@zelari/core 1.29.0 → 1.30.1

package/dist/kraken/runtime/runner.js

@@ -0,0 +1,253 @@
+/**
+ * Kraken script runtime — runner.
+ *
+ * The `ScriptRunner` is the host-side orchestrator that owns the script's
+ * lifecycle: it builds the `PlanCapabilities` object exposed as
+ * `__zelari_sdk__` in the sandbox, enforces the tentacle and merge budgets,
+ * tracks every tentacle for snapshotting, and converts the host's
+ * `TentacleResult` into the script's `TentacleRef`.
+ *
+ * It does NOT itself compile the bundle (that's the CLI side; see
+ * `src/cli/kraken/runtime/compile.ts`) and does NOT itself run the
+ * sandbox (that's `sandbox.ts`). It only wires the two together.
+ *
+ * @since Kraken v1.30.x — workflow script runtime (F1.1)
+ */
+import { MAX_FINDINGS_CHARS } from '../verdict.js';
+import { isReviewerKind, defaultPersonaParse } from '../personas/index.js';
+import { PlanError, } from './types.js';
+/** Default cap on `tentacle()` calls per plan. Configurable via env. */
+export const DEFAULT_MAX_TENTACLES = 200;
+export function resolveMaxTentacles(env = process.env) {
+    const raw = env.ZELARI_KRAKEN_MAX_TENTACLES;
+    if (raw === undefined || raw === '')
+        return DEFAULT_MAX_TENTACLES;
+    const n = Number.parseInt(raw, 10);
+    return Number.isFinite(n) && n > 0 ? n : DEFAULT_MAX_TENTACLES;
+}
+/** Default wall-clock cap (ms) for the whole plan. */
+export const DEFAULT_PLAN_TIMEOUT_MS = 30 * 60_000;
+export function resolvePlanTimeoutMs(env = process.env) {
+    const raw = env.ZELARI_KRAKEN_PLAN_TIMEOUT_MS;
+    if (raw === undefined || raw === '')
+        return DEFAULT_PLAN_TIMEOUT_MS;
+    const n = Number.parseInt(raw, 10);
+    return Number.isFinite(n) && n >= 0 ? n : DEFAULT_PLAN_TIMEOUT_MS;
+}
+/** Truncate text safely. Mirrors the verdict helper so we don't ship two
+ *  implementations. */
+function cap(text, max) {
+    if (text.length <= max)
+        return text;
+    return `${text.slice(0, max)}\n… [truncated]`;
+}
+/** Build a TentacleRef from a host result + the options that produced it. */
+function buildRef(id, opts, result) {
+    const findings = cap(result.ok ? (result.result ?? '').trim() : (result.error ?? 'unknown error'), MAX_FINDINGS_CHARS);
+    const ref = {
+        id,
+        kind: opts.kind,
+        label: opts.label,
+        status: result.ok ? 'done' : 'error',
+        findings,
+        scope: opts.scope,
+        ...(result.durationMs !== undefined ? { durationMs: result.durationMs } : {}),
+        ...(result.worktree !== undefined ? { worktree: result.worktree } : {}),
+    };
+    // Parse a verdict trailer for any reviewer kind. The persona system
+    // (Pillar 2) handles `verify`, `spec`, `conformance`; the default
+    // parser extracts both the trailer and the per-requirement table.
+    if (isReviewerKind(opts.kind)) {
+        ref.verdict = defaultPersonaParse(findings).verdict;
+    }
+    return ref;
+}
+/**
+ * A `ScriptRunner` is constructed once per script plan, then drives the
+ * script by exposing its `sdk` to the sandbox and bookkeeping the tentacles.
+ */
+export class ScriptRunner {
+    host;
+    goal;
+    graphId;
+    parentCwd;
+    sessionId;
+    maxTentacles;
+    planTimeoutMs;
+    startTime;
+    tentaclesById = new Map();
+    tentacleCount = 0;
+    mergeCount = 0;
+    cancelled = false;
+    constructor(opts) {
+        this.host = opts.host;
+        this.goal = opts.goal;
+        this.graphId = opts.graphId;
+        this.parentCwd = opts.parentCwd;
+        this.sessionId = opts.sessionId;
+        this.maxTentacles = opts.maxTentacles ?? resolveMaxTentacles();
+        this.planTimeoutMs = opts.planTimeoutMs ?? resolvePlanTimeoutMs();
+        this.startTime = Date.now();
+    }
+    /** Build the `PlanCapabilities` object the sandbox will see. */
+    buildSdk() {
+        return {
+            tentacle: (opts) => this.callTentacle(opts),
+            barrier: (refs) => this.callBarrier(refs),
+            race: (refs) => this.callRace(refs),
+            while_: (cond, body, maxIter) => this.callWhile(cond, body, maxIter),
+            until: (cond, body, maxIter) => this.callUntil(cond, body, maxIter),
+            merge: (refs, opts) => this.callMerge(refs, opts),
+            checkpoint: (label) => this.callCheckpoint(label),
+            log: (msg, data) => this.callLog(msg, data),
+            emit: (payload) => this.callEmit(payload),
+            getContext: () => this.callGetContext(),
+            sendTo: (peerId, payload) => this.callSendTo(peerId, payload),
+        };
+    }
+    /** One tentacle = one `runTentacle` call. The host returns a raw result;
+     *  we turn it into a `TentacleRef` and stash it. */
+    async callTentacle(opts) {
+        if (this.cancelled)
+            throw new PlanError('cancelled', 'runner is cancelled');
+        if (this.tentacleCount >= this.maxTentacles) {
+            throw new PlanError('budget_exceeded', `tentacle cap (${this.maxTentacles}) reached; raise ZELARI_KRAKEN_MAX_TENTACLES`);
+        }
+        if (this.tentacleCount > 0 && Date.now() - this.startTime > this.planTimeoutMs) {
+            throw new PlanError('budget_exceeded', `plan wall-clock budget (${this.planTimeoutMs}ms) exceeded`);
+        }
+        this.tentacleCount += 1;
+        // Build a stable id. We deliberately do NOT let the script pick ids
+        // (collision risk); we synthesize one from a monotonic counter.
