@vibesdotdev/workers 0.0.0-stage → 1.0.0-rc.2

package/dist/code-execution/runner-adapter/schemas/descriptors.js

@@ -0,0 +1,99 @@
+/**
+ * Runner Adapter Schemas
+ *
+ * Shared Zod schemas for the runner/adapter kind. Kind descriptor schemas
+ * compose from these primitives. Adapter packages import these for their
+ * own config schema extensions.
+ */
+import * as z from 'zod/v4';
+import { JsonObjectSchema, JsonValueSchema } from '@vibesdotdev/kernel/schemas/json';
+// ── GPU Constraints ─────────────────────────────────────────────────────
+export const RunnerGpuConstraintsSchema = z.object({
+    model: z.string().optional(),
+    vramMb: z.number().int().nonnegative().optional(),
+    count: z.number().int().nonnegative().optional(),
+    driver: z.string().optional()
+});
+// ── Hardware Constraints ─────────────────────────────────────────────────
+export const RunnerHardwareConstraintsSchema = z.object({
+    gpu: RunnerGpuConstraintsSchema.optional(),
+    cpuCores: z.number().int().nonnegative().optional(),
+    ramMb: z.number().int().nonnegative().optional(),
+    diskMb: z.number().int().nonnegative().optional(),
+    os: z.string().optional(),
+    nvidiaToolkit: z.boolean().optional()
+});
+// ── Capabilities ─────────────────────────────────────────────────────────
+export const RunnerAdapterCapabilitiesSchema = z.array(z.enum([
+    'gpu',
+    'cpu-only',
+    'persistent',
+    'ephemeral',
+    'preemptible',
+    'dedicated',
+    'spot',
+    'local',
+    'remote'
+]));
+// ── Config Discriminated Union ──────────────────────────────────────────
+//
+// Base config shape. Each adapter package extends with its discriminator:
+//
+//   DockerAdapterConfigSchema  = BaseConfig.extend({ adapter: z.literal('docker'), image: z.string(), ... })
+//   BunAdapterConfigSchema     = BaseConfig.extend({ adapter: z.literal('bun'), ... })
+//   DoGpuAdapterConfigSchema   = BaseConfig.extend({ adapter: z.literal('digitalocean-gpu'), dropletSize: z.string(), ... })
+export const RunnerAdapterBaseConfigSchema = z.object({
+    /** Default image or environment template. */
+    image: z.string().optional(),
+    /** Default region for provisioning. */
+    region: z.string().optional(),
+    /** Maximum concurrent deployments. */
+    maxConcurrent: z.number().int().positive().optional(),
+    /** Idle timeout before auto-teardown (ms). */
+    idleTimeoutMs: z.number().int().nonnegative().optional(),
+    /** Whether to provision new hosts on demand or require pre-existing ones. */
+    autoProvision: z.boolean().default(false)
+});
+/**
+ * Config schema for the kind definition.
+ *
+ * Base shape with a generic discriminator. Adapter packages replace this
+ * with their own narrowed config schema when registering descriptors
+ * (via schema extension, same pattern as infra/sandbox).
+ */
+export const RunnerAdapterConfigSchema = z.looseObject({
+    ...RunnerAdapterBaseConfigSchema.shape,
+    adapter: z.string().min(1)
+});
+// ── Deploy / Execute / Status schemas ───────────────────────────────────
+//
+// These validate the request/response shapes at kind-registration time.
+// Interface types live in ../interfaces/adapter.ts.
+export const RunnerDeployRequestSchema = z.object({
+    id: z.string().min(1),
+    name: z.string().optional(),
+    hardware: RunnerHardwareConstraintsSchema.optional(),
+    provider: z.string().optional(),
+    region: z.string().optional(),
+    image: z.string().optional(),
+    env: z.record(z.string(), z.string()).optional(),
+    labels: z.array(z.string()).optional(),
+    config: JsonObjectSchema.optional(),
+    workspacePath: z.string().optional()
+});
+export const RunnerExecuteRequestSchema = z.object({
+    deploymentId: z.string().min(1),
+    runnableType: z.string().min(1),
+    config: JsonObjectSchema,
+    timeoutMs: z.number().int().positive().optional()
+});
+export const RunnerExecuteResultSchema = z.object({
+    executionId: z.string(),
+    result: JsonValueSchema,
+    durationMs: z.number(),
+    utilization: z.object({
+        gpuPercent: z.number().optional(),
+        ramPercent: z.number().optional()
+    }).optional()
+});
+//# sourceMappingURL=descriptors.js.map

