eve 0.82.0 → 0.83.0

package/dist/src/runtime/resolve-agent-graph.js

@@ -1 +1 @@
-import{expectObjectRecord}from"#internal/authored-module.js";import{stripLogicalPathExtension}from"#discover/filesystem.js";import{ROOT_COMPILED_AGENT_NODE_ID}from"#compiler/manifest.js";import{validateCompiledModuleMap}from"#compiler/validate-artifact.js";import{createRuntimeSubagentRegistry}from"#runtime/subagents/registry.js";import{ROOT_RUNTIME_AGENT_NODE_ID}from"#runtime/graph.js";import{createRuntimeToolRegistry}from"#runtime/tools/registry.js";import{loadResolvedModuleExport}from"#runtime/resolve-helpers.js";import{createResolvedRuntimeTurnAgent}from"#runtime/agent/bootstrap.js";import{createWorkspacePromptSection}from"#runtime/workspace/spec.js";import{createRuntimeHookRegistry}from"#runtime/hooks/registry.js";import{resolveAgent}from"#runtime/resolve-agent.js";import{resolveDynamicSubagentDefinition}from"#runtime/resolve-dynamic-subagent.js";import{createRuntimeSandboxRegistry}from"#runtime/sandbox/registry.js";var ResolveRuntimeAgentGraphError=class extends Error{logicalPath;nodeId;sourceId;constructor(e,t={}){super(e),this.name=`ResolveRuntimeAgentGraphError`,t.logicalPath!==void 0&&(this.logicalPath=t.logicalPath),t.nodeId!==void 0&&(this.nodeId=t.nodeId),t.sourceId!==void 0&&(this.sourceId=t.sourceId)}};async function resolveRuntimeAgentGraph(e){validateCompiledModuleMap(e.manifest,e.moduleMap);let t=new Map,n=createChildNodeIdsByParentNodeId(e.manifest),r=new Map(e.manifest.subagents.map(e=>[e.nodeId,e])),i=await resolveRuntimeAgentNode({childNodeIdsByParentNodeId:n,manifest:e.manifest,moduleMap:e.moduleMap,nodeId:ROOT_COMPILED_AGENT_NODE_ID,nodesByNodeId:t,subagentNodesById:r});return attachInheritedSandboxWorkspaceResources({manifest:e.manifest,nodesByNodeId:t}),{nodesByNodeId:t,root:i}}async function resolveRuntimeAgentNode(e){let t=toRuntimeNodeId(e.nodeId);if(e.nodesByNodeId.has(t))throw new ResolveRuntimeAgentGraphError(`Found multiple runtime agent nodes for node id "${t}".`,{nodeId:t,sourceId:e.sourceId});let n=await resolveAgent({manifest:e.manifest,moduleMap:e.moduleMap,nodeId:e.nodeId}),r=await createRuntimeToolRegistry({tools:n.tools},{deferSelfAgent:n.config?.tool===`deferred`,nodeId:t}),i=createRuntimeSandboxRegistry({sandbox:n.sandbox,workspaceResourceRoot:n.workspaceResourceRoot}),a=createRuntimeSubagentRegistry({disabledToolNames:e.manifest.sourceComposition.entries.flatMap(e=>e.kind!==`disabled`||!e.source.logicalPath.startsWith(`tools/`)?[]:[stripLogicalPathExtension(e.source.logicalPath).replace(/^tools\//,``).replaceAll(`/`,`-`)]),reservedToolNames:r.preparedTools.map(e=>e.name),subagents:await resolveRuntimeSubagents({childNodeIdsByParentNodeId:e.childNodeIdsByParentNodeId,manifest:e.manifest,moduleMap:e.moduleMap,nodesByNodeId:e.nodesByNodeId,parentNodeId:e.nodeId,subagentNodesById:e.subagentNodesById})}),o={agent:n,channels:n.channels,hookRegistry:createRuntimeHookRegistry(n.hooks),nodeId:t,sandboxRegistry:i,sourceId:e.sourceId,subagentRegistry:a,toolRegistry:r,turnAgent:createResolvedRuntimeTurnAgent({agent:n,id:e.agentId,nodeId:t,tools:[...r.preparedTools,...a.preparedTools]})};return e.nodesByNodeId.set(t,o),o}async function resolveRuntimeSubagents(e){let t=[],n=e.childNodeIdsByParentNodeId.get(e.parentNodeId)??[];for(let r of n){let n=e.subagentNodesById.get(r);if(n===void 0)throw new ResolveRuntimeAgentGraphError(`Missing compiled subagent node "${r}" while resolving runtime subagents.`,{nodeId:toRuntimeNodeId(e.parentNodeId),sourceId:r});t.push(await resolveRuntimeSubagent({childNodeIdsByParentNodeId:e.childNodeIdsByParentNodeId,moduleMap:e.moduleMap,nodesByNodeId:e.nodesByNodeId,sourceRef:n,subagentNodesById:e.subagentNodesById}))}for(let n of e.manifest.remoteAgents)t.push(await resolveRuntimeRemoteAgent({moduleMap:e.moduleMap,nodeScopeId:e.parentNodeId,sourceRef:n}));return t}async function resolveRuntimeSubagent(e){let t={...e.sourceRef.configResolver===void 0?{description:e.sourceRef.description,tool:e.sourceRef.agent.config.tool}:{dynamic:await resolveDynamicSubagentDefinition({definition:e.sourceRef.configResolver,moduleMap:e.moduleMap,nodeId:e.sourceRef.nodeId})},kind:`subagent`,logicalPath:e.sourceRef.logicalPath,name:e.sourceRef.name,nodeId:toRuntimeNodeId(e.sourceRef.nodeId),sourceId:e.sourceRef.sourceId,sourceKind:`module`};return await resolveRuntimeAgentNode({agentId:e.sourceRef.name,childNodeIdsByParentNodeId:e.childNodeIdsByParentNodeId,manifest:e.sourceRef.agent,moduleMap:e.moduleMap,nodeId:e.sourceRef.nodeId,nodesByNodeId:e.nodesByNodeId,sourceId:e.sourceRef.sourceId,subagentNodesById:e.subagentNodesById}),t}async function resolveRuntimeRemoteAgent(e){let t=await loadResolvedModuleExport({definition:e.sourceRef,kindLabel:`remote agent`,moduleMap:e.moduleMap,nodeId:e.nodeScopeId}),n=expectObjectRecord(t,`Expected remote agent source "${e.sourceRef.logicalPath}" to export an object.`),r={description:e.sourceRef.description,kind:`remote`,logicalPath:e.sourceRef.logicalPath,name:e.sourceRef.name,nodeId:toRuntimeNodeId(e.sourceRef.nodeId),path:e.sourceRef.path,sourceId:e.sourceRef.sourceId,sourceKind:`module`,tool:e.sourceRef.tool,url:await resolveRemoteAgentUrl({bakedUrl:e.sourceRef.url,logicalPath:e.sourceRef.logicalPath,resolvedUrl:n.url})};typeof n.auth==`function`&&(r.auth=n.auth),n.forwardPrincipal===!0&&(r.forwardPrincipal=!0);let i=resolveRemoteAgentHeaders(n.headers);return i!==void 0&&(r.headers=i),r}async function resolveRemoteAgentUrl(e){if(typeof e.resolvedUrl==`function`){let t=await e.resolvedUrl();if(typeof t!=`string`||t.length===0)throw Error(`Remote agent "${e.logicalPath}" url function must return a non-empty string.`);return t}let t=e.bakedUrl??(typeof e.resolvedUrl==`string`?e.resolvedUrl:``);if(t.length===0)throw Error(`Remote agent "${e.logicalPath}" is missing a url.`);return t}function resolveRemoteAgentHeaders(e){if(e===void 0)return;if(typeof e==`function`)return e;if(typeof e!=`object`||!e||Array.isArray(e))return;let t={};for(let[n,r]of Object.entries(e))typeof r==`string`&&(t[n]=r);return t}function attachInheritedSandboxWorkspaceResources(e){let t=new Map(e.manifest.subagents.map(e=>[e.nodeId,e.parentNodeId]));for(let[n,r]of e.nodesByNodeId){if(r.sandboxRegistry.sandbox.definition.kind!==`parent`)continue;if(r.agent.dynamicSkillResolvers.length>0)throw new ResolveRuntimeAgentGraphError(`Sandbox "${r.sandboxRegistry.sandbox.definition.logicalPath}" selects parent.sandbox but agent node "${n}" defines dynamic skills. Remove the child dynamic skills or give the child its own sandbox.`,{nodeId:n});let i=t.get(n);if(i===void 0)throw new ResolveRuntimeAgentGraphError(`Sandbox "${r.sandboxRegistry.sandbox.definition.logicalPath}" selects parent.sandbox but agent node "${n}" has no parent.`,{nodeId:n});let a=resolveSandboxOwnerNode({nodeId:i,nodesByNodeId:e.nodesByNodeId,parentNodeIdByChildNodeId:t});r.sandboxRegistry.sandbox.inheritance={definition:a.sandboxRegistry.sandbox.definition,nodeId:a.nodeId,workspaceResourceRoot:a.sandboxRegistry.sandbox.workspaceResourceRoot};let o=createWorkspacePromptSection(a.agent.workspaceSpec);o!==void 0&&(r.turnAgent.instructions=[...r.turnAgent.instructions,o])}}function resolveSandboxOwnerNode(e){let t=e.nodesByNodeId.get(toRuntimeNodeId(e.nodeId));if(t===void 0)throw new ResolveRuntimeAgentGraphError(`Missing parent runtime node "${e.nodeId}".`,{nodeId:e.nodeId});if(t.sandboxRegistry.sandbox.definition.kind!==`parent`)return t;let n=e.parentNodeIdByChildNodeId.get(e.nodeId);if(n===void 0)throw new ResolveRuntimeAgentGraphError(`Inherited sandbox node "${e.nodeId}" has no parent.`,{nodeId:e.nodeId});return resolveSandboxOwnerNode({...e,nodeId:n})}function createChildNodeIdsByParentNodeId(e){let t=new Map;for(let n of e.subagents){let e=t.get(n.parentNodeId);if(e===void 0){t.set(n.parentNodeId,[n.nodeId]);continue}e.push(n.nodeId)}return t}function toRuntimeNodeId(e){return e===ROOT_COMPILED_AGENT_NODE_ID?ROOT_RUNTIME_AGENT_NODE_ID:e}export{resolveRuntimeAgentGraph};
