spell-runtime 1.2.0 → 1.2.5

package/dist/runner/dockerRunner.js

@@ -4,12 +4,17 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.runDocker = runDocker;
+exports.buildDockerArgs = buildDockerArgs;
 const promises_1 = require("node:fs/promises");
 const node_os_1 = require("node:os");
 const node_path_1 = __importDefault(require("node:path"));
 const node_child_process_1 = require("node:child_process");
 const errors_1 = require("../util/errors");
-async function runDocker(manifest, bundlePath, input) {
+const runtimeLimits_1 = require("./runtimeLimits");
+const DEFAULT_DOCKER_NETWORK = "none";
+const DEFAULT_DOCKER_USER = "65532:65532";
+const DEFAULT_DOCKER_PIDS_LIMIT = 256;
+async function runDocker(manifest, bundlePath, input, executionTimeoutMs) {
     const dockerImage = manifest.runtime.docker_image;
     if (!dockerImage) {
         throw new errors_1.SpellError("runtime.docker_image is required when runtime.execution=docker");
@@ -19,7 +24,10 @@ async function runDocker(manifest, bundlePath, input) {
     await (0, promises_1.writeFile)(inputPath, JSON.stringify(input), "utf8");
     try {
         const args = buildDockerArgs(dockerImage, bundlePath, tempDir, manifest);
-        const { code, stdout, stderr } = await runProcess("docker", args, process.cwd());
+        const { code, stdout, stderr, timedOut } = await runProcess("docker", args, process.cwd(), executionTimeoutMs);
+        if (timedOut && executionTimeoutMs !== undefined) {
+            throw new errors_1.SpellError((0, runtimeLimits_1.formatExecutionTimeoutMessage)(executionTimeoutMs));
+        }
         if (code !== 0) {
             throw new errors_1.SpellError(stderr.trim() || `docker exited with code ${code}`);
         }
@@ -40,13 +48,22 @@ async function runDocker(manifest, bundlePath, input) {
         await (0, promises_1.rm)(tempDir, { recursive: true, force: true });
     }
 }
-function buildDockerArgs(dockerImage, bundlePath, tempDir, manifest) {
+function buildDockerArgs(dockerImage, bundlePath, tempDir, manifest, env = process.env) {
     const inputInContainer = "/tmp/spell-input/input.json";
-    const envVars = collectEnvVarsToPass(manifest);
+    const envVars = collectEnvVarsToPass(manifest, env);
+    const dockerRunConfig = readDockerRunConfig(env);
     const args = [
         "run",
         "--rm",
         "-i",
+        "--network",
+        dockerRunConfig.network,
+        "--cap-drop",
+        "ALL",
+        "--security-opt",
+        "no-new-privileges",
+        "--tmpfs",
+        "/tmp:rw,noexec,nosuid,size=64m",
         "--workdir",
         "/spell",
         "-v",
@@ -56,24 +73,126 @@ function buildDockerArgs(dockerImage, bundlePath, tempDir, manifest) {
         "-e",
         `INPUT_JSON=${inputInContainer}`
     ];
+    if (dockerRunConfig.readOnly) {
+        args.push("--read-only");
+    }
+    if (dockerRunConfig.user !== undefined) {
+        args.push("--user", dockerRunConfig.user);
+    }
+    if (dockerRunConfig.pidsLimit !== undefined) {
+        args.push("--pids-limit", String(dockerRunConfig.pidsLimit));
+    }
+    if (dockerRunConfig.memory !== undefined) {
+        args.push("--memory", dockerRunConfig.memory);
+    }
+    if (dockerRunConfig.cpus !== undefined) {
+        args.push("--cpus", dockerRunConfig.cpus);
+    }
     for (const [key, value] of envVars) {
         args.push("-e", `${key}=${value}`);
     }
     args.push(dockerImage, "spell-runner", "/spell/spell.yaml", inputInContainer);
     return args;
 }
-function collectEnvVarsToPass(manifest) {
+function collectEnvVarsToPass(manifest, env = process.env) {
     const out = [];
-    // pass connector tokens only (and fail earlier if missing)
+    // pass connector tokens (and fail earlier if missing)
     for (const permission of manifest.permissions) {
         const tokenKey = `CONNECTOR_${permission.connector.toUpperCase().replace(/[^A-Z0-9]/g, "_")}_TOKEN`;
-        const value = process.env[tokenKey];
