smol-symphony 0.1.0

package/dist/agent/runner.js

@@ -0,0 +1,394 @@
+// Agent Runner (SPEC §10.7): workspace + prompt + ACP session, with continuation turns up
+// to agent.max_turns. The ACP adapter (claude-agent-acp / codex-acp / opencode acp) runs
+// inside a per-issue smolvm machine. The host workspace directory is volume-mounted into
+// the VM at the same absolute path so cwd values are consistent.
+import { setTimeout as delay } from 'node:timers/promises';
+import { WorkspaceManager, sanitizeWorkspaceKey } from '../workspace.js';
+import { renderPrompt } from '../prompt.js';
+import { SmolvmClient } from './smolvm.js';
+import { AcpClient } from './acp.js';
+import { ADAPTERS, deriveAcpCommand, isKnownAdapter, stageCredential, } from './adapters.js';
+import { withIssue } from '../logging.js';
+const CONTINUATION_PROMPT_WITH_MCP = 'Continue working on the same issue. Pick up where the prior turn left off and proceed with the next concrete action. If the work is fully complete, summarize what changed and call the symphony.mark_done tool.';
+const CONTINUATION_PROMPT_NO_MCP = 'Continue working on the same issue. Pick up where the prior turn left off and proceed with the next concrete action. If the work is fully complete, summarize what changed and stop.';
+function continuationPrompt(mcpEnabled) {
+    return mcpEnabled ? CONTINUATION_PROMPT_WITH_MCP : CONTINUATION_PROMPT_NO_MCP;
+}
+function buildSteeringReplyPrompt(question, context, reply) {
+    const ctxBlock = context && context.length > 0 ? `\n\nContext you provided:\n${context}` : '';
+    return [
+        'The human operator has responded to your steering request.',
+        '',
+        'Your question was:',
+        question,
+        ctxBlock,
+        '',
+        'The human responded:',
+        reply,
+        '',
+        'Continue work on the issue, taking the human response into account. If the work is fully complete, call symphony.mark_done. If you need to ask another question, call symphony.request_human_steering again.',
+    ]
+        .join('\n')
+        .replace(/\n{3,}/g, '\n\n');
+}
+export class AgentRunner {
+    cfg;
+    workflow;
+    workspaces;
+    tracker;
+    smolvm;
+    events;
+    mcp;
+    constructor(cfg, workflow, workspaces, tracker, smolvm, events, mcp = null) {
+        this.cfg = cfg;
+        this.workflow = workflow;
+        this.workspaces = workspaces;
+        this.tracker = tracker;
+        this.smolvm = smolvm;
+        this.events = events;
+        this.mcp = mcp;
+    }
+    updateConfig(cfg, workflow) {
+        this.cfg = cfg;
+        this.workflow = workflow;
+    }
+    setMcpRegistry(mcp) {
+        this.mcp = mcp;
+    }
+    vmNameFor(issue) {
+        return `symphony-${sanitizeWorkspaceKey(issue.identifier)}`.toLowerCase();
+    }
+    async runAttempt(issue, attempt, cancelSignal, runningEntry) {
+        const logger = withIssue({ issue_id: issue.id, issue_identifier: issue.identifier });
+        let workspace;
+        try {
+            workspace = await this.workspaces.ensureFor(issue.identifier);
+        }
+        catch (err) {
+            logger.error('workspace error', { error: err.message });
+            return { ok: false, reason: 'workspace error', threadId: null, turnsCompleted: 0 };
+        }
+        try {
+            await this.workspaces.runBeforeRun(workspace.path, this.cfg.hooks);
+        }
+        catch (err) {
+            logger.error('before_run hook failed', { error: err.message });
+            return { ok: false, reason: 'before_run hook error', threadId: null, turnsCompleted: 0 };
+        }
+        // Resolve which adapter binary to launch and how to feed it credentials. Two
+        // paths:
+        //   1. acp.command is set in WORKFLOW.md → use it verbatim (operator owns
+        //      credential handling; symphony stays out of the way).
+        //   2. acp.command is null → look up the adapter profile, stage the host
+        //      credential into the workspace, and synthesize a launch command that
+        //      copies the cred into the adapter's expected location and exec's the
+        //      adapter binary.
+        let effectiveAcpCommand;
+        if (this.cfg.acp.command !== null) {
+            effectiveAcpCommand = this.cfg.acp.command;
+        }
+        else if (isKnownAdapter(this.cfg.acp.adapter)) {
+            const profile = ADAPTERS[this.cfg.acp.adapter];
+            let staged;
+            try {
+                staged = await stageCredential(workspace.path, profile);
+            }
+            catch (err) {
+                logger.error('credential staging failed', {
+                    adapter: profile.id,
+                    error: err.message,
+                });
+                await this.workspaces.runAfterRunBestEffort(workspace.path, this.cfg.hooks);
+                return { ok: false, reason: 'credential staging error', threadId: null, turnsCompleted: 0 };
+            }
+            effectiveAcpCommand = deriveAcpCommand(profile, staged.relPath);
+        }
+        else {
+            // validateDispatch should have caught this, but defend in depth.
