@vibesdotdev/workers 0.0.0-stage → 1.0.0-rc.2

package/dist/code-execution/code-execution.plugin.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Code Execution Plugin
+ *
+ * Scope-pure declarations for code execution tools and jobs.
+ * Consumer implementations live in code-execution.consumer.plugin.ts;
+ * cloud submission lives in code-execution.cloud.plugin.ts.
+ * Includes:
+ * - tools/tool: code-execution-submit, execute-code
+ * - workers/job: code-execution.run
+ * - workers/worker: dev.code
+ */
+declare const defaultExport: import("@vibesdotdev/kernel").RuntimePlugin;
+export default defaultExport;
+//# sourceMappingURL=code-execution.plugin.d.ts.map

package/dist/code-execution/code-execution.plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-execution.plugin.d.ts","sourceRoot":"","sources":["../../src/code-execution/code-execution.plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAeH,QAAA,MAAM,aAAa,6CAyBjB,CAAC;AAEH,eAAe,aAAa,CAAC"}

package/dist/code-execution/code-execution.plugin.js

@@ -0,0 +1,47 @@
+/**
+ * Code Execution Plugin
+ *
+ * Scope-pure declarations for code execution tools and jobs.
+ * Consumer implementations live in code-execution.consumer.plugin.ts;
+ * cloud submission lives in code-execution.cloud.plugin.ts.
+ * Includes:
+ * - tools/tool: code-execution-submit, execute-code
+ * - workers/job: code-execution.run
+ * - workers/worker: dev.code
+ */
+import { createRuntimePlugin, loader } from '@vibesdotdev/kernel';
+// Tool descriptors
+import executeCodeDescriptor from "./tools/execute-code.descriptor.js";
+import codeExecutionSubmitDescriptor from "./tools/code-execution-submit/code-execution-submit.descriptor.js";
+// Job descriptor
+import codeExecutionRunDescriptor from "./worker/runtime/jobs/code-execution.run.descriptor.js";
+// Worker descriptor
+import devCodeWorkerDescriptor from "./worker/runtime/worker/dev.code.descriptor.js";
+// Hoisted const: tsc rewriteRelativeImportExtensions does not rewrite `.ts` specifiers inside `export default <expr>` (TS 6.0.3).
+const defaultExport = createRuntimePlugin({
+    id: 'code-execution',
+    name: 'Code Execution',
+    description: 'Sandboxed code execution with streaming output',
+    // The exec backend request is sent by the secrets owner: it resolves the
+    // backend token and opens the authenticated request. Every composition that
+    // can reach that request path (cloud submission and consumer) inherits this.
+    dependencies: ['workers', 'logging', 'runtime-client', 'secrets'],
+    descriptors: [
+        // Runtime client: per-runtime session jobs and exec-backend config
+        {
+            id: 'code-execution',
+            kind: 'runtime/client',
+            description: 'Per-runtime code-execution session jobs and exec-backend config.'
+        },
+        // Tools
+        executeCodeDescriptor,
+        codeExecutionSubmitDescriptor,
+        // Job
+        codeExecutionRunDescriptor,
+        // Worker
+        devCodeWorkerDescriptor
+    ],
+    loaders: [loader('code-execution', { kind: 'runtime/client' }, () => import("./client/code-execution.client.js"))]
+});
+export default defaultExport;
+//# sourceMappingURL=code-execution.plugin.js.map

package/dist/code-execution/code-execution.plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-execution.plugin.js","sourceRoot":"","sources":["../../src/code-execution/code-execution.plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAElE,mBAAmB;AACnB,OAAO,qBAAqB,MAAM,oCAAoC,CAAC;AACvE,OAAO,6BAA6B,MAAM,mEAAmE,CAAC;AAE9G,iBAAiB;AACjB,OAAO,0BAA0B,MAAM,wDAAwD,CAAC;AAEhG,oBAAoB;AACpB,OAAO,uBAAuB,MAAM,gDAAgD,CAAC;AAErF,kIAAkI;AAClI,MAAM,aAAa,GAAG,mBAAmB,CAAC;IACzC,EAAE,EAAE,gBAAgB;IACpB,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,gDAAgD;IAC7D,yEAAyE;IACzE,4EAA4E;IAC5E,6EAA6E;IAC7E,YAAY,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,gBAAgB,EAAE,SAAS,CAAC;IAEjE,WAAW,EAAE;QACZ,mEAAmE;QACnE;YACC,EAAE,EAAE,gBAAgB;YACpB,IAAI,EAAE,gBAAgB;YACtB,WAAW,EAAE,kEAAkE;SAC/E;QACD,QAAQ;QACR,qBAAqB;QACrB,6BAA6B;QAC7B,MAAM;QACN,0BAA0B;QAC1B,SAAS;QACT,uBAAuB;KACvB;IACD,OAAO,EAAE,CAAC,MAAM,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,mCAAmC,CAAC,CAAC,CAAC;CAClH,CAAC,CAAC;AAEH,eAAe,aAAa,CAAC"}

package/dist/code-execution/config/load.d.ts

@@ -0,0 +1,9 @@
+import type { VibesRuntime } from '@vibesdotdev/kernel';
+export type ExecBackendRuntime = VibesRuntime;
+export type ExecBackendConfig = {
+    readonly baseUrl: string | null;
+};
+export declare function resolveExecBackendConfig(runtime: ExecBackendRuntime): Promise<ExecBackendConfig>;
+/** The non-secret backend endpoint exposed by its `code-execution` runtime client. */
+export declare function getExecBackendBaseUrl(runtime: ExecBackendRuntime): Promise<string | null>;
+//# sourceMappingURL=load.d.ts.map

