@vibesdotdev/workers 0.0.0-stage → 1.0.0-rc.3

package/dist/code-execution/server/queue.js

@@ -0,0 +1,121 @@
+/**
+ * Code execution queue surface — delegates to the canonical
+ * `WorkersClient.getQueue('dev-code-jobs')`. The runtime resolves the
+ * scope-appropriate `workers/adapter` (memory for tests, IPC for
+ * consumer, Kafka for cloud); this module only owns the high-level
+ * submit / status / cancel semantics. Every helper takes the runtime its
+ * caller was handed; there is no ambient runtime.
+ */
+import { getLogger } from '@vibesdotdev/logging';
+import { getWorkersClient } from '@vibesdotdev/workers/client';
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { getVibesClient, tryGetVibesClient } from '@vibesdotdev/kernel/client';
+import { codeExecutionJobSchema } from "../schemas/index.js";
+import { isNewerJobMutationStamp, jobMutationStamp } from "../../core/queue-adapter.js";
+export { getJobStatus, cancelJob, cancelCodeExecution, openCodeExecutionJobStream } from "./operations.js";
+const QUEUE_ID = 'dev-code-jobs';
+const JOB_TYPE = 'code-execution.run';
+function metadataFor(job) {
+    return {
+        sessionId: job.sessionId,
+        userId: job.userId,
+        language: job.language,
+        isolationLevel: job.config.isolationLevel,
+        codeLength: job.code.length,
+        ...job.context
+    };
+}
+export async function submitCodeExecutionJob(runtime, data) {
+    const validated = codeExecutionJobSchema.parse(data);
+    const workers = await getWorkersClient(runtime);
+    const client = await getVibesClient('code-execution', runtime);
+    const { jobId: id } = await workers.startJob(JOB_TYPE, validated, {
+        jobId: `code-execution-${validated.sessionId}-${crypto.randomUUID()}`,
+        dispatch: validated.context?.benchmarkId ? { priority: 1 } : undefined,
+        metadata: metadataFor(validated)
+    });
+    client.remember(validated.sessionId, id);
+    const queue = await workers.getJobQueue(JOB_TYPE);
+    const initial = await queue.getJob(id);
+    let latest = initial ? jobMutationStamp(initial) : undefined;
+    if (client.activeJobId(validated.sessionId) === id && queue.subscribeToEvents) {
+        const unsubscribe = queue.subscribeToEvents(id, (event) => {
+            if (!latest || !event.stamp || !isNewerJobMutationStamp(latest, event.stamp))
+                return;
+            latest = event.stamp;
+            if (['completed', 'failed', 'cancelled'].includes(latest.status))
+                client.forget(validated.sessionId, id);
+        });
+        // A synchronous terminal callback may already have removed this receipt.
+        client.attachSubscription(validated.sessionId, id, unsubscribe);
+    }
+    const snapshot = await queue.getJob(id);
+    if (snapshot && (!latest || !isNewerJobMutationStamp(jobMutationStamp(snapshot), latest)) &&
+        ['completed', 'failed', 'cancelled'].includes(snapshot.status)) {
+        client.forget(validated.sessionId, id);
+    }
+    getLogger('code-execution-queue', runtime).info('Code execution job submitted', {
+        queue: QUEUE_ID,
+        jobId: id,
+        sessionId: validated.sessionId,
+        userId: validated.userId,
+        language: validated.language,
+        codeLength: validated.code.length,
+        isolationLevel: validated.config.isolationLevel
+    });
+    return id;
+}
+export function submitToolExecutionJob(runtime, params) {
+    return submitCodeExecutionJob(runtime, {
+        sessionId: params.sessionId,
+        userId: params.userId,
+        code: params.code,
+        language: 'typescript',
+        testData: params.testData,
+        context: {
+            toolId: params.toolId
+        },
+        config: {
+            timeout: params.timeout || 5000,
+            memoryLimit: 128,
+            isolationLevel: 'vm',
+            allowedGlobals: ['Math'],
+            streamOutput: true
+        }
+    });
+}
+export function submitPromptTestExecutionJob(runtime, params) {
+    return submitCodeExecutionJob(runtime, {
+        sessionId: params.sessionId,
+        userId: params.userId,
+        code: params.code,
+        language: 'typescript',
+        testData: params.testData,
+        context: {
+            promptTestId: params.promptTestId
+        },
+        config: {
+            timeout: params.timeout || 30000,
+            memoryLimit: 256,
+            isolationLevel: 'vm',
+            allowedGlobals: ['Math', 'Date'],
+            streamOutput: true
+        }
+    });
+}
+export function getActiveJobIdForSession(runtime, sessionId) {
+    return tryGetVibesClient('code-execution', runtime)?.activeJobId(sessionId);
+}
+export function rememberCodeExecutionJob(runtime, sessionId, jobId) {
+    const client = tryGetVibesClient('code-execution', runtime);
+    if (!client) {
+        throw new CapabilityError('The code-execution runtime client is not resolved on this runtime.', 'UNAVAILABLE', {
+            reason: 'code-execution-client-unavailable', retryable: false
+        });
+    }
+    client.remember(sessionId, jobId);
+}
+export function forgetCodeExecutionJob(runtime, sessionId, jobId) {
+    tryGetVibesClient('code-execution', runtime)?.forget(sessionId, jobId);
+}
+//# sourceMappingURL=queue.js.map

