@vendoai/apps 0.4.0

package/dist/bench/toolfork.d.ts

@@ -0,0 +1,18 @@
+/**
+ * W1-bench Experiment 2 — the builder-calls fork. The app is emitted as a
+ * stream of strict tool calls in ONE assistant turn: `set_query`,
+ * `begin_region`/`end_region` for nesting (order-based; the compiler still
+ * mints ids), a `place_<Component>` tool per prewired/catalog component
+ * (constrained component + prop names), and `define_island`. Bindings and
+ * actions are structured tool inputs (`bind_data` field paths). The call
+ * stream is reconstructed into ordinary wire so it goes through the exact same
+ * compileWireV2 + metrics path as the JSX arm.
+ */
+import { type ToolSet } from "ai";
+export declare const buildForkTools: () => ToolSet;
+/** Reconstruct wire markup from the ordered tool-call stream. */
+export declare const reconstructWire: (calls: {
+    toolName: string;
+    input: Record<string, unknown>;
+}[]) => string;
+//# sourceMappingURL=toolfork.d.ts.map

package/dist/bench/toolfork.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolfork.d.ts","sourceRoot":"","sources":["../../src/bench/toolfork.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAoB,KAAK,OAAO,EAAE,MAAM,IAAI,CAAC;AAiCpD,eAAO,MAAM,cAAc,QAAO,OAkCjC,CAAC;AAsBF,iEAAiE;AACjE,eAAO,MAAM,eAAe,GAAI,OAAO;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,EAAE,KAAG,MA6B/F,CAAC"}

package/dist/bench/toolfork.js

@@ -0,0 +1,125 @@
+/**
+ * W1-bench Experiment 2 — the builder-calls fork. The app is emitted as a
+ * stream of strict tool calls in ONE assistant turn: `set_query`,
+ * `begin_region`/`end_region` for nesting (order-based; the compiler still
+ * mints ids), a `place_<Component>` tool per prewired/catalog component
+ * (constrained component + prop names), and `define_island`. Bindings and
+ * actions are structured tool inputs (`bind_data` field paths). The call
+ * stream is reconstructed into ordinary wire so it goes through the exact same
+ * compileWireV2 + metrics path as the JSX arm.
+ */
+import { jsonSchema, tool } from "ai";
+import { PREWIRED_SCHEMAS } from "../prewired-schema.js";
+import { MAPLE_CATALOG } from "./fixtures.js";
+const LAYOUT = new Set(["Stack", "Row", "Grid", "Card", "Surface"]);
+const componentNames = [
+    ...Object.keys(PREWIRED_SCHEMAS),
+    ...MAPLE_CATALOG.map((c) => c.name),
+];
+const leafNames = componentNames.filter((n) => !LAYOUT.has(n));
+const sig = (name) => {
+    const pre = PREWIRED_SCHEMAS[name];
+    if (pre)
+        return pre.signature;
+    return MAPLE_CATALOG.find((c) => c.name === name)?.signature ?? name;
+};
+const objSchema = (props, required = []) => jsonSchema({ type: "object", properties: props, required, additionalProperties: false });
+const placeInput = objSchema({
+    props: { type: "object", description: "Literal prop values (strings/numbers/booleans/arrays), e.g. {label:\"Total\", format:\"money\"} or columns for a table.", additionalProperties: true },
+    bindings: { type: "object", description: "prop -> data reference string like \"invoicesList.data\" or \"invoicesList.totalCents\" (optionally with a | format(...) pipe). The referenced query must be declared via set_query.", additionalProperties: { type: "string" } },
+    actions: { type: "object", description: "prop -> host tool name for on* actions, e.g. {onClick:\"invoices.sendReminders\"}.", additionalProperties: { type: "string" } },
+    actionPayloads: { type: "object", description: "prop -> data reference string for the action payload, e.g. {onClick:\"invoicesList.data.0.id\"}.", additionalProperties: { type: "string" } },
+});
+/** Build the strict tool set. */
+// No-op result so the tool-use loop advances (the builder doesn't need real
+// results — it is composing a tree, not reading data).
+const ack = async () => ({ ok: true });
+export const buildForkTools = () => {
+    const tools = {};
+    tools.set_query = tool({
+        description: "Declare a data query. Its result is addressable by <name> in bindings.",
