glirastes 0.4.0 → 0.5.1

package/dist/agent/runner.d.ts

@@ -0,0 +1,150 @@
+import { type LanguageModel } from 'ai';
+import { Workspace } from './workspace.js';
+/**
+ * The headless skill runner of the managed job (spec 4.6): it runs the skills
+ * the local coding agent uses through an ai@6 tool loop. The skills are the
+ * instructions. The runner leads: a plan hands out one small task after the
+ * other (the resolve list, then a few tools of one module), each in a fresh
+ * conversation with only its own work list, so the context stays small, a
+ * finished task stays written and the model ending early ends one task only.
+ */
+/** Steps of one task. */
+export declare const MAX_JOB_STEPS = 60;
+/** Tasks of one job; the budget and the deadline normally end it earlier. */
+export declare const MAX_JOB_TASKS = 120;
+/** Tasks that run side by side; most of a task is waiting for the model. */
+export declare const TASK_CONCURRENCY = 4;
+/** Explicit, so a provider default never cuts a tool call short. */
+export declare const MAX_OUTPUT_TOKENS = 16000;
+/** The only words the runner adds to the skills: nobody answers a question in CI. */
+export declare const HEADLESS_INSTRUCTIONS: string;
+export interface JobSkill {
+    name: string;
+    text: string;
+}
+export interface RefreshSummary {
+    /** Findings of the refresh, `resolution-rejected` among them; codes and subjects only. */
+    findings: Array<{
+        code: string;
+        subjectRef: string;
+        message: string;
+    }>;
+    changed: number;
+}
+export interface JobTools {
+    /** May be called by several tasks at once; the caller runs one refresh at a time. */
+    refresh(): Promise<RefreshSummary>;
+    evaluate(): Promise<{
+        failed: number;
+        failures: unknown[];
+    }>;
+}
+/** One unit of work: the work lists as the CLI prints them, cut down to this task's items. */
+export interface JobTask {
+    id: string;
+    worklists: Record<string, unknown>;
+    /** Open items of the task, for the report. */
+    open: number;
+    /** Stable keys of the task: a rejected entry is repaired by the task that owns it. */
+    keys: ReadonlyArray<string>;
+    /** Runs alone, before anything else starts (the resolve list changes what the tools are). */
+    exclusive?: boolean;
+}
+/** Hands out the next task from the current state of the repository; `null` when nothing is left. */
+export interface JobPlan {
+    next(): Promise<JobTask | null>;
+    /** Called once a task and its refresh are over, so the plan can hand its open items out again. */
+    finished?(task: JobTask): void;
+}
+/** Content-free facts about one finished task, for the CI log. */
+export interface TaskReport {
+    id: string;
+    open: number;
+    steps: number;
+    finishReason: string;
+    repaired: boolean;
+}
+export type SkillJobOutcome = 'completed' | 'budget_stopped' | 'timed_out' | 'failed';
+export interface SkillJobResult {
+    outcome: SkillJobOutcome;
+    reasonCode?: string;
+    repairRounds: 0 | 1;
+    servedModel: string;
+    usage: {
+        inputTokens: number;
+        outputTokens: number;
+        costUsd: number | null;
+    };
+    /** Findings of the last refresh the runner ran. */
+    refresh?: RefreshSummary;
+    /** Tasks the runner started. */
+    tasks: number;
+}
+export declare function jobTools(workspace: Workspace, tools: JobTools): {
+    list_files: import("ai").Tool<{
+        dir?: string | undefined;
+        recursive?: boolean | undefined;
+    }, string[] | {
+        error: string;
+    }>;
+    read_file: import("ai").Tool<{
+        path: string;
+    }, {
+        path: string;
+        content: string;
+        truncated: boolean;
+        bytes: number;
+    } | {
+        error: string;
+    }>;
+    grep: import("ai").Tool<{
+        text: string;
+        dir?: string | undefined;
+    }, import("./workspace.js").GrepMatch[] | {
+        error: string;
+    }>;