package/dist/code-execution/runner-adapter/schemas/descriptors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"descriptors.js","sourceRoot":"","sources":["../../../../src/code-execution/runner-adapter/schemas/descriptors.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAErF,2EAA2E;AAE3E,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACjD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAChD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAGH,4EAA4E;AAE5E,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,GAAG,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IAC1C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACnD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAChD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACjD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAGH,4EAA4E;AAE5E,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CACrD,CAAC,CAAC,IAAI,CAAC;IACN,KAAK;IACL,UAAU;IACV,YAAY;IACZ,WAAW;IACX,aAAa;IACb,WAAW;IACX,MAAM;IACN,OAAO;IACP,QAAQ;CACR,CAAC,CACF,CAAC;AAEF,2EAA2E;AAC3E,EAAE;AACF,0EAA0E;AAC1E,EAAE;AACF,6GAA6G;AAC7G,uFAAuF;AACvF,6HAA6H;AAE7H,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,6CAA6C;IAC7C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,uCAAuC;IACvC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,sCAAsC;IACtC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACrD,8CAA8C;IAC9C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACxD,6EAA6E;IAC7E,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACzC,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,WAAW,CAAC;IACtD,GAAG,6BAA6B,CAAC,KAAK;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1B,CAAC,CAAC;AAEH,2EAA2E;AAC3E,EAAE;AACF,wEAAwE;AACxE,oDAAoD;AAEpD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,QAAQ,EAAE,+BAA+B,CAAC,QAAQ,EAAE;IACpD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAChD,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtC,MAAM,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACnC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,MAAM,EAAE,gBAAgB;IACxB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,MAAM,EAAE,eAAe;IACvB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACjC,CAAC,CAAC,QAAQ,EAAE;CACb,CAAC,CAAC"}

package/dist/code-execution/runner-adapter/schemas/index.d.ts

@@ -0,0 +1,3 @@
+export { RunnerGpuConstraintsSchema, RunnerHardwareConstraintsSchema, RunnerAdapterCapabilitiesSchema, RunnerAdapterBaseConfigSchema, RunnerAdapterConfigSchema, RunnerDeployRequestSchema, RunnerExecuteRequestSchema, RunnerExecuteResultSchema } from './descriptors.ts';
+export type { RunnerGpuConstraints, RunnerHardwareConstraints, RunnerDeployRequest, RunnerExecuteRequest, RunnerExecuteResult } from './descriptors.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/code-execution/runner-adapter/schemas/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/code-execution/runner-adapter/schemas/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,0BAA0B,EAC1B,+BAA+B,EAC/B,+BAA+B,EAC/B,6BAA6B,EAC7B,yBAAyB,EACzB,yBAAyB,EACzB,0BAA0B,EAC1B,yBAAyB,EACzB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACX,oBAAoB,EACpB,yBAAyB,EACzB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,MAAM,kBAAkB,CAAC"}

package/dist/code-execution/runner-adapter/schemas/index.js

@@ -0,0 +1,2 @@
+export { RunnerGpuConstraintsSchema, RunnerHardwareConstraintsSchema, RunnerAdapterCapabilitiesSchema, RunnerAdapterBaseConfigSchema, RunnerAdapterConfigSchema, RunnerDeployRequestSchema, RunnerExecuteRequestSchema, RunnerExecuteResultSchema } from "./descriptors.js";
+//# sourceMappingURL=index.js.map

package/dist/code-execution/runner-adapter/schemas/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/code-execution/runner-adapter/schemas/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,0BAA0B,EAC1B,+BAA+B,EAC/B,+BAA+B,EAC/B,6BAA6B,EAC7B,yBAAyB,EACzB,yBAAyB,EACzB,0BAA0B,EAC1B,yBAAyB,EACzB,MAAM,kBAAkB,CAAC"}