+        inputSchema: objSchema({ name: { type: "string" }, tool: { type: "string" }, input: { type: "object", additionalProperties: true } }, ["name", "tool"]),
+        execute: ack,
+    });
+    tools.begin_region = tool({
+        description: `Open a layout container and make it the current parent. component is one of: ${[...LAYOUT].join(", ")}.`,
+        inputSchema: objSchema({ component: { type: "string", enum: [...LAYOUT] }, props: { type: "object", additionalProperties: true } }, ["component"]),
+        execute: ack,
+    });
+    tools.end_region = tool({ description: "Close the current layout container.", inputSchema: objSchema({}), execute: ack });
+    tools.finish = tool({ description: "Call this once the app is fully composed.", inputSchema: objSchema({}), execute: ack });
+    tools.define_island = tool({
+        description: "Define a custom React island component by name with full TSX source (last resort).",
+        inputSchema: objSchema({ name: { type: "string" }, source: { type: "string" } }, ["name", "source"]),
+        execute: ack,
+    });
+    // One place tool per leaf component (constrained component + its prop signature).
+    for (const name of leafNames) {
+        tools[`place_${name}`] = tool({
+            description: `Add a ${name} to the current parent. ${sig(name)}`,
+            inputSchema: placeInput,
+            execute: ack,
+        });
+    }
+    return tools;
+};
+const bindingExpr = (ref) => `{${ref}}`;
+const attrsFor = (input) => {
+    const parts = [];
+    const props = (input.props ?? {});
+    for (const [k, v] of Object.entries(props)) {
+        if (typeof v === "string")
+            parts.push(`${k}="${v.replace(/"/g, "&quot;")}"`);
+        else
+            parts.push(`${k}={${JSON.stringify(v)}}`);
+    }
+    const bindings = (input.bindings ?? {});
+    for (const [k, ref] of Object.entries(bindings))
+        parts.push(`${k}=${bindingExpr(ref)}`);
+    const actions = (input.actions ?? {});
+    const payloads = (input.actionPayloads ?? {});
+    for (const [k, t] of Object.entries(actions)) {
+        if (payloads[k])
+            parts.push(`${k}={{action:"${t}",payload:{value:${payloads[k]}}}}`);
+        else
+            parts.push(`${k}="${t}"`);
+    }
+    return parts.length ? " " + parts.join(" ") : "";
+};
+/** Reconstruct wire markup from the ordered tool-call stream. */
+export const reconstructWire = (calls) => {
+    const queries = [];
+    const islands = [];
+    const body = [];
+    const regionStack = [];
+    for (const call of calls) {
+        const inp = call.input ?? {};
+        if (call.toolName === "set_query") {
+            const name = String(inp.name ?? "q");
+            const t = String(inp.tool ?? "");
+            const input = inp.input && Object.keys(inp.input).length ? ` input={${JSON.stringify(inp.input)}}` : "";
+            queries.push(`<Query id="${name}" tool="${t}"${input}/>`);
+        }
+        else if (call.toolName === "begin_region") {
+            const comp = String(inp.component ?? "Stack");
+            regionStack.push(comp);
+            body.push(`<${comp}${attrsFor({ props: inp.props })}>`);
+        }
+        else if (call.toolName === "end_region") {
+            const comp = regionStack.pop() ?? "Stack";
+            body.push(`</${comp}>`);
+        }
+        else if (call.toolName === "define_island") {
+            const name = String(inp.name ?? "Island");
+            islands.push(`<Island name="${name}">${String(inp.source ?? "")}</Island>`);
+        }
+        else if (call.toolName.startsWith("place_")) {
+            const comp = call.toolName.slice("place_".length);
+            body.push(`<${comp}${attrsFor(inp)}/>`);
+        }
+    }
+    while (regionStack.length)
+        body.push(`</${regionStack.pop()}>`);
+    return `<App name="Generated">${queries.join("")}${body.join("")}${islands.join("")}</App>`;
+};
+//# sourceMappingURL=toolfork.js.map