+import{expectObjectRecord}from"#internal/authored-module.js";import{stripLogicalPathExtension}from"#discover/filesystem.js";import{ROOT_COMPILED_AGENT_NODE_ID}from"#compiler/manifest.js";import{validateCompiledModuleMap}from"#compiler/validate-artifact.js";import{createRuntimeSubagentRegistry}from"#runtime/subagents/registry.js";import{ROOT_RUNTIME_AGENT_NODE_ID}from"#runtime/graph.js";import{createRuntimeToolRegistry}from"#runtime/tools/registry.js";import{createRuntimeSandboxRegistry}from"#runtime/sandbox/registry.js";import{loadResolvedModuleExport}from"#runtime/resolve-helpers.js";import{createResolvedRuntimeTurnAgent}from"#runtime/agent/bootstrap.js";import{createWorkspacePromptSection}from"#runtime/workspace/spec.js";import{createRuntimeHookRegistry}from"#runtime/hooks/registry.js";import{resolveAgent}from"#runtime/resolve-agent.js";import{resolveDynamicSubagentDefinition}from"#runtime/resolve-dynamic-subagent.js";var ResolveRuntimeAgentGraphError=class extends Error{logicalPath;nodeId;sourceId;constructor(e,t={}){super(e),this.name=`ResolveRuntimeAgentGraphError`,t.logicalPath!==void 0&&(this.logicalPath=t.logicalPath),t.nodeId!==void 0&&(this.nodeId=t.nodeId),t.sourceId!==void 0&&(this.sourceId=t.sourceId)}};async function resolveRuntimeAgentGraph(e){validateCompiledModuleMap(e.manifest,e.moduleMap);let t=new Map,n=createChildNodeIdsByParentNodeId(e.manifest),r=new Map(e.manifest.subagents.map(e=>[e.nodeId,e])),i=await resolveRuntimeAgentNode({childNodeIdsByParentNodeId:n,manifest:e.manifest,moduleMap:e.moduleMap,nodeId:ROOT_COMPILED_AGENT_NODE_ID,nodesByNodeId:t,subagentNodesById:r});return attachInheritedSandboxWorkspaceResources({manifest:e.manifest,nodesByNodeId:t}),{nodesByNodeId:t,root:i}}async function resolveRuntimeAgentNode(e){let t=toRuntimeNodeId(e.nodeId);if(e.nodesByNodeId.has(t))throw new ResolveRuntimeAgentGraphError(`Found multiple runtime agent nodes for node id "${t}".`,{nodeId:t,sourceId:e.sourceId});let n=await resolveAgent({manifest:e.manifest,moduleMap:e.moduleMap,nodeId:e.nodeId}),r=await createRuntimeToolRegistry({tools:n.tools},{deferSelfAgent:n.config?.tool===`deferred`,nodeId:t}),i=createRuntimeSandboxRegistry({sandbox:n.sandbox,workspaceResourceRoot:n.workspaceResourceRoot}),a=createRuntimeSubagentRegistry({disabledToolNames:e.manifest.sourceComposition.entries.flatMap(e=>e.kind!==`disabled`||!e.source.logicalPath.startsWith(`tools/`)?[]:[stripLogicalPathExtension(e.source.logicalPath).replace(/^tools\//,``).replaceAll(`/`,`-`)]),reservedToolNames:r.preparedTools.map(e=>e.name),subagents:await resolveRuntimeSubagents({childNodeIdsByParentNodeId:e.childNodeIdsByParentNodeId,manifest:e.manifest,moduleMap:e.moduleMap,nodesByNodeId:e.nodesByNodeId,parentNodeId:e.nodeId,subagentNodesById:e.subagentNodesById})}),o={agent:n,channels:n.channels,hookRegistry:createRuntimeHookRegistry(n.hooks),nodeId:t,sandboxRegistry:i,sourceId:e.sourceId,subagentRegistry:a,toolRegistry:r,turnAgent:createResolvedRuntimeTurnAgent({agent:n,id:e.agentId,nodeId:t,tools:[...r.preparedTools,...a.preparedTools]})};return e.nodesByNodeId.set(t,o),o}async function resolveRuntimeSubagents(e){let t=[],n=e.childNodeIdsByParentNodeId.get(e.parentNodeId)??[];for(let r of n){let n=e.subagentNodesById.get(r);if(n===void 0)throw new ResolveRuntimeAgentGraphError(`Missing compiled subagent node "${r}" while resolving runtime subagents.`,{nodeId:toRuntimeNodeId(e.parentNodeId),sourceId:r});t.push(await resolveRuntimeSubagent({childNodeIdsByParentNodeId:e.childNodeIdsByParentNodeId,moduleMap:e.moduleMap,nodesByNodeId:e.nodesByNodeId,sourceRef:n,subagentNodesById:e.subagentNodesById}))}for(let n of e.manifest.remoteAgents)t.push(await resolveRuntimeRemoteAgent({moduleMap:e.moduleMap,nodeScopeId:e.parentNodeId,sourceRef:n}));return t}async function resolveRuntimeSubagent(e){let t={...e.sourceRef.configResolver===void 0?{description:e.sourceRef.description,tool:e.sourceRef.agent.config.tool}:{dynamic:await resolveDynamicSubagentDefinition({definition:e.sourceRef.configResolver,moduleMap:e.moduleMap,nodeId:e.sourceRef.nodeId})},kind:`subagent`,logicalPath:e.sourceRef.logicalPath,name:e.sourceRef.name,nodeId:toRuntimeNodeId(e.sourceRef.nodeId),sourceId:e.sourceRef.sourceId,sourceKind:`module`};return await resolveRuntimeAgentNode({agentId:e.sourceRef.name,childNodeIdsByParentNodeId:e.childNodeIdsByParentNodeId,manifest:e.sourceRef.agent,moduleMap:e.moduleMap,nodeId:e.sourceRef.nodeId,nodesByNodeId:e.nodesByNodeId,sourceId:e.sourceRef.sourceId,subagentNodesById:e.subagentNodesById}),t}async function resolveRuntimeRemoteAgent(e){let t=await loadResolvedModuleExport({definition:e.sourceRef,kindLabel:`remote agent`,moduleMap:e.moduleMap,nodeId:e.nodeScopeId}),n=expectObjectRecord(t,`Expected remote agent source "${e.sourceRef.logicalPath}" to export an object.`),r={description:e.sourceRef.description,kind:`remote`,logicalPath:e.sourceRef.logicalPath,name:e.sourceRef.name,nodeId:toRuntimeNodeId(e.sourceRef.nodeId),path:e.sourceRef.path,sourceId:e.sourceRef.sourceId,sourceKind:`module`,tool:e.sourceRef.tool,url:await resolveRemoteAgentUrl({bakedUrl:e.sourceRef.url,logicalPath:e.sourceRef.logicalPath,resolvedUrl:n.url})};typeof n.auth==`function`&&(r.auth=n.auth),n.forwardPrincipal===!0&&(r.forwardPrincipal=!0);let i=resolveRemoteAgentHeaders(n.headers);return i!==void 0&&(r.headers=i),r}async function resolveRemoteAgentUrl(e){if(typeof e.resolvedUrl==`function`){let t=await e.resolvedUrl();if(typeof t!=`string`||t.length===0)throw Error(`Remote agent "${e.logicalPath}" url function must return a non-empty string.`);return t}let t=e.bakedUrl??(typeof e.resolvedUrl==`string`?e.resolvedUrl:``);if(t.length===0)throw Error(`Remote agent "${e.logicalPath}" is missing a url.`);return t}function resolveRemoteAgentHeaders(e){if(e===void 0)return;if(typeof e==`function`)return e;if(typeof e!=`object`||!e||Array.isArray(e))return;let t={};for(let[n,r]of Object.entries(e))typeof r==`string`&&(t[n]=r);return t}function attachInheritedSandboxWorkspaceResources(e){let t=new Map(e.manifest.subagents.map(e=>[e.nodeId,e.parentNodeId]));for(let[n,r]of e.nodesByNodeId){if(r.sandboxRegistry.sandbox.definition.kind!==`parent`)continue;if(r.agent.dynamicSkillResolvers.length>0)throw new ResolveRuntimeAgentGraphError(`Sandbox "${r.sandboxRegistry.sandbox.definition.logicalPath}" selects parent.sandbox but agent node "${n}" defines dynamic skills. Remove the child dynamic skills or give the child its own sandbox.`,{nodeId:n});let i=t.get(n);if(i===void 0)throw new ResolveRuntimeAgentGraphError(`Sandbox "${r.sandboxRegistry.sandbox.definition.logicalPath}" selects parent.sandbox but agent node "${n}" has no parent. Only a declared subagent can share its parent's sandbox with defineParentSandbox(). Give this agent its own sandbox with defineSandbox() and an exported environment.`,{nodeId:n});let a=resolveSandboxOwnerNode({nodeId:i,nodesByNodeId:e.nodesByNodeId,parentNodeIdByChildNodeId:t});r.sandboxRegistry.sandbox.inheritance={definition:a.sandboxRegistry.sandbox.definition,nodeId:a.nodeId,workspaceResourceRoot:a.sandboxRegistry.sandbox.workspaceResourceRoot};let o=createWorkspacePromptSection(a.agent.workspaceSpec);o!==void 0&&(r.turnAgent.instructions=[...r.turnAgent.instructions,o])}}function resolveSandboxOwnerNode(e){let t=e.nodesByNodeId.get(toRuntimeNodeId(e.nodeId));if(t===void 0)throw new ResolveRuntimeAgentGraphError(`Missing parent runtime node "${e.nodeId}".`,{nodeId:e.nodeId});if(t.sandboxRegistry.sandbox.definition.kind!==`parent`)return t;let n=e.parentNodeIdByChildNodeId.get(e.nodeId);if(n===void 0)throw new ResolveRuntimeAgentGraphError(`Inherited sandbox node "${e.nodeId}" has no parent.`,{nodeId:e.nodeId});return resolveSandboxOwnerNode({...e,nodeId:n})}function createChildNodeIdsByParentNodeId(e){let t=new Map;for(let n of e.subagents){let e=t.get(n.parentNodeId);if(e===void 0){t.set(n.parentNodeId,[n.nodeId]);continue}e.push(n.nodeId)}return t}function toRuntimeNodeId(e){return e===ROOT_COMPILED_AGENT_NODE_ID?ROOT_RUNTIME_AGENT_NODE_ID:e}export{resolveRuntimeAgentGraph};

