octoflow-core 1.0.0

package/dist/adapters/agents/runtime/command-safety.d.ts

@@ -0,0 +1,28 @@
+export interface CommandSafetyResult {
+    reason?: string;
+    safe: boolean;
+}
+export interface CommandRiskResult {
+    level: 'safe' | 'high-risk' | 'blocked';
+    reason?: string;
+}
+export interface TruncationResult {
+    content: Buffer;
+    truncated: boolean;
+    originalBytes: number;
+    kept: {
+        head: number;
+        tail: number;
+    };
+}
+export declare function normalizeCommand(raw: string): string;
+export declare function checkCommandSafety(command: string, args: string[]): CommandSafetyResult;
+export declare function checkCommandRisk(command: string, args: string[]): CommandRiskResult;
+/**
+ * Head+tail byte truncation for large command output. Keeps the first and last
+ * ~40% of the limit, with a human-readable marker in the middle describing how
+ * many bytes were dropped. Matches the OpenAI Responses API / Agent Client
+ * Protocol pattern: `truncated: boolean` + begin/end preservation.
+ */
+export declare function truncateOutput(content: Buffer, limit: number): TruncationResult;
+//# sourceMappingURL=command-safety.d.ts.map

package/dist/adapters/agents/runtime/command-safety.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-safety.d.ts","sourceRoot":"","sources":["../../../../src/adapters/agents/runtime/command-safety.ts"],"names":[],"mappings":"AA8DA,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAAC;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACtC;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAOpD;AAED,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,GACb,mBAAmB,CAWrB;AAED,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,GACb,iBAAiB,CAanB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,GACZ,gBAAgB,CAqClB"}

package/dist/adapters/agents/runtime/command-safety.js

@@ -0,0 +1,123 @@
+const ANSI_PATTERN = new RegExp(
+  `${String.fromCharCode(27)}\\[[0-9;]*[A-Za-z]`,
+  "g"
+);
+const ZERO_WIDTH_RE = /[\u200B-\u200D\u2060\uFEFF\u00AD]/g;
+const DANGEROUS_PATTERNS = [
+  {
+    description: "recursive delete",
+    pattern: /\brm\b[^\n]*(?:\s-[a-z]*r[a-z]*|\s--recursive)(?:\s|$)/
+  },
+  { description: "delete root path", pattern: /\brm\s+-[^\n]*\s+\/(?:\s|$)/ },
+  {
+    description: "remote script execution",
+    pattern: /\b(?:curl|wget)\b[^\n]*\|\s*(?:ba)?sh\b/
+  },
+  { description: "shell eval", pattern: /\b(?:bash|sh|zsh|ksh)\s+-c\b/ },
+  {
+    description: "inline script execution",
+    pattern: /\b(?:python|perl|ruby|node)\s+-[ec]\b/
+  },
+  {
+    description: "system configuration write",
+    pattern: /\b(?:tee|cp|mv|install|sed)\b[^\n]*\/etc\//
+  },
+  {
+    description: "dangerous chmod",
+    pattern: /\bchmod\b[^\n]*\b(?:777|666|a\+w|o\+w)\b/
+  }
+];
+const HIGH_RISK_PATTERNS = [
+  {
+    description: "git config injection (-c / --global)",
+    pattern: /\bgit\b[^\n]*(?:\s-c\b|\bconfig\s+--global\b|core\.sshcommand)/
+  },
+  {
+    description: "go test -exec injection",
+    pattern: /\bgo\s+test\b[^\n]*\s-exec\b/
+  },
+  {
+    description: "find -exec / -execdir / -ok injection",
+    pattern: /\bfind\b[^\n]*\s-(?:exec|execdir|ok|okdir)\b/
+  },
+  {
+    description: "ripgrep --pre preprocessor",
+    pattern: /\brg\b[^\n]*\s--pre(?!tty)\b/
+  },
+  {
+    description: "write into sensitive path",
+    pattern: /\b(?:tee|cp|mv|install|sed|ln|dd|cat)\b[^\n]*\s(?:\/root\/|~\/\.ssh\/|~\/\.aws\/|~\/\.gnupg\/)/
+  }
+];
+function normalizeCommand(raw) {
+  return raw.replace(ANSI_PATTERN, "").replaceAll("\0", "").normalize("NFKC").replace(ZERO_WIDTH_RE, "").toLowerCase();
+}
+function checkCommandSafety(command, args) {
+  const normalized = normalizeCommand([command, ...args].join(" "));
+  for (const rule of DANGEROUS_PATTERNS) {
+    if (rule.pattern.test(normalized)) {
+      return {
+        safe: false,
+        reason: rule.description
+      };
+    }
+  }
+  return { safe: true };
+}
+function checkCommandRisk(command, args) {
+  const normalized = normalizeCommand([command, ...args].join(" "));
+  for (const rule of DANGEROUS_PATTERNS) {
+    if (rule.pattern.test(normalized)) {
+      return { level: "blocked", reason: rule.description };
+    }
+  }
+  for (const rule of HIGH_RISK_PATTERNS) {
+    if (rule.pattern.test(normalized)) {
+      return { level: "high-risk", reason: rule.description };
+    }
+  }
+  return { level: "safe" };
+}
+function truncateOutput(content, limit) {
+  const originalBytes = content.length;
+  if (originalBytes <= limit) {
+    return {
+      content,
+      truncated: false,
+      originalBytes,
+      kept: { head: originalBytes, tail: 0 }
+    };
+  }
+  const droppedBytes = originalBytes - limit;
+  const marker = Buffer.from(
+    `
+\u2026[truncated ${droppedBytes} bytes \u2014 total ${originalBytes}]\u2026
+`
+  );
+  const budget = Math.max(limit - marker.length, 0);
+  const head = Math.floor(budget / 2);
+  const tail = budget - head;
+  if (head <= 0 || tail <= 0) {
+    return {
+      content: marker,
+      truncated: true,
+      originalBytes,
+      kept: { head: 0, tail: 0 }
+    };
+  }
+  const headBuf = content.subarray(0, head);
+  const tailBuf = content.subarray(originalBytes - tail);
+  return {
+    content: Buffer.concat([headBuf, marker, tailBuf]),
+    truncated: true,
+    originalBytes,
+    kept: { head, tail }
+  };
+}
+export {
+  checkCommandRisk,
+  checkCommandSafety,
+  normalizeCommand,
+  truncateOutput
+};
+//# sourceMappingURL=command-safety.js.map

