muonroi-cli 1.2.3 → 1.3.1

package/dist/src/orchestrator/read-path-budget.js

@@ -0,0 +1,103 @@
+// Matches built-in read tools + common MCP read tools (filesystem read_file,
+// read_text_file, etc). We don't include "ls" / "list_directory" because
+// those legitimately re-issue against a changing FS state.
+const READ_TOOL_PATTERN = /(^|_|__)read(_file|_text_file)?$/i;
+function isReadTool(name) {
+    return READ_TOOL_PATTERN.test(name);
+}
+/**
+ * Extract the file path argument from a read-tool input shape. Handles the
+ * common shapes: { path: "..." }, { file_path: "..." }, { filePath: "..." }.
+ */
+function extractPath(input) {
+    if (!input || typeof input !== "object")
+        return null;
+    const obj = input;
+    const candidates = ["path", "file_path", "filePath", "filepath"];
+    for (const key of candidates) {
+        const v = obj[key];
+        if (typeof v === "string" && v.length > 0)
+            return v;
+    }
+    return null;
+}
+/** Normalize a path for budget keying: lowercase + forward slashes + trim. */
+function normalizePath(p) {
+    return p.trim().replace(/\\/g, "/").toLowerCase();
+}
+export class ReadPathBudget {
+    cap;
+    counts = new Map();
+    capExceededHits = 0;
+    constructor(cap) {
+        this.cap = cap;
+    }
+    /** Returns null if under cap (caller passes through); stub string if over. */
+    checkAndIncrement(toolName, path) {
+        if (this.cap <= 0)
+            return null;
+        const key = `${toolName}::${normalizePath(path)}`;
+        const prior = this.counts.get(key) ?? 0;
+        if (prior >= this.cap) {
+            this.capExceededHits += 1;
+            return `[read budget exceeded for ${path}: ${prior} prior reads this session; refer to your earlier result instead of re-reading. To override set MUONROI_MAX_READS_PER_PATH higher or 0 to disable.]`;
+        }
+        this.counts.set(key, prior + 1);
+        return null;
+    }
+    getStats() {
+        return { capExceededHits: this.capExceededHits, trackedPaths: this.counts.size };
+    }
+    /** Test-only. */
+    clear() {
+        this.counts.clear();
+        this.capExceededHits = 0;
+    }
+}
+export function getReadPathBudgetCap() {
+    const raw = process.env.MUONROI_MAX_READS_PER_PATH;
+    if (raw === undefined || raw === "")
+        return 3;
+    const n = Number(raw);
+    if (!Number.isFinite(n) || n < 0)
+        return 3;
+    return Math.floor(n);
+}
+/**
+ * Wrap a ToolSet so read-tool execute() calls are short-circuited once a
+ * per-path cap is exceeded. Non-read tools pass through unchanged. Stub
+ * matches the format the LLM already sees from cross-turn dedup so the
+ * model interprets it consistently.
+ */
+export function wrapToolSetWithReadBudget(tools, budget) {
+    if (!budget)
+        return tools;
+    const wrapped = {};
+    for (const [name, tool] of Object.entries(tools)) {
+        if (!isReadTool(name)) {
+            wrapped[name] = tool;
+            continue;
+        }
+        const t = tool;
+        const innerExecute = t.execute;
+        if (!innerExecute) {
+            wrapped[name] = tool;
+            continue;
+        }
+        wrapped[name] = {
+            ...tool,
+            execute: async (input, ctx) => {
+                const path = extractPath(input);
+                if (path) {
+                    const stub = budget.checkAndIncrement(name, path);
+                    if (stub !== null)
+                        return stub;
+                }
+                return innerExecute(input, ctx);
+            },
+        };
+    }
+    return wrapped;
+}
+export const _internals = { isReadTool, extractPath, normalizePath };
+//# sourceMappingURL=read-path-budget.js.map