package/dist/code-execution/config/load.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"load.d.ts","sourceRoot":"","sources":["../../../src/code-execution/config/load.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AASxD,MAAM,MAAM,kBAAkB,GAAG,YAAY,CAAC;AAE9C,MAAM,MAAM,iBAAiB,GAAG;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC,CAAC;AAgBF,wBAAsB,wBAAwB,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAItG;AAED,sFAAsF;AACtF,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAG/F"}

package/dist/code-execution/config/load.js

@@ -0,0 +1,21 @@
+import { ConfigManifest } from '@vibesdotdev/config/manifest/config-manifest';
+import { getVibesClient } from '@vibesdotdev/kernel/client';
+import { WORKERS_CODE_EXECUTION_CONFIG_MANIFEST_ID, WorkersCodeExecutionConfigSchema } from "../../config/workers.code-execution.config.descriptor.js";
+async function loadWorkersCodeExecutionConfig(runtime) {
+    return runtime.hasKind('config/manifest') &&
+        runtime.query('config/manifest').withId(WORKERS_CODE_EXECUTION_CONFIG_MANIFEST_ID).descriptors()
+            .length > 0
+        ? await ConfigManifest.forRuntime(runtime, WORKERS_CODE_EXECUTION_CONFIG_MANIFEST_ID).load()
+        : WorkersCodeExecutionConfigSchema.parse({});
+}
+export async function resolveExecBackendConfig(runtime) {
+    const config = await loadWorkersCodeExecutionConfig(runtime);
+    const rawUrl = config.vibesCodeExecutionBackendUrl?.trim();
+    return { baseUrl: rawUrl ? rawUrl.replace(/\/+$/, '') : null };
+}
+/** The non-secret backend endpoint exposed by its `code-execution` runtime client. */
+export async function getExecBackendBaseUrl(runtime) {
+    const client = await getVibesClient('code-execution', runtime);
+    return client.getExecBackendBaseUrl();
+}
+//# sourceMappingURL=load.js.map

package/dist/code-execution/config/load.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"load.js","sourceRoot":"","sources":["../../../src/code-execution/config/load.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,8CAA8C,CAAC;AAE9E,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE5D,OAAO,EACN,yCAAyC,EACzC,gCAAgC,EAEhC,MAAM,0DAA0D,CAAC;AAQlE,KAAK,UAAU,8BAA8B,CAC5C,OAA2B;IAE3B,OAAO,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC;QACxC,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,yCAAyC,CAAC,CAAC,WAAW,EAAE;aAC9F,MAAM,GAAG,CAAC;QACZ,CAAC,CAAC,MAAM,cAAc,CAAC,UAAU,CAC/B,OAAO,EACP,yCAAyC,CACzC,CAAC,IAAI,EAAE;QACT,CAAC,CAAC,gCAAgC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAC/C,CAAC;AAGD,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,OAA2B;IACzE,MAAM,MAAM,GAAG,MAAM,8BAA8B,CAAC,OAAO,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,MAAM,CAAC,4BAA4B,EAAE,IAAI,EAAE,CAAC;IAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAChE,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAA2B;IACtE,MAAM,MAAM,GAAG,MAAM,cAAc,CAA6B,gBAAgB,EAAE,OAAO,CAAC,CAAC;IAC3F,OAAO,MAAM,CAAC,qBAAqB,EAAE,CAAC;AACvC,CAAC"}

package/dist/code-execution/index.d.ts

@@ -0,0 +1,11 @@
+export { executionConfigSchema, codeExecutionRequestSchema, codeExecutionJobSchema, executionOutputEventSchema, codeExecutionResultSchema, sandboxContextSchema, securityValidationSchema, codeExecutionLanguageSchema, isolationLevelSchema, LANGUAGE_RUNTIMES, getLanguageRuntimeDescriptor, isolationForLanguage } from './schemas/index.ts';
+export type { ExecutionConfig, CodeExecutionRequest, CodeExecutionJob, ExecutionOutputEvent, CodeExecutionResult, SandboxContext, SecurityValidation, CodeExecutionLanguage, IsolationLevel, LanguageRuntimeDescriptor } from './schemas/index.ts';
+export { CodeExecutionClient, executeCode, streamCodeExecution } from './client/execution-client.ts';
+export { submitCodeExecutionJob, submitToolExecutionJob, submitPromptTestExecutionJob, getJobStatus, cancelJob, cancelCodeExecution, openCodeExecutionJobStream } from './server/queue.ts';
+export { codeExecutionActorSchema, codeExecutionJobStatusSchema } from './schemas/operations.ts';
+export type { CodeExecutionActor, CodeExecutionJobStatus, CodeExecutionJobStream, CodeExecutionRequestClient, CodeExecutionOperationsRuntime } from './schemas/operations.ts';
+export { createCodeExecutionRequestClient } from './server/operations.ts';
+export { executeCodeRequest } from './server/execution-engine.ts';
+export { runCodeInChild, CODE_EXECUTION_MAX_OUTPUT_BYTES, CODE_EXECUTION_MAX_INPUT_BYTES, type CodeRunnerRuntime } from './server/child-runner.ts';
+export { validateScriptSecurity, validatePythonSecurity } from './server/security-patterns.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/code-execution/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/code-execution/index.ts"],"names":[],"mappings":"AAGA,OAAO,EACN,qBAAqB,EACrB,0BAA0B,EAC1B,sBAAsB,EACtB,0BAA0B,EAC1B,yBAAyB,EACzB,oBAAoB,EACpB,wBAAwB,EACxB,2BAA2B,EAC3B,oBAAoB,EACpB,iBAAiB,EACjB,4BAA4B,EAC5B,oBAAoB,EACpB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACX,eAAe,EACf,oBAAoB,EACpB,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EACrB,cAAc,EACd,yBAAyB,EACzB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EACN,mBAAmB,EACnB,WAAW,EACX,mBAAmB,EACnB,MAAM,8BAA8B,CAAC;AAGtC,OAAO,EACN,sBAAsB,EACtB,sBAAsB,EACtB,4BAA4B,EAC5B,YAAY,EACZ,SAAS,EACT,mBAAmB,EACnB,0BAA0B,EAC1B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,wBAAwB,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AACjG,YAAY,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AAC9K,OAAO,EAAE,gCAAgC,EAAE,MAAM,wBAAwB,CAAC;AAG1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EACN,cAAc,EACd,+BAA+B,EAC/B,8BAA8B,EAC9B,KAAK,iBAAiB,EACtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC"}