+        const id = `t${String(this.tentacleCount).padStart(4, '0')}`;
+        const res = await this.host.runTentacle({
+            node: opts,
+            parentCwd: this.parentCwd,
+            sessionId: this.sessionId,
+        });
+        const ref = buildRef(id, opts, res);
+        this.tentaclesById.set(id, ref);
+        return ref;
+    }
+    async callBarrier(refs) {
+        // All refs are already resolved (tentacle() awaits). The barrier is a
+        // *type* helper that lets the script treat parallel `tentacle()` calls
+        // as a single awaitable tuple. It still costs one cap entry per ref —
+        // the script MUST have called `tentacle()` for each.
+        if (refs.some((r) => !this.tentaclesById.has(r.id))) {
+            throw new PlanError('runtime_error', 'barrier() received a ref not in this runner');
+        }
+        return refs;
+    }
+    async callRace(refs) {
+        if (refs.length === 0) {
+            throw new PlanError('runtime_error', 'race() requires at least one ref');
+        }
+        // Tentacles are already resolved at the moment race() is called, so
+        // "first to complete" is moot — we return the ref whose `durationMs`
+        // is smallest (ties broken by id order for determinism). The script
+        // can re-spawn losers if it needs actual racing in real time.
+        let winner = refs[0];
+        for (const r of refs) {
+            const a = winner.durationMs ?? Number.POSITIVE_INFINITY;
+            const b = r.durationMs ?? Number.POSITIVE_INFINITY;
+            if (b < a || (b === a && r.id < winner.id))
+                winner = r;
+        }
+        return winner;
+    }
+    async callWhile(cond, body, maxIter) {
+        if (maxIter < 1)
+            throw new PlanError('runtime_error', 'while_() maxIter must be ≥ 1');
+        const out = [];
+        let iter = 0;
+        while (await cond()) {
+            if (iter >= maxIter) {
+                throw new PlanError('budget_exceeded', `while_() exceeded maxIter=${maxIter} without cond turning false`);
+            }
+            out.push(await body());
+            iter += 1;
+        }
+        return out;
+    }
+    async callUntil(cond, body, maxIter) {
+        return this.callWhile(async () => !(await cond()), body, maxIter);
+    }
+    /** One merge per plan. A second call is a structured error. */
+    async callMerge(refs, opts = {}) {
+        if (this.mergeCount > 0) {
+            throw new PlanError('merge_already_done', 'merge() called more than once; a plan can merge at most one batch');
+        }
+        if (refs.length === 0) {
+            throw new PlanError('runtime_error', 'merge() requires at least one ref');
+        }
+        for (const r of refs) {
+            if (!this.tentaclesById.has(r.id)) {
+                throw new PlanError('runtime_error', `merge() received unknown ref "${r.id}"`);
+            }
+        }
+        this.mergeCount += 1;
+        return this.host.mergeWorktrees({
+            refs,
+            parentCwd: this.parentCwd,
+            strategy: opts.strategy ?? 'squash-sequential',
+            ...(opts.message ? { message: opts.message } : {}),
+            ...(opts.cleanup !== undefined ? { cleanup: opts.cleanup } : {}),
+        });
+    }
+    async callCheckpoint(label) {
+        const snapshot = {
+            graphId: this.graphId,
+            goal: this.goal,
+            takenAt: new Date().toISOString(),
+            completed: [...this.tentaclesById.values()].filter((r) => r.status === 'done'),
+            inFlight: [...this.tentaclesById.values()].filter((r) => r.status === 'running'),
+            failed: [...this.tentaclesById.values()].filter((r) => r.status === 'error'),
+            pending: [],
+        };
+        const path = await this.host.saveSnapshot(snapshot, '.zelari/kraken/snapshots');
+        this.host.log(`checkpoint: ${label ?? 'auto'} → ${path}`);
+        return snapshot;
+    }
+    callLog(msg, data) {
+        const line = data ? `${msg} ${JSON.stringify(data)}` : msg;
+        this.host.log(line);
+    }
+    callEmit(payload) {
+        this.host.log(`emit: ${payload.kind}${payload.detail ? ` — ${payload.detail}` : ''}`);
+    }
+    callGetContext() {
+        return {
+            graphId: this.graphId,
+            goal: this.goal,
+            parentCwd: this.parentCwd,
+            sessionId: this.sessionId,
+            tentacles: this.tentaclesById,
+            maxTentacles: this.maxTentacles,
+            planTimeoutMs: this.planTimeoutMs,
+        };
+    }
+    callSendTo(peerId, payload) {
+        this.host.log(`sendTo(${peerId}): ${payload.kind}${payload.detail ? ` — ${payload.detail}` : ''}`);