package/dist/src/orchestrator/read-path-budget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-path-budget.js","sourceRoot":"","sources":["../../../src/orchestrator/read-path-budget.ts"],"names":[],"mappings":"AAqBA,6EAA6E;AAC7E,yEAAyE;AACzE,2DAA2D;AAC3D,MAAM,iBAAiB,GAAG,mCAAmC,CAAC;AAE9D,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IACjE,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACnB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,SAAS,aAAa,CAAC,CAAS;IAC9B,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;AACpD,CAAC;AAOD,MAAM,OAAO,cAAc;IAGI;IAFrB,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACnC,eAAe,GAAG,CAAC,CAAC;IAC5B,YAA6B,GAAW;QAAX,QAAG,GAAH,GAAG,CAAQ;IAAG,CAAC;IAE5C,8EAA8E;IACvE,iBAAiB,CAAC,QAAgB,EAAE,IAAY;QACrD,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/B,MAAM,GAAG,GAAG,GAAG,QAAQ,KAAK,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACtB,IAAI,CAAC,eAAe,IAAI,CAAC,CAAC;YAC1B,OAAO,6BAA6B,IAAI,KAAK,KAAK,oJAAoJ,CAAC;QACzM,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,QAAQ;QACb,OAAO,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACnF,CAAC;IAED,iBAAiB;IACV,KAAK;QACV,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC,eAAe,GAAG,CAAC,CAAC;IAC3B,CAAC;CACF;AAED,MAAM,UAAU,oBAAoB;IAClC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;IACnD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,CAAC,CAAC;IAC9C,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IAC3C,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACvB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAAc,EAAE,MAA6B;IACrF,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,MAAM,OAAO,GAAY,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;YACrB,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,IAA+B,CAAC;QAC1C,MAAM,YAAY,GAAG,CAAC,CAAC,OAAmE,CAAC;QAC3F,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;YACrB,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,GAAG;YACd,GAAI,IAAe;YACnB,OAAO,EAAE,KAAK,EAAE,KAAc,EAAE,GAAa,EAAE,EAAE;gBAC/C,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;gBAChC,IAAI,IAAI,EAAE,CAAC;oBACT,MAAM,IAAI,GAAG,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;oBAClD,IAAI,IAAI,KAAK,IAAI;wBAAE,OAAO,IAAI,CAAC;gBACjC,CAAC;gBACD,OAAO,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAClC,CAAC;SACiB,CAAC;IACvB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC"}

package/dist/src/orchestrator/reasoning.js

@@ -0,0 +1,57 @@
+const ENCRYPTED_REASONING_MARKERS = [
+    "-----BEGIN PGP MESSAGE-----",
+    "-----BEGIN PGP ARMORED FILE-----",
+    "-----BEGIN AGE ENCRYPTED FILE-----",
+    "encrypted_content",
+];
+function isRecord(value) {
+    return typeof value === "object" && value !== null;
+}
+function getReasoningText(part) {
+    if (!isRecord(part) || part.type !== "reasoning")
+        return null;
+    if (typeof part.text === "string")
+        return part.text;
+    if (typeof part.reasoning === "string")
+        return part.reasoning;
+    return null;
+}
+export function containsEncryptedReasoning(text) {
+    const lower = text.toLowerCase();
+    return ENCRYPTED_REASONING_MARKERS.some((marker) => lower.includes(marker.toLowerCase()));
+}
+function sanitizeAssistantContent(content) {
+    if (!Array.isArray(content))
+        return content;
+    const filtered = content.filter((part) => {
+        const reasoningText = getReasoningText(part);
+        return !reasoningText || !containsEncryptedReasoning(reasoningText);
+    });
+    return filtered.length === content.length ? content : filtered;
+}
+export function sanitizeModelMessages(messages) {
+    let changed = false;
+    const sanitized = [];
+    for (const message of messages) {
+        if (message.role !== "assistant") {
+            sanitized.push(message);
+            continue;
+        }
+        const content = sanitizeAssistantContent(message.content);
+        if (content !== message.content) {
+            changed = true;
+        }
+        if (Array.isArray(content) && content.length === 0) {
+            changed = true;
+            continue;
+        }
+        if (typeof content === "string" && !content.trim()) {
+            changed = true;
+            continue;
+        }
+        const nextMessage = content === message.content ? message : { ...message, content };
+        sanitized.push(nextMessage);
+    }
+    return changed ? sanitized : messages;
+}
+//# sourceMappingURL=reasoning.js.map

package/dist/src/orchestrator/reasoning.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reasoning.js","sourceRoot":"","sources":["../../../src/orchestrator/reasoning.ts"],"names":[],"mappings":"AAEA,MAAM,2BAA2B,GAAG;IAClC,6BAA6B;IAC7B,kCAAkC;IAClC,oCAAoC;IACpC,mBAAmB;CACX,CAAC;AAIX,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAa;IACrC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9D,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC;IACpD,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC;IAC9D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,IAAY;IACrD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,OAAO,2BAA2B,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAyB;IACzD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAE5C,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QACvC,MAAM,aAAa,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAC7C,OAAO,CAAC,aAAa,IAAI,CAAC,0BAA0B,CAAC,aAAa,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,OAAO,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,QAA2B,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAwB;IAC5D,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,SAAS,GAAmB,EAAE,CAAC;IAErC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACjC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxB,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,wBAAwB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,OAAO,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;YAChC,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnD,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QAED,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YACnD,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QAED,MAAM,WAAW,GAAiB,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC;QAClG,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC9B,CAAC;IAED,OAAO,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;AACxC,CAAC"}

package/dist/src/orchestrator/reasoning.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/src/orchestrator/reasoning.test.js

