gateproof 0.2.1 → 0.2.4

package/dist/filepath-protocol.js

@@ -0,0 +1,239 @@
+/**
+ * Filepath Agent Protocol (FAP) — Gateproof integration
+ *
+ * Zod schemas for the NDJSON event stream between Filepath containers
+ * and the Gateproof observe layer. Each agent emits structured events
+ * on stdout; we parse and map them to Log entries for gate assertions.
+ *
+ * Protocol source: https://github.com/ACoyfellow/filepath
+ */
+import { z } from "zod";
+// ─── Agent Status ───
+export const AgentStatus = z.enum([
+    "idle",
+    "thinking",
+    "running",
+    "done",
+    "error",
+]);
+// ─── Output Events (agent stdout → gateproof) ───
+export const TextEvent = z.object({
+    type: z.literal("text"),
+    content: z.string(),
+});
+export const ToolEvent = z.object({
+    type: z.literal("tool"),
+    name: z.string(),
+    path: z.string().optional(),
+    status: z.enum(["start", "done", "error"]),
+    output: z.string().optional(),
+});
+export const CommandEvent = z.object({
+    type: z.literal("command"),
+    cmd: z.string(),
+    status: z.enum(["start", "done", "error"]),
+    exit: z.number().optional(),
+    stdout: z.string().optional(),
+    stderr: z.string().optional(),
+});
+export const CommitEvent = z.object({
+    type: z.literal("commit"),
+    hash: z.string(),
+    message: z.string(),
+});
+export const SpawnEvent = z.object({
+    type: z.literal("spawn"),
+    name: z.string(),
+    agent: z.string(),
+    model: z.string(),
+    task: z.string().optional(),
+});
+export const WorkersEvent = z.object({
+    type: z.literal("workers"),
+    workers: z.array(z.object({
+        name: z.string(),
+        status: AgentStatus,
+    })),
+});
+export const StatusEvent = z.object({
+    type: z.literal("status"),
+    state: AgentStatus,
+    context_pct: z.number().min(0).max(1).optional(),
+});
+export const HandoffEvent = z.object({
+    type: z.literal("handoff"),
+    summary: z.string(),
+});
+export const DoneEvent = z.object({
+    type: z.literal("done"),
+    summary: z.string().optional(),
+});
+export const AgentEvent = z.discriminatedUnion("type", [
+    TextEvent,
+    ToolEvent,
+    CommandEvent,
+    CommitEvent,
+    SpawnEvent,
+    WorkersEvent,
+    StatusEvent,
+    HandoffEvent,
+    DoneEvent,
+]);
+// ─── Input Messages (gateproof → agent stdin) ───
+export const UserMessage = z.object({
+    type: z.literal("message"),
+    from: z.enum(["user", "parent", "system"]),
+    content: z.string(),
+});
+export const SignalMessage = z.object({
+    type: z.literal("signal"),
+    action: z.enum(["stop", "pause", "resume"]),
+});
+export const AgentInput = z.discriminatedUnion("type", [
+    UserMessage,
+    SignalMessage,
+]);
+// ─── NDJSON Parsing ───
+export function parseAgentEvent(line) {
+    try {
+        const json = JSON.parse(line);
+        const result = AgentEvent.safeParse(json);
+        return result.success ? result.data : null;
+    }
+    catch {
+        return null;
+    }
+}
+export function serializeInput(input) {
+    return JSON.stringify(input);
+}
+// ─── Event → Log Mapping ───
+function statusToLogStatus(status) {
+    switch (status) {
+        case "start": return "start";
+        case "done": return "success";
+        case "error": return "error";
+    }
+}
+function agentStateToLogStatus(state) {
+    switch (state) {
+        case "idle": return "info";
+        case "thinking": return "start";
+        case "running": return "start";
+        case "done": return "success";
+        case "error": return "error";
+    }
+}
+/**
+ * Maps a Filepath AgentEvent to a Gateproof Log entry.
+ *
+ * This is the bridge between the two systems: Filepath's NDJSON protocol
+ * becomes observable evidence for gate assertions.