+    write_file: import("ai").Tool<{
+        path: string;
+        content: string;
+    }, {
+        path: string;
+        bytes: number;
+    } | {
+        error: string;
+    }>;
+    upsert_semantics: import("ai").Tool<{
+        entries: Record<string, unknown>[];
+    }, {
+        path: string;
+        bytes: number;
+    } | {
+        error: string;
+    }>;
+    upsert_resolutions: import("ai").Tool<{
+        entries: Record<string, Record<string, unknown>>;
+    }, {
+        path: string;
+        bytes: number;
+    } | {
+        error: string;
+    }>;
+    run_refresh: import("ai").Tool<Record<string, never>, RefreshSummary>;
+    run_eval: import("ai").Tool<Record<string, never>, {
+        failed: number;
+        failures: unknown[];
+    }>;
+};
+export declare function runSkillJob(input: {
+    model: LanguageModel;
+    modelId: string;
+    skills: ReadonlyArray<JobSkill>;
+    plan: JobPlan;
+    workspace: Workspace;
+    tools: JobTools;
+    budgetUsd: number;
+    deadline: Date;
+    now?: () => Date;
+    maxSteps?: number;
+    onTask?: (report: TaskReport) => void | Promise<void>;
+    concurrency?: number;
+}): Promise<SkillJobResult>;

package/dist/agent/runner.js

@@ -0,0 +1,250 @@
+import { APICallError, generateText, stepCountIs, tool } from 'ai';
+import { z } from 'zod';
+import { TOOLS_PATHS } from '../codegen/tools/config.js';
+import { stepCostUsd } from './openrouter.js';
+import { WorkspaceRefusal } from './workspace.js';
+/**
+ * The headless skill runner of the managed job (spec 4.6): it runs the skills
+ * the local coding agent uses through an ai@6 tool loop. The skills are the
+ * instructions. The runner leads: a plan hands out one small task after the
+ * other (the resolve list, then a few tools of one module), each in a fresh
+ * conversation with only its own work list, so the context stays small, a
+ * finished task stays written and the model ending early ends one task only.
+ */
+/** Steps of one task. */
+export const MAX_JOB_STEPS = 60;
+/** Tasks of one job; the budget and the deadline normally end it earlier. */
+export const MAX_JOB_TASKS = 120;
+/** Tasks that run side by side; most of a task is waiting for the model. */
+export const TASK_CONCURRENCY = 4;
+/** Explicit, so a provider default never cuts a tool call short. */
+export const MAX_OUTPUT_TOKENS = 16_000;
+/** The only words the runner adds to the skills: nobody answers a question in CI. */
+export const HEADLESS_INSTRUCTIONS = 'No developer is present. Work every item of these work lists now, without asking, '
+    + 'then stop. Add entries with upsert_semantics and upsert_resolutions; they keep every other entry of the file. '
+    + 'Leave items owned by the developer open.';
+/** Margin before the job key expires, so the ledger still reaches the Platform. */
+const DEADLINE_MARGIN_MS = 3 * 60_000;
+const isRecord = (value) => typeof value === 'object' && value !== null && !Array.isArray(value);
+function refusalSafe(run) {
+    return run().catch((error) => {
+        if (error instanceof WorkspaceRefusal)
+            return { error: error.code };
+        throw error;
+    });
+}
+export function jobTools(workspace, tools) {
+    return {
+        list_files: tool({
+            description: 'List files of the repository (relative paths; directories end with /).',
+            inputSchema: z.object({ dir: z.string().max(500).optional(), recursive: z.boolean().optional() }),
+            execute: ({ dir, recursive }) => refusalSafe(() => workspace.listFiles(dir ?? '', recursive ?? false)),
+        }),
+        read_file: tool({
+            description: 'Read one repository file (at most 64 KB; secrets are redacted).',
+            inputSchema: z.object({ path: z.string().min(1).max(500) }),
+            execute: ({ path }) => refusalSafe(() => workspace.readFile(path)),
+        }),
+        grep: tool({
+            description: 'Find lines that contain a literal text in the repository.',
