Logger } from 'winston';\nimport { extractErrorLogFields } from '../../util/errorLogFields';\nimport type { CodeModeTransport } from '../codeMode/CodeModeTransport';\nimport { CodeModeNatsTransport } from '../codeMode/nats/CodeModeNatsTransport';\nimport { DEFAULT_SANDBOX_NATS_WS_PORT } from '../constants';\nimport {\n  SandboxFileNotFoundError,\n  SandboxFileTooLargeError,\n  SandboxPathIsDirectoryError,\n  validateSandboxOwnedByTenant,\n} from '../SandboxErrors';\nimport { absolutizeRelativeExecEnv } from './execEnv';\nimport {\n  ensureExecSuccess,\n  shellEscape,\n  type ExecResult,\n  type SandboxBuild,\n  type SandboxExecParams,\n  type SandboxFileInfo,\n  type SandboxProvider,\n} from './Provider';\n\nconst DEFAULT_TIMEOUT_SECONDS = 60;\n// Buffer for network latency + response processing on top of the server-side timeout.\nconst CLIENT_TIMEOUT_BUFFER_SECONDS = 5;\n\nconst TFY_MCP_CLIENT_BIN = 'mcp-client/bin';\n\n/** Put the layout CLI first on PATH (cwd-relative; {@link absolutizeRelativeExecEnv} makes it absolute). */\nexport function withMcpClientOnPath(path: string): string {\n  const rest = path.split(':').filter(part => part.length > 0 && part !== TFY_MCP_CLIENT_BIN);\n  return rest.length === 0 ? TFY_MCP_CLIENT_BIN : `${TFY_MCP_CLIENT_BIN}:${rest.join(':')}`;\n}\n\nfunction parsePwdAndPath(text: string): { root: string; inheritedPath: string } | undefined {\n  const lines = text.replace(/\\r\\n/g, '\\n').split('\\n');\n  const root = lines[0];\n  if (!root?.startsWith('/')) {\n    return undefined;\n  }\n  return { root, inheritedPath: lines[1] ?? '' };\n}\n\nexport interface TFYSandboxProviderOptions {\n  serverUrl: string;\n  natsBridgeUrl: string;\n  tenantName: string;\n  fileMaxBytesForDownload: number;\n  defaultExecTimeoutMs?: number | undefined;\n  logger: Logger;\n}\n\ninterface StatResult {\n  size: number;\n  type: string;\n}\n\nexport class TFYSandboxProvider implements SandboxProvider {\n  readonly type = 'truefoundry';\n  private readonly serverUrl: string;\n  private readonly natsBridgeUrl: string;\n  private readonly tenantName: string;\n  private readonly fileMaxBytesForDownload: number;\n  private readonly defaultExecTimeoutSeconds: number;\n  private readonly logger: Logger;\n  /** Discovered via `pwd` + `$PATH` — never a hardcoded host layout. */\n  private readonly sandboxLayouts = new Map<string, { root: string; inheritedPath: string }>();\n\n  constructor(options: TFYSandboxProviderOptions) {\n    this.serverUrl = options.serverUrl.replace(/\\/+$/, '');\n    this.natsBridgeUrl = options.natsBridgeUrl;\n    this.tenantName = options.tenantName;\n    this.fileMaxBytesForDownload = options.fileMaxBytesForDownload;\n    this.defaultExecTimeoutSeconds = Math.ceil((options.defaultExecTimeoutMs ?? DEFAULT_TIMEOUT_SECONDS * 1000) / 1000);\n    this.logger = options.logger.child({ module: 'TFYSandboxProvider' });\n  }\n\n  // TFY sandboxes run a prebuilt server image with no per-image build step, so the image is always ready.\n  private static readonly readyBuild: SandboxBuild = {\n    status: 'ready',\n    reason: null,\n    metadata: null,\n  };\n\n  buildImage(): Promise<SandboxBuild> {\n    return Promise.resolve(TFYSandboxProvider.readyBuild);\n  }\n\n  getImageBuildStatus(): Promise<SandboxBuild> {\n    return Promise.resolve(TFYSandboxProvider.readyBuild);\n  }\n\n  createSandbox(): Promise<{ sandboxId: string }> {\n    const sandboxId = `${this.tenantName}.${randomUUID()}`;\n    this.logger.debug(`Sandbox created: id=${sandboxId}`);\n    return Promise.resolve({ sandboxId });\n  }\n\n  /**\n   * No extra FS jail: exec cwd is the logical sandbox root. Layout getters are cwd-relative\n   * so writes cannot escape it. `GIT_CONFIG` / PATH / PYTHONPATH must still be absolute so\n   * git and `mcp-client` work after `cd` — resolved from `pwd` / `$PATH`, not a hardcoded prefix.\n   */\n  async exec(params: SandboxExecParams): Promise<ExecResult> {\n    validateSandboxOwnedByTenant({ sandboxId: params.sandboxId, tenantName: this.tenantName });\n    const { root, inheritedPath } = await this.sandboxLayout(params.sandboxId);\n    const incoming = params.env ?? {};\n    const env = absolutizeRelativeExecEnv({\n      root,\n      env: { ...incoming, PATH: withMcpClientOnPath(incoming['PATH'] ?? inheritedPath) },\n    });\n    return this.postExec({ ...params, env });\n  }\n\n  private async sandboxLayout(sandboxId: string): Promise<{ root: string; inheritedPath: string }> {\n    const cached = this.sandboxLayouts.get(sandboxId);\n    if (cached !== undefined) {\n      return cached;\n    }\n    const result = await this.postExec({\n      sandboxId,\n      command: 'printf \\'%s\\\\n%s\\\\n\\' \"$(pwd)\" \"$PATH\"',\n    });\n    if (!result.success) {\n      throw new Error(`Failed to resolve sandbox working directory: ${result.error}`);\n    }\n    const parsed = parsePwdAndPath(result.response.result);\n    if (parsed === undefined) {\n      throw new Error(`sandbox pwd did not return an absolute path: ${result.response.result}`);\n    }\n    this.sandboxLayouts.set(sandboxId, parsed);\n    return parsed;\n  }\n\n  private async postExec(params: SandboxExecParams): Promise<ExecResult> {\n    return context.with(suppressTracing(context.active()), async (): Promise<ExecResult> => {\n      // Honor the per-call timeout (e.g. the longer skill-download timeout) for both the server-side\n      // request timeout and the client abort timer; fall back to the provider default otherwise.\n      const timeoutSeconds = params.timeoutSeconds ?? this.defaultExecTimeoutSeconds;\n      const body = {\n        sandbox_id: params.sandboxId,\n        command: params.command,\n        cwd: params.cwd,\n        env: params.env,\n        timeout: timeoutSeconds,\n      };\n\n      const controller = new AbortController();\n      const clientTimeoutMs = (timeoutSeconds + CLIENT_TIMEOUT_BUFFER_SECONDS) * 1000;\n      const timer = setTimeout(() => {\n        controller.abort();\n      }, clientTimeoutMs);\n\n      try {\n        const response = await fetch(`${this.serverUrl}/exec`, {\n          method: 'POST',\n          headers: { 'Content-Type': 'application/json' },\n          body: JSON.stringify(body),\n          signal: controller.signal,\n        });\n\n        if (!response.ok) {\n          const text = await response.text();\n          this.logger.error(`Sandbox server returned ${String(response.status)}: ${text}`);\n          return { success: false, error: `Sandbox server returned ${String(response.status)}: ${text}` };\n        }\n\n        const result = (await response.json()) as ExecResult;\n        return result;\n      } catch (e: unknown) {\n        if (e instanceof Error && e.name === 'AbortError') {\n          this.logger.error(`Sandbox exec timed out after ${String(timeoutSeconds)}s`, extractErrorLogFields(e));\n          return { success: false, error: `Sandbox exec timed out after ${String(timeoutSeconds)}s` };\n        }\n        this.logger.error('Sandbox exec failed', extractErrorLogFields(e));\n        const message = e instanceof Error ? e.message : 'Unknown error';\n        return { success: false, error: message };\n      } finally {\n        clearTimeout(timer);\n      }\n    });\n  }\n\n  private async getFileInfo(params: { sandboxId: string; path: string }): Promise<SandboxFileInfo> {\n    const result = await this.exec({\n      sandboxId: params.sandboxId,\n      command: `stat -L --printf='{\"size\":%s,\"type\":\"%F\"}' ${shellEscape(params.path)}`,\n    });\n\n    if (!result.success) {\n      throw new Error(`Failed to stat file: ${result.error}`);\n    }\n    if (result.response.exitCode !