package/dist/code-execution/index.js

@@ -0,0 +1,16 @@
+// Public API exports for code execution module
+// Schemas and types
+export { executionConfigSchema, codeExecutionRequestSchema, codeExecutionJobSchema, executionOutputEventSchema, codeExecutionResultSchema, sandboxContextSchema, securityValidationSchema, codeExecutionLanguageSchema, isolationLevelSchema, LANGUAGE_RUNTIMES, getLanguageRuntimeDescriptor, isolationForLanguage } from "./schemas/index.js";
+// Client for code execution
+export { CodeExecutionClient, executeCode, streamCodeExecution } from "./client/execution-client.js";
+// Server-side queue functions (for internal use)
+export { submitCodeExecutionJob, submitToolExecutionJob, submitPromptTestExecutionJob, getJobStatus, cancelJob, cancelCodeExecution, openCodeExecutionJobStream } from "./server/queue.js";
+export { codeExecutionActorSchema, codeExecutionJobStatusSchema } from "./schemas/operations.js";
+export { createCodeExecutionRequestClient } from "./server/operations.js";
+// Execution engine (schema-first multi-language, child process per run)
+export { executeCodeRequest } from "./server/execution-engine.js";
+export { runCodeInChild, CODE_EXECUTION_MAX_OUTPUT_BYTES, CODE_EXECUTION_MAX_INPUT_BYTES } from "./server/child-runner.js";
+export { validateScriptSecurity, validatePythonSecurity } from "./server/security-patterns.js";
+// Note: secureTestExecutor removed - legacy benchmark system no longer used
+// Use new benchmark scenario workers instead
+//# sourceMappingURL=index.js.map

package/dist/code-execution/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/code-execution/index.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAE/C,oBAAoB;AACpB,OAAO,EACN,qBAAqB,EACrB,0BAA0B,EAC1B,sBAAsB,EACtB,0BAA0B,EAC1B,yBAAyB,EACzB,oBAAoB,EACpB,wBAAwB,EACxB,2BAA2B,EAC3B,oBAAoB,EACpB,iBAAiB,EACjB,4BAA4B,EAC5B,oBAAoB,EACpB,MAAM,oBAAoB,CAAC;AAc5B,4BAA4B;AAC5B,OAAO,EACN,mBAAmB,EACnB,WAAW,EACX,mBAAmB,EACnB,MAAM,8BAA8B,CAAC;AAEtC,iDAAiD;AACjD,OAAO,EACN,sBAAsB,EACtB,sBAAsB,EACtB,4BAA4B,EAC5B,YAAY,EACZ,SAAS,EACT,mBAAmB,EACnB,0BAA0B,EAC1B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,wBAAwB,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AAEjG,OAAO,EAAE,gCAAgC,EAAE,MAAM,wBAAwB,CAAC;AAE1E,wEAAwE;AACxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EACN,cAAc,EACd,+BAA+B,EAC/B,8BAA8B,EAE9B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAE/F,4EAA4E;AAC5E,6CAA6C"}

package/dist/code-execution/plugin.d.ts

@@ -0,0 +1,2 @@
+export { default } from './code-execution.consumer.plugin.ts';
+//# sourceMappingURL=plugin.d.ts.map

package/dist/code-execution/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/code-execution/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,qCAAqC,CAAC"}

package/dist/code-execution/plugin.js

@@ -0,0 +1,2 @@
+export { default } from "./code-execution.consumer.plugin.js";
+//# sourceMappingURL=plugin.js.map

package/dist/code-execution/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../src/code-execution/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,qCAAqC,CAAC"}