+ */
+export function agentEventToLog(event, agentName) {
+    const base = {
+        timestamp: new Date().toISOString(),
+        stage: agentName ?? "agent",
+    };
+    switch (event.type) {
+        case "text":
+            return {
+                ...base,
+                action: "text",
+                status: "info",
+                data: { content: event.content },
+            };
+        case "tool":
+            return {
+                ...base,
+                action: `tool:${event.name}`,
+                status: statusToLogStatus(event.status),
+                data: {
+                    name: event.name,
+                    ...(event.path && { path: event.path }),
+                    ...(event.output && { output: event.output }),
+                },
+            };
+        case "command":
+            return {
+                ...base,
+                action: `cmd:${event.cmd}`,
+                status: statusToLogStatus(event.status),
+                data: {
+                    cmd: event.cmd,
+                    ...(event.exit !== undefined && { exit: event.exit }),
+                    ...(event.stdout && { stdout: event.stdout }),
+                    ...(event.stderr && { stderr: event.stderr }),
+                },
+                ...(event.status === "error" && event.stderr && {
+                    error: {
+                        tag: "CommandError",
+                        message: event.stderr,
+                    },
+                }),
+            };
+        case "commit":
+            return {
+                ...base,
+                action: "commit",
+                status: "success",
+                data: { hash: event.hash, message: event.message },
+            };
+        case "spawn":
+            return {
+                ...base,
+                action: "spawn",
+                status: "start",
+                data: {
+                    name: event.name,
+                    agent: event.agent,
+                    model: event.model,
+                    ...(event.task && { task: event.task }),
+                },
+            };
+        case "workers":
+            return {
+                ...base,
+                action: "workers",
+                status: "info",
+                data: { workers: event.workers },
+            };
+        case "status":
+            return {
+                ...base,
+                action: "status",
+                status: agentStateToLogStatus(event.state),
+                data: {
+                    state: event.state,
+                    ...(event.context_pct !== undefined && { context_pct: event.context_pct }),
+                },
+            };
+        case "handoff":
+            return {
+                ...base,
+                action: "handoff",
+                status: "info",
+                data: { summary: event.summary },
+            };
+        case "done":
+            return {
+                ...base,
+                action: "done",
+                status: "success",
+                data: {
+                    ...(event.summary && { summary: event.summary }),
+                },
+            };
+    }
+}
+/**
+ * Parses an NDJSON line and maps it to a Log entry.
+ * Returns null for unparseable lines (graceful degradation).
+ */
+export function ndjsonLineToLog(line, agentName) {
+    const event = parseAgentEvent(line);
+    if (!event)
+        return null;
+    return agentEventToLog(event, agentName);
+}
+//# sourceMappingURL=filepath-protocol.js.map

package/dist/filepath-protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filepath-protocol.js","sourceRoot":"","sources":["../src/filepath-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,uBAAuB;AAEvB,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC;IAChC,MAAM;IACN,UAAU;IACV,SAAS;IACT,MAAM;IACN,OAAO;CACR,CAAC,CAAC;AAGH,mDAAmD;AAEnD,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC1B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC1B,OAAO,EAAE,CAAC,CAAC,KAAK,CACd,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,MAAM,EAAE,WAAW;KACpB,CAAC,CACH;CACF,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzB,KAAK,EAAE,WAAW;IAClB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC1B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACrD,SAAS;IACT,SAAS;IACT,YAAY;IACZ,WAAW;IACX,UAAU;IACV,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,SAAS;CACV,CAAC,CAAC;AAGH,mDAAmD;AAEnD,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC1B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;CAC5C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACrD,WAAW;IACX,aAAa;CACd,CAAC,CAAC;AAGH,yBAAyB;AAEzB,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1C,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAiB;IAC9C,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,8BAA8B;AAE9B,SAAS,iBAAiB,CAAC,MAAkC;IAC3D,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,OAAO,CAAC,CAAC,OAAO,OAAO,CAAC;QAC7B,KAAK,MAAM,CAAC,CAAC,OAAO,SAAS,CAAC;QAC9B,KAAK,OAAO,CAAC,CAAC,OAAO,OAAO,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAkB;IAC/C,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,MAAM,CAAC,CAAC,OAAO,MAAM,CAAC;QAC3B,KAAK,UAAU,CAAC,CAAC,OAAO,OAAO,CAAC;QAChC,KAAK,SAAS,CAAC,CAAC,OAAO,OAAO,CAAC;QAC/B,KAAK,MAAM,CAAC,CAAC,OAAO,SAAS,CAAC;QAC9B,KAAK,OAAO,CAAC,CAAC,OAAO,OAAO,CAAC;IAC/B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,KAAiB,EAAE,SAAkB;IACnE,MAAM,IAAI,GAAiB;QACzB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,KAAK,EAAE,SAAS,IAAI,OAAO;KAC5B,CAAC;IAEF,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,MAAM;YACT,OAAO;gBACL,GAAG,IAAI;gBACP,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;aACjC,CAAC;QAEJ,KAAK,MAAM;YACT,OAAO;gBACL,GAAG,IAAI;gBACP,MAAM,EAAE,QAAQ,KAAK,CAAC,IAAI,EAAE;gBAC5B,MAAM,EAAE,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC;gBACvC,IAAI,EAAE;oBACJ,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;oBACvC,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;iBAC9C;aACF,CAAC;QAEJ,KAAK,SAAS;YACZ,OAAO;gBACL,GAAG,IAAI;gBACP,MAAM,EAAE,OAAO,KAAK,CAAC,GAAG,EAAE;gBAC1B,MAAM,EAAE,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC;gBACvC,IAAI,EAAE;oBACJ,GAAG,EAAE,KAAK,CAAC,GAAG;oBACd,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;oBACrD,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;oBAC7C,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;iBAC9C;gBACD,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,OAAO,IAAI,KAAK,CAAC,MAAM,IAAI;oBAC9C,KAAK,EAAE;wBACL,GAAG,EAAE,cAAc;wBACnB,OAAO,EAAE,KAAK,CAAC,MAAM;qBACtB;iBACF,CAAC;aACH,CAAC;QAEJ,KAAK,QAAQ;YACX,OAAO;gBACL,GAAG,IAAI;gBACP,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,SAAS;gBACjB,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;aACnD,CAAC;QAEJ,KAAK,OAAO;YACV,OAAO;gBACL,GAAG,IAAI;gBACP,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE;oBACJ,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;iBACxC;aACF,CAAC;QAEJ,KAAK,SAAS;YACZ,OAAO;gBACL,GAAG,IAAI;gBACP,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;aACjC,CAAC;QAEJ,KAAK,QAAQ;YACX,OAAO;gBACL,GAAG,IAAI;gBACP,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC;gBAC1C,IAAI,EAAE;oBACJ,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;iBAC3E;aACF,CAAC;QAEJ,KAAK,SAAS;YACZ,OAAO;gBACL,GAAG,IAAI;gBACP,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;aACjC,CAAC;QAEJ,KAAK,MAAM;YACT,OAAO;gBACL,GAAG,IAAI;gBACP,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,SAAS;gBACjB,IAAI,EAAE;oBACJ,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;iBACjD;aACF,CAAC;IACN,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,SAAkB;IAC9D,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,eAAe,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;AAC3C,CAAC"}

package/dist/filepath-runtime.d.ts

@@ -0,0 +1,100 @@
+/**
+ * Cloudflare Sandbox Runtime — real FilepathRuntime for Cloudflare Workers
+ *
+ * Spawns agent processes inside Cloudflare Sandbox containers,
+ * wires NDJSON stdout to a broadcast AsyncIterable (solving the
+ * dual-reader problem), and maps stdin/stop to the sandbox process.
+ *
+ * Usage:
+ * ```ts
+ * import { getSandbox } from "@cloudflare/sandbox";
+ * import { CloudflareSandboxRuntime, setFilepathRuntime } from "gateproof";
+ *
+ * setFilepathRuntime(new CloudflareSandboxRuntime({
+ *   getSandbox: (config) => getSandbox(env.Sandbox, `agent-${config.name}-${Date.now()}`),
+ * }));
+ * ```
+ */
+import type { FilepathContainer, FilepathRuntime } from "./filepath-backend";
+import type { AgentActConfig } from "./act";
+/**
+ * Minimal interface for a Cloudflare Sandbox instance.
