agentfootprint 11.4.0 → 12.0.0

package/dist/types/adapters/code/local.d.ts

@@ -12,7 +12,13 @@
  *
  * What a child process DOES give you:
  *   • a separate process and heap — a crash or an OOM takes the child, not you;
- *   • kill on timeout, so runaway code has a ceiling;
+ *   • kill on timeout, so runaway code has a ceiling — on POSIX the child
+ *     runs in a process group of its own, and at the timeout, on an abort or
+ *     at the output ceiling the runner stops that OWNED group (SIGKILL). That
+ *     is cleanup, not containment: a descendant that starts its own session
+ *     or group escapes it, and a host killed before its exit handlers run
+ *     stops nothing. On Windows only the child itself can be stopped, and the
+ *     timeout error says so;
  *   • no inherited stdin, so nothing can block waiting for a terminal;
  *   • an environment ALLOWLIST — `process.env` is not inherited (only `PATH`,
  *     so the interpreter can be found), so an `AWS_SECRET_ACCESS_KEY` in your
@@ -34,11 +40,21 @@
  * is not a set this adapter can identify without guessing which of a developer's
  * files were meant, and a dev-loop runner that quietly uploaded whatever
  * appeared beside your source would be the worse failure. Producing outputs
- * needs three things this adapter does not have yet: a declared output
- * directory the model is told about, a bounded read-back of what landed in it,
- * and a size policy for what is too big to carry in-band. A runner that has
- * them (a managed sandbox that returns file contents) fills the field, and
- * `codeRunnerTool` mints every data-carrying entry with no further wiring.
+ * needs a declared output directory the model is told about and a size policy
+ * for what is too big to carry in-band; `readFile` below is the bounded
+ * read-back, for a caller that names the file. A runner that has all three
+ * fills the field, and `codeRunnerTool` mints every data-carrying entry with
+ * no further wiring.
+ *
+ * ── Files and commands ─────────────────────────────────────────────────────
+ * `readFile(path, { maxBytes })` reads ONE file back from the working
+ * directory — the path checked by the port's one rule (`sandboxPath`), then
+ * by its REAL location, so a symbolic link cannot lead it outside; a file over
+ * `maxBytes` is refused, never cut; a file on disk is bytes, so bytes come
+ * back and no encoding is guessed. `runCommand(command)` runs ONE `sh -c`
+ * command with the same environment allowlist as the code, and exists only on
+ * a runner built with `commands: true`. Neither is a network or filesystem
+ * jail: a command reaches whatever this machine reaches.
  *
  * So: a development loop, a trusted-input pipeline, a machine you would be
  * relaxed about a shell script running on. NOT arbitrary model-written code
@@ -93,19 +109,30 @@ export interface LocalCodeRunnerOptions {
      * reason over is a fragment.
      */
     readonly maxOutputChars?: number;
+    /**
+     * Give each session `runCommand` — one `sh -c` command in the working
+     * directory, with the same environment allowlist as the code. Default
+     * `false`, and then the member is ABSENT (`canRunCodeCommands` says no):
+     * it runs arbitrary shell, so a runner offers it only when built to. Build
+     * one runner per agent that should have it.
+     *
+     * Not a jail: the command reaches this machine's filesystem and network, as
+     * the code already does.
+     */
+    readonly commands?: boolean;
     /** Stable id (default `'local-code-runner'`). Rides the session events. */
     readonly id?: string;
     /** @internal Test seam — the `node:child_process` module. */
     readonly _childProcess?: ChildProcessModuleLike;
-    /** @internal Test seam — the `node:fs` slice staging uses. */
+    /** @internal Test seam — the `node:fs` slice staging and reading use. */
     readonly _fs?: FsModuleLike;
     /** @internal Test seam — where staging directories are created. Defaults to
      *  the OS temp directory. */
     readonly _stagingRoot?: string;
 }
-/** The slice of `node:fs` staging touches. Loaded lazily, and ONLY when a
- *  caller actually stages something — a session that never stages never asks
- *  this runtime for a filesystem. */
+/** The slice of `node:fs` staging and reading touch. Loaded lazily, and ONLY
+ *  when a caller actually stages or reads something — a session that does
+ *  neither never asks this runtime for a filesystem. */
 export interface FsModuleLike {
     readonly mkdtempSync?: (prefix: string) => string;
     readonly writeFileSync?: (path: string, data: string | Uint8Array) => void;
@@ -113,19 +140,71 @@ export interface FsModuleLike {
         recursive?: boolean;
         force?: boolean;
     }) => void;
+    readonly realpathSync?: (path: string) => string;
+    readonly openSync?: (path: string, flags: string | number) => number;
+    /** The open flags a read uses where the platform has them. */
+    readonly constants?: {
+        readonly O_RDONLY?: number;
+        readonly O_NONBLOCK?: number;
+        readonly O_NOFOLLOW?: number;
+    };
+    readonly fstatSync?: (fd: number) => {
+        isFile(): boolean;
+        readonly size: number;
+    };
+    readonly readSync?: (fd: number, buffer: Uint8Array, offset: number, length: number, position: number | null) => number;
+    readonly closeSync?: (fd: number) => void;
 }
 /** The slice of `node:child_process` this adapter touches. */
 export interface ChildProcessModuleLike {
+    /** Used when present (the real module always has it): only `spawn` can give
+     *  a child a process group of its own. */
+    readonly spawn?: SpawnLike;
     readonly execFile?: (file: string, args: readonly string[], options: {
         cwd?: string;
         env?: Record<string, string>;
-        timeout?: number;
         maxBuffer?: number;
-        signal?: AbortSignal;
+        killSignal?: string;
+        detached?: boolean;
     }, callback: (error: (Error & {
         code?: number | string;
         killed?: boolean;
+        signal?: string | null;
     }) | null, stdout: string, stderr: string) => void) => unknown;
 }
+/** The part of the child `execFile` / `spawn` hands back that ending it needs. */
+interface ChildLike {
+    readonly pid?: number;
+    kill?(signal?: string): boolean;
+    readonly stdout?: {
+        destroy?(): void;
+    } | null;
+    readonly stderr?: {
+        destroy?(): void;
+    } | null;
+}
+/** A readable end of a spawned child's pipe, as far as collecting it goes. */
+interface PipeLike {
+    on(event: 'data', listener: (chunk: Uint8Array) => void): unknown;
+    destroy?(): void;
+}
+/** The child `spawn` hands back, as far as this adapter uses it. */
+interface SpawnedLike extends ChildLike {
+    readonly stdout?: PipeLike | null;
+    readonly stderr?: PipeLike | null;
+    on(event: 'error', listener: (error: Error & {
+        code?: string;
+    }) => void): unknown;
+    on(event: 'close', listener: (code: number | null, signal: string | null) => void): unknown;
+}
+/** The slice of `node:child_process` · `spawn` the runner uses — preferred
+ *  over `execFile`, which does not pass `detached` on to the child. */
+type SpawnLike = (file: string, args: readonly string[], options: {
+    cwd?: string;
+    env?: Record<string, string>;
+    detached?: boolean;
+    stdio?: readonly ['ignore', 'pipe', 'pipe'];
+}) => SpawnedLike;
 export declare function localCodeRunner(options?: LocalCodeRunnerOptions): CodeRunner;
+export {};
 //# sourceMappingURL=local.d.ts.map