package/dist/code-execution/runner-adapter/client/index.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Runner Adapter Client — canonical `runtime/client` for the runner-adapter module.
+ *
+ * Resolves `runner/adapter` implementations at runtime so consumers never import
+ * adapter packages directly (Constitution Rule 1: RESOLVE, DON'T IMPORT).
+ *
+ * ```ts
+ * import { getVibesRunnerAdapterClient } from '@vibesdotdev/workers/code-execution/runner-adapter/client';
+ *
+ * const client = await getVibesRunnerAdapterClient(runtime);
+ * const adapters = await client.listAdapters();
+ * const gpu = await client.getAdapter({ capabilities: ['gpu'] });
+ * const deployed = await gpu.deploy({ id: 'train-001', hardware: { gpu: { model: 'A100' } } });
+ * ```
+ */
+import type { KindContext, VibesRuntime } from '@vibesdotdev/kernel';
+import { BaseRuntimeClient } from '@vibesdotdev/kernel/client';
+import type { RuntimeClientDescriptor } from '@vibesdotdev/kernel/client';
+import type { RuntimeDescriptor } from '@vibesdotdev/kernel/schemas/descriptor';
+import type { RunnerAdapterInterface, RunnerDeployRequest, RunnerDeployResult, RunnerExecuteRequest, RunnerExecuteResult } from '../interfaces/adapter.ts';
+/**
+ * Filter options for discovering an adapter implementation.
+ */
+export interface RunnerAdapterFilter {
+    /** Match by backend hint (e.g., 'digitalocean', 'docker', 'bun'). */
+    backend?: string;
+    /** Require specific capabilities (e.g., ['gpu']). */
+    capabilities?: string[];
+}
+export declare class RunnerAdapterClient extends BaseRuntimeClient<VibesRuntime> {
+    constructor(descriptor?: RuntimeClientDescriptor, context?: KindContext<VibesRuntime>, runtime?: VibesRuntime);
+    /**
+     * List all registered runner/adapter descriptors.
+     *
+     * Consumers use this to discover available backends before selecting one.
+     * Returns descriptors only (no implementation loading).
+     *
+     * @throws If the runtime is not available or the kind is not registered.
+     */
+    listAdapters(): RuntimeDescriptor[];
+    /**
+     * Get a single adapter implementation matching the filter criteria.
+     *
+     * @throws If no adapter matches the filter.
+     */
+    getAdapter(filter?: RunnerAdapterFilter): Promise<RunnerAdapterInterface>;
+    /**
+     * Convenience: deploy directly through the best-matching adapter.
+     */
+    deploy(request: RunnerDeployRequest, filter?: RunnerAdapterFilter): Promise<RunnerDeployResult>;
+    /**
+     * Convenience: execute directly through an adapter by deployment ID.
+     * Note: the caller must have already deployed to obtain a deploymentId.
+     */
+    execute(request: RunnerExecuteRequest): Promise<RunnerExecuteResult>;
+}
+/**
+ * Resolver for the canonical RunnerAdapterClient on a handed runtime.
+ *
+ * Equivalent to `runtime.query('runtime/client').withId('runner-adapter').resolve()`,
+ * but registers the runtime-client plugin on demand if not yet loaded — matching the
+ * `getVibesRunnableClient(runtime)` / `getVibesKnowledgeClient(runtime)` pattern.
+ */
+export declare function getVibesRunnerAdapterClient(runtime: VibesRuntime): Promise<RunnerAdapterClient>;
+export default RunnerAdapterClient;
+//# sourceMappingURL=index.d.ts.map

package/dist/code-execution/runner-adapter/client/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/code-execution/runner-adapter/client/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAkB,MAAM,4BAA4B,CAAC;AAC/E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAEhF,OAAO,KAAK,EACX,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,mBAAmB,EACnB,MAAM,0BAA0B,CAAC;AAIlC;;GAEG;AACH,MAAM,WAAW,mBAAmB;IACnC,qEAAqE;IACrE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,qBAAa,mBAAoB,SAAQ,iBAAiB,CAAC,YAAY,CAAC;gBAEtE,UAAU,GAAE,uBAA0E,EACtF,OAAO,CAAC,EAAE,WAAW,CAAC,YAAY,CAAC,EACnC,OAAO,CAAC,EAAE,YAAY;IAKvB;;;;;;;OAOG;IACH,YAAY,IAAI,iBAAiB,EAAE;IAInC;;;;OAIG;IACG,UAAU,CAAC,MAAM,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAsD/E;;OAEG;IACG,MAAM,CAAC,OAAO,EAAE,mBAAmB,EAAE,MAAM,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAKrG;;;OAGG;IACG,OAAO,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC;CAW1E;AAED;;;;;;GAMG;AACH,wBAAsB,2BAA2B,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAErG;AAED,eAAe,mBAAmB,CAAC"}