package/dist/src/runtime/resolve-agent.js

@@ -1 +1 @@
-import{normalizeAgentDefinition}from"#internal/authored-definition/core.js";import{resolveConnectionDefinition}from"#runtime/resolve-connection.js";import{createResolvedModuleSourceRef,loadResolvedModuleExport}from"#runtime/resolve-helpers.js";import{resolveChannelDefinition}from"#runtime/resolve-channel.js";import{resolveDynamicConnectionDefinition}from"#runtime/resolve-dynamic-connection.js";import{resolveHookDefinition}from"#runtime/resolve-hook.js";import{resolveSandboxDefinition}from"#runtime/resolve-sandbox.js";import{resolveDynamicInstructionsDefinition}from"#runtime/resolve-dynamic-instructions.js";import{resolveDynamicSkillDefinition}from"#runtime/resolve-dynamic-skill.js";import{resolveDynamicToolDefinition}from"#runtime/resolve-dynamic-tool.js";import{resolveToolDefinition}from"#runtime/resolve-tool.js";import{resolveMemoryDefinition}from"#runtime/resolve-memory.js";async function resolveAgent(e){let t=e.manifest.skills.map(t=>({...t,owner:requireCompiledSourceOwner(e.manifest,t),metadata:t.metadata===void 0?void 0:{...t.metadata}})),n=await Promise.all(e.manifest.channelRoutes.effective.map(t=>resolveChannelDefinition(t,e.moduleMap,e.nodeId))),r=await Promise.all(e.manifest.tools.map(t=>resolveToolDefinition(t,e.moduleMap,e.nodeId,requireBindingOwner(e.manifest,t.sourceId)))),i=await Promise.all(e.manifest.dynamicConnections.map(t=>resolveDynamicConnectionDefinition(t,e.moduleMap,e.nodeId))),a=await Promise.all((e.manifest.dynamicInstructions??[]).map(t=>resolveDynamicInstructionsDefinition(t,e.moduleMap,e.nodeId))),o=await Promise.all((e.manifest.dynamicSkills??[]).map(t=>resolveDynamicSkillDefinition(t,e.moduleMap,e.nodeId))),s=await Promise.all(e.manifest.dynamicTools.map(t=>resolveDynamicToolDefinition(t,e.moduleMap,e.nodeId))),c=await Promise.all(e.manifest.hooks.map(t=>resolveHookDefinition(t,e.moduleMap,e.nodeId))),l=await Promise.all(e.manifest.connections.map(t=>resolveConnectionDefinition(t,e.moduleMap,e.nodeId))),u=await Promise.all(e.manifest.memories.map(t=>resolveMemoryDefinition(t,e.moduleMap,e.nodeId))),d=await resolveSandboxDefinition(e.manifest.sandbox,e.moduleMap,e.nodeId),f=e.manifest.instructions.map(t=>createResolvedInstructionsDefinition(e.manifest,t)),p=e.manifest.workspaceResourceRoot,m={channels:n,connections:l,dynamicConnectionResolvers:i,dynamicInstructionsResolvers:a,dynamicSkillResolvers:o,dynamicToolResolvers:s,hooks:c,instructions:f,metadata:{agentRoot:e.manifest.agentRoot,appRoot:e.manifest.appRoot,diagnosticsSummary:e.manifest.diagnosticsSummary},memories:u,sandbox:d,workspaceResourceRoot:p,skills:t,tools:r,workspaceSpec:{rootEntries:[...p.rootEntries]}};return`config`in e.manifest?{...m,config:createResolvedAgentConfig(e.manifest,await loadSessionUsageLimit(e.manifest,e.moduleMap,e.nodeId))}:m}async function loadSessionUsageLimit(e,t,n){let r=e.config.source;if(e.config.limits?.sessionUsage!==!0||r===void 0)return;let i=await loadResolvedModuleExport({definition:r,kindLabel:`agent config`,moduleMap:t,nodeId:n});return normalizeAgentDefinition(i,`Expected the authored agent config export "${r.exportName??`default`}" from "${r.logicalPath}" to match the public eve shape.`).limits?.sessionUsage}function requireBindingOwner(e,t){let n=e.bindings[t];if(n===void 0)throw Error(`Compiled source "${t}" has no binding.`);return n.owner}function createResolvedInstructionsDefinition(e,t){return{content:t.content,name:t.name,owner:requireCompiledSourceOwner(e,t),logicalPath:t.logicalPath,role:t.role,sourceId:t.sourceId,sourceKind:t.sourceKind}}function requireCompiledSourceOwner(e,t){let n=e.bindings[t.sourceId]?.owner??t.owner;if(n===void 0)throw Error(`Compiled source "${t.sourceId}" has no owner.`);return n}function createResolvedAgentConfig(e,t){let n={name:e.config.name};if(e.config.defaultTools!==void 0&&(n.defaultTools=e.config.defaultTools),e.config.description!==void 0&&(n.description=e.config.description),e.config.compaction!==void 0){let t={};e.config.compaction.model!==void 0&&(t.model=e.config.compaction.model.source===void 0?{contextWindowTokens:e.config.compaction.model.contextWindowTokens,id:e.config.compaction.model.id,maxOutputTokens:e.config.compaction.model.maxOutputTokens,providerOptions:e.config.compaction.model.providerOptions}:{contextWindowTokens:e.config.compaction.model.contextWindowTokens,id:e.config.compaction.model.id,maxOutputTokens:e.config.compaction.model.maxOutputTokens,providerOptions:e.config.compaction.model.providerOptions,source:{exportName:e.config.compaction.model.source.exportName,sourceKind:`module`,logicalPath:e.config.compaction.model.source.logicalPath,sourceId:e.config.compaction.model.source.sourceId}}),e.config.compaction.thresholdPercent!==void 0&&(t.thresholdPercent=e.config.compaction.thresholdPercent),n.compaction=t}if(e.config.experimental!==void 0&&(n.experimental={workflow:e.config.experimental.workflow===void 0?void 0:{modelCallsPerStep:e.config.experimental.workflow.modelCallsPerStep,retention:e.config.experimental.workflow.retention,world:e.config.experimental.workflow.world}}),e.config.reasoning!==void 0&&(n.reasoning=e.config.reasoning),e.config.source!==void 0&&(n.source=createResolvedModuleSourceRef(e.config.source)),e.config.tool!==void 0&&(n.tool=e.config.tool),e.config.limits!==void 0&&(n.limits={sessionTimeoutMs:e.config.limits.sessionTimeoutMs,sessionUsage:t}),e.config.dynamicModel!==void 0)return{...n,dynamicModel:{...createResolvedModuleSourceRef(e.config.dynamicModel),eventNames:[...e.config.dynamicModel.eventNames]}};let r=e.config.model;return{...n,model:r.source===void 0?{id:r.id,contextWindowTokens:r.contextWindowTokens,maxOutputTokens:r.maxOutputTokens,providerOptions:r.providerOptions}:{contextWindowTokens:r.contextWindowTokens,id:r.id,maxOutputTokens:r.maxOutputTokens,promptCache:r.promptCache,providerOptions:r.providerOptions,source:{exportName:r.source.exportName,sourceKind:`module`,logicalPath:r.source.logicalPath,sourceId:r.source.sourceId}}}}export{resolveAgent};
+import{normalizeAgentDefinition}from"#internal/authored-definition/core.js";import{resolveConnectionDefinition}from"#runtime/resolve-connection.js";import{createResolvedModuleSourceRef,loadResolvedModuleExport}from"#runtime/resolve-helpers.js";import{resolveChannelDefinition}from"#runtime/resolve-channel.js";import{resolveDynamicConnectionDefinition}from"#runtime/resolve-dynamic-connection.js";import{resolveHookDefinition}from"#runtime/resolve-hook.js";import{resolveSandboxDefinition}from"#runtime/resolve-sandbox.js";import{resolveDynamicInstructionsDefinition}from"#runtime/resolve-dynamic-instructions.js";import{resolveDynamicSkillDefinition}from"#runtime/resolve-dynamic-skill.js";import{resolveDynamicToolDefinition}from"#runtime/resolve-dynamic-tool.js";import{resolveToolDefinition}from"#runtime/resolve-tool.js";import{resolveMemoryDefinition}from"#runtime/resolve-memory.js";async function resolveAgent(e){let t=e.manifest.skills.map(t=>({...t,owner:requireCompiledSourceOwner(e.manifest,t),metadata:t.metadata===void 0?void 0:{...t.metadata}})),n=await Promise.all(e.manifest.channelRoutes.effective.map(t=>resolveChannelDefinition(t,e.moduleMap,e.nodeId))),r=await Promise.all(e.manifest.tools.map(t=>resolveToolDefinition(t,e.moduleMap,e.nodeId,requireBindingOwner(e.manifest,t.sourceId)))),i=await Promise.all(e.manifest.dynamicConnections.map(t=>resolveDynamicConnectionDefinition(t,e.moduleMap,e.nodeId))),a=await Promise.all((e.manifest.dynamicInstructions??[]).map(t=>resolveDynamicInstructionsDefinition(t,e.moduleMap,e.nodeId))),o=await Promise.all((e.manifest.dynamicSkills??[]).map(t=>resolveDynamicSkillDefinition(t,e.moduleMap,e.nodeId))),s=await Promise.all(e.manifest.dynamicTools.map(t=>resolveDynamicToolDefinition(t,e.moduleMap,e.nodeId))),c=await Promise.all(e.manifest.hooks.map(t=>resolveHookDefinition(t,e.moduleMap,e.nodeId))),l=await Promise.all(e.manifest.connections.map(t=>resolveConnectionDefinition(t,e.moduleMap,e.nodeId))),u=await Promise.all(e.manifest.memories.map(t=>resolveMemoryDefinition(t,e.moduleMap,e.nodeId))),d=await resolveSandboxDefinition(e.manifest.sandbox,e.moduleMap,e.nodeId),f=e.manifest.instructions.map(t=>createResolvedInstructionsDefinition(e.manifest,t)),p=e.manifest.workspaceResourceRoot,m={channels:n,connections:l,dynamicConnectionResolvers:i,dynamicInstructionsResolvers:a,dynamicSkillResolvers:o,dynamicToolResolvers:s,hooks:c,instructions:f,metadata:{agentRoot:e.manifest.agentRoot,appRoot:e.manifest.appRoot,diagnosticsSummary:e.manifest.diagnosticsSummary},memories:u,sandbox:d,workspaceResourceRoot:p,skills:t,tools:r,workspaceSpec:{rootEntries:[...p.rootEntries]}};return`config`in e.manifest?{...m,config:createResolvedAgentConfig(e.manifest,await loadSessionUsageLimit(e.manifest,e.moduleMap,e.nodeId))}:m}async function loadSessionUsageLimit(e,t,n){let r=e.config.source;if(e.config.limits?.sessionUsage!==!0||r===void 0)return;let i=await loadResolvedModuleExport({definition:r,kindLabel:`agent config`,moduleMap:t,nodeId:n});return normalizeAgentDefinition(i,`Expected the authored agent config export "${r.exportName??`default`}" from "${r.logicalPath}" to match the public eve shape.`).limits?.sessionUsage}function requireBindingOwner(e,t){let n=e.bindings[t];if(n===void 0)throw Error(`Compiled source "${t}" has no binding.`);return n.owner}function createResolvedInstructionsDefinition(e,t){return{content:t.content,name:t.name,owner:requireCompiledSourceOwner(e,t),logicalPath:t.logicalPath,role:t.role,sourceId:t.sourceId,sourceKind:t.sourceKind}}function requireCompiledSourceOwner(e,t){let n=e.bindings[t.sourceId]?.owner??t.owner;if(n===void 0)throw Error(`Compiled source "${t.sourceId}" has no owner.`);return n}function createResolvedAgentConfig(e,t){let n={name:e.config.name};if(e.config.defaultTools!==void 0&&(n.defaultTools=e.config.defaultTools),e.config.description!==void 0&&(n.description=e.config.description),e.config.compaction!==void 0){let t={};e.config.compaction.model!==void 0&&(t.model=e.config.compaction.model.source===void 0?{contextWindowTokens:e.config.compaction.model.contextWindowTokens,id:e.config.compaction.model.id,maxOutputTokens:e.config.compaction.model.maxOutputTokens,providerOptions:e.config.compaction.model.providerOptions}:{contextWindowTokens:e.config.compaction.model.contextWindowTokens,id:e.config.compaction.model.id,maxOutputTokens:e.config.compaction.model.maxOutputTokens,providerOptions:e.config.compaction.model.providerOptions,source:{exportName:e.config.compaction.model.source.exportName,sourceKind:`module`,logicalPath:e.config.compaction.model.source.logicalPath,sourceId:e.config.compaction.model.source.sourceId},sourceField:e.config.compaction.model.sourceField}),e.config.compaction.thresholdPercent!==void 0&&(t.thresholdPercent=e.config.compaction.thresholdPercent),n.compaction=t}if(e.config.experimental!==void 0&&(n.experimental={workflow:e.config.experimental.workflow===void 0?void 0:{modelCallsPerStep:e.config.experimental.workflow.modelCallsPerStep,retention:e.config.experimental.workflow.retention,world:e.config.experimental.workflow.world}}),e.config.reasoning!==void 0&&(n.reasoning=e.config.reasoning),e.config.source!==void 0&&(n.source=createResolvedModuleSourceRef(e.config.source)),e.config.tool!==void 0&&(n.tool=e.config.tool),e.config.limits!==void 0&&(n.limits={sessionTimeoutMs:e.config.limits.sessionTimeoutMs,sessionUsage:t}),e.config.dynamicModel!==void 0)return{...n,dynamicModel:{...createResolvedModuleSourceRef(e.config.dynamicModel),eventNames:[...e.config.dynamicModel.eventNames]}};let r=e.config.model;return{...n,model:r.source===void 0?{id:r.id,contextWindowTokens:r.contextWindowTokens,maxOutputTokens:r.maxOutputTokens,providerOptions:r.providerOptions}:{contextWindowTokens:r.contextWindowTokens,id:r.id,maxOutputTokens:r.maxOutputTokens,promptCache:r.promptCache,providerOptions:r.providerOptions,source:{exportName:r.source.exportName,sourceKind:`module`,logicalPath:r.source.logicalPath,sourceId:r.source.sourceId}}}}export{resolveAgent};