+ * Matches the shape returned by `getSandbox()` from `@cloudflare/sandbox`.
+ */
+export interface SandboxInstance {
+    startProcess(command: string[], options?: {
+        env?: Record<string, string>;
+        cwd?: string;
+    }): Promise<SandboxProcess>;
+}
+/**
+ * Minimal interface for a sandbox process.
+ * Matches the shape returned by `sandbox.startProcess()`.
+ */
+export interface SandboxProcess {
+    stdout: ReadableStream<Uint8Array>;
+    stdin?: WritableStream<Uint8Array>;
+}
+export interface CloudflareSandboxRuntimeOptions {
+    /**
+     * Factory that creates a sandbox for each agent spawn.
+     * Called once per `spawn()` invocation.
+     *
+     * @example
+     * ```ts
+     * import { getSandbox } from "@cloudflare/sandbox";
+     * getSandbox: (config) => getSandbox(env.Sandbox, `agent-${config.name}-${Date.now()}`)
+     * ```
+     */
+    getSandbox: (config: AgentActConfig) => SandboxInstance | Promise<SandboxInstance>;
+    /**
+     * Override the command run inside the container.
+     * Receives the agent config and returns an argv array.
+     *
+     * Default: `[config.agent]` (the agent field is used as the binary name).
+     */
+    command?: (config: AgentActConfig) => string[];
+}
+/**
+ * A broadcast AsyncIterable that supports multiple concurrent readers.
+ *
+ * Each call to `[Symbol.asyncIterator]()` returns an independent iterator
+ * that starts from the beginning of the buffer and sees all items,
+ * including those pushed after the iterator was created.
+ *
+ * This solves the dual-reader problem: both the executor (lifecycle drain)
+ * and observe layer (log mapping) can read from the same `container.stdout`
+ * without interfering with each other.
+ */
+export declare class BroadcastIterable<T> implements AsyncIterable<T> {
+    private buffer;
+    private waiters;
+    private isDone;
+    push(item: T): void;
+    end(): void;
+    [Symbol.asyncIterator](): AsyncIterator<T>;
+}
+/**
+ * Reads a `ReadableStream<Uint8Array>` and pushes complete NDJSON lines
+ * to a `BroadcastIterable<string>`.
+ *
+ * Handles:
+ * - Partial line buffering (chunks may split across line boundaries)
+ * - Stream completion (signals `end()` on the broadcast)
+ * - Stream errors (signals `end()` so readers don't hang)
+ */
+export declare function pipeReadableStreamToLines(stream: ReadableStream<Uint8Array>, broadcast: BroadcastIterable<string>): Promise<void>;
+/**
+ * Real FilepathRuntime backed by Cloudflare Sandbox.
+ *
+ * Spawns agent processes inside isolated Cloudflare Sandbox containers.
+ * Stdout is parsed as NDJSON lines and exposed as a broadcast
+ * `AsyncIterable<string>` so both the executor and observe layer
+ * can read concurrently.
+ */
+export declare class CloudflareSandboxRuntime implements FilepathRuntime {
+    private readonly options;
+    constructor(options: CloudflareSandboxRuntimeOptions);
+    spawn(config: AgentActConfig): Promise<FilepathContainer>;
+}
+//# sourceMappingURL=filepath-runtime.d.ts.map

package/dist/filepath-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filepath-runtime.d.ts","sourceRoot":"","sources":["../src/filepath-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC7E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,OAAO,CAAC;AAE5C;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,YAAY,CACV,OAAO,EAAE,MAAM,EAAE,EACjB,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,GACvD,OAAO,CAAC,cAAc,CAAC,CAAC;CAC5B;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;IACnC,KAAK,CAAC,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,+BAA+B;IAC9C;;;;;;;;;OASG;IACH,UAAU,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAEnF;;;;;OAKG;IACH,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,MAAM,EAAE,CAAC;CAChD;AAED;;;;;;;;;;GAUG;AACH,qBAAa,iBAAiB,CAAC,CAAC,CAAE,YAAW,aAAa,CAAC,CAAC,CAAC;IAC3D,OAAO,CAAC,MAAM,CAAW;IACzB,OAAO,CAAC,OAAO,CAA8B;IAC7C,OAAO,CAAC,MAAM,CAAS;IAEvB,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI;IAMnB,GAAG,IAAI,IAAI;IAMX,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC;CA2B3C;AAED;;;;;;;;GAQG;AACH,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC,EAClC,SAAS,EAAE,iBAAiB,CAAC,MAAM,CAAC,GACnC,OAAO,CAAC,IAAI,CAAC,CA+Bf;AAeD;;;;;;;GAOG;AACH,qBAAa,wBAAyB,YAAW,eAAe;IAC9D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkC;gBAE9C,OAAO,EAAE,+BAA+B;IAI9C,KAAK,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,iBAAiB,CAAC;CA0DhE"}

package/dist/filepath-runtime.js

@@ -0,0 +1,190 @@
+/**
+ * Cloudflare Sandbox Runtime — real FilepathRuntime for Cloudflare Workers
+ *
+ * Spawns agent processes inside Cloudflare Sandbox containers,
+ * wires NDJSON stdout to a broadcast AsyncIterable (solving the
+ * dual-reader problem), and maps stdin/stop to the sandbox process.