@@ -0,0 +1,26 @@
+import { describe, expect, it } from "vitest";
+import { containsEncryptedReasoning, sanitizeModelMessages } from "./reasoning.js";
+describe("reasoning helpers", () => {
+    it("detects encrypted reasoning markers", () => {
+        expect(containsEncryptedReasoning("-----BEGIN PGP MESSAGE-----\nabc")).toBe(true);
+        expect(containsEncryptedReasoning("normal reasoning text")).toBe(false);
+    });
+    it("removes encrypted reasoning from assistant messages", () => {
+        const messages = [
+            {
+                role: "assistant",
+                content: [
+                    { type: "reasoning", text: "-----BEGIN PGP MESSAGE-----\nabc" },
+                    { type: "text", text: "Final answer" },
+                ],
+            },
+        ];
+        expect(sanitizeModelMessages(messages)).toEqual([
+            {
+                role: "assistant",
+                content: [{ type: "text", text: "Final answer" }],
+            },
+        ]);
+    });
+});
+//# sourceMappingURL=reasoning.test.js.map

package/dist/src/orchestrator/reasoning.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reasoning.test.js","sourceRoot":"","sources":["../../../src/orchestrator/reasoning.test.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEhF,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,0BAA0B,CAAC,kCAAkC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClF,MAAM,CAAC,0BAA0B,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,QAAQ,GAAG;YACf;gBACE,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE;oBACP,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,kCAAkC,EAAE;oBAC/D,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE;iBACvC;aACF;SACgB,CAAC;QAEpB,MAAM,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;YAC9C;gBACE,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;aAClD;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/orchestrator/retry-classifier.d.ts

@@ -0,0 +1,26 @@
+export interface TransientCheck {
+    transient: boolean;
+    reason: string;
+}
+/**
+ * Classifies a stream error as transient (safe to retry) or non-transient.
+ *
+ * Transient:
+ *  - Network-level errors: ECONNREFUSED, ETIMEDOUT, ECONNRESET, EAI_AGAIN,
+ *    "fetch failed", "Unable to connect", "socket hang up", "network"
+ *  - HTTP 408 (request timeout), 425 (too early), 429 (rate limit), 5xx
+ *  - TypeError with "fetch failed" message (browser/bun/node fetch layer)
+ *  - AbortSignal.timeout firing (err.name === "TimeoutError")
+ *
+ * Non-transient:
+ *  - AbortError (user cancellation) — caller must handle abort separately
+ *  - HTTP 400, 401, 403, 422, and any other 4xx not listed above
+ *  - Malformed tool/function name errors
+ */
+export declare function classifyStreamError(err: unknown, depth?: number): TransientCheck;
+/**
+ * Parse Retry-After header value to milliseconds.
+ * Accepts an integer (seconds) or an HTTP-date string.
+ * Returns null if the value cannot be parsed.
+ */
+export declare function parseRetryAfterMs(value: string | undefined | null): number | null;