+            logger.error('no acp launch path', { adapter: this.cfg.acp.adapter });
+            return { ok: false, reason: 'no acp launch path configured', threadId: null, turnsCompleted: 0 };
+        }
+        const vmName = this.vmNameFor(issue);
+        const mounts = [
+            { host: workspace.path, guest: workspace.path, readonly: false },
+        ];
+        if (this.cfg.smolvm.bin_path) {
+            mounts.push({ host: this.cfg.smolvm.bin_path, guest: '/opt/codex', readonly: true });
+        }
+        for (const v of this.cfg.smolvm.volumes) {
+            mounts.push({ host: v.host, guest: v.guest, readonly: v.readonly });
+        }
+        const env = {};
+        for (const k of this.cfg.smolvm.forward_env) {
+            const v = process.env[k];
+            if (v && v.length > 0)
+                env[k] = v;
+        }
+        try {
+            await this.smolvm.ensureRunning(vmName, {
+                image: this.cfg.smolvm.image,
+                from: this.cfg.smolvm.from,
+                cpus: this.cfg.smolvm.cpus,
+                memMib: this.cfg.smolvm.mem_mib,
+                net: this.cfg.smolvm.net,
+                mounts,
+                env,
+                workdir: workspace.path,
+                sshAgent: false,
+            });
+        }
+        catch (err) {
+            logger.error('smolvm bring-up failed', { error: err.message });
+            await this.workspaces.runAfterRunBestEffort(workspace.path, this.cfg.hooks);
+            return { ok: false, reason: 'smolvm bring-up error', threadId: null, turnsCompleted: 0 };
+        }
+        const execStream = this.smolvm.execInteractive(vmName, {
+            command: [this.cfg.acp.shell, '-lc', effectiveAcpCommand],
+            workdir: workspace.path,
+            env: {},
+            timeoutMs: null,
+        });
+        const cleanup = async (reason) => {
+            try {
+                execStream.kill();
+            }
+            catch {
+                /* ignore */
+            }
+            try {
+                await execStream.exit;
+            }
+            catch {
+                /* ignore */
+            }
+            if (this.mcp && runningEntry) {
+                this.mcp.deactivate(runningEntry.identifier);
+            }
+            logger.debug('agent runner cleanup', { reason });
+            await this.workspaces.runAfterRunBestEffort(workspace.path, this.cfg.hooks);
+        };
+        const onCancel = () => {
+            if (cancelSignal.cancelled) {
+                client.cancel().catch(() => undefined);
+                execStream.kill();
+            }
+        };
+        const cancelCheckTimer = setInterval(onCancel, 500);
+        // Register with the MCP registry so the agent's tool calls can be routed back.
+        // MCP is required for symphony operations: mark_done is the only way for the agent
+        // to signal completion, and request_human_steering is the only way to defer to a
+        // human. If we can't construct a reachable URL — no bound HTTP port and no explicit
+        // override — we abort the attempt rather than dispatch a tool-less agent.
+        const mcpServers = [];
+        if (this.cfg.mcp.enabled && runningEntry) {
+            if (!this.mcp) {
+                clearInterval(cancelCheckTimer);
+                await cleanup('mcp_registry_unavailable');
+                logger.error('mcp is required but no registry is wired into the runner', {});
+                return {
+                    ok: false,
+                    reason: 'mcp required but registry unavailable',
+                    threadId: null,
+                    turnsCompleted: 0,
+                };
+            }
+            const url = this.mcp.buildUrl(runningEntry.identifier, {
+                host: this.cfg.mcp.host,
+                explicit_host_url: this.cfg.mcp.explicit_host_url,
+            });
+            if (!url) {
+                clearInterval(cancelCheckTimer);
+                await cleanup('mcp_url_unavailable');
+                logger.error('mcp is required but no reachable URL is configured', {
+                    host: this.cfg.mcp.host,
+                    explicit_host_url: this.cfg.mcp.explicit_host_url,
+                });
+                return {
+                    ok: false,
+                    reason: 'mcp required but URL unavailable (start the HTTP server or set mcp.host_url)',
+                    threadId: null,
+                    turnsCompleted: 0,
+                };
+            }
+            const token = this.mcp.activate(runningEntry);
+            mcpServers.push({
+                type: 'http',
+                name: 'symphony',
+                url,
+                headers: [{ name: 'Authorization', value: `Bearer ${token}` }],
+            });
+            logger.debug('mcp registered', { url });
+        }
+        const client = new AcpClient({
+            stdin: execStream.stdin,
+            stdout: execStream.stdout,
+            stderr: execStream.stderr,
+            cwd: workspace.path,
+            readTimeoutMs: this.cfg.acp.read_timeout_ms,
+            promptTimeoutMs: this.cfg.acp.prompt_timeout_ms,
+            onEvent: (event) => this.events.onRuntimeEvent(issue.id, event),
+            onTokenUsage: (u) => this.events.onTokenUsage(issue.id, u),
+            mcpServers,
+        });
+        let sessionId;
+        try {
+            const sess = await client.initSession();
+            sessionId = sess.sessionId;
+        }
+        catch (err) {
+            clearInterval(cancelCheckTimer);
+            logger.error('acp init failed', {
+                error: err.message,
+                adapter: this.cfg.acp.adapter,
+            });
+            this.events.onRuntimeEvent(issue.id, {
+                at: new Date().toISOString(),
+                event: 'startup_failed',
+                message: err.message,
+            });
+            await cleanup('init_failed');
+            return { ok: false, reason: 'agent session startup error', threadId: null, turnsCompleted: 0 };
+        }
+        this.events.onSessionStarted?.({
+            issueId: issue.id,
+            sessionId,
+            threadId: sessionId,
+            pid: execStream.pid ? String(execStream.pid) : null,
+        });
+        let turnsCompleted = 0;
+        let autonomousTurns = 0;
+        let lastReason = 'unknown';
+        let agentFailure = null;
+        let currentIssue = issue;
+        let pendingSteering = null;
+        let firstTurn = true;
+        const activeStates = new Set(this.cfg.tracker.active_states.map((s) => s.toLowerCase()));
+        // Decoupled from max_turns: the loop runs as long as the agent keeps engaging. Only
+        // autonomous turns (turns without a pending human reply) count against max_turns.
+        // Turns driven by a human steering reply run free; the human is in the loop and can
+        // stop work at any time by walking away or by giving an instruction that ends in
+        // mark_done.
+        while (true) {
+            if (cancelSignal.cancelled) {
+                lastReason = 'cancelled_by_reconciliation';
+                break;
+            }
+            let prompt;
+            const isSteeringReply = pendingSteering !== null;
+            try {
+                if (pendingSteering) {
+                    prompt = buildSteeringReplyPrompt(pendingSteering.question, pendingSteering.context, pendingSteering.reply);
+                    pendingSteering = null;
+                }
+                else if (firstTurn) {
+                    prompt = await renderPrompt({
+                        template: this.workflow.prompt_template,
+                        issue: currentIssue,
+                        attempt: attempt === null ? null : attempt,
+                    });
+                }
+                else {
+                    prompt = continuationPrompt(this.cfg.mcp.enabled);
+                }
+            }
+            catch (err) {
+                clearInterval(cancelCheckTimer);
+                logger.error('prompt rendering failed', { error: err.message });
+                await cleanup('prompt_error');
+                return { ok: false, reason: 'prompt error', threadId: sessionId, turnsCompleted };
+            }
+            firstTurn = false;
+            // Label is the 1-based ordinal of the turn about to run, counting every turn
+            // (autonomous + steering reply), so the running snapshot never shows duplicate
+            // turn_count values across a steering boundary.
+            this.events.onTurn(issue.id, turnsCompleted + 1);
+            const outcome = await client.runPrompt(prompt);
+            if (outcome.reason !== 'end_turn') {
+                // mark_done is authoritative: if the agent moved the issue to a terminal state
+                // mid-turn, reconcile may have tripped cancelSignal before the prompt returned.
+                // The work is done regardless of how the prompt ended; honor that.
+                if (runningEntry?.marked_done) {
+                    lastReason = 'agent_marked_done';
+                    break;
+                }
+                lastReason = outcome.reason;
+                agentFailure = `agent turn ${outcome.reason}: ${outcome.message}`;
+                break;
+            }
+            turnsCompleted++;
+            // Count this completed turn against max_turns iff it was an autonomous turn (i.e.
+            // not itself a reply to a human steering message). Steering-reply turns are free.
+            // Steering-REQUEST turns (autonomous turns that called request_human_steering)
+            // still count: the agent did autonomous work before deferring to a human.
+            if (!isSteeringReply) {
+                autonomousTurns++;
+            }
+            // Tool-driven exits: the MCP handler has already done the work; we just read the flag.
+            if (runningEntry?.marked_done) {
+                lastReason = 'agent_marked_done';
+                break;
+            }
+            // Steering: pause the autonomous loop and wait for a human reply. The wait does not
+            // count against max_turns; cancellation breaks us out via the registry's cancel-aware
+            // resolver. The next iteration uses the steering-reply prompt.