+    }
+    /** Called by the host after the sandbox returns, to mark the run. */
+    finalize(opts) {
+        if (opts.cancelled)
+            this.cancelled = true;
+        const failed = [...this.tentaclesById.values()].filter((r) => r.status === 'error');
+        return {
+            tentacles: this.tentaclesById,
+            mergeCount: this.mergeCount,
+            converged: opts.converged,
+            cancelled: this.cancelled,
+            durationMs: Date.now() - this.startTime,
+            unresolvedFindings: failed.map((r) => ({
+                nodeId: r.id,
+                label: r.label,
+                reason: r.status === 'error' ? 'fail' : 'unknown',
+                findings: r.findings,
+            })),
+        };
+    }
+}
+//# sourceMappingURL=runner.js.map

package/dist/kraken/runtime/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../../src/kraken/runtime/runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EACL,SAAS,GAQV,MAAM,YAAY,CAAC;AAEpB,wEAAwE;AACxE,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAEzC,MAAM,UAAU,mBAAmB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACtE,MAAM,GAAG,GAAG,GAAG,CAAC,2BAA2B,CAAC;IAC5C,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,qBAAqB,CAAC;IAClE,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC;AACjE,CAAC;AAED,sDAAsD;AACtD,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,MAAM,CAAC;AAEnD,MAAM,UAAU,oBAAoB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACvE,MAAM,GAAG,GAAG,GAAG,CAAC,6BAA6B,CAAC;IAC9C,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,uBAAuB,CAAC;IACpE,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC;AACpE,CAAC;AAED;uBACuB;AACvB,SAAS,GAAG,CAAC,IAAY,EAAE,GAAW;IACpC,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,iBAAiB,CAAC;AAChD,CAAC;AAED,6EAA6E;AAC7E,SAAS,QAAQ,CACf,EAAU,EACV,IAAqB,EACrB,MAAuG;IAEvG,MAAM,QAAQ,GAAG,GAAG,CAClB,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,eAAe,CAAC,EAC5E,kBAAkB,CACnB,CAAC;IACF,MAAM,GAAG,GAAgB;QACvB,EAAE;QACF,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;QACpC,QAAQ;QACR,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxE,CAAC;IACF,oEAAoE;IACpE,kEAAkE;IAClE,kEAAkE;IAClE,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,GAAG,CAAC,OAAO,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;IACtD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAoBD;;;GAGG;AACH,MAAM,OAAO,YAAY;IACN,IAAI,CAAiB;IACrB,IAAI,CAAS;IACb,OAAO,CAAS;IAChB,SAAS,CAAS;IAClB,SAAS,CAAS;IAClB,YAAY,CAAS;IACrB,aAAa,CAAS;IACtB,SAAS,CAAS;IAElB,aAAa,GAAG,IAAI,GAAG,EAAuB,CAAC;IACxD,aAAa,GAAG,CAAC,CAAC;IAClB,UAAU,GAAG,CAAC,CAAC;IACf,SAAS,GAAG,KAAK,CAAC;IAE1B,YAAY,IAAyB;QACnC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,mBAAmB,EAAE,CAAC;QAC/D,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,oBAAoB,EAAE,CAAC;QAClE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC9B,CAAC;IAED,gEAAgE;IAChE,QAAQ;QACN,OAAO;YACL,QAAQ,EAAE,CAAI,IAAwB,EAA2B,EAAE,CACjE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;YACzB,OAAO,EAAE,CAAmC,IAAO,EAAE,EAAE,CACrD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAgD;YACvE,IAAI,EAAE,CAAmC,IAAO,EAAE,EAAE,CAClD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAuB;YAC3C,MAAM,EAAE,CAAI,IAAsC,EAAE,IAAsB,EAAE,OAAe,EAAE,EAAE,CAC7F,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC;YACrC,KAAK,EAAE,CAAI,IAAsC,EAAE,IAAsB,EAAE,OAAe,EAAE,EAAE,CAC5F,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC;YACrC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC;YACjD,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;YACjD,GAAG,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC;YAC3C,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YACzC,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE;YACvC,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC;SAC9D,CAAC;IACJ,CAAC;IAED;wDACoD;IAC5C,KAAK,CAAC,YAAY,CAAI,IAAwB;QACpD,IAAI,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAC;QAC5E,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC5C,MAAM,IAAI,SAAS,CACjB,iBAAiB,EACjB,iBAAiB,IAAI,CAAC,YAAY,8CAA8C,CACjF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YAC/E,MAAM,IAAI,SAAS,CACjB,iBAAiB,EACjB,2BAA2B,IAAI,CAAC,aAAa,cAAc,CAC5D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC;QAExB,oEAAoE;QACpE,gEAAgE;QAChE,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QAE7D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;YACtC,IAAI,EAAE,IAAI;YACV,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAChC,OAAO,GAAqB,CAAC;IAC/B,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,IAAO;QAEP,sEAAsE;QACtE,uEAAuE;QACvE,sEAAsE;QACtE,qDAAqD;QACrD,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,6CAA6C,CAAC,CAAC;QACtF,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAmC,IAAO;QAC9D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,kCAAkC,CAAC,CAAC;QAC3E,CAAC;QACD,oEAAoE;QACpE,qEAAqE;QACrE,oEAAoE;QACpE,8DAA8D;QAC9D,IAAI,MAAM,GAAgB,IAAI,CAAC,CAAC,CAAC,CAAC;QAClC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,iBAAiB,CAAC;YACxD,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,IAAI,MAAM,CAAC,iBAAiB,CAAC;YACnD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;gBAAE,MAAM,GAAG,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,MAAmB,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,SAAS,CACrB,IAAsC,EACtC,IAAsB,EACtB,OAAe;QAEf,IAAI,OAAO,GAAG,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,8BAA8B,CAAC,CAAC;QACtF,MAAM,GAAG,GAAQ,EAAE,CAAC;QACpB,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,OAAO,MAAM,IAAI,EAAE,EAAE,CAAC;YACpB,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,SAAS,CACjB,iBAAiB,EACjB,6BAA6B,OAAO,6BAA6B,CAClE,CAAC;YACJ,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YACvB,IAAI,IAAI,CAAC,CAAC;QACZ,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,KAAK,CAAC,SAAS,CACrB,IAAsC,EACtC,IAAsB,EACtB,OAAe;QAEf,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACpE,CAAC;IAED,+DAA+D;IACvD,KAAK,CAAC,SAAS,CACrB,IAA4B,EAC5B,OAAiH,EAAE;QAEnH,IAAI,IAAI,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,SAAS,CACjB,oBAAoB,EACpB,mEAAmE,CACpE,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,mCAAmC,CAAC,CAAC;QAC5E,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,iCAAiC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;QACD,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC;YAC9B,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,mBAAmB;YAC9C,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,KAAc;QACzC,MAAM,QAAQ,GAAiB;YAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACjC,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC;YAC9E,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC;YAChF,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC;YAC5E,OAAO,EAAE,EAAE;SACZ,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,0BAA0B,CAAC,CAAC;QAChF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,KAAK,IAAI,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QAC1D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,OAAO,CAAC,GAAW,EAAE,IAA8B;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAC3D,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAEO,QAAQ,CAAC,OAA0E;QACzF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACxF,CAAC;IAEO,cAAc;QACpB,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,aAAa;YAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,aAAa,EAAE,IAAI,CAAC,aAAa;SAClC,CAAC;IACJ,CAAC;IAEO,UAAU,CAAC,MAAc,EAAE,OAA0E;QAC3G,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,MAAM,MAAM,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACrG,CAAC;IAED,qEAAqE;IACrE,QAAQ,CAAC,IAAiD;QACxD,IAAI,IAAI,CAAC,SAAS;YAAE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QAC1C,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;QACpF,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,aAAa;YAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS;YACvC,kBAAkB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACrC,MAAM,EAAE,CAAC,CAAC,EAAE;gBACZ,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;gBACjD,QAAQ,EAAE,CAAC,CAAC,QAAQ;aACrB,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;CACF"}

package/dist/kraken/runtime/sandbox.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Kraken script runtime — Node `vm` sandbox.
+ *
+ * Wraps the compiled script bundle in a fresh V8 context with a
+ * capability-based global. The sandbox has NO `process`, `require`,
+ * `Buffer`, `global`, `__dirname`, `__filename`, or any other Node
+ * built-in — only the explicit capabilities the host injects.
+ *
+ * Security model:
+ *   - The bundle is a single async IIFE produced by esbuild. The sandbox
+ *     object exposes ONE global: `__zelari_sdk__` (frozen), holding the
+ *     capability functions. Scripts can only call into the host through
+ *     these functions; they cannot read `process.env` or `fs` because those
+ *     do not exist in the context.
+ *   - Wall-clock bound is enforced by the `vm` timeout. Per-tentacle
+ *     bound is enforced by the host (existing `runTentacle` timeout).
+ *   - A footgun guard scans the script for obviously dangerous tokens
+ *     (e.g. `process`, `require`, `globalThis`) BEFORE running and
+ *     surfaces a structured `PlanError('sandbox_breach')` when found.
+ *     This is best-effort: a sufficiently obfuscated script can sneak
+ *     around the regex, but the absence of these tokens in the sandbox
+ *     means even bypassing the guard leaves nothing to call.