package/dist/src/runtime/resolve-channel.js

@@ -1 +1 @@
-import{setChannelInstrumentationKind}from"#channel/compiled-channel.js";import{toErrorMessage}from"#shared/errors.js";import{normalizeChannelDefinition}from"#internal/authored-definition/channel.js";import{ResolveAgentError,createResolvedModuleSourceRef,loadResolvedModuleExport}from"#runtime/resolve-helpers.js";import{HTTP_ADAPTER_KIND}from"#channel/http.js";import{isHttpRouteDefinition,isWebSocketRouteDefinition}from"#channel/routes.js";async function resolveChannelDefinition(e,t,n){try{let r=await loadResolvedModuleExport({definition:e,kindLabel:`channel`,moduleMap:t,nodeId:n}),i=normalizeChannelDefinition(r,`Expected the channel export "${e.exportName??`default`}" from "${e.logicalPath}" to match the public eve shape.`),a=createResolvedModuleSourceRef({exportName:e.exportName,logicalPath:e.logicalPath,sourceId:e.sourceId}),o=i.routes.find(t=>t.method.toUpperCase()===e.method.toUpperCase()&&t.path===e.urlPath),s=`channel:${e.name}`;setChannelInstrumentationKind(i,s);let c=i.adapter;c&&c.kind!==HTTP_ADAPTER_KIND&&(c.kind=s);let l=resolveHttpRoute(e,o),u=resolveWebSocketRoute(e,o);return{name:e.name,method:e.method,urlPath:e.urlPath,cors:e.cors,fetch:async(e,t)=>l?l.handler(e,t):Response.json({error:`No matching route handler.`,ok:!1},{status:404}),handler:l?.handler,websocket:u?.handler,receive:i.receive,definition:i,adapter:c,turnPolicy:i.turnPolicy,...a}}catch(t){throw t instanceof ResolveAgentError?t:new ResolveAgentError(`Failed to attach the channel definition from "${e.logicalPath}": ${toErrorMessage(t)}`,{logicalPath:e.logicalPath,sourceId:e.sourceId})}}function resolveHttpRoute(e,t){if(t!==void 0&&e.method!==`WEBSOCKET`&&isHttpRouteDefinition(t))return t}function resolveWebSocketRoute(e,t){if(t!==void 0&&e.method===`WEBSOCKET`&&isWebSocketRouteDefinition(t))return t}export{resolveChannelDefinition};
+import{setChannelInstrumentationKind}from"#channel/compiled-channel.js";import{toErrorMessage}from"#shared/errors.js";import{normalizeChannelDefinition}from"#internal/authored-definition/channel.js";import{ResolveAgentError,createResolvedModuleSourceRef,loadResolvedModuleExport}from"#runtime/resolve-helpers.js";import{isHttpRouteDefinition,isWebSocketRouteDefinition}from"#channel/routes.js";import{HTTP_ADAPTER_KIND}from"#channel/http.js";async function resolveChannelDefinition(e,t,n){try{let r=await loadResolvedModuleExport({definition:e,kindLabel:`channel`,moduleMap:t,nodeId:n}),i=normalizeChannelDefinition(r,`Expected the channel export "${e.exportName??`default`}" from "${e.logicalPath}" to match the public eve shape.`),a=createResolvedModuleSourceRef({exportName:e.exportName,logicalPath:e.logicalPath,sourceId:e.sourceId}),o=i.routes.find(t=>t.method.toUpperCase()===e.method.toUpperCase()&&t.path===e.urlPath),s=`channel:${e.name}`;setChannelInstrumentationKind(i,s);let c=i.adapter;c&&c.kind!==HTTP_ADAPTER_KIND&&(c.kind=s);let l=resolveHttpRoute(e,o),u=resolveWebSocketRoute(e,o);return{name:e.name,method:e.method,urlPath:e.urlPath,cors:e.cors,fetch:async(e,t)=>l?l.handler(e,t):Response.json({error:`No matching route handler.`,ok:!1},{status:404}),handler:l?.handler,websocket:u?.handler,receive:i.receive,definition:i,adapter:c,turnPolicy:i.turnPolicy,...a}}catch(t){throw t instanceof ResolveAgentError?t:new ResolveAgentError(`Failed to attach the channel definition from "${e.logicalPath}": ${toErrorMessage(t)}`,{logicalPath:e.logicalPath,sourceId:e.sourceId})}}function resolveHttpRoute(e,t){if(t!==void 0&&e.method!==`WEBSOCKET`&&isHttpRouteDefinition(t))return t}function resolveWebSocketRoute(e,t){if(t!==void 0&&e.method===`WEBSOCKET`&&isWebSocketRouteDefinition(t))return t}export{resolveChannelDefinition};

package/dist/src/runtime/resolve-sandbox.js

@@ -1 +1 @@
-import{expectObjectRecord,getAuthoredModuleExport}from"#internal/authored-module.js";import{ROOT_COMPILED_AGENT_NODE_ID}from"#compiler/manifest.js";import{getBoundSandboxEnvironment,isSandboxEnvironment}from"#shared/sandbox-environment.js";import{defineParentSandbox}from"#public/definitions/sandbox.js";import{ResolveAgentError}from"#runtime/resolve-helpers.js";async function resolveSandboxDefinition(e,t,n){if(e.inheritsParent===!0)return{exportName:e.exportName,kind:`parent`,logicalPath:e.logicalPath,revisionHash:e.revisionHash,selector:defineParentSandbox(),sourceId:e.sourceId,sourceKind:`module`};let r=t.nodes[n??ROOT_COMPILED_AGENT_NODE_ID]?.modules[e.sourceId],i=expectObjectRecord(r,`Missing sandbox module "${e.logicalPath}".`),a=getAuthoredModuleExport(i,e);if(typeof a!=`function`)throw new ResolveAgentError(`Sandbox "${e.logicalPath}" does not export a selector.`);let o=e.environmentExportName?i[e.environmentExportName]:getBoundSandboxEnvironment(a),s={exportName:e.exportName,logicalPath:e.logicalPath,revisionHash:e.revisionHash,selector:a,sourceId:e.sourceId,sourceKind:`module`};if(!isSandboxEnvironment(o))throw new ResolveAgentError(`Sandbox "${e.logicalPath}" has no environment.`);return{...s,environment:o,kind:`independent`}}export{resolveSandboxDefinition};
+import{expectObjectRecord,getAuthoredModuleExport}from"#internal/authored-module.js";import{ROOT_COMPILED_AGENT_NODE_ID}from"#compiler/manifest.js";import{getBoundSandboxEnvironment,isSandboxEnvironment}from"#shared/sandbox-environment.js";import{defineParentSandbox}from"#public/definitions/sandbox.js";import{ResolveAgentError}from"#runtime/resolve-helpers.js";async function resolveSandboxDefinition(e,t,n){if(e.inheritsParent===!0)return{exportName:e.exportName,kind:`parent`,logicalPath:e.logicalPath,revisionHash:e.revisionHash,selector:defineParentSandbox(),sourceId:e.sourceId,sourceKind:`module`};let r=t.nodes[n??ROOT_COMPILED_AGENT_NODE_ID]?.modules[e.sourceId],i=expectObjectRecord(r,`Missing sandbox module "${e.logicalPath}".`),a=getAuthoredModuleExport(i,e);if(typeof a!=`function`)throw new ResolveAgentError(`Sandbox "${e.logicalPath}" does not export a selector.`);let o=e.environmentExportName?i[e.environmentExportName]:getBoundSandboxEnvironment(a),s={exportName:e.exportName,logicalPath:e.logicalPath,revisionHash:e.revisionHash,selector:a,sourceId:e.sourceId,sourceKind:`module`};if(!isSandboxEnvironment(o))throw new ResolveAgentError(`Sandbox "${e.logicalPath}" has no environment. Export the environment its selector opens, for example \`export const environment = DefaultSandbox.environment();\`.`);return{...s,environment:o,kind:`independent`}}export{resolveSandboxDefinition};

package/dist/src/runtime/sandbox/prepared-artifacts.js

@@ -1 +1 @@
-import{randomUUID}from"node:crypto";import{readFile,rename,rm,writeFile}from"node:fs/promises";import{resolveRuntimeCompilerArtifactPaths}from"#runtime/loaders/artifact-paths.js";import{createSandboxPreparedArtifactsManifest,sandboxPreparedArtifactsManifestSchema}from"#shared/sandbox-prepared-artifacts.js";import{readBundledCompiledArtifacts}from"#runtime/loaders/bundled-artifacts.js";async function writeSandboxPreparedArtifactsManifest(e){if(e.entries.length===0)return;let t=`${e.compileDirectoryPath}/sandbox-prepared-artifacts.json`,n=null;try{n=sandboxPreparedArtifactsManifestSchema.parse(JSON.parse(await readFile(t,`utf8`)))}catch(e){if(!(e instanceof Error&&`code`in e&&e.code===`ENOENT`))throw e}let r=new Map(n?.entries.map(e=>[e.nodeId,e]));for(let t of e.entries)r.set(t.nodeId,t);let i=`${t}.${randomUUID()}.tmp`;try{await writeFile(i,`${JSON.stringify(createSandboxPreparedArtifactsManifest([...r.values()]),null,2)}\n`),await rename(i,t)}finally{await rm(i,{force:!0})}}async function loadSandboxPreparedArtifact(e){let t=(await loadSandboxPreparedArtifactsManifest(e.compiledArtifactsSource))?.entries.find(t=>t.nodeId===e.nodeId);if(t!==void 0&&t.providerName!==e.providerName)throw Error(`Prepared sandbox artifact for node "${e.nodeId}" belongs to provider "${t.providerName}", not "${e.providerName}".`);return t?.artifact}async function loadSandboxPreparedArtifactsManifest(e){if(e.kind===`bundled`)return readBundledCompiledArtifacts()?.sandboxPreparedArtifacts??null;let t=resolveRuntimeCompilerArtifactPaths(e.appRoot).sandboxPreparedArtifactsPath;try{return sandboxPreparedArtifactsManifestSchema.parse(JSON.parse(await readFile(t,`utf8`)))}catch(e){if(e instanceof Error&&`code`in e&&e.code===`ENOENT`)return null;throw e}}export{loadSandboxPreparedArtifact,writeSandboxPreparedArtifactsManifest};
+import{randomUUID}from"node:crypto";import{readFile,rename,rm,writeFile}from"node:fs/promises";import{resolveRuntimeCompilerArtifactPaths}from"#runtime/loaders/artifact-paths.js";import{createSandboxPreparedArtifactsManifest,sandboxPreparedArtifactsManifestSchema}from"#shared/sandbox-prepared-artifacts.js";import{readBundledCompiledArtifacts}from"#runtime/loaders/bundled-artifacts.js";async function writeSandboxPreparedArtifactsManifest(e){if(e.entries.length===0)return;let t=`${e.compileDirectoryPath}/sandbox-prepared-artifacts.json`,n=null;try{n=sandboxPreparedArtifactsManifestSchema.parse(JSON.parse(await readFile(t,`utf8`)))}catch(e){if(!(e instanceof Error&&`code`in e&&e.code===`ENOENT`))throw e}let r=new Map(n?.entries.map(e=>[e.nodeId,e]));for(let t of e.entries)r.set(t.nodeId,t);let i=`${t}.${randomUUID()}.tmp`;try{await writeFile(i,`${JSON.stringify(createSandboxPreparedArtifactsManifest([...r.values()]),null,2)}\n`),await rename(i,t)}finally{await rm(i,{force:!0})}}async function loadSandboxPreparedArtifact(e){let t=(await loadSandboxPreparedArtifactsManifest(e.compiledArtifactsSource))?.entries.find(t=>t.nodeId===e.nodeId);if(t!==void 0&&t.providerName!==e.providerName)throw Error(`The prepared sandbox artifact for agent node "${e.nodeId}" was created with provider "${t.providerName}", but this process selects provider "${e.providerName}". The sandbox file must select the same provider during the build and at runtime, so a selection that reads the host, such as \`process.env\` or Docker availability, can disagree. Select one provider explicitly, or use DefaultSandbox, which records its choice when the sandbox is prepared. Then rebuild with \`eve build\`, or restart \`eve dev\`.`);return t?.artifact}async function loadSandboxPreparedArtifactsManifest(e){if(e.kind===`bundled`)return readBundledCompiledArtifacts()?.sandboxPreparedArtifacts??null;let t=resolveRuntimeCompilerArtifactPaths(e.appRoot).sandboxPreparedArtifactsPath;try{return sandboxPreparedArtifactsManifestSchema.parse(JSON.parse(await readFile(t,`utf8`)))}catch(e){if(e instanceof Error&&`code`in e&&e.code===`ENOENT`)return null;throw e}}export{loadSandboxPreparedArtifact,writeSandboxPreparedArtifactsManifest};