package/dist/code-execution/schemas/common.d.ts

@@ -0,0 +1,109 @@
+import * as z from 'zod/v4';
+export declare const executionConfigSchema: z.ZodObject<{
+    timeout: z.ZodDefault<z.ZodNumber>;
+    memoryLimit: z.ZodDefault<z.ZodNumber>;
+    isolationLevel: z.ZodDefault<z.ZodEnum<{
+        process: "process";
+        vm: "vm";
+    }>>;
+    allowedGlobals: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    streamOutput: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+export type ExecutionConfig = z.infer<typeof executionConfigSchema>;
+export declare const codeExecutionRequestSchema: z.ZodObject<{
+    code: z.ZodString;
+    language: z.ZodDefault<z.ZodEnum<{
+        typescript: "typescript";
+        javascript: "javascript";
+        python: "python";
+    }>>;
+    testData: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    inputs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    context: z.ZodOptional<z.ZodObject<{
+        benchmarkId: z.ZodOptional<z.ZodString>;
+        toolId: z.ZodOptional<z.ZodString>;
+        workflowId: z.ZodOptional<z.ZodString>;
+        promptTestId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type CodeExecutionRequest = z.infer<typeof codeExecutionRequestSchema>;
+export declare const codeExecutionJobSchema: z.ZodObject<{
+    code: z.ZodString;
+    language: z.ZodDefault<z.ZodEnum<{
+        typescript: "typescript";
+        javascript: "javascript";
+        python: "python";
+    }>>;
+    testData: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    inputs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    context: z.ZodOptional<z.ZodObject<{
+        benchmarkId: z.ZodOptional<z.ZodString>;
+        toolId: z.ZodOptional<z.ZodString>;
+        workflowId: z.ZodOptional<z.ZodString>;
+        promptTestId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    sessionId: z.ZodUUID;
+    userId: z.ZodString;
+    config: z.ZodObject<{
+        timeout: z.ZodDefault<z.ZodNumber>;
+        memoryLimit: z.ZodDefault<z.ZodNumber>;
+        isolationLevel: z.ZodDefault<z.ZodEnum<{
+            process: "process";
+            vm: "vm";
+        }>>;
+        allowedGlobals: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        streamOutput: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type CodeExecutionJob = z.infer<typeof codeExecutionJobSchema>;
+export declare const executionOutputEventSchema: z.ZodObject<{
+    type: z.ZodEnum<{
+        output: "output";
+        error: "error";
+        log: "log";
+        progress: "progress";
+        started: "started";
+        complete: "complete";
+    }>;
+    timestamp: z.ZodNumber;
+    data: z.ZodUnknown;
+}, z.core.$strip>;
+export type ExecutionOutputEvent = z.infer<typeof executionOutputEventSchema>;
+export declare const codeExecutionResultSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    success: z.ZodBoolean;
+    output: z.ZodArray<z.ZodString>;
+    logs: z.ZodArray<z.ZodObject<{
+        level: z.ZodString;
+        message: z.ZodString;
+        timestamp: z.ZodNumber;
+    }, z.core.$strip>>;
+    returnValue: z.ZodOptional<z.ZodUnknown>;
+    error: z.ZodOptional<z.ZodString>;
+    executionTime: z.ZodNumber;
+    memoryUsed: z.ZodOptional<z.ZodNumber>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>;
+export type CodeExecutionResult = z.infer<typeof codeExecutionResultSchema>;
+export declare const sandboxContextSchema: z.ZodObject<{
+    testData: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    allowedGlobals: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    outputLimit: z.ZodDefault<z.ZodNumber>;
+    logLimit: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip>;
+export type SandboxContext = z.infer<typeof sandboxContextSchema>;
+export declare const securityValidationSchema: z.ZodObject<{
+    containsDangerousPatterns: z.ZodBoolean;
+    dangerousPatterns: z.ZodArray<z.ZodString>;
+    estimatedComplexity: z.ZodEnum<{
+        low: "low";
+        medium: "medium";
+        high: "high";
+    }>;
+    recommendedIsolationLevel: z.ZodEnum<{
+        process: "process";
+        vm: "vm";
+    }>;
+}, z.core.$strip>;
+export type SecurityValidation = z.infer<typeof securityValidationSchema>;
+//# sourceMappingURL=common.d.ts.map

package/dist/code-execution/schemas/common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../../src/code-execution/schemas/common.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAU5B,eAAO,MAAM,qBAAqB;;;;;;;;;iBAMhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAGpE,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;iBAiBrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAG9E,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAIjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAGtE,eAAO,MAAM,0BAA0B;;;;;;;;;;;iBAIrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAG9E,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;iBAoBpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAG5E,eAAO,MAAM,oBAAoB;;;;;iBAK/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAGlE,eAAO,MAAM,wBAAwB;;;;;;;;;;;;iBAKnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}