package/dist/src/orchestrator/retry-classifier.js

@@ -0,0 +1,103 @@
+import { APICallError } from "@ai-sdk/provider";
+/**
+ * Classifies a stream error as transient (safe to retry) or non-transient.
+ *
+ * Transient:
+ *  - Network-level errors: ECONNREFUSED, ETIMEDOUT, ECONNRESET, EAI_AGAIN,
+ *    "fetch failed", "Unable to connect", "socket hang up", "network"
+ *  - HTTP 408 (request timeout), 425 (too early), 429 (rate limit), 5xx
+ *  - TypeError with "fetch failed" message (browser/bun/node fetch layer)
+ *  - AbortSignal.timeout firing (err.name === "TimeoutError")
+ *
+ * Non-transient:
+ *  - AbortError (user cancellation) — caller must handle abort separately
+ *  - HTTP 400, 401, 403, 422, and any other 4xx not listed above
+ *  - Malformed tool/function name errors
+ */
+export function classifyStreamError(err, depth = 0) {
+    if (depth > 2) {
+        return { transient: false, reason: "max-depth reached" };
+    }
+    if (!(err instanceof Error) && typeof err !== "object") {
+        return { transient: false, reason: "non-error value" };
+    }
+    const e = err;
+    // AbortError: user cancellation — never retry, caller must handle
+    if (e.name === "AbortError") {
+        return { transient: false, reason: "user-abort" };
+    }
+    // TimeoutError: AbortSignal.timeout() fired — transient
+    if (e.name === "TimeoutError") {
+        return { transient: true, reason: "timeout-error" };
+    }
+    // AI SDK APICallError with statusCode
+    if (APICallError.isInstance(err)) {
+        const status = err.statusCode;
+        if (status != null) {
+            if (isTransientStatusCode(status)) {
+                return { transient: true, reason: `http-${status}` };
+            }
+            // Any other status code (400, 401, 403, 422, etc.) is not transient
+            return { transient: false, reason: `http-${status}-non-transient` };
+        }
+    }
+    // Check plain statusCode / status field (some providers attach it directly)
+    const statusCode = e.statusCode ?? e.status;
+    if (typeof statusCode === "number") {
+        if (isTransientStatusCode(statusCode)) {
+            return { transient: true, reason: `http-${statusCode}` };
+        }
+        // Explicit non-transient status
+        if (statusCode >= 400) {
+            return { transient: false, reason: `http-${statusCode}-non-transient` };
+        }
+    }
+    const message = typeof e.message === "string" ? e.message : "";
+    // Malformed function/tool name errors — non-transient (own handler elsewhere)
+    if (/invalid.*function.*name|function.*name.*invalid|malformed.*tool|NoSuchTool/i.test(message)) {
+        return { transient: false, reason: "malformed-tool-name" };
+    }
+    // Network-level error patterns — transient
+    if (isTransientMessage(message)) {
+        return { transient: true, reason: "network-error" };
+    }
+    // TypeError with "fetch failed" or network message
+    if (e.name === "TypeError" && isTransientMessage(message)) {
+        return { transient: true, reason: "fetch-failed" };
+    }
+    // Recurse into cause (one level only)
+    if (e.cause != null) {
+        const causeResult = classifyStreamError(e.cause, depth + 1);
+        if (causeResult.transient) {
+            return { transient: true, reason: `cause:${causeResult.reason}` };
+        }
+    }
+    return { transient: false, reason: "unknown" };
+}
+function isTransientStatusCode(code) {
+    return code === 408 || code === 425 || code === 429 || (code >= 500 && code <= 599);
+}
+function isTransientMessage(message) {
+    return /ECONNREFUSED|ETIMEDOUT|ECONNRESET|EAI_AGAIN|fetch failed|Unable to connect|network|socket hang up/i.test(message);
+}
+/**
+ * Parse Retry-After header value to milliseconds.
+ * Accepts an integer (seconds) or an HTTP-date string.
+ * Returns null if the value cannot be parsed.
+ */
+export function parseRetryAfterMs(value) {
+    if (!value)
+        return null;
+    const seconds = Number(value.trim());
+    if (!Number.isNaN(seconds) && seconds >= 0) {
+        return Math.round(seconds * 1000);
+    }
+    // Try HTTP-date ("Mon, 19 May 2026 12:00:00 GMT")
+    const ts = Date.parse(value);
+    if (!Number.isNaN(ts)) {
+        const diff = ts - Date.now();
+        return diff > 0 ? diff : 0;
+    }
+    return null;
+}
+//# sourceMappingURL=retry-classifier.js.map

package/dist/src/orchestrator/retry-classifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry-classifier.js","sourceRoot":"","sources":["../../../src/orchestrator/retry-classifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAOhD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAY,EAAE,KAAK,GAAG,CAAC;IACzD,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACd,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC3D,CAAC;IAED,IAAI,CAAC,CAAC,GAAG,YAAY,KAAK,CAAC,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACvD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACzD,CAAC;IAED,MAAM,CAAC,GAAG,GAOT,CAAC;IAEF,kEAAkE;IAClE,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC5B,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACpD,CAAC;IAED,wDAAwD;IACxD,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QAC9B,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACtD,CAAC;IAED,sCAAsC;IACtC,IAAI,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC;QAC9B,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;YACnB,IAAI,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,MAAM,EAAE,EAAE,CAAC;YACvD,CAAC;YACD,oEAAoE;YACpE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,MAAM,gBAAgB,EAAE,CAAC;QACtE,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,MAAM,UAAU,GAAG,CAAC,CAAC,UAAU,IAAK,CAAyB,CAAC,MAAM,CAAC;IACrE,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QACnC,IAAI,qBAAqB,CAAC,UAAU,CAAC,EAAE,CAAC;YACtC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,UAAU,EAAE,EAAE,CAAC;QAC3D,CAAC;QACD,gCAAgC;QAChC,IAAI,UAAU,IAAI,GAAG,EAAE,CAAC;YACtB,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,UAAU,gBAAgB,EAAE,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAE/D,8EAA8E;IAC9E,IAAI,6EAA6E,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAChG,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IAC7D,CAAC;IAED,2CAA2C;IAC3C,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACtD,CAAC;IAED,mDAAmD;IACnD,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACrD,CAAC;IAED,sCAAsC;IACtC,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;QACpB,MAAM,WAAW,GAAG,mBAAmB,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC5D,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC;YAC1B,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;QACpE,CAAC;IACH,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY;IACzC,OAAO,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe;IACzC,OAAO,oGAAoG,CAAC,IAAI,CAC9G,OAAO,CACR,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAgC;IAChE,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QAC3C,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,kDAAkD;IAClD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/src/orchestrator/retry-stream.d.ts

@@ -0,0 +1,43 @@
+export interface RetryInfo {
+    attempt: number;
+    maxAttempts: number;
+    errorName: string;
+    errorMessage: string;
+    nextDelayMs: number;
+}
+export interface RetryStreamOpts {
+    /** Maximum total attempts (first try + retries). Default: 3. */
+    maxAttempts?: number;
+    /** Base delay in ms for first retry. Default: 500. */
+    baseDelayMs?: number;
+    /** Maximum delay cap in ms. Default: 8000. */
+    maxDelayMs?: number;
+    /** Jitter fraction in 0..1. Delay is adjusted by ±(jitter * delay). Default: 0.25. */
+    jitter?: number;
+    /** User cancellation signal — abort the retry loop immediately. */
+    signal?: AbortSignal;
+    /** Telemetry callback, called before each retry sleep. */
+    onRetry?: (info: RetryInfo) => void;
+    /**
+     * Clock injection seam for tests. Replaces setTimeout-based sleep.
+     * Default: real wall-clock sleep.
+     */
+    delay?: (ms: number) => Promise<void>;
+}
+/**
+ * Wraps an async factory so that transient errors trigger exponential-backoff
+ * retries. Designed for streamText: the factory is re-invoked on each attempt.
+ *
+ * Once chunks have started flowing (i.e. the factory promise resolved), we do
+ * NOT retry — partial-output corruption would result. The wrapper only catches
+ * errors that occur before the promise resolves (i.e. the AI SDK setup phase
+ * or the very first network rejection).
+ *
+ * Because Vercel AI SDK's streamText returns synchronously (the object is
+ * available immediately), the actual network error surfaces when you first
+ * await result.fullStream or result.response. The caller is expected to wrap
+ * "await the first chunk" inside the factory if needed, OR use this wrapper
+ * purely to guard the streamText call itself (which can throw on bad config).
+ * Either way, the retry only fires when factory() REJECTS — not mid-stream.
+ */
+export declare function withStreamRetry<T>(factory: () => Promise<T>, opts?: RetryStreamOpts): Promise<T>;