+ *
+ * Usage:
+ * ```ts
+ * import { getSandbox } from "@cloudflare/sandbox";
+ * import { CloudflareSandboxRuntime, setFilepathRuntime } from "gateproof";
+ *
+ * setFilepathRuntime(new CloudflareSandboxRuntime({
+ *   getSandbox: (config) => getSandbox(env.Sandbox, `agent-${config.name}-${Date.now()}`),
+ * }));
+ * ```
+ */
+/**
+ * A broadcast AsyncIterable that supports multiple concurrent readers.
+ *
+ * Each call to `[Symbol.asyncIterator]()` returns an independent iterator
+ * that starts from the beginning of the buffer and sees all items,
+ * including those pushed after the iterator was created.
+ *
+ * This solves the dual-reader problem: both the executor (lifecycle drain)
+ * and observe layer (log mapping) can read from the same `container.stdout`
+ * without interfering with each other.
+ */
+export class BroadcastIterable {
+    buffer = [];
+    waiters = new Set();
+    isDone = false;
+    push(item) {
+        this.buffer.push(item);
+        for (const waiter of this.waiters)
+            waiter();
+        this.waiters.clear();
+    }
+    end() {
+        this.isDone = true;
+        for (const waiter of this.waiters)
+            waiter();
+        this.waiters.clear();
+    }
+    [Symbol.asyncIterator]() {
+        let index = 0;
+        const self = this;
+        return {
+            next() {
+                if (index < self.buffer.length) {
+                    return Promise.resolve({ value: self.buffer[index++], done: false });
+                }
+                if (self.isDone) {
+                    return Promise.resolve({ value: undefined, done: true });
+                }
+                return new Promise((resolve) => {
+                    const check = () => {
+                        if (index < self.buffer.length) {
+                            resolve({ value: self.buffer[index++], done: false });
+                        }
+                        else if (self.isDone) {
+                            resolve({ value: undefined, done: true });
+                        }
+                        else {
+                            self.waiters.add(check);
+                        }
+                    };
+                    check();
+                });
+            },
+        };
+    }
+}
+/**
+ * Reads a `ReadableStream<Uint8Array>` and pushes complete NDJSON lines
+ * to a `BroadcastIterable<string>`.
+ *
+ * Handles:
+ * - Partial line buffering (chunks may split across line boundaries)
+ * - Stream completion (signals `end()` on the broadcast)
+ * - Stream errors (signals `end()` so readers don't hang)
+ */
+export async function pipeReadableStreamToLines(stream, broadcast) {
+    const reader = stream.getReader();
+    const decoder = new TextDecoder();
+    let buffer = "";
+    try {
+        while (true) {
+            const { value, done } = await reader.read();
+            if (done)
+                break;
+            buffer += decoder.decode(value, { stream: true });
+            const lines = buffer.split("\n");
+            // Last element is incomplete (or empty if buffer ended with \n)
+            buffer = lines.pop();
+            for (const line of lines) {
+                if (line.length > 0) {
+                    broadcast.push(line);
+                }
+            }
+        }
+        // Flush any remaining partial line
+        const remaining = buffer + decoder.decode();
+        if (remaining.length > 0) {
+            broadcast.push(remaining);
+        }
+    }
+    finally {
+        broadcast.end();
+        reader.releaseLock();
+    }
+}
+/**
+ * Builds the environment variables for the sandbox process.