package/dist/code-execution/server/queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue.js","sourceRoot":"","sources":["../../../src/code-execution/server/queue.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAA6B,MAAM,6BAA6B,CAAC;AAC1F,OAAO,EAAE,eAAe,EAAmB,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAG/E,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AACxF,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAE3G,MAAM,QAAQ,GAAG,eAAe,CAAC;AACjC,MAAM,QAAQ,GAAG,oBAAoB,CAAC;AAKtC,SAAS,WAAW,CAAC,GAAqB;IACzC,OAAO;QACN,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,cAAc;QACzC,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM;QAC3B,GAAG,GAAG,CAAC,OAAO;KACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAAqB,EAAE,IAAsB;IACzF,MAAM,SAAS,GAAG,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,cAAc,CAA6B,gBAAgB,EAAE,OAAO,CAAC,CAAC;IAC3F,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,EAAE;QACjE,KAAK,EAAE,kBAAkB,SAAS,CAAC,SAAS,IAAI,MAAM,CAAC,UAAU,EAAE,EAAE;QACrE,QAAQ,EAAE,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;QACtE,QAAQ,EAAE,WAAW,CAAC,SAAS,CAAC;KAChC,CAAC,CAAC;IACH,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,WAAW,CAAmB,QAAQ,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACvC,IAAI,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,IAAI,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAC/E,MAAM,WAAW,GAAG,KAAK,CAAC,iBAAiB,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE;YACzD,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,uBAAuB,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC;gBAAE,OAAO;YACrF,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC;YACrB,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;gBAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC1G,CAAC,CAAC,CAAC;QACH,yEAAyE;QACzE,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACxC,IAAI,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,uBAAuB,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;QACxF,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACjE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,SAAS,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,8BAA8B,EAAE;QAC/E,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,EAAE;QACT,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM;QACjC,cAAc,EAAE,SAAS,CAAC,MAAM,CAAC,cAAc;KAC/C,CAAC,CAAC;IACH,OAAO,EAAE,CAAC;AACX,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAqB,EAAE,MAO7D;IACA,OAAO,sBAAsB,CAAC,OAAO,EAAE;QACtC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,QAAQ,EAAE,YAAY;QACtB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE;YACR,MAAM,EAAE,MAAM,CAAC,MAAM;SACrB;QACD,MAAM,EAAE;YACP,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;YAC/B,WAAW,EAAE,GAAG;YAChB,cAAc,EAAE,IAAI;YACpB,cAAc,EAAE,CAAC,MAAM,CAAC;YACxB,YAAY,EAAE,IAAI;SAClB;KACD,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,OAAqB,EAAE,MAOnE;IACA,OAAO,sBAAsB,CAAC,OAAO,EAAE;QACtC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,QAAQ,EAAE,YAAY;QACtB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE;YACR,YAAY,EAAE,MAAM,CAAC,YAAY;SACjC;QACD,MAAM,EAAE;YACP,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,KAAK;YAChC,WAAW,EAAE,GAAG;YAChB,cAAc,EAAE,IAAI;YACpB,cAAc,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;YAChC,YAAY,EAAE,IAAI;SAClB;KACD,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,OAAqB,EAAE,SAAiB;IAChF,OAAO,iBAAiB,CAA6B,gBAAgB,EAAE,OAAO,CAAC,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC;AACzG,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,OAAqB,EAAE,SAAiB,EAAE,KAAa;IAC/F,MAAM,MAAM,GAAG,iBAAiB,CAA6B,gBAAgB,EAAE,OAAO,CAAC,CAAC;IACxF,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,MAAM,IAAI,eAAe,CAAC,oEAAoE,EAAE,aAAa,EAAE;YAC9G,MAAM,EAAE,mCAAmC,EAAE,SAAS,EAAE,KAAK;SAC7D,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAqB,EAAE,SAAiB,EAAE,KAAa;IAC7F,iBAAiB,CAA6B,gBAAgB,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AACpG,CAAC"}

package/dist/code-execution/server/schemas/queue.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Code execution queue schemas.
+ *
+ * The previous `AdapterKind` / `AdapterInstance` types existed because
+ * the queue module constructed `KafkaRuntimeAdapter` / `MemoryRuntimeAdapter`
+ * directly. Adapter selection now happens inside `WorkersClient.getQueue`
+ * via the runtime, so this module no longer needs to expose adapter
+ * shapes — call sites work against `QueueAdapter<CodeExecutionJob,
+ * CodeExecutionResult>` directly.
+ */
+import type { QueueAdapter } from '@vibesdotdev/workers/core/queue-adapter';
+import type { CodeExecutionJob, CodeExecutionResult } from '../../schemas/types.ts';
+export type CodeExecutionQueue = QueueAdapter<CodeExecutionJob, CodeExecutionResult>;
+//# sourceMappingURL=queue.d.ts.map

package/dist/code-execution/server/schemas/queue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue.d.ts","sourceRoot":"","sources":["../../../../src/code-execution/server/schemas/queue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yCAAyC,CAAC;AAC5E,OAAO,KAAK,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAEpF,MAAM,MAAM,kBAAkB,GAAG,YAAY,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC"}