package/dist/bench/toolfork.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolfork.js","sourceRoot":"","sources":["../../src/bench/toolfork.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,UAAU,EAAE,IAAI,EAAgB,MAAM,IAAI,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AAEpE,MAAM,cAAc,GAAG;IACrB,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC;IAChC,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;CACpC,CAAC;AACF,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAE/D,MAAM,GAAG,GAAG,CAAC,IAAY,EAAU,EAAE;IACnC,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAqC,CAAC,CAAC;IACpE,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC,SAAS,CAAC;IAC9B,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,SAAS,IAAI,IAAI,CAAC;AACvE,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,KAA8B,EAAE,WAAqB,EAAE,EAAE,EAAE,CAC5E,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,oBAAoB,EAAE,KAAK,EAA6B,CAAC,CAAC;AAEtH,MAAM,UAAU,GAAG,SAAS,CAAC;IAC3B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,yHAAyH,EAAE,oBAAoB,EAAE,IAAI,EAAE;IAC7L,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sLAAsL,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;IAC3Q,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oFAAoF,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;IACxK,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kGAAkG,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;CAC9L,CAAC,CAAC;AAEH,iCAAiC;AACjC,4EAA4E;AAC5E,uDAAuD;AACvD,MAAM,GAAG,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;AAEvC,MAAM,CAAC,MAAM,cAAc,GAAG,GAAY,EAAE;IAC1C,MAAM,KAAK,GAAY,EAAE,CAAC;IAC1B,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;QACrB,WAAW,EAAE,wEAAwE;QACrF,WAAW,EAAE,SAAS,CACpB,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,EAAE,EAC7G,CAAC,MAAM,EAAE,MAAM,CAAC,CACjB;QACD,OAAO,EAAE,GAAG;KACb,CAAC,CAAC;IACH,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC;QACxB,WAAW,EAAE,gFAAgF,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QACtH,WAAW,EAAE,SAAS,CACpB,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,EAAE,EAC3G,CAAC,WAAW,CAAC,CACd;QACD,OAAO,EAAE,GAAG;KACb,CAAC,CAAC;IACH,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,EAAE,WAAW,EAAE,qCAAqC,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1H,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,WAAW,EAAE,2CAA2C,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5H,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC;QACzB,WAAW,EAAE,oFAAoF;QACjG,WAAW,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACpG,OAAO,EAAE,GAAG;KACb,CAAC,CAAC;IACH,kFAAkF;IAClF,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;YAC5B,WAAW,EAAE,SAAS,IAAI,2BAA2B,GAAG,CAAC,IAAI,CAAC,EAAE;YAChE,WAAW,EAAE,UAAU;YACvB,OAAO,EAAE,GAAG;SACb,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC;AAExD,MAAM,QAAQ,GAAG,CAAC,KAA8B,EAAU,EAAE;IAC1D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAA4B,CAAC;IAC7D,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;;YACxE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAA2B,CAAC;IAClE,KAAK,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACxF,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAA2B,CAAC;IAChE,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAA2B,CAAC;IACxE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,IAAI,QAAQ,CAAC,CAAC,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,oBAAoB,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;;YAChF,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACnD,CAAC,CAAC;AAEF,iEAAiE;AACjE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAA6D,EAAU,EAAE;IACvG,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;YACrC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAe,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAClH,OAAO,CAAC,IAAI,CAAC,cAAc,IAAI,WAAW,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAC5D,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC;YAC9C,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,QAAQ,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC;QAC1D,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC;YAC1C,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC;QAC1B,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,KAAK,eAAe,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,QAAQ,CAAC,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC,iBAAiB,IAAI,KAAK,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,WAAW,CAAC,CAAC;QAC9E,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAClD,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,OAAO,WAAW,CAAC,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,KAAK,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAChE,OAAO,yBAAyB,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC;AAC9F,CAAC,CAAC"}