package/dist/types/adapters/code/local.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"local.d.ts","sourceRoot":"","sources":["../../../../src/adapters/code/local.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6DG;AAEH,OAAO,KAAK,EAGV,UAAU,EAGX,MAAM,kCAAkC,CAAC;AAI1C,MAAM,WAAW,sBAAsB;IACrC;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,oEAAoE;IACpE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAChD,uEAAuE;IACvE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;;OAOG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,6DAA6D;IAC7D,QAAQ,CAAC,aAAa,CAAC,EAAE,sBAAsB,CAAC;IAChD,8DAA8D;IAC9D,QAAQ,CAAC,GAAG,CAAC,EAAE,YAAY,CAAC;IAC5B;iCAC6B;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED;;qCAEqC;AACrC,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC;IAClD,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,KAAK,IAAI,CAAC;IAC3E,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC;CAC9F;AAED,8DAA8D;AAC9D,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAClB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,EAAE;QACP,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,MAAM,CAAC,EAAE,WAAW,CAAC;KACtB,EACD,QAAQ,EAAE,CACR,KAAK,EAAE,CAAC,KAAK,GAAG;QAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,GAAG,IAAI,EACpE,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,KACX,IAAI,KACN,OAAO,CAAC;CACd;AAiBD,wBAAgB,eAAe,CAAC,OAAO,GAAE,sBAA2B,GAAG,UAAU,CAsIhF"}
+{"version":3,"file":"local.d.ts","sourceRoot":"","sources":["../../../../src/adapters/code/local.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6EG;AAEH,OAAO,KAAK,EAOV,UAAU,EAGX,MAAM,kCAAkC,CAAC;AAQ1C,MAAM,WAAW,sBAAsB;IACrC;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,oEAAoE;IACpE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAChD,uEAAuE;IACvE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;;OAOG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC;;;;;;;;;OASG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,6DAA6D;IAC7D,QAAQ,CAAC,aAAa,CAAC,EAAE,sBAAsB,CAAC;IAChD,yEAAyE;IACzE,QAAQ,CAAC,GAAG,CAAC,EAAE,YAAY,CAAC;IAC5B;iCAC6B;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED;;wDAEwD;AACxD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC;IAClD,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,KAAK,IAAI,CAAC;IAC3E,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC;IAC7F,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IACjD,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,KAAK,MAAM,CAAC;IACrE,8DAA8D;IAC9D,QAAQ,CAAC,SAAS,CAAC,EAAE;QACnB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;KAC9B,CAAC;IACF,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK;QAAE,MAAM,IAAI,OAAO,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAClF,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAClB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,UAAU,EAClB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GAAG,IAAI,KACpB,MAAM,CAAC;IACZ,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;CAC3C;AAED,8DAA8D;AAC9D,MAAM,WAAW,sBAAsB;IACrC;8CAC0C;IAC1C,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAClB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,EAAE;QACP,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,EACD,QAAQ,EAAE,CACR,KAAK,EAAE,CAAC,KAAK,GAAG;QAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,GAAG,IAAI,EAC5F,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,KACX,IAAI,KACN,OAAO,CAAC;CACd;AAED,kFAAkF;AAClF,UAAU,SAAS;IACjB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,CAAC,IAAI,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAC9C,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,CAAC,IAAI,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;CAC/C;AAED,8EAA8E;AAC9E,UAAU,QAAQ;IAChB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,GAAG,OAAO,CAAC;IAClE,OAAO,CAAC,IAAI,IAAI,CAAC;CAClB;AAED,oEAAoE;AACpE,UAAU,WAAY,SAAQ,SAAS;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC;IAClC,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,GAAG;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,GAAG,OAAO,CAAC;IAClF,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,GAAG,OAAO,CAAC;CAC7F;AAED;uEACuE;AACvE,KAAK,SAAS,GAAG,CACf,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,EAAE;IACP,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7C,KACE,WAAW,CAAC;AAiBjB,wBAAgB,eAAe,CAAC,OAAO,GAAE,sBAA2B,GAAG,UAAU,CA4MhF"}