package/dist/code-execution/server/schemas/queue.js

@@ -0,0 +1,12 @@
+/**
+ * Code execution queue schemas.
+ *
+ * The previous `AdapterKind` / `AdapterInstance` types existed because
+ * the queue module constructed `KafkaRuntimeAdapter` / `MemoryRuntimeAdapter`
+ * directly. Adapter selection now happens inside `WorkersClient.getQueue`
+ * via the runtime, so this module no longer needs to expose adapter
+ * shapes — call sites work against `QueueAdapter<CodeExecutionJob,
+ * CodeExecutionResult>` directly.
+ */
+export {};
+//# sourceMappingURL=queue.js.map

package/dist/code-execution/server/schemas/queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue.js","sourceRoot":"","sources":["../../../../src/code-execution/server/schemas/queue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG"}

package/dist/code-execution/server/security-patterns.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Pre-launch pattern gates for code execution (moved from the deleted VM
+ * sandbox and the Python process runtime). They refuse obvious host-reaching
+ * constructs before a child is launched. They are policy, not isolation: the
+ * boundary is the child process (`child-runner.ts`), and neither is a
+ * hostile-code sandbox.
+ */
+import type { SecurityValidation } from '../schemas/types.ts';
+/** JavaScript/TypeScript gate. */
+export declare function validateScriptSecurity(code: string): SecurityValidation;
+/** Python gate. */
+export declare function validatePythonSecurity(code: string): SecurityValidation;
+//# sourceMappingURL=security-patterns.d.ts.map

package/dist/code-execution/server/security-patterns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-patterns.d.ts","sourceRoot":"","sources":["../../../src/code-execution/server/security-patterns.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAY9D,kCAAkC;AAClC,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,CAwBvE;AAED,mBAAmB;AACnB,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,CA0BvE"}

package/dist/code-execution/server/security-patterns.js

@@ -0,0 +1,73 @@
+/**
+ * Pre-launch pattern gates for code execution (moved from the deleted VM
+ * sandbox and the Python process runtime). They refuse obvious host-reaching
+ * constructs before a child is launched. They are policy, not isolation: the
+ * boundary is the child process (`child-runner.ts`), and neither is a
+ * hostile-code sandbox.
+ */
+function complexity(code, dangerous) {
+    const lines = code.split('\n').length;
+    const hasLoops = /\b(for|while|do)\s*\(/.test(code);
+    const hasRecursion = /function\s+\w+\s*\([^)]*\).*\{[\s\S]*\b\w+\s*\([^)]*\)/.test(code);
+    const hasAsync = /\b(async|await|Promise|setTimeout|setInterval)\b/.test(code);
+    if (lines > 100 || (hasLoops && hasRecursion) || dangerous > 5)
+        return 'high';
+    if (lines > 30 || hasLoops || hasRecursion || hasAsync || dangerous > 2)
+        return 'medium';
+    return 'low';
+}
+/** JavaScript/TypeScript gate. */
+export function validateScriptSecurity(code) {
+    const patterns = [
+        { pattern: /process\.exit\s*\(/, name: 'process.exit' },
+        { pattern: /eval\s*\(/, name: 'eval()' },
+        { pattern: /new\s+Function\s*\(/, name: 'Function constructor' },
+        { pattern: /import\s*\(\s*['"`]/, name: 'dynamic import()' },
+        { pattern: /require\s*\(\s*['"`]/, name: 'require()' },
+        { pattern: /child_process/, name: 'child_process module' },
+        { pattern: /fs\s*\.\s*(writeFile|writeFileSync|appendFile|appendFileSync|unlink|unlinkSync|rmdir|mkdir)/, name: 'fs write/delete operations' },
+        { pattern: /net\s*\.\s*(createServer|connect)/, name: 'net module' },
+        { pattern: /http\s*\.\s*(createServer|request)/, name: 'http module' },
+        { pattern: /https\s*\.\s*(request|get)/, name: 'https module' },
+        { pattern: /dns\s*\.\s*(lookup|resolve)/, name: 'dns module' },
+        { pattern: /globalThis\[['"`]/, name: 'globalThis property access' },
+        { pattern: /this\[['"`]/, name: 'bracket property access' },
+        { pattern: /__proto__|constructor\s*\[|prototype\s*\./, name: 'prototype pollution' }
+    ];
+    const dangerousPatterns = patterns.filter(({ pattern }) => pattern.test(code)).map(({ name }) => name);
+    return {
+        containsDangerousPatterns: dangerousPatterns.length > 0,
+        dangerousPatterns,
+        estimatedComplexity: complexity(code, dangerousPatterns.length),
+        recommendedIsolationLevel: 'process'
+    };
+}
+/** Python gate. */
+export function validatePythonSecurity(code) {
+    const patterns = [
+        { pattern: /\b__import__\s*\(/, name: '__import__()' },
+        { pattern: /\beval\s*\(/, name: 'eval()' },
+        { pattern: /\bexec\s*\(/, name: 'exec()' },
+        { pattern: /\bcompile\s*\(/, name: 'compile()' },
+        { pattern: /\bopen\s*\([^)]*['"][wa+x]/, name: 'open() write modes' },
+        { pattern: /\bos\s*\.\s*(system|popen|exec|spawn|remove|unlink|rmdir)/, name: 'os process/fs mutation' },
+        { pattern: /\bsubprocess\b/, name: 'subprocess module' },
+        { pattern: /\bsocket\b/, name: 'socket module' },
+        { pattern: /\bhttp\.(client|server)\b/, name: 'http client/server' },
+        { pattern: /\burllib\b/, name: 'urllib' },
+        { pattern: /\brequests\b/, name: 'requests' },
+        { pattern: /\bctypes\b/, name: 'ctypes' },
+        { pattern: /\bmultiprocessing\b/, name: 'multiprocessing' },
+        { pattern: /\bpty\b/, name: 'pty' },
+        { pattern: /\bshutil\s*\.\s*(rmtree|move)/, name: 'shutil destructive' }
+    ];
+    const dangerousPatterns = patterns.filter(({ pattern }) => pattern.test(code)).map(({ name }) => name);
+    const lines = code.split('\n').length;
+    return {
+        containsDangerousPatterns: dangerousPatterns.length > 0,
+        dangerousPatterns,
+        estimatedComplexity: lines > 100 ? 'high' : lines > 30 ? 'medium' : 'low',
+        recommendedIsolationLevel: 'process'
+    };
+}
+//# sourceMappingURL=security-patterns.js.map