package/dist/adapters/agents/runtime/command-safety.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/adapters/agents/runtime/command-safety.ts"],
+  "sourcesContent": ["const ANSI_PATTERN = new RegExp(\n  `${String.fromCharCode(27)}\\\\[[0-9;]*[A-Za-z]`,\n  'g'\n);\n\n// Zero-width and invisible unicode characters that survive NFKC normalization\n// and can split word-boundary matching (e.g. \"r\\u200Bm\" bypasses \\brm\\b).\nconst ZERO_WIDTH_RE = /[\\u200B-\\u200D\\u2060\\uFEFF\\u00AD]/g;\n\nconst DANGEROUS_PATTERNS: Array<{ description: string; pattern: RegExp }> = [\n  {\n    description: 'recursive delete',\n    pattern: /\\brm\\b[^\\n]*(?:\\s-[a-z]*r[a-z]*|\\s--recursive)(?:\\s|$)/,\n  },\n  { description: 'delete root path', pattern: /\\brm\\s+-[^\\n]*\\s+\\/(?:\\s|$)/ },\n  {\n    description: 'remote script execution',\n    pattern: /\\b(?:curl|wget)\\b[^\\n]*\\|\\s*(?:ba)?sh\\b/,\n  },\n  { description: 'shell eval', pattern: /\\b(?:bash|sh|zsh|ksh)\\s+-c\\b/ },\n  {\n    description: 'inline script execution',\n    pattern: /\\b(?:python|perl|ruby|node)\\s+-[ec]\\b/,\n  },\n  {\n    description: 'system configuration write',\n    pattern: /\\b(?:tee|cp|mv|install|sed)\\b[^\\n]*\\/etc\\//,\n  },\n  {\n    description: 'dangerous chmod',\n    pattern: /\\bchmod\\b[^\\n]*\\b(?:777|666|a\\+w|o\\+w)\\b/,\n  },\n];\n\n// High-risk patterns \u2014 not blocked outright, but flagged for extra approval/caution.\n// Based on Trail of Bits \"prompt injection \u2192 RCE in AI agents\" (2025-10-22):\n// an allow-listed binary invoked with one of these flag patterns becomes an\n// arbitrary-code-execution primitive.\nconst HIGH_RISK_PATTERNS: Array<{ description: string; pattern: RegExp }> = [\n  {\n    description: 'git config injection (-c / --global)',\n    pattern: /\\bgit\\b[^\\n]*(?:\\s-c\\b|\\bconfig\\s+--global\\b|core\\.sshcommand)/,\n  },\n  {\n    description: 'go test -exec injection',\n    pattern: /\\bgo\\s+test\\b[^\\n]*\\s-exec\\b/,\n  },\n  {\n    description: 'find -exec / -execdir / -ok injection',\n    pattern: /\\bfind\\b[^\\n]*\\s-(?:exec|execdir|ok|okdir)\\b/,\n  },\n  {\n    description: 'ripgrep --pre preprocessor',\n    pattern: /\\brg\\b[^\\n]*\\s--pre(?!tty)\\b/,\n  },\n  {\n    description: 'write into sensitive path',\n    pattern:\n      /\\b(?:tee|cp|mv|install|sed|ln|dd|cat)\\b[^\\n]*\\s(?:\\/root\\/|~\\/\\.ssh\\/|~\\/\\.aws\\/|~\\/\\.gnupg\\/)/,\n  },\n];\n\nexport interface CommandSafetyResult {\n  reason?: string;\n  safe: boolean;\n}\n\nexport interface CommandRiskResult {\n  level: 'safe' | 'high-risk' | 'blocked';\n  reason?: string;\n}\n\nexport interface TruncationResult {\n  content: Buffer;\n  truncated: boolean;\n  originalBytes: number;\n  kept: { head: number; tail: number };\n}\n\nexport function normalizeCommand(raw: string): string {\n  return raw\n    .replace(ANSI_PATTERN, '')\n    .replaceAll('\\u0000', '')\n    .normalize('NFKC')\n    .replace(ZERO_WIDTH_RE, '')\n    .toLowerCase();\n}\n\nexport function checkCommandSafety(\n  command: string,\n  args: string[]\n): CommandSafetyResult {\n  const normalized = normalizeCommand([command, ...args].join(' '));\n  for (const rule of DANGEROUS_PATTERNS) {\n    if (rule.pattern.test(normalized)) {\n      return {\n        safe: false,\n        reason: rule.description,\n      };\n    }\n  }\n  return { safe: true };\n}\n\nexport function checkCommandRisk(\n  command: string,\n  args: string[]\n): CommandRiskResult {\n  const normalized = normalizeCommand([command, ...args].join(' '));\n  for (const rule of DANGEROUS_PATTERNS) {\n    if (rule.pattern.test(normalized)) {\n      return { level: 'blocked', reason: rule.description };\n    }\n  }\n  for (const rule of HIGH_RISK_PATTERNS) {\n    if (rule.pattern.test(normalized)) {\n      return { level: 'high-risk', reason: rule.description };\n    }\n  }\n  return { level: 'safe' };\n}\n\n/**\n * Head+tail byte truncation for large command output. Keeps the first and last\n * ~40% of the limit, with a human-readable marker in the middle describing how\n * many bytes were dropped. Matches the OpenAI Responses API / Agent Client\n * Protocol pattern: `truncated: boolean` + begin/end preservation.\n */\nexport function truncateOutput(\n  content: Buffer,\n  limit: number\n): TruncationResult {\n  const originalBytes = content.length;\n  if (originalBytes <= limit) {\n    return {\n      content,\n      truncated: false,\n      originalBytes,\n      kept: { head: originalBytes, tail: 0 },\n    };\n  }\n\n  const droppedBytes = originalBytes - limit;\n  const marker = Buffer.from(\n    `\\n\u2026[truncated ${droppedBytes} bytes \u2014 total ${originalBytes}]\u2026\\n`\n  );\n  const budget = Math.max(limit - marker.length, 0);\n  const head = Math.floor(budget / 2);\n  const tail = budget - head;\n\n  if (head <= 0 || tail <= 0) {\n    // Limit too small to fit both head and tail \u2014 return just the marker.\n    return {\n      content: marker,\n      truncated: true,\n      originalBytes,\n      kept: { head: 0, tail: 0 },\n    };\n  }\n\n  const headBuf = content.subarray(0, head);\n  const tailBuf = content.subarray(originalBytes - tail);\n  return {\n    content: Buffer.concat([headBuf, marker, tailBuf]),\n    truncated: true,\n    originalBytes,\n    kept: { head, tail },\n  };\n}\n"],
+  "mappings": "AAAA,MAAM,eAAe,IAAI;AAAA,EACvB,GAAG,OAAO,aAAa,EAAE,CAAC;AAAA,EAC1B;AACF;AAIA,MAAM,gBAAgB;AAEtB,MAAM,qBAAsE;AAAA,EAC1E;AAAA,IACE,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,EAAE,aAAa,oBAAoB,SAAS,8BAA8B;AAAA,EAC1E;AAAA,IACE,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,EAAE,aAAa,cAAc,SAAS,+BAA+B;AAAA,EACrE;AAAA,IACE,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AACF;AAMA,MAAM,qBAAsE;AAAA,EAC1E;AAAA,IACE,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,SACE;AAAA,EACJ;AACF;AAmBO,SAAS,iBAAiB,KAAqB;AACpD,SAAO,IACJ,QAAQ,cAAc,EAAE,EACxB,WAAW,MAAU,EAAE,EACvB,UAAU,MAAM,EAChB,QAAQ,eAAe,EAAE,EACzB,YAAY;AACjB;AAEO,SAAS,mBACd,SACA,MACqB;AACrB,QAAM,aAAa,iBAAiB,CAAC,SAAS,GAAG,IAAI,EAAE,KAAK,GAAG,CAAC;AAChE,aAAW,QAAQ,oBAAoB;AACrC,QAAI,KAAK,QAAQ,KAAK,UAAU,GAAG;AACjC,aAAO;AAAA,QACL,MAAM;AAAA,QACN,QAAQ,KAAK;AAAA,MACf;AAAA,IACF;AAAA,EACF;AACA,SAAO,EAAE,MAAM,KAAK;AACtB;AAEO,SAAS,iBACd,SACA,MACmB;AACnB,QAAM,aAAa,iBAAiB,CAAC,SAAS,GAAG,IAAI,EAAE,KAAK,GAAG,CAAC;AAChE,aAAW,QAAQ,oBAAoB;AACrC,QAAI,KAAK,QAAQ,KAAK,UAAU,GAAG;AACjC,aAAO,EAAE,OAAO,WAAW,QAAQ,KAAK,YAAY;AAAA,IACtD;AAAA,EACF;AACA,aAAW,QAAQ,oBAAoB;AACrC,QAAI,KAAK,QAAQ,KAAK,UAAU,GAAG;AACjC,aAAO,EAAE,OAAO,aAAa,QAAQ,KAAK,YAAY;AAAA,IACxD;AAAA,EACF;AACA,SAAO,EAAE,OAAO,OAAO;AACzB;AAQO,SAAS,eACd,SACA,OACkB;AAClB,QAAM,gBAAgB,QAAQ;AAC9B,MAAI,iBAAiB,OAAO;AAC1B,WAAO;AAAA,MACL;AAAA,MACA,WAAW;AAAA,MACX;AAAA,MACA,MAAM,EAAE,MAAM,eAAe,MAAM,EAAE;AAAA,IACvC;AAAA,EACF;AAEA,QAAM,eAAe,gBAAgB;AACrC,QAAM,SAAS,OAAO;AAAA,IACpB;AAAA,mBAAiB,YAAY,uBAAkB,aAAa;AAAA;AAAA,EAC9D;AACA,QAAM,SAAS,KAAK,IAAI,QAAQ,OAAO,QAAQ,CAAC;AAChD,QAAM,OAAO,KAAK,MAAM,SAAS,CAAC;AAClC,QAAM,OAAO,SAAS;AAEtB,MAAI,QAAQ,KAAK,QAAQ,GAAG;AAE1B,WAAO;AAAA,MACL,SAAS;AAAA,MACT,WAAW;AAAA,MACX;AAAA,MACA,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE;AAAA,IAC3B;AAAA,EACF;AAEA,QAAM,UAAU,QAAQ,SAAS,GAAG,IAAI;AACxC,QAAM,UAAU,QAAQ,SAAS,gBAAgB,IAAI;AACrD,SAAO;AAAA,IACL,SAAS,OAAO,OAAO,CAAC,SAAS,QAAQ,OAAO,CAAC;AAAA,IACjD,WAAW;AAAA,IACX;AAAA,IACA,MAAM,EAAE,MAAM,KAAK;AAAA,EACrB;AACF;",
+  "names": []
+}