package/dist/src/runtime/sandbox/registry.d.ts

@@ -23,6 +23,8 @@ export interface RuntimeRegisteredSandbox {
         readonly workspaceResourceRoot: CompiledWorkspaceResourceRoot;
     };
 }
+/** The definition that opens `sandbox`: its owner's for a subagent that shares its parent's sandbox. */
+export declare function owningSandboxDefinition(sandbox: RuntimeRegisteredSandbox): ResolvedSandboxDefinition;
 /**
  * Runtime-owned registry that exposes the resolved sandbox to the harness
  * startup path.

package/dist/src/runtime/sandbox/registry.js

@@ -1 +1 @@
-function createRuntimeSandboxRegistry(e){let t=e.sandbox;if(t.kind===`parent`&&(e.workspaceResourceRoot.contentHash!==void 0||e.workspaceResourceRoot.rootEntries.length>0))throw Error(`Sandbox "${t.logicalPath}" selects parent.sandbox but has managed workspace resources. Remove the child workspace or give the child its own sandbox.`);return{sandbox:{definition:t,workspaceResourceRoot:e.workspaceResourceRoot}}}export{createRuntimeSandboxRegistry};
+function owningSandboxDefinition(e){return e.inheritance?.definition??e.definition}function createRuntimeSandboxRegistry(e){let t=e.sandbox;if(t.kind===`parent`&&(e.workspaceResourceRoot.contentHash!==void 0||e.workspaceResourceRoot.rootEntries.length>0))throw Error(`Sandbox "${t.logicalPath}" selects parent.sandbox but has managed workspace resources. Remove the child workspace or give the child its own sandbox.`);return{sandbox:{definition:t,workspaceResourceRoot:e.workspaceResourceRoot}}}export{createRuntimeSandboxRegistry,owningSandboxDefinition};

package/dist/src/runtime/subagents/workflow.d.ts

@@ -3,7 +3,11 @@ import type { WorkflowServeContext, WorkflowServeReceive } from "#public/tools/i
 export interface AgentToolInput {
     readonly message: string;
 }
+export interface AgentWithModelToolInput extends AgentToolInput {
+    readonly model: string;
+}
 type AgentToolReceive = WorkflowServeReceive<AgentToolInput>;
+type AgentWithModelToolReceive = WorkflowServeReceive<AgentWithModelToolInput>;
 /**
  * The `serve` body of every agent tool: local, remote, dynamic, and the
  * `agent` copy of the root. Each task talks to one session with the agent. A
@@ -11,4 +15,6 @@ type AgentToolReceive = WorkflowServeReceive<AgentToolInput>;
  * response settles every call it answered.
  */
 export declare function agentToolServeWorkflow(receive: AgentToolReceive, ctx: WorkflowServeContext<string>): Promise<never>;
+/** The opt-in root-copy tool whose model-facing input selects the child model. */
+export declare function agentWithModelServeWorkflow(receive: AgentWithModelToolReceive, ctx: WorkflowServeContext<string>): Promise<never>;
 export {};

package/dist/src/runtime/subagents/workflow.js

@@ -1 +1 @@
-async function agentToolServeWorkflow(e,t){"use workflow";let n=t.agent(t.toolName),r=sendToAgent(n,await e()),i=e();for(;;){let a=await nextCallOrResult(i,r);if(a.kind===`call`){r=await forwardCall(n,r,a.call),i=e();continue}if(!r.signal.aborted){if(a.result.status===`failed`)throw Error(`The agent's turn failed: ${a.result.error?.message??`no reason given`}\nThis task has ended; to retry, call ${t.toolName} without taskId.`);let o=e();if(o!==i){r=sendToAgent(n,await i),i=o;continue}t.reply(a.result.message??``)}r=sendToAgent(n,await i),i=e()}}function sendToAgent(e,t){return{result:e.send(t.input.message,{signal:t.abortSignal}).then(e=>e.result()),signal:t.abortSignal}}async function nextCallOrResult(e,t){return await Promise.race([t.result.then(e=>({kind:`result`,result:e})),e.then(e=>({call:e,kind:`call`}))])}async function forwardCall(e,t,n){return t.signal.aborted&&await t.result.catch(()=>void 0),sendToAgent(e,n)}agentToolServeWorkflow.workflowId=`workflow//eve//agentToolServeWorkflow`;export{agentToolServeWorkflow};
+async function agentToolServeWorkflow(e,t){"use workflow";let n=t.agent(t.toolName),r=sendToAgent(n,await e()),i=e();for(;;){let a=await nextCallOrResult(i,r);if(a.kind===`call`){r=await forwardCall(n,r,a.call),i=e();continue}if(!r.signal.aborted){if(a.result.status===`failed`)throw Error(`The agent's turn failed: ${a.result.error?.message??`no reason given`}\nThis task has ended; to retry, call ${t.toolName} without taskId.`);let o=e();if(o!==i){r=sendToAgent(n,await i),i=o;continue}t.reply(a.result.message??``)}r=sendToAgent(n,await i),i=e()}}async function agentWithModelServeWorkflow(e,t){"use workflow";let n=await e(),r=n.input.model.trim();if(r===``)throw TypeError(`agent model must not be empty.`);let i=t.agent(`agent`,{model:r}),a=sendToModelAgent(i,n,r),o=e();for(;;){let n=await nextModelCallOrResult(o,a);if(n.kind===`call`){a=await forwardModelCall(i,a,n.call,r),o=e();continue}if(!a.signal.aborted){if(n.result.status===`failed`)throw Error(`The agent's turn failed: ${n.result.error?.message??`no reason given`}\nThis task has ended; to retry, call ${t.toolName} without taskId.`);let s=e();if(s!==o){a=sendToModelAgent(i,await o,r),o=s;continue}t.reply(n.result.message??``)}a=sendToModelAgent(i,await o,r),o=e()}}function sendToAgent(e,t){return{result:e.send(t.input.message,{signal:t.abortSignal}).then(e=>e.result()),signal:t.abortSignal}}function sendToModelAgent(e,t,n){if(t.input.model!==n)throw Error(`An agent task keeps the model it started with. This task has ended; start a new task to use another model.`);return{result:e.send(t.input.message,{signal:t.abortSignal}).then(e=>e.result()),signal:t.abortSignal}}async function nextCallOrResult(e,t){return await Promise.race([t.result.then(e=>({kind:`result`,result:e})),e.then(e=>({call:e,kind:`call`}))])}async function nextModelCallOrResult(e,t){return await Promise.race([t.result.then(e=>({kind:`result`,result:e})),e.then(e=>({call:e,kind:`call`}))])}async function forwardCall(e,t,n){return t.signal.aborted&&await t.result.catch(()=>void 0),sendToAgent(e,n)}async function forwardModelCall(e,t,n,r){return t.signal.aborted&&await t.result.catch(()=>void 0),sendToModelAgent(e,n,r)}agentToolServeWorkflow.workflowId=`workflow//eve//agentToolServeWorkflow`,agentWithModelServeWorkflow.workflowId=`workflow//eve@0.83.0//agentWithModelServeWorkflow`;export{agentToolServeWorkflow,agentWithModelServeWorkflow};

package/dist/src/runtime/workspace/seed-files.d.ts

@@ -1,15 +1,12 @@
-/**
- * One concrete file materialized from a workspace seed directory for
- * sandbox template preparation.
- */
-interface MaterializedWorkspaceFile {
-    readonly content: Buffer;
-    readonly path: string;
+import type { SandboxProviderResourceFile } from "#shared/sandbox-provider.js";
+/** The files of one resource directory, split into the trees sandbox providers receive. */
+export interface MaterializedResourceTrees {
+    readonly skills: readonly SandboxProviderResourceFile[];
+    readonly workspace: readonly SandboxProviderResourceFile[];
 }
 /**
- * Walks a directory tree on disk and returns one entry per file rooted at
- * `/workspace/...`, sorted by path. The directory is treated as the
- * `/workspace` root for the resulting seed file paths.
+ * Reads a compiled resource directory into its `workspace/` and `skills/`
+ * trees, each sorted by relative path. A directory with neither subdirectory
+ * is read as the workspace tree itself.
  */
-export declare function materializeWorkspaceDirectory(sourceDirectoryPath: string): Promise<readonly MaterializedWorkspaceFile[]>;
-export {};
+export declare function materializeWorkspaceDirectory(sourceDirectoryPath: string): Promise<MaterializedResourceTrees>;