package/dist/code-execution/server/security-patterns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-patterns.js","sourceRoot":"","sources":["../../../src/code-execution/server/security-patterns.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,SAAS,UAAU,CAAC,IAAY,EAAE,SAAiB;IAClD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IACtC,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,MAAM,YAAY,GAAG,wDAAwD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzF,MAAM,QAAQ,GAAG,kDAAkD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/E,IAAI,KAAK,GAAG,GAAG,IAAI,CAAC,QAAQ,IAAI,YAAY,CAAC,IAAI,SAAS,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IAC9E,IAAI,KAAK,GAAG,EAAE,IAAI,QAAQ,IAAI,YAAY,IAAI,QAAQ,IAAI,SAAS,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IACzF,OAAO,KAAK,CAAC;AACd,CAAC;AAED,kCAAkC;AAClC,MAAM,UAAU,sBAAsB,CAAC,IAAY;IAClD,MAAM,QAAQ,GAA6C;QAC1D,EAAE,OAAO,EAAE,oBAAoB,EAAE,IAAI,EAAE,cAAc,EAAE;QACvD,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE;QACxC,EAAE,OAAO,EAAE,qBAAqB,EAAE,IAAI,EAAE,sBAAsB,EAAE;QAChE,EAAE,OAAO,EAAE,qBAAqB,EAAE,IAAI,EAAE,kBAAkB,EAAE;QAC5D,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,WAAW,EAAE;QACtD,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,sBAAsB,EAAE;QAC1D,EAAE,OAAO,EAAE,6FAA6F,EAAE,IAAI,EAAE,4BAA4B,EAAE;QAC9I,EAAE,OAAO,EAAE,mCAAmC,EAAE,IAAI,EAAE,YAAY,EAAE;QACpE,EAAE,OAAO,EAAE,oCAAoC,EAAE,IAAI,EAAE,aAAa,EAAE;QACtE,EAAE,OAAO,EAAE,4BAA4B,EAAE,IAAI,EAAE,cAAc,EAAE;QAC/D,EAAE,OAAO,EAAE,6BAA6B,EAAE,IAAI,EAAE,YAAY,EAAE;QAC9D,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,4BAA4B,EAAE;QACpE,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,yBAAyB,EAAE;QAC3D,EAAE,OAAO,EAAE,2CAA2C,EAAE,IAAI,EAAE,qBAAqB,EAAE;KACrF,CAAC;IACF,MAAM,iBAAiB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IACvG,OAAO;QACN,yBAAyB,EAAE,iBAAiB,CAAC,MAAM,GAAG,CAAC;QACvD,iBAAiB;QACjB,mBAAmB,EAAE,UAAU,CAAC,IAAI,EAAE,iBAAiB,CAAC,MAAM,CAAC;QAC/D,yBAAyB,EAAE,SAAS;KACpC,CAAC;AACH,CAAC;AAED,mBAAmB;AACnB,MAAM,UAAU,sBAAsB,CAAC,IAAY;IAClD,MAAM,QAAQ,GAA6C;QAC1D,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,cAAc,EAAE;QACtD,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC1C,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC1C,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,WAAW,EAAE;QAChD,EAAE,OAAO,EAAE,4BAA4B,EAAE,IAAI,EAAE,oBAAoB,EAAE;QACrE,EAAE,OAAO,EAAE,2DAA2D,EAAE,IAAI,EAAE,wBAAwB,EAAE;QACxG,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,mBAAmB,EAAE;QACxD,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE;QAChD,EAAE,OAAO,EAAE,2BAA2B,EAAE,IAAI,EAAE,oBAAoB,EAAE;QACpE,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzC,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,UAAU,EAAE;QAC7C,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzC,EAAE,OAAO,EAAE,qBAAqB,EAAE,IAAI,EAAE,iBAAiB,EAAE;QAC3D,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE;QACnC,EAAE,OAAO,EAAE,+BAA+B,EAAE,IAAI,EAAE,oBAAoB,EAAE;KACxE,CAAC;IACF,MAAM,iBAAiB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IACvG,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IACtC,OAAO;QACN,yBAAyB,EAAE,iBAAiB,CAAC,MAAM,GAAG,CAAC;QACvD,iBAAiB;QACjB,mBAAmB,EAAE,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK;QACzE,yBAAyB,EAAE,SAAS;KACpC,CAAC;AACH,CAAC"}

package/dist/code-execution/tools/code-execution-submit/code-execution-submit.descriptor.d.ts