package/dist/types/adapters/code/output.d.ts

@@ -0,0 +1,71 @@
+/**
+ * What both code adapters hand back about a run's output — bounded, and saying
+ * so — and the one check of a command's options.
+ *
+ * One implementation, because the two promises it keeps are the port's, not an
+ * adapter's: a cut is always stated (`truncated`), and a command's result says
+ * only what the backend reported (no exit status is ever made up).
+ */
+import type { CodeCommandOptions, CodeCommandResult, CodeTruncation } from '../../provider-contract/types.js';
+/** stdout and stderr after the cut, and what the cut took. */
+export interface BoundedOutput {
+    readonly stdout: string;
+    readonly stderr: string;
+    /** Present IFF something was cut — an empty object here would read as
+     *  "truncation happened, magnitude unknown". */
+    readonly truncated?: CodeTruncation;
+}
+/**
+ * Cut each stream to `max` characters, saying whether — and from how much — it
+ * cut.
+ *
+ * `overflowed` names a stream the BACKEND already cut (a child whose output
+ * passed its buffer ceiling): that stream is marked cut even when it fits
+ * `max`, and `ofChars` is left out, because the length before that cut was
+ * never seen — a number here would understate it.
+ */
+export declare function boundOutput(stdout: string, stderr: string, max: number, overflowed?: 'stdout' | 'stderr'): BoundedOutput;
+/** What a backend reported about one command, before the bound. */
+export interface CommandReport {
+    readonly stdout: string;
+    readonly stderr: string;
+    /** Only when the backend reported one. */
+    readonly exitCode?: number;
+    /** Only when the backend reported one. */
+    readonly isError?: boolean;
+    /** A stream the backend itself cut before handing it over. */
+    readonly overflowed?: 'stdout' | 'stderr';
+    /** The signal that ended the command before it exited, when known. */
+    readonly terminatedBy?: string;
+}
+/** A command's options, checked once. */
+export interface CommandBounds {
+    readonly maxOutputChars: number;
+    readonly timeoutMs?: number;
+    readonly signal?: AbortSignal;
+    readonly checkpoint?: string;
+}
+/**
+ * The result of one command: bounded output, and every other field copied
+ * from the report only when the report had it.
+ *
+ * `checkpointSeen` is read over the WHOLE stdout, before the cut — a marker
+ * printed after `maxOutputChars` characters is the common case, not the edge.
+ */
+export declare function commandResult(report: CommandReport, bounds: CommandBounds): CodeCommandResult;
+/** Did `stdout` hold `line` as one whole line (a trailing `\r` allowed)? */
+export declare function printedLine(stdout: string, line: string): boolean;
+/**
+ * Check a command and its options, or throw a `TypeError` naming the option.
+ *
+ * The message never repeats the command: it is caller data, and an error is
+ * the one place nobody expects to have to scrub.
+ */
+export declare function commandBounds(command: unknown, options: CodeCommandOptions | undefined, runnerMaxOutputChars: number): CommandBounds;
+/** UTF-8 byte length of a string, without encoding it. */
+export declare function utf8Length(text: string): number;
+/** Bytes of a staged or returned payload: a string's UTF-8 length, bytes as they are. */
+export declare function payloadBytes(data: string | Uint8Array): number;
+export declare function isHighSurrogate(unit: number): boolean;
+export declare function isLowSurrogate(unit: number): boolean;
+//# sourceMappingURL=output.d.ts.map