package/dist/src/runtime/workspace/seed-files.js

@@ -1 +1 @@
-import{readFile,readdir}from"node:fs/promises";import{join,posix}from"node:path";import{WORKSPACE_ROOT}from"#runtime/workspace/types.js";import{MODEL_SKILL_ROOT}from"#shared/skill-paths.js";const RESOURCE_WORKSPACE_DIRECTORY=`workspace`,RESOURCE_SKILLS_DIRECTORY=`skills`;async function materializeWorkspaceDirectory(e){let t=[],n=await readdir(e,{withFileTypes:!0}),r=n.find(e=>e.name===RESOURCE_WORKSPACE_DIRECTORY&&e.isDirectory()),i=n.find(e=>e.name===RESOURCE_SKILLS_DIRECTORY&&e.isDirectory());return r!==void 0||i!==void 0?(r!==void 0&&await addMaterializedDirectoryFiles({files:t,logicalDirectoryPath:`.`,sourceDirectoryPath:join(e,RESOURCE_WORKSPACE_DIRECTORY),targetRoot:WORKSPACE_ROOT}),i!==void 0&&await addMaterializedDirectoryFiles({files:t,logicalDirectoryPath:`.`,sourceDirectoryPath:join(e,RESOURCE_SKILLS_DIRECTORY),targetRoot:MODEL_SKILL_ROOT})):await addMaterializedDirectoryFiles({files:t,logicalDirectoryPath:`.`,sourceDirectoryPath:e,targetRoot:WORKSPACE_ROOT}),t.sort((e,t)=>e.path.localeCompare(t.path)),t}async function addMaterializedDirectoryFiles(e){let t=await readdir(e.sourceDirectoryPath,{withFileTypes:!0});for(let n of t){if(!n.isDirectory()&&!n.isFile())continue;let t=join(e.sourceDirectoryPath,n.name),r=posix.join(e.logicalDirectoryPath,n.name);if(n.isDirectory()){await addMaterializedDirectoryFiles({files:e.files,logicalDirectoryPath:r,sourceDirectoryPath:t,targetRoot:e.targetRoot});continue}e.files.push({content:await readFile(t),path:posix.join(e.targetRoot,r)})}}export{materializeWorkspaceDirectory};
+import{readFile,readdir}from"node:fs/promises";import{join,posix}from"node:path";const RESOURCE_WORKSPACE_DIRECTORY=`workspace`,RESOURCE_SKILLS_DIRECTORY=`skills`;async function materializeWorkspaceDirectory(e){let t=await readdir(e,{withFileTypes:!0}),hasDirectory=e=>t.some(t=>t.name===e&&t.isDirectory()),n=hasDirectory(RESOURCE_WORKSPACE_DIRECTORY),r=hasDirectory(RESOURCE_SKILLS_DIRECTORY);return!n&&!r?{skills:[],workspace:await readResourceTree(e)}:{skills:r?await readResourceTree(join(e,RESOURCE_SKILLS_DIRECTORY)):[],workspace:n?await readResourceTree(join(e,RESOURCE_WORKSPACE_DIRECTORY)):[]}}async function readResourceTree(e){let t=[];return await addResourceFiles({files:t,relativeDirectoryPath:`.`,sourceDirectoryPath:e}),t.sort((e,t)=>e.relativePath.localeCompare(t.relativePath)),t}async function addResourceFiles(e){let t=await readdir(e.sourceDirectoryPath,{withFileTypes:!0});for(let n of t){if(!n.isDirectory()&&!n.isFile())continue;let t=join(e.sourceDirectoryPath,n.name),r=posix.join(e.relativeDirectoryPath,n.name);if(n.isDirectory()){await addResourceFiles({files:e.files,relativeDirectoryPath:r,sourceDirectoryPath:t});continue}e.files.push({content:await readFile(t),relativePath:r})}}export{materializeWorkspaceDirectory};

package/dist/src/runtime/workspace/spec.d.ts

@@ -1,4 +1,4 @@
-import { type WorkspaceRuntimeSpec } from "#runtime/workspace/types.js";
+import type { WorkspaceRuntimeSpec } from "#runtime/workspace/types.js";
 /**
  * Creates the authored-workspace prompt section that advertises the authored
  * paths visible at the workspace root.

package/dist/src/runtime/workspace/spec.js

@@ -1,2 +1,2 @@
-import{WORKSPACE_ROOT}from"#runtime/workspace/types.js";function createWorkspacePromptSection(e){return e.rootEntries.length===0?void 0:[`Workspace`,`- You have access to authored files mounted at the workspace root for this run.`,`- The live workspace root visible to \`bash\` in this run is \`${WORKSPACE_ROOT}\`.`,`- Root entries under ${WORKSPACE_ROOT}/:`,...e.rootEntries.map(e=>`  - ${e}`),`- Treat \`${WORKSPACE_ROOT}\` as the workspace root for this run unless a \`bash\` call shows otherwise.`,"- For questions about workspace paths or file availability, verify with `bash` first using commands like `pwd`, `ls`, and `find`.","- If the required `bash` verification fails, report that failure directly instead of answering from this overview.","- Use the `bash` tool with `ls`, `find`, and `rg` to inspect deeper contents when needed.",`- Do not claim these files are unavailable unless a workspace or tool call actually fails.`].join(`
+function createWorkspacePromptSection(e){return e.rootEntries.length===0?void 0:[`Workspace`,`- You have access to authored files mounted at the workspace root for this run.`,"- The workspace root is the directory where `bash` commands start; `pwd` prints its absolute path.",`- Root entries under the workspace root:`,...e.rootEntries.map(e=>`  - ${e}`),"- For questions about workspace paths or file availability, verify with `bash` first using commands like `pwd`, `ls`, and `find`.","- If the required `bash` verification fails, report that failure directly instead of answering from this overview.","- Use the `bash` tool with `ls`, `find`, and `rg` to inspect deeper contents when needed.",`- Do not claim these files are unavailable unless a workspace or tool call actually fails.`].join(`
 `)}export{createWorkspacePromptSection};

package/dist/src/runtime/workspace/types.d.ts

@@ -1,10 +1,6 @@
 /**
- * Stable root directory for every workspace eve exposes to agents and
- * sandbox providers.
- *
- * This is both the model-facing logical path and the live `bash` cwd
- * for every backend. Backends must initialize their filesystems so
- * commands run at this path; there is no per-backend translation.
+ * The default sandbox workspace root, used by every built-in provider and by
+ * a connection that does not declare its own `workspaceRoot`.
  */
 export declare const WORKSPACE_ROOT = "/workspace";
 /**

package/dist/src/sandbox/provider.d.ts

@@ -0,0 +1,185 @@
+import { type SandboxEnvironment, type SandboxSelectorContext } from "#shared/sandbox-environment.js";
+import type { SandboxPreparedArtifact, SandboxProviderFiles } from "#shared/sandbox-provider.js";
+import type { SandboxProcess, SandboxRemovePathOptions, SandboxSession, SandboxWriteFilesOptions } from "#shared/sandbox-session.js";
+/** A JSON-compatible value: what a provider may return as an artifact or session state. */
+export type SandboxJson = SandboxPreparedArtifact;
+/** Members eve owns on every live sandbox, which a connection's extensions cannot replace. */
+type ReservedSessionMember = keyof SandboxSession | "delete" | "stop";
+/**
+ * The byte-level connection to one sandbox that a provider implements. eve
+ * derives the full {@link SandboxSession} from it.
+ *
+ * Every path a connection receives is absolute, and `workingDirectory` is
+ * always set: eve resolves relative paths from {@link workspaceRoot}.
+ */
+export interface SandboxConnection<Extensions extends object = {}> {
+    /**
+     * The absolute sandbox directory that relative paths resolve from and
+     * commands start in by default. Defaults to `/workspace`. The directory
+     * must exist when eve first runs a command.
+     */
+    readonly workspaceRoot?: string;
+    /**
+     * Runs `command` as a Bash login-shell script (`bash -lc`) in
+     * `workingDirectory`, with the sandbox's environment plus `env`. `env`
+     * holds only the per-call variables. Aborting kills the process tree.
+     */
+    spawn(options: {
+        readonly abortSignal?: AbortSignal;
+        readonly command: string;
+        readonly env: Readonly<Record<string, string>>;
+        readonly workingDirectory: string;
+    }): Promise<SandboxProcess>;
+    /**
+     * Resolves to `null` only when the path does not exist. A directory or an
+     * unreadable path rejects. Return bytes or a stream, whichever the backend has.
+     */
+    readFile(options: {
+        readonly abortSignal?: AbortSignal;
+        readonly path: string;
+    }): Promise<Uint8Array | ReadableStream<Uint8Array> | null>;
+    /** Creates missing parent directories and overwrites existing files. The only write primitive. */
+    writeFiles(options: SandboxWriteFilesOptions): Promise<void>;
+    /** `force` ignores a missing path; `recursive` removes a non-empty directory. */
+    removePath(options: SandboxRemovePathOptions): Promise<void>;
+    /** Releases compute and keeps the sandbox's files. */
+    stop(): Promise<void>;
+    /** Releases what this process holds, such as a local interpreter, without touching the sandbox. */
+    close?(): Promise<void>;
+    /**
+     * Provider capabilities merged onto the session, such as `setNetworkPolicy`.
+     * A plain object: eve merges its own enumerable properties, so use closures
+     * rather than class methods. A member named like a session method is a type
+     * error, and eve rejects it.
+     */
+    readonly extensions?: Extensions & {
+        readonly [Key in ReservedSessionMember]?: never;
+    };
+}
+/** What eve passes to `start()`, `resume()`, and `onSessionEnd()`. */
+export interface SandboxSessionContext {
+    /**
+     * The session that owns the sandbox. Derive native names from `session.id`:
+     * for a subagent that shares its parent's sandbox it is the parent's id, and
+     * for a keyed `invokeTool` call it is the derived tool-session id.
+     */
+    readonly session: SandboxSelectorContext["session"];
+    /** `"tool-session"` for a keyed `invokeTool` call's sandbox, `"session"` otherwise. */
+    readonly kind: "session" | "tool-session";
+    /** A host directory the provider may use for local state. */
+    readonly storagePath: string;
+    /** Resolves a path relative to the app's project root on the host. */
+    resolveProjectPath(path: string): string;
+}
+/**
+ * Values hashed into a template key: JSON values, `undefined` (omitted),
+ * plain objects and arrays, and functions (hashed by their source). Other
+ * values and circular structures reject.
+ */
+export type SandboxIdentity = {
+    readonly [key: string]: unknown;
+};
+/**
+ * What eve passes to `prepare()` while it builds a template. Not generic over
+ * the provider's extensions, so TypeScript infers them from `start()`.
+ */
+export interface SandboxPrepareContext {
+    /** Authored files under the agent's `sandbox/` directory. */
+    readonly files: SandboxProviderFiles;
+    /** `true` when there are no workspace or skill files and no authored `prepare`. */
+    readonly isEmpty: boolean;
+    readonly storagePath: string;
+    /** Reports build progress, such as `eve build` output. */
+    log(message: string): void;
+    /**
+     * Seeds the connection's workspace root and `$HOME/.agents/skills`, then
+     * runs the authored `prepare` with a session over `connection`. With
+     * `mountedAt`, the provider has mounted {@link resourcesDirectory}
+     * read-only at that sandbox path, and eve copies from it instead of
+     * writing every file.
+     */
+    populate(connection: SandboxConnection<object>, options?: {
+        readonly mountedAt?: string;
+    }): Promise<void>;
+    resolveProjectPath(path: string): string;
+    /** A stable read-only host directory holding `workspace/` and `skills/`, when one exists. */
+    resourcesDirectory(): Promise<string | undefined>;
+    /**
+     * Hashes `identity` together with the workspace files, skill files, and
+     * sandbox source revision into a stable SHA-256 hex key. `resources` and
+     * `sourceRevision` are reserved.
+     */
+    templateKey(identity: SandboxIdentity): string;
+}
+export interface SandboxSessionEndOptions {
+    readonly abortSignal?: AbortSignal;
+    readonly reason: "completed" | "expired" | "failed" | "deleted";
+}
+/** The lifecycle one sandbox environment implements. */
+export interface SandboxProviderImplementation<OpenOptions extends object | undefined, Artifact extends SandboxJson, State extends SandboxJson, Extensions extends object> {
+    /**
+     * Builds a template during `eve build`, or on first access in `eve dev`, and
+     * returns the JSON artifact that ships with the deployment. Call
+     * `ctx.populate()` on the build instance before capturing it.
+     */
+    prepare(ctx: SandboxPrepareContext): Promise<Artifact>;
+    /**
+     * Returns the sandbox for `ctx.session.id`, creating it when none exists.
+     * An idempotent upsert: repeated, concurrent, cross-process, and
+     * cross-deployment calls return the same sandbox while it exists. Derive
+     * native identity from `ctx.session.id` and a provider-level namespace
+     * only; `options` and `artifact` apply only when this call creates it.
+     */
+    start(ctx: SandboxSessionContext, options: Readonly<OpenOptions> | undefined, artifact: Readonly<Artifact>): Promise<{
+        readonly connection: SandboxConnection<Extensions>;
+        readonly state: State;
+    }>;
+    /**
+     * Reconnects to the sandbox `state` names, never recreating it. Throw
+     * `SandboxSessionGoneError` when it no longer exists.
+     */
+    resume(ctx: SandboxSessionContext, artifact: Readonly<Artifact>, state: Readonly<State>): Promise<SandboxConnection<Extensions>>;
+    /**
+     * Deletes whatever exists for `ctx.session.id`. `state` is `null` when the
+     * session never recorded it. Must succeed when nothing exists and be
+     * idempotent. `sandbox.delete()` also lands here, with `reason: "deleted"`.
+     */
+    onSessionEnd(ctx: SandboxSessionContext, state: Readonly<State> | null, options: SandboxSessionEndOptions): Promise<void>;
+    /**
+     * Lets a keyed `invokeTool` call keep its sandbox between calls. eve never
+     * ends a keyed sandbox, so the provider must bound its retention.
+     */
+    readonly toolSessions?: true;
+}
+export interface SandboxPrepareOption<Session> {
+    /** Runs once per template, after eve seeds workspace and skill files. */
+    readonly prepare?: (sandbox: Session) => void | Promise<void>;
+}
+/** Environment options plus the standard `prepare` option. */
+export type WithPrepareOption<Options extends object, Session> = Options & SandboxPrepareOption<Session>;
+export interface SandboxProviderDefinition<EnvironmentOptions extends object, OpenOptions extends object | undefined, Artifact extends SandboxJson, State extends SandboxJson, Extensions extends object> {
+    readonly name: string;
+    /** Bump when `State` changes incompatibly; recorded state from another version starts fresh. */
+    readonly stateProtocolVersion?: number;
+    /**
+     * Receives the environment options without `prepare`, which eve runs in
+     * `ctx.populate()`. Always an object: `{}` when the caller passes none.
+     */
+    environment(options: EnvironmentOptions): SandboxProviderImplementation<OpenOptions, Artifact, State, Extensions>;
+}
+type SandboxOptionArguments<Options extends object | undefined> = Options extends undefined ? [options?: undefined] : Record<never, never> extends Options ? [options?: Readonly<Options>] : [options: Readonly<Options>];
+export interface SandboxProvider<EnvironmentOptions extends object | undefined, OpenOptions extends object | undefined, Session extends SandboxSession> {
+    readonly name: string;
+    environment(...args: SandboxOptionArguments<EnvironmentOptions>): SandboxEnvironment<OpenOptions, Session>;
+}
+/** What core runs for one environment: the provider's lifecycle with its types erased. */
+export interface SandboxProviderRuntime {
+    readonly implementation: SandboxProviderImplementation<object | undefined, SandboxJson, SandboxJson, object>;
+    /** The authored `prepare` option, which eve runs in `ctx.populate()`. */
+    readonly prepare: ((sandbox: SandboxSession) => void | Promise<void>) | undefined;
+    readonly providerName: string;
+    readonly stateProtocolVersion: number;
+}
+/** Defines a sandbox provider from a connection and a lifecycle. */
+export declare function defineSandboxProvider<EnvironmentOptions extends object = {}, OpenOptions extends object | undefined = undefined, Artifact extends SandboxJson = SandboxJson, State extends SandboxJson = SandboxJson, Extensions extends object = {}>(definition: SandboxProviderDefinition<EnvironmentOptions, OpenOptions, Artifact, State, Extensions>): SandboxProvider<WithPrepareOption<EnvironmentOptions, SandboxSession & Extensions>, OpenOptions, SandboxSession & Extensions>;
+export {};