== 0) {\n      throw new SandboxFileNotFoundError(params.path);\n    }\n\n    const parsed = JSON.parse(result.response.result) as StatResult;\n    return { size: parsed.size, isDir: parsed.type === 'directory' };\n  }\n\n  async downloadFile(params: { sandboxId: string; path: string }): Promise<Buffer> {\n    const info = await this.getFileInfo(params);\n    if (info.isDir) {\n      throw new SandboxPathIsDirectoryError(params.path);\n    }\n    if (info.size > this.fileMaxBytesForDownload) {\n      throw new SandboxFileTooLargeError(params.path, info.size, this.fileMaxBytesForDownload);\n    }\n\n    const result = await this.exec({\n      sandboxId: params.sandboxId,\n      command: `base64 -w0 ${shellEscape(params.path)}`,\n    });\n\n    if (!result.success) {\n      throw new Error(`Failed to download file: ${result.error}`);\n    }\n    if (result.response.exitCode !== 0) {\n      throw new SandboxFileNotFoundError(params.path);\n    }\n\n    return Buffer.from(result.response.result.trim(), 'base64');\n  }\n\n  async uploadFile(params: { sandboxId: string; remotePath: string; content: Buffer }): Promise<void> {\n    const encoded = params.content.toString('base64');\n    const escapedPath = shellEscape(params.remotePath);\n\n    const result = await this.exec({\n      sandboxId: params.sandboxId,\n      command: `echo ${shellEscape(encoded)} | base64 -d > ${escapedPath}`,\n    });\n    ensureExecSuccess(result);\n  }\n\n  // The TFY sandbox exposes a static, cluster-internal NATS WebSocket URL (no signed URLs).\n  createCodeModeTransport(): CodeModeTransport {\n    return new CodeModeNatsTransport({\n      resolveHostUrl: () => Promise.resolve(this.natsBridgeUrl),\n      sandboxClientNatsUrl: `ws://localhost:${String(DEFAULT_SANDBOX_NATS_WS_PORT)}`,\n      logger: this.logger,\n      mcpClientInstall: { remotePath: join('mcp-client', 'mcp_client.py') },\n    });\n  }\n\n  getAdditionalInstructions(): string {\n    return dedent`\n    SANDBOX RULES:\n    - The Agent's first sandbox command should be \\`pwd\\` to discover the working directory.\n    - uploads, skills, and tool-results live in that working directory (not /tmp or /opt).\n    - ALL file creation and writes MUST stay within that working directory.\n    - The Agent must NOT write to /tmp/, ~/, or any absolute path outside the working directory.\n  `;\n  }\n\n  // Cwd-relative (no FS jail). exec() pwd-joins GIT_CONFIG / PATH / PYTHONPATH.\n  //   uploads, skills, tool-results, skill_downloader.py, .git-credentials\n  //   mcp-client/mcp_client.py  (no /usr/local/bin symlink)\n  getToolResultDumpDir(): string {\n    return 'tool-results';\n  }\n\n  getGitCredentialsPath(): string {\n    return '.git-credentials';\n  }\n\n  getFileUploadsDir(): string {\n    return 'uploads';\n  }\n\n  getSkillsDir(): string {\n    return 'skills';\n  }\n\n  getSkillDownloaderPath(): string {\n    return 'skill_downloader.py';\n  }\n}\n"],"mappings":";AAAA,SAAS,eAAe;AACxB,SAAS,uBAAuB;AAChC,OAAO,YAAY;AACnB,SAAS,kBAAkB;AAC3B,SAAS,YAAY;AAErB,SAAS,6BAA6B;AAEtC,SAAS,6BAA6B;AACtC,SAAS,oCAAoC;AAC7C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,iCAAiC;AAC1C;AAAA,EACE;AAAA,EACA;AAAA,OAMK;AAEP,IAAM,0BAA0B;AAEhC,IAAM,gCAAgC;AAEtC,IAAM,qBAAqB;AAGpB,SAAS,oBAAoB,MAAsB;AACxD,QAAM,OAAO,KAAK,MAAM,GAAG,EAAE,OAAO,UAAQ,KAAK,SAAS,KAAK,SAAS,kBAAkB;AAC1F,SAAO,KAAK,WAAW,IAAI,qBAAqB,GAAG,kBAAkB,IAAI,KAAK,KAAK,GAAG,CAAC;AACzF;AAEA,SAAS,gBAAgB,MAAmE;AAC1F,QAAM,QAAQ,KAAK,QAAQ,SAAS,IAAI,EAAE,MAAM,IAAI;AACpD,QAAM,OAAO,MAAM,CAAC;AACpB,MAAI,CAAC,MAAM,WAAW,GAAG,GAAG;AAC1B,WAAO;AAAA,EACT;AACA,SAAO,EAAE,MAAM,eAAe,MAAM,CAAC,KAAK,GAAG;AAC/C;AAgBO,IAAM,qBAAN,MAAM,oBAA8C;AAAA,EAChD,OAAO;AAAA,EACC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA,iBAAiB,oBAAI,IAAqD;AAAA,EAE3F,YAAY,SAAoC;AAC9C,SAAK,YAAY,QAAQ,UAAU,QAAQ,QAAQ,EAAE;AACrD,SAAK,gBAAgB,QAAQ;AAC7B,SAAK,aAAa,QAAQ;AAC1B,SAAK,0BAA0B,QAAQ;AACvC,SAAK,4BAA4B,KAAK,MAAM,QAAQ,wBAAwB,0BAA0B,OAAQ,GAAI;AAClH,SAAK,SAAS,QAAQ,OAAO,MAAM,EAAE,QAAQ,qBAAqB,CAAC;AAAA,EACrE;AAAA;AAAA,EAGA,OAAwB,aAA2B;AAAA,IACjD,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ;AAAA,EAEA,aAAoC;AAClC,WAAO,QAAQ,QAAQ,oBAAmB,UAAU;AAAA,EACtD;AAAA,EAEA,sBAA6C;AAC3C,WAAO,QAAQ,QAAQ,oBAAmB,UAAU;AAAA,EACtD;AAAA,EAEA,gBAAgD;AAC9C,UAAM,YAAY,GAAG,KAAK,UAAU,IAAI,WAAW,CAAC;AACpD,SAAK,OAAO,MAAM,uBAAuB,SAAS,EAAE;AACpD,WAAO,QAAQ,QAAQ,EAAE,UAAU,CAAC;AAAA,EACtC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,KAAK,QAAgD;AACzD,iCAA6B,EAAE,WAAW,OAAO,WAAW,YAAY,KAAK,WAAW,CAAC;AACzF,UAAM,EAAE,MAAM,cAAc,IAAI,MAAM,KAAK,cAAc,OAAO,SAAS;AACzE,UAAM,WAAW,OAAO,OAAO,CAAC;AAChC,UAAM,MAAM,0BAA0B;AAAA,MACpC;AAAA,MACA,KAAK,EAAE,GAAG,UAAU,MAAM,oBAAoB,SAAS,MAAM,KAAK,aAAa,EAAE;AAAA,IACnF,CAAC;AACD,WAAO,KAAK,SAAS,EAAE,GAAG,QAAQ,IAAI,CAAC;AAAA,EACzC;AAAA,EAEA,MAAc,cAAc,WAAqE;AAC/F,UAAM,SAAS,KAAK,eAAe,IAAI,SAAS;AAChD,QAAI,WAAW,QAAW;AACxB,aAAO;AAAA,IACT;AACA,UAAM,SAAS,MAAM,KAAK,SAAS;AAAA,MACjC;AAAA,MACA,SAAS;AAAA,IACX,CAAC;AACD,QAAI,CAAC,OAAO,SAAS;AACnB,YAAM,IAAI,MAAM,gDAAgD,OAAO,KAAK,EAAE;AAAA,IAChF;AACA,UAAM,SAAS,gBAAgB,OAAO,SAAS,MAAM;AACrD,QAAI,WAAW,QAAW;AACxB,YAAM,IAAI,MAAM,gDAAgD,OAAO,SAAS,MAAM,EAAE;AAAA,IAC1F;AACA,SAAK,eAAe,IAAI,WAAW,MAAM;AACzC,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,SAAS,QAAgD;AACrE,WAAO,QAAQ,KAAK,gBAAgB,QAAQ,OAAO,CAAC,GAAG,YAAiC;AAGtF,YAAM,iBAAiB,OAAO,kBAAkB,KAAK;AACrD,YAAM,OAAO;AAAA,QACX,YAAY,OAAO;AAAA,QACnB,SAAS,OAAO;AAAA,QAChB,KAAK,OAAO;AAAA,QACZ,KAAK,OAAO;AAAA,QACZ,SAAS;AAAA,MACX;AAEA,YAAM,aAAa,IAAI,gBAAgB;AACvC,YAAM,mBAAmB,iBAAiB,iCAAiC;AAC3E,YAAM,QAAQ,WAAW,MAAM;AAC7B,mBAAW,MAAM;AAAA,MACnB,GAAG,eAAe;AAElB,UAAI;AACF,cAAM,WAAW,MAAM,MAAM,GAAG,KAAK,SAAS,SAAS;AAAA,UACrD,QAAQ;AAAA,UACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,UAC9C,MAAM,KAAK,UAAU,IAAI;AAAA,UACzB,QAAQ,WAAW;AAAA,QACrB,CAAC;AAED,YAAI,CAAC,SAAS,IAAI;AAChB,gBAAM,OAAO,MAAM,SAAS,KAAK;AACjC,eAAK,OAAO,MAAM,2BAA2B,OAAO,SAAS,MAAM,CAAC,KAAK,IAAI,EAAE;AAC/E,iBAAO,EAAE,SAAS,OAAO,OAAO,2BAA2B,OAAO,SAAS,MAAM,CAAC,KAAK,IAAI,GAAG;AAAA,QAChG;AAEA,cAAM,SAAU,MAAM,SAAS,KAAK;AACpC,eAAO;AAAA,MACT,SAAS,GAAY;AACnB,YAAI,aAAa,SAAS,EAAE,SAAS,cAAc;AACjD,eAAK,OAAO,MAAM,gCAAgC,OAAO,cAAc,CAAC,KAAK,sBAAsB,CAAC,CAAC;AACrG,iBAAO,EAAE,SAAS,OAAO,OAAO,gCAAgC,OAAO,cAAc,CAAC,IAAI;AAAA,QAC5F;AACA,aAAK,OAAO,MAAM,uBAAuB,sBAAsB,CAAC,CAAC;AACjE,cAAM,UAAU,aAAa,QAAQ,EAAE,UAAU;AACjD,eAAO,EAAE,SAAS,OAAO,OAAO,QAAQ;AAAA,MAC1C,UAAE;AACA,qBAAa,KAAK;AAAA,MACpB;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,MAAc,YAAY,QAAuE;AAC/F,UAAM,SAAS,MAAM,KAAK,KAAK;AAAA,MAC7B,WAAW,OAAO;AAAA,MAClB,SAAS,8CAA8C,YAAY,OAAO,IAAI,CAAC;AAAA,IACjF,CAAC;AAED,QAAI,CAAC,OAAO,SAAS;AACnB,YAAM,IAAI,MAAM,wBAAwB,OAAO,KAAK,EAAE;AAAA,IACxD;AACA,QAAI,OAAO,SAAS,aAAa,GAAG;AAClC,YAAM,IAAI,yBAAyB,OAAO,IAAI;AAAA,IAChD;AAEA,UAAM,SAAS,KAAK,MAAM,OAAO,SAAS,MAAM;AAChD,WAAO,EAAE,MAAM,OAAO,MAAM,OAAO,OAAO,SAAS,YAAY;AAAA,EACjE;AAAA,EAEA,MAAM,aAAa,QAA8D;AAC/E,UAAM,OAAO,MAAM,KAAK,YAAY,MAAM;AAC1C,QAAI,KAAK,OAAO;AACd,YAAM,IAAI,4BAA4B,OAAO,IAAI;AAAA,IACnD;AACA,QAAI,KAAK,OAAO,KAAK,yBAAyB;AAC5C,YAAM,IAAI,yBAAyB,OAAO,MAAM,KAAK,MAAM,KAAK,uBAAuB;AAAA,IACzF;AAEA,UAAM,SAAS,MAAM,KAAK,KAAK;AAAA,MAC7B,WAAW,OAAO;AAAA,MAClB,SAAS,cAAc,YAAY,OAAO,IAAI,CAAC;AAAA,IACjD,CAAC;AAED,QAAI,CAAC,OAAO,SAAS;AACnB,YAAM,IAAI,MAAM,4BAA4B,OAAO,KAAK,EAAE;AAAA,IAC5D;AACA,QAAI,OAAO,SAAS,aAAa,GAAG;AAClC,YAAM,IAAI,yBAAyB,OAAO,IAAI;AAAA,IAChD;AAEA,WAAO,OAAO,KAAK,OAAO,SAAS,OAAO,KAAK,GAAG,QAAQ;AAAA,EAC5D;AAAA,EAEA,MAAM,WAAW,QAAmF;AAClG,UAAM,UAAU,OAAO,QAAQ,SAAS,QAAQ;AAChD,UAAM,cAAc,YAAY,OAAO,UAAU;AAEjD,UAAM,SAAS,MAAM,KAAK,KAAK;AAAA,MAC7B,WAAW,OAAO;AAAA,MAClB,SAAS,QAAQ,YAAY,OAAO,CAAC,kBAAkB,WAAW;AAAA,IACpE,CAAC;AACD,sBAAkB,MAAM;AAAA,EAC1B;AAAA;AAAA,EAGA,0BAA6C;AAC3C,WAAO,IAAI,sBAAsB;AAAA,MAC/B,gBAAgB,MAAM,QAAQ,QAAQ,KAAK,aAAa;AAAA,MACxD,sBAAsB,kBAAkB,OAAO,4BAA4B,CAAC;AAAA,MAC5E,QAAQ,KAAK;AAAA,MACb,kBAAkB,EAAE,YAAY,KAAK,cAAc,eAAe,EAAE;AAAA,IACtE,CAAC;AAAA,EACH;AAAA,EAEA,4BAAoC;AAClC,WAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOT;AAAA;AAAA;AAAA;AAAA,EAKA,uBAA+B;AAC7B,WAAO;AAAA,EACT;AAAA,EAEA,wBAAgC;AAC9B,WAAO;AAAA,EACT;AAAA,EAEA,oBAA4B;AAC1B,WAAO;AAAA,EACT;AAAA,EAEA,eAAuB;AACrB,WAAO;AAAA,EACT;AAAA,EAEA,yBAAiC;AAC/B,WAAO;AAAA,EACT;AACF;","names":[]}
+{"version":3,"sources":["../../../../src/core/sandbox/provider/TFYSandboxProvider.ts"],"sourcesContent":["import { context } from '@opentelemetry/api';\nimport { suppressTracing } from '@opentelemetry/core';\nimport dedent from 'dedent';\nimport { randomUUID } from 'node:crypto';\nimport { join } from 'node:path/posix';\nimport type { Logger } from 'winston';\nimport { describeUnknownError, extractErrorLogFields } from '../../util/errorLogFields';\nimport type { CodeModeTransport } from '../codeMode/CodeModeTransport';\nimport { CodeModeNatsTransport } from '../codeMode/nats/CodeModeNatsTransport';\nimport { DEFAULT_SANDBOX_NATS_WS_PORT } from '../constants';\nimport {\n  SandboxFileNotFoundError,\n  SandboxFileTooLargeError,\n  SandboxPathIsDirectoryError,\n  validateSandboxOwnedByTenant,\n} from '../SandboxErrors';\nimport { absolutizeRelativeExecEnv } from './execEnv';\nimport {\n  shellEscape,\n  type ExecResult,\n  type SandboxBuild,\n  type SandboxExecParams,\n  type SandboxFileInfo,\n  type SandboxProvider,\n} from './Provider';\n\nconst DEFAULT_TIMEOUT_SECONDS = 60;\n// Buffer for network latency + response processing on top of the server-side timeout.\nconst CLIENT_TIMEOUT_BUFFER_SECONDS = 5;\n\n// TFY sandbox file upload timeout (same as Daytona SDK uploadFile default timeout).\nconst FILE_UPLOAD_TIMEOUT_MS = 30 * 60 * 1000;\n\nconst TFY_MCP_CLIENT_BIN = 'mcp-client/bin';\n\n/** Put the layout CLI first on PATH (cwd-relative; {@link absolutizeRelativeExecEnv} makes it absolute). */\nexport function withMcpClientOnPath(path: string): string {\n  const rest = path.split(':').filter(part => part.length > 0 && part !== TFY_MCP_CLIENT_BIN);\n  return rest.length === 0 ? TFY_MCP_CLIENT_BIN : `${TFY_MCP_CLIENT_BIN}:${rest.join(':')}`;\n}\n\nfunction parsePwdAndPath(text: string): { root: string; inheritedPath: string } | undefined {\n  const lines = text.replace(/\\r\\n/g, '\\n').split('\\n');\n  const root = lines[0];\n  if (!root?.startsWith('/')) {\n    return undefined;\n  }\n  return { root, inheritedPath: lines[1] ?? '' };\n}\n\nexport interface TFYSandboxProviderOptions {\n  serverUrl: string;\n  natsBridgeUrl: string;\n  tenantName: string;\n  fileMaxBytesForDownload: number;\n  defaultExecTimeoutMs?: number | undefined;\n  logger: Logger;\n}\n\ninterface StatResult {\n  size: number;\n  type: string;\n}\n\nexport class TFYSandboxProvider implements SandboxProvider {\n  readonly type = 'truefoundry';\n  private readonly serverUrl: string;\n  private readonly natsBridgeUrl: string;\n  private readonly tenantName: string;\n  private readonly fileMaxBytesForDownload: number;\n  private readonly defaultExecTimeoutSeconds: number;\n  private readonly logger: Logger;\n  /** Discovered via `pwd` + `$PATH` — never a hardcoded host layout. */\n  private readonly sandboxLayouts = new Map<string, { root: string; inheritedPath: string }>();\n\n  constructor(options: TFYSandboxProviderOptions) {\n    this.serverUrl = options.serverUrl.replace(/\\/+$/, '');\n    this.natsBridgeUrl = options.natsBridgeUrl;\n    this.tenantName = options.tenantName;\n    this.fileMaxBytesForDownload = options.fileMaxBytesForDownload;\n    this.defaultExecTimeoutSeconds = Math.ceil((options.defaultExecTimeoutMs ?? DEFAULT_TIMEOUT_SECONDS * 1000) / 1000);\n    this.logger = options.logger.child({ module: 'TFYSandboxProvider' });\n  }\n\n  // TFY sandboxes run a prebuilt server image with no per-image build step, so the image is always ready.\n  private static readonly readyBuild: SandboxBuild = {\n    status: 'ready',\n    reason: null,\n    metadata: null,\n  };\n\n  buildImage(): Promise<SandboxBuild> {\n    return Promise.resolve(TFYSandboxProvider.readyBuild);\n  }\n\n  getImageBuildStatus(): Promise<SandboxBuild> {\n    return Promise.resolve(TFYSandboxProvider.readyBuild);\n  }\n\n  createSandbox(): Promise<{ sandboxId: string }> {\n    const sandboxId = `${this.tenantName}.${randomUUID()}`;\n    this.logger.debug(`Sandbox created: id=${sandboxId}`);\n    return Promise.resolve({ sandboxId });\n  }\n\n  /**\n   * No extra FS jail: exec cwd is the logical sandbox root. Layout getters are cwd-relative\n   * so writes cannot escape it. `GIT_CONFIG` / PATH / PYTHONPATH must still be absolute so\n   * git and `mcp-client` work after `cd` — resolved from `pwd` / `$PATH`, not a hardcoded prefix.\n   */\n  async exec(params: SandboxExecParams): Promise<ExecResult> {\n    validateSandboxOwnedByTenant({ sandboxId: params.sandboxId, tenantName: this.tenantName });\n    const { root, inheritedPath } = await this.sandboxLayout(params.sandboxId);\n    const incoming = params.env ?? {};\n    const env = absolutizeRelativeExecEnv({\n      root,\n      env: { ...incoming, PATH: withMcpClientOnPath(incoming['PATH'] ?? inheritedPath) },\n    });\n    return this.postExec({ ...params, env });\n  }\n\n  private async sandboxLayout(sandboxId: string): Promise<{ root: string; inheritedPath: string }> {\n    const cached = this.sandboxLayouts.get(sandboxId);\n    if (cached !