package/dist/types/adapters/code/output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../../../src/adapters/code/output.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EACV,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,EACf,MAAM,kCAAkC,CAAC;AAE1C,8DAA8D;AAC9D,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;oDACgD;IAChD,QAAQ,CAAC,SAAS,CAAC,EAAE,cAAc,CAAC;CACrC;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CACzB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,UAAU,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAC/B,aAAa,CAgBf;AAQD,mEAAmE;AACnE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,0CAA0C;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,0CAA0C;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,8DAA8D;IAC9D,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC1C,sEAAsE;IACtE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,yCAAyC;AACzC,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,GAAG,iBAAiB,CAkB7F;AAED,4EAA4E;AAC5E,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAKjE;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,kBAAkB,GAAG,SAAS,EACvC,oBAAoB,EAAE,MAAM,GAC3B,aAAa,CAgCf;AAED,0DAA0D;AAC1D,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAY/C;AAED,yFAAyF;AACzF,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAE9D;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAErD;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEpD"}

package/dist/types/adapters/mcp/agentcoreRuntime/invoke.d.ts

@@ -33,12 +33,13 @@
  * ── The SDK's own retry is OFF ───────────────────────────────────────────────
  * The client built here has `maxAttempts: 1`. The SDK's standard policy would
  * re-send a `tools/call` after a 5xx or a dropped connection — a call that may
- * already have run, in the same pinned session — which is the one thing a retry
- * here must never do. Every retry goes through the transport's single loop
- * instead, which repeats only the refusals its retry policy recognises: the
- * documented session-busy reply, and a 429 (assumed, not proven, to have run
- * nothing — see `mcp/throttleRetry.ts`). A `client` you pass keeps ITS policy: build it with
- * `maxAttempts: 1` for the same guarantee.
+ * already have run, in the same pinned session — which a retry here must never
+ * do on its own. Every retry goes through the transport's single loop instead,
+ * which repeats only what the replay rule permits (`mcp/replay.ts`): the
+ * refusals its retry policy recognises — the session-busy reply and a 429, each
+ * assumed, not proven, to have run nothing — and a dropped connection only when
+ * the app declared that for the tool. A `client` you pass keeps ITS policy:
+ * build it with `maxAttempts: 1` for the same guarantee.
  *
  * ── A service exception is an ANSWER ─────────────────────────────────────────
  * When the service answers with a non-2xx status, the SDK throws instead of