package/dist/box-agent.d.ts

@@ -0,0 +1,78 @@
+import type { SandboxMachine } from "./sandbox.js";
+/**
+ * execution-v2 Wave 3 — the host-side client of the in-box agent's control
+ * port. The agent + supervisor live inside the base box template
+ * (packages/apps/box/harness.mjs); this module is the host's transport to it,
+ * spoken over the ONE data path into the box, SandboxMachine.request({port}).
+ * The app owns $PORT; the harness owns the CONTROL PORT below.
+ *
+ * Prompt-injection floor: everything the box returns is DATA. A BoxEditResult
+ * never carries host authority — it cannot approve egress, grant a secret, or
+ * mutate a host document. Graduation reads the summary and fn list; approvals
+ * still gate every host mutation (Lane E), and durable writes still ride the
+ * app-token /box callbacks through the guard.
+ */
+/** The harness's control port (VENDO_CONTROL_PORT in the box); distinct from
+ *  the app's $PORT so the app and the agent door never collide. */
+export declare const BOX_CONTROL_PORT = 8811;
+/** The structured result the in-box agent reports (box → host, pure data). */
+export interface BoxEditResult {
+    ok: boolean;
+    summary: string;
+    filesChanged: string[];
+    testsRun: number;
+    /** The POST /fn/<name> functions the box now serves (agent-declared). */
+    fns?: string[];
+    /**
+     * Wave 4 (layer 3) — the agent's declaration that the box now serves a real
+     * web app on non-/fn paths of $PORT. DATA like every other field: the host
+     * verifies the served root itself and the experimental flag gates any
+     * surface flip; this bit alone changes nothing.
+     */
+    servesUi?: boolean;
+}
+/** A minimal sleep seam so tests drive the poll loop without real time. */
+export interface BoxAgentClock {
+    sleep(ms: number): Promise<void>;
+    now(): number;
+}
+export interface BoxEditOptions {
+    prompt: string;
+    context?: string;
+    pollIntervalMs?: number;
+    timeoutMs?: number;
+    clock?: BoxAgentClock;
+}
+/**
+ * Proxy an APP-port request, retrying the provider's 502/503 "port not open"
+ * for a short window. A memory-snapshot resume boots the box's start command
+ * fresh, so the supervised app needs a second or two to rebind $PORT; an fn
+ * call or manifest read that races that startup would otherwise fail. Control-
+ * port requests never use this — the harness is up the moment the box is.
+ */
+export interface BootRetryOptions {
+    attempts?: number;
+    delayMs?: number;
+    sleep?: (ms: number) => Promise<void>;
+}
+export declare const requestAppWithBootRetry: (machine: SandboxMachine, req: Parameters<SandboxMachine["request"]>[0], options?: BootRetryOptions) => Promise<Awaited<ReturnType<SandboxMachine["request"]>>>;
+/**
+ * Re-inject the boundary env into a live box and restart its app. This is the
+ * in-box restart loop Lane E's env-baked-at-provision gap needs: a secret
+ * grant flipped while the machine slept lands here at the next edit/wake.
+ */
+export declare const pushBoxEnv: (machine: SandboxMachine, env: Record<string, string>) => Promise<void>;
+/** Read the box's `vendo.json` manifest verbatim (empty when the box has none).
+ *  Uses the post-resume boot retry: a manifest read right after an edit can
+ *  race the harness restarting the app, and a dropped read would silently lose
+ *  a freshly declared egress domain (and its approval card). */
+export declare const readBoxManifest: (machine: SandboxMachine, bootRetry?: BootRetryOptions) => Promise<string | undefined>;
+/**
+ * Send one edit prompt to the in-box agent and long-poll to completion. The
+ * agent writes code, installs deps, runs its own server, curls its endpoints,
+ * and reports a structured result — self-verification against reality. A
+ * timeout is a failed edit (the caller rolls back), never a throw into the
+ * tree.
+ */
+export declare const runBoxEdit: (machine: SandboxMachine, options: BoxEditOptions) => Promise<BoxEditResult>;
+//# sourceMappingURL=box-agent.d.ts.map