package/dist/code-execution/schemas/common.js

@@ -0,0 +1,79 @@
+import * as z from 'zod/v4';
+import { codeExecutionLanguageSchema, isolationLevelSchema } from "./languages.js";
+// Core execution configuration schema
+// isolationLevel is selected by the language runtime descriptor: every language
+// runs in a child process ('process'). 'vm' is still accepted from callers and
+// ignored; the in-process vm sandbox is deleted.
+export const executionConfigSchema = z.object({
+    timeout: z.number().min(100).max(30000).default(5000), // 5 second default
+    memoryLimit: z.number().min(32).max(512).default(128), // 128MB default
+    isolationLevel: isolationLevelSchema.default('vm'),
+    allowedGlobals: z.array(z.string()).default([]),
+    streamOutput: z.boolean().default(true)
+});
+// Base code execution request schema
+export const codeExecutionRequestSchema = z.object({
+    code: z.string().min(1).max(50000), // 50KB limit
+    language: codeExecutionLanguageSchema.default('typescript'),
+    testData: z.record(z.string(), z.unknown()).optional(),
+    /**
+     * JSON inputs handed to the snippet over stdin and exposed as `INPUT`
+     * (e.g. a benchmark's `previousStepOutput` and `expected`).
+     */
+    inputs: z.record(z.string(), z.unknown()).optional(),
+    context: z
+        .object({
+        benchmarkId: z.string().optional(),
+        toolId: z.string().optional(),
+        workflowId: z.string().optional(),
+        promptTestId: z.string().optional()
+    })
+        .optional()
+});
+// Full execution job data schema
+export const codeExecutionJobSchema = codeExecutionRequestSchema.extend({
+    sessionId: z.uuid(),
+    userId: z.string(),
+    config: executionConfigSchema
+});
+// Execution output event schema
+export const executionOutputEventSchema = z.object({
+    type: z.enum(['output', 'log', 'error', 'progress', 'complete', 'started']),
+    timestamp: z.number(),
+    data: z.unknown()
+});
+// Execution result schema
+export const codeExecutionResultSchema = z.object({
+    sessionId: z.string(),
+    success: z.boolean(),
+    output: z.array(z.string()),
+    logs: z.array(z.object({
+        level: z.string(),
+        message: z.string(),
+        timestamp: z.number()
+    })),
+    returnValue: z.unknown().optional(),
+    error: z.string().optional(),
+    executionTime: z.number(),
+    /**
+     * Memory the execution itself used, only when the executor can measure it.
+     * Host process heap is not execution memory and is never reported here.
+     */
+    memoryUsed: z.number().optional(),
+    metadata: z.record(z.string(), z.unknown()).optional()
+});
+// Sandbox context schema
+export const sandboxContextSchema = z.object({
+    testData: z.record(z.string(), z.unknown()).optional(),
+    allowedGlobals: z.array(z.string()).default([]),
+    outputLimit: z.number().default(10000), // 10KB output limit
+    logLimit: z.number().default(1000) // 1KB log limit per entry
+});
+// Security validation schemas
+export const securityValidationSchema = z.object({
+    containsDangerousPatterns: z.boolean(),
+    dangerousPatterns: z.array(z.string()),
+    estimatedComplexity: z.enum(['low', 'medium', 'high']),
+    recommendedIsolationLevel: isolationLevelSchema
+});
+//# sourceMappingURL=common.js.map

package/dist/code-execution/schemas/common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../../src/code-execution/schemas/common.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EACN,2BAA2B,EAC3B,oBAAoB,EACpB,MAAM,gBAAgB,CAAC;AAExB,sCAAsC;AACtC,gFAAgF;AAChF,+EAA+E;AAC/E,iDAAiD;AACjD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,mBAAmB;IAC1E,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,gBAAgB;IACvE,cAAc,EAAE,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC;IAClD,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/C,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACvC,CAAC,CAAC;AAGH,qCAAqC;AACrC,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,aAAa;IACjD,QAAQ,EAAE,2BAA2B,CAAC,OAAO,CAAC,YAAY,CAAC;IAC3D,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtD;;;OAGG;IACH,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpD,OAAO,EAAE,CAAC;SACR,MAAM,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAClC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACjC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;SACD,QAAQ,EAAE;CACZ,CAAC,CAAC;AAGH,iCAAiC;AACjC,MAAM,CAAC,MAAM,sBAAsB,GAAG,0BAA0B,CAAC,MAAM,CAAC;IACvE,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;IACnB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,MAAM,EAAE,qBAAqB;CAC7B,CAAC,CAAC;AAGH,gCAAgC;AAChC,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;IAC3E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;CACjB,CAAC,CAAC;AAGH,0BAA0B;AAC1B,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3B,IAAI,EAAE,CAAC,CAAC,KAAK,CACZ,CAAC,CAAC,MAAM,CAAC;QACR,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;KACrB,CAAC,CACF;IACD,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACnC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB;;;OAGG;IACH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACtD,CAAC,CAAC;AAGH,yBAAyB;AACzB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtD,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,oBAAoB;IAC5D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,0BAA0B;CAC7D,CAAC,CAAC;AAGH,8BAA8B;AAC9B,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,yBAAyB,EAAE,CAAC,CAAC,OAAO,EAAE;IACtC,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACtC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACtD,yBAAyB,EAAE,oBAAoB;CAC/C,CAAC,CAAC"}