package/dist/adapters/agents/runtime/runner.d.ts

@@ -0,0 +1,30 @@
+import type { BackendExecutionPlan } from '../../../domain/contracts/backends.js';
+import type { ParsedEvent } from '../../../domain/contracts/messages.js';
+import type { ParsedEventCallback, ProcessRunner, RunExecutionResult } from '../../../ports/process.js';
+export type { ParsedEventCallback, ProcessRunner, RunExecutionResult };
+export declare class EventDispatchQueue {
+    private readonly onEvent?;
+    private callbackErrors;
+    private queue;
+    constructor(onEvent?: ParsedEventCallback | undefined);
+    dispatch(event: ParsedEvent): void;
+    flush(): Promise<void>;
+}
+export declare class Semaphore {
+    private readonly limit;
+    private active;
+    private readonly queue;
+    constructor(limit: number);
+    acquire(): Promise<() => void>;
+    private makeRelease;
+}
+export declare function mergeFinalText(events: ParsedEvent[]): string;
+export declare function collectLines(buffer: string, onLine: (line: string) => void): string;
+export declare function createDefaultProcessRunner(env?: NodeJS.ProcessEnv): ProcessRunner;
+export declare class SpawnProcessRunner implements ProcessRunner {
+    private readonly semaphore?;
+    constructor(semaphore?: Semaphore);
+    run(plan: BackendExecutionPlan, onEvent?: ParsedEventCallback, signal?: AbortSignal): Promise<RunExecutionResult>;
+    private runInternal;
+}
+//# sourceMappingURL=runner.d.ts.map

package/dist/adapters/agents/runtime/runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../../../src/adapters/agents/runtime/runner.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAClF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uCAAuC,CAAC;AAEzE,OAAO,KAAK,EACV,mBAAmB,EACnB,aAAa,EACb,kBAAkB,EACnB,MAAM,2BAA2B,CAAC;AAInC,YAAY,EAAE,mBAAmB,EAAE,aAAa,EAAE,kBAAkB,EAAE,CAAC;AAMvE,qBAAa,kBAAkB;IAIjB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;IAHrC,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,KAAK,CAAqB;gBAEL,OAAO,CAAC,EAAE,mBAAmB,YAAA;IAE1D,QAAQ,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI;IAU5B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAS7B;AAED,qBAAa,SAAS;IAIR,OAAO,CAAC,QAAQ,CAAC,KAAK;IAHlC,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAyB;gBAElB,KAAK,EAAE,MAAM;IAE1C,OAAO,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC;IAa9B,OAAO,CAAC,WAAW;CAUpB;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,CAa5D;AAED,wBAAgB,YAAY,CAC1B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAC7B,MAAM,CAYR;AAED,wBAAgB,0BAA0B,CACxC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,aAAa,CAQf;AAED,qBAAa,kBAAmB,YAAW,aAAa;IACtD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAY;gBAE3B,SAAS,CAAC,EAAE,SAAS;IAI3B,GAAG,CACP,IAAI,EAAE,oBAAoB,EAC1B,OAAO,CAAC,EAAE,mBAAmB,EAC7B,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,kBAAkB,CAAC;IAS9B,OAAO,CAAC,WAAW;CAkKpB"}