@@ -0,0 +1,102 @@
+/**
+ * code-execution-submit Tool Descriptor
+ *
+ * Submits sandboxed code execution jobs to the worker queue.
+ * Safe to import anywhere.
+ */
+import * as z from 'zod/v4';
+/**
+ * Input schema for code execution submission
+ */
+export declare const CodeExecutionSubmitInputSchema: z.ZodObject<{
+    code: z.ZodString;
+    language: z.ZodDefault<z.ZodEnum<{
+        typescript: "typescript";
+        javascript: "javascript";
+        python: "python";
+    }>>;
+    testData: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    inputs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    context: z.ZodOptional<z.ZodObject<{
+        benchmarkId: z.ZodOptional<z.ZodString>;
+        toolId: z.ZodOptional<z.ZodString>;
+        workflowId: z.ZodOptional<z.ZodString>;
+        promptTestId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    config: z.ZodOptional<z.ZodObject<{
+        timeout: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
+        memoryLimit: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
+        isolationLevel: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+            process: "process";
+            vm: "vm";
+        }>>>;
+        allowedGlobals: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
+        streamOutput: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+    }, z.core.$strip>>;
+    userId: z.ZodString;
+}, z.core.$strip>;
+export type CodeExecutionSubmitInput = z.infer<typeof CodeExecutionSubmitInputSchema>;
+/**
+ * Output schema for code execution submission
+ * Returns only identifiers - transport URLs composed by consuming app
+ */
+/** Wire-envelope: no top-level success; failures throw. */
+export declare const CodeExecutionSubmitOutputSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    jobId: z.ZodString;
+}, z.core.$strip>;
+export type CodeExecutionSubmitOutput = z.infer<typeof CodeExecutionSubmitOutputSchema>;
+/**
+ * Tool descriptor for submitting code execution jobs
+ */
+declare const _default: {
+    readonly kind: "tools/tool";
+    readonly id: "code-execution-submit";
+    readonly name: "Submit Code Execution";
+    readonly description: "Submit sandboxed code for execution via worker queue";
+    readonly mcpDescription: "Submit code to run in sandbox. Returns jobId for tracking.";
+    readonly hardware: ["consumer", "cloud"];
+    readonly purpose: ["direct", "worker"];
+    readonly category: "execution";
+    readonly tags: ["code", "execution", "sandbox", "job"];
+    readonly safety: {
+        readonly category: "execute";
+        readonly destructive: true;
+    };
+    readonly requiresApproval: true;
+    readonly schemas: {
+        readonly input: z.ZodObject<{
+            code: z.ZodString;
+            language: z.ZodDefault<z.ZodEnum<{
+                typescript: "typescript";
+                javascript: "javascript";
+                python: "python";
+            }>>;
+            testData: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+            inputs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+            context: z.ZodOptional<z.ZodObject<{
+                benchmarkId: z.ZodOptional<z.ZodString>;
+                toolId: z.ZodOptional<z.ZodString>;
+                workflowId: z.ZodOptional<z.ZodString>;
+                promptTestId: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            config: z.ZodOptional<z.ZodObject<{
+                timeout: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
+                memoryLimit: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
+                isolationLevel: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+                    process: "process";
+                    vm: "vm";
+                }>>>;
+                allowedGlobals: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
+                streamOutput: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+            }, z.core.$strip>>;
+            userId: z.ZodString;
+        }, z.core.$strip>;
+        readonly output: z.ZodObject<{
+            sessionId: z.ZodString;
+            jobId: z.ZodString;
+        }, z.core.$strip>;
+    };
+};
+export default _default;
+//# sourceMappingURL=code-execution-submit.descriptor.d.ts.map

package/dist/code-execution/tools/code-execution-submit/code-execution-submit.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-execution-submit.descriptor.d.ts","sourceRoot":"","sources":["../../../../src/code-execution/tools/code-execution-submit/code-execution-submit.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAO5B;;GAEG;AACH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;iBAGzC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF;;;GAGG;AACH,2DAA2D;AAC3D,eAAO,MAAM,+BAA+B;;;iBAG1C,CAAC;AAEH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACH,wBAiBG"}

package/dist/code-execution/tools/code-execution-submit/code-execution-submit.descriptor.js