package/dist/code-execution/schemas/index.d.ts

@@ -0,0 +1,5 @@
+export { executionConfigSchema, codeExecutionRequestSchema, codeExecutionJobSchema, executionOutputEventSchema, codeExecutionResultSchema, sandboxContextSchema, securityValidationSchema } from './common.ts';
+export { codeExecutionLanguageSchema, isolationLevelSchema, languageRuntimeDescriptorSchema, LANGUAGE_RUNTIMES, getLanguageRuntimeDescriptor, isolationForLanguage } from './languages.ts';
+export type { ExecutionConfig, CodeExecutionRequest, CodeExecutionJob, ExecutionOutputEvent, CodeExecutionResult, SandboxContext, SecurityValidation } from './types.ts';
+export type { CodeExecutionLanguage, IsolationLevel, LanguageRuntimeDescriptor } from './languages.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/code-execution/schemas/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/code-execution/schemas/index.ts"],"names":[],"mappings":"AACA,OAAO,EAEN,qBAAqB,EACrB,0BAA0B,EAC1B,sBAAsB,EACtB,0BAA0B,EAC1B,yBAAyB,EACzB,oBAAoB,EACpB,wBAAwB,EACxB,MAAM,aAAa,CAAC;AAErB,OAAO,EACN,2BAA2B,EAC3B,oBAAoB,EACpB,+BAA+B,EAC/B,iBAAiB,EACjB,4BAA4B,EAC5B,oBAAoB,EACpB,MAAM,gBAAgB,CAAC;AAExB,YAAY,EAEX,eAAe,EACf,oBAAoB,EACpB,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,kBAAkB,EAClB,MAAM,YAAY,CAAC;AAEpB,YAAY,EACX,qBAAqB,EACrB,cAAc,EACd,yBAAyB,EACzB,MAAM,gBAAgB,CAAC"}

package/dist/code-execution/schemas/index.js

@@ -0,0 +1,6 @@
+// Public API exports for code execution schemas
+export { 
+// Schemas
+executionConfigSchema, codeExecutionRequestSchema, codeExecutionJobSchema, executionOutputEventSchema, codeExecutionResultSchema, sandboxContextSchema, securityValidationSchema } from "./common.js";
+export { codeExecutionLanguageSchema, isolationLevelSchema, languageRuntimeDescriptorSchema, LANGUAGE_RUNTIMES, getLanguageRuntimeDescriptor, isolationForLanguage } from "./languages.js";
+//# sourceMappingURL=index.js.map

package/dist/code-execution/schemas/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/code-execution/schemas/index.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,OAAO;AACN,UAAU;AACV,qBAAqB,EACrB,0BAA0B,EAC1B,sBAAsB,EACtB,0BAA0B,EAC1B,yBAAyB,EACzB,oBAAoB,EACpB,wBAAwB,EACxB,MAAM,aAAa,CAAC;AAErB,OAAO,EACN,2BAA2B,EAC3B,oBAAoB,EACpB,+BAA+B,EAC/B,iBAAiB,EACjB,4BAA4B,EAC5B,oBAAoB,EACpB,MAAM,gBAAgB,CAAC"}

package/dist/code-execution/schemas/languages.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Schema-first language registry for code execution.
+ * Isolation backend is derived from language — consumers never invent a second path.
+ */
+import * as z from 'zod/v4';
+/** Supported execution languages (extend here first, then add a runtime). */
+export declare const codeExecutionLanguageSchema: z.ZodEnum<{
+    typescript: "typescript";
+    javascript: "javascript";
+    python: "python";
+}>;
+export type CodeExecutionLanguage = z.infer<typeof codeExecutionLanguageSchema>;
+/**
+ * Isolation backends. Every language runs in a child process ('process');
+ * 'vm' remains in the enum only so existing callers' configs still parse.
+ */
+export declare const isolationLevelSchema: z.ZodEnum<{
+    process: "process";
+    vm: "vm";
+}>;
+export type IsolationLevel = z.infer<typeof isolationLevelSchema>;
+export declare const languageRuntimeDescriptorSchema: z.ZodObject<{
+    language: z.ZodEnum<{
+        typescript: "typescript";
+        javascript: "javascript";
+        python: "python";
+    }>;
+    isolationLevel: z.ZodEnum<{
+        process: "process";
+        vm: "vm";
+    }>;
+    label: z.ZodString;
+    processBinary: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type LanguageRuntimeDescriptor = z.infer<typeof languageRuntimeDescriptorSchema>;
+export declare const LANGUAGE_RUNTIMES: readonly LanguageRuntimeDescriptor[];
+export declare function getLanguageRuntimeDescriptor(language: CodeExecutionLanguage): LanguageRuntimeDescriptor;
+export declare function isolationForLanguage(language: CodeExecutionLanguage): IsolationLevel;
+//# sourceMappingURL=languages.d.ts.map