package/dist/src/orchestrator/retry-stream.js

@@ -0,0 +1,110 @@
+import { classifyStreamError, parseRetryAfterMs } from "./retry-classifier.js";
+const DEFAULT_MAX_ATTEMPTS = 3;
+const DEFAULT_BASE_DELAY_MS = 500;
+const DEFAULT_MAX_DELAY_MS = 8_000;
+const DEFAULT_JITTER = 0.25;
+function computeDelay(attempt, baseDelayMs, maxDelayMs, jitter) {
+    // Exponential: 500 → 2000 → 8000
+    const exp = Math.min(baseDelayMs * 4 ** (attempt - 1), maxDelayMs);
+    const spread = exp * jitter;
+    const delta = (Math.random() * 2 - 1) * spread; // ±jitter*delay
+    return Math.min(Math.max(0, Math.round(exp + delta)), maxDelayMs);
+}
+function realDelay(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+/**
+ * Wraps an async factory so that transient errors trigger exponential-backoff
+ * retries. Designed for streamText: the factory is re-invoked on each attempt.
+ *
+ * Once chunks have started flowing (i.e. the factory promise resolved), we do
+ * NOT retry — partial-output corruption would result. The wrapper only catches
+ * errors that occur before the promise resolves (i.e. the AI SDK setup phase
+ * or the very first network rejection).
+ *
+ * Because Vercel AI SDK's streamText returns synchronously (the object is
+ * available immediately), the actual network error surfaces when you first
+ * await result.fullStream or result.response. The caller is expected to wrap
+ * "await the first chunk" inside the factory if needed, OR use this wrapper
+ * purely to guard the streamText call itself (which can throw on bad config).
+ * Either way, the retry only fires when factory() REJECTS — not mid-stream.
+ */
+export async function withStreamRetry(factory, opts = {}) {
+    const maxAttempts = opts.maxAttempts ?? DEFAULT_MAX_ATTEMPTS;
+    const baseDelayMs = opts.baseDelayMs ?? DEFAULT_BASE_DELAY_MS;
+    const maxDelayMs = opts.maxDelayMs ?? DEFAULT_MAX_DELAY_MS;
+    const jitter = opts.jitter ?? DEFAULT_JITTER;
+    const sleepFn = opts.delay ?? realDelay;
+    const { signal, onRetry } = opts;
+    // Bail immediately if already aborted
+    if (signal?.aborted) {
+        throw new DOMException("Aborted before first attempt", "AbortError");
+    }
+    let lastError;
+    for (let attempt = 1; attempt <= maxAttempts; attempt++) {
+        // Check abort before each attempt (including first)
+        if (signal?.aborted) {
+            throw new DOMException("Aborted", "AbortError");
+        }
+        try {
+            return await factory();
+        }
+        catch (err) {
+            lastError = err;
+            // User abort — never retry; surface as AbortError so callers can distinguish
+            if (signal?.aborted) {
+                throw new DOMException("Aborted", "AbortError");
+            }
+            const { transient } = classifyStreamError(err);
+            if (!transient) {
+                throw err;
+            }
+            // Exhausted attempts — fall through to throw
+            if (attempt >= maxAttempts) {
+                break;
+            }
+            // Compute delay — check for Retry-After header from 429 responses
+            let nextDelayMs = computeDelay(attempt, baseDelayMs, maxDelayMs, jitter);
+            // Some AI SDK errors carry retryAfter (ms, already parsed by provider layer)
+            // or the raw header string
+            const errWithRetry = err;
+            const retryAfterRaw = errWithRetry.retryAfter ??
+                errWithRetry.responseHeaders?.["retry-after"] ??
+                errWithRetry.headers?.["retry-after"];
+            if (typeof retryAfterRaw === "number" && retryAfterRaw > 0) {
+                nextDelayMs = Math.min(retryAfterRaw, maxDelayMs);
+            }
+            else if (typeof retryAfterRaw === "string") {
+                const parsed = parseRetryAfterMs(retryAfterRaw);
+                if (parsed != null) {
+                    nextDelayMs = Math.min(parsed, maxDelayMs);
+                }
+            }
+            const errorName = err instanceof Error ? err.name : "Error";
+            const errorMessage = err instanceof Error ? err.message : String(err);
+            onRetry?.({
+                attempt,
+                maxAttempts,
+                errorName,
+                errorMessage,
+                nextDelayMs,
+            });
+            // Sleep — honor abort signal during the wait
+            await Promise.race([
+                sleepFn(nextDelayMs),
+                new Promise((_, reject) => {
+                    if (!signal)
+                        return;
+                    const onAbort = () => reject(new DOMException("Aborted during retry delay", "AbortError"));
+                    signal.addEventListener("abort", onAbort, { once: true });
+                }),
+            ]);
+            // Re-check after sleep
+            if (signal?.aborted) {
+                throw new DOMException("Aborted during retry delay", "AbortError");
+            }
+        }
+    }
+    throw lastError;
+}
+//# sourceMappingURL=retry-stream.js.map