+            if (runningEntry?.steering_requested && this.mcp) {
+                const question = runningEntry.steering_question ?? '';
+                const ctx = runningEntry.steering_context;
+                this.events.onRuntimeEvent(issue.id, {
+                    at: new Date().toISOString(),
+                    event: 'awaiting_human_steering',
+                    message: question.length > 240 ? question.slice(0, 240) + '…' : question,
+                });
+                const reply = await this.mcp.awaitSteeringReply(issue.identifier, cancelSignal);
+                if (reply === null) {
+                    lastReason = 'cancelled_while_awaiting_steering';
+                    break;
+                }
+                runningEntry.steering_requested = false;
+                runningEntry.steering_question = null;
+                runningEntry.steering_context = null;
+                pendingSteering = { question, context: ctx, reply };
+                this.events.onRuntimeEvent(issue.id, {
+                    at: new Date().toISOString(),
+                    event: 'human_steering_received',
+                    message: reply.length > 240 ? reply.slice(0, 240) + '…' : reply,
+                });
+                continue;
+            }
+            // Autonomous turn finished without a tool-driven exit. Refresh tracker state and
+            // decide whether to continue.
+            let refreshed;
+            try {
+                refreshed = await this.tracker.fetchIssueStatesByIds([issue.id]);
+            }
+            catch (err) {
+                clearInterval(cancelCheckTimer);
+                logger.error('issue state refresh failed', { error: err.message });
+                await cleanup('issue_state_refresh_failed');
+                return { ok: false, reason: 'issue state refresh error', threadId: sessionId, turnsCompleted };
+            }
+            const found = refreshed[0];
+            if (!found) {
+                lastReason = 'issue_no_longer_present';
+                break;
+            }
+            currentIssue = found;
+            if (!activeStates.has(found.state.toLowerCase())) {
+                lastReason = 'issue_no_longer_active';
+                break;
+            }
+            if (autonomousTurns >= this.cfg.agent.max_turns) {
+                lastReason = 'max_turns_reached';
+                break;
+            }
+            await delay(25);
+        }
+        clearInterval(cancelCheckTimer);
+        await cleanup(lastReason);
+        if (agentFailure) {
+            return { ok: false, reason: agentFailure, threadId: sessionId, turnsCompleted };
+        }
+        return { ok: true, reason: lastReason, threadId: sessionId, turnsCompleted };
+    }
+}
+//# sourceMappingURL=runner.js.map

package/dist/agent/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../src/agent/runner.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,yFAAyF;AACzF,yFAAyF;AACzF,iEAAiE;AAEjE,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAS3D,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EACL,QAAQ,EACR,gBAAgB,EAChB,cAAc,EACd,eAAe,GAEhB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AA0B1C,MAAM,4BAA4B,GAChC,kNAAkN,CAAC;AAErN,MAAM,0BAA0B,GAC9B,sLAAsL,CAAC;AAEzL,SAAS,kBAAkB,CAAC,UAAmB;IAC7C,OAAO,UAAU,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,0BAA0B,CAAC;AAChF,CAAC;AAED,SAAS,wBAAwB,CAAC,QAAgB,EAAE,OAAsB,EAAE,KAAa;IACvF,MAAM,QAAQ,GAAG,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,8BAA8B,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9F,OAAO;QACL,4DAA4D;QAC5D,EAAE;QACF,oBAAoB;QACpB,QAAQ;QACR,QAAQ;QACR,EAAE;QACF,sBAAsB;QACtB,KAAK;QACL,EAAE;QACF,8MAA8M;KAC/M;SACE,IAAI,CAAC,IAAI,CAAC;SACV,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,OAAO,WAAW;IAEZ;IACA;IACA;IACA;IACA;IACA;IACA;IAPV,YACU,GAAkB,EAClB,QAA4B,EAC5B,UAA4B,EAC5B,OAAqB,EACrB,MAAoB,EACpB,MAAyB,EACzB,MAA0B,IAAI;QAN9B,QAAG,GAAH,GAAG,CAAe;QAClB,aAAQ,GAAR,QAAQ,CAAoB;QAC5B,eAAU,GAAV,UAAU,CAAkB;QAC5B,YAAO,GAAP,OAAO,CAAc;QACrB,WAAM,GAAN,MAAM,CAAc;QACpB,WAAM,GAAN,MAAM,CAAmB;QACzB,QAAG,GAAH,GAAG,CAA2B;IACrC,CAAC;IAEJ,YAAY,CAAC,GAAkB,EAAE,QAA4B;QAC3D,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,cAAc,CAAC,GAAuB;QACpC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAED,SAAS,CAAC,KAAY;QACpB,OAAO,YAAY,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,UAAU,CACd,KAAY,EACZ,OAAsB,EACtB,YAAoC,EACpC,YAA2B;QAE3B,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,gBAAgB,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;QACrF,IAAI,SAA6D,CAAC;QAClE,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACnE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;QACrF,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;QAC3F,CAAC;QAED,6EAA6E;QAC7E,SAAS;QACT,0EAA0E;QAC1E,4DAA4D;QAC5D,yEAAyE;QACzE,2EAA2E;QAC3E,2EAA2E;QAC3E,uBAAuB;QACvB,IAAI,mBAA2B,CAAC;QAChC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YAClC,mBAAmB,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC;QAC7C,CAAC;aAAM,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAChD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAuB,CAAC,CAAC;YAC/D,IAAI,MAAM,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC1D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE;oBACxC,OAAO,EAAE,OAAO,CAAC,EAAE;oBACnB,KAAK,EAAG,GAAa,CAAC,OAAO;iBAC9B,CAAC,CAAC;gBACH,MAAM,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC5E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;YAC9F,CAAC;YACD,mBAAmB,GAAG,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAClE,CAAC;aAAM,CAAC;YACN,iEAAiE;YACjE,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACtE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;QACnG,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG;YACb,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;SACjE,CAAC;QACF,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACxC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC5C,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE;gBACtC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK;gBAC5B,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI;gBAC1B,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI;gBAC1B,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO;gBAC/B,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG;gBACxB,MAAM;gBACN,GAAG;gBACH,OAAO,EAAE,SAAS,CAAC,IAAI;gBACvB,QAAQ,EAAE,KAAK;aAChB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1E,MAAM,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC5E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;QAC3F,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE;YACrD,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,mBAAmB,CAAC;YACzD,OAAO,EAAE,SAAS,CAAC,IAAI;YACvB,GAAG,EAAE,EAAE;YACP,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;YACvC,IAAI,CAAC;gBACH,UAAU,CAAC,IAAI,EAAE,CAAC;YACpB,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,UAAU,CAAC,IAAI,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,IAAI,YAAY,EAAE,CAAC;gBAC7B,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;YAC/C,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YACjD,MAAM,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9E,CAAC,CAAC;QAEF,MAAM,QAAQ,GAAG,GAAG,EAAE;YACpB,IAAI,YAAY,CAAC,SAAS,EAAE,CAAC;gBAC3B,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBACvC,UAAU,CAAC,IAAI,EAAE,CAAC;YACpB,CAAC;QACH,CAAC,CAAC;QACF,MAAM,gBAAgB,GAAG,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAEpD,+EAA+E;QAC/E,mFAAmF;QACnF,iFAAiF;QACjF,oFAAoF;QACpF,0EAA0E;QAC1E,MAAM,UAAU,GAAgB,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,YAAY,EAAE,CAAC;YACzC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACd,aAAa,CAAC,gBAAgB,CAAC,CAAC;gBAChC,MAAM,OAAO,CAAC,0BAA0B,CAAC,CAAC;gBAC1C,MAAM,CAAC,KAAK,CAAC,0DAA0D,EAAE,EAAE,CAAC,CAAC;gBAC7E,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,uCAAuC;oBAC/C,QAAQ,EAAE,IAAI;oBACd,cAAc,EAAE,CAAC;iBAClB,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,UAAU,EAAE;gBACrD,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI;gBACvB,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,iBAAiB;aAClD,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,aAAa,CAAC,gBAAgB,CAAC,CAAC;gBAChC,MAAM,OAAO,CAAC,qBAAqB,CAAC,CAAC;gBACrC,MAAM,CAAC,KAAK,CAAC,oDAAoD,EAAE;oBACjE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI;oBACvB,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,iBAAiB;iBAClD,CAAC,CAAC;gBACH,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,8EAA8E;oBACtF,QAAQ,EAAE,IAAI;oBACd,cAAc,EAAE,CAAC;iBAClB,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YAC9C,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,UAAU;gBAChB,GAAG;gBACH,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC;aAC/D,CAAC,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;YAC3B,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,GAAG,EAAE,SAAS,CAAC,IAAI;YACnB,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe;YAC3C,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,iBAAiB;YAC/C,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC;YAC/D,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1D,UAAU;SACX,CAAC,CAAC;QAEH,IAAI,SAAiB,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;YACxC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,aAAa,CAAC,gBAAgB,CAAC,CAAC;YAChC,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE;gBAC9B,KAAK,EAAG,GAAa,CAAC,OAAO;gBAC7B,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO;aAC9B,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