@@ -0,0 +1,47 @@
+/**
+ * code-execution-submit Tool Descriptor
+ *
+ * Submits sandboxed code execution jobs to the worker queue.
+ * Safe to import anywhere.
+ */
+import * as z from 'zod/v4';
+import { createRuntimeAsset } from '@vibesdotdev/kernel/factory';
+import { codeExecutionRequestSchema, executionConfigSchema } from "../../schemas/index.js";
+/**
+ * Input schema for code execution submission
+ */
+export const CodeExecutionSubmitInputSchema = codeExecutionRequestSchema.extend({
+    config: executionConfigSchema.partial().optional(),
+    userId: z.string().min(1)
+});
+/**
+ * Output schema for code execution submission
+ * Returns only identifiers - transport URLs composed by consuming app
+ */
+/** Wire-envelope: no top-level success; failures throw. */
+export const CodeExecutionSubmitOutputSchema = z.object({
+    sessionId: z.string(),
+    jobId: z.string()
+});
+/**
+ * Tool descriptor for submitting code execution jobs
+ */
+export default createRuntimeAsset({
+    kind: 'tools/tool',
+    id: 'code-execution-submit',
+    name: 'Submit Code Execution',
+    description: 'Submit sandboxed code for execution via worker queue',
+    mcpDescription: 'Submit code to run in sandbox. Returns jobId for tracking.',
+    hardware: ['consumer', 'cloud'],
+    purpose: ['direct', 'worker'],
+    category: 'execution',
+    tags: ['code', 'execution', 'sandbox', 'job'],
+    // Runs code or commands, or calls tools that may: MCP clients must see it as destructive.
+    safety: { category: 'execute', destructive: true },
+    requiresApproval: true,
+    schemas: {
+        input: CodeExecutionSubmitInputSchema,
+        output: CodeExecutionSubmitOutputSchema
+    }
+});
+//# sourceMappingURL=code-execution-submit.descriptor.js.map

package/dist/code-execution/tools/code-execution-submit/code-execution-submit.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-execution-submit.descriptor.js","sourceRoot":"","sources":["../../../../src/code-execution/tools/code-execution-submit/code-execution-submit.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EACN,0BAA0B,EAC1B,qBAAqB,EACrB,MAAM,wBAAwB,CAAC;AAEhC;;GAEG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,0BAA0B,CAAC,MAAM,CAAC;IAC/E,MAAM,EAAE,qBAAqB,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACzB,CAAC,CAAC;AAIH;;;GAGG;AACH,2DAA2D;AAC3D,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;CACjB,CAAC,CAAC;AAIH;;GAEG;AACH,eAAe,kBAAkB,CAAC;IACjC,IAAI,EAAE,YAAY;IAClB,EAAE,EAAE,uBAAuB;IAC3B,IAAI,EAAE,uBAAuB;IAC7B,WAAW,EAAE,sDAAsD;IACnE,cAAc,EAAE,4DAA4D;IAC5E,QAAQ,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;IAC/B,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC7B,QAAQ,EAAE,WAAW;IACrB,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC;IAC7C,0FAA0F;IAC1F,MAAM,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE;IAClD,gBAAgB,EAAE,IAAI;IACtB,OAAO,EAAE;QACR,KAAK,EAAE,8BAA8B;QACrC,MAAM,EAAE,+BAA+B;KACvC;CACD,CAAC,CAAC"}

package/dist/code-execution/tools/code-execution-submit/code-execution-submit.impl.cloud.d.ts

@@ -0,0 +1,25 @@
+/**
+ * code-execution-submit Tool Implementation (Cloud)
+ *
+ * Cloud surfaces must hand customer code to the exec-cluster controller. They
+ * must not drain customer code through the consumer VM worker path.
+ */
+import { type ExecBackendRuntime } from '../../config/load.ts';
+import type { CodeExecutionActor } from '../../schemas/operations.ts';
+import type submitDescriptor from './code-execution-submit.descriptor.ts';
+import type { ToolCallContext } from '@vibesdotdev/kernel/schemas/tool-call';
+import { type CodeExecutionSubmitInput, type CodeExecutionSubmitOutput } from './code-execution-submit.descriptor.ts';
+export declare class CodeExecutionSubmitCloudTool {
+    private readonly runtime;
+    constructor(_descriptor: typeof submitDescriptor, context: {
+        runtime: ExecBackendRuntime;
+    });
+    execute(input: CodeExecutionSubmitInput, _runtime?: ExecBackendRuntime, context?: ToolCallContext): Promise<CodeExecutionSubmitOutput>;
+    cancel(params: {
+        jobId?: string;
+        sessionId?: string;
+    }, actor: CodeExecutionActor): Promise<boolean>;
+}
+declare const _default: import("@vibesdotdev/kernel").RuntimeImplementationWrapper<typeof CodeExecutionSubmitCloudTool>;
+export default _default;
+//# sourceMappingURL=code-execution-submit.impl.cloud.d.ts.map

package/dist/code-execution/tools/code-execution-submit/code-execution-submit.impl.cloud.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-execution-submit.impl.cloud.d.ts","sourceRoot":"","sources":["../../../../src/code-execution/tools/code-execution-submit/code-execution-submit.impl.cloud.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAyB,KAAK,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAGtF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,KAAK,gBAAgB,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EAEN,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,MAAM,uCAAuC,CAAC;AAkB/C,qBAAa,4BAA4B;IACxC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;gBAEjC,WAAW,EAAE,OAAO,gBAAgB,EAAE,OAAO,EAAE;QAAE,OAAO,EAAE,kBAAkB,CAAA;KAAE;IAIpF,OAAO,CAAC,KAAK,EAAE,wBAAwB,EAAE,QAAQ,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAoBtI,MAAM,CAAC,MAAM,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC;CAGzG;;AAED,wBAKG"}

package/dist/code-execution/tools/code-execution-submit/code-execution-submit.impl.cloud.js