package/dist/src/sandbox/provider.js

@@ -0,0 +1 @@
+import{createSandboxEnvironment}from"#shared/sandbox-environment.js";function defineSandboxProvider(e){return{name:e.name,environment(t){let{prepare:n,...r}=t??{};return createSandboxEnvironment({implementation:e.environment(r),prepare:n,providerName:e.name,stateProtocolVersion:e.stateProtocolVersion??1})}}}export{defineSandboxProvider};

package/dist/src/sandbox/providers/default.d.ts

@@ -1,27 +1,28 @@
 import type { DockerSandboxEnvironmentOptions } from "#public/sandbox/docker-sandbox.js";
-import type { JustBashSandboxCreateOptions } from "#public/sandbox/just-bash-sandbox.js";
-import type { MicrosandboxSandboxCreateOptions } from "#public/sandbox/microsandbox-sandbox.js";
+import type { SandboxSession } from "#public/sandbox/index.js";
+import { type SandboxProvider } from "#public/sandbox/provider.js";
 import type { VercelSandboxCreateOptions } from "#public/sandbox/vercel-sandbox.js";
-import type { SandboxEnvironment } from "#shared/sandbox-environment.js";
-import type { SandboxSession } from "#shared/sandbox-session.js";
+import { type JustBashEnvironmentOptions } from "#sandbox/providers/just-bash.js";
+import type { SandboxNetworkOptions, SandboxNetworkPolicy } from "#shared/sandbox-network-policy.js";
 export interface DefaultSandboxEnvironmentOptions {
     readonly docker?: DockerSandboxEnvironmentOptions;
-    readonly justBash?: JustBashSandboxCreateOptions;
-    readonly microsandbox?: MicrosandboxSandboxCreateOptions;
+    readonly justBash?: JustBashEnvironmentOptions;
     readonly prepare?: (sandbox: SandboxSession) => Promise<void> | void;
     readonly vercel?: VercelSandboxCreateOptions;
 }
-export interface DefaultSandboxProbes {
-    readonly isDeployedOnVercel: () => boolean;
-    readonly isDockerAvailable: () => boolean;
-    readonly isMicrosandboxSupported: () => boolean;
+/** Options applied when eve creates one live sandbox from a `DefaultSandbox` environment. */
+export type DefaultSandboxRuntimeOptions = SandboxNetworkOptions;
+/** Live sandbox capabilities exposed by a `DefaultSandbox` environment. */
+export interface DefaultSandboxSession extends SandboxSession {
+    /**
+     * Applies a network policy to the live sandbox. Docker accepts only
+     * `"allow-all"` and `"deny-all"`; just-bash accepts only `"allow-all"`.
+     */
+    setNetworkPolicy(policy: SandboxNetworkPolicy): Promise<void>;
 }
-export declare const SANDBOX_PROVIDER_PROBES: DefaultSandboxProbes;
-export declare const DefaultSandbox: {
-    name: string;
-    environment(options?: DefaultSandboxEnvironmentOptions): SandboxEnvironment<undefined>;
-};
-export declare function defineDefaultSandboxProvider(probes: DefaultSandboxProbes): {
-    name: string;
-    environment(options?: DefaultSandboxEnvironmentOptions): SandboxEnvironment<undefined>;
-};
+/**
+ * Selects Vercel Sandbox on Vercel, Docker when a daemon is reachable, and
+ * just-bash in development. Preparation records the choice, so the runtime
+ * uses the provider the build selected and never probes the host.
+ */
+export declare const DefaultSandbox: SandboxProvider<DefaultSandboxEnvironmentOptions, DefaultSandboxRuntimeOptions, DefaultSandboxSession>;

package/dist/src/sandbox/providers/default.js

@@ -1 +1 @@
-import{isLinuxDockerDaemonAvailableSync,isMicrosandboxPlatformSupported}from"#execution/sandbox/bindings/local.js";import{DockerSandbox}from"#sandbox/providers/docker.js";import{JustBashSandbox}from"#sandbox/providers/just-bash.js";import{MicrosandboxSandbox}from"#sandbox/providers/microsandbox.js";import{createDefaultVercelEnvironment}from"#sandbox/providers/vercel.js";const SANDBOX_PROVIDER_PROBES={isDeployedOnVercel:()=>!!process.env.VERCEL,isDockerAvailable:()=>isLinuxDockerDaemonAvailableSync(),isMicrosandboxSupported:()=>isMicrosandboxPlatformSupported()},DefaultSandbox=defineDefaultSandboxProvider(SANDBOX_PROVIDER_PROBES);function defineDefaultSandboxProvider(e){return{name:`default`,environment(t={}){return e.isDeployedOnVercel()?withoutOpenOptions(createDefaultVercelEnvironment(withPreparation(t.vercel,t.prepare))):e.isDockerAvailable()?withoutOpenOptions(DockerSandbox.environment(withPreparation(t.docker,t.prepare))):e.isMicrosandboxSupported()?withoutOpenOptions(MicrosandboxSandbox.environment(withPreparation(t.microsandbox,t.prepare))):JustBashSandbox.environment(withPreparation(t.justBash,t.prepare))}}}function withPreparation(e,t){return Object.assign({},e,t===void 0?{}:{prepare:t})}function withoutOpenOptions(e){return e}export{DefaultSandbox,SANDBOX_PROVIDER_PROBES,defineDefaultSandboxProvider};
+import{isObject}from"#shared/guards.js";import{isLinuxDockerDaemonAvailableSync}from"#execution/sandbox/bindings/local.js";import{getSandboxEnvironmentRuntime}from"#shared/sandbox-environment.js";import{isEveDevEnvironment}from"#internal/application/dev-environment.js";import{ToolSessionSandboxUnsupportedError}from"#shared/sandbox-tool-session-error.js";import{SandboxSessionGoneError,defineSandboxProvider}from"#public/sandbox/provider.js";import{withAdoptedSandboxSessionStates,withSessionEndArtifact}from"#sandbox/state.js";import{DockerSandbox}from"#sandbox/providers/docker.js";import{JustBashSandbox}from"#sandbox/providers/just-bash.js";import{VercelSandbox}from"#sandbox/providers/vercel.js";const SELECTED_PROVIDERS=[`docker`,`just-bash`,`vercel`],NO_PROVIDER_MESSAGE=`DefaultSandbox has no sandbox provider for this build: it did not run on Vercel, no Docker daemon was reachable, and production builds do not fall back to just-bash. Start Docker and rebuild, deploy to Vercel, or select a provider explicitly in your sandbox module, such as agent/sandbox/sandbox.ts.`,JUST_BASH_NETWORK_POLICY_MESSAGE=`DefaultSandbox selected just-bash, which always allows network access and accepts only the "allow-all" network policy. Start Docker so DefaultSandbox selects it, or select VercelSandbox or DockerSandbox explicitly.`,DefaultSandbox=defineSandboxProvider({name:`default`,environment(e){let t=new Map,provider=n=>{let r=t.get(n);return r===void 0&&(r=getSandboxEnvironmentRuntime(createEnvironment(n,e)),t.set(n,r)),r};function requireProvider(e,t){let n=provider(e);if(t===`tool-session`&&n.implementation.toolSessions!==!0)throw new ToolSessionSandboxUnsupportedError(e);return n}async function endSession(e,t,n,r){let i=t?.provider??n?.provider??null;if(i===null)return;let a=provider(i),o=t?.stateProtocolVersion===a.stateProtocolVersion?t.state:null;await a.implementation.onSessionEnd(e,o,r)}let n={onSessionEnd:(e,t,n)=>endSession(e,t,void 0,n),async prepare(e){let t=selectProvider();return t===null?(e.log(NO_PROVIDER_MESSAGE),{provider:null}):{artifact:await provider(t).implementation.prepare(e),provider:t}},async start(e,t,n){if(n.provider===null)throw Error(NO_PROVIDER_MESSAGE);let r=requireProvider(n.provider,e.kind),i=await r.implementation.start(e,innerOpenOptions(n.provider,t),n.artifact);return{connection:withNetworkPolicy(i.connection),state:{provider:n.provider,state:i.state,stateProtocolVersion:r.stateProtocolVersion}}},async resume(e,t,n){if(t.provider===null||t.provider!==n.provider)throw new SandboxSessionGoneError(`The session's ${n.provider} sandbox cannot resume because this build selected ${t.provider??`no provider`}.`);let r=requireProvider(n.provider,e.kind);if(n.stateProtocolVersion!==r.stateProtocolVersion)throw new SandboxSessionGoneError(`The session's ${n.provider} sandbox state uses protocol ${n.stateProtocolVersion}, not ${r.stateProtocolVersion}.`);return withNetworkPolicy(await r.implementation.resume(e,t.artifact,n.state))},toolSessions:!0};return withSessionEndArtifact(n,async(e,t,{artifact:n,reason:r})=>{await endSession(e,isDefaultSandboxSessionState(t)?t:null,isDefaultSandboxPreparedArtifact(n)?n:void 0,{reason:r})}),withAdoptedSandboxSessionStates(n,e=>{let t=e.providerName;if(isSelectedProvider(t))return{provider:t,state:e.state,stateProtocolVersion:e.stateProtocolVersion}})}});function selectProvider(){return process.env.VERCEL?.trim()?`vercel`:isLinuxDockerDaemonAvailableSync()?`docker`:isEveDevEnvironment()?`just-bash`:null}function createEnvironment(e,t){switch(e){case`docker`:return DockerSandbox.environment(t.docker??{});case`just-bash`:return JustBashSandbox.environment(t.justBash??{});case`vercel`:return VercelSandbox.environment(t.vercel??{})}}function innerOpenOptions(e,t){if(e!==`just-bash`)return t;if(t?.networkPolicy!==void 0&&t.networkPolicy!==`allow-all`)throw Error(JUST_BASH_NETWORK_POLICY_MESSAGE)}function withNetworkPolicy(e){let t=e.extensions??{};return typeof Reflect.get(t,`setNetworkPolicy`)==`function`?e:{...e,extensions:{...t,setNetworkPolicy:rejectJustBashNetworkPolicy}}}async function rejectJustBashNetworkPolicy(e){if(e!==`allow-all`)throw Error(JUST_BASH_NETWORK_POLICY_MESSAGE)}function isSelectedProvider(e){return SELECTED_PROVIDERS.some(t=>t===e)}function isDefaultSandboxSessionState(e){return isObject(e)&&isSelectedProvider(e.provider)&&typeof e.stateProtocolVersion==`number`&&`state`in e}function isDefaultSandboxPreparedArtifact(e){return isObject(e)&&(e.provider===null||isSelectedProvider(e.provider)&&`artifact`in e)}export{DefaultSandbox};