package/dist/types/adapters/mcp/agentcoreRuntime/invoke.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"invoke.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/mcp/agentcoreRuntime/invoke.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgEG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAMnE,iFAAiF;AACjF,MAAM,WAAW,yBAAyB;IACxC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACnF;AAED,8EAA8E;AAC9E,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,sBAAsB,CAAC,EAAE,KAAK,MAAM,EAAE;QAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,KAAK,yBAAyB,CAAC;IAChC,QAAQ,CAAC,yBAAyB,CAAC,EAAE,KAAK,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;CACtE;AAED,sEAAsE;AACtE,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,mFAAmF;AACnF,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,yBAAyB,CAAC;IAC5C,4EAA4E;IAC5E,QAAQ,CAAC,GAAG,CAAC,EAAE,gCAAgC,CAAC;CACjD;AAED;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG;IACpD,QAAQ,CAAC,MAAM,EAAE,yBAAyB,CAAC;IAC3C,QAAQ,CAAC,yBAAyB,EAAE,KAAK,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;CACrE,CA0BA;AAwCD;;;;;;GAMG;AACH,wBAAgB,WAAW,CACzB,MAAM,EAAE,YAAY,EACpB,MAAM,EAAE,yBAAyB,EACjC,yBAAyB,EAAE,KAAK,KAAK,EAAE,OAAO,KAAK,OAAO,GACzD,aAAa,CA+Bf"}
+{"version":3,"file":"invoke.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/mcp/agentcoreRuntime/invoke.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiEG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAMnE,iFAAiF;AACjF,MAAM,WAAW,yBAAyB;IACxC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACnF;AAED,8EAA8E;AAC9E,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,sBAAsB,CAAC,EAAE,KAAK,MAAM,EAAE;QAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,KAAK,yBAAyB,CAAC;IAChC,QAAQ,CAAC,yBAAyB,CAAC,EAAE,KAAK,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;CACtE;AAED,sEAAsE;AACtE,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,mFAAmF;AACnF,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,yBAAyB,CAAC;IAC5C,4EAA4E;IAC5E,QAAQ,CAAC,GAAG,CAAC,EAAE,gCAAgC,CAAC;CACjD;AAED;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG;IACpD,QAAQ,CAAC,MAAM,EAAE,yBAAyB,CAAC;IAC3C,QAAQ,CAAC,yBAAyB,EAAE,KAAK,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;CACrE,CA0BA;AAwCD;;;;;;GAMG;AACH,wBAAgB,WAAW,CACzB,MAAM,EAAE,YAAY,EACpB,MAAM,EAAE,yBAAyB,EACjC,yBAAyB,EAAE,KAAK,KAAK,EAAE,OAAO,KAAK,OAAO,GACzD,aAAa,CA+Bf"}

package/dist/types/adapters/mcp/agentcoreRuntime/sessionBusy.d.ts

@@ -22,7 +22,17 @@
  * tearing down the session: the PLATFORM's answer, about the session, not the
  * MCP server's. The retry series relies on that, as it relies on a 429 being a
  * rejection before execution: an assumption with a basis, not proof that
- * nothing ran (see `mcp/throttleRetry.ts` · `RetryDecision`).
+ * nothing ran (see `mcp/throttleRetry.ts` · `RetryDecision`). The adapter
+ * retries it as its OWN policy ({@link SESSION_BUSY_ASSUMES}): each repeat
+ * records that assumption (`permission: { by: 'adapter', assumes }`), and every
+ * attempt's effect stays `unknown` (`mcp/replay.ts`).
+ *
+ * ── The known limit ──────────────────────────────────────────────────────────
+ * The HTTP 200 form is matched by its code and message, so a server behind the
+ * runtime can raise the same error itself — after it ran the call — and the
+ * match cannot tell the two apart. Neither AWS page says a matching body ran
+ * nothing. That is why the record never says so; the 409 form carries the
+ * platform's own `x-amzn-errortype`.
  *
  * ── What it must NOT match ───────────────────────────────────────────────────
  * `ConflictException` shares the code -32005 ("Resource conflict - Resource
@@ -42,6 +52,27 @@
  * Pattern: Strategy (a `RetryDecision`). Role: outer ring, vendor fact.
  */
 import type { RetryVerdict } from '../../../mcp/throttleRetry.js';
+/**
+ * What the adapter assumes in retrying this refusal as its own policy: that
+ * the platform refused the request before running it. Attached to the
+ * session-busy retry rule (`transport.ts`) and recorded beside each repeat —
+ * an assumption, never evidence.
+ */
+export declare const SESSION_BUSY_ASSUMES: "refused-before-execution";
+/**
+ * Where AgentCore documents the refusal this file recognises, in both forms —
+ * the basis of the adapter's retry policy. Neither page says that a matching
+ * reply ran nothing, so the record never does:
+ *
+ *   1. The AgentCore Runtime MCP protocol contract, "Error handling": the row
+ *      `-32005 · RetryableConflictException · HTTP 200 · "Session operation in
+ *      progress, please retry"`, returned "when a second operation targets a
+ *      session while the service is provisioning or tearing down that session".
+ *   2. The `InvokeAgentRuntime` API reference, "Errors":
+ *      `RetryableConflictException`, HTTP 409 — "a temporary condition that may
+ *      resolve itself with retries".
+ */
+export declare const SESSION_BUSY_DOCUMENTATION: readonly string[];
 /** The JSON-RPC error code the contract gives `RetryableConflictException`. */
 export declare const SESSION_BUSY_CODE = -32005;
 /**