package/dist/code-execution/runner-adapter/client/index.js

@@ -0,0 +1,116 @@
+/**
+ * Runner Adapter Client — canonical `runtime/client` for the runner-adapter module.
+ *
+ * Resolves `runner/adapter` implementations at runtime so consumers never import
+ * adapter packages directly (Constitution Rule 1: RESOLVE, DON'T IMPORT).
+ *
+ * ```ts
+ * import { getVibesRunnerAdapterClient } from '@vibesdotdev/workers/code-execution/runner-adapter/client';
+ *
+ * const client = await getVibesRunnerAdapterClient(runtime);
+ * const adapters = await client.listAdapters();
+ * const gpu = await client.getAdapter({ capabilities: ['gpu'] });
+ * const deployed = await gpu.deploy({ id: 'train-001', hardware: { gpu: { model: 'A100' } } });
+ * ```
+ */
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { BaseRuntimeClient, getVibesClient } from '@vibesdotdev/kernel/client';
+import { AssetQuery as AssetQueryClass } from '@vibesdotdev/kernel/api/query';
+import { RunnerExecuteRequestSchema, RunnerExecuteResultSchema } from "../schemas/index.js";
+export class RunnerAdapterClient extends BaseRuntimeClient {
+    constructor(descriptor = { id: 'runner-adapter', kind: 'runtime/client' }, context, runtime) {
+        super(descriptor, context, runtime);
+    }
+    /**
+     * List all registered runner/adapter descriptors.
+     *
+     * Consumers use this to discover available backends before selecting one.
+     * Returns descriptors only (no implementation loading).
+     *
+     * @throws If the runtime is not available or the kind is not registered.
+     */
+    listAdapters() {
+        return this.runtime.query('runner/adapter').descriptors();
+    }
+    /**
+     * Get a single adapter implementation matching the filter criteria.
+     *
+     * @throws If no adapter matches the filter.
+     */
+    async getAdapter(filter) {
+        await this.ensureLoaded();
+        let query;
+        try {
+            query = this.runtime.query('runner/adapter');
+        }
+        catch (error) {
+            if (error instanceof CapabilityError &&
+                CapabilityError.isAbsenceOf(error, 'runtime/kind', 'runner/adapter')) {
+                throw new CapabilityError(`Runner adapter kind 'runner/adapter' is not registered. ` +
+                    'Ensure the runner-adapter plugin (and at least one adapter package ' +
+                    'e.g., runner-adapter-digitalocean) is composed before querying adapters.', error.code, {
+                    reason: error.reason,
+                    retryable: error.retryable,
+                    recoveryHint: error.recoveryHint,
+                    details: error.details,
+                    cause: error
+                });
+            }
+            throw error;
+        }
+        if (filter?.backend) {
+            query = query.filter((d) => d.backend === filter.backend);
+        }
+        if (filter?.capabilities?.length) {
+            query = query.filter((d) => {
+                const caps = d.capabilities;
+                return caps?.some((c) => filter.capabilities.includes(c)) ?? false;
+            });
+        }
+        const adapter = await query.first();
+        if (!adapter) {
+            const parts = [
+                filter?.backend ? `backend="${filter.backend}"` : null,
+                filter?.capabilities ? `capabilities=[${filter.capabilities.join(',')}]` : null
+            ].filter(Boolean);
+            throw new Error(`No runner/adapter implementation found${parts.length ? ` matching ${parts.join(', ')}` : ''}. ` +
+                'Ensure an adapter plugin (e.g., runner-adapter-digitalocean) is composed.');
+        }
+        return adapter;
+    }
+    /**
+     * Convenience: deploy directly through the best-matching adapter.
+     */
+    async deploy(request, filter) {
+        const adapter = await this.getAdapter(filter);
+        return adapter.deploy(request);
+    }
+    /**
+     * Convenience: execute directly through an adapter by deployment ID.
+     * Note: the caller must have already deployed to obtain a deploymentId.
+     */
+    async execute(request) {
+        // The adapter handle is a local callback, not part of the JSON request.
+        // Preserve that one owned callback after parsing and return only the parsed
+        // result so uncontracted request or response fields cannot cross the boundary.
+        const validatedRequest = RunnerExecuteRequestSchema.parse(request);
+        const adapterRequest = { ...validatedRequest };
+        if (request.handle !== undefined)
+            adapterRequest.handle = request.handle;
+        const adapter = await this.getAdapter();
+        const response = await adapter.execute(adapterRequest);
+        return RunnerExecuteResultSchema.parse(response);
+    }
+}
+/**
+ * Resolver for the canonical RunnerAdapterClient on a handed runtime.
+ *
+ * Equivalent to `runtime.query('runtime/client').withId('runner-adapter').resolve()`,
+ * but registers the runtime-client plugin on demand if not yet loaded — matching the
+ * `getVibesRunnableClient(runtime)` / `getVibesKnowledgeClient(runtime)` pattern.
+ */
+export async function getVibesRunnerAdapterClient(runtime) {
+    return getVibesClient('runner-adapter', runtime);
+}
+export default RunnerAdapterClient;
+//# sourceMappingURL=index.js.map

package/dist/code-execution/runner-adapter/client/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/code-execution/runner-adapter/client/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAG/E,OAAO,EAAE,UAAU,IAAI,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAS9E,OAAO,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAY5F,MAAM,OAAO,mBAAoB,SAAQ,iBAA+B;IACvE,YACC,aAAsC,EAAE,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,gBAAgB,EAAE,EACtF,OAAmC,EACnC,OAAsB;QAEtB,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAED;;;;;;;OAOG;IACH,YAAY;QACX,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1D,CAAC;IAEF;;;;OAIG;IACH,KAAK,CAAC,UAAU,CAAC,MAA4B;QAC5C,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1B,IAAI,KAAuE,CAAC;QAE5E,IAAI,CAAC;YACJ,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IACC,KAAK,YAAY,eAAe;gBAChC,eAAe,CAAC,WAAW,CAAC,KAAK,EAAE,cAAc,EAAE,gBAAgB,CAAC,EACnE,CAAC;gBACF,MAAM,IAAI,eAAe,CACxB,0DAA0D;oBACzD,qEAAqE;oBACrE,0EAA0E,EAC3E,KAAK,CAAC,IAAI,EACV;oBACC,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;oBAChC,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,KAAK,EAAE,KAAK;iBACZ,CACD,CAAC;YACH,CAAC;YACD,MAAM,KAAK,CAAC;QACb,CAAC;QAED,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACrB,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;YAClC,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC1B,MAAM,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC;gBAC5B,OAAO,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,YAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;YACrE,CAAC,CAAC,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QACpC,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,KAAK,GAAG;gBACb,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI;gBACtD,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,iBAAiB,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;aAC/E,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAClB,MAAM,IAAI,KAAK,CACd,yCAAyC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI;gBAC/F,2EAA2E,CAC5E,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,OAA4B,EAAE,MAA4B;QACtE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC9C,OAAO,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO,CAAC,OAA6B;QAC1C,wEAAwE;QACxE,4EAA4E;QAC5E,+EAA+E;QAC/E,MAAM,gBAAgB,GAAG,0BAA0B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnE,MAAM,cAAc,GAAyB,EAAE,GAAG,gBAAgB,EAAE,CAAC;QACrE,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;YAAE,cAAc,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QACzE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACvD,OAAO,yBAAyB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAClD,CAAC;CACD;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,OAAqB;IACtE,OAAO,cAAc,CAAsB,gBAAgB,EAAE,OAAO,CAAC,CAAC;AACvE,CAAC;AAED,eAAe,mBAAmB,CAAC"}