+            inputSchema: z.object({ text: z.string().min(2).max(200), dir: z.string().max(500).optional() }),
+            execute: ({ text, dir }) => refusalSafe(() => workspace.grep(text, dir ?? '')),
+        }),
+        write_file: tool({
+            description: 'Write a whole file: .glirastes/tool-resolutions.json, .glirastes/tool-semantics.json or a contract file the work list names.',
+            inputSchema: z.object({ path: z.string().min(1).max(500), content: z.string().max(512 * 1024) }),
+            execute: ({ path, content }) => refusalSafe(() => workspace.writeFile(path, content)),
+        }),
+        upsert_semantics: tool({
+            description: `Add or replace entries of ${TOOLS_PATHS.semantics} by stableKey. Fields you send replace the stored ones, every other field and entry stays. Use this instead of write_file for that file.`,
+            inputSchema: z.object({ entries: z.array(z.record(z.string(), z.unknown())).min(1).max(20) }),
+            execute: ({ entries }) => refusalSafe(async () => {
+                if (entries.some((entry) => typeof entry.stableKey !== 'string' || entry.stableKey === '')) {
+                    throw new WorkspaceRefusal('write_invalid_json');
+                }
+                return workspace.updateJson(TOOLS_PATHS.semantics, (current) => {
+                    const stored = Array.isArray(current.tools) ? [...current.tools] : [];
+                    for (const entry of entries) {
+                        const index = stored.findIndex((candidate) => isRecord(candidate) && candidate.stableKey === entry.stableKey);
+                        if (index < 0) {
+                            stored.push(entry);
+                            continue;
+                        }
+                        const previous = stored[index];
+                        stored[index] = {
+                            ...previous,
+                            ...entry,
+                            ...(isRecord(previous.origin) && isRecord(entry.origin) ? { origin: { ...previous.origin, ...entry.origin } } : {}),
+                        };
+                    }
+                    return { schemaVersion: 1, ...current, tools: stored };
+                });
+            }),
+        }),
+        upsert_resolutions: tool({
+            description: `Add or replace entries of ${TOOLS_PATHS.resolutions}, keyed by stableKey; every other entry stays. Use this instead of write_file for that file.`,
+            inputSchema: z.object({ entries: z.record(z.string().min(1).max(2_100), z.record(z.string(), z.unknown())) }),
+            execute: ({ entries }) => refusalSafe(() => workspace.updateJson(TOOLS_PATHS.resolutions, (current) => ({
+                schemaVersion: 1,
+                ...current,
+                tools: { ...(isRecord(current.tools) ? current.tools : {}), ...entries },
+            }))),
+        }),
+        run_refresh: tool({
+            description: 'Run glirastes tools refresh and return its findings (resolution-rejected names entries the generator ignored).',
+            inputSchema: z.object({}),
+            execute: () => tools.refresh(),
+        }),
+        run_eval: tool({
+            description: 'Run glirastes tools eval and return the example sentences that do not find their tool.',
+            inputSchema: z.object({}),
+            execute: () => tools.evaluate(),
+        }),
+    };
+}
+function totals(steps) {
+    let inputTokens = 0;
+    let outputTokens = 0;
+    let costUsd = 0;
+    for (const step of steps) {
+        inputTokens += step.usage.inputTokens ?? 0;
+        outputTokens += step.usage.outputTokens ?? 0;
+        const cost = stepCostUsd(step);
+        costUsd = cost === undefined || costUsd === null ? null : costUsd + cost;
+    }
+    return { inputTokens, outputTokens, costUsd };
+}
+function failure(error, signal) {
+    if (signal.aborted)
+        return { outcome: 'timed_out', reasonCode: 'job_deadline' };