== undefined) {\n      return cached;\n    }\n    const result = await this.postExec({\n      sandboxId,\n      command: 'printf \\'%s\\\\n%s\\\\n\\' \"$(pwd)\" \"$PATH\"',\n    });\n    if (!result.success) {\n      throw new Error(`Failed to resolve sandbox working directory: ${result.error}`);\n    }\n    const parsed = parsePwdAndPath(result.response.result);\n    if (parsed === undefined) {\n      throw new Error(`sandbox pwd did not return an absolute path: ${result.response.result}`);\n    }\n    this.sandboxLayouts.set(sandboxId, parsed);\n    return parsed;\n  }\n\n  private async postExec(params: SandboxExecParams): Promise<ExecResult> {\n    return context.with(suppressTracing(context.active()), async (): Promise<ExecResult> => {\n      // Honor the per-call timeout (e.g. the longer skill-download timeout) for both the server-side\n      // request timeout and the client abort timer; fall back to the provider default otherwise.\n      const timeoutSeconds = params.timeoutSeconds ?? this.defaultExecTimeoutSeconds;\n      const body = {\n        sandbox_id: params.sandboxId,\n        command: params.command,\n        cwd: params.cwd,\n        env: params.env,\n        timeout: timeoutSeconds,\n      };\n\n      const execUrl = `${this.serverUrl}/exec`;\n      const controller = new AbortController();\n      const clientTimeoutMs = (timeoutSeconds + CLIENT_TIMEOUT_BUFFER_SECONDS) * 1000;\n      const timer = setTimeout(() => {\n        controller.abort();\n      }, clientTimeoutMs);\n\n      try {\n        const response = await fetch(execUrl, {\n          method: 'POST',\n          headers: { 'Content-Type': 'application/json' },\n          body: JSON.stringify(body),\n          signal: controller.signal,\n        });\n\n        if (!response.ok) {\n          const text = await response.text();\n          this.logger.error(`Sandbox server returned ${String(response.status)}: ${text}`, { url: execUrl });\n          return {\n            success: false,\n            error: `Sandbox server returned ${String(response.status)} from ${execUrl}: ${text}`,\n          };\n        }\n\n        const result = (await response.json()) as ExecResult;\n        return result;\n      } catch (e: unknown) {\n        if (e instanceof Error && e.name === 'AbortError') {\n          this.logger.error(`Sandbox exec timed out after ${String(timeoutSeconds)}s`, {\n            url: execUrl,\n            ...extractErrorLogFields(e),\n          });\n          return {\n            success: false,\n            error: `Sandbox exec to ${execUrl} timed out after ${String(timeoutSeconds)}s`,\n          };\n        }\n        this.logger.error('Sandbox exec failed', { url: execUrl, ...extractErrorLogFields(e) });\n        return {\n          success: false,\n          error: `Sandbox exec to ${execUrl} failed: ${describeUnknownError(e)}`,\n        };\n      } finally {\n        clearTimeout(timer);\n      }\n    });\n  }\n\n  private async getFileInfo(params: { sandboxId: string; path: string }): Promise<SandboxFileInfo> {\n    const result = await this.exec({\n      sandboxId: params.sandboxId,\n      command: `stat -L --printf='{\"size\":%s,\"type\":\"%F\"}' ${shellEscape(params.path)}`,\n    });\n\n    if (!result.success) {\n      throw new Error(`Failed to stat file: ${result.error}`);\n    }\n    if (result.response.exitCode !== 0) {\n      throw new SandboxFileNotFoundError(params.path);\n    }\n\n    const parsed = JSON.parse(result.response.result) as StatResult;\n    return { size: parsed.size, isDir: parsed.type === 'directory' };\n  }\n\n  async downloadFile(params: { sandboxId: string; path: string }): Promise<Buffer> {\n    const info = await this.getFileInfo(params);\n    if (info.isDir) {\n      throw new SandboxPathIsDirectoryError(params.path);\n    }\n    if (info.size > this.fileMaxBytesForDownload) {\n      throw new SandboxFileTooLargeError(params.path, info.size, this.fileMaxBytesForDownload);\n    }\n\n    const result = await this.exec({\n      sandboxId: params.sandboxId,\n      command: `base64 -w0 ${shellEscape(params.path)}`,\n    });\n\n    if (!result.success) {\n      throw new Error(`Failed to download file: ${result.error}`);\n    }\n    if (result.response.exitCode !== 0) {\n      throw new SandboxFileNotFoundError(params.path);\n    }\n\n    return Buffer.from(result.response.result.trim(), 'base64');\n  }\n\n  async uploadFile(params: { sandboxId: string; remotePath: string; content: Buffer }): Promise<void> {\n    validateSandboxOwnedByTenant({ sandboxId: params.sandboxId, tenantName: this.tenantName });\n\n    return context.with(suppressTracing(context.active()), async () => {\n      const query = new URLSearchParams({ sandbox_id: params.sandboxId, path: params.remotePath });\n      const uploadUrl = `${this.serverUrl}/files/upload?${query.toString()}`;\n      const bytes = params.content.byteLength;\n      this.logger.info('Uploading file to sandbox', {\n        sandboxId: params.sandboxId,\n        remotePath: params.remotePath,\n        bytes,\n      });\n      let response: Response;\n      try {\n        response = await fetch(uploadUrl, {\n          method: 'POST',\n          headers: { 'Content-Type': 'application/octet-stream' },\n          body: params.content,\n          signal: AbortSignal.timeout(FILE_UPLOAD_TIMEOUT_MS),\n        });\n      } catch (e: unknown) {\n        throw new Error(`File upload to ${uploadUrl} failed: ${describeUnknownError(e)}`, { cause: e });\n      }\n      if (!response.ok) {\n        throw new Error(\n          `File upload to sandbox failed: Sandbox server returned ${String(response.status)} from ${uploadUrl}: ${await response.text()}`,\n        );\n      }\n\n      const result = (await response.json()) as { success: true } | { success: false; error: string };\n      if (!result.success) {\n        throw new Error(`File upload to sandbox failed: ${result.error}`);\n      }\n      this.logger.info('Uploaded file to sandbox', {\n        sandboxId: params.sandboxId,\n        remotePath: params.remotePath,\n        bytes,\n      });\n    });\n  }\n\n  // The TFY sandbox exposes a static, cluster-internal NATS WebSocket URL (no signed URLs).\n  createCodeModeTransport(): CodeModeTransport {\n    return new CodeModeNatsTransport({\n      resolveHostUrl: () => Promise.resolve(this.natsBridgeUrl),\n      sandboxClientNatsUrl: `ws://localhost:${String(DEFAULT_SANDBOX_NATS_WS_PORT)}`,\n      logger: this.logger,\n      mcpClientInstall: { remotePath: join('mcp-client', 'mcp_client.py') },\n    });\n  }\n\n  getAdditionalInstructions(): string {\n    return dedent`\n    SANDBOX RULES:\n    - The Agent's first sandbox command should be \\`pwd\\` to discover the working directory.\n    - uploads, skills, and tool-results live in that working directory (not /tmp or /opt).\n    - ALL file creation and writes MUST stay within that working directory.