+        const value = env[tokenKey];
         if (typeof value === "string" && value.trim() !== "") {
             out.push([tokenKey, value]);
         }
     }
+    const stepTimeout = env.SPELL_RUNTIME_STEP_TIMEOUT_MS;
+    if (typeof stepTimeout === "string" && stepTimeout.trim() !== "") {
+        out.push(["SPELL_RUNTIME_STEP_TIMEOUT_MS", stepTimeout.trim()]);
+    }
     return out;
 }
+function readDockerRunConfig(env) {
+    return {
+        network: readDockerNetwork(env),
+        user: readDockerUser(env),
+        readOnly: readDockerReadOnly(env),
+        pidsLimit: readDockerPidsLimit(env),
+        memory: readDockerMemory(env),
+        cpus: readDockerCpus(env)
+    };
+}
+function readDockerNetwork(env) {
+    const raw = env.SPELL_DOCKER_NETWORK;
+    const value = raw === undefined || raw.trim() === "" ? DEFAULT_DOCKER_NETWORK : raw.trim();
+    if (value === "none" || value === "bridge" || value === "host") {
+        return value;
+    }
+    throw new errors_1.SpellError("SPELL_DOCKER_NETWORK must be one of: none, bridge, host");
+}
+function readDockerUser(env) {
+    const raw = env.SPELL_DOCKER_USER;
+    if (raw === undefined) {
+        return DEFAULT_DOCKER_USER;
+    }
+    const value = raw.trim();
+    if (value === "") {
+        return undefined;
+    }
+    if (/\s/.test(value)) {
+        throw new errors_1.SpellError("SPELL_DOCKER_USER must not contain whitespace");
+    }
+    return value;
+}
+function readDockerReadOnly(env) {
+    const raw = env.SPELL_DOCKER_READ_ONLY;
+    if (raw === undefined || raw.trim() === "") {
+        return true;
+    }
+    const value = raw.trim();
+    if (value === "1") {
+        return true;
+    }
+    if (value === "0") {
+        return false;
+    }
+    throw new errors_1.SpellError("SPELL_DOCKER_READ_ONLY must be '1' or '0'");
+}
+function readDockerPidsLimit(env) {
+    const raw = env.SPELL_DOCKER_PIDS_LIMIT;
+    if (raw === undefined || raw.trim() === "") {
+        return DEFAULT_DOCKER_PIDS_LIMIT;
+    }
+    const value = Number(raw);
+    if (!Number.isInteger(value) || value < 0) {
+        throw new errors_1.SpellError("SPELL_DOCKER_PIDS_LIMIT must be an integer >= 0");
+    }
+    if (value === 0) {
+        return undefined;
+    }
+    return value;
+}
+function readDockerMemory(env) {
+    const raw = env.SPELL_DOCKER_MEMORY;
+    if (raw === undefined || raw.trim() === "") {
+        return undefined;
+    }
+    const value = raw.trim();
+    if (!/^\d+[bkmg]?$/i.test(value)) {
+        throw new errors_1.SpellError("SPELL_DOCKER_MEMORY must be a positive integer optionally suffixed with b, k, m, or g");
+    }
+    return value;
+}
+function readDockerCpus(env) {
+    const raw = env.SPELL_DOCKER_CPUS;
+    if (raw === undefined || raw.trim() === "") {
+        return undefined;
+    }
+    const value = raw.trim();
+    const parsed = Number(value);
+    if (!Number.isFinite(parsed) || parsed <= 0) {
+        throw new errors_1.SpellError("SPELL_DOCKER_CPUS must be a number > 0");
+    }
+    return value;
+}
 function parseRunnerJson(stdout) {
     const trimmed = stdout.trim();
     if (!trimmed) {
@@ -98,7 +217,7 @@ function parseRunnerJson(stdout) {
         checks: Array.isArray(obj.checks) ? obj.checks : []
     };
 }
-async function runProcess(command, args, cwd) {
+async function runProcess(command, args, cwd, timeoutMs) {
     const child = (0, node_child_process_1.spawn)(command, args, {
         shell: false,
         cwd,
@@ -112,10 +231,26 @@ async function runProcess(command, args, cwd) {
     child.stderr.on("data", (chunk) => {
         stderr += chunk.toString();
     });
-    const code = await new Promise((resolve, reject) => {
-        child.once("error", reject);
-        child.once("close", (exitCode) => resolve(exitCode ?? 1));
-    });
-    return { code, stdout, stderr };
+    let timedOut = false;
+    let timer;
+    if (timeoutMs !== undefined) {