package/dist/box-agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"box-agent.d.ts","sourceRoot":"","sources":["../src/box-agent.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEnD;;;;;;;;;;;;GAYG;AAEH;mEACmE;AACnE,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAQrC,8EAA8E;AAC9E,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,2EAA2E;AAC3E,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,GAAG,IAAI,MAAM,CAAC;CACf;AAOD,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,aAAa,CAAC;CACvB;AA4CD;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED,eAAO,MAAM,uBAAuB,GAClC,SAAS,cAAc,EACvB,KAAK,UAAU,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAC7C,UAAS,gBAAqB,KAC7B,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAUxD,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,UAAU,GAAU,SAAS,cAAc,EAAE,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAG,OAAO,CAAC,IAAI,CAKnG,CAAC;AAEF;;;gEAGgE;AAChE,eAAO,MAAM,eAAe,GAC1B,SAAS,cAAc,EACvB,YAAW,gBAAqB,KAC/B,OAAO,CAAC,MAAM,GAAG,SAAS,CAO5B,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,UAAU,GACrB,SAAS,cAAc,EACvB,SAAS,cAAc,KACtB,OAAO,CAAC,aAAa,CAiCvB,CAAC"}

package/dist/box-agent.js

@@ -0,0 +1,137 @@
+import { VendoError } from "@vendoai/core";
+/**
+ * execution-v2 Wave 3 — the host-side client of the in-box agent's control
+ * port. The agent + supervisor live inside the base box template
+ * (packages/apps/box/harness.mjs); this module is the host's transport to it,
+ * spoken over the ONE data path into the box, SandboxMachine.request({port}).
+ * The app owns $PORT; the harness owns the CONTROL PORT below.
+ *
+ * Prompt-injection floor: everything the box returns is DATA. A BoxEditResult
+ * never carries host authority — it cannot approve egress, grant a secret, or
+ * mutate a host document. Graduation reads the summary and fn list; approvals
+ * still gate every host mutation (Lane E), and durable writes still ride the
+ * app-token /box callbacks through the guard.
+ */
+/** The harness's control port (VENDO_CONTROL_PORT in the box); distinct from
+ *  the app's $PORT so the app and the agent door never collide. */
+export const BOX_CONTROL_PORT = 8811;
+const DEFAULT_POLL_INTERVAL_MS = 2_000;
+const DEFAULT_TASK_TIMEOUT_MS = 8 * 60_000;
+const encoder = new TextEncoder();
+const decoder = new TextDecoder();
+const realClock = {
+    sleep: (ms) => new Promise((resolve) => setTimeout(resolve, ms)),
+    now: () => Date.now(),
+};
+const controlRequest = async (machine, method, path, body) => {
+    const answer = await machine.request({
+        method,
+        path,
+        port: BOX_CONTROL_PORT,
+        ...(body === undefined ? {} : {
+            headers: { "content-type": "application/json" },
+            body: encoder.encode(JSON.stringify(body)),
+        }),
+    });
+    let json;
+    try {
+        json = JSON.parse(decoder.decode(answer.body));
+    }
+    catch {
+        json = undefined;
+    }
+    return { status: answer.status, json };
+};
+const asResult = (value) => {
+    const record = (typeof value === "object" && value !== null ? value : {});
+    return {
+        ok: record.ok === true,
+        summary: typeof record.summary === "string" ? record.summary : "(box returned no summary)",
+        filesChanged: Array.isArray(record.filesChanged)
+            ? record.filesChanged.filter((entry) => typeof entry === "string")
+            : [],
+        testsRun: typeof record.testsRun === "number" && Number.isInteger(record.testsRun) && record.testsRun >= 0
+            ? record.testsRun
+            : 0,
+        ...(Array.isArray(record.fns)
+            ? { fns: record.fns.filter((entry) => typeof entry === "string") }
+            : {}),
+        ...(record.servesUi === true ? { servesUi: true } : {}),
+    };
+};
+export const requestAppWithBootRetry = async (machine, req, options = {}) => {
+    const attempts = options.attempts ?? 5;
+    const delayMs = options.delayMs ?? 1_500;
+    const sleep = options.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
+    let answer = await machine.request(req);
+    for (let attempt = 1; attempt < attempts && (answer.status === 502 || answer.status === 503); attempt += 1) {
+        await sleep(delayMs);
+        answer = await machine.request(req);
+    }
+    return answer;
+};
+/**
+ * Re-inject the boundary env into a live box and restart its app. This is the
+ * in-box restart loop Lane E's env-baked-at-provision gap needs: a secret
+ * grant flipped while the machine slept lands here at the next edit/wake.
+ */
+export const pushBoxEnv = async (machine, env) => {
+    const { status } = await controlRequest(machine, "POST", "/agent/env", { env });
+    if (status < 200 || status >= 300) {
+        throw new VendoError("sandbox-unavailable", `box env injection failed (${status})`);
+    }
+};
+/** Read the box's `vendo.json` manifest verbatim (empty when the box has none).
+ *  Uses the post-resume boot retry: a manifest read right after an edit can
+ *  race the harness restarting the app, and a dropped read would silently lose
+ *  a freshly declared egress domain (and its approval card). */
+export const readBoxManifest = async (machine, bootRetry = {}) => {
+    const answer = await requestAppWithBootRetry(machine, { method: "GET", path: "/vendo.json" }, bootRetry);
+    if (answer.status === 404)
+        return undefined;
+    if (answer.status < 200 || answer.status >= 300) {
+        throw new VendoError("validation", `vendo.json read failed (${answer.status})`);
+    }
+    return decoder.decode(answer.body);
+};
+/**
+ * Send one edit prompt to the in-box agent and long-poll to completion. The
+ * agent writes code, installs deps, runs its own server, curls its endpoints,
+ * and reports a structured result — self-verification against reality. A
+ * timeout is a failed edit (the caller rolls back), never a throw into the
+ * tree.
+ */
+export const runBoxEdit = async (machine, options) => {
+    const clock = options.clock ?? realClock;
+    const pollIntervalMs = options.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;
+    const timeoutMs = options.timeoutMs ?? DEFAULT_TASK_TIMEOUT_MS;
+    const started = await controlRequest(machine, "POST", "/agent/task", {
+        prompt: options.prompt,
+        ...(options.context === undefined ? {} : { context: options.context }),
+    });
+    if (started.status !== 202 || typeof started.json?.taskId !== "string") {
+        return {
+            ok: false,
+            summary: `box refused the edit task (${started.status})`,
+            filesChanged: [],
+            testsRun: 0,
+        };
+    }
+    const taskId = started.json.taskId;
+    const deadline = clock.now() + timeoutMs;
+    while (clock.now() < deadline) {
+        await clock.sleep(pollIntervalMs);
+        const polled = await controlRequest(machine, "GET", `/agent/task/${taskId}`);
+        const payload = polled.json;
+        if (polled.status === 200 && payload?.status === "done") {
+            return asResult(payload.result);
+        }
+    }
+    return {
+        ok: false,
+        summary: `box edit timed out after ${Math.round(timeoutMs / 1000)}s`,
+        filesChanged: [],
+        testsRun: 0,
+    };
+};
+//# sourceMappingURL=box-agent.js.map