package/dist/src/sandbox/providers/docker.d.ts

@@ -1,8 +1,11 @@
-import type { DockerSandboxSession } from "#public/sandbox/docker.js";
-import type { DockerSandboxEnvironmentOptions, DockerSandboxRuntimeOptions } from "#public/sandbox/docker-sandbox.js";
+import type { DockerCli } from "#execution/sandbox/bindings/docker-cli.js";
+import type { DockerSandboxEnvironmentOptions, DockerSandboxRuntimeOptions, DockerSandboxSession } from "#public/sandbox/docker-sandbox.js";
+import { type SandboxProvider } from "#public/sandbox/provider.js";
 import type { SandboxEnvironment } from "#shared/sandbox-environment.js";
 export type { DockerSandboxEnvironmentOptions, DockerSandboxRuntimeOptions, } from "#public/sandbox/docker-sandbox.js";
 type DockerfileEnvironmentInput = Omit<DockerSandboxEnvironmentOptions, "image">;
+/** Defines the Docker provider over `dockerCli`, the real `docker` CLI unless tests inject one. */
+export declare function defineDockerSandboxProvider(dockerCli?: DockerCli): SandboxProvider<DockerSandboxEnvironmentOptions, DockerSandboxRuntimeOptions, DockerSandboxSession>;
 export declare const DockerSandbox: {
     name: string;
     environment(options?: Readonly<DockerSandboxEnvironmentOptions> | undefined): SandboxEnvironment<DockerSandboxRuntimeOptions, DockerSandboxSession>;

package/dist/src/sandbox/providers/docker.js

@@ -1 +1 @@
-import{createDockerSandboxProvider}from"#execution/sandbox/bindings/local.js";import{defineSandboxProvider}from"#shared/sandbox-provider.js";const provider=defineSandboxProvider({name:`docker`,environment(e){return createDockerSandboxProvider(e)}}),DockerSandbox={...provider,dockerfile(e={}){return provider.environment(e)},image(e,t={}){return provider.environment({...t,image:e})}};export{DockerSandbox};
+import{DOCKER_PROVIDER_NAME,createDockerSandboxProvider}from"#execution/sandbox/bindings/local.js";import{defineSandboxProvider}from"#public/sandbox/provider.js";function defineDockerSandboxProvider(e){return defineSandboxProvider({name:DOCKER_PROVIDER_NAME,environment:t=>createDockerSandboxProvider(t,e)})}const provider=defineDockerSandboxProvider(),DockerSandbox={...provider,dockerfile(e={}){return provider.environment(e)},image(e,t={}){return provider.environment({...t,image:e})}};export{DockerSandbox,defineDockerSandboxProvider};

package/dist/src/sandbox/providers/just-bash.d.ts

@@ -1,4 +1,5 @@
 import type { JustBashSandboxCreateOptions } from "#public/sandbox/just-bash-sandbox.js";
-import type { SandboxSession } from "#shared/sandbox-session.js";
-export type JustBashEnvironmentOptions = JustBashSandboxCreateOptions;
-export declare const JustBashSandbox: import("#shared/sandbox-provider.js").SandboxProvider<JustBashSandboxCreateOptions, undefined, SandboxSession>;
+import { type WithPrepareOption } from "#public/sandbox/provider.js";
+import type { SandboxSession } from "#public/sandbox/index.js";
+export type JustBashEnvironmentOptions = WithPrepareOption<JustBashSandboxCreateOptions, SandboxSession>;
+export declare const JustBashSandbox: import("#public/sandbox/provider.js").SandboxProvider<WithPrepareOption<JustBashSandboxCreateOptions, SandboxSession>, undefined, SandboxSession>;

package/dist/src/sandbox/providers/just-bash.js

@@ -1 +1 @@
-import{createJustBashSandboxProvider}from"#execution/sandbox/bindings/local.js";import{defineSandboxProvider}from"#shared/sandbox-provider.js";const JustBashSandbox=defineSandboxProvider({name:`just-bash`,environment:e=>createJustBashSandboxProvider(e)});export{JustBashSandbox};
+import{createJustBashSandboxProvider}from"#execution/sandbox/bindings/local.js";import{defineSandboxProvider}from"#public/sandbox/provider.js";const JustBashSandbox=defineSandboxProvider({name:`just-bash`,environment:e=>createJustBashSandboxProvider(e)});export{JustBashSandbox};

package/dist/src/sandbox/providers/vercel.d.ts

@@ -1,13 +1,7 @@
 import type { VercelSandboxSession } from "#public/sandbox/vercel.js";
+import { type SandboxProvider, type WithPrepareOption } from "#public/sandbox/provider.js";
 import type { VercelSandboxCreateOptions, VercelSandboxRuntimeOptions } from "#public/sandbox/vercel-sandbox.js";
-import type { SandboxEnvironment } from "#shared/sandbox-environment.js";
-import type { SandboxSession } from "#shared/sandbox-session.js";
-export type VercelSandboxEnvironmentOptions = VercelSandboxCreateOptions & {
-    readonly prepare?: (sandbox: SandboxSession) => Promise<void> | void;
-};
+/** Vercel create options plus `prepare`, which receives a {@link VercelSandboxSession}. */
+export type VercelSandboxEnvironmentOptions = WithPrepareOption<VercelSandboxCreateOptions, VercelSandboxSession>;
 export type { VercelSandboxRuntimeOptions } from "#public/sandbox/vercel-sandbox.js";
-export declare function createDefaultVercelEnvironment(options?: VercelSandboxEnvironmentOptions): SandboxEnvironment<VercelSandboxRuntimeOptions, VercelSandboxSession>;
-export declare const VercelSandbox: {
-    name: string;
-    environment(options?: VercelSandboxEnvironmentOptions): SandboxEnvironment<VercelSandboxRuntimeOptions, VercelSandboxSession>;
-};
+export declare const VercelSandbox: SandboxProvider<VercelSandboxEnvironmentOptions | undefined, VercelSandboxRuntimeOptions, VercelSandboxSession>;

package/dist/src/sandbox/providers/vercel.js

@@ -1 +1 @@
-import{defineSandboxProvider}from"#shared/sandbox-provider.js";import{createVercelSandbox,createVercelSandboxProvider}from"#execution/sandbox/bindings/vercel.js";const defaultProvider=defineSandboxProvider({name:`vercel`,environment:e=>{let{prepare:t,...n}=e??{};return createVercelSandbox({createOptions:n,prepare:t,skipEmptyPreparation:!0})}}),provider=defineSandboxProvider({name:`vercel`,environment:e=>createVercelSandboxProvider(e)});function createDefaultVercelEnvironment(e){return defaultProvider.environment(e)}const VercelSandbox={name:`vercel`,environment(e){return provider.environment(e)}};export{VercelSandbox,createDefaultVercelEnvironment};
+import{defineSandboxProvider}from"#public/sandbox/provider.js";import{createVercelSandbox}from"#execution/sandbox/bindings/vercel.js";const VercelSandbox=defineSandboxProvider({name:`vercel`,environment:e=>createVercelSandbox({createOptions:e})});export{VercelSandbox};

package/dist/src/sandbox/providers.d.ts

@@ -1,5 +1,4 @@
 export { DefaultSandbox } from "#sandbox/providers/default.js";
 export { DockerSandbox } from "#sandbox/providers/docker.js";
 export { JustBashSandbox } from "#sandbox/providers/just-bash.js";
-export { MicrosandboxSandbox } from "#sandbox/providers/microsandbox.js";
 export { VercelSandbox } from "#sandbox/providers/vercel.js";

package/dist/src/sandbox/providers.js

@@ -1 +1 @@
-import{DockerSandbox}from"#sandbox/providers/docker.js";import{DefaultSandbox}from"#sandbox/providers/default.js";import{JustBashSandbox}from"#sandbox/providers/just-bash.js";import{MicrosandboxSandbox}from"#sandbox/providers/microsandbox.js";import{VercelSandbox}from"#sandbox/providers/vercel.js";export{DefaultSandbox,DockerSandbox,JustBashSandbox,MicrosandboxSandbox,VercelSandbox};
+import{DockerSandbox}from"#sandbox/providers/docker.js";import{DefaultSandbox}from"#sandbox/providers/default.js";import{JustBashSandbox}from"#sandbox/providers/just-bash.js";import{VercelSandbox}from"#sandbox/providers/vercel.js";export{DefaultSandbox,DockerSandbox,JustBashSandbox,VercelSandbox};