+ *
+ * @since Kraken v1.30.x — workflow script runtime (F1.1)
+ */
+export interface SandboxRunOptions {
+    /** The compiled JS bundle (esbuild IIFE output). */
+    bundleCode: string;
+    /** Capability object to expose as `__zelari_sdk__`. Will be deep-frozen. */
+    sdk: Record<string, unknown>;
+    /** Wall-clock cap (ms) for the whole script. */
+    timeoutMs: number;
+    /** Optional abort signal. */
+    signal?: AbortSignal;
+    /**
+     * Skip the pre-flight token scan. **Test-only**: production LLM plans
+     * benefit from the footgun guard, but the guard rejects test bundles
+     * that intentionally probe the sandbox for forbidden tokens. Always
+     * leave `false` (the default) outside tests.
+     */
+    skipFootgunScan?: boolean;
+}
+/** Result of a sandbox run. The IIFE's resolved value (if any). */
+export interface SandboxRunResult {
+    /** Whatever the bundle's final expression resolved to (usually `undefined`). */
+    value: unknown;
+    /** Wall-clock time the script took (ms). */
+    durationMs: number;
+}
+/**
+ * Token-level scan of the bundle. Cheap and catches the common LLM mistakes
+ * (writing `process.env.X` from muscle memory). Runs BEFORE the bundle
+ * executes; a hit raises `PlanError('sandbox_breach')` and the bundle is
+ * discarded without being run.
+ */
+export declare function scanForFootguns(bundleCode: string): string[];
+/**
+ * Run a compiled bundle in a fresh sandbox with the given capabilities.
+ * The script gets ONE global: `__zelari_sdk__`. Standard JS intrinsics
+ * (Object, Array, Promise, Math, JSON, Date, console) are available because
+ * they are V8 intrinsics — there is no way to exclude them without a
+ * custom V8 build, and they are not security risks on their own.
+ */
+export declare function runInSandbox(opts: SandboxRunOptions): Promise<SandboxRunResult>;
+//# sourceMappingURL=sandbox.d.ts.map

package/dist/kraken/runtime/sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../../src/kraken/runtime/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAyBH,MAAM,WAAW,iBAAiB;IAChC,oDAAoD;IACpD,UAAU,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,6BAA6B;IAC7B,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,mEAAmE;AACnE,MAAM,WAAW,gBAAgB;IAC/B,gFAAgF;IAChF,KAAK,EAAE,OAAO,CAAC;IACf,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,CAa5D;AAWD;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAkErF"}

package/dist/kraken/runtime/sandbox.js

@@ -0,0 +1,158 @@
+/**
+ * Kraken script runtime — Node `vm` sandbox.
+ *
+ * Wraps the compiled script bundle in a fresh V8 context with a
+ * capability-based global. The sandbox has NO `process`, `require`,
+ * `Buffer`, `global`, `__dirname`, `__filename`, or any other Node
+ * built-in — only the explicit capabilities the host injects.
+ *
+ * Security model:
+ *   - The bundle is a single async IIFE produced by esbuild. The sandbox
+ *     object exposes ONE global: `__zelari_sdk__` (frozen), holding the
+ *     capability functions. Scripts can only call into the host through
+ *     these functions; they cannot read `process.env` or `fs` because those
+ *     do not exist in the context.
+ *   - Wall-clock bound is enforced by the `vm` timeout. Per-tentacle
+ *     bound is enforced by the host (existing `runTentacle` timeout).
+ *   - A footgun guard scans the script for obviously dangerous tokens
+ *     (e.g. `process`, `require`, `globalThis`) BEFORE running and
+ *     surfaces a structured `PlanError('sandbox_breach')` when found.
+ *     This is best-effort: a sufficiently obfuscated script can sneak
+ *     around the regex, but the absence of these tokens in the sandbox
+ *     means even bypassing the guard leaves nothing to call.
+ *
+ * @since Kraken v1.30.x — workflow script runtime (F1.1)
+ */
+import vm from 'node:vm';
+import { PlanError } from './types.js';
+/** Maximum size of a bundled script (bytes). Anything bigger is almost
+ *  certainly an LLM loop, not a real plan. */
+const MAX_BUNDLE_BYTES = 256 * 1024;
+/** Footgun guard: token-level regexes applied to the source before running. */
+const FORBIDDEN_TOKENS = [
+    /\bprocess\b/,
+    /\brequire\b/,
+    /\bmodule\b/,
+    /\bexports\b/,
+    /\b__dirname\b/,
+    /\b__filename\b/,
+    /\bglobalThis\b/,
+    /\bglobal\b(?!\s*=)/,
+    /\bBuffer\b/,
+    /\beval\b/,
+    /\bFunction\s*\(/,
+    /\bnew\s+Function\b/,
+];
+/**
+ * Token-level scan of the bundle. Cheap and catches the common LLM mistakes
+ * (writing `process.env.X` from muscle memory). Runs BEFORE the bundle
+ * executes; a hit raises `PlanError('sandbox_breach')` and the bundle is
+ * discarded without being run.