package/dist/box-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"box-agent.js","sourceRoot":"","sources":["../src/box-agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAa,MAAM,eAAe,CAAC;AAGtD;;;;;;;;;;;;GAYG;AAEH;mEACmE;AACnE,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAErC,MAAM,wBAAwB,GAAG,KAAK,CAAC;AACvC,MAAM,uBAAuB,GAAG,CAAC,GAAG,MAAM,CAAC;AAE3C,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAClC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAyBlC,MAAM,SAAS,GAAkB;IAC/B,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAChE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;CACtB,CAAC;AAUF,MAAM,cAAc,GAAG,KAAK,EAC1B,OAAuB,EACvB,MAAc,EACd,IAAY,EACZ,IAAW,EACiC,EAAE;IAC9C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC;QACnC,MAAM;QACN,IAAI;QACJ,IAAI,EAAE,gBAAgB;QACtB,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC5B,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;SAC3C,CAAC;KACH,CAAC,CAAC;IACH,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;AACzC,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAiB,EAAE;IACjD,MAAM,MAAM,GAAG,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAA4B,CAAC;IACrG,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,EAAE,KAAK,IAAI;QACtB,OAAO,EAAE,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B;QAC1F,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC;YAC9C,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;YACnF,CAAC,CAAC,EAAE;QACN,QAAQ,EAAE,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,IAAI,CAAC;YACxG,CAAC,CAAC,MAAM,CAAC,QAAQ;YACjB,CAAC,CAAC,CAAC;QACL,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;YAC3B,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,EAAE;YACnF,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC;AACJ,CAAC,CAAC;AAeF,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,EAC1C,OAAuB,EACvB,GAA6C,EAC7C,UAA4B,EAAE,EAC2B,EAAE;IAC3D,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACjG,IAAI,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACxC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAC3G,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;QACrB,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAAE,OAAuB,EAAE,GAA2B,EAAiB,EAAE;IACtG,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAChF,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QAClC,MAAM,IAAI,UAAU,CAAC,qBAAqB,EAAE,6BAA6B,MAAM,GAAG,CAAC,CAAC;IACtF,CAAC;AACH,CAAC,CAAC;AAEF;;;gEAGgE;AAChE,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAClC,OAAuB,EACvB,YAA8B,EAAE,EACH,EAAE;IAC/B,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,SAAS,CAAC,CAAC;IACzG,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,SAAS,CAAC;IAC5C,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QAChD,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,2BAA2B,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAC7B,OAAuB,EACvB,OAAuB,EACC,EAAE;IAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,SAAS,CAAC;IACzC,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,wBAAwB,CAAC;IAC1E,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,uBAAuB,CAAC;IAE/D,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE;QACnE,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;KACvE,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG,IAAI,OAAQ,OAAO,CAAC,IAA6B,EAAE,MAAM,KAAK,QAAQ,EAAE,CAAC;QACjG,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,8BAA8B,OAAO,CAAC,MAAM,GAAG;YACxD,YAAY,EAAE,EAAE;YAChB,QAAQ,EAAE,CAAC;SACZ,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAI,OAAO,CAAC,IAA2B,CAAC,MAAM,CAAC;IAC3D,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACzC,OAAO,KAAK,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC9B,MAAM,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,eAAe,MAAM,EAAE,CAAC,CAAC;QAC7E,MAAM,OAAO,GAAG,MAAM,CAAC,IAA0D,CAAC;QAClF,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,IAAI,OAAO,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;YACxD,OAAO,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IACD,OAAO;QACL,EAAE,EAAE,KAAK;QACT,OAAO,EAAE,4BAA4B,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG;QACpE,YAAY,EAAE,EAAE;QAChB,QAAQ,EAAE,CAAC;KACZ,CAAC;AACJ,CAAC,CAAC"}

package/dist/box-env.d.ts

@@ -0,0 +1,26 @@
+import { type AppDocument, type SecretsProvider } from "@vendoai/core";
+/** Resolves the box inference endpoint; undefined = no inference in this box. */
+export type InferenceResolver = () => Promise<{
+    url: string;
+    key: string;
+} | undefined>;
+export interface BuildEnvContext {
+    /** Secret names the owner granted to THIS app; only declared ∩ granted inject. */
+    granted: ReadonlySet<string>;
+    secrets?: SecretsProvider;
+    /** Base URL for the durable-rows callback surface (the wire's /box mount). */
+    storeUrl: string;
+    /** Base URL for the host-tools callback surface (same mount in OSS). */
+    hostUrl: string;
+    /** The per-app bearer minted at provision (createAppTokens). */
+    appToken: string;
+    inference?: InferenceResolver;
+    port?: number;
+}
+export interface BuiltBoxEnv {
+    env: Record<string, string>;
+    /** Names whose REAL values entered the box — the provisioner audits these. */
+    injectedSecrets: string[];
+}
+export declare function buildEnv(app: AppDocument, ctx: BuildEnvContext): Promise<BuiltBoxEnv>;
+//# sourceMappingURL=box-env.d.ts.map

package/dist/box-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"box-env.d.ts","sourceRoot":"","sources":["../src/box-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,KAAK,WAAW,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AA0BnF,iFAAiF;AACjF,MAAM,MAAM,iBAAiB,GAAG,MAAM,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAAC,CAAC;AAExF,MAAM,WAAW,eAAe;IAC9B,kFAAkF;IAClF,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC7B,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,8EAA8E;IAC9E,QAAQ,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,8EAA8E;IAC9E,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,wBAAsB,QAAQ,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC,CA0B3F"}