+ */
+function buildEnv(config) {
+    return {
+        FILEPATH_TASK: config.task,
+        FILEPATH_AGENT_TYPE: config.agent,
+        FILEPATH_MODEL: config.model,
+        FILEPATH_WORKSPACE: "/workspace",
+        ...config.env,
+    };
+}
+/**
+ * Real FilepathRuntime backed by Cloudflare Sandbox.
+ *
+ * Spawns agent processes inside isolated Cloudflare Sandbox containers.
+ * Stdout is parsed as NDJSON lines and exposed as a broadcast
+ * `AsyncIterable<string>` so both the executor and observe layer
+ * can read concurrently.
+ */
+export class CloudflareSandboxRuntime {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    async spawn(config) {
+        const sandbox = await this.options.getSandbox(config);
+        const command = this.options.command
+            ? this.options.command(config)
+            : [config.agent];
+        const env = buildEnv(config);
+        const proc = await sandbox.startProcess(command, {
+            env,
+            cwd: "/workspace",
+        });
+        const broadcast = new BroadcastIterable();
+        // Start piping stdout → broadcast in the background.
+        // Errors are swallowed — the broadcast just ends, and readers
+        // see the stream close (which the executor treats as container exit).
+        pipeReadableStreamToLines(proc.stdout, broadcast).catch(() => {
+            broadcast.end();
+        });
+        const encoder = new TextEncoder();
+        return {
+            stdout: broadcast,
+            async sendInput(line) {
+                if (!proc.stdin) {
+                    throw new Error("Container stdin is not available");
+                }
+                const writer = proc.stdin.getWriter();
+                try {
+                    await writer.write(encoder.encode(line + "\n"));
+                }
+                finally {
+                    writer.releaseLock();
+                }
+            },
+            async stop() {
+                // Signal the agent to stop via stdin, then close streams.
+                // Cloudflare Sandbox doesn't expose SIGTERM — closing stdin
+                // is the convention for requesting graceful shutdown.
+                if (proc.stdin) {
+                    try {
+                        const writer = proc.stdin.getWriter();
+                        await writer.write(encoder.encode(JSON.stringify({ type: "signal", action: "stop" }) + "\n"));
+                        writer.releaseLock();
+                        await proc.stdin.close();
+                    }
+                    catch {
+                        // stdin may already be closed
+                    }
+                }
+                broadcast.end();
+            },
+        };
+    }
+}
+//# sourceMappingURL=filepath-runtime.js.map

package/dist/filepath-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filepath-runtime.js","sourceRoot":"","sources":["../src/filepath-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AA+CH;;;;;;;;;;GAUG;AACH,MAAM,OAAO,iBAAiB;IACpB,MAAM,GAAQ,EAAE,CAAC;IACjB,OAAO,GAAoB,IAAI,GAAG,EAAE,CAAC;IACrC,MAAM,GAAG,KAAK,CAAC;IAEvB,IAAI,CAAC,IAAO;QACV,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,EAAE,CAAC;QAC5C,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED,GAAG;QACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,EAAE,CAAC;QAC5C,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED,CAAC,MAAM,CAAC,aAAa,CAAC;QACpB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,MAAM,IAAI,GAAG,IAAI,CAAC;QAElB,OAAO;YACL,IAAI;gBACF,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;oBAC/B,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBACvE,CAAC;gBACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;oBAChB,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,SAAyB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC3E,CAAC;gBACD,OAAO,IAAI,OAAO,CAAoB,CAAC,OAAO,EAAE,EAAE;oBAChD,MAAM,KAAK,GAAG,GAAG,EAAE;wBACjB,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;4BAC/B,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;wBACxD,CAAC;6BAAM,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;4BACvB,OAAO,CAAC,EAAE,KAAK,EAAE,SAAyB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;wBAC5D,CAAC;6BAAM,CAAC;4BACN,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;wBAC1B,CAAC;oBACH,CAAC,CAAC;oBACF,KAAK,EAAE,CAAC;gBACV,CAAC,CAAC,CAAC;YACL,CAAC;SACF,CAAC;IACJ,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAkC,EAClC,SAAoC;IAEpC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,IAAI,MAAM,GAAG,EAAE,CAAC;IAEhB,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAEhB,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAClD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjC,gEAAgE;YAChE,MAAM,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;YAEtB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACpB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC;QACH,CAAC;QAED,mCAAmC;QACnC,MAAM,SAAS,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC5C,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,GAAG,EAAE,CAAC;QAChB,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,QAAQ,CAAC,MAAsB;IACtC,OAAO;QACL,aAAa,EAAE,MAAM,CAAC,IAAI;QAC1B,mBAAmB,EAAE,MAAM,CAAC,KAAK;QACjC,cAAc,EAAE,MAAM,CAAC,KAAK;QAC5B,kBAAkB,EAAE,YAAY;QAChC,GAAG,MAAM,CAAC,GAAG;KACd,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,wBAAwB;IAClB,OAAO,CAAkC;IAE1D,YAAY,OAAwC;QAClD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,MAAsB;QAChC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO;YAClC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;YAC9B,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnB,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAE7B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE;YAC/C,GAAG;YACH,GAAG,EAAE,YAAY;SAClB,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,IAAI,iBAAiB,EAAU,CAAC;QAElD,qDAAqD;QACrD,8DAA8D;QAC9D,sEAAsE;QACtE,yBAAyB,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YAC3D,SAAS,CAAC,GAAG,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAElC,OAAO;YACL,MAAM,EAAE,SAAS;YAEjB,KAAK,CAAC,SAAS,CAAC,IAAY;gBAC1B,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;oBAChB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;gBACtD,CAAC;gBACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;gBACtC,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;gBAClD,CAAC;wBAAS,CAAC;oBACT,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvB,CAAC;YACH,CAAC;YAED,KAAK,CAAC,IAAI;gBACR,0DAA0D;gBAC1D,4DAA4D;gBAC5D,sDAAsD;gBACtD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;wBACtC,MAAM,MAAM,CAAC,KAAK,CAChB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,CAC1E,CAAC;wBACF,MAAM,CAAC,WAAW,EAAE,CAAC;wBACrB,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;oBAC3B,CAAC;oBAAC,MAAM,CAAC;wBACP,8BAA8B;oBAChC,CAAC;gBACH,CAAC;gBACD,SAAS,CAAC,GAAG,EAAE,CAAC;YAClB,CAAC;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/http-backend.d.ts

@@ -14,6 +14,15 @@ export interface HttpObserveConfig {
      * If Content-Length exceeds this, the body is not read and an error log is emitted instead.
      */
     maxResponseSizeBytes?: number;
+    /**
+     * Max retries per poll on transient network errors (default: 2).
+     * Uses exponential backoff: 500ms, 1s, 2s.
+     */
+    maxRetries?: number;
+    /**
+     * Consecutive failures before the circuit breaker opens and slows polling (default: 5).
+     */
+    circuitBreakerThreshold?: number;
 }
 /**
  * Creates an observe resource that polls an HTTP endpoint and captures responses as logs.