package/dist/types/adapters/mcp/agentcoreRuntime/sessionBusy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sessionBusy.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/mcp/agentcoreRuntime/sessionBusy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAGlE,+EAA+E;AAC/E,eAAO,MAAM,iBAAiB,SAAS,CAAC;AAYxC;;;;;;;;;;;;GAYG;AACH,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,QAAQ,EAClB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAwBnC;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAQzD"}
+{"version":3,"file":"sessionBusy.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/mcp/agentcoreRuntime/sessionBusy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAGlE;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,4BAAsC,CAAC;AAExE;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,0BAA0B,EAAE,SAAS,MAAM,EAGtD,CAAC;AAEH,+EAA+E;AAC/E,eAAO,MAAM,iBAAiB,SAAS,CAAC;AAYxC;;;;;;;;;;;;GAYG;AACH,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,QAAQ,EAClB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAwBnC;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAQzD"}

package/dist/types/adapters/mcp/agentcoreRuntime/transport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/mcp/agentcoreRuntime/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AAEH,OAAO,EAGL,KAAK,SAAS,EACf,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAKL,KAAK,aAAa,EAGlB,KAAK,oBAAoB,EAC1B,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAGL,KAAK,yBAAyB,EAC9B,KAAK,gCAAgC,EACtC,MAAM,aAAa,CAAC;AAErB,OAAO,EAAmB,KAAK,uBAAuB,EAAwB,MAAM,cAAc,CAAC;AAGnG;;;;;GAKG;AACH,MAAM,WAAW,0BAA0B;IACzC,8EAA8E;IAC9E,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,4EAA4E;IAC5E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,iDAAiD;IACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC;IAC1B;;;OAGG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;CAC5B;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,oBAAoB,GAAG,OAAO,GAAG,0BAA0B,CAAC;AAExE;;;;GAIG;AACH,MAAM,MAAM,4BAA4B,GAAG,oBAAoB,CAAC;AAEhE,wDAAwD;AACxD,MAAM,WAAW,mCAAmC;IAClD;;;OAGG;IACH,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,iDAAiD;IACjD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,qFAAqF;IACrF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,8FAA8F;IAC9F,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,yDAAyD;IACzD,QAAQ,CAAC,IAAI,CAAC,EAAE,oBAAoB,CAAC;IACrC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,uBAAuB,CAAC;IAC3C;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,4BAA4B,CAAC;IACxD;;;;;;;;OAQG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,yBAAyB,CAAC;IAC5C;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,gCAAgC,CAAC;IAChD;;;;OAIG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,gCAAgC,CAAC;CAClD;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,2BAA2B,EAAE,aAQxC,CAAC;AAQH;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,mCAAmC,GAC3C,gBAAgB,CAgBlB;AA8BD,kFAAkF;AAClF,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,0BAA0B,GAAG,MAAM,CAuB/E"}
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/mcp/agentcoreRuntime/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AAEH,OAAO,EAGL,KAAK,SAAS,EACf,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAKL,KAAK,aAAa,EAGlB,KAAK,oBAAoB,EAC1B,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAGL,KAAK,yBAAyB,EAC9B,KAAK,gCAAgC,EACtC,MAAM,aAAa,CAAC;AAErB,OAAO,EAAmB,KAAK,uBAAuB,EAAwB,MAAM,cAAc,CAAC;AAGnG;;;;;GAKG;AACH,MAAM,WAAW,0BAA0B;IACzC,8EAA8E;IAC9E,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,4EAA4E;IAC5E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,iDAAiD;IACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC;IAC1B;;;OAGG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;CAC5B;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,oBAAoB,GAAG,OAAO,GAAG,0BAA0B,CAAC;AAExE;;;;GAIG;AACH,MAAM,MAAM,4BAA4B,GAAG,oBAAoB,CAAC;AAEhE,wDAAwD;AACxD,MAAM,WAAW,mCAAmC;IAClD;;;OAGG;IACH,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,iDAAiD;IACjD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,qFAAqF;IACrF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,8FAA8F;IAC9F,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,yDAAyD;IACzD,QAAQ,CAAC,IAAI,CAAC,EAAE,oBAAoB,CAAC;IACrC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,uBAAuB,CAAC;IAC3C;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,4BAA4B,CAAC;IACxD;;;;;;;;OAQG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,yBAAyB,CAAC;IAC5C;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,gCAAgC,CAAC;IAChD;;;;OAIG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,gCAAgC,CAAC;CAClD;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,2BAA2B,EAAE,aAQxC,CAAC;AAQH;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,mCAAmC,GAC3C,gBAAgB,CAkBlB;AA8BD,kFAAkF;AAClF,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,0BAA0B,GAAG,MAAM,CAuB/E"}