package/dist/code-execution/runner-adapter/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * @vibesdotdev/workers/code-execution/runner-adapter
+ *
+ * Base package for runtime runner adapters. Exports the `runner/adapter` kind,
+ * the RunnerAdapterInterface contract, shared Zod schemas, and the canonical
+ * runtime client helper.
+ *
+ * See SPEC.md for architecture, ownership rules, and usage.
+ */
+export { runnerAdapterKind, runnerCapacityKind, RunnerCapacityDescriptorSchema, RunnerCapacityReportSchema, RunnerCapacityIdleDeadlineSchema } from './kinds/index.ts';
+export type { RunnerAdapterDescriptor, RunnerCapacityDescriptor, RunnerCapacityReport, RunnerCapacityIdleDeadline, RunnerCapacityImplementation } from './kinds/index.ts';
+export type { RunnerAdapterInterface, RunnerDeployRequest, RunnerDeployResult, RunnerExecuteRequest, RunnerExecuteResult, RunnerStatusResult, RunnerExecutionStatus, RunnerHealthResult, RunHandle } from './interfaces/index.ts';
+export { RunnerGpuConstraintsSchema, RunnerHardwareConstraintsSchema, RunnerAdapterCapabilitiesSchema, RunnerAdapterBaseConfigSchema, RunnerAdapterConfigSchema, RunnerDeployRequestSchema, RunnerExecuteRequestSchema, RunnerExecuteResultSchema } from './schemas/index.ts';
+export { RunnerAdapterClient, getVibesRunnerAdapterClient } from './client/index.ts';
+export type { RunnerAdapterFilter } from './client/index.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/code-execution/runner-adapter/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/code-execution/runner-adapter/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EACN,iBAAiB,EACjB,kBAAkB,EAClB,8BAA8B,EAC9B,0BAA0B,EAC1B,gCAAgC,EAChC,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACX,uBAAuB,EACvB,wBAAwB,EACxB,oBAAoB,EACpB,0BAA0B,EAC1B,4BAA4B,EAC5B,MAAM,kBAAkB,CAAC;AAG1B,YAAY,EACX,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,EAClB,SAAS,EACT,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EACN,0BAA0B,EAC1B,+BAA+B,EAC/B,+BAA+B,EAC/B,6BAA6B,EAC7B,yBAAyB,EACzB,yBAAyB,EACzB,0BAA0B,EAC1B,yBAAyB,EACzB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EACN,mBAAmB,EACnB,2BAA2B,EAC3B,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/code-execution/runner-adapter/index.js

@@ -0,0 +1,16 @@
+/**
+ * @vibesdotdev/workers/code-execution/runner-adapter
+ *
+ * Base package for runtime runner adapters. Exports the `runner/adapter` kind,
+ * the RunnerAdapterInterface contract, shared Zod schemas, and the canonical
+ * runtime client helper.
+ *
+ * See SPEC.md for architecture, ownership rules, and usage.
+ */
+// Kind
+export { runnerAdapterKind, runnerCapacityKind, RunnerCapacityDescriptorSchema, RunnerCapacityReportSchema, RunnerCapacityIdleDeadlineSchema } from "./kinds/index.js";
+// Schemas — Zod validation schemas (named with *Schema suffix to avoid collision)
+export { RunnerGpuConstraintsSchema, RunnerHardwareConstraintsSchema, RunnerAdapterCapabilitiesSchema, RunnerAdapterBaseConfigSchema, RunnerAdapterConfigSchema, RunnerDeployRequestSchema, RunnerExecuteRequestSchema, RunnerExecuteResultSchema } from "./schemas/index.js";
+// Runtime client — one-client-per-module pattern (SPEC: runtime/client)
+export { RunnerAdapterClient, getVibesRunnerAdapterClient } from "./client/index.js";
+//# sourceMappingURL=index.js.map

package/dist/code-execution/runner-adapter/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/code-execution/runner-adapter/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO;AACP,OAAO,EACN,iBAAiB,EACjB,kBAAkB,EAClB,8BAA8B,EAC9B,0BAA0B,EAC1B,gCAAgC,EAChC,MAAM,kBAAkB,CAAC;AAsB1B,kFAAkF;AAClF,OAAO,EACN,0BAA0B,EAC1B,+BAA+B,EAC/B,+BAA+B,EAC/B,6BAA6B,EAC7B,yBAAyB,EACzB,yBAAyB,EACzB,0BAA0B,EAC1B,yBAAyB,EACzB,MAAM,oBAAoB,CAAC;AAE5B,wEAAwE;AACxE,OAAO,EACN,mBAAmB,EACnB,2BAA2B,EAC3B,MAAM,mBAAmB,CAAC"}