\n    - The Agent must NOT write to /tmp/, ~/, or any absolute path outside the working directory.\n  `;\n  }\n\n  // Cwd-relative (no FS jail). exec() pwd-joins GIT_CONFIG / PATH / PYTHONPATH.\n  //   uploads, skills, tool-results, skill_downloader.py, .git-credentials\n  //   mcp-client/mcp_client.py  (no /usr/local/bin symlink)\n  getToolResultDumpDir(): string {\n    return 'tool-results';\n  }\n\n  getGitCredentialsPath(): string {\n    return '.git-credentials';\n  }\n\n  getFileUploadsDir(): string {\n    return 'uploads';\n  }\n\n  getSkillsDir(): string {\n    return 'skills';\n  }\n\n  getSkillDownloaderPath(): string {\n    return 'skill_downloader.py';\n  }\n}\n"],"mappings":";AAAA,SAAS,eAAe;AACxB,SAAS,uBAAuB;AAChC,OAAO,YAAY;AACnB,SAAS,kBAAkB;AAC3B,SAAS,YAAY;AAErB,SAAS,sBAAsB,6BAA6B;AAE5D,SAAS,6BAA6B;AACtC,SAAS,oCAAoC;AAC7C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,iCAAiC;AAC1C;AAAA,EACE;AAAA,OAMK;AAEP,IAAM,0BAA0B;AAEhC,IAAM,gCAAgC;AAGtC,IAAM,yBAAyB,KAAK,KAAK;AAEzC,IAAM,qBAAqB;AAGpB,SAAS,oBAAoB,MAAsB;AACxD,QAAM,OAAO,KAAK,MAAM,GAAG,EAAE,OAAO,UAAQ,KAAK,SAAS,KAAK,SAAS,kBAAkB;AAC1F,SAAO,KAAK,WAAW,IAAI,qBAAqB,GAAG,kBAAkB,IAAI,KAAK,KAAK,GAAG,CAAC;AACzF;AAEA,SAAS,gBAAgB,MAAmE;AAC1F,QAAM,QAAQ,KAAK,QAAQ,SAAS,IAAI,EAAE,MAAM,IAAI;AACpD,QAAM,OAAO,MAAM,CAAC;AACpB,MAAI,CAAC,MAAM,WAAW,GAAG,GAAG;AAC1B,WAAO;AAAA,EACT;AACA,SAAO,EAAE,MAAM,eAAe,MAAM,CAAC,KAAK,GAAG;AAC/C;AAgBO,IAAM,qBAAN,MAAM,oBAA8C;AAAA,EAChD,OAAO;AAAA,EACC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA,iBAAiB,oBAAI,IAAqD;AAAA,EAE3F,YAAY,SAAoC;AAC9C,SAAK,YAAY,QAAQ,UAAU,QAAQ,QAAQ,EAAE;AACrD,SAAK,gBAAgB,QAAQ;AAC7B,SAAK,aAAa,QAAQ;AAC1B,SAAK,0BAA0B,QAAQ;AACvC,SAAK,4BAA4B,KAAK,MAAM,QAAQ,wBAAwB,0BAA0B,OAAQ,GAAI;AAClH,SAAK,SAAS,QAAQ,OAAO,MAAM,EAAE,QAAQ,qBAAqB,CAAC;AAAA,EACrE;AAAA;AAAA,EAGA,OAAwB,aAA2B;AAAA,IACjD,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ;AAAA,EAEA,aAAoC;AAClC,WAAO,QAAQ,QAAQ,oBAAmB,UAAU;AAAA,EACtD;AAAA,EAEA,sBAA6C;AAC3C,WAAO,QAAQ,QAAQ,oBAAmB,UAAU;AAAA,EACtD;AAAA,EAEA,gBAAgD;AAC9C,UAAM,YAAY,GAAG,KAAK,UAAU,IAAI,WAAW,CAAC;AACpD,SAAK,OAAO,MAAM,uBAAuB,SAAS,EAAE;AACpD,WAAO,QAAQ,QAAQ,EAAE,UAAU,CAAC;AAAA,EACtC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,KAAK,QAAgD;AACzD,iCAA6B,EAAE,WAAW,OAAO,WAAW,YAAY,KAAK,WAAW,CAAC;AACzF,UAAM,EAAE,MAAM,cAAc,IAAI,MAAM,KAAK,cAAc,OAAO,SAAS;AACzE,UAAM,WAAW,OAAO,OAAO,CAAC;AAChC,UAAM,MAAM,0BAA0B;AAAA,MACpC;AAAA,MACA,KAAK,EAAE,GAAG,UAAU,MAAM,oBAAoB,SAAS,MAAM,KAAK,aAAa,EAAE;AAAA,IACnF,CAAC;AACD,WAAO,KAAK,SAAS,EAAE,GAAG,QAAQ,IAAI,CAAC;AAAA,EACzC;AAAA,EAEA,MAAc,cAAc,WAAqE;AAC/F,UAAM,SAAS,KAAK,eAAe,IAAI,SAAS;AAChD,QAAI,WAAW,QAAW;AACxB,aAAO;AAAA,IACT;AACA,UAAM,SAAS,MAAM,KAAK,SAAS;AAAA,MACjC;AAAA,MACA,SAAS;AAAA,IACX,CAAC;AACD,QAAI,CAAC,OAAO,SAAS;AACnB,YAAM,IAAI,MAAM,gDAAgD,OAAO,KAAK,EAAE;AAAA,IAChF;AACA,UAAM,SAAS,gBAAgB,OAAO,SAAS,MAAM;AACrD,QAAI,WAAW,QAAW;AACxB,YAAM,IAAI,MAAM,gDAAgD,OAAO,SAAS,MAAM,EAAE;AAAA,IAC1F;AACA,SAAK,eAAe,IAAI,WAAW,MAAM;AACzC,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,SAAS,QAAgD;AACrE,WAAO,QAAQ,KAAK,gBAAgB,QAAQ,OAAO,CAAC,GAAG,YAAiC;AAGtF,YAAM,iBAAiB,OAAO,kBAAkB,KAAK;AACrD,YAAM,OAAO;AAAA,QACX,YAAY,OAAO;AAAA,QACnB,SAAS,OAAO;AAAA,QAChB,KAAK,OAAO;AAAA,QACZ,KAAK,OAAO;AAAA,QACZ,SAAS;AAAA,MACX;AAEA,YAAM,UAAU,GAAG,KAAK,SAAS;AACjC,YAAM,aAAa,IAAI,gBAAgB;AACvC,YAAM,mBAAmB,iBAAiB,iCAAiC;AAC3E,YAAM,QAAQ,WAAW,MAAM;AAC7B,mBAAW,MAAM;AAAA,MACnB,GAAG,eAAe;AAElB,UAAI;AACF,cAAM,WAAW,MAAM,MAAM,SAAS;AAAA,UACpC,QAAQ;AAAA,UACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,UAC9C,MAAM,KAAK,UAAU,IAAI;AAAA,UACzB,QAAQ,WAAW;AAAA,QACrB,CAAC;AAED,YAAI,CAAC,SAAS,IAAI;AAChB,gBAAM,OAAO,MAAM,SAAS,KAAK;AACjC,eAAK,OAAO,MAAM,2BAA2B,OAAO,SAAS,MAAM,CAAC,KAAK,IAAI,IAAI,EAAE,KAAK,QAAQ,CAAC;AACjG,iBAAO;AAAA,YACL,SAAS;AAAA,YACT,OAAO,2BAA2B,OAAO,SAAS,MAAM,CAAC,SAAS,OAAO,KAAK,IAAI;AAAA,UACpF;AAAA,QACF;AAEA,cAAM,SAAU,MAAM,SAAS,KAAK;AACpC,eAAO;AAAA,MACT,SAAS,GAAY;AACnB,YAAI,aAAa,SAAS,EAAE,SAAS,cAAc;AACjD,eAAK,OAAO,MAAM,gCAAgC,OAAO,cAAc,CAAC,KAAK;AAAA,YAC3E,KAAK;AAAA,YACL,GAAG,sBAAsB,CAAC;AAAA,UAC5B,CAAC;AACD,iBAAO;AAAA,YACL,SAAS;AAAA,YACT,OAAO,mBAAmB,OAAO,oBAAoB,OAAO,cAAc,CAAC;AAAA,UAC7E;AAAA,QACF;AACA,aAAK,OAAO,MAAM,uBAAuB,EAAE,KAAK,SAAS,GAAG,sBAAsB,CAAC,EAAE,CAAC;AACtF,eAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO,mBAAmB,OAAO,YAAY,qBAAqB,CAAC,CAAC;AAAA,QACtE;AAAA,MACF,UAAE;AACA,qBAAa,KAAK;AAAA,MACpB;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,MAAc,YAAY,QAAuE;AAC/F,UAAM,SAAS,MAAM,KAAK,KAAK;AAAA,MAC7B,WAAW,OAAO;AAAA,MAClB,SAAS,8CAA8C,YAAY,OAAO,IAAI,CAAC;AAAA,IACjF,CAAC;AAED,QAAI,CAAC,OAAO,SAAS;AACnB,YAAM,IAAI,MAAM,wBAAwB,OAAO,KAAK,EAAE;AAAA,IACxD;AACA,QAAI,OAAO,SAAS,aAAa,GAAG;AAClC,YAAM,IAAI,yBAAyB,OAAO,IAAI;AAAA,IAChD;AAEA,UAAM,SAAS,KAAK,MAAM,OAAO,SAAS,MAAM;AAChD,WAAO,EAAE,MAAM,OAAO,MAAM,OAAO,OAAO,SAAS,YAAY;AAAA,EACjE;AAAA,EAEA,MAAM,aAAa,QAA8D;AAC/E,UAAM,OAAO,MAAM,KAAK,YAAY,MAAM;AAC1C,QAAI,KAAK,OAAO;AACd,YAAM,IAAI,4BAA4B,OAAO,IAAI;AAAA,IACnD;AACA,QAAI,KAAK,OAAO,KAAK,yBAAyB;AAC5C,YAAM,IAAI,yBAAyB,OAAO,MAAM,KAAK,MAAM,KAAK,uBAAuB;AAAA,IACzF;AAEA,UAAM,SAAS,MAAM,KAAK,KAAK;AAAA,MAC7B,WAAW,OAAO;AAAA,MAClB,SAAS,cAAc,YAAY,OAAO,IAAI,CAAC;AAAA,IACjD,CAAC;AAED,QAAI,CAAC,OAAO,SAAS;AACnB,YAAM,IAAI,MAAM,4BAA4B,OAAO,KAAK,EAAE;AAAA,IAC5D;AACA,QAAI,OAAO,SAAS,aAAa,GAAG;AAClC,YAAM,IAAI,yBAAyB,OAAO,IAAI;AAAA,IAChD;AAEA,WAAO,OAAO,KAAK,OAAO,SAAS,OAAO,KAAK,GAAG,QAAQ;AAAA,EAC5D;AAAA,EAEA,MAAM,WAAW,QAAmF;AAClG,iCAA6B,EAAE,WAAW,OAAO,WAAW,YAAY,KAAK,WAAW,CAAC;AAEzF,WAAO,QAAQ,KAAK,gBAAgB,QAAQ,OAAO,CAAC,GAAG,YAAY;AACjE,YAAM,QAAQ,IAAI,gBAAgB,EAAE,YAAY,OAAO,WAAW,MAAM,OAAO,WAAW,CAAC;AAC3F,YAAM,YAAY,GAAG,KAAK,SAAS,iBAAiB,MAAM,SAAS,CAAC;AACpE,YAAM,QAAQ,OAAO,QAAQ;AAC7B,WAAK,OAAO,KAAK,6BAA6B;AAAA,QAC5C,WAAW,OAAO;AAAA,QAClB,YAAY,OAAO;AAAA,QACnB;AAAA,MACF,CAAC;AACD,UAAI;AACJ,UAAI;AACF,mBAAW,MAAM,MAAM,WAAW;AAAA,UAChC,QAAQ;AAAA,UACR,SAAS,EAAE,gBAAgB,2BAA2B;AAAA,UACtD,MAAM,OAAO;AAAA,UACb,QAAQ,YAAY,QAAQ,sBAAsB;AAAA,QACpD,CAAC;AAAA,MACH,SAAS,GAAY;AACnB,cAAM,IAAI,MAAM,kBAAkB,SAAS,YAAY,qBAAqB,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;AAAA,MAChG;AACA,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,IAAI;AAAA,UACR,0DAA0D,OAAO,SAAS,MAAM,CAAC,SAAS,SAAS,KAAK,MAAM,SAAS,KAAK,CAAC;AAAA,QAC/H;AAAA,MACF;AAEA,YAAM,SAAU,MAAM,SAAS,KAAK;AACpC,UAAI,CAAC,OAAO,SAAS;AACnB,cAAM,IAAI,MAAM,kCAAkC,OAAO,KAAK,EAAE;AAAA,MAClE;AACA,WAAK,OAAO,KAAK,4BAA4B;AAAA,QAC3C,WAAW,OAAO;AAAA,QAClB,YAAY,OAAO;AAAA,QACnB;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,0BAA6C;AAC3C,WAAO,IAAI,sBAAsB;AAAA,MAC/B,gBAAgB,MAAM,QAAQ,QAAQ,KAAK,aAAa;AAAA,MACxD,sBAAsB,kBAAkB,OAAO,4BAA4B,CAAC;AAAA,MAC5E,QAAQ,KAAK;AAAA,MACb,kBAAkB,EAAE,YAAY,KAAK,cAAc,eAAe,EAAE;AAAA,IACtE,CAAC;AAAA,EACH;AAAA,EAEA,4BAAoC;AAClC,WAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOT;AAAA;AAAA;AAAA;AAAA,EAKA,uBAA+B;AAC7B,WAAO;AAAA,EACT;AAAA,EAEA,wBAAgC;AAC9B,WAAO;AAAA,EACT;AAAA,EAEA,oBAA4B;AAC1B,WAAO;AAAA,EACT;AAAA,EAEA,eAAuB;AACrB,WAAO;AAAA,EACT;AAAA,EAEA,yBAAiC;AAC/B,WAAO;AAAA,EACT;AACF;","names":[]}

package/dist/core/util/errorLogFields.d.ts

@@ -5,6 +5,7 @@ export interface ErrorLogFields {