package/dist/types/core/codeRunnerTool.d.ts

@@ -116,8 +116,9 @@ export interface CodeRunnerToolOptions {
      *
      * ── Refused rather than degraded ────────────────────────────────────────
      * Declaring `wants` on a runner whose sessions cannot accept staged inputs
-     * (`stageInputs` absent — `agentCoreCodeRunner` today) refuses BY NAME at
-     * dispatch. Running the code without the data it declared would leave the
+     * (`stageInputs` absent — a backend that cannot write into its own session)
+     * refuses BY NAME at dispatch. `localCodeRunner` and `agentCoreCodeRunner`
+     * both stage. Running the code without the data it declared would leave the
      * model reasoning about a file that is not there, which is the exact silent
      * failure this library refuses to ship.
      *
@@ -156,7 +157,18 @@ export interface CodeRunFacts {
     readonly stagedInputs: number;
     readonly outputChars: number;
     readonly truncated: boolean;
-    readonly ok: boolean;
+    /** What the runner REPORTED (`CodeResult.ok`). ABSENT when it reported
+     *  nothing — unknown, never recorded as success. A `false` is told apart by
+     *  the three fields below. */
+    readonly ok?: boolean;
+    /** The program's exit status — exactly when the runner supplied one. */
+    readonly exitCode?: number;
+    /** `true`: the runner flagged an error with no exit status, so whether the
+     *  code ran is not confirmed — not a failed program. */
+    readonly serviceError?: true;
+    /** The signal that ended the process before it exited, when the runner
+     *  knows it (`'SIGKILL'`): no exit status exists, and none is recorded. */
+    readonly terminatedBy?: string;
     readonly shapeHash: string;
 }
 /** A `Tool` that records what its code runs were shaped like. */