+    if (APICallError.isInstance(error) && error.statusCode === 402) {
+        return { outcome: 'budget_stopped', reasonCode: 'key_limit_reached' };
+    }
+    if (APICallError.isInstance(error))
+        return { outcome: 'failed', reasonCode: `model_http_${error.statusCode ?? 0}` };
+    return { outcome: 'failed', reasonCode: 'model_error' };
+}
+export async function runSkillJob(input) {
+    const now = input.now ?? (() => new Date());
+    const remaining = input.deadline.getTime() - now().getTime() - DEADLINE_MARGIN_MS;
+    const usage = { inputTokens: 0, outputTokens: 0, costUsd: 0 };
+    let servedModel = input.modelId;
+    let tasks = 0;
+    if (remaining <= 0) {
+        return { outcome: 'timed_out', reasonCode: 'job_deadline', repairRounds: 0, servedModel, usage, tasks };
+    }
+    const signal = AbortSignal.timeout(remaining);
+    const tools = jobTools(input.workspace, input.tools);
+    const system = input.skills.map((skill) => skill.text).join('\n\n');
+    const spent = () => usage.costUsd !== null && usage.costUsd >= input.budgetUsd;
+    const add = (steps) => {
+        const round = totals(steps);
+        usage.inputTokens += round.inputTokens;
+        usage.outputTokens += round.outputTokens;
+        usage.costUsd = usage.costUsd === null || round.costUsd === null ? null : usage.costUsd + round.costUsd;
+    };
+    const stopWhen = [
+        stepCountIs(input.maxSteps ?? MAX_JOB_STEPS),
+        ({ steps }) => {
+            const round = totals(steps);
+            return round.costUsd !== null && usage.costUsd !== null && usage.costUsd + round.costUsd >= input.budgetUsd;
+        },
+    ];
+    let repairRounds = 0;
+    let refresh;
+    /** Entries an earlier task left rejected; a later task does not pay for them again. */
+    const knownRejected = new Set();
+    const result = () => ({ repairRounds, servedModel, usage, ...(refresh ? { refresh } : {}), tasks });
+    const stopped = () => tasks >= MAX_JOB_TASKS || spent() || signal.aborted;
+    const runTask = async (task) => {
+        let messages = [{
+                role: 'user',
+                content: JSON.stringify({ instructions: HEADLESS_INSTRUCTIONS, worklists: task.worklists }),
+            }];
+        let steps = 0;
+        let finishReason = 'unknown';
+        let repaired = false;
+        for (;;) {
+            const round = await generateText({
+                model: input.model, system, messages, tools, stopWhen, abortSignal: signal, maxOutputTokens: MAX_OUTPUT_TOKENS,
+            });
+            add(round.steps);
+            steps += round.steps.length;
+            finishReason = round.finishReason;
+            servedModel = round.response.modelId || servedModel;
+            const summary = await input.tools.refresh();
+            refresh = summary;
+            const rejected = summary.findings.filter((finding) => finding.code === 'resolution-rejected'
+                && !knownRejected.has(finding.subjectRef)
+                && (task.keys.length === 0 || task.keys.includes(finding.subjectRef)));
+            if (rejected.length === 0 || repaired || spent() || signal.aborted)
+                break;
+            repaired = true;
+            repairRounds = 1;
+            messages = [
+                ...messages,
+                ...round.response.messages,
+                { role: 'user', content: JSON.stringify({ rejected }) },
+            ];
+        }
+        for (const finding of refresh?.findings ?? []) {
+            if (finding.code === 'resolution-rejected' && (task.keys.length === 0 || task.keys.includes(finding.subjectRef))) {
+                knownRejected.add(finding.subjectRef);
+            }
+        }
+        input.plan.finished?.(task);
+        await input.onTask?.({ id: task.id, open: task.open, steps, finishReason, repaired });
+    };
+    try {
+        // Exclusive tasks first, one at a time; then a pool that keeps asking the plan.