package/dist/adapters/agents/runtime/runner.js

@@ -0,0 +1,243 @@
+import { spawn } from "node:child_process";
+import { UnsafeCommandError } from "../../../domain/errors/index.js";
+import { getStreamParser } from "../parsers/index.js";
+import { checkCommandSafety } from "./command-safety.js";
+function toError(error) {
+  return error instanceof Error ? error : new Error(String(error));
+}
+class EventDispatchQueue {
+  constructor(onEvent) {
+    this.onEvent = onEvent;
+  }
+  onEvent;
+  callbackErrors = [];
+  queue = Promise.resolve();
+  dispatch(event) {
+    if (!this.onEvent) return;
+    this.queue = this.queue.then(() => this.onEvent?.(event)).catch((error) => {
+      this.callbackErrors.push(error);
+    });
+  }
+  async flush() {
+    await this.queue;
+    if (this.callbackErrors.length === 0) return;
+    if (this.callbackErrors.length === 1) throw toError(this.callbackErrors[0]);
+    throw new AggregateError(
+      this.callbackErrors.map(toError),
+      `EventDispatchQueue: ${this.callbackErrors.length} callback errors`
+    );
+  }
+}
+class Semaphore {
+  constructor(limit) {
+    this.limit = limit;
+  }
+  limit;
+  active = 0;
+  queue = [];
+  acquire() {
+    if (this.active < this.limit) {
+      this.active++;
+      return Promise.resolve(this.makeRelease());
+    }
+    return new Promise((resolve) => {
+      this.queue.push(() => {
+        this.active++;
+        resolve(this.makeRelease());
+      });
+    });
+  }
+  makeRelease() {
+    let released = false;
+    return () => {
+      if (released) return;
+      released = true;
+      this.active--;
+      const next = this.queue.shift();
+      if (next) next();
+    };
+  }
+}
+function mergeFinalText(events) {
+  const resultTexts = events.filter((event) => event.type === "result" && event.text).map((event) => event.text || "");
+  if (resultTexts.length > 0) {
+    const lastResultText = resultTexts[resultTexts.length - 1] || "";
+    if (lastResultText.length > 0) return lastResultText;
+  }
+  return events.filter((event) => event.type === "text" && event.text).map((event) => event.text || "").join("");
+}
+function collectLines(buffer, onLine) {
+  let rest = buffer;
+  let newlineIndex = rest.indexOf("\n");
+  while (newlineIndex !== -1) {
+    const line = rest.slice(0, newlineIndex);
+    onLine(line);
+    rest = rest.slice(newlineIndex + 1);
+    newlineIndex = rest.indexOf("\n");
+  }
+  return rest;
+}
+function createDefaultProcessRunner(env = process.env) {
+  const concurrent = env.OCTOFLOW_MAX_CONCURRENT ?? "8";
+  const maxConcurrent = Number.parseInt(concurrent, 10);
+  const semaphore = Number.isFinite(maxConcurrent) && maxConcurrent > 0 ? new Semaphore(maxConcurrent) : void 0;
+  return new SpawnProcessRunner(semaphore);
+}
+class SpawnProcessRunner {
+  semaphore;
+  constructor(semaphore) {
+    this.semaphore = semaphore;
+  }
+  async run(plan, onEvent, signal) {
+    const release = this.semaphore ? await this.semaphore.acquire() : void 0;
+    try {
+      return await this.runInternal(plan, onEvent, signal);
+    } finally {
+      release?.();
+    }
+  }
+  runInternal(plan, onEvent, signal) {
+    const timeoutMs = plan.timeoutMs ?? 6e5;
+    const parser = getStreamParser(plan.parser);
+    if (!parser) {
+      return Promise.reject(new Error(`Unknown parser: ${plan.parser}`));
+    }
+    if (!plan.command) {
+      return Promise.reject(new Error("Execution plan is missing command"));
+    }
+    const command = plan.command;
+    const args = plan.args ?? [];
+    return new Promise((resolve, reject) => {
+      if (plan.runtimePolicy?.backend === "custom" && plan.runtimePolicy.approvalMode !== "off") {
+        const safety = checkCommandSafety(command, args);
+        if (!safety.safe) {
+          reject(
+            new UnsafeCommandError(
+              command,
+              safety.reason ?? "command matched an unsafe pattern"
+            )
+          );
+          return;
+        }
+      }
+      const isPosix = process.platform !== "win32";
+      const child = spawn(command, args, {
+        cwd: plan.cwd,
+        env: plan.env,
+        stdio: "pipe",
+        detached: isPosix
+      });
+      let stdout = "";
+      let stderr = "";
+      let pending = "";
+      let sessionId = null;
+      const events = [];
+      const eventDispatch = new EventDispatchQueue(onEvent);
+      let settled = false;
+      let abortKillTimer;
+      let timeoutKillTimer;
+      const killGroup = (sig) => {
+        if (!child.pid) return;
+        try {
+          if (isPosix) process.kill(-child.pid, sig);
+          else child.kill(sig);
+        } catch {
+        }
+      };
+      const abort = () => {
+        if (settled) return;
+        clearTimeout(timer);
+        settled = true;
+        killGroup("SIGTERM");
+        abortKillTimer = setTimeout(() => killGroup("SIGKILL"), 5e3);
+        reject(new Error("CLI process canceled"));
+      };
+      const timer = setTimeout(() => {
+        if (settled) return;
+        killGroup("SIGTERM");
+        timeoutKillTimer = setTimeout(() => killGroup("SIGKILL"), 5e3);
+        settled = true;
+        reject(new Error(`CLI process timed out after ${timeoutMs}ms`));
+      }, timeoutMs);
+      if (signal?.aborted) {
+        abort();
+        return;
+      }
+      signal?.addEventListener("abort", abort, { once: true });
+      child.stdout.setEncoding("utf8");
+      child.stderr.setEncoding("utf8");
+      child.stdout.on("data", (chunk) => {
+        stdout += chunk;
+        pending += chunk;
+        pending = collectLines(pending, (line) => {
+          const event = parser.parseLine(line);
+          if (!event) return;
+          events.push(event);
+          if (event.sessionId) sessionId = event.sessionId;
+          eventDispatch.dispatch(event);
+        });
+      });
+      child.stderr.on("data", (chunk) => {
+        stderr += chunk;
+      });
+      const clearKillTimers = () => {
+        if (abortKillTimer) {
+          clearTimeout(abortKillTimer);
+          abortKillTimer = void 0;
+        }
+        if (timeoutKillTimer) {
+          clearTimeout(timeoutKillTimer);
+          timeoutKillTimer = void 0;
+        }
+      };
+      child.on("error", (err) => {
+        clearKillTimers();
+        if (settled) return;
+        clearTimeout(timer);
+        signal?.removeEventListener("abort", abort);
+        settled = true;
+        reject(err);
+      });
+      child.on("close", (exitCode) => {
+        clearKillTimers();
+        if (settled) return;
+        clearTimeout(timer);
+        signal?.removeEventListener("abort", abort);
+        settled = true;
+        void (async () => {
+          if (pending.length > 0) {
+            const event = parser.parseLine(pending);
+            if (event) {
+              events.push(event);
+              if (event.sessionId) sessionId = event.sessionId;
+              eventDispatch.dispatch(event);
+            }
+          }
+          await eventDispatch.flush();
+          if (!sessionId && plan.sessionId) sessionId = plan.sessionId;
+          resolve({
+            exitCode: exitCode ?? 0,
+            stdout,
+            stderr,
+            events,
+            finalText: mergeFinalText(events),
+            sessionId
+          });
+        })().catch((error) => {
+          reject(toError(error));
+        });
+      });
+      if (plan.stdin) child.stdin.write(plan.stdin);
+      child.stdin.end();
+    });
+  }
+}
+export {
+  EventDispatchQueue,
+  Semaphore,
+  SpawnProcessRunner,
+  collectLines,
+  createDefaultProcessRunner,
+  mergeFinalText
+};
+//# sourceMappingURL=runner.js.map