package/dist/src/orchestrator/retry-stream.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry-stream.js","sourceRoot":"","sources":["../../../src/orchestrator/retry-stream.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AA8B/E,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAC/B,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,oBAAoB,GAAG,KAAK,CAAC;AACnC,MAAM,cAAc,GAAG,IAAI,CAAC;AAE5B,SAAS,YAAY,CAAC,OAAe,EAAE,WAAmB,EAAE,UAAkB,EAAE,MAAc;IAC5F,iCAAiC;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC;IAC5B,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,gBAAgB;IAChE,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,SAAS,CAAC,EAAU;IAC3B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAI,OAAyB,EAAE,OAAwB,EAAE;IAC5F,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,oBAAoB,CAAC;IAC7D,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,qBAAqB,CAAC;IAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,oBAAoB,CAAC;IAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,cAAc,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC;IACxC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAEjC,sCAAsC;IACtC,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,YAAY,CAAC,8BAA8B,EAAE,YAAY,CAAC,CAAC;IACvE,CAAC;IAED,IAAI,SAAkB,CAAC;IAEvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;QACxD,oDAAoD;QACpD,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,YAAY,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,SAAS,GAAG,GAAG,CAAC;YAEhB,6EAA6E;YAC7E,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,YAAY,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;YAClD,CAAC;YAED,MAAM,EAAE,SAAS,EAAE,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;YAC/C,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,GAAG,CAAC;YACZ,CAAC;YAED,6CAA6C;YAC7C,IAAI,OAAO,IAAI,WAAW,EAAE,CAAC;gBAC3B,MAAM;YACR,CAAC;YAED,kEAAkE;YAClE,IAAI,WAAW,GAAG,YAAY,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;YAEzE,6EAA6E;YAC7E,2BAA2B;YAC3B,MAAM,YAAY,GAAG,GAIpB,CAAC;YAEF,MAAM,aAAa,GACjB,YAAY,CAAC,UAAU;gBACvB,YAAY,CAAC,eAAe,EAAE,CAAC,aAAa,CAAC;gBAC7C,YAAY,CAAC,OAAO,EAAE,CAAC,aAAa,CAAC,CAAC;YAExC,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;gBAC3D,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;YACpD,CAAC;iBAAM,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;gBAC7C,MAAM,MAAM,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC;gBAChD,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;oBACnB,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;gBAC7C,CAAC;YACH,CAAC;YAED,MAAM,SAAS,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YAC5D,MAAM,YAAY,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAEtE,OAAO,EAAE,CAAC;gBACR,OAAO;gBACP,WAAW;gBACX,SAAS;gBACT,YAAY;gBACZ,WAAW;aACZ,CAAC,CAAC;YAEH,6CAA6C;YAC7C,MAAM,OAAO,CAAC,IAAI,CAAC;gBACjB,OAAO,CAAC,WAAW,CAAC;gBACpB,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;oBAC/B,IAAI,CAAC,MAAM;wBAAE,OAAO;oBACpB,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,4BAA4B,EAAE,YAAY,CAAC,CAAC,CAAC;oBAC3F,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC5D,CAAC,CAAC;aACH,CAAC,CAAC;YAEH,uBAAuB;YACvB,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,YAAY,CAAC,4BAA4B,EAAE,YAAY,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,SAAS,CAAC;AAClB,CAAC"}

package/dist/src/orchestrator/sandbox.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/src/orchestrator/sandbox.test.js

@@ -0,0 +1,94 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+async function importAgentModule() {
+    vi.resetModules();
+    vi.doMock("../storage/index", () => ({
+        appendCompaction: vi.fn(),
+        appendMessages: vi.fn(() => []),
+        appendSystemMessage: vi.fn(() => 0),
+        buildChatEntries: vi.fn(() => []),
+        getNextMessageSequence: vi.fn(() => 0),
+        getSessionTotalTokens: vi.fn(() => 0),
+        loadTranscript: vi.fn(() => []),
+        loadTranscriptState: vi.fn(() => ({ messages: [], seqs: [] })),
+        recordUsageEvent: vi.fn(),
+        SessionStore: class {
+            getWorkspace() {
+                return null;
+            }
+            openSession() {
+                return null;
+            }
+            createSession() {
+                return null;
+            }
+            setModel() { }
+            getRequiredSession() {
+                return null;
+            }
+            setMode() { }
+            touchSession() { }
+        },
+    }));
+    return import("./orchestrator.js");
+}
+afterEach(() => {
+    vi.restoreAllMocks();
+    vi.resetModules();
+    vi.doUnmock("../storage/index");
+});
+describe("Agent sandbox mode", { timeout: 30_000 }, () => {
+    it("can switch sandbox mode at runtime", async () => {
+        const { Agent } = await importAgentModule();
+        const agent = new Agent(undefined, undefined, undefined, undefined, {
+            persistSession: false,
+            sandboxMode: "off",
+        });
+        expect(agent.getSandboxMode()).toBe("off");
+        agent.setSandboxMode("shuru");
+        expect(agent.getSandboxMode()).toBe("shuru");
+    });
+    it("passes sandbox mode into background delegations", async () => {
+        const { Agent } = await importAgentModule();
+        const agent = new Agent(undefined, undefined, undefined, undefined, {
+            persistSession: false,
+            sandboxMode: "shuru",
+        });
+        const startMock = vi.fn(async () => ({ success: true, output: "ok" }));
+        agent.delegations.start = startMock;
+        await agent.runDelegation({
+            agent: "explore",
+            description: "Inspect",
+            prompt: "Look around",
+        });
+        expect(startMock).toHaveBeenCalledWith(expect.objectContaining({ agent: "explore" }), expect.objectContaining({ sandboxMode: "shuru" }));
+    });
+    it("can get and set sandbox settings", async () => {
+        const { Agent } = await importAgentModule();
+        const agent = new Agent(undefined, undefined, undefined, undefined, {
+            persistSession: false,
+            sandboxMode: "shuru",
+            sandboxSettings: { allowNet: true, cpus: 4 },
+        });
+        expect(agent.getSandboxSettings()).toEqual({ allowNet: true, cpus: 4 });
+        agent.setSandboxSettings({ allowNet: false, memory: 2048 });
+        expect(agent.getSandboxSettings()).toEqual({ allowNet: false, memory: 2048 });
+    });
+    it("passes sandbox settings into background delegations", async () => {
+        const { Agent } = await importAgentModule();
+        const settings = { allowNet: true, allowedHosts: ["api.openai.com"] };
+        const agent = new Agent(undefined, undefined, undefined, undefined, {
+            persistSession: false,
+            sandboxMode: "shuru",
+            sandboxSettings: settings,
+        });
+        const startMock = vi.fn(async () => ({ success: true, output: "ok" }));
+        agent.delegations.start = startMock;
+        await agent.runDelegation({
+            agent: "explore",
+            description: "Inspect",
+            prompt: "Look around",
+        });
+        expect(startMock).toHaveBeenCalledWith(expect.objectContaining({ agent: "explore" }), expect.objectContaining({ sandboxSettings: settings }));
+    });
+});
+//# sourceMappingURL=sandbox.test.js.map