package/dist/code-execution/schemas/languages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"languages.d.ts","sourceRoot":"","sources":["../../../src/code-execution/schemas/languages.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,6EAA6E;AAC7E,eAAO,MAAM,2BAA2B;;;;EAItC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF;;;GAGG;AACH,eAAO,MAAM,oBAAoB;;;EAA4B,CAAC;AAC9D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,+BAA+B;;;;;;;;;;;;iBAO1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF,eAAO,MAAM,iBAAiB,EAAE,SAAS,yBAAyB,EAmBxD,CAAC;AAEX,wBAAgB,4BAA4B,CAC3C,QAAQ,EAAE,qBAAqB,GAC7B,yBAAyB,CAM3B;AAED,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,qBAAqB,GAAG,cAAc,CAEpF"}

package/dist/code-execution/schemas/languages.js

@@ -0,0 +1,55 @@
+/**
+ * Schema-first language registry for code execution.
+ * Isolation backend is derived from language — consumers never invent a second path.
+ */
+import * as z from 'zod/v4';
+/** Supported execution languages (extend here first, then add a runtime). */
+export const codeExecutionLanguageSchema = z.enum([
+    'typescript',
+    'javascript',
+    'python'
+]);
+/**
+ * Isolation backends. Every language runs in a child process ('process');
+ * 'vm' remains in the enum only so existing callers' configs still parse.
+ */
+export const isolationLevelSchema = z.enum(['vm', 'process']);
+export const languageRuntimeDescriptorSchema = z.object({
+    language: codeExecutionLanguageSchema,
+    isolationLevel: isolationLevelSchema,
+    /** Human label for tools/docs */
+    label: z.string().min(1),
+    /** Interpreter the child runs (resolved on the host's execution provider). */
+    processBinary: z.string().optional()
+});
+export const LANGUAGE_RUNTIMES = [
+    {
+        language: 'typescript',
+        isolationLevel: 'process',
+        label: 'TypeScript (child process)',
+        processBinary: 'bun'
+    },
+    {
+        language: 'javascript',
+        isolationLevel: 'process',
+        label: 'JavaScript (child process)',
+        processBinary: 'bun'
+    },
+    {
+        language: 'python',
+        isolationLevel: 'process',
+        label: 'Python 3 (child process)',
+        processBinary: 'python3'
+    }
+];
+export function getLanguageRuntimeDescriptor(language) {
+    const found = LANGUAGE_RUNTIMES.find((d) => d.language === language);
+    if (!found) {
+        throw new Error(`No language runtime registered for "${language}"`);
+    }
+    return found;
+}
+export function isolationForLanguage(language) {
+    return getLanguageRuntimeDescriptor(language).isolationLevel;
+}
+//# sourceMappingURL=languages.js.map

package/dist/code-execution/schemas/languages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"languages.js","sourceRoot":"","sources":["../../../src/code-execution/schemas/languages.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,6EAA6E;AAC7E,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,IAAI,CAAC;IACjD,YAAY;IACZ,YAAY;IACZ,QAAQ;CACR,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;AAG9D,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,QAAQ,EAAE,2BAA2B;IACrC,cAAc,EAAE,oBAAoB;IACpC,iCAAiC;IACjC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,8EAA8E;IAC9E,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,iBAAiB,GAAyC;IACtE;QACC,QAAQ,EAAE,YAAY;QACtB,cAAc,EAAE,SAAS;QACzB,KAAK,EAAE,4BAA4B;QACnC,aAAa,EAAE,KAAK;KACpB;IACD;QACC,QAAQ,EAAE,YAAY;QACtB,cAAc,EAAE,SAAS;QACzB,KAAK,EAAE,4BAA4B;QACnC,aAAa,EAAE,KAAK;KACpB;IACD;QACC,QAAQ,EAAE,QAAQ;QAClB,cAAc,EAAE,SAAS;QACzB,KAAK,EAAE,0BAA0B;QACjC,aAAa,EAAE,SAAS;KACxB;CACQ,CAAC;AAEX,MAAM,UAAU,4BAA4B,CAC3C,QAA+B;IAE/B,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;IACrE,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,uCAAuC,QAAQ,GAAG,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAA+B;IACnE,OAAO,4BAA4B,CAAC,QAAQ,CAAC,CAAC,cAAc,CAAC;AAC9D,CAAC"}