+        timer = setTimeout(() => {
+            timedOut = true;
+            child.kill("SIGKILL");
+        }, timeoutMs);
+    }
+    let code;
+    try {
+        code = await new Promise((resolve, reject) => {
+            child.once("error", reject);
+            child.once("close", (exitCode) => resolve(exitCode ?? 1));
+        });
+    }
+    finally {
+        if (timer) {
+            clearTimeout(timer);
+        }
+    }
+    return { code, stdout, stderr, timedOut };
 }
 //# sourceMappingURL=dockerRunner.js.map

package/dist/runner/dockerRunner.js.map

@@ -1 +1 @@
-{"version":3,"file":"dockerRunner.js","sourceRoot":"","sources":["../../src/runner/dockerRunner.ts"],"names":[],"mappings":";;;;;AAeA,8BAqCC;AApDD,+CAA0D;AAC1D,qCAAiC;AACjC,0DAA6B;AAC7B,2DAA2C;AAE3C,2CAA4C;AAUrC,KAAK,UAAU,SAAS,CAC7B,QAA6B,EAC7B,UAAkB,EAClB,KAA8B;IAE9B,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC;IAClD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,mBAAU,CAAC,gEAAgE,CAAC,CAAC;IACzF,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,IAAA,kBAAO,EAAC,mBAAI,CAAC,IAAI,CAAC,IAAA,gBAAM,GAAE,EAAE,eAAe,CAAC,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,mBAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACnD,MAAM,IAAA,oBAAS,EAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;IAE1D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,eAAe,CAAC,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QACzE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAEjF,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;YACf,MAAM,IAAI,mBAAU,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,2BAA2B,IAAI,EAAE,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,mBAAU,CAAC,MAAM,CAAC,KAAK,IAAI,qBAAqB,CAAC,CAAC;QAC9D,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAI,KAAe,CAAC,OAAO,CAAC;QACzC,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,mBAAU,CAAC,2DAA2D,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,MAAM,IAAA,aAAE,EAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,WAAmB,EAAE,UAAkB,EAAE,OAAe,EAAE,QAA6B;IAC9G,MAAM,gBAAgB,GAAG,6BAA6B,CAAC;IACvD,MAAM,OAAO,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAE/C,MAAM,IAAI,GAAa;QACrB,KAAK;QACL,MAAM;QACN,IAAI;QACJ,WAAW;QACX,QAAQ;QACR,IAAI;QACJ,GAAG,mBAAI,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY;QACvC,IAAI;QACJ,GAAG,mBAAI,CAAC,OAAO,CAAC,OAAO,CAAC,sBAAsB;QAC9C,IAAI;QACJ,cAAc,gBAAgB,EAAE;KACjC,CAAC;IAEF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,mBAAmB,EAAE,gBAAgB,CAAC,CAAC;IAC9E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,QAA6B;IACzD,MAAM,GAAG,GAA4B,EAAE,CAAC;IAExC,2DAA2D;IAC3D,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,aAAa,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,QAAQ,CAAC;QACpG,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACrD,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,mBAAU,CAAC,kCAAkC,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mBAAU,CAAC,2CAA2C,CAAC,CAAC;IACpE,CAAC;IAED,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,mBAAU,CAAC,4CAA4C,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;QAC7B,KAAK,EAAE,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QAC5D,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,WAA4B,CAAC,CAAC,CAAC,EAAE;QACpF,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,OAAmC,CAAC,CAAC,CAAC,EAAE;QACtI,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,MAAwB,CAAC,CAAC,CAAC,EAAE;KACvE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,OAAe,EACf,IAAc,EACd,GAAW;IAEX,MAAM,KAAK,GAAG,IAAA,0BAAK,EAAC,OAAO,EAAE,IAAI,EAAE;QACjC,KAAK,EAAE,KAAK;QACZ,GAAG;QACH,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;IAEH,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,MAAM,GAAG,EAAE,CAAC;IAEhB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;QAChC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;QAChC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACzD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAClC,CAAC"}