package/dist/adapters/agents/runtime/runner.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/adapters/agents/runtime/runner.ts"],
+  "sourcesContent": ["import { spawn } from 'node:child_process';\n\nimport type { BackendExecutionPlan } from '../../../domain/contracts/backends.js';\nimport type { ParsedEvent } from '../../../domain/contracts/messages.js';\nimport { UnsafeCommandError } from '../../../domain/errors/index.js';\nimport type {\n  ParsedEventCallback,\n  ProcessRunner,\n  RunExecutionResult,\n} from '../../../ports/process.js';\nimport { getStreamParser } from '../parsers/index.js';\nimport { checkCommandSafety } from './command-safety.js';\n\nexport type { ParsedEventCallback, ProcessRunner, RunExecutionResult };\n\nfunction toError(error: unknown): Error {\n  return error instanceof Error ? error : new Error(String(error));\n}\n\nexport class EventDispatchQueue {\n  private callbackErrors: unknown[] = [];\n  private queue = Promise.resolve();\n\n  constructor(private readonly onEvent?: ParsedEventCallback) {}\n\n  dispatch(event: ParsedEvent): void {\n    if (!this.onEvent) return;\n\n    this.queue = this.queue\n      .then(() => this.onEvent?.(event))\n      .catch((error) => {\n        this.callbackErrors.push(error);\n      });\n  }\n\n  async flush(): Promise<void> {\n    await this.queue;\n    if (this.callbackErrors.length === 0) return;\n    if (this.callbackErrors.length === 1) throw toError(this.callbackErrors[0]);\n    throw new AggregateError(\n      this.callbackErrors.map(toError),\n      `EventDispatchQueue: ${this.callbackErrors.length} callback errors`\n    );\n  }\n}\n\nexport class Semaphore {\n  private active = 0;\n  private readonly queue: Array<() => void> = [];\n\n  constructor(private readonly limit: number) {}\n\n  acquire(): Promise<() => void> {\n    if (this.active < this.limit) {\n      this.active++;\n      return Promise.resolve(this.makeRelease());\n    }\n    return new Promise((resolve) => {\n      this.queue.push(() => {\n        this.active++;\n        resolve(this.makeRelease());\n      });\n    });\n  }\n\n  private makeRelease(): () => void {\n    let released = false;\n    return () => {\n      if (released) return;\n      released = true;\n      this.active--;\n      const next = this.queue.shift();\n      if (next) next();\n    };\n  }\n}\n\nexport function mergeFinalText(events: ParsedEvent[]): string {\n  const resultTexts = events\n    .filter((event) => event.type === 'result' && event.text)\n    .map((event) => event.text || '');\n  if (resultTexts.length > 0) {\n    const lastResultText = resultTexts[resultTexts.length - 1] || '';\n    if (lastResultText.length > 0) return lastResultText;\n  }\n\n  return events\n    .filter((event) => event.type === 'text' && event.text)\n    .map((event) => event.text || '')\n    .join('');\n}\n\nexport function collectLines(\n  buffer: string,\n  onLine: (line: string) => void\n): string {\n  let rest = buffer;\n  let newlineIndex = rest.indexOf('\\n');\n\n  while (newlineIndex !== -1) {\n    const line = rest.slice(0, newlineIndex);\n    onLine(line);\n    rest = rest.slice(newlineIndex + 1);\n    newlineIndex = rest.indexOf('\\n');\n  }\n\n  return rest;\n}\n\nexport function createDefaultProcessRunner(\n  env: NodeJS.ProcessEnv = process.env\n): ProcessRunner {\n  const concurrent = env.OCTOFLOW_MAX_CONCURRENT ?? '8';\n  const maxConcurrent = Number.parseInt(concurrent, 10);\n  const semaphore =\n    Number.isFinite(maxConcurrent) && maxConcurrent > 0\n      ? new Semaphore(maxConcurrent)\n      : undefined;\n  return new SpawnProcessRunner(semaphore);\n}\n\nexport class SpawnProcessRunner implements ProcessRunner {\n  private readonly semaphore?: Semaphore;\n\n  constructor(semaphore?: Semaphore) {\n    this.semaphore = semaphore;\n  }\n\n  async run(\n    plan: BackendExecutionPlan,\n    onEvent?: ParsedEventCallback,\n    signal?: AbortSignal\n  ): Promise<RunExecutionResult> {\n    const release = this.semaphore ? await this.semaphore.acquire() : undefined;\n    try {\n      return await this.runInternal(plan, onEvent, signal);\n    } finally {\n      release?.();\n    }\n  }\n\n  private runInternal(\n    plan: BackendExecutionPlan,\n    onEvent?: ParsedEventCallback,\n    signal?: AbortSignal\n  ): Promise<RunExecutionResult> {\n    const timeoutMs = plan.timeoutMs ?? 600_000;\n    const parser = getStreamParser(plan.parser);\n    if (!parser) {\n      return Promise.reject(new Error(`Unknown parser: ${plan.parser}`));\n    }\n    if (!plan.command) {\n      return Promise.reject(new Error('Execution plan is missing command'));\n    }\n    const command = plan.command;\n    const args = plan.args ?? [];\n\n    return new Promise<RunExecutionResult>((resolve, reject) => {\n      if (\n        plan.runtimePolicy?.backend === 'custom' &&\n        plan.runtimePolicy.approvalMode !