,EAAE;gBACnC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAC5B,KAAK,EAAE,gBAAgB;gBACvB,OAAO,EAAG,GAAa,CAAC,OAAO;aAChC,CAAC,CAAC;YACH,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;YAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;QACjG,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC7B,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,SAAS;YACT,QAAQ,EAAE,SAAS;YACnB,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI;SACpD,CAAC,CAAC;QAEH,IAAI,cAAc,GAAG,CAAC,CAAC;QACvB,IAAI,eAAe,GAAG,CAAC,CAAC;QACxB,IAAI,UAAU,GAAG,SAAS,CAAC;QAC3B,IAAI,YAAY,GAAkB,IAAI,CAAC;QACvC,IAAI,YAAY,GAAG,KAAK,CAAC;QACzB,IAAI,eAAe,GAAuE,IAAI,CAAC;QAC/F,IAAI,SAAS,GAAG,IAAI,CAAC;QACrB,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAEzF,oFAAoF;QACpF,kFAAkF;QAClF,oFAAoF;QACpF,iFAAiF;QACjF,aAAa;QACb,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,YAAY,CAAC,SAAS,EAAE,CAAC;gBAC3B,UAAU,GAAG,6BAA6B,CAAC;gBAC3C,MAAM;YACR,CAAC;YACD,IAAI,MAAc,CAAC;YACnB,MAAM,eAAe,GAAG,eAAe,KAAK,IAAI,CAAC;YACjD,IAAI,CAAC;gBACH,IAAI,eAAe,EAAE,CAAC;oBACpB,MAAM,GAAG,wBAAwB,CAC/B,eAAe,CAAC,QAAQ,EACxB,eAAe,CAAC,OAAO,EACvB,eAAe,CAAC,KAAK,CACtB,CAAC;oBACF,eAAe,GAAG,IAAI,CAAC;gBACzB,CAAC;qBAAM,IAAI,SAAS,EAAE,CAAC;oBACrB,MAAM,GAAG,MAAM,YAAY,CAAC;wBAC1B,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,eAAe;wBACvC,KAAK,EAAE,YAAY;wBACnB,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO;qBAC3C,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACpD,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,aAAa,CAAC,gBAAgB,CAAC,CAAC;gBAChC,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC3E,MAAM,OAAO,CAAC,cAAc,CAAC,CAAC;gBAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;YACpF,CAAC;YACD,SAAS,GAAG,KAAK,CAAC;YAElB,6EAA6E;YAC7E,+EAA+E;YAC/E,gDAAgD;YAChD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,cAAc,GAAG,CAAC,CAAC,CAAC;YACjD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAE/C,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBAClC,+EAA+E;gBAC/E,gFAAgF;gBAChF,mEAAmE;gBACnE,IAAI,YAAY,EAAE,WAAW,EAAE,CAAC;oBAC9B,UAAU,GAAG,mBAAmB,CAAC;oBACjC,MAAM;gBACR,CAAC;gBACD,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;gBAC5B,YAAY,GAAG,cAAc,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;gBAClE,MAAM;YACR,CAAC;YACD,cAAc,EAAE,CAAC;YAEjB,kFAAkF;YAClF,kFAAkF;YAClF,+EAA+E;YAC/E,0EAA0E;YAC1E,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,eAAe,EAAE,CAAC;YACpB,CAAC;YAED,uFAAuF;YACvF,IAAI,YAAY,EAAE,WAAW,EAAE,CAAC;gBAC9B,UAAU,GAAG,mBAAmB,CAAC;gBACjC,MAAM;YACR,CAAC;YAED,oFAAoF;YACpF,sFAAsF;YACtF,+DAA+D;YAC/D,IAAI,YAAY,EAAE,kBAAkB,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;gBACjD,MAAM,QAAQ,GAAG,YAAY,CAAC,iBAAiB,IAAI,EAAE,CAAC;gBACtD,MAAM,GAAG,GAAG,YAAY,CAAC,gBAAgB,CAAC;gBAC1C,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,EAAE;oBACnC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBAC5B,KAAK,EAAE,yBAAyB;oBAChC,OAAO,EAAE,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ;iBACzE,CAAC,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;gBAChF,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;oBACnB,UAAU,GAAG,mCAAmC,CAAC;oBACjD,MAAM;gBACR,CAAC;gBACD,YAAY,CAAC,kBAAkB,GAAG,KAAK,CAAC;gBACxC,YAAY,CAAC,iBAAiB,GAAG,IAAI,CAAC;gBACtC,YAAY,CAAC,gBAAgB,GAAG,IAAI,CAAC;gBACrC,eAAe,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;gBACpD,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,EAAE;oBACnC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBAC5B,KAAK,EAAE,yBAAyB;oBAChC,OAAO,EAAE,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK;iBAChE,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,iFAAiF;YACjF,8BAA8B;YAC9B,IAAI,SAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YACnE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,aAAa,CAAC,gBAAgB,CAAC,CAAC;gBAChC,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC9E,MAAM,OAAO,CAAC,4BAA4B,CAAC,CAAC;gBAC5C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;YACjG,CAAC;YACD,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YAC3B,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,UAAU,GAAG,yBAAyB,CAAC;gBACvC,MAAM;YACR,CAAC;YACD,YAAY,GAAG,KAAK,CAAC;YACrB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBACjD,UAAU,GAAG,wBAAwB,CAAC;gBACtC,MAAM;YACR,CAAC;YACD,IAAI,eAAe,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;gBAChD,UAAU,GAAG,mBAAmB,CAAC;gBACjC,MAAM;YACR,CAAC;YACD,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QAED,aAAa,CAAC,gBAAgB,CAAC,CAAC;QAChC,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC;QAC1B,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;QAClF,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;IAC/E,CAAC;CACF"}

package/dist/agent/smolvm.js

@@ -0,0 +1,174 @@
+// Thin wrapper around the smolvm CLI for per-issue microVM isolation.