package/dist/src/orchestrator/sandbox.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.test.js","sourceRoot":"","sources":["../../../src/orchestrator/sandbox.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE7D,KAAK,UAAU,iBAAiB;IAC9B,EAAE,CAAC,YAAY,EAAE,CAAC;IAClB,EAAE,CAAC,MAAM,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;QACnC,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE;QACzB,cAAc,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QAC/B,mBAAmB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACnC,gBAAgB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QACjC,sBAAsB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACtC,qBAAqB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrC,cAAc,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QAC/B,mBAAmB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9D,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE;QACzB,YAAY,EAAE;YACZ,YAAY;gBACV,OAAO,IAAI,CAAC;YACd,CAAC;YACD,WAAW;gBACT,OAAO,IAAI,CAAC;YACd,CAAC;YACD,aAAa;gBACX,OAAO,IAAI,CAAC;YACd,CAAC;YACD,QAAQ,KAAI,CAAC;YACb,kBAAkB;gBAChB,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,KAAI,CAAC;YACZ,YAAY,KAAI,CAAC;SAClB;KACF,CAAC,CAAC,CAAC;IAEJ,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,CAAC,GAAG,EAAE;IACb,EAAE,CAAC,eAAe,EAAE,CAAC;IACrB,EAAE,CAAC,YAAY,EAAE,CAAC;IAClB,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;AAClC,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE;IACvD,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,iBAAiB,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE;YAClE,cAAc,EAAE,KAAK;YACrB,WAAW,EAAE,KAAK;SACnB,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAE3C,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAE9B,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,iBAAiB,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE;YAClE,cAAc,EAAE,KAAK;YACrB,WAAW,EAAE,OAAO;SACrB,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACtE,KAAiE,CAAC,WAAW,CAAC,KAAK,GAAG,SAAS,CAAC;QAEjG,MAAO,KAA8E,CAAC,aAAa,CAAC;YAClG,KAAK,EAAE,SAAS;YAChB,WAAW,EAAE,SAAS;YACtB,MAAM,EAAE,aAAa;SACtB,CAAC,CAAC;QAEH,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,CACpC,MAAM,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAC7C,MAAM,CAAC,gBAAgB,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAClD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,iBAAiB,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE;YAClE,cAAc,EAAE,KAAK;YACrB,WAAW,EAAE,OAAO;YACpB,eAAe,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE;SAC7C,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QAExE,KAAK,CAAC,kBAAkB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,iBAAiB,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACtE,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE;YAClE,cAAc,EAAE,KAAK;YACrB,WAAW,EAAE,OAAO;YACpB,eAAe,EAAE,QAAQ;SAC1B,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACtE,KAAiE,CAAC,WAAW,CAAC,KAAK,GAAG,SAAS,CAAC;QAEjG,MAAO,KAA8E,CAAC,aAAa,CAAC;YAClG,KAAK,EAAE,SAAS;YAChB,WAAW,EAAE,SAAS;YACtB,MAAM,EAAE,aAAa;SACtB,CAAC,CAAC;QAEH,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,CACpC,MAAM,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAC7C,MAAM,CAAC,gBAAgB,CAAC,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,CACvD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}