+ */
+export function scanForFootguns(bundleCode) {
+    if (bundleCode.length > MAX_BUNDLE_BYTES) {
+        return [
+            `bundle is ${bundleCode.length} bytes; max is ${MAX_BUNDLE_BYTES} ` +
+                `(LLM is almost certainly looping)`,
+        ];
+    }
+    const hits = [];
+    for (const re of FORBIDDEN_TOKENS) {
+        const m = re.exec(bundleCode);
+        if (m)
+            hits.push(`forbidden token "${m[0]}"`);
+    }
+    return hits;
+}
+/** Deep-freeze an object so scripts cannot mutate capabilities. */
+function deepFreeze(value) {
+    if (value === null || typeof value !== 'object')
+        return value;
+    if (Object.isFrozen(value))
+        return value;
+    const obj = value;
+    for (const k of Object.keys(obj))
+        deepFreeze(obj[k]);
+    return Object.freeze(value);
+}
+/**
+ * Run a compiled bundle in a fresh sandbox with the given capabilities.
+ * The script gets ONE global: `__zelari_sdk__`. Standard JS intrinsics
+ * (Object, Array, Promise, Math, JSON, Date, console) are available because
+ * they are V8 intrinsics — there is no way to exclude them without a
+ * custom V8 build, and they are not security risks on their own.
+ */
+export async function runInSandbox(opts) {
+    const { bundleCode, sdk, timeoutMs } = opts;
+    // 1. Pre-flight: reject obviously-unsafe bundles. Tests opt out via
+    //    `skipFootgunScan: true` so they can probe the sandbox for forbidden
+    //    tokens without tripping the guard.
+    if (!opts.skipFootgunScan) {
+        const footguns = scanForFootguns(bundleCode);
+        if (footguns.length > 0) {
+            throw new PlanError('sandbox_breach', `script bundle failed footgun scan: ${footguns.join('; ')}`);
+        }
+    }
+    // 2. Freeze the capabilities so a script cannot replace them.
+    const frozen = deepFreeze({ ...sdk });
+    // 3. Build a minimal sandbox global. We do NOT add `process`, `require`,
+    //    `Buffer`, `global`, etc. — V8 will not put them in the new context
+    //    by default, and we never add them ourselves.
+    const sandbox = {
+        __zelari_sdk__: frozen,
+        // A console that prefixes lines with the graph id; useful for the
+        // workbench view and harmless to expose (it just logs to stdout).
+        console: makeSandboxConsole(),
+    };
+    const context = vm.createContext(sandbox, {
+        name: 'kraken-script',
+        codeGeneration: { strings: false, wasm: false },
+    });
+    // 4. Run the bundle. `runInContext` accepts a `timeout` option that
+    //    aborts the script after N ms; we cap at the requested budget.
+    //    esbuild's IIFE format with top-level await produces an async
+    //    function, so the result is a Promise.
+    const start = Date.now();
+    const vmOpts = {
+        timeout: Math.max(1, timeoutMs),
+        displayErrors: true,
+        breakOnSigint: true,
+    };
+    try {
+        const value = await vm.runInContext(bundleCode, context, vmOpts);
+        return { value, durationMs: Date.now() - start };
+    }
+    catch (err) {
+        // Distinguish "script was cancelled" from "script threw". The vm
+        // module throws a `Script execution timed out` Error when the timeout
+        // fires; we re-raise as a structured PlanError. Node's vm error has
+        // a `message` field but isn't always a true `Error` instance, so we
+        // match on the message string defensively.
+        const msg = err && typeof err === 'object' && 'message' in err
+            ? String(err.message ?? '')
+            : String(err);
+        if (/timed out/i.test(msg)) {
+            throw new PlanError('budget_exceeded', `script exceeded ${timeoutMs}ms budget`);
+        }
+        if (opts.signal?.aborted) {
+            throw new PlanError('cancelled', 'script aborted by host');
+        }
+        if (err instanceof PlanError)
+            throw err;
+        throw new PlanError('runtime_error', msg, err);
+    }
+}
+/** A console that the script can use without leaking to the real stdout. */
+function makeSandboxConsole() {
+    // We proxy to a captured console; this is for debuggability only and
+    // does not change the script's ability to do its work.