package/dist/code-execution/schemas/operations.d.ts

@@ -0,0 +1,41 @@
+import z from 'zod/v4';
+import type { ExecutionOutputEvent } from './types.ts';
+import type { VibesRuntime } from '@vibesdotdev/kernel';
+import type { ExecBackendRuntime } from '../config/load.ts';
+import type { createCodeExecutionRequestClient } from '../server/operations.ts';
+/** Supplied by the authenticated surface, never parsed from customer request data. */
+export declare const codeExecutionActorSchema: z.ZodObject<{
+    userId: z.ZodString;
+    isPlatformAdmin: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+export type CodeExecutionActor = z.infer<typeof codeExecutionActorSchema>;
+/** Backend status must carry the same ownership identity as a local queued job. */
+export declare const codeExecutionJobStatusSchema: z.ZodObject<{
+    id: z.ZodString;
+    state: z.ZodString;
+    progress: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodObject<{}, z.core.$catchall<z.ZodUnknown>>]>>;
+    data: z.ZodObject<{
+        sessionId: z.ZodOptional<z.ZodString>;
+        userId: z.ZodOptional<z.ZodString>;
+    }, z.core.$catchall<z.ZodUnknown>>;
+    result: z.ZodOptional<z.ZodUnknown>;
+    failedReason: z.ZodOptional<z.ZodString>;
+    timestamp: z.ZodOptional<z.ZodNumber>;
+    processedOn: z.ZodOptional<z.ZodNumber>;
+    finishedOn: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export type CodeExecutionJobStatus = z.infer<typeof codeExecutionJobStatusSchema>;
+export type CodeExecutionJobStream = {
+    kind: 'events';
+    events: AsyncIterable<ExecutionOutputEvent>;
+} | {
+    kind: 'sse';
+    body: ReadableStream<Uint8Array>;
+};
+export type CodeExecutionRunOptions = {
+    signal?: AbortSignal;
+    sessionId?: string;
+};
+export type CodeExecutionOperationsRuntime = ExecBackendRuntime & Pick<VibesRuntime, 'lifecycle'>;
+export type CodeExecutionRequestClient = ReturnType<typeof createCodeExecutionRequestClient>;
+//# sourceMappingURL=operations.d.ts.map

package/dist/code-execution/schemas/operations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operations.d.ts","sourceRoot":"","sources":["../../../src/code-execution/schemas/operations.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,QAAQ,CAAC;AACvB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,yBAAyB,CAAC;AAEhF,sFAAsF;AACtF,eAAO,MAAM,wBAAwB;;;iBAGnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,mFAAmF;AACnF,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;iBAUvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,MAAM,MAAM,sBAAsB,GAC/B;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,aAAa,CAAC,oBAAoB,CAAC,CAAA;CAAE,GAC/D;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,CAAA;CAAE,CAAC;AAErD,MAAM,MAAM,uBAAuB,GAAG;IAAE,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnF,MAAM,MAAM,8BAA8B,GAAG,kBAAkB,GAAG,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;AAClG,MAAM,MAAM,0BAA0B,GAAG,UAAU,CAAC,OAAO,gCAAgC,CAAC,CAAC"}

package/dist/code-execution/schemas/operations.js

@@ -0,0 +1,19 @@
+import z from 'zod/v4';
+/** Supplied by the authenticated surface, never parsed from customer request data. */
+export const codeExecutionActorSchema = z.object({
+    userId: z.string().min(1),
+    isPlatformAdmin: z.boolean().optional()
+});
+/** Backend status must carry the same ownership identity as a local queued job. */
+export const codeExecutionJobStatusSchema = z.object({
+    id: z.string().min(1),
+    state: z.string(),
+    progress: z.union([z.number(), z.object({}).catchall(z.unknown())]).optional(),
+    data: z.object({ sessionId: z.string().optional(), userId: z.string().optional() }).catchall(z.unknown()),
+    result: z.unknown().optional(),
+    failedReason: z.string().optional(),
+    timestamp: z.number().optional(),
+    processedOn: z.number().optional(),
+    finishedOn: z.number().optional()
+});
+//# sourceMappingURL=operations.js.map

package/dist/code-execution/schemas/operations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operations.js","sourceRoot":"","sources":["../../../src/code-execution/schemas/operations.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,QAAQ,CAAC;AAMvB,sFAAsF;AACtF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAGH,mFAAmF;AACnF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC9E,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACzG,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC9B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC"}