 /**
  * User/turn-facing message for any thrown value. Prefer Error.message / `.message`;
  * never surface developer-only strings (e.g. unserialisable dumps) in Agent Steps.
+ * Includes nested `cause` messages when present (e.g. undici "fetch failed").
  */
 export declare function describeUnknownError(error: unknown): string;
 export declare function extractErrorLogFields(error: unknown): ErrorLogFields;

package/dist/core/util/errorLogFields.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errorLogFields.d.ts","sourceRoot":"","sources":["../../../src/core/util/errorLogFields.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAUD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAgB3D;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,CAepE"}
+{"version":3,"file":"errorLogFields.d.ts","sourceRoot":"","sources":["../../../src/core/util/errorLogFields.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAoDD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAS3D;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,CAgBpE"}

package/dist/core/util/errorLogFields.js

@@ -31,9 +31,9 @@ function formatObjectErrorForLog(error) {
     return `unserialisable error (${Object.keys(error).join(", ")})`;
   }
 }
-function describeUnknownError(error) {
+function messageOfUnknown(error) {
   if (error instanceof Error) {
-    return error.message.length > 0 ? error.message : "An unexpected error occurred";
+    return error.message;
   }
   if (typeof error !== "object" || error === null) {
     return String(error);
@@ -45,22 +45,49 @@ function describeUnknownError(error) {
   try {
     return JSON.stringify(error);
   } catch {
+    return "";
+  }
+}
+function describeErrorChain(error, seen) {
+  if (error === void 0 || error === null || seen.has(error)) {
+    return "";
+  }
+  seen.add(error);
+  const head = messageOfUnknown(error).trim();
+  const nestedCause = typeof error === "object" && "cause" in error ? Reflect.get(error, "cause") : void 0;
+  const tail = describeErrorChain(nestedCause, seen).trim();
+  if (head.length === 0) {
+    return tail;
+  }
+  if (tail.length === 0 || head.includes(tail)) {
+    return head;
+  }
+  return `${head}: ${tail}`;
+}
+function describeUnknownError(error) {
+  const chain = describeErrorChain(error, /* @__PURE__ */ new Set());
+  if (chain.length > 0) {
+    return chain;
+  }
+  if (typeof error === "object" && error !== null) {
     return "An unexpected error occurred";
   }
+  return String(error);
 }
 function extractErrorLogFields(error) {
   if (error instanceof Error) {
+    const chain2 = describeErrorChain(error, /* @__PURE__ */ new Set());
     return {
-      error: error.message.length > 0 ? error.message : formatObjectErrorForLog(error),
+      error: chain2.length > 0 ? chain2 : formatObjectErrorForLog(error),
       stack: error.stack
     };
   }
   if (typeof error !== "object" || error === null) {
     return { error: String(error) };
   }
-  const message = Reflect.get(error, "message");
-  if (typeof message === "string" && message.length > 0) {
-    return { error: message };
+  const chain = describeErrorChain(error, /* @__PURE__ */ new Set());
+  if (chain.length > 0) {
+    return { error: chain };
   }
   return { error: formatObjectErrorForLog(error) };
 }

package/dist/core/util/errorLogFields.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/core/util/errorLogFields.ts"],"sourcesContent":["export interface ErrorLogFields {\n  error: string;\n  stack?: string | undefined;\n}\n\nfunction formatObjectErrorForLog(error: object): string {\n  try {\n    return JSON.stringify(error);\n  } catch {\n    return `unserialisable error (${Object.keys(error).join(', ')})`;\n  }\n}\n\n/**\n * User/turn-facing message for any thrown value. Prefer Error.message / `.message`;\n * never surface developer-only strings (e.g. unserialisable dumps) in Agent Steps.\n */\nexport function describeUnknownError(error: unknown): string {\n  if (error instanceof Error) {\n    return error.message.length > 0 ? error.message : 'An unexpected error occurred';\n  }\n  if (typeof error !== 'object' || error === null) {\n    return String(error);\n  }\n  const message: unknown = Reflect.get(error, 'message');\n  if (typeof message === 'string' && message.length > 0) {\n    return message;\n  }\n  try {\n    return JSON.stringify(error);\n  } catch {\n    return 'An unexpected error occurred';\n  }\n}\n\nexport function extractErrorLogFields(error: unknown): ErrorLogFields {\n  if (error instanceof Error) {\n    return {\n      error: error.message.length > 0 ? error.message : formatObjectErrorForLog(error),\n      stack: error.stack,\n    };\n  }\n  if (typeof error !== 'object' || error === null) {\n    return { error: String(error) };\n  }\n  const message: unknown = Reflect.get(error, 'message');\n  if (typeof message === 'string' && message.length > 0) {\n    return { error: message };\n  }\n  return { error: formatObjectErrorForLog(error) };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAKA,SAAS,wBAAwB,OAAuB;AACtD,MAAI;AACF,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B,QAAQ;AACN,WAAO,yBAAyB,OAAO,KAAK,KAAK,EAAE,KAAK,IAAI,CAAC;AAAA,EAC/D;AACF;AAMO,SAAS,qBAAqB,OAAwB;AAC3D,MAAI,iBAAiB,OAAO;AAC1B,WAAO,MAAM,QAAQ,SAAS,IAAI,MAAM,UAAU;AAAA,EACpD;AACA,MAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAC/C,WAAO,OAAO,KAAK;AAAA,EACrB;AACA,QAAM,UAAmB,QAAQ,IAAI,OAAO,SAAS;AACrD,MAAI,OAAO,YAAY,YAAY,QAAQ,SAAS,GAAG;AACrD,WAAO;AAAA,EACT;AACA,MAAI;AACF,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,sBAAsB,OAAgC;AACpE,MAAI,iBAAiB,OAAO;AAC1B,WAAO;AAAA,MACL,OAAO,MAAM,QAAQ,SAAS,IAAI,MAAM,UAAU,wBAAwB,KAAK;AAAA,MAC/E,OAAO,MAAM;AAAA,IACf;AAAA,EACF;AACA,MAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAC/C,WAAO,EAAE,OAAO,OAAO,KAAK,EAAE;AAAA,EAChC;AACA,QAAM,UAAmB,QAAQ,IAAI,OAAO,SAAS;AACrD,MAAI,OAAO,YAAY,YAAY,QAAQ,SAAS,GAAG;AACrD,WAAO,EAAE,OAAO,QAAQ;AAAA,EAC1B;AACA,SAAO,EAAE,OAAO,wBAAwB,KAAK,EAAE;AACjD;","names":[]}