+//
+// We use the local `smolvm` binary because the npm package is a stub and the HTTP API does
+// not support bidirectional stdio for `machine exec`. The CLI form `machine exec -i` exposes
+// the VM-process stdin/stdout directly, which is exactly what the Codex app-server JSON-RPC
+// transport needs.
+import { spawn } from 'node:child_process';
+import { promisify } from 'node:util';
+import { execFile as execFileCb } from 'node:child_process';
+import path from 'node:path';
+import { log } from '../logging.js';
+const execFile = promisify(execFileCb);
+export class SmolvmError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'SmolvmError';
+    }
+}
+export class SmolvmClient {
+    cfg;
+    constructor(cfg) {
+        this.cfg = cfg;
+    }
+    // The smolvm binary is invoked directly. The endpoint config is reserved for a future HTTP
+    // transport but is not threaded through the CLI today — the CLI talks to the local daemon
+    // automatically.
+    // Redact secret-bearing argv values before logging. `--env KEY=value` carries forwarded
+    // tokens (OPENAI_API_KEY, ANTHROPIC_API_KEY, …) and must never reach stderr or log sinks.
+    redactArgv(args) {
+        const out = [];
+        for (let i = 0; i < args.length; i++) {
+            const a = args[i];
+            if (a === '--env' || a === '-e') {
+                out.push(a);
+                const next = args[i + 1];
+                if (next !== undefined) {
+                    const eq = next.indexOf('=');
+                    out.push(eq >= 0 ? `${next.slice(0, eq)}=<redacted>` : next);
+                    i += 1;
+                }
+                continue;
+            }
+            out.push(a);
+        }
+        return out.join(' ');
+    }
+    async run(args, opts = {}) {
+        log.debug('smolvm cli', { argv: this.redactArgv(args) });
+        try {
+            const { stdout, stderr } = await execFile('smolvm', args, {
+                maxBuffer: 32 * 1024 * 1024,
+                timeout: opts.timeoutMs,
+            });
+            return { stdout, stderr };
+        }
+        catch (err) {
+            const e = err;
+            throw new SmolvmError('smolvm_cli_failed', `smolvm ${args.join(' ')} failed: ${e.stderr ?? e.message ?? e.code ?? 'unknown'}`);
+        }
+    }
+    async exists(name) {
+        try {
+            const { stdout } = await this.run(['machine', 'ls', '--json'], { timeoutMs: 10_000 });
+            const parsed = JSON.parse(stdout);
+            const list = Array.isArray(parsed) ? parsed : parsed.machines ?? [];
+            return list.some((m) => m.name === name);
+        }
+        catch {
+            return false;
+        }
+    }
+    async create(name, opts) {
+        const args = ['machine', 'create', name];
+        if (opts.from) {
+            args.push('--from', opts.from);
+        }
+        else if (opts.image) {
+            args.push('--image', opts.image);
+        }
+        args.push('--cpus', String(opts.cpus));
+        args.push('--mem', String(opts.memMib));
+        if (opts.net)
+            args.push('--net');
+        if (opts.sshAgent)
+            args.push('--ssh-agent');
+        if (opts.workdir)
+            args.push('--workdir', opts.workdir);
+        for (const m of opts.mounts) {
+            const spec = `${path.resolve(m.host)}:${m.guest}${m.readonly ? ':ro' : ''}`;
+            args.push('--volume', spec);
+        }
+        for (const [k, v] of Object.entries(opts.env)) {
+            args.push('--env', `${k}=${v}`);
+        }
+        await this.run(args, { timeoutMs: 120_000 });
+    }
+    async start(name) {
+        await this.run(['machine', 'start', '--name', name], { timeoutMs: 60_000 });
+    }
+    async stop(name) {
+        try {
+            await this.run(['machine', 'stop', '--name', name], { timeoutMs: 30_000 });
+        }
+        catch (err) {
+            log.warn('smolvm stop failed', { name, error: err.message });
+        }
+    }
+    async destroy(name) {
+        try {
+            await this.run(['machine', 'delete', name, '-f'], { timeoutMs: 30_000 });
+        }
+        catch (err) {
+            log.warn('smolvm delete failed', { name, error: err.message });
+        }
+    }
+    async ensureRunning(name, opts) {
+        const exists = await this.exists(name);
+        if (!exists) {
+            await this.create(name, opts);
+        }
+        await this.start(name);
+    }
+    // Spawn an interactive exec session inside the VM. Returns a ChildProcessByStdio with all
+    // three stdio streams piped, which is suitable for stdio JSON-RPC.