package/dist/code-execution/runner-adapter/interfaces/adapter.d.ts

@@ -0,0 +1,180 @@
+/**
+ * Runner Adapter Interface
+ *
+ * Contract for runtime runner adapters — the layer that deploys execution
+ * environments onto hosts and executes runnables within them.
+ *
+ * Adapters bridge:
+ *   - Machine lifecycle (platform/hosts + infra/sandbox provisioning)
+ *   - Run execution (runnable/runnable's execute() contract)
+ *   - Telemetry (runnable/runner's RunHandle event emission)
+ *
+ * Consumers resolve adapters via `runtime.query('runner/adapter')` and never
+ * import an adapter package directly (Constitution Rule 1).
+ */
+import type { RuntimeDescriptor } from '@vibesdotdev/kernel';
+import type { JsonObject } from '@vibesdotdev/kernel/schemas/json';
+import type { RunHandle } from '@vibesdotdev/runnable';
+import type { RunnerExecuteRequest as RunnerExecuteRequestPayload, RunnerExecuteResult as RunnerExecuteResultData } from '../schemas/descriptors.ts';
+export type { RunHandle };
+export interface RunnerGpuConstraints {
+    /** GPU model name (e.g., 'A100', 'RTX4090', 'L4'). */
+    model?: string;
+    /** Minimum VRAM in megabytes. */
+    vramMb?: number;
+    /** Minimum number of GPUs. */
+    count?: number;
+    /** Required driver version pattern. */
+    driver?: string;
+}
+export interface RunnerHardwareConstraints {
+    gpu?: RunnerGpuConstraints;
+    /** Minimum CPU cores. */
+    cpuCores?: number;
+    /** Minimum RAM in megabytes. */
+    ramMb?: number;
+    /** Minimum disk in megabytes. */
+    diskMb?: number;
+    /** Required OS / kernel. */
+    os?: string;
+    /** Whether NVIDIA CUDA toolkit is required. */
+    nvidiaToolkit?: boolean;
+}
+export interface RunnerDeployRequest {
+    /** Unique identifier for this deployment. */
+    id: string;
+    /** Human-readable name. */
+    name?: string;
+    /** Hardware constraints for host selection/provisioning. */
+    hardware?: RunnerHardwareConstraints;
+    /** Provider hint ('digitalocean', 'aws', 'docker', 'bun', 'custom'). */
+    provider?: string;
+    /** Region hint for provisioning. */
+    region?: string;
+    /** Container image or environment template. */
+    image?: string;
+    /** Environment variables to inject. */
+    env?: Record<string, string>;
+    /** Labels for host pool matching. */
+    labels?: string[];
+    /** Adapter-specific configuration (discriminated by adapter id). */
+    config?: JsonObject;
+    /** Workspace path the runnable requires (maps to 'runtime/workspace-path' context). */
+    workspacePath?: string;
+}
+export interface RunnerDeployResult {
+    /** Deployment identifier (stable across status/teardown calls). */
+    deploymentId: string;
+    /** Host identifier if a host was resolved or provisioned. */
+    hostId?: string;
+    /** Network endpoint(s) for the deployed environment. */
+    endpoints?: {
+        host?: string;
+        port?: number;
+    }[];
+    /** Timestamp when deployment became ready. */
+    readyAt: Date;
+    /** Resolved hardware capabilities (what was actually allocated). */
+    hardware?: {
+        gpu?: {
+            model?: string;
+            vramMb?: number;
+            count?: number;
+        };
+        cpuCores?: number;
+        ramMb?: number;
+    };
+}
+export interface RunnerExecuteRequest extends RunnerExecuteRequestPayload {
+    /** Optional RunHandle for telemetry emission. Adapters call methods on it; */
+    /** they never create their own telemetry channel. */
+    handle?: RunHandle;
+}
+export type RunnerExecuteResult = RunnerExecuteResultData;
+export type RunnerExecutionStatus = 'pending' | 'deploying' | 'ready' | 'running' | 'completed' | 'failed' | 'cancelled' | 'teardown';
+export interface RunnerStatusResult {
+    /** Deployment ID. */
+    deploymentId: string;
+    /** Current lifecycle status. */
+    status: RunnerExecutionStatus;
+    /** Progress fraction (0–1) if applicable. */
+    progress?: number;
+    /** Status message for human consumption. */
+    message?: string;
+    /** Started timestamp. */
+    startedAt?: Date;
+    /** Completed/failed timestamp. */
+    completedAt?: Date;
+}
+export interface RunnerHealthResult {
+    /** Whether the adapter can fulfill requests. */
+    healthy: boolean;
+    /** Available hardware capacity (if queryable without side effects). */
+    availableCapacity?: {
+        maxConcurrent: number;
+        currentRunning: number;
+        gpuInstances?: number;
+    };
+    /** Reason if unhealthy. */
+    reason?: string;
+}
+/**
+ * RunnerAdapterInterface
+ *
+ * Every runner adapter package (docker, bun, digitalocean, …) exports a class
+ * implementing this interface, registered as a `runner/adapter` runtime kind
+ * implementation.
+ *
+ * Lifecycle:
+ *   1. Consumer calls `deploy(request)` → gets `RunnerDeployResult`
+ *   2. Consumer calls `execute(request)` → workload runs, telemetry emitted via handle
+ *   3. Consumer polls `status(deploymentId)` or receives events via handle
+ *   4. Consumer calls `teardown(deploymentId)` → resources cleaned up
+ *
+ * All methods are async. Adapters must be idempotent where possible (duplicate
+ * teardown is safe, duplicate deploy returns existing deployment).
+ */
+export interface RunnerAdapterInterface {
+    /** Readonly adapter descriptor (id, name, capabilities). */
+    readonly descriptor: RuntimeDescriptor;
+    /**
+     * Deploy an execution environment.
+     *
+     * Resolves or provisions a host matching the hardware constraints,
+     * deploys the target image/environment, and returns endpoints.
+     *
+     * May use `infra/sandbox` runtime kind for IaaS provisioning and
+     * `platform/hosts` client for host inventory queries. Never writes
+     * host rows directly.
+     */
+    deploy(request: RunnerDeployRequest): Promise<RunnerDeployResult>;
+    /**
+     * Execute a runnable within a deployed environment.
+     *
+     * Wires the runnable's `execute()` call with optional `RunHandle`
+     * for telemetry. The adapter is responsible for:
+     *   - Invoking the runnable implementation on the remote/local target
+     *   - Forwarding progress/metric/log/event calls to the handle
+     *   - Returning the execution result (or throwing on failure)
+     *
+     * If no handle is provided, execution still runs but emits no telemetry.
+     */
+    execute(request: RunnerExecuteRequest): Promise<RunnerExecuteResult>;
+    /**
+     * Query execution/deployment status.
+     */
+    status(deploymentId: string): Promise<RunnerStatusResult>;
+    /**
+     * Tear down a deployment and release resources.
+     *
+     * Idempotent: calling teardown on an already-torn-down deployment
+     * is safe and returns silently. May retire the underlying host if
+     * the adapter provisioned it exclusively.
+     */
+    teardown(deploymentId: string): Promise<void>;
+    /**
+     * Check adapter health and available capacity.
+     */
+    health(): Promise<RunnerHealthResult>;
+}
+//# sourceMappingURL=adapter.d.ts.map