package/dist/types/core/codeRunnerTool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codeRunnerTool.d.ts","sourceRoot":"","sources":["../../../src/core/codeRunnerTool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAIH,OAAO,KAAK,EAAyB,UAAU,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAEpG,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAc,KAAK,IAAI,EAA6B,MAAM,mBAAmB,CAAC;AACrF,OAAO,EAAkB,KAAK,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAE9E;6DAC6D;AAC7D,MAAM,MAAM,mBAAmB,GAAG,OAAO,CAAC,aAAa,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,CAAC,CAAC;AAErF,MAAM,WAAW,qBAAqB;IACpC;sEACkE;IAClE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,sDAAsD;IACtD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;+CAC2C;IAC3C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,mBAAmB,CAAC;IACrC,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;uEACmE;IACnE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,kDAAkD;IAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;wEACoE;IACpE,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnD;uFACmF;IACnF,QAAQ,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC;IAChC;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;CAC5B;AAID;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,aAAa,EAAE,OAAO,MAAoD,CAAC;AAExF;;;;;;;GAOG;AACH,eAAO,MAAM,SAAS,EAAE,OAAO,MAAoD,CAAC;AAEpF,4EAA4E;AAC5E,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,iEAAiE;AACjE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;CACzD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAkB9C;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAYvD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAoB1D;AA+BD,iEAAiE;AACjE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,CAAC,aAAa,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;CAC5D;AAED,oFAAoF;AACpF,wBAAgB,UAAU,CAAC,SAAS,EAAE,OAAO,GAAG,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,GAAG,SAAS,CAIpF;AAED,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,SAAS,EAAE,OAAO,GAAG,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,SAAS,CAI/F;AAED,wBAAgB,cAAc,CAC5B,OAAO,EAAE,qBAAqB,GAC7B,IAAI,CAAC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,EAAE,MAAM,CAAC,GAAG,iBAAiB,GAAG,eAAe,CAqItE"}
+{"version":3,"file":"codeRunnerTool.d.ts","sourceRoot":"","sources":["../../../src/core/codeRunnerTool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAIH,OAAO,KAAK,EAAyB,UAAU,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAEpG,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAc,KAAK,IAAI,EAA6B,MAAM,mBAAmB,CAAC;AACrF,OAAO,EAAkB,KAAK,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAE9E;6DAC6D;AAC7D,MAAM,MAAM,mBAAmB,GAAG,OAAO,CAAC,aAAa,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,CAAC,CAAC;AAErF,MAAM,WAAW,qBAAqB;IACpC;sEACkE;IAClE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,sDAAsD;IACtD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;+CAC2C;IAC3C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,mBAAmB,CAAC;IACrC,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;uEACmE;IACnE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,kDAAkD;IAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;wEACoE;IACpE,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnD;uFACmF;IACnF,QAAQ,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC;IAChC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;CAC5B;AAID;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,aAAa,EAAE,OAAO,MAAoD,CAAC;AAExF;;;;;;;GAOG;AACH,eAAO,MAAM,SAAS,EAAE,OAAO,MAAoD,CAAC;AAEpF,4EAA4E;AAC5E,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B;;kCAE8B;IAC9B,QAAQ,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC;IACtB,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;4DACwD;IACxD,QAAQ,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC;IAC7B;+EAC2E;IAC3E,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,iEAAiE;AACjE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;CACzD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAkB9C;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAYvD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAoB1D;AA+BD,iEAAiE;AACjE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,CAAC,aAAa,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;CAC5D;AAED,oFAAoF;AACpF,wBAAgB,UAAU,CAAC,SAAS,EAAE,OAAO,GAAG,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,GAAG,SAAS,CAIpF;AAED,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,SAAS,EAAE,OAAO,GAAG,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,SAAS,CAI/F;AAED,wBAAgB,cAAc,CAC5B,OAAO,EAAE,qBAAqB,GAC7B,IAAI,CAAC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,EAAE,MAAM,CAAC,GAAG,iBAAiB,GAAG,eAAe,CA8ItE"}

package/dist/types/doors/providers.d.ts

@@ -31,5 +31,5 @@ export * from '../tool-providers/index.js';
 export * from '../thinking/index.js';
 export { localCodeRunner, type LocalCodeRunnerOptions } from '../adapters/code/local.js';
 export { agentCoreBrowser, AWS_SYSTEM_BROWSER, type AgentCoreBrowserOptions, type AgentCoreBrowserClientLike, type BedrockAgentCoreBrowserSdkModule, } from '../adapters/browser/agentcore.js';
-export { agentCoreCodeRunner, type AgentCoreCodeRunnerOptions, type AgentCoreCodeClientLike, type AgentCoreInvokeAnswer, type BedrockAgentCoreCodeSdkModule, } from '../adapters/code/agentcore.js';
+export { agentCoreCodeRunner, type AgentCoreCodeRunnerOptions, type AgentCoreCodeClientLike, type AgentCoreFileContent, type AgentCoreInvokeAnswer, type AgentCoreInvokeInput, type AgentCoreInvokeTarget, type AgentCoreResource, type BedrockAgentCoreCodeSdkModule, } from '../adapters/code/agentcore.js';
 //# sourceMappingURL=providers.d.ts.map

package/dist/types/doors/providers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../../../src/doors/providers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sBAAsB,CAAC;AAKrC,OAAO,EAAE,eAAe,EAAE,KAAK,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAIzF,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,KAAK,uBAAuB,EAC5B,KAAK,0BAA0B,EAC/B,KAAK,gCAAgC,GACtC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,mBAAmB,EACnB,KAAK,0BAA0B,EAC/B,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,EAC1B,KAAK,6BAA6B,GACnC,MAAM,+BAA+B,CAAC"}
+{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../../../src/doors/providers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sBAAsB,CAAC;AAKrC,OAAO,EAAE,eAAe,EAAE,KAAK,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAIzF,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,KAAK,uBAAuB,EAC5B,KAAK,0BAA0B,EAC/B,KAAK,gCAAgC,GACtC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,mBAAmB,EACnB,KAAK,0BAA0B,EAC/B,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,6BAA6B,GACnC,MAAM,+BAA+B,CAAC"}