package/dist/http-backend.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http-backend.d.ts","sourceRoot":"","sources":["../src/http-backend.ts"],"names":[],"mappings":"AAEA,OAAO,EAA4B,KAAK,eAAe,EAAE,MAAM,WAAW,CAAC;AAO3E,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,iBAAiB,GAAG,eAAe,CAqJpF"}
+{"version":3,"file":"http-backend.d.ts","sourceRoot":"","sources":["../src/http-backend.ts"],"names":[],"mappings":"AAEA,OAAO,EAA4B,KAAK,eAAe,EAAE,MAAM,WAAW,CAAC;AAO3E,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,iBAAiB,GAAG,eAAe,CAoMpF"}

package/dist/http-backend.js

@@ -9,6 +9,35 @@ export function createHttpObserveResource(config) {
     let queue = null;
     let stopped = false;
     let pollTimer = null;
+    const maxRetries = config.maxRetries ?? 2;
+    const circuitBreakerThreshold = config.circuitBreakerThreshold ?? 5;
+    const baseInterval = config.pollInterval ?? HTTP_DEFAULT_POLL_INTERVAL_MS;
+    let consecutiveFailures = 0;
+    let circuitOpen = false;
+    const fetchOnce = async (timeoutMs) => {
+        return fetch(config.url, {
+            method: config.method || "GET",
+            headers: config.headers,
+            body: config.body,
+            signal: AbortSignal.timeout(timeoutMs),
+        });
+    };
+    const fetchWithRetry = async (timeoutMs) => {
+        let lastError;
+        for (let attempt = 0; attempt <= maxRetries; attempt++) {
+            try {
+                return await fetchOnce(timeoutMs);
+            }
+            catch (err) {
+                lastError = err;
+                if (attempt < maxRetries) {
+                    const backoffMs = 500 * Math.pow(2, attempt); // 500ms, 1s, 2s
+                    await new Promise((r) => setTimeout(r, backoffMs));
+                }
+            }
+        }
+        throw lastError;
+    };
     const poll = async () => {
         if (stopped || !queue)
             return;
@@ -17,12 +46,14 @@ export function createHttpObserveResource(config) {
         const timeoutMs = config.timeoutMs ?? HTTP_DEFAULT_TIMEOUT_MS;
         const maxResponseSizeBytes = config.maxResponseSizeBytes ?? HTTP_MAX_RESPONSE_SIZE_BYTES;
         try {
-            const response = await fetch(config.url, {
-                method: config.method || "GET",
-                headers: config.headers,
-                body: config.body,
-                signal: AbortSignal.timeout(timeoutMs),
-            });
+            const response = await fetchWithRetry(timeoutMs);
+            // Reset circuit breaker on success; restore normal interval if recovering
+            if (circuitOpen && pollTimer) {
+                clearInterval(pollTimer);
+                pollTimer = setInterval(() => poll(), baseInterval);
+                circuitOpen = false;
+            }
+            consecutiveFailures = 0;
             const durationMs = Date.now() - startTime;
             const contentType = response.headers.get("content-type") || "";
             let body = null;
@@ -68,8 +99,10 @@ export function createHttpObserveResource(config) {
             await Effect.runPromise(Queue.offer(queue, log).pipe(Effect.tapError((error) => Effect.logError("Failed to enqueue HTTP log", error)), Effect.catchAll(() => Effect.void)));
         }
         catch (unknownError) {
+            consecutiveFailures++;
             const error = unknownError instanceof Error ? unknownError : new Error(String(unknownError));
             const durationMs = Date.now() - startTime;
+            const isCircuitOpen = consecutiveFailures >= circuitBreakerThreshold;
             const log = {
                 requestId,
                 timestamp: new Date().toISOString(),
@@ -78,18 +111,27 @@ export function createHttpObserveResource(config) {
                 status: "error",
                 durationMs,
                 error: {
-                    tag: error.name || "HttpError",
-                    message: error.message || String(error),
+                    tag: isCircuitOpen ? "HttpCircuitOpen" : (error.name || "HttpError"),
+                    message: isCircuitOpen
+                        ? `${consecutiveFailures} consecutive failures, backing off: ${error.message}`
+                        : (error.message || String(error)),
                     stack: error.stack,
                 },
             };
             await Effect.runPromise(Queue.offer(queue, log).pipe(Effect.tapError((enqueueError) => Effect.logError("Failed to enqueue HTTP error log", enqueueError)), Effect.catchAll(() => Effect.void)));
+            // Circuit breaker: reschedule at a slower rate
+            if (isCircuitOpen && !circuitOpen && pollTimer) {
+                clearInterval(pollTimer);
+                pollTimer = setInterval(() => poll(), baseInterval * 5);
+                circuitOpen = true;
+            }
         }
     };
     return {
         start() {
             return Effect.gen(function* () {
                 stopped = false;
+                consecutiveFailures = 0;
                 queue = yield* Queue.bounded(1000);
                 // Initial poll
                 yield* Effect.promise(() => poll());