+    const prefix = '[kraken-script]';
+    return {
+        ...console,
+        log: (...args) => console.log(prefix, ...args),
+        info: (...args) => console.info(prefix, ...args),
+        warn: (...args) => console.warn(prefix, ...args),
+        error: (...args) => console.error(prefix, ...args),
+    };
+}
+//# sourceMappingURL=sandbox.js.map

package/dist/kraken/runtime/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../../src/kraken/runtime/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC;8CAC8C;AAC9C,MAAM,gBAAgB,GAAG,GAAG,GAAG,IAAI,CAAC;AAEpC,+EAA+E;AAC/E,MAAM,gBAAgB,GAAsB;IAC1C,aAAa;IACb,aAAa;IACb,YAAY;IACZ,aAAa;IACb,eAAe;IACf,gBAAgB;IAChB,gBAAgB;IAChB,oBAAoB;IACpB,YAAY;IACZ,UAAU;IACV,iBAAiB;IACjB,oBAAoB;CACrB,CAAC;AA4BF;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,UAAkB;IAChD,IAAI,UAAU,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QACzC,OAAO;YACL,aAAa,UAAU,CAAC,MAAM,kBAAkB,gBAAgB,GAAG;gBACjE,mCAAmC;SACtC,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,EAAE,IAAI,gBAAgB,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9B,IAAI,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,mEAAmE;AACnE,SAAS,UAAU,CAAI,KAAQ;IAC7B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAuB;IACxD,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAE5C,oEAAoE;IACpE,yEAAyE;IACzE,wCAAwC;IACxC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;QAC7C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,SAAS,CACjB,gBAAgB,EAChB,sCAAsC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,8DAA8D;IAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;IAEtC,yEAAyE;IACzE,wEAAwE;IACxE,kDAAkD;IAClD,MAAM,OAAO,GAA4B;QACvC,cAAc,EAAE,MAAM;QACtB,kEAAkE;QAClE,kEAAkE;QAClE,OAAO,EAAE,kBAAkB,EAAE;KAC9B,CAAC;IAEF,MAAM,OAAO,GAAG,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE;QACxC,IAAI,EAAE,eAAe;QACrB,cAAc,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE;KAChD,CAAC,CAAC;IAEH,oEAAoE;IACpE,mEAAmE;IACnE,kEAAkE;IAClE,2CAA2C;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,MAAM,GAA4B;QACtC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC;QAC/B,aAAa,EAAE,IAAI;QACnB,aAAa,EAAE,IAAI;KACpB,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACjE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,iEAAiE;QACjE,sEAAsE;QACtE,oEAAoE;QACpE,oEAAoE;QACpE,2CAA2C;QAC3C,MAAM,GAAG,GAAG,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,SAAS,IAAI,GAAG;YAC5D,CAAC,CAAC,MAAM,CAAE,GAA4B,CAAC,OAAO,IAAI,EAAE,CAAC;YACrD,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChB,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,SAAS,CAAC,iBAAiB,EAAE,mBAAmB,SAAS,WAAW,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,wBAAwB,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,GAAG,YAAY,SAAS;YAAE,MAAM,GAAG,CAAC;QACxC,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,SAAS,kBAAkB;IACzB,qEAAqE;IACrE,uDAAuD;IACvD,MAAM,MAAM,GAAG,iBAAiB,CAAC;IACjC,OAAO;QACL,GAAG,OAAO;QACV,GAAG,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC;QACzD,IAAI,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC;QAC3D,IAAI,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC;QAC3D,KAAK,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC;KACnD,CAAC;AACf,CAAC"}

package/dist/kraken/runtime/sdk.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Kraken script runtime — SDK stub (bundled into user plans).
+ *
+ * This file is **only** meant to be consumed by the bundler. It defines
+ * the public API that user plans import (`@zelari/kraken-runtime` is
+ * aliased to this file in the esbuild config). At type-check time the
+ * imports resolve to the real `PlanCapabilities` from `./types.js`; at
+ * runtime, every exported function forwards to `globalThis.__zelari_sdk__`,
+ * which the host populates before running the sandbox.
+ *
+ * Do NOT call any of these functions outside a script. They are designed
+ * to run in a vm context where `globalThis.__zelari_sdk__` exists; if you
+ * call them in a normal Node process you'll get a `TypeError`.
+ *
+ * @since Kraken v1.30.x — workflow script runtime (F1.1)
+ */
+import type { EmitPayload, MergeOptions, MergeResult, PlanContext, PlanSnapshot, TentacleOptions, TentacleRef } from './types.js';
+export declare function tentacle<T = unknown>(opts: TentacleOptions<T>): Promise<TentacleRef<T>>;
+export declare function barrier<T extends readonly TentacleRef[]>(refs: T): Promise<{
+    -readonly [K in keyof T]: T[K];
+}>;
+export declare function race<T extends readonly TentacleRef[]>(refs: T): Promise<T[number]>;
+export declare function while_<T>(cond: () => boolean | Promise<boolean>, body: () => Promise<T>, maxIter: number): Promise<T[]>;
+export declare function until<T>(cond: () => boolean | Promise<boolean>, body: () => Promise<T>, maxIter: number): Promise<T[]>;
+export declare function merge(refs: readonly TentacleRef[], opts?: MergeOptions): Promise<MergeResult>;
+export declare function checkpoint(label?: string): Promise<PlanSnapshot>;
+export declare function log(msg: string, data?: Record<string, unknown>): void;
+export declare function emit(payload: EmitPayload): void;
+export declare function getContext(): PlanContext;
+export declare function sendTo(peerId: string, payload: EmitPayload): void;
+export type { EmitPayload, MergeOptions, MergeResult, PlanCapabilities, PlanContext, PlanSnapshot, TentacleOptions, TentacleRef, } from './types.js';