+        let seed = null;
+        while (!stopped()) {
+            const task = await input.plan.next();
+            if (!task)
+                break;
+            tasks += 1;
+            if (!task.exclusive) {
+                seed = task;
+                break;
+            }
+            await runTask(task);
+        }
+        let failed;
+        const worker = async (first) => {
+            let task = first;
+            for (;;) {
+                if (!task) {
+                    if (failed !== undefined || stopped())
+                        return;
+                    task = await input.plan.next();
+                    if (!task)
+                        return;
+                    tasks += 1;
+                }
+                try {
+                    await runTask(task);
+                }
+                catch (error) {
+                    failed ??= error;
+                    return;
+                }
+                task = null;
+            }
+        };
+        if (seed) {
+            const size = Math.max(1, input.concurrency ?? TASK_CONCURRENCY);
+            await Promise.all(Array.from({ length: size }, (_, index) => worker(index === 0 ? seed : null)));
+        }
+        if (failed !== undefined)
+            throw failed;
+    }
+    catch (error) {
+        return { ...failure(error, signal), ...result() };
+    }
+    if (spent())
+        return { outcome: 'budget_stopped', reasonCode: 'job_budget_reached', ...result() };
+    if (signal.aborted)
+        return { outcome: 'timed_out', reasonCode: 'job_deadline', ...result() };
+    return { outcome: 'completed', ...result() };
+}
+//# sourceMappingURL=runner.js.map

package/dist/agent/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../src/agent/runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,IAAI,EAAyC,MAAM,IAAI,CAAC;AAC1G,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAa,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAE7D;;;;;;;GAOG;AAEH,yBAAyB;AACzB,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAC;AAChC,6EAA6E;AAC7E,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,CAAC;AACjC,4EAA4E;AAC5E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,oEAAoE;AACpE,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACxC,qFAAqF;AACrF,MAAM,CAAC,MAAM,qBAAqB,GAAG,oFAAoF;MACrH,gHAAgH;MAChH,0CAA0C,CAAC;AAC/C,mFAAmF;AACnF,MAAM,kBAAkB,GAAG,CAAC,GAAG,MAAM,CAAC;AA6DtC,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAE5I,SAAS,WAAW,CAAI,GAAqB;IAC3C,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QACpC,IAAI,KAAK,YAAY,gBAAgB;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,SAAoB,EAAE,KAAe;IAC5D,OAAO;QACL,UAAU,EAAE,IAAI,CAAC;YACf,WAAW,EAAE,wEAAwE;YACrF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;YACjG,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,EAAE,SAAS,IAAI,KAAK,CAAC,CAAC;SACvG,CAAC;QACF,SAAS,EAAE,IAAI,CAAC;YACd,WAAW,EAAE,iEAAiE;YAC9E,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3D,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;SACnE,CAAC;QACF,IAAI,EAAE,IAAI,CAAC;YACT,WAAW,EAAE,2DAA2D;YACxE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;YAChG,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;SAC/E,CAAC;QACF,UAAU,EAAE,IAAI,CAAC;YACf,WAAW,EAAE,8HAA8H;YAC3I,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC;YAChG,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;SACtF,CAAC;QACF,gBAAgB,EAAE,IAAI,CAAC;YACrB,WAAW,EAAE,6BAA6B,WAAW,CAAC,SAAS,0IAA0I;YACzM,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAC7F,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE;gBAC/C,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,KAAK,EAAE,CAAC,EAAE,CAAC;oBAC3F,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;gBACnD,CAAC;gBACD,OAAO,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE;oBAC7D,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAuC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACxG,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;wBAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC;wBAC9G,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;4BACd,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;4BACnB,SAAS;wBACX,CAAC;wBACD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAE,CAAC;wBAChC,MAAM,CAAC,KAAK,CAAC,GAAG;4BACd,GAAG,QAAQ;4BACX,GAAG,KAAK;4BACR,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBACpH,CAAC;oBACJ,CAAC;oBACD,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;gBACzD,CAAC,CAAC,CAAC;YACL,CAAC,CAAC;SACH,CAAC;QACF,kBAAkB,EAAE,IAAI,CAAC;YACvB,WAAW,EAAE,6BAA6B,WAAW,CAAC,WAAW,8FAA8F;YAC/J,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC;YAC7G,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBACtG,aAAa,EAAE,CAAC;gBAChB,GAAG,OAAO;gBACV,KAAK,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,OAAO,EAAE;aACzE,CAAC,CAAC,CAAC;SACL,CAAC;QACF,WAAW,EAAE,IAAI,CAAC;YAChB,WAAW,EAAE,gHAAgH;YAC7H,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE;SAC/B,CAAC;QACF,QAAQ,EAAE,IAAI,CAAC;YACb,WAAW,EAAE,wFAAwF;YACrG,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE;SAChC,CAAC;KACH,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,KAA+G;IAC7H,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,OAAO,GAAkB,CAAC,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC;QAC3C,YAAY,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,GAAG,IAAI,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC;IAC3E,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,OAAO,CAAC,KAAc,EAAE,MAAmB;IAClD,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;IAChF,IAAI,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;QAC/D,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,mBAAmB,EAAE,CAAC;IACxE,CAAC;IACD,IAAI,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,KAAK,CAAC,UAAU,IAAI,CAAC,EAAE,EAAE,CAAC;IACpH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAajC;IACC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,kBAAkB,CAAC;IAClF,MAAM,KAAK,GAAG,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,CAAkB,EAAE,CAAC;IAC/E,IAAI,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QACnB,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC1G,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,CAAC;IAC/E,MAAM,GAAG,GAAG,CAAC,KAAmC,EAAE,EAAE;QAClD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,CAAC;QACvC,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,YAAY,CAAC;QACzC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC1G,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG;QACf,WAAW,CAAC,KAAK,CAAC,QAAQ,IAAI,aAAa,CAAC;QAC5C,CAAC,EAAE,KAAK,EAA2C,EAAE,EAAE;YACrD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,CAAC;QAC9G,CAAC;KACF,CAAC;IACF,IAAI,YAAY,GAAU,CAAC,CAAC;IAC5B,IAAI,OAAmC,CAAC;IACxC,uFAAuF;IACvF,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IACxC,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACpG,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,KAAK,IAAI,aAAa,IAAI,KAAK,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC;IAC1E,MAAM,OAAO,GAAG,KAAK,EAAE,IAAa,EAAiB,EAAE;QACrD,IAAI,QAAQ,GAAmB,CAAC;gBAC9B,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,qBAAqB,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;aAC5F,CAAC,CAAC;QACH,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,YAAY,GAAG,SAAS,CAAC;QAC7B,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,SAAS,CAAC;YACR,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC;gBAC/B,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,eAAe,EAAE,iBAAiB;aAC/G,CAAC,CAAC;YACH,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjB,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;YAC5B,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;YAClC,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,IAAI,WAAW,CAAC;YACpD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC5C,OAAO,GAAG,OAAO,CAAC;YAClB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,qBAAqB;mBACvF,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC;mBACtC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACzE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,IAAI,KAAK,EAAE,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM;YAC1E,QAAQ,GAAG,IAAI,CAAC;YAChB,YAAY,GAAG,CAAC,CAAC;YACjB,QAAQ,GAAG;gBACT,GAAG,QAAQ;gBACX,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ;gBAC1B,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE;aACxD,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,CAAC;YAC9C,IAAI,OAAO,CAAC,IAAI,KAAK,qBAAqB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;gBACjH,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC;IACxF,CAAC,CAAC;IACF,IAAI,CAAC;QACH,gFAAgF;QAChF,IAAI,IAAI,GAAmB,IAAI,CAAC;QAChC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YAClB,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACrC,IAAI,CAAC,IAAI;gBAAE,MAAM;YACjB,KAAK,IAAI,CAAC,CAAC;YACX,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACpB,IAAI,GAAG,IAAI,CAAC;gBACZ,MAAM;YACR,CAAC;YACD,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;QACD,IAAI,MAAe,CAAC;QACpB,MAAM,MAAM,GAAG,KAAK,EAAE,KAAqB,EAAiB,EAAE;YAC5D,IAAI,IAAI,GAAG,KAAK,CAAC;YACjB,SAAS,CAAC;gBACR,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,IAAI,MAAM,KAAK,SAAS,IAAI,OAAO,EAAE;wBAAE,OAAO;oBAC9C,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;oBAC/B,IAAI,CAAC,IAAI;wBAAE,OAAO;oBAClB,KAAK,IAAI,CAAC,CAAC;gBACb,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;gBACtB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,KAAK,KAAK,CAAC;oBACjB,OAAO;gBACT,CAAC;gBACD,IAAI,GAAG,IAAI,CAAC;YACd,CAAC;QACH,CAAC,CAAC;QACF,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,WAAW,IAAI,gBAAgB,CAAC,CAAC;YAChE,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnG,CAAC;QACD,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,MAAM,CAAC;IACzC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC;IACpD,CAAC;IACD,IAAI,KAAK,EAAE;QAAE,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,oBAAoB,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC;IACjG,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC;IAC7F,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC;AAC/C,CAAC"}

package/dist/agent/workspace.d.ts

@@ -0,0 +1,65 @@
+/**
+ * The repository as the managed skill runner sees it (spec 4.6): read inside
+ * the checkout only, never through a symlink, never a git-ignored or denied
+ * file, with secrets redacted and a byte budget; write only the agentic data
+ * files and the new `contract.ts` files the work list names. There is no
+ * shell and no network behind any of these operations.
+ */
+export declare const READ_FILE_LIMIT_BYTES: number;
+export declare const READ_RUN_LIMIT_BYTES: number;
+export type WorkspaceRefusalCode = 'path_invalid' | 'path_denied' | 'path_ignored' | 'path_symlink' | 'path_missing' | 'read_budget_exhausted' | 'write_not_allowed' | 'write_exists' | 'write_invalid_json' | 'write_too_large' | 'write_content_refused';
+export declare class WorkspaceRefusal extends Error {
+    readonly code: WorkspaceRefusalCode;
+    constructor(code: WorkspaceRefusalCode);
+}
+export declare function redactSecrets(text: string): string;
+export interface WorkspaceOptions {
+    root: string;
+    /** Paths (relative, POSIX) among the given ones that git ignores. */
+    isIgnored: (paths: ReadonlyArray<string>) => Promise<ReadonlySet<string>>;
+    /** Existing files the job may rewrite: the agentic data files. */
+    writableFiles: ReadonlyArray<string>;
+    /** Files the job may create once, e.g. `contract.ts` next to a handler. */
+    creatableFiles: ReadonlyArray<string>;
+}
+export interface GrepMatch {
+    path: string;
+    line: number;
+    text: string;
+}
+export declare function deniedPath(path: string): boolean;
+export declare class Workspace {
+    private readonly options;
+    private read;
+    private readonly created;
+    private readonly changed;
+    constructor(options: WorkspaceOptions);
+    get bytesRead(): number;
+    /** Every path this run wrote, relative to the root. */
+    get written(): ReadonlySet<string>;
+    listFiles(dir?: string, recursive?: boolean): Promise<string[]>;
+    readFile(path: string): Promise<{
+        path: string;
+        content: string;
+        truncated: boolean;
+        bytes: number;
+    }>;
+    grep(text: string, dir?: string): Promise<GrepMatch[]>;
+    writeFile(path: string, content: string): Promise<{
+        path: string;
+        bytes: number;
+    }>;
+    /**
+     * Rewrites one writable JSON file from its current content, so a caller can
+     * add entries without the model resending the whole file. A missing or
+     * unreadable file starts as `{}`; the result passes the checks of writeFile.
+     */
+    updateJson(path: string, update: (current: Record<string, unknown>) => Record<string, unknown>): Promise<{
+        path: string;
+        bytes: number;
+    }>;
+    private updates;
+    private accessible;
+    private assertNoSymlinkParents;
+    private status;
+}