package/dist/box-env.js

@@ -0,0 +1,52 @@
+import { VendoError } from "@vendoai/core";
+/** execution-v2 skin contract, env half — the ONE seam that assembles what
+ * Vendo puts into the box at provision/wake. Lane B's lifecycle calls this
+ * when it creates a machine; nothing else composes box env vars. Inside the
+ * box is free country — these vars are the whole "in" side of the contract:
+ *   - PORT: where the app must listen;
+ *   - each GRANTED declared secret, by its own name, real value (the v2 box
+ *     does its own allowlisted egress — no handles, no egress proxy);
+ *   - VENDO_STORE_URL + VENDO_APP_TOKEN: durable rows over plain HTTP;
+ *   - VENDO_HOST_URL + the same token: host tool calls through the guard;
+ *   - VENDO_INFERENCE_URL/KEY: the in-box agent's model door (resolver seam;
+ *     Cloud-gateway vs BYO value wiring rides model provisioning, Wave 3+). */
+const DEFAULT_PORT = 8080;
+/** The boundary vars the contract owns; a secret must never shadow one. */
+const RESERVED_ENV = new Set([
+    "PORT",
+    "VENDO_STORE_URL",
+    "VENDO_APP_TOKEN",
+    "VENDO_HOST_URL",
+    "VENDO_INFERENCE_URL",
+    "VENDO_INFERENCE_KEY",
+]);
+export async function buildEnv(app, ctx) {
+    if (ctx.port !== undefined && (!Number.isInteger(ctx.port) || ctx.port < 1 || ctx.port > 65_535)) {
+        throw new VendoError("validation", "port must be an integer between 1 and 65535");
+    }
+    const env = {};
+    const injectedSecrets = [];
+    for (const name of new Set(app.secrets ?? [])) {
+        if (RESERVED_ENV.has(name)) {
+            throw new VendoError("validation", `secret name ${name} collides with a reserved box env var`);
+        }
+        if (!ctx.granted.has(name) || ctx.secrets === undefined)
+            continue;
+        const value = await ctx.secrets.get(name);
+        if (value === undefined || value.length === 0)
+            continue;
+        env[name] = value;
+        injectedSecrets.push(name);
+    }
+    env["PORT"] = String(ctx.port ?? DEFAULT_PORT);
+    env["VENDO_STORE_URL"] = ctx.storeUrl;
+    env["VENDO_APP_TOKEN"] = ctx.appToken;
+    env["VENDO_HOST_URL"] = ctx.hostUrl;
+    const inference = await ctx.inference?.();
+    if (inference !== undefined) {
+        env["VENDO_INFERENCE_URL"] = inference.url;
+        env["VENDO_INFERENCE_KEY"] = inference.key;
+    }
+    return { env, injectedSecrets };
+}
+//# sourceMappingURL=box-env.js.map

package/dist/box-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"box-env.js","sourceRoot":"","sources":["../src/box-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAA0C,MAAM,eAAe,CAAC;AAEnF;;;;;;;;;;+EAU+E;AAE/E,MAAM,YAAY,GAAG,IAAI,CAAC;AAE1B,2EAA2E;AAC3E,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,MAAM;IACN,iBAAiB;IACjB,iBAAiB;IACjB,gBAAgB;IAChB,qBAAqB;IACrB,qBAAqB;CACtB,CAAC,CAAC;AAyBH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAgB,EAAE,GAAoB;IACnE,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC;QACjG,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,6CAA6C,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QAC9C,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,eAAe,IAAI,uCAAuC,CAAC,CAAC;QACjG,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS;YAAE,SAAS;QAClE,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACxD,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAClB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IACD,GAAG,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,YAAY,CAAC,CAAC;IAC/C,GAAG,CAAC,iBAAiB,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC;IACtC,GAAG,CAAC,iBAAiB,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC;IACtC,GAAG,CAAC,gBAAgB,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC;IACpC,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC;IAC1C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,GAAG,CAAC,qBAAqB,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC;QAC3C,GAAG,CAAC,qBAAqB,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC;IAC7C,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC;AAClC,CAAC"}

package/dist/call.d.ts

@@ -0,0 +1,23 @@
+import { type AppDocument, type ApprovalId, type Json, type RunContext, type ToolCall, type ToolOutcome, type ToolRegistry } from "@vendoai/core";
+/** The name half of core's 01 §8 `fn:<name>` grammar. */
+export declare const FN_NAME_PATTERN: RegExp;
+/** 06-apps §4.1 — internal execution surface shared by open() and call(). */
+export interface AppCaller {
+    call(app: AppDocument, ref: string, args: Json, ctx: RunContext): Promise<ToolOutcome>;
+    callFn(app: AppDocument, name: string, args: Json, ctx: RunContext): Promise<ToolOutcome>;
+    callQuery(app: AppDocument, ref: string, args: Json, ctx: RunContext): Promise<ToolOutcome>;
+}
+/**
+ * W0 — hooks the runtime attaches to capture the exact parked call. When a
+ * mutating in-app ACTION (call(), not a read query) parks on an approval, the
+ * runtime records the byte-exact call + context so it can re-dispatch it when
+ * the owner approves (see parked-action.ts). Only actions resume; a parked
+ * read query surfaces as a render error, not a stalled effect.
+ */
+export interface AppCallerHooks {
+    onParkedAction(app: AppDocument, call: ToolCall, ctx: RunContext, approvalId: ApprovalId): Promise<void>;
+}
+export declare const fnOutcome: (name: string) => ToolOutcome;
+/** 06-apps §4.1 — resolve fn: references and guard-bound host tools. */
+export declare const createAppCaller: (tools: ToolRegistry, hooks?: AppCallerHooks) => AppCaller;
+//# sourceMappingURL=call.d.ts.map