+{"version":3,"file":"dockerRunner.js","sourceRoot":"","sources":["../../src/runner/dockerRunner.ts"],"names":[],"mappings":";;;;;AA+BA,8BA0CC;AAED,0CA2DC;AAtID,+CAA0D;AAC1D,qCAAiC;AACjC,0DAA6B;AAC7B,2DAA2C;AAE3C,2CAA4C;AAC5C,mDAAgE;AAahE,MAAM,sBAAsB,GAAsB,MAAM,CAAC;AACzD,MAAM,mBAAmB,GAAG,aAAa,CAAC;AAC1C,MAAM,yBAAyB,GAAG,GAAG,CAAC;AAU/B,KAAK,UAAU,SAAS,CAC7B,QAA6B,EAC7B,UAAkB,EAClB,KAA8B,EAC9B,kBAA2B;IAE3B,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC;IAClD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,mBAAU,CAAC,gEAAgE,CAAC,CAAC;IACzF,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,IAAA,kBAAO,EAAC,mBAAI,CAAC,IAAI,CAAC,IAAA,gBAAM,GAAE,EAAE,eAAe,CAAC,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,mBAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACnD,MAAM,IAAA,oBAAS,EAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;IAE1D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,eAAe,CAAC,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QACzE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,kBAAkB,CAAC,CAAC;QAE/G,IAAI,QAAQ,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACjD,MAAM,IAAI,mBAAU,CAAC,IAAA,6CAA6B,EAAC,kBAAkB,CAAC,CAAC,CAAC;QAC1E,CAAC;QAED,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;YACf,MAAM,IAAI,mBAAU,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,2BAA2B,IAAI,EAAE,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,mBAAU,CAAC,MAAM,CAAC,KAAK,IAAI,qBAAqB,CAAC,CAAC;QAC9D,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAI,KAAe,CAAC,OAAO,CAAC;QACzC,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,mBAAU,CAAC,2DAA2D,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,MAAM,IAAA,aAAE,EAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,SAAgB,eAAe,CAC7B,WAAmB,EACnB,UAAkB,EAClB,OAAe,EACf,QAA6B,EAC7B,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,gBAAgB,GAAG,6BAA6B,CAAC;IACvD,MAAM,OAAO,GAAG,oBAAoB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACpD,MAAM,eAAe,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAEjD,MAAM,IAAI,GAAa;QACrB,KAAK;QACL,MAAM;QACN,IAAI;QACJ,WAAW;QACX,eAAe,CAAC,OAAO;QACvB,YAAY;QACZ,KAAK;QACL,gBAAgB;QAChB,mBAAmB;QACnB,SAAS;QACT,gCAAgC;QAChC,WAAW;QACX,QAAQ;QACR,IAAI;QACJ,GAAG,mBAAI,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY;QACvC,IAAI;QACJ,GAAG,mBAAI,CAAC,OAAO,CAAC,OAAO,CAAC,sBAAsB;QAC9C,IAAI;QACJ,cAAc,gBAAgB,EAAE;KACjC,CAAC;IAEF,IAAI,eAAe,CAAC,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC3B,CAAC;IAED,IAAI,eAAe,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,eAAe,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,eAAe,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC;IAChD,CAAC;IAED,IAAI,eAAe,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,mBAAmB,EAAE,gBAAgB,CAAC,CAAC;IAC9E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,QAA6B,EAAE,MAAyB,OAAO,CAAC,GAAG;IAC/F,MAAM,GAAG,GAA4B,EAAE,CAAC;IAExC,sDAAsD;IACtD,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,aAAa,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,QAAQ,CAAC;QACpG,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACrD,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,GAAG,CAAC,6BAA6B,CAAC;IACtD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACjE,GAAG,CAAC,IAAI,CAAC,CAAC,+BAA+B,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAsB;IACjD,OAAO;QACL,OAAO,EAAE,iBAAiB,CAAC,GAAG,CAAC;QAC/B,IAAI,EAAE,cAAc,CAAC,GAAG,CAAC;QACzB,QAAQ,EAAE,kBAAkB,CAAC,GAAG,CAAC;QACjC,SAAS,EAAE,mBAAmB,CAAC,GAAG,CAAC;QACnC,MAAM,EAAE,gBAAgB,CAAC,GAAG,CAAC;QAC7B,IAAI,EAAE,cAAc,CAAC,GAAG,CAAC;KAC1B,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAsB;IAC/C,MAAM,GAAG,GAAG,GAAG,CAAC,oBAAoB,CAAC;IACrC,MAAM,KAAK,GAAG,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3F,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QAC/D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,IAAI,mBAAU,CAAC,yDAAyD,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,cAAc,CAAC,GAAsB;IAC5C,MAAM,GