aglio-worker 0.12.7 → 0.13.0

package/agent.js

@@ -2982,7 +2982,7 @@ var require_compile = __commonJS({
       const schOrFunc = root.refs[ref];
       if (schOrFunc)
         return schOrFunc;
-      let _sch = resolve6.call(this, root, ref);
+      let _sch = resolve7.call(this, root, ref);
       if (_sch === void 0) {
         const schema = (_a3 = root.localRefs) === null || _a3 === void 0 ? void 0 : _a3[ref];
         const { schemaId } = this.opts;
@@ -3009,7 +3009,7 @@ var require_compile = __commonJS({
     function sameSchemaEnv(s1, s2) {
       return s1.schema === s2.schema && s1.root === s2.root && s1.baseId === s2.baseId;
     }
-    function resolve6(root, ref) {
+    function resolve7(root, ref) {
       let sch;
       while (typeof (sch = this.refs[ref]) == "string")
         ref = sch;
@@ -3839,7 +3839,7 @@ var require_fast_uri = __commonJS({
       }
       return uri;
     }
-    function resolve6(baseURI, relativeURI, options) {
+    function resolve7(baseURI, relativeURI, options) {
       const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
       const {
         parsed: baseParsed,
@@ -4208,7 +4208,7 @@ var require_fast_uri = __commonJS({
     var fastUri = {
       SCHEMES,
       normalize,
-      resolve: resolve6,
+      resolve: resolve7,
       resolveComponent,
       equal,
       serialize,
@@ -12582,7 +12582,7 @@ var recursive = /* @__PURE__ */ new WeakMap();
 var NONE = 0;
 var ASSUMED = 1;
 var PROVEN = 2;
-function isRecursive(inst, stack, resolve6) {
+function isRecursive(inst, stack, resolve7) {
   const cached2 = recursive.get(inst);
   if (cached2 !== void 0)
     return cached2 ? PROVEN : NONE;
@@ -12592,7 +12592,7 @@ function isRecursive(inst, stack, resolve6) {
   let result = NONE;
   const check2 = (child) => {
     if (result !== PROVEN && child?._zod) {
-      const answer = isRecursive(child, stack, resolve6);
+      const answer = isRecursive(child, stack, resolve7);
       if (answer > result)
         result = answer;
     }
@@ -12603,7 +12603,7 @@ function isRecursive(inst, stack, resolve6) {
       const desc = Object.getOwnPropertyDescriptor(sh, key);
       if (spread && !desc.enumerable)
         continue;
-      const child = desc.get ? ASSUMED : desc.value?._zod ? isRecursive(desc.value, stack, resolve6) : NONE;
+      const child = desc.get ? ASSUMED : desc.value?._zod ? isRecursive(desc.value, stack, resolve7) : NONE;
       if (child > answer)
         answer = child;
     }
@@ -12667,7 +12667,7 @@ function isRecursive(inst, stack, resolve6) {
       break;
     // `$ZodLazy` caches its inner on the def, so a resolved edge is followed exactly
     case "lazy": {
-      const inner = def._cachedInner ?? (resolve6 ? inst._zod.innerType : void 0);
+      const inner = def._cachedInner ?? (resolve7 ? inst._zod.innerType : void 0);
       merge2(inner ? isRecursive(inner, stack, false) : ASSUMED);
       break;
     }
@@ -28245,6 +28245,10 @@ var PASSWORD_RESET_TTL_SECONDS = 60 * 60;
 var CARD_OPEN_MODES = ["popup", "page"];
 var cardOpenModeSchema = external_exports.enum(CARD_OPEN_MODES);
 
+// ../../packages/shared/src/card-open-size.ts
+var CARD_OPEN_SIZES = ["default", "large", "fullscreen"];
+var cardOpenSizeSchema = external_exports.enum(CARD_OPEN_SIZES);
+
 // src/remote-docker.ts
 import { existsSync } from "node:fs";
 import { PassThrough } from "node:stream";
@@ -28307,9 +28311,9 @@ async function pullDockerImage(client, image) {
   if (existing) return existing;
   const pull = (async () => {
     const stream = await client.pull(image, { authconfig: dockerAuthFor(image) });
-    await new Promise((resolve6, reject) => {
+    await new Promise((resolve7, reject) => {
       stream.on("data", () => void 0);
-      stream.on("end", () => resolve6());
+      stream.on("end", () => resolve7());
       stream.on("error", (error62) => reject(error62));
     });
   })();
@@ -28674,11 +28678,231 @@ async function verifyHostRuntime(input2, run = defaultRunner) {
   return detected;
 }
 
+// src/disk-cleanup.ts
+import { statfs } from "node:fs/promises";
+import { dirname, resolve as resolve2 } from "node:path";
+import Dockerode2 from "dockerode";
+var GIB = 1024 * 1024 * 1024;
+var DISK_GUARD_DEFAULTS = {
+  enabled: true,
+  minFreeBytes: 10 * GIB,
+  criticalFreeBytes: 2 * GIB,
+  buildCachePrune: true,
+  runnerImageRetentionDays: 14,
+  intervalMs: 60 * 60 * 1e3
+};
+var FALSY = /* @__PURE__ */ new Set(["0", "false", "off", "no"]);
+function flagFromEnv(source, name, fallback) {
+  const raw = source[name]?.trim().toLowerCase();
+  if (!raw) return fallback;
+  return !FALSY.has(raw);
+}
+function numberFromEnv(source, name, fallback, min) {
+  const raw = source[name]?.trim();
+  if (!raw) return fallback;
+  const value = Number(raw);
+  if (!Number.isFinite(value) || value < min) return fallback;
+  return value;
+}
+function resolveDiskGuardPolicy(source = process.env) {
+  const minFreeBytes = numberFromEnv(
+    source,
+    "AGLIO_DISK_MIN_FREE_GB",
+    DISK_GUARD_DEFAULTS.minFreeBytes / GIB,
+    0
+  ) * GIB;
+  const criticalFreeBytes = Math.min(
+    numberFromEnv(
+      source,
+      "AGLIO_DISK_CRITICAL_FREE_GB",
+      DISK_GUARD_DEFAULTS.criticalFreeBytes / GIB,
+      0
+    ) * GIB,
+    // A critical threshold above the low threshold would make "low" unreachable.
+    minFreeBytes
+  );
+  return {
+    enabled: flagFromEnv(source, "AGLIO_DISK_CLEANUP", DISK_GUARD_DEFAULTS.enabled),
+    minFreeBytes,
+    criticalFreeBytes,
+    buildCachePrune: flagFromEnv(
+      source,
+      "AGLIO_DISK_BUILD_CACHE_PRUNE",
+      DISK_GUARD_DEFAULTS.buildCachePrune
+    ),
+    runnerImageRetentionDays: Math.floor(
+      numberFromEnv(
+        source,
+        "AGLIO_DISK_RUNNER_IMAGE_DAYS",
+        DISK_GUARD_DEFAULTS.runnerImageRetentionDays,
+        1
+      )
+    ),
+    intervalMs: (
+      // Below a minute this would statfs and call the daemon constantly.
+      Math.max(
+        60,
+        numberFromEnv(
+          source,
+          "AGLIO_DISK_CLEANUP_SECONDS",
+          DISK_GUARD_DEFAULTS.intervalMs / 1e3,
+          0
+        )
+      ) * 1e3
+    )
+  };
+}
+function diskSpaceFromStatfs(stats) {
+  const totalBytes = stats.bsize * stats.blocks;
+  const freeBytes = stats.bsize * stats.bavail;
+  if (!Number.isFinite(totalBytes) || !Number.isFinite(freeBytes) || totalBytes <= 0) {
+    return null;
+  }
+  const usedBytes = Math.max(0, totalBytes - freeBytes);
+  return {
+    totalBytes,
+    freeBytes: Math.min(freeBytes, totalBytes),
+    usedBytes,
+    usedPercent: Math.min(100, Math.round(usedBytes / totalBytes * 100))
+  };
+}
+async function measureDiskSpace(path) {
+  let current = resolve2(path);
+  for (let depth = 0; depth < 32; depth += 1) {
+    try {
+      const stats = await statfs(current);
+      return diskSpaceFromStatfs({
+        bsize: Number(stats.bsize),
+        blocks: Number(stats.blocks),
+        bavail: Number(stats.bavail)
+      });
+    } catch {
+      const parent = dirname(current);
+      if (parent === current) return null;
+      current = parent;
+    }
+  }
+  return null;
+}
+function diskPressure(space, policy) {
+  if (!space) return "unknown";
+  if (policy.minFreeBytes <= 0) return "ok";
+  if (space.freeBytes <= policy.criticalFreeBytes) return "critical";
+  if (space.freeBytes <= policy.minFreeBytes) return "low";
+  return "ok";
+}
+function runnerImageRepository(image) {
+  const withoutDigest = image.split("@")[0] ?? image;
+  const slash = withoutDigest.lastIndexOf("/");
+  const colon = withoutDigest.lastIndexOf(":");
+  return colon > slash ? withoutDigest.slice(0, colon) : withoutDigest;
+}
+function runnerImageTag(image) {
+  const withoutDigest = image.split("@")[0] ?? image;
+  const slash = withoutDigest.lastIndexOf("/");
+  const colon = withoutDigest.lastIndexOf(":");
+  return colon > slash ? withoutDigest.slice(colon + 1) : "latest";
+}
+function selectStaleRunnerImages(images, input2) {
+  const keepTag = runnerImageTag(input2.keepImage);
+  const cutoffSeconds = input2.nowMs / 1e3 - input2.retentionDays * 24 * 60 * 60;
+  const stale = [];
+  for (const image of images) {
+    const tags = (image.RepoTags ?? []).filter((tag) => tag && tag.includes(":"));
+    const ours = tags.filter((tag) => runnerImageRepository(tag) === input2.repository);
+    if (ours.length === 0) continue;
+    if (ours.some((tag) => runnerImageTag(tag) === keepTag)) continue;
+    if ((image.Created ?? Number.POSITIVE_INFINITY) >= cutoffSeconds) continue;
+    stale.push(image.Id);
+  }
+  return stale;
+}
+function errorMessage(error62) {
+  return error62 instanceof Error ? error62.message : String(error62);
+}
+async function cleanupDockerDisk(input2) {
+  const pressure = diskPressure(input2.disk, input2.policy);
+  const result = {
+    status: "disabled",
+    pressure,
+    disk: input2.disk,
+    danglingImagesRemoved: 0,
+    runnerImagesRemoved: 0,
+    buildCachePruned: false,
+    spaceReclaimedBytes: 0,
+    errors: []
+  };
+  if (!input2.policy.enabled) return result;
+  let client = input2.client;
+  if (!client) {
+    try {
+      client = new Dockerode2({
+        socketPath: input2.socketPath ?? "/var/run/docker.sock"
+      });
+    } catch (error62) {
+      result.status = "failed";
+      result.errors.push(`docker client: ${errorMessage(error62)}`);
+      return result;
+    }
+  }
+  try {
+    const pruned = await client.pruneImages({ filters: { dangling: ["true"] } });
+    result.danglingImagesRemoved = pruned.ImagesDeleted?.length ?? 0;
+    result.spaceReclaimedBytes += pruned.SpaceReclaimed ?? 0;
+  } catch (error62) {
+    result.errors.push(`dangling images: ${errorMessage(error62)}`);
+  }
+  const underPressure = pressure === "low" || pressure === "critical";
+  if (underPressure && input2.policy.buildCachePrune) {
+    try {
+      const pruned = await client.pruneBuilder();
+      result.buildCachePruned = true;
+      result.spaceReclaimedBytes += pruned.SpaceReclaimed ?? 0;
+    } catch (error62) {
+      result.errors.push(`build cache: ${errorMessage(error62)}`);
+    }
+  }
+  if (underPressure && input2.runnerImage) {
+    const nowMs = input2.nowMs ?? Date.now();
+    try {
+      const images = await client.listImages({ all: false });
+      const stale = selectStaleRunnerImages(images, {
+        repository: runnerImageRepository(input2.runnerImage),
+        keepImage: input2.runnerImage,
+        nowMs,
+        retentionDays: input2.policy.runnerImageRetentionDays
+      });
+      for (const id of stale) {
+        try {
+          await client.getImage(id).remove({ force: false });
+          result.runnerImagesRemoved += 1;
+        } catch {
+        }
+      }
+    } catch (error62) {
+      result.errors.push(`runner images: ${errorMessage(error62)}`);
+    }
+  }
+  const didWork = result.danglingImagesRemoved > 0 || result.runnerImagesRemoved > 0 || result.buildCachePruned || result.spaceReclaimedBytes > 0;
+  result.status = result.errors.length > 0 ? "failed" : didWork ? "pruned" : "clean";
+  input2.log?.("docker disk cleanup", {
+    status: result.status,
+    pressure,
+    freeGb: input2.disk ? Number((input2.disk.freeBytes / GIB).toFixed(1)) : null,
+    reclaimedMb: Math.round(result.spaceReclaimedBytes / (1024 * 1024)),
+    danglingImages: result.danglingImagesRemoved,
+    runnerImages: result.runnerImagesRemoved,
+    buildCachePruned: result.buildCachePruned,
+    ...result.errors.length > 0 ? { errors: result.errors } : {}
+  });
+  return result;
+}
+
 // src/job-runner.ts
 import { spawn } from "node:child_process";
 import { access, mkdir, readFile, stat } from "node:fs/promises";
 import { homedir as homedir2 } from "node:os";
-import { isAbsolute, join as join3, relative as relative2, resolve as resolve2 } from "node:path";
+import { isAbsolute, join as join3, relative as relative2, resolve as resolve3 } from "node:path";
 
 // src/job-log-batcher.ts
 var DEFAULT_MAX_RETRIES = 3;
@@ -28839,7 +29063,7 @@ var JobLogBatcher = class {
     const base = this.options.retryDelayMs ?? DEFAULT_RETRY_DELAY_MS;
     const delay = base * 2 ** (attempt - 1);
     if (delay <= 0) return Promise.resolve();
-    return new Promise((resolve6) => setTimeout(resolve6, delay));
+    return new Promise((resolve7) => setTimeout(resolve7, delay));
   }
   dropPending() {
     this.parts = [];
@@ -28894,8 +29118,8 @@ function jobWorkspaceKey(job) {
   return safeSegment(job.runId || job.id);
 }
 function inside(root, target) {
-  const base = resolve2(root);
-  const full = resolve2(target);
+  const base = resolve3(root);
+  const full = resolve3(target);
   const rel = relative2(base, full);
   if (rel.startsWith("..") || isAbsolute(rel)) {
     throw new Error(`Path escapes the job workspace: ${target}`);
@@ -29120,7 +29344,7 @@ function runShell(input2) {
       onOutput: input2.onOutput
     });
   }
-  return new Promise((resolve6, reject) => {
+  return new Promise((resolve7, reject) => {
     if (input2.signal.aborted) {
       reject(new JobAbortedError());
       return;
@@ -29145,7 +29369,7 @@ function runShell(input2) {
     child.on("close", (code) => {
       input2.signal.removeEventListener("abort", abort);
       if (input2.signal.aborted) reject(new JobAbortedError());
-      else resolve6(code ?? 1);
+      else resolve7(code ?? 1);
     });
   });
 }
@@ -29201,11 +29425,11 @@ function errorText(error62) {
 
 // src/remote-worker.ts
 import { chmod, mkdir as mkdir4, readFile as readFile4, writeFile as writeFile2 } from "node:fs/promises";
-import { dirname as dirname2 } from "node:path";
+import { dirname as dirname3 } from "node:path";
 
 // src/remote-card-run.ts
 import { mkdir as mkdir2, readFile as readFile2, rm as rm2, stat as stat3, writeFile } from "node:fs/promises";
-import { dirname, isAbsolute as isAbsolute2, join as join5, relative as relative3, resolve as resolve3 } from "node:path";
+import { dirname as dirname2, isAbsolute as isAbsolute2, join as join5, relative as relative3, resolve as resolve4 } from "node:path";
 
 // ../../packages/agents/src/drivers.ts
 function withSystemPrompt(prompt, append) {
@@ -29860,7 +30084,7 @@ function credentialFiles(payload) {
 // src/remote-cleanup.ts
 import { access as access2, readdir, rm, stat as stat2 } from "node:fs/promises";
 import { join as join4 } from "node:path";
-import Dockerode2 from "dockerode";
+import Dockerode3 from "dockerode";
 var JOB_WORKSPACE_RETENTION_MS = 7 * 24 * 60 * 60 * 1e3;
 var STALE_CONTAINER_RETENTION_SECONDS = 24 * 60 * 60;
 var SESSION_RESUME_MARKER = "resume-pending";
@@ -29917,7 +30141,7 @@ async function cleanupRemoteWorkspaces(input2) {
   return { removed, scanned };
 }
 async function cleanupRemoteContainers(input2) {
-  const client = input2.client ?? new Dockerode2({ socketPath: input2.socketPath ?? "/var/run/docker.sock" });
+  const client = input2.client ?? new Dockerode3({ socketPath: input2.socketPath ?? "/var/run/docker.sock" });
   const nowSeconds = input2.nowSeconds ?? Math.floor(Date.now() / 1e3);
   const containers = await client.listContainers({ all: true, filters: { label: ["aglio.remote_job"] } }).catch(() => []);
   const logins = await client.listContainers({ all: true, filters: { label: ["aglio.remote_login"] } }).catch(() => []);
@@ -30033,8 +30257,8 @@ function shellArg2(value) {
   return /^[A-Za-z0-9_./:@-]+$/.test(value) ? value : `'${value.replace(/'/g, `'\\''`)}'`;
 }
 function inside2(root, target) {
-  const base = resolve3(root);
-  const full = resolve3(target);
+  const base = resolve4(root);
+  const full = resolve4(target);
   const rel = relative3(base, full);
   if (rel.startsWith("..") || isAbsolute2(rel)) throw new Error(`Path escapes the job workspace: ${target}`);
   return full;
@@ -30156,11 +30380,11 @@ async function runRemoteCardJob(deps) {
       throw new Error(`Credential "${context.agent.credential.label}" has no session files.`);
     }
     for (const [relativePath, content] of Object.entries(files)) {
-      const target = resolve3(homeHost, relativePath);
-      if (!target.startsWith(resolve3(homeHost))) {
+      const target = resolve4(homeHost, relativePath);
+      if (!target.startsWith(resolve4(homeHost))) {
         throw new Error(`Credential "${context.agent.credential.label}" has an unsafe file path.`);
       }
-      await mkdir2(dirname(target), { recursive: true, mode: 448 });
+      await mkdir2(dirname2(target), { recursive: true, mode: 448 });
       await writeFile(target, content, { encoding: "utf8", mode: 384 });
     }
     if (context.agent.provider === "local") {
@@ -30191,7 +30415,7 @@ async function runRemoteCardJob(deps) {
     }
     if (mcpRelativePath && mcpUrl) {
       const hostConfigPath = join5(toolDir, mcpRelativePath);
-      await mkdir2(dirname(hostConfigPath), { recursive: true });
+      await mkdir2(dirname2(hostConfigPath), { recursive: true });
       await writeFile(
         hostConfigPath,
         mcpConfigFor(context.agent.driver, mcpUrl, context.mcp.token, extraServers),
@@ -30600,7 +30824,7 @@ async function runRemoteCardJob(deps) {
 
 // src/remote-provider-login.ts
 import { mkdir as mkdir3, readFile as readFile3, rm as rm3 } from "node:fs/promises";
-import { join as join6, resolve as resolve4, sep } from "node:path";
+import { join as join6, resolve as resolve5, sep } from "node:path";
 var FINAL = ["completed", "failed", "cancelled", "expired"];
 var POLL_MS = 700;
 var KICKOFF_MS = 4e3;
@@ -30615,8 +30839,8 @@ async function runRemoteProviderLogin(input2) {
   const method = session.command;
   const root = join6(input2.workspace, "login");
   const home = join6(root, "home");
-  const target = resolve4(home, session.bundlePath);
-  if (!target.startsWith(resolve4(home) + sep)) {
+  const target = resolve5(home, session.bundlePath);
+  if (!target.startsWith(resolve5(home) + sep)) {
     return { state: "failed", error: "Unsafe credential bundle path." };
   }
   await mkdir3(home, { recursive: true, mode: 448 });
@@ -30759,7 +30983,7 @@ function fileTokenStore(path, apiUrl) {
       }
     },
     async save(token, enrollmentFingerprint2 = null) {
-      await mkdir4(dirname2(path), { recursive: true, mode: 448 });
+      await mkdir4(dirname3(path), { recursive: true, mode: 448 });
       await writeFile2(
         path,
         `${JSON.stringify({ token, apiUrl, enrollmentFingerprint: enrollmentFingerprint2 }, null, 2)}
@@ -31188,7 +31412,7 @@ function jobApi(config2, fetchImpl, signal) {
 }
 var TRANSIENT_RETRY_DELAYS_MS = [500, 1500];
 async function retryTransient(call, options = {}) {
-  const sleep2 = options.sleep ?? ((ms) => new Promise((resolve6) => setTimeout(resolve6, ms)));
+  const sleep2 = options.sleep ?? ((ms) => new Promise((resolve7) => setTimeout(resolve7, ms)));
   let lastError;
   for (let attempt = 0; attempt <= TRANSIENT_RETRY_DELAYS_MS.length; attempt += 1) {
     try {
@@ -31216,7 +31440,7 @@ async function runRemoteWorker(config2, deps = {}) {
     console.log(`[worker-agent] ${message}${extra === void 0 ? "" : ` ${JSON.stringify(extra)}`}`);
   });
   const store = deps.store ?? fileTokenStore(config2.stateFile, config2.apiUrl);
-  const sleep2 = deps.sleep ?? ((ms) => new Promise((resolve6) => setTimeout(resolve6, ms)));
+  const sleep2 = deps.sleep ?? ((ms) => new Promise((resolve7) => setTimeout(resolve7, ms)));
   const controller = new AbortController();
   const abort = () => controller.abort();
   deps.signal?.addEventListener("abort", abort, { once: true });
@@ -31225,6 +31449,7 @@ async function runRemoteWorker(config2, deps = {}) {
   let cleanupTimer = null;
   const activeJobIds = /* @__PURE__ */ new Set();
   const activeWorkspaceIds = /* @__PURE__ */ new Set();
+  const diskPolicy = config2.diskPolicy ?? resolveDiskGuardPolicy(process.env);
   let lastReason = null;
   const fail2 = (error62, where) => {
     const exitCode = fatalExitCode(error62);
@@ -31294,20 +31519,30 @@ async function runRemoteWorker(config2, deps = {}) {
       Math.max(resolved.heartbeatSeconds, 1) * 1e3
     );
     const runCleanup = async () => {
-      if (!config2.workspaceRoot || !config2.runnerImage) return;
       try {
-        const workspaces = await cleanupRemoteWorkspaces({
-          workspaceRoot: config2.workspaceRoot,
-          activeWorkspaceIds
-        });
-        const containers = await cleanupRemoteContainers({
-          socketPath: config2.dockerSocket,
-          activeJobIds
-        });
-        if (workspaces.removed || containers.removed) {
-          log("cleanup removed old job residue", {
-            workspaces: workspaces.removed,
-            containers: containers.removed
+        if (config2.workspaceRoot && config2.runnerImage) {
+          const workspaces = await cleanupRemoteWorkspaces({
+            workspaceRoot: config2.workspaceRoot,
+            activeWorkspaceIds
+          });
+          const containers = await cleanupRemoteContainers({
+            socketPath: config2.dockerSocket,
+            activeJobIds
+          });
+          if (workspaces.removed || containers.removed) {
+            log("cleanup removed old job residue", {
+              workspaces: workspaces.removed,
+              containers: containers.removed
+            });
+          }
+        }
+        if (config2.mode === "docker") {
+          await cleanupDockerDisk({
+            policy: diskPolicy,
+            disk: config2.workspaceRoot ? await measureDiskSpace(config2.workspaceRoot) : null,
+            runnerImage: config2.runnerImage ?? "",
+            socketPath: config2.dockerSocket,
+            log
           });
         }
       } catch (error62) {
@@ -31315,7 +31550,7 @@ async function runRemoteWorker(config2, deps = {}) {
       }
     };
     void runCleanup();
-    cleanupTimer = setInterval(() => void runCleanup(), 60 * 60 * 1e3);
+    cleanupTimer = setInterval(() => void runCleanup(), diskPolicy.intervalMs);
     const api = jobApi(config2, fetchImpl, controller.signal);
     const slots = Math.max(
       1,
@@ -31443,7 +31678,7 @@ async function runRemoteWorker(config2, deps = {}) {
 // src/remote-mcp.ts
 import { createServer as createServer2 } from "node:http";
 import { mkdir as mkdir5, readFile as readFile5, stat as stat4, writeFile as writeFile3 } from "node:fs/promises";
-import { basename, isAbsolute as isAbsolute3, join as join7, relative as relative4, resolve as resolve5 } from "node:path";
+import { basename, isAbsolute as isAbsolute3, join as join7, relative as relative4, resolve as resolve6 } from "node:path";
 
 // ../../node_modules/.pnpm/zod@4.6.7/node_modules/zod/v3/helpers/util.js
 var util;
@@ -31832,15 +32067,15 @@ var makeIssue = (params) => {
       message: issueData.message
     };
   }
-  let errorMessage = "";
+  let errorMessage2 = "";
   const maps = errorMaps.filter((m) => !!m).slice().reverse();
   for (const map2 of maps) {
-    errorMessage = map2(fullIssue, { data, defaultError: errorMessage }).message;
+    errorMessage2 = map2(fullIssue, { data, defaultError: errorMessage2 }).message;
   }
   return {
     ...issueData,
     path: fullPath,
-    message: errorMessage
+    message: errorMessage2
   };
 };
 function addIssueToContext(ctx, issueData) {
@@ -37161,19 +37396,19 @@ var getRefs = (options) => {
 };
 
 // ../../node_modules/.pnpm/zod-to-json-schema@3.25.2_zod@4.6.7/node_modules/zod-to-json-schema/dist/esm/errorMessages.js
-function addErrorMessage(res, key, errorMessage, refs) {
+function addErrorMessage(res, key, errorMessage2, refs) {
   if (!refs?.errorMessages)
     return;
-  if (errorMessage) {
+  if (errorMessage2) {
     res.errorMessage = {
       ...res.errorMessage,
-      [key]: errorMessage
+      [key]: errorMessage2
     };
   }
 }
-function setResponseValueAndErrors(res, key, value, errorMessage, refs) {
+function setResponseValueAndErrors(res, key, value, errorMessage2, refs) {
   res[key] = value;
-  addErrorMessage(res, key, errorMessage, refs);
+  addErrorMessage(res, key, errorMessage2, refs);
 }
 
 // ../../node_modules/.pnpm/zod-to-json-schema@3.25.2_zod@4.6.7/node_modules/zod-to-json-schema/dist/esm/getRelativePath.js
@@ -38487,8 +38722,8 @@ var Protocol = class {
                   if (queuedMessage.type === "response") {
                     resolver(message);
                   } else {
-                    const errorMessage = message;
-                    const error62 = new McpError(errorMessage.error.code, errorMessage.error.message, errorMessage.error.data);
+                    const errorMessage2 = message;
+                    const error62 = new McpError(errorMessage2.error.code, errorMessage2.error.message, errorMessage2.error.data);
                     resolver(error62);
                   }
                 } else {
@@ -38953,7 +39188,7 @@ var Protocol = class {
           return;
         }
         const pollInterval = task2.pollInterval ?? this._options?.defaultTaskPollInterval ?? 1e3;
-        await new Promise((resolve6) => setTimeout(resolve6, pollInterval));
+        await new Promise((resolve7) => setTimeout(resolve7, pollInterval));
         options?.signal?.throwIfAborted();
       }
     } catch (error62) {
@@ -38970,7 +39205,7 @@ var Protocol = class {
    */
   request(request2, resultSchema, options) {
     const { relatedRequestId, resumptionToken, onresumptiontoken, task, relatedTask } = options ?? {};
-    return new Promise((resolve6, reject) => {
+    return new Promise((resolve7, reject) => {
       const earlyReject = (error62) => {
         reject(error62);
       };
@@ -39048,7 +39283,7 @@ var Protocol = class {
           if (!parseResult.success) {
             reject(parseResult.error);
           } else {
-            resolve6(parseResult.data);
+            resolve7(parseResult.data);
           }
         } catch (error62) {
           reject(error62);
@@ -39310,12 +39545,12 @@ var Protocol = class {
       }
     } catch {
     }
-    return new Promise((resolve6, reject) => {
+    return new Promise((resolve7, reject) => {
       if (signal.aborted) {
         reject(new McpError(ErrorCode.InvalidRequest, "Request cancelled"));
         return;
       }
-      const timeoutId = setTimeout(resolve6, interval);
+      const timeoutId = setTimeout(resolve7, interval);
       signal.addEventListener("abort", () => {
         clearTimeout(timeoutId);
         reject(new McpError(ErrorCode.InvalidRequest, "Request cancelled"));
@@ -39799,23 +40034,23 @@ var Server = class extends Protocol {
       const wrappedHandler = async (request2, extra) => {
         const validatedRequest = safeParse3(CallToolRequestSchema, request2);
         if (!validatedRequest.success) {
-          const errorMessage = validatedRequest.error instanceof Error ? validatedRequest.error.message : String(validatedRequest.error);
-          throw new McpError(ErrorCode.InvalidParams, `Invalid tools/call request: ${errorMessage}`);
+          const errorMessage2 = validatedRequest.error instanceof Error ? validatedRequest.error.message : String(validatedRequest.error);
+          throw new McpError(ErrorCode.InvalidParams, `Invalid tools/call request: ${errorMessage2}`);
         }
         const { params } = validatedRequest.data;
         const result = await Promise.resolve(handler(request2, extra));
         if (params.task) {
           const taskValidationResult = safeParse3(CreateTaskResultSchema, result);
           if (!taskValidationResult.success) {
-            const errorMessage = taskValidationResult.error instanceof Error ? taskValidationResult.error.message : String(taskValidationResult.error);
-            throw new McpError(ErrorCode.InvalidParams, `Invalid task creation result: ${errorMessage}`);
+            const errorMessage2 = taskValidationResult.error instanceof Error ? taskValidationResult.error.message : String(taskValidationResult.error);
+            throw new McpError(ErrorCode.InvalidParams, `Invalid task creation result: ${errorMessage2}`);
           }
           return taskValidationResult.data;
         }
         const validationResult = safeParse3(CallToolResultSchema, result);
         if (!validationResult.success) {
-          const errorMessage = validationResult.error instanceof Error ? validationResult.error.message : String(validationResult.error);
-          throw new McpError(ErrorCode.InvalidParams, `Invalid tools/call result: ${errorMessage}`);
+          const errorMessage2 = validationResult.error instanceof Error ? validationResult.error.message : String(validationResult.error);
+          throw new McpError(ErrorCode.InvalidParams, `Invalid tools/call result: ${errorMessage2}`);
         }
         return validationResult.data;
       };
@@ -40346,12 +40581,12 @@ var McpServer = class {
    * @param errorMessage - The error message.
    * @returns The tool error result.
    */
-  createToolError(errorMessage) {
+  createToolError(errorMessage2) {
     return {
       content: [
         {
           type: "text",
-          text: errorMessage
+          text: errorMessage2
         }
       ],
       isError: true
@@ -40372,8 +40607,8 @@ var McpServer = class {
     const parseResult = await safeParseAsync3(schemaToParse, args ?? {});
     if (!parseResult.success) {
       const error62 = "error" in parseResult ? parseResult.error : "Unknown error";
-      const errorMessage = getParseErrorMessage(error62);
-      throw new McpError(ErrorCode.InvalidParams, `Input validation error: Invalid arguments for tool ${toolName}: ${errorMessage}`);
+      const errorMessage2 = getParseErrorMessage(error62);
+      throw new McpError(ErrorCode.InvalidParams, `Input validation error: Invalid arguments for tool ${toolName}: ${errorMessage2}`);
     }
     return parseResult.data;
   }
@@ -40397,8 +40632,8 @@ var McpServer = class {
     const parseResult = await safeParseAsync3(outputObj, result.structuredContent);
     if (!parseResult.success) {
       const error62 = "error" in parseResult ? parseResult.error : "Unknown error";
-      const errorMessage = getParseErrorMessage(error62);
-      throw new McpError(ErrorCode.InvalidParams, `Output validation error: Invalid structured content for tool ${toolName}: ${errorMessage}`);
+      const errorMessage2 = getParseErrorMessage(error62);
+      throw new McpError(ErrorCode.InvalidParams, `Output validation error: Invalid structured content for tool ${toolName}: ${errorMessage2}`);
     }
   }
   /**
@@ -40446,7 +40681,7 @@ var McpServer = class {
     let task = createTaskResult.task;
     const pollInterval = task.pollInterval ?? 5e3;
     while (task.status !== "completed" && task.status !== "failed" && task.status !== "cancelled") {
-      await new Promise((resolve6) => setTimeout(resolve6, pollInterval));
+      await new Promise((resolve7) => setTimeout(resolve7, pollInterval));
       const updatedTask = await extra.taskStore.getTask(taskId);
       if (!updatedTask) {
         throw new McpError(ErrorCode.InternalError, `Task ${taskId} not found during polling`);
@@ -40610,8 +40845,8 @@ var McpServer = class {
         const parseResult = await safeParseAsync3(argsObj, request2.params.arguments ?? {});
         if (!parseResult.success) {
           const error62 = "error" in parseResult ? parseResult.error : "Unknown error";
-          const errorMessage = getParseErrorMessage(error62);
-          throw new McpError(ErrorCode.InvalidParams, `Invalid arguments for prompt ${request2.params.name}: ${errorMessage}`);
+          const errorMessage2 = getParseErrorMessage(error62);
+          throw new McpError(ErrorCode.InvalidParams, `Invalid arguments for prompt ${request2.params.name}: ${errorMessage2}`);
         }
         const args = parseResult.data;
         const cb = prompt.callback;
@@ -41432,7 +41667,7 @@ var readBodyDirect = (request2) => {
     request2[bodyBufferKey] = buffered;
     return Promise.resolve(buffered);
   }
-  const promise2 = new Promise((resolve6, reject) => {
+  const promise2 = new Promise((resolve7, reject) => {
     const chunks = [];
     let settled = false;
     const finish2 = (callback) => {
@@ -41450,7 +41685,7 @@ var readBodyDirect = (request2) => {
         else if (recovered === void 0) reject(error62 ?? normalizeAbortError(request2, incoming));
         else {
           request2[bodyBufferKey] = recovered;
-          resolve6(recovered);
+          resolve7(recovered);
         }
       });
       return true;
@@ -41462,7 +41697,7 @@ var readBodyDirect = (request2) => {
       finish2(() => {
         const buffer = chunks.length === 1 ? chunks[0] : Buffer.concat(chunks);
         request2[bodyBufferKey] = buffer;
-        resolve6(buffer);
+        resolve7(buffer);
       });
     };
     const onError = (error62) => {
@@ -42009,7 +42244,7 @@ var responseViaResponseObject = async (res, outgoing, options = {}) => {
         });
         if (!chunk) {
           if (i === 1) {
-            await new Promise((resolve6) => setTimeout(resolve6));
+            await new Promise((resolve7) => setTimeout(resolve7));
             maxReadCount = 3;
             continue;
           }
@@ -42744,9 +42979,9 @@ data:
       const initRequest = messages.find((m) => isInitializeRequest(m));
       const clientProtocolVersion = initRequest ? initRequest.params.protocolVersion : req.headers.get("mcp-protocol-version") ?? DEFAULT_NEGOTIATED_PROTOCOL_VERSION;
       if (this._enableJsonResponse) {
-        return new Promise((resolve6) => {
+        return new Promise((resolve7) => {
           this._streamMapping.set(streamId, {
-            resolveJson: resolve6,
+            resolveJson: resolve7,
             cleanup: () => {
               this._streamMapping.delete(streamId);
             }
@@ -43149,10 +43384,10 @@ function fail(message) {
   return { isError: true, content: [{ type: "text", text: message }] };
 }
 function workspaceHostPath(workspace, input2) {
-  const root = resolve5(workspace);
+  const root = resolve6(workspace);
   const trimmed = input2.trim();
   const mapped = !trimmed.startsWith("/") ? join7(root, trimmed) : trimmed === root || trimmed.startsWith(`${root}/`) ? trimmed : join7(root, relative4("/workspace", trimmed));
-  const normalized = resolve5(mapped);
+  const normalized = resolve6(mapped);
   const rel = relative4(root, normalized);
   if (rel.startsWith("..") || isAbsolute3(rel)) throw new Error("Artifact path escapes the workspace");
   return normalized;
@@ -43588,7 +43823,8 @@ async function main() {
     hostWorkspaceRoot,
     runnerImage,
     dockerSocket,
-    extraHosts: runnerExtraHosts
+    extraHosts: runnerExtraHosts,
+    diskPolicy: resolveDiskGuardPolicy(process.env)
   };
   const controller = new AbortController();
   const stop = () => controller.abort();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aglio-worker",
-  "version": "0.12.7",
+  "version": "0.13.0",
   "description": "Host machine agent for Aglio: claims jobs over the API and starts aglio-runner containers.",
   "type": "module",
   "bin": {