package/dist/code-execution/runner-adapter/interfaces/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../../src/code-execution/runner-adapter/interfaces/adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,KAAK,EACX,oBAAoB,IAAI,2BAA2B,EACnD,mBAAmB,IAAI,uBAAuB,EAC9C,MAAM,2BAA2B,CAAC;AAInC,YAAY,EAAE,SAAS,EAAE,CAAC;AAQ1B,MAAM,WAAW,oBAAoB;IACpC,sDAAsD;IACtD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iCAAiC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8BAA8B;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,yBAAyB;IACzC,GAAG,CAAC,EAAE,oBAAoB,CAAC;IAC3B,yBAAyB;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gCAAgC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iCAAiC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4BAA4B;IAC5B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,+CAA+C;IAC/C,aAAa,CAAC,EAAE,OAAO,CAAC;CACxB;AAID,MAAM,WAAW,mBAAmB;IACnC,6CAA6C;IAC7C,EAAE,EAAE,MAAM,CAAC;IACX,2BAA2B;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,yBAAyB,CAAC;IACrC,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oCAAoC;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+CAA+C;IAC/C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,qCAAqC;IACrC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,oEAAoE;IACpE,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,uFAAuF;IACvF,aAAa,CAAC,EAAE,MAAM,CAAC;CACvB;AAID,MAAM,WAAW,kBAAkB;IAClC,mEAAmE;IACnE,YAAY,EAAE,MAAM,CAAC;IACrB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wDAAwD;IACxD,SAAS,CAAC,EAAE;QACX,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;KACd,EAAE,CAAC;IACJ,8CAA8C;IAC9C,OAAO,EAAE,IAAI,CAAC;IACd,oEAAoE;IACpE,QAAQ,CAAC,EAAE;QACV,GAAG,CAAC,EAAE;YAAE,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;CACF;AAID,MAAM,WAAW,oBAAqB,SAAQ,2BAA2B;IACxE,8EAA8E;IAC9E,qDAAqD;IACrD,MAAM,CAAC,EAAE,SAAS,CAAC;CACnB;AAID,MAAM,MAAM,mBAAmB,GAAG,uBAAuB,CAAC;AAI1D,MAAM,MAAM,qBAAqB,GAC9B,SAAS,GACT,WAAW,GACX,OAAO,GACP,SAAS,GACT,WAAW,GACX,QAAQ,GACR,WAAW,GACX,UAAU,CAAC;AAEd,MAAM,WAAW,kBAAkB;IAClC,qBAAqB;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,gCAAgC;IAChC,MAAM,EAAE,qBAAqB,CAAC;IAC9B,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4CAA4C;IAC5C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yBAAyB;IACzB,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,kCAAkC;IAClC,WAAW,CAAC,EAAE,IAAI,CAAC;CACnB;AAID,MAAM,WAAW,kBAAkB;IAClC,gDAAgD;IAChD,OAAO,EAAE,OAAO,CAAC;IACjB,uEAAuE;IACvE,iBAAiB,CAAC,EAAE;QACnB,aAAa,EAAE,MAAM,CAAC;QACtB,cAAc,EAAE,MAAM,CAAC;QACvB,YAAY,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,2BAA2B;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAID;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,sBAAsB;IACtC,4DAA4D;IAC5D,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IAEvC;;;;;;;;;OASG;IACH,MAAM,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAElE;;;;;;;;;;OAUG;IACH,OAAO,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAErE;;OAEG;IACH,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAE1D;;;;;;OAMG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE9C;;OAEG;IACH,MAAM,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACtC"}

package/dist/code-execution/runner-adapter/interfaces/adapter.js

@@ -0,0 +1,16 @@
+/**
+ * Runner Adapter Interface
+ *
+ * Contract for runtime runner adapters — the layer that deploys execution
+ * environments onto hosts and executes runnables within them.
+ *
+ * Adapters bridge:
+ *   - Machine lifecycle (platform/hosts + infra/sandbox provisioning)
+ *   - Run execution (runnable/runnable's execute() contract)
+ *   - Telemetry (runnable/runner's RunHandle event emission)
+ *
+ * Consumers resolve adapters via `runtime.query('runner/adapter')` and never
+ * import an adapter package directly (Constitution Rule 1).
+ */
+export {};
+//# sourceMappingURL=adapter.js.map

package/dist/code-execution/runner-adapter/interfaces/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../../../src/code-execution/runner-adapter/interfaces/adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG"}