== 'off'\n      ) {\n        const safety = checkCommandSafety(command, args);\n        if (!safety.safe) {\n          reject(\n            new UnsafeCommandError(\n              command,\n              safety.reason ?? 'command matched an unsafe pattern'\n            )\n          );\n          return;\n        }\n      }\n\n      const isPosix = process.platform !== 'win32';\n      // Merge parent env so the child always has HOME, PATH, and auth tokens.\n      // plan.env carries only the *extra* vars the caller wants to inject.\n      const child = spawn(command, args, {\n        cwd: plan.cwd,\n        env: plan.env,\n        stdio: 'pipe',\n        detached: isPosix,\n      });\n\n      let stdout = '';\n      let stderr = '';\n      let pending = '';\n      let sessionId: string | null = null;\n      const events: ParsedEvent[] = [];\n      const eventDispatch = new EventDispatchQueue(onEvent);\n      let settled = false;\n      let abortKillTimer: NodeJS.Timeout | undefined;\n      let timeoutKillTimer: NodeJS.Timeout | undefined;\n\n      const killGroup = (sig: NodeJS.Signals) => {\n        if (!child.pid) return;\n        try {\n          if (isPosix) process.kill(-child.pid, sig);\n          else child.kill(sig);\n        } catch {\n          /* already dead */\n        }\n      };\n\n      const abort = () => {\n        if (settled) return;\n        clearTimeout(timer);\n        settled = true;\n        killGroup('SIGTERM');\n        abortKillTimer = setTimeout(() => killGroup('SIGKILL'), 5000);\n        reject(new Error('CLI process canceled'));\n      };\n\n      const timer = setTimeout(() => {\n        if (settled) return;\n        killGroup('SIGTERM');\n        timeoutKillTimer = setTimeout(() => killGroup('SIGKILL'), 5000);\n        settled = true;\n        reject(new Error(`CLI process timed out after ${timeoutMs}ms`));\n      }, timeoutMs);\n\n      if (signal?.aborted) {\n        abort();\n        return;\n      }\n      signal?.addEventListener('abort', abort, { once: true });\n\n      child.stdout.setEncoding('utf8');\n      child.stderr.setEncoding('utf8');\n\n      child.stdout.on('data', (chunk: string) => {\n        stdout += chunk;\n        pending += chunk;\n        pending = collectLines(pending, (line) => {\n          const event = parser.parseLine(line);\n          if (!event) return;\n          events.push(event);\n          if (event.sessionId) sessionId = event.sessionId;\n          eventDispatch.dispatch(event);\n        });\n      });\n\n      child.stderr.on('data', (chunk: string) => {\n        stderr += chunk;\n      });\n\n      const clearKillTimers = () => {\n        if (abortKillTimer) {\n          clearTimeout(abortKillTimer);\n          abortKillTimer = undefined;\n        }\n        if (timeoutKillTimer) {\n          clearTimeout(timeoutKillTimer);\n          timeoutKillTimer = undefined;\n        }\n      };\n\n      child.on('error', (err) => {\n        clearKillTimers();\n        if (settled) return;\n        clearTimeout(timer);\n        signal?.removeEventListener('abort', abort);\n        settled = true;\n        reject(err);\n      });\n\n      child.on('close', (exitCode) => {\n        clearKillTimers();\n        if (settled) return;\n        clearTimeout(timer);\n        signal?.removeEventListener('abort', abort);\n        settled = true;\n\n        void (async () => {\n          if (pending.length > 0) {\n            const event = parser.parseLine(pending);\n            if (event) {\n              events.push(event);\n              if (event.sessionId) sessionId = event.sessionId;\n              eventDispatch.dispatch(event);\n            }\n          }\n\n          await eventDispatch.flush();\n\n          if (!sessionId && plan.sessionId) sessionId = plan.sessionId;\n          resolve({\n            exitCode: exitCode ?? 0,\n            stdout,\n            stderr,\n            events,\n            finalText: mergeFinalText(events),\n            sessionId,\n          });\n        })().catch((error) => {\n          reject(toError(error));\n        });\n      });\n\n      if (plan.stdin) child.stdin.write(plan.stdin);\n      child.stdin.end();\n    });\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,aAAa;AAItB,SAAS,0BAA0B;AAMnC,SAAS,uBAAuB;AAChC,SAAS,0BAA0B;AAInC,SAAS,QAAQ,OAAuB;AACtC,SAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AACjE;AAEO,MAAM,mBAAmB;AAAA,EAI9B,YAA6B,SAA+B;AAA/B;AAAA,EAAgC;AAAA,EAAhC;AAAA,EAHrB,iBAA4B,CAAC;AAAA,EAC7B,QAAQ,QAAQ,QAAQ;AAAA,EAIhC,SAAS,OAA0B;AACjC,QAAI,CAAC,KAAK,QAAS;AAEnB,SAAK,QAAQ,KAAK,MACf,KAAK,MAAM,KAAK,UAAU,KAAK,CAAC,EAChC,MAAM,CAAC,UAAU;AAChB,WAAK,eAAe,KAAK,KAAK;AAAA,IAChC,CAAC;AAAA,EACL;AAAA,EAEA,MAAM,QAAuB;AAC3B,UAAM,KAAK;AACX,QAAI,KAAK,eAAe,WAAW,EAAG;AACtC,QAAI,KAAK,eAAe,WAAW,EAAG,OAAM,QAAQ,KAAK,eAAe,CAAC,CAAC;AAC1E,UAAM,IAAI;AAAA,MACR,KAAK,eAAe,IAAI,OAAO;AAAA,MAC/B,uBAAuB,KAAK,eAAe,MAAM;AAAA,IACnD;AAAA,EACF;AACF;AAEO,MAAM,UAAU;AAAA,EAIrB,YAA6B,OAAe;AAAf;AAAA,EAAgB;AAAA,EAAhB;AAAA,EAHrB,SAAS;AAAA,EACA,QAA2B,CAAC;AAAA,EAI7C,UAA+B;AAC7B,QAAI,KAAK,SAAS,KAAK,OAAO;AAC5B,WAAK;AACL,aAAO,QAAQ,QAAQ,KAAK,YAAY,CAAC;AAAA,IAC3C;AACA,WAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,WAAK,MAAM,KAAK,MAAM;AACpB,aAAK;AACL,gBAAQ,KAAK,YAAY,CAAC;AAAA,MAC5B,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA,EAEQ,cAA0B;AAChC,QAAI,WAAW;AACf,WAAO,MAAM;AACX,UAAI,SAAU;AACd,iBAAW;AACX,WAAK;AACL,YAAM,OAAO,KAAK,MAAM,MAAM;AAC9B,UAAI,KAAM,MAAK;AAAA,IACjB;AAAA,EACF;AACF;AAEO,SAAS,eAAe,QAA+B;AAC5D,QAAM,cAAc,OACjB,OAAO,CAAC,UAAU,MAAM,SAAS,YAAY,MAAM,IAAI,EACvD,IAAI,CAAC,UAAU,MAAM,QAAQ,EAAE;AAClC,MAAI,YAAY,SAAS,GAAG;AAC1B,UAAM,iBAAiB,YAAY,YAAY,SAAS,CAAC,KAAK;AAC9D,QAAI,eAAe,SAAS,EAAG,QAAO;AAAA,EACxC;AAEA,SAAO,OACJ,OAAO,CAAC,UAAU,MAAM,SAAS,UAAU,MAAM,IAAI,EACrD,IAAI,CAAC,UAAU,MAAM,QAAQ,EAAE,EAC/B,KAAK,EAAE;AACZ;AAEO,SAAS,aACd,QACA,QACQ;AACR,MAAI,OAAO;AACX,MAAI,eAAe,KAAK,QAAQ,IAAI;AAEpC,SAAO,iBAAiB,IAAI;AAC1B,UAAM,OAAO,KAAK,MAAM,GAAG,YAAY;AACvC,WAAO,IAAI;AACX,WAAO,KAAK,MAAM,eAAe,CAAC;AAClC,mBAAe,KAAK,QAAQ,IAAI;AAAA,EAClC;AAEA,SAAO;AACT;AAEO,SAAS,2BACd,MAAyB,QAAQ,KAClB;AACf,QAAM,aAAa,IAAI,2BAA2B;AAClD,QAAM,gBAAgB,OAAO,SAAS,YAAY,EAAE;AACpD,QAAM,YACJ,OAAO,SAAS,aAAa,KAAK,gBAAgB,IAC9C,IAAI,UAAU,aAAa,IAC3B;AACN,SAAO,IAAI,mBAAmB,SAAS;AACzC;AAEO,MAAM,mBAA4C;AAAA,EACtC;AAAA,EAEjB,YAAY,WAAuB;AACjC,SAAK,YAAY;AAAA,EACnB;AAAA,EAEA,MAAM,IACJ,MACA,SACA,QAC6B;AAC7B,UAAM,UAAU,KAAK,YAAY,MAAM,KAAK,UAAU,QAAQ,IAAI;AAClE,QAAI;AACF,aAAO,MAAM,KAAK,YAAY,MAAM,SAAS,MAAM;AAAA,IACrD,UAAE;AACA,gBAAU;AAAA,IACZ;AAAA,EACF;AAAA,EAEQ,YACN,MACA,SACA,QAC6B;AAC7B,UAAM,YAAY,KAAK,aAAa;AACpC,UAAM,SAAS,gBAAgB,KAAK,MAAM;AAC1C,QAAI,CAAC,QAAQ;AACX,aAAO,QAAQ,OAAO,IAAI,MAAM,mBAAmB,KAAK,MAAM,EAAE,CAAC;AAAA,IACnE;AACA,QAAI,CAAC,KAAK,SAAS;AACjB,aAAO,QAAQ,OAAO,IAAI,MAAM,mCAAmC,CAAC;AAAA,IACtE;AACA,UAAM,UAAU,KAAK;AACrB,UAAM,OAAO,KAAK,QAAQ,CAAC;AAE3B,WAAO,IAAI,QAA4B,CAAC,SAAS,WAAW;AAC1D,UACE,KAAK,eAAe,YAAY,YAChC,KAAK,cAAc,iBAAiB,OACpC;AACA,cAAM,SAAS,mBAAmB,SAAS,IAAI;AAC/C,YAAI,CAAC,OAAO,MAAM;AAChB;AAAA,YACE,IAAI;AAAA,cACF;AAAA,cACA,OAAO,UAAU;AAAA,YACnB;AAAA,UACF;AACA;AAAA,QACF;AAAA,MACF;AAEA,YAAM,UAAU,QAAQ,aAAa;AAGrC,YAAM,QAAQ,MAAM,SAAS,MAAM;AAAA,QACjC,KAAK,KAAK;AAAA,QACV,KAAK,KAAK;AAAA,QACV,OAAO;AAAA,QACP,UAAU;AAAA,MACZ,CAAC;AAED,UAAI,SAAS;AACb,UAAI,SAAS;AACb,UAAI,UAAU;AACd,UAAI,YAA2B;AAC/B,YAAM,SAAwB,CAAC;AAC/B,YAAM,gBAAgB,IAAI,mBAAmB,OAAO;AACpD,UAAI,UAAU;AACd,UAAI;AACJ,UAAI;AAEJ,YAAM,YAAY,CAAC,QAAwB;AACzC,YAAI,CAAC,MAAM,IAAK;AAChB,YAAI;AACF,cAAI,QAAS,SAAQ,KAAK,CAAC,MAAM,KAAK,GAAG;AAAA,cACpC,OAAM,KAAK,GAAG;AAAA,QACrB,QAAQ;AAAA,QAER;AAAA,MACF;AAEA,YAAM,QAAQ,MAAM;AAClB,YAAI,QAAS;AACb,qBAAa,KAAK;AAClB,kBAAU;AACV,kBAAU,SAAS;AACnB,yBAAiB,WAAW,MAAM,UAAU,SAAS,GAAG,GAAI;AAC5D,eAAO,IAAI,MAAM,sBAAsB,CAAC;AAAA,MAC1C;AAEA,YAAM,QAAQ,WAAW,MAAM;AAC7B,YAAI,QAAS;AACb,kBAAU,SAAS;AACnB,2BAAmB,WAAW,MAAM,UAAU,SAAS,GAAG,GAAI;AAC9D,kBAAU;AACV,eAAO,IAAI,MAAM,+BAA+B,SAAS,IAAI,CAAC;AAAA,MAChE,GAAG,SAAS;AAEZ,UAAI,QAAQ,SAAS;AACnB,cAAM;AACN;AAAA,MACF;AACA,cAAQ,iBAAiB,SAAS,OAAO,EAAE,MAAM,KAAK,CAAC;AAEvD,YAAM,OAAO,YAAY,MAAM;AAC/B,YAAM,OAAO,YAAY,MAAM;AAE/B,YAAM,OAAO,GAAG,QAAQ,CAAC,UAAkB;AACzC,kBAAU;AACV,mBAAW;AACX,kBAAU,aAAa,SAAS,CAAC,SAAS;AACxC,gBAAM,QAAQ,OAAO,UAAU,IAAI;AACnC,cAAI,CAAC,MAAO;AACZ,iBAAO,KAAK,KAAK;AACjB,cAAI,MAAM,UAAW,aAAY,MAAM;AACvC,wBAAc,SAAS,KAAK;AAAA,QAC9B,CAAC;AAAA,MACH,CAAC;AAED,YAAM,OAAO,GAAG,QAAQ,CAAC,UAAkB;AACzC,kBAAU;AAAA,MACZ,CAAC;AAED,YAAM,kBAAkB,MAAM;AAC5B,YAAI,gBAAgB;AAClB,uBAAa,cAAc;AAC3B,2BAAiB;AAAA,QACnB;AACA,YAAI,kBAAkB;AACpB,uBAAa,gBAAgB;AAC7B,6BAAmB;AAAA,QACrB;AAAA,MACF;AAEA,YAAM,GAAG,SAAS,CAAC,QAAQ;AACzB,wBAAgB;AAChB,YAAI,QAAS;AACb,qBAAa,KAAK;AAClB,gBAAQ,oBAAoB,SAAS,KAAK;AAC1C,kBAAU;AACV,eAAO,GAAG;AAAA,MACZ,CAAC;AAED,YAAM,GAAG,SAAS,CAAC,aAAa;AAC9B,wBAAgB;AAChB,YAAI,QAAS;AACb,qBAAa,KAAK;AAClB,gBAAQ,oBAAoB,SAAS,KAAK;AAC1C,kBAAU;AAEV,cAAM,YAAY;AAChB,cAAI,QAAQ,SAAS,GAAG;AACtB,kBAAM,QAAQ,OAAO,UAAU,OAAO;AACtC,gBAAI,OAAO;AACT,qBAAO,KAAK,KAAK;AACjB,kBAAI,MAAM,UAAW,aAAY,MAAM;AACvC,4BAAc,SAAS,KAAK;AAAA,YAC9B;AAAA,UACF;AAEA,gBAAM,cAAc,MAAM;AAE1B,cAAI,CAAC,aAAa,KAAK,UAAW,aAAY,KAAK;AACnD,kBAAQ;AAAA,YACN,UAAU,YAAY;AAAA,YACtB;AAAA,YACA;AAAA,YACA;AAAA,YACA,WAAW,eAAe,MAAM;AAAA,YAChC;AAAA,UACF,CAAC;AAAA,QACH,GAAG,EAAE,MAAM,CAAC,UAAU;AACpB,iBAAO,QAAQ,KAAK,CAAC;AAAA,QACvB,CAAC;AAAA,MACH,CAAC;AAED,UAAI,KAAK,MAAO,OAAM,MAAM,MAAM,KAAK,KAAK;AAC5C,YAAM,MAAM,IAAI;AAAA,IAClB,CAAC;AAAA,EACH;AACF;",
+  "names": []
+}