package/dist/code-execution/schemas/types.d.ts

@@ -0,0 +1,2 @@
+export type { ExecutionConfig, CodeExecutionRequest, CodeExecutionJob, ExecutionOutputEvent, CodeExecutionResult, SandboxContext, SecurityValidation } from './common.ts';
+//# sourceMappingURL=types.d.ts.map

package/dist/code-execution/schemas/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/code-execution/schemas/types.ts"],"names":[],"mappings":"AACA,YAAY,EACX,eAAe,EACf,oBAAoB,EACpB,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,kBAAkB,EAClB,MAAM,aAAa,CAAC"}

package/dist/code-execution/schemas/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/code-execution/schemas/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/code-execution/schemas/types.ts"],"names":[],"mappings":""}

package/dist/code-execution/server/child-runner.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Code execution in a child process (the only execution path; the in-process
+ * `vm` sandbox is deleted).
+ *
+ * Each run is one child launched through the handed runtime's
+ * `runtime/execution` provider:
+ *
+ * - Where the host declares restricted execution (`executeRestricted` with a
+ *   declared `restrictedExecution.writableBase`), the run goes through it as
+ *   an additional layer (filesystem grants, network denied, env replaced);
+ *   otherwise it is the plain child below.
+ * - `envMode: 'replace'` with only the declared variables below: no host
+ *   environment, no credentials. (The execution contract's name for "only
+ *   what is declared" is `replace`; it has no separate `none`.)
+ * - A fresh scratch cwd from the runtime's temporary root
+ *   (`filesystem/adapter` `createTemporaryDirectory`), removed after the run.
+ * - A deadline through `runtime.lifecycle.wait`; at the deadline the child's
+ *   tree is killed and the run refuses `TIMEOUT code-execution-deadline`.
+ * - Inputs (`testData`, `inputs`: e.g. `previousStepOutput`, `expected`) go
+ *   over stdin as JSON. A JS/TS result comes back over stdout as one JSON
+ *   record; Python keeps its printed-output contract.
+ * - Combined stdout/stderr is capped; over the cap the child is killed and
+ *   the run refuses `INVALID_INPUT code-execution-output-limit`.
+ *
+ * This is process separation, not a hostile-code sandbox: the child runs as
+ * the host user with the host's filesystem and network reach.
+ */
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+import type { CodeExecutionRequest, CodeExecutionResult, ExecutionConfig } from '../schemas/types.ts';
+import { type CodeExecutionLanguage } from '../schemas/languages.ts';
+/** Combined stdout+stderr bytes a run may produce before it is refused. */
+export declare const CODE_EXECUTION_MAX_OUTPUT_BYTES = 1048576;
+/** The stdin payload (snippet inputs) a run may carry. */
+export declare const CODE_EXECUTION_MAX_INPUT_BYTES = 1048576;
+/** What the runner reads from the handed runtime. */
+export type CodeRunnerRuntime = RuntimeRef;
+/**
+ * Run `request` in a child of `runtime`'s execution provider. A pattern-gate
+ * violation returns an unsuccessful result without launching; the deadline,
+ * the output cap and missing capabilities throw typed `CapabilityError`s.
+ */
+export declare function runCodeInChild(runtime: CodeRunnerRuntime, request: CodeExecutionRequest & {
+    language: CodeExecutionLanguage;
+}, config: ExecutionConfig, options?: import('../schemas/operations.ts').CodeExecutionRunOptions): Promise<CodeExecutionResult>;
+//# sourceMappingURL=child-runner.d.ts.map

package/dist/code-execution/server/child-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"child-runner.d.ts","sourceRoot":"","sources":["../../../src/code-execution/server/child-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAwF,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAQ5I,OAAO,KAAK,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,eAAe,EAAsB,MAAM,qBAAqB,CAAC;AAE1H,OAAO,EAAgC,KAAK,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAGnG,2EAA2E;AAC3E,eAAO,MAAM,+BAA+B,UAAY,CAAC;AACzD,0DAA0D;AAC1D,eAAO,MAAM,8BAA8B,UAAY,CAAC;AASxD,qDAAqD;AACrD,MAAM,MAAM,iBAAiB,GAAG,UAAU,CAAC;AA6Z3C;;;;GAIG;AACH,wBAAsB,cAAc,CACnC,OAAO,EAAE,iBAAiB,EAC1B,OAAO,EAAE,oBAAoB,GAAG;IAAE,QAAQ,EAAE,qBAAqB,CAAA;CAAE,EACnE,MAAM,EAAE,eAAe,EACvB,OAAO,GAAE,OAAO,0BAA0B,EAAE,uBAA4B,GACtE,OAAO,CAAC,mBAAmB,CAAC,CAkG9B"}