+    execInteractive(name, opts) {
+        const args = ['machine', 'exec', '--name', name, '-i'];
+        if (opts.workdir)
+            args.push('--workdir', opts.workdir);
+        for (const [k, v] of Object.entries(opts.env)) {
+            args.push('--env', `${k}=${v}`);
+        }
+        if (opts.timeoutMs && opts.timeoutMs > 0) {
+            args.push('--timeout', `${opts.timeoutMs}ms`);
+        }
+        args.push('--', ...opts.command);
+        const child = spawn('smolvm', args, {
+            stdio: ['pipe', 'pipe', 'pipe'],
+        });
+        const exit = new Promise((resolve) => {
+            child.on('close', (code, signal) => resolve({ code: code, signal: signal ?? null }));
+        });
+        let killed = false;
+        return {
+            child,
+            stdin: child.stdin,
+            stdout: child.stdout,
+            stderr: child.stderr,
+            pid: child.pid,
+            exit,
+            kill: () => {
+                if (killed)
+                    return;
+                killed = true;
+                try {
+                    child.kill('SIGTERM');
+                }
+                catch {
+                    // ignore
+                }
+                setTimeout(() => {
+                    try {
+                        child.kill('SIGKILL');
+                    }
+                    catch {
+                        // ignore
+                    }
+                }, 3_000).unref();
+            },
+        };
+    }
+}
+//# sourceMappingURL=smolvm.js.map

package/dist/agent/smolvm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"smolvm.js","sourceRoot":"","sources":["../../src/agent/smolvm.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,EAAE;AACF,2FAA2F;AAC3F,6FAA6F;AAC7F,4FAA4F;AAC5F,mBAAmB;AAEnB,OAAO,EAAE,KAAK,EAA+C,MAAM,oBAAoB,CAAC;AACxF,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AAEpC,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;AA0CvC,MAAM,OAAO,WAAY,SAAQ,KAAK;IACjB;IAAnB,YAAmB,IAAY,EAAE,OAAe;QAC9C,KAAK,CAAC,OAAO,CAAC,CAAC;QADE,SAAI,GAAJ,IAAI,CAAQ;QAE7B,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AAED,MAAM,OAAO,YAAY;IACM;IAA7B,YAA6B,GAAiB;QAAjB,QAAG,GAAH,GAAG,CAAc;IAAG,CAAC;IAElD,2FAA2F;IAC3F,0FAA0F;IAC1F,iBAAiB;IACjB,wFAAwF;IACxF,0FAA0F;IAClF,UAAU,CAAC,IAAc;QAC/B,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;YACnB,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;gBAChC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACZ,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBACzB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;oBACvB,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBAC7B,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;oBAC7D,CAAC,IAAI,CAAC,CAAC;gBACT,CAAC;gBACD,SAAS;YACX,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,CAAC;QACD,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,GAAG,CAAC,IAAc,EAAE,OAA+B,EAAE;QACjE,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE;gBACxD,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;gBAC3B,OAAO,EAAE,IAAI,CAAC,SAAS;aACxB,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC5B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,GAA2E,CAAC;YACtF,MAAM,IAAI,WAAW,CACnB,mBAAmB,EACnB,UAAU,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,IAAI,SAAS,EAAE,CACnF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YACtF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAuE,CAAC;YACxG,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;YACpE,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,IAAmB;QAC5C,MAAM,IAAI,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;aAAM,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACtB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,GAAG;YAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,QAAQ;YAAE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC5C,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACvD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAC5E,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC9B,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClC,CAAC;QACD,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAY;QACtB,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAY;QACrB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAY;QACxB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,IAAY,EAAE,IAAmB;QACnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAED,0FAA0F;IAC1F,mEAAmE;IACnE,eAAe,CAAC,IAAY,EAAE,IAAiB;QAC7C,MAAM,IAAI,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACvD,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACvD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE;YAClC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAqE,CAAC;QACvE,MAAM,IAAI,GAAG,IAAI,OAAO,CAAyD,CAAC,OAAO,EAAE,EAAE;YAC3F,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;QACvF,CAAC,CAAC,CAAC;QACH,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,OAAO;YACL,KAAK;YACL,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,IAAI;YACJ,IAAI,EAAE,GAAG,EAAE;gBACT,IAAI,MAAM;oBAAE,OAAO;gBACnB,MAAM,GAAG,IAAI,CAAC;gBACd,IAAI,CAAC;oBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACxB,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,UAAU,CAAC,GAAG,EAAE;oBACd,IAAI,CAAC;wBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACxB,CAAC;oBAAC,MAAM,CAAC;wBACP,SAAS;oBACX,CAAC;gBACH,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;YACpB,CAAC;SACF,CAAC;IACJ,CAAC;CACF"}