@@ -0,0 +1,58 @@
+/**
+ * code-execution-submit Tool Implementation (Cloud)
+ *
+ * Cloud surfaces must hand customer code to the exec-cluster controller. They
+ * must not drain customer code through the consumer VM worker path.
+ */
+import { createRuntimeImplementation } from '@vibesdotdev/kernel/factory';
+import { getLogger } from '@vibesdotdev/logging';
+import { getExecBackendBaseUrl } from "../../config/load.js";
+import { readExecBackendJsonResponse, fetchExecBackend } from "../../server/exec-backend.js";
+import { cancelCodeExecution } from "../../server/queue.js";
+import { CodeExecutionSubmitOutputSchema } from "./code-execution-submit.descriptor.js";
+/**
+ * Resolve the exec-cluster controller base URL through the feature's single
+ * runtime client ({@link getExecBackendBaseUrl}, on the handed runtime), failing
+ * closed when it is unconfigured: cloud surfaces must never drain customer code
+ * through the consumer VM worker path.
+ */
+async function requireBackendBaseUrl(runtime) {
+    const baseUrl = await getExecBackendBaseUrl(runtime);
+    if (!baseUrl) {
+        throw new Error('Cloud code execution is not configured. Set VIBES_CODE_EXECUTION_BACKEND_URL to the exec-cluster controller; refusing to run customer code on the cloud VM worker.');
+    }
+    return baseUrl;
+}
+export class CodeExecutionSubmitCloudTool {
+    runtime;
+    constructor(_descriptor, context) {
+        this.runtime = context.runtime;
+    }
+    async execute(input, _runtime, context) {
+        const url = `${await requireBackendBaseUrl(this.runtime)}/v1/code-executions`;
+        const response = await fetchExecBackend(this.runtime, url, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify(input), signal: context?.signal
+        });
+        const output = await readExecBackendJsonResponse(this.runtime, response, CodeExecutionSubmitOutputSchema, { signal: context?.signal });
+        getLogger('code-execution-submit-cloud', this.runtime).info('Cloud code execution submitted to exec backend', {
+            jobId: output.jobId,
+            sessionId: output.sessionId,
+            userId: input.userId,
+            language: input.language,
+            codeLength: input.code.length
+        });
+        return output;
+    }
+    async cancel(params, actor) {
+        return cancelCodeExecution(this.runtime, params, actor);
+    }
+}
+export default createRuntimeImplementation({
+    kind: 'tools/tool',
+    id: 'code-execution-submit',
+    constraint: { hardware: ['cloud'] },
+    implementation: CodeExecutionSubmitCloudTool
+});
+//# sourceMappingURL=code-execution-submit.impl.cloud.js.map

package/dist/code-execution/tools/code-execution-submit/code-execution-submit.impl.cloud.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-execution-submit.impl.cloud.js","sourceRoot":"","sources":["../../../../src/code-execution/tools/code-execution-submit/code-execution-submit.impl.cloud.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAA2B,MAAM,sBAAsB,CAAC;AACtF,OAAO,EAAE,2BAA2B,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAC7F,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAI5D,OAAO,EACN,+BAA+B,EAG/B,MAAM,uCAAuC,CAAC;AAE/C;;;;;GAKG;AACH,KAAK,UAAU,qBAAqB,CAAC,OAA2B;IAC/D,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACd,oKAAoK,CACpK,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,MAAM,OAAO,4BAA4B;IACvB,OAAO,CAAqB;IAE7C,YAAY,WAAoC,EAAE,OAAwC;QACzF,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAA+B,EAAE,QAA6B,EAAE,OAAyB;QACtG,MAAM,GAAG,GAAG,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC;QAC9E,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YAC1D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;SACpD,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,+BAA+B,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QAEvI,SAAS,CAAC,6BAA6B,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,gDAAgD,EAAE;YAC7G,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM;SAC7B,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IACf,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAA8C,EAAE,KAAyB;QACrF,OAAO,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACzD,CAAC;CACD;AAED,eAAe,2BAA2B,CAAC;IAC1C,IAAI,EAAE,YAAY;IAClB,EAAE,EAAE,uBAAuB;IAC3B,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE;IACnC,cAAc,EAAE,4BAA4B;CAC5C,CAAC,CAAC"}

package/dist/code-execution/tools/code-execution-submit/code-execution-submit.impl.consumer.d.ts