+//# sourceMappingURL=sdk.d.ts.map

package/dist/kraken/runtime/sdk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk.d.ts","sourceRoot":"","sources":["../../../src/kraken/runtime/sdk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EACV,WAAW,EACX,YAAY,EACZ,WAAW,EAEX,WAAW,EACX,YAAY,EACZ,eAAe,EACf,WAAW,EACZ,MAAM,YAAY,CAAC;AAkBpB,wBAAsB,QAAQ,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAE7F;AAED,wBAAsB,OAAO,CAAC,CAAC,SAAS,SAAS,WAAW,EAAE,EAC5D,IAAI,EAAE,CAAC,GACN,OAAO,CAAC;IAAE,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;CAAE,CAAC,CAE7C;AAED,wBAAsB,IAAI,CAAC,CAAC,SAAS,SAAS,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAExF;AAED,wBAAsB,MAAM,CAAC,CAAC,EAC5B,IAAI,EAAE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,EACtC,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACtB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,CAAC,EAAE,CAAC,CAEd;AAED,wBAAsB,KAAK,CAAC,CAAC,EAC3B,IAAI,EAAE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,EACtC,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACtB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,CAAC,EAAE,CAAC,CAEd;AAED,wBAAsB,KAAK,CACzB,IAAI,EAAE,SAAS,WAAW,EAAE,EAC5B,IAAI,CAAC,EAAE,YAAY,GAClB,OAAO,CAAC,WAAW,CAAC,CAEtB;AAED,wBAAsB,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAEtE;AAED,wBAAgB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAErE;AAED,wBAAgB,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,IAAI,CAE/C;AAED,wBAAgB,UAAU,IAAI,WAAW,CAExC;AAED,wBAAgB,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,IAAI,CAEjE;AAID,YAAY,EACV,WAAW,EACX,YAAY,EACZ,WAAW,EACX,gBAAgB,EAChB,WAAW,EACX,YAAY,EACZ,eAAe,EACf,WAAW,GACZ,MAAM,YAAY,CAAC"}

package/dist/kraken/runtime/sdk.js

@@ -0,0 +1,61 @@
+/**
+ * Kraken script runtime — SDK stub (bundled into user plans).
+ *
+ * This file is **only** meant to be consumed by the bundler. It defines
+ * the public API that user plans import (`@zelari/kraken-runtime` is
+ * aliased to this file in the esbuild config). At type-check time the
+ * imports resolve to the real `PlanCapabilities` from `./types.js`; at
+ * runtime, every exported function forwards to `globalThis.__zelari_sdk__`,
+ * which the host populates before running the sandbox.
+ *
+ * Do NOT call any of these functions outside a script. They are designed
+ * to run in a vm context where `globalThis.__zelari_sdk__` exists; if you
+ * call them in a normal Node process you'll get a `TypeError`.
+ *
+ * @since Kraken v1.30.x — workflow script runtime (F1.1)
+ */
+function sdk() {
+    // The host injects `__zelari_sdk__` into the sandbox before the bundle
+    // runs. In a normal Node process this global is undefined and the
+    // explicit throw below catches misuse early.
+    const g = globalThis;
+    if (!g.__zelari_sdk__) {
+        throw new Error('@zelari/kraken-runtime must run inside a Kraken script sandbox; ' +
+            'no __zelari_sdk__ capability was provided');
+    }
+    return g.__zelari_sdk__;
+}
+export async function tentacle(opts) {
+    return sdk().tentacle(opts);
+}
+export async function barrier(refs) {
+    return sdk().barrier(refs);
+}
+export async function race(refs) {
+    return sdk().race(refs);
+}
+export async function while_(cond, body, maxIter) {
+    return sdk().while_(cond, body, maxIter);
+}
+export async function until(cond, body, maxIter) {
+    return sdk().until(cond, body, maxIter);
+}
+export async function merge(refs, opts) {
+    return sdk().merge(refs, opts);
+}
+export async function checkpoint(label) {
+    return sdk().checkpoint(label);
+}
+export function log(msg, data) {
+    sdk().log(msg, data);
+}
+export function emit(payload) {
+    sdk().emit(payload);
+}
+export function getContext() {
+    return sdk().getContext();
+}
+export function sendTo(peerId, payload) {
+    sdk().sendTo(peerId, payload);
+}
+//# sourceMappingURL=sdk.js.map

package/dist/kraken/runtime/sdk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk.js","sourceRoot":"","sources":["../../../src/kraken/runtime/sdk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAeH,SAAS,GAAG;IACV,uEAAuE;IACvE,kEAAkE;IAClE,6CAA6C;IAC7C,MAAM,CAAC,GAAG,UAAiD,CAAC;IAC5D,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,kEAAkE;YAChE,2CAA2C,CAC9C,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,CAAC,cAAc,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAc,IAAwB;IAClE,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAI,IAAI,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,IAAO;IAEP,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAmC,IAAO;IAClE,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,IAAsC,EACtC,IAAsB,EACtB,OAAe;IAEf,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,KAAK,CACzB,IAAsC,EACtC,IAAsB,EACtB,OAAe;IAEf,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,KAAK,CACzB,IAA4B,EAC5B,IAAmB;IAEnB,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAc;IAC7C,OAAO,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,GAAW,EAAE,IAA8B;IAC7D,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,OAAoB;IACvC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO,GAAG,EAAE,CAAC,UAAU,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,MAAc,EAAE,OAAoB;IACzD,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAChC,CAAC"}