package/dist/call.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"call.d.ts","sourceRoot":"","sources":["../src/call.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,IAAI,EACT,KAAK,UAAU,EACf,KAAK,QAAQ,EACb,KAAK,WAAW,EAChB,KAAK,YAAY,EAClB,MAAM,eAAe,CAAC;AAEvB,yDAAyD;AACzD,eAAO,MAAM,eAAe,QAA8B,CAAC;AAE3D,6EAA6E;AAC7E,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACvF,MAAM,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1F,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CAC7F;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,cAAc,CACZ,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,QAAQ,EACd,GAAG,EAAE,UAAU,EACf,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAOD,eAAO,MAAM,SAAS,GAAI,MAAM,MAAM,KAAG,WAKvC,CAAC;AAEH,wEAAwE;AACxE,eAAO,MAAM,eAAe,GAAI,OAAO,YAAY,EAAE,QAAQ,cAAc,KAAG,SAiC7E,CAAC"}

package/dist/call.js

@@ -0,0 +1,45 @@
+/** The name half of core's 01 §8 `fn:<name>` grammar. */
+export const FN_NAME_PATTERN = /^[A-Za-z_][A-Za-z0-9_-]*$/;
+// execution-v2 — the v1 MachineSessions fn: path is deleted. fn: refs on a
+// machine-bearing app resolve over the v2 box door (fn.ts decorates this
+// caller in createApps); what remains HERE is the fallthrough for an app with
+// no machine, which settles as a CONTAINED error outcome — a stale binding
+// must not take down open() or an automation run.
+export const fnOutcome = (name) => ({
+    status: "error",
+    error: FN_NAME_PATTERN.test(name)
+        ? { code: "validation", message: `fn:${name} requires a machine; the app has not graduated` }
+        : { code: "validation", message: `invalid fn reference: fn:${name}` },
+});
+/** 06-apps §4.1 — resolve fn: references and guard-bound host tools. */
+export const createAppCaller = (tools, hooks) => {
+    // Returns the outcome AND the exact call/ctx it ran under, so the action path
+    // can hand a byte-exact parked call to the approve→resume seam.
+    const hostTool = async (app, ref, args, ctx) => {
+        const call = { id: `call_${globalThis.crypto.randomUUID()}`, tool: ref, args };
+        const appCtx = { ...ctx, venue: "app", appId: app.id };
+        return { call, appCtx, outcome: await tools.execute(call, appCtx) };
+    };
+    return {
+        async call(app, ref, args, ctx) {
+            if (ref.startsWith("fn:"))
+                return fnOutcome(ref.slice(3));
+            const { call, appCtx, outcome } = await hostTool(app, ref, args, ctx);
+            // An action the guard sent to approval is remembered so its effect can
+            // land the moment the owner approves — the bug was that nobody did this.
+            if (outcome.status === "pending-approval" && hooks !== undefined) {
+                await hooks.onParkedAction(app, call, appCtx, outcome.approvalId);
+            }
+            return outcome;
+        },
+        async callFn(app, name) {
+            return fnOutcome(name);
+        },
+        async callQuery(app, ref, args, ctx) {
+            if (ref.startsWith("fn:"))
+                return fnOutcome(ref.slice(3));
+            return (await hostTool(app, ref, args, ctx)).outcome;
+        },
+    };
+};
+//# sourceMappingURL=call.js.map

package/dist/call.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"call.js","sourceRoot":"","sources":["../src/call.ts"],"names":[],"mappings":"AAUA,yDAAyD;AACzD,MAAM,CAAC,MAAM,eAAe,GAAG,2BAA2B,CAAC;AAyB3D,2EAA2E;AAC3E,yEAAyE;AACzE,8EAA8E;AAC9E,2EAA2E;AAC3E,kDAAkD;AAClD,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAe,EAAE,CAAC,CAAC;IACvD,MAAM,EAAE,OAAO;IACf,KAAK,EAAE,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;QAC/B,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,IAAI,gDAAgD,EAAE;QAC7F,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,4BAA4B,IAAI,EAAE,EAAE;CACxE,CAAC,CAAC;AAEH,wEAAwE;AACxE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAmB,EAAE,KAAsB,EAAa,EAAE;IACxF,8EAA8E;IAC9E,gEAAgE;IAChE,MAAM,QAAQ,GAAG,KAAK,EACpB,GAAgB,EAChB,GAAW,EACX,IAAU,EACV,GAAe,EACwD,EAAE;QACzE,MAAM,IAAI,GAAa,EAAE,EAAE,EAAE,QAAQ,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;QACzF,MAAM,MAAM,GAAe,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;QACnE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;IACtE,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG;YAC5B,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YACtE,uEAAuE;YACvE,yEAAyE;YACzE,IAAI,OAAO,CAAC,MAAM,KAAK,kBAAkB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACjE,MAAM,KAAK,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI;YACpB,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG;YACjC,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,OAAO,CAAC,MAAM,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;QACvD,CAAC;KACF,CAAC;AACJ,CAAC,CAAC"}