package/dist/adapters/agents/runtime/shell-utils.d.ts

@@ -0,0 +1,9 @@
+export declare function assertSafeEnvKey(key: string): void;
+/**
+ * Single-quote a shell argument, escaping any embedded single-quotes.
+ * Safe for POSIX-compatible shells (bash, sh, dash).
+ *
+ * @example shellQuote("it's alive") → "'it'\\''s alive'"
+ */
+export declare function shellQuote(value: string): string;
+//# sourceMappingURL=shell-utils.d.ts.map

package/dist/adapters/agents/runtime/shell-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-utils.d.ts","sourceRoot":"","sources":["../../../../src/adapters/agents/runtime/shell-utils.ts"],"names":[],"mappings":"AAEA,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAIlD;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEhD"}

package/dist/adapters/agents/runtime/shell-utils.js

@@ -0,0 +1,14 @@
+const SAFE_ENV_KEY = /^[A-Za-z_][A-Za-z0-9_]*$/;
+function assertSafeEnvKey(key) {
+  if (!SAFE_ENV_KEY.test(key)) {
+    throw new Error(`Unsafe environment variable name: ${key}`);
+  }
+}
+function shellQuote(value) {
+  return `'${value.replace(/'/g, `'\\''`)}'`;
+}
+export {
+  assertSafeEnvKey,
+  shellQuote
+};
+//# sourceMappingURL=shell-utils.js.map

package/dist/adapters/agents/runtime/shell-utils.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/adapters/agents/runtime/shell-utils.ts"],
+  "sourcesContent": ["const SAFE_ENV_KEY = /^[A-Za-z_][A-Za-z0-9_]*$/;\n\nexport function assertSafeEnvKey(key: string): void {\n  if (!SAFE_ENV_KEY.test(key)) {\n    throw new Error(`Unsafe environment variable name: ${key}`);\n  }\n}\n\n/**\n * Single-quote a shell argument, escaping any embedded single-quotes.\n * Safe for POSIX-compatible shells (bash, sh, dash).\n *\n * @example shellQuote(\"it's alive\") \u2192 \"'it'\\\\''s alive'\"\n */\nexport function shellQuote(value: string): string {\n  return `'${value.replace(/'/g, `'\\\\''`)}'`;\n}\n"],
+  "mappings": "AAAA,MAAM,eAAe;AAEd,SAAS,iBAAiB,KAAmB;AAClD,MAAI,CAAC,aAAa,KAAK,GAAG,GAAG;AAC3B,UAAM,IAAI,MAAM,qCAAqC,GAAG,EAAE;AAAA,EAC5D;AACF;AAQO,SAAS,WAAW,OAAuB;AAChD,SAAO,IAAI,MAAM,QAAQ,MAAM,OAAO,CAAC;AACzC;",
+  "names": []
+}

package/dist/adapters/agents/runtime/ssh-runner-internal.d.ts

@@ -0,0 +1,35 @@
+/**
+ * SSH connection pool + handshake helpers for {@link SshProcessRunner}.
+ */
+import type { ConnectConfig } from 'ssh2';
+import { Client } from 'ssh2';
+import type { BackendExecutionPlan } from '../../../domain/contracts/backends.js';
+import type { SshPoolOptions } from './ssh-runner-types.js';
+interface PooledEntry {
+    conn: Client;
+    bastion?: Client;
+    idleSince: number;
+    idleTimer?: NodeJS.Timeout;
+}
+export declare class SshConnectionPool {
+    private readonly idleTtlMs;
+    private readonly maxIdle;
+    private readonly idle;
+    private readonly active;
+    private disposed;
+    constructor(options?: SshPoolOptions);
+    acquire(key: string, factory: () => Promise<{
+        conn: Client;
+        bastion?: Client;
+    }>): Promise<PooledEntry>;
+    release(key: string, entry: PooledEntry): void;
+    evict(key: string, entry: PooledEntry): void;
+    dispose(): Promise<void>;
+    private attachEvictionListeners;
+    private closeEntry;
+}
+export declare function verifyHostKey(key: Buffer, fingerprint: string | undefined, label: string): boolean;
+export declare function buildRemoteCommand(plan: BackendExecutionPlan): string;
+export declare function openConnection(config: ConnectConfig): Promise<Client>;
+export {};
+//# sourceMappingURL=ssh-runner-internal.d.ts.map

package/dist/adapters/agents/runtime/ssh-runner-internal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssh-runner-internal.d.ts","sourceRoot":"","sources":["../../../../src/adapters/agents/runtime/ssh-runner-internal.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAE9B,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAGlF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D,UAAU,WAAW;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC;CAC5B;AAED,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAoC;IACzD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0B;IACjD,OAAO,CAAC,QAAQ,CAAS;gBAEb,OAAO,GAAE,cAAmB;IAKlC,OAAO,CACX,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,GACzD,OAAO,CAAC,WAAW,CAAC;IAsBvB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,IAAI;IAyB9C,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,IAAI;IAU5C,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAWxB,OAAO,CAAC,uBAAuB;IAU/B,OAAO,CAAC,UAAU;CAenB;AAED,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,KAAK,EAAE,MAAM,GACZ,OAAO,CAYT;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,oBAAoB,GAAG,MAAM,CAYrE;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CASrE"}