+{"version":3,"sources":["../../../src/core/util/errorLogFields.ts"],"sourcesContent":["export interface ErrorLogFields {\n  error: string;\n  stack?: string | undefined;\n}\n\nfunction formatObjectErrorForLog(error: object): string {\n  try {\n    return JSON.stringify(error);\n  } catch {\n    return `unserialisable error (${Object.keys(error).join(', ')})`;\n  }\n}\n\n/** Single-hop message for any thrown value (no cause walk). */\nfunction messageOfUnknown(error: unknown): string {\n  if (error instanceof Error) {\n    return error.message;\n  }\n  if (typeof error !== 'object' || error === null) {\n    return String(error);\n  }\n  const message: unknown = Reflect.get(error, 'message');\n  if (typeof message === 'string' && message.length > 0) {\n    return message;\n  }\n  try {\n    return JSON.stringify(error);\n  } catch {\n    return '';\n  }\n}\n\n/**\n * Walk `Error.cause` (and plain `{ cause }` objects) so undici-style\n * `TypeError: fetch failed` surfaces the nested `ECONNREFUSED` / cert reason.\n */\nfunction describeErrorChain(error: unknown, seen: Set<unknown>): string {\n  if (error === undefined || error === null || seen.has(error)) {\n    return '';\n  }\n  seen.add(error);\n\n  const head = messageOfUnknown(error).trim();\n  const nestedCause = typeof error === 'object' && 'cause' in error ? Reflect.get(error, 'cause') : undefined;\n  const tail = describeErrorChain(nestedCause, seen).trim();\n\n  if (head.length === 0) {\n    return tail;\n  }\n  if (tail.length === 0 || head.includes(tail)) {\n    return head;\n  }\n  return `${head}: ${tail}`;\n}\n\n/**\n * User/turn-facing message for any thrown value. Prefer Error.message / `.message`;\n * never surface developer-only strings (e.g. unserialisable dumps) in Agent Steps.\n * Includes nested `cause` messages when present (e.g. undici \"fetch failed\").\n */\nexport function describeUnknownError(error: unknown): string {\n  const chain = describeErrorChain(error, new Set());\n  if (chain.length > 0) {\n    return chain;\n  }\n  if (typeof error === 'object' && error !== null) {\n    return 'An unexpected error occurred';\n  }\n  return String(error);\n}\n\nexport function extractErrorLogFields(error: unknown): ErrorLogFields {\n  if (error instanceof Error) {\n    const chain = describeErrorChain(error, new Set());\n    return {\n      error: chain.length > 0 ? chain : formatObjectErrorForLog(error),\n      stack: error.stack,\n    };\n  }\n  if (typeof error !== 'object' || error === null) {\n    return { error: String(error) };\n  }\n  const chain = describeErrorChain(error, new Set());\n  if (chain.length > 0) {\n    return { error: chain };\n  }\n  return { error: formatObjectErrorForLog(error) };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAKA,SAAS,wBAAwB,OAAuB;AACtD,MAAI;AACF,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B,QAAQ;AACN,WAAO,yBAAyB,OAAO,KAAK,KAAK,EAAE,KAAK,IAAI,CAAC;AAAA,EAC/D;AACF;AAGA,SAAS,iBAAiB,OAAwB;AAChD,MAAI,iBAAiB,OAAO;AAC1B,WAAO,MAAM;AAAA,EACf;AACA,MAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAC/C,WAAO,OAAO,KAAK;AAAA,EACrB;AACA,QAAM,UAAmB,QAAQ,IAAI,OAAO,SAAS;AACrD,MAAI,OAAO,YAAY,YAAY,QAAQ,SAAS,GAAG;AACrD,WAAO;AAAA,EACT;AACA,MAAI;AACF,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAMA,SAAS,mBAAmB,OAAgB,MAA4B;AACtE,MAAI,UAAU,UAAa,UAAU,QAAQ,KAAK,IAAI,KAAK,GAAG;AAC5D,WAAO;AAAA,EACT;AACA,OAAK,IAAI,KAAK;AAEd,QAAM,OAAO,iBAAiB,KAAK,EAAE,KAAK;AAC1C,QAAM,cAAc,OAAO,UAAU,YAAY,WAAW,QAAQ,QAAQ,IAAI,OAAO,OAAO,IAAI;AAClG,QAAM,OAAO,mBAAmB,aAAa,IAAI,EAAE,KAAK;AAExD,MAAI,KAAK,WAAW,GAAG;AACrB,WAAO;AAAA,EACT;AACA,MAAI,KAAK,WAAW,KAAK,KAAK,SAAS,IAAI,GAAG;AAC5C,WAAO;AAAA,EACT;AACA,SAAO,GAAG,IAAI,KAAK,IAAI;AACzB;AAOO,SAAS,qBAAqB,OAAwB;AAC3D,QAAM,QAAQ,mBAAmB,OAAO,oBAAI,IAAI,CAAC;AACjD,MAAI,MAAM,SAAS,GAAG;AACpB,WAAO;AAAA,EACT;AACA,MAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAC/C,WAAO;AAAA,EACT;AACA,SAAO,OAAO,KAAK;AACrB;AAEO,SAAS,sBAAsB,OAAgC;AACpE,MAAI,iBAAiB,OAAO;AAC1B,UAAMA,SAAQ,mBAAmB,OAAO,oBAAI,IAAI,CAAC;AACjD,WAAO;AAAA,MACL,OAAOA,OAAM,SAAS,IAAIA,SAAQ,wBAAwB,KAAK;AAAA,MAC/D,OAAO,MAAM;AAAA,IACf;AAAA,EACF;AACA,MAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAC/C,WAAO,EAAE,OAAO,OAAO,KAAK,EAAE;AAAA,EAChC;AACA,QAAM,QAAQ,mBAAmB,OAAO,oBAAI,IAAI,CAAC;AACjD,MAAI,MAAM,SAAS,GAAG;AACpB,WAAO,EAAE,OAAO,MAAM;AAAA,EACxB;AACA,SAAO,EAAE,OAAO,wBAAwB,KAAK,EAAE;AACjD;","names":["chain"]}

package/dist/core/util/errorLogFields.mjs

@@ -6,9 +6,9 @@ function formatObjectErrorForLog(error) {
     return `unserialisable error (${Object.keys(error).join(", ")})`;
   }
 }
-function describeUnknownError(error) {
+function messageOfUnknown(error) {
   if (error instanceof Error) {
-    return error.message.length > 0 ? error.message : "An unexpected error occurred";
+    return error.message;
   }
   if (typeof error !== "object" || error === null) {
     return String(error);
@@ -20,22 +20,49 @@ function describeUnknownError(error) {
   try {
     return JSON.stringify(error);
   } catch {
+    return "";
+  }
+}
+function describeErrorChain(error, seen) {
+  if (error === void 0 || error === null || seen.has(error)) {
+    return "";
+  }
+  seen.add(error);
+  const head = messageOfUnknown(error).trim();
+  const nestedCause = typeof error === "object" && "cause" in error ? Reflect.get(error, "cause") : void 0;
+  const tail = describeErrorChain(nestedCause, seen).trim();
+  if (head.length === 0) {
+    return tail;
+  }
+  if (tail.length === 0 || head.includes(tail)) {
+    return head;
+  }
+  return `${head}: ${tail}`;
+}
+function describeUnknownError(error) {
+  const chain = describeErrorChain(error, /* @__PURE__ */ new Set());
+  if (chain.length > 0) {
+    return chain;
+  }
+  if (typeof error === "object" && error !== null) {
     return "An unexpected error occurred";
   }
+  return String(error);
 }
 function extractErrorLogFields(error) {
   if (error instanceof Error) {
+    const chain2 = describeErrorChain(error, /* @__PURE__ */ new Set());
     return {
-      error: error.message.length > 0 ? error.message : formatObjectErrorForLog(error),
+      error: chain2.length > 0 ? chain2 : formatObjectErrorForLog(error),
       stack: error.stack
     };
   }
   if (typeof error !== "object" || error === null) {
     return { error: String(error) };
   }
-  const message = Reflect.get(error, "message");
-  if (typeof message === "string" && message.length > 0) {
-    return { error: message };
+  const chain = describeErrorChain(error, /* @__PURE__ */ new Set());
+  if (chain.length > 0) {
+    return { error: chain };
   }
   return { error: formatObjectErrorForLog(error) };
 }

package/dist/core/util/errorLogFields.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/core/util/errorLogFields.ts"],"sourcesContent":["export interface ErrorLogFields {\n  error: string;\n  stack?: string | undefined;\n}\n\nfunction formatObjectErrorForLog(error: object): string {\n  try {\n    return JSON.stringify(error);\n  } catch {\n    return `unserialisable error (${Object.keys(error).join(', ')})`;\n  }\n}\n\n/**\n * User/turn-facing message for any thrown value. Prefer Error.message / `.message`;\n * never surface developer-only strings (e.g. unserialisable dumps) in Agent Steps.\n */\nexport function describeUnknownError(error: unknown): string {\n  if (error instanceof Error) {\n    return error.message.length > 0 ? error.message : 'An unexpected error occurred';\n  }\n  if (typeof error !== 'object' || error === null) {\n    return String(error);\n  }\n  const message: unknown = Reflect.get(error, 'message');\n  if (typeof message === 'string' && message.length > 0) {\n    return message;\n  }\n  try {\n    return JSON.stringify(error);\n  } catch {\n    return 'An unexpected error occurred';\n  }\n}\n\nexport function extractErrorLogFields(error: unknown): ErrorLogFields {\n  if (error instanceof Error) {\n    return {\n      error: error.message.length > 0 ? error.message : formatObjectErrorForLog(error),\n      stack: error.stack,\n    };\n  }\n  if (typeof error !== 'object' || error === null) {\n    return { error: String(error) };\n  }\n  const message: unknown = Reflect.get(error, 'message');\n  if (typeof message === 'string' && message.length > 0) {\n    return { error: message };\n  }\n  return { error: formatObjectErrorForLog(error) };\n}\n"],"mappings":";AAKA,SAAS,wBAAwB,OAAuB;AACtD,MAAI;AACF,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B,QAAQ;AACN,WAAO,yBAAyB,OAAO,KAAK,KAAK,EAAE,KAAK,IAAI,CAAC;AAAA,EAC/D;AACF;AAMO,SAAS,qBAAqB,OAAwB;AAC3D,MAAI,iBAAiB,OAAO;AAC1B,WAAO,MAAM,QAAQ,SAAS,IAAI,MAAM,UAAU;AAAA,EACpD;AACA,MAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAC/C,WAAO,OAAO,KAAK;AAAA,EACrB;AACA,QAAM,UAAmB,QAAQ,IAAI,OAAO,SAAS;AACrD,MAAI,OAAO,YAAY,YAAY,QAAQ,SAAS,GAAG;AACrD,WAAO;AAAA,EACT;AACA,MAAI;AACF,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,sBAAsB,OAAgC;AACpE,MAAI,iBAAiB,OAAO;AAC1B,WAAO;AAAA,MACL,OAAO,MAAM,QAAQ,SAAS,IAAI,MAAM,UAAU,wBAAwB,KAAK;AAAA,MAC/E,OAAO,MAAM;AAAA,IACf;AAAA,EACF;AACA,MAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAC/C,WAAO,EAAE,OAAO,OAAO,KAAK,EAAE;AAAA,EAChC;AACA,QAAM,UAAmB,QAAQ,IAAI,OAAO,SAAS;AACrD,MAAI,OAAO,YAAY,YAAY,QAAQ,SAAS,GAAG;AACrD,WAAO,EAAE,OAAO,QAAQ;AAAA,EAC1B;AACA,SAAO,EAAE,OAAO,wBAAwB,KAAK,EAAE;AACjD;","names":[]}
+{"version":3,"sources":["../../../src/core/util/errorLogFields.ts"],"sourcesContent":["export interface ErrorLogFields {\n  error: string;\n  stack?: string | undefined;\n}\n\nfunction formatObjectErrorForLog(error: object): string {\n  try {\n    return JSON.stringify(error);\n  } catch {\n    return `unserialisable error (${Object.keys(error).join(', ')})`;\n  }\n}\n\n/** Single-hop message for any thrown value (no cause walk). */\nfunction messageOfUnknown(error: unknown): string {\n  if (error instanceof Error) {\n    return error.message;\n  }\n  if (typeof error !== 'object' || error === null) {\n    return String(error);\n  }\n  const message: unknown = Reflect.get(error, 'message');\n  if (typeof message === 'string' && message.length > 0) {\n    return message;\n  }\n  try {\n    return JSON.stringify(error);\n  } catch {\n    return '';\n  }\n}\n\n/**\n * Walk `Error.cause` (and plain `{ cause }` objects) so undici-style\n * `TypeError: fetch failed` surfaces the nested `ECONNREFUSED` / cert reason.\n */\nfunction describeErrorChain(error: unknown, seen: Set<unknown>): string {\n  if (error === undefined || error === null || seen.has(error)) {\n    return '';\n  }\n  seen.add(error);\n\n  const head = messageOfUnknown(error).trim();\n  const nestedCause = typeof error === 'object' && 'cause' in error ? Reflect.get(error, 'cause') : undefined;\n  const tail = describeErrorChain(nestedCause, seen).trim();\n\n  if (head.length === 0) {\n    return tail;\n  }\n  if (tail.length === 0 || head.includes(tail)) {\n    return head;\n  }\n  return `${head}: ${tail}`;\n}\n\n/**\n * User/turn-facing message for any thrown value. Prefer Error.message / `.message`;\n * never surface developer-only strings (e.g. unserialisable dumps) in Agent Steps.\n * Includes nested `cause` messages when present (e.g. undici \"fetch failed\").\n */\nexport function describeUnknownError(error: unknown): string {\n  const chain = describeErrorChain(error, new Set());\n  if (chain.length > 0) {\n    return chain;\n  }\n  if (typeof error === 'object' && error !== null) {\n    return 'An unexpected error occurred';\n  }\n  return String(error);\n}\n\nexport function extractErrorLogFields(error: unknown): ErrorLogFields {\n  if (error instanceof Error) {\n    const chain = describeErrorChain(error, new Set());\n    return {\n      error: chain.length > 0 ? chain : formatObjectErrorForLog(error),\n      stack: error.stack,\n    };\n  }\n  if (typeof error !== 'object' || error === null) {\n    return { error: String(error) };\n  }\n  const chain = describeErrorChain(error, new Set());\n  if (chain.length > 0) {\n    return { error: chain };\n  }\n  return { error: formatObjectErrorForLog(error) };\n}\n"],"mappings":";AAKA,SAAS,wBAAwB,OAAuB;AACtD,MAAI;AACF,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B,QAAQ;AACN,WAAO,yBAAyB,OAAO,KAAK,KAAK,EAAE,KAAK,IAAI,CAAC;AAAA,EAC/D;AACF;AAGA,SAAS,iBAAiB,OAAwB;AAChD,MAAI,iBAAiB,OAAO;AAC1B,WAAO,MAAM;AAAA,EACf;AACA,MAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAC/C,WAAO,OAAO,KAAK;AAAA,EACrB;AACA,QAAM,UAAmB,QAAQ,IAAI,OAAO,SAAS;AACrD,MAAI,OAAO,YAAY,YAAY,QAAQ,SAAS,GAAG;AACrD,WAAO;AAAA,EACT;AACA,MAAI;AACF,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAMA,SAAS,mBAAmB,OAAgB,MAA4B;AACtE,MAAI,UAAU,UAAa,UAAU,QAAQ,KAAK,IAAI,KAAK,GAAG;AAC5D,WAAO;AAAA,EACT;AACA,OAAK,IAAI,KAAK;AAEd,QAAM,OAAO,iBAAiB,KAAK,EAAE,KAAK;AAC1C,QAAM,cAAc,OAAO,UAAU,YAAY,WAAW,QAAQ,QAAQ,IAAI,OAAO,OAAO,IAAI;AAClG,QAAM,OAAO,mBAAmB,aAAa,IAAI,EAAE,KAAK;AAExD,MAAI,KAAK,WAAW,GAAG;AACrB,WAAO;AAAA,EACT;AACA,MAAI,KAAK,WAAW,KAAK,KAAK,SAAS,IAAI,GAAG;AAC5C,WAAO;AAAA,EACT;AACA,SAAO,GAAG,IAAI,KAAK,IAAI;AACzB;AAOO,SAAS,qBAAqB,OAAwB;AAC3D,QAAM,QAAQ,mBAAmB,OAAO,oBAAI,IAAI,CAAC;AACjD,MAAI,MAAM,SAAS,GAAG;AACpB,WAAO;AAAA,EACT;AACA,MAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAC/C,WAAO;AAAA,EACT;AACA,SAAO,OAAO,KAAK;AACrB;AAEO,SAAS,sBAAsB,OAAgC;AACpE,MAAI,iBAAiB,OAAO;AAC1B,UAAMA,SAAQ,mBAAmB,OAAO,oBAAI,IAAI,CAAC;AACjD,WAAO;AAAA,MACL,OAAOA,OAAM,SAAS,IAAIA,SAAQ,wBAAwB,KAAK;AAAA,MAC/D,OAAO,MAAM;AAAA,IACf;AAAA,EACF;AACA,MAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAC/C,WAAO,EAAE,OAAO,OAAO,KAAK,EAAE;AAAA,EAChC;AACA,QAAM,QAAQ,mBAAmB,OAAO,oBAAI,IAAI,CAAC;AACjD,MAAI,MAAM,SAAS,GAAG;AACpB,WAAO,EAAE,OAAO,MAAM;AAAA,EACxB;AACA,SAAO,EAAE,OAAO,wBAAwB,KAAK,EAAE;AACjD;","names":["chain"]}

package/dist/core/util/ssrfGuard.d.ts

@@ -0,0 +1,10 @@
+export declare function configureOutboundUrlGuard(config: {
+    enabled?: boolean;
+    allowedHosts: readonly string[];
+    blockedHosts: readonly string[];
+}): void;
+export declare function assertSafeOutboundUrl(input: string | URL | Request): Promise<void>;
+export declare function ssrfFetch(input: string | URL | Request, init?: RequestInit): Promise<Response>;
+/** Same as `ssrfFetch` with a 30m bodyTimeout for idle MCP SSE / streamable-HTTP. */
+export declare function mcpSsrfFetch(input: string | URL | Request, init?: RequestInit): Promise<Response>;
+//# sourceMappingURL=ssrfGuard.d.ts.map

package/dist/core/util/ssrfGuard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssrfGuard.d.ts","sourceRoot":"","sources":["../../../src/core/util/ssrfGuard.ts"],"names":[],"mappings":"AA2EA,wBAAgB,yBAAyB,CAAC,MAAM,EAAE;IAChD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CACjC,GAAG,IAAI,CAIP;AAyGD,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAmBxF;AAmGD,wBAAsB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAEpG;AAED,qFAAqF;AACrF,wBAAsB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAEvG"}