@@ -0,0 +1,36 @@
+/**
+ * code-execution-submit Tool Implementation (Consumer)
+ *
+ * Consumer-scoped implementation that submits code execution jobs
+ * to the worker queue with proper config defaults.
+ */
+import type { VibesRuntime } from '@vibesdotdev/kernel';
+import type { CodeExecutionSubmitInput, CodeExecutionSubmitOutput } from './code-execution-submit.descriptor.ts';
+import type { CodeExecutionActor } from '../../schemas/operations.ts';
+import type submitDescriptor from './code-execution-submit.descriptor.ts';
+import type { ToolCallContext } from '@vibesdotdev/kernel/schemas/tool-call';
+/**
+ * Code execution submission tool
+ */
+declare class CodeExecutionSubmitTool {
+    private queueModule;
+    private readonly runtime;
+    constructor(_descriptor: typeof submitDescriptor, context: {
+        runtime: VibesRuntime;
+    });
+    private loadQueue;
+    execute(input: CodeExecutionSubmitInput, _runtime?: VibesRuntime, context?: ToolCallContext): Promise<CodeExecutionSubmitOutput>;
+    /**
+     * Cancel a running code execution job
+     */
+    cancel(params: {
+        jobId?: string;
+        sessionId?: string;
+    }, actor: CodeExecutionActor): Promise<boolean>;
+}
+/**
+ * Runtime implementation for code execution submission
+ */
+declare const _default: import("@vibesdotdev/kernel").RuntimeImplementationWrapper<typeof CodeExecutionSubmitTool>;
+export default _default;
+//# sourceMappingURL=code-execution-submit.impl.consumer.d.ts.map

package/dist/code-execution/tools/code-execution-submit/code-execution-submit.impl.consumer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-execution-submit.impl.consumer.d.ts","sourceRoot":"","sources":["../../../../src/code-execution/tools/code-execution-submit/code-execution-submit.impl.consumer.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAOxD,OAAO,KAAK,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,uCAAuC,CAAC;AACjH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,KAAK,gBAAgB,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAY7E;;GAEG;AACH,cAAM,uBAAuB;IAC5B,OAAO,CAAC,WAAW,CAAuD;IAC1E,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAe;gBAE3B,WAAW,EAAE,OAAO,gBAAgB,EAAE,OAAO,EAAE;QAAE,OAAO,EAAE,YAAY,CAAA;KAAE;YAItE,SAAS;IAOjB,OAAO,CAAC,KAAK,EAAE,wBAAwB,EAAE,QAAQ,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAkCtI;;OAEG;IACG,MAAM,CAAC,MAAM,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC;CAIzG;AAED;;GAEG;;AACH,wBAQG"}

package/dist/code-execution/tools/code-execution-submit/code-execution-submit.impl.consumer.js

@@ -0,0 +1,81 @@
+/**
+ * code-execution-submit Tool Implementation (Consumer)
+ *
+ * Consumer-scoped implementation that submits code execution jobs
+ * to the worker queue with proper config defaults.
+ */
+import { createRuntimeImplementation } from '@vibesdotdev/kernel/factory';
+import { getLogger } from '@vibesdotdev/logging';
+import { executionConfigSchema } from "../../schemas/index.js";
+import { isolationForLanguage } from "../../schemas/languages.js";
+/**
+ * Build execution config. Isolation is language-driven (schema-first registry).
+ */
+function buildExecutionConfig(partial, language) {
+    return executionConfigSchema.parse({ ...partial, isolationLevel: isolationForLanguage(language) });
+}
+/**
+ * Code execution submission tool
+ */
+class CodeExecutionSubmitTool {
+    queueModule = null;
+    runtime;
+    constructor(_descriptor, context) {
+        this.runtime = context.runtime;
+    }
+    async loadQueue() {
+        if (!this.queueModule) {
+            this.queueModule = await import("../../server/queue.js");
+        }
+        return this.queueModule;
+    }
+    async execute(input, _runtime, context) {
+        const sessionId = globalThis.crypto.randomUUID();
+        const language = input.language;
+        const config = buildExecutionConfig(input.config, language);
+        const jobData = {
+            sessionId,
+            userId: input.userId,
+            code: input.code,
+            language,
+            testData: input.testData,
+            inputs: input.inputs,
+            context: input.context,
+            config
+        };
+        const { submitCodeExecutionJob } = await this.loadQueue();
+        context?.signal?.throwIfAborted();
+        const jobId = await submitCodeExecutionJob(this.runtime, jobData);
+        getLogger('code-execution-submit', this.runtime).info('Code execution job submitted', {
+            jobId,
+            sessionId,
+            userId: input.userId,
+            language: input.language,
+            codeLength: input.code.length
+        });
+        return {
+            sessionId,
+            jobId
+        };
+    }
+    /**
+     * Cancel a running code execution job
+     */
+    async cancel(params, actor) {
+        const { cancelCodeExecution } = await this.loadQueue();
+        return cancelCodeExecution(this.runtime, params, actor);
+    }
+}
+/**
+ * Runtime implementation for code execution submission
+ */
+export default createRuntimeImplementation({
+    kind: 'tools/tool',
+    id: 'code-execution-submit',
+    // The plugin's `consumer` loader is the gate; the local VM/process sandbox is
+    // what consumer hardware provides. `sandbox` is no declared qualifier, so no
+    // host could ever have satisfied it.
+    constraint: { hardware: ['consumer'] },
+    implementation: CodeExecutionSubmitTool
+});
+//# sourceMappingURL=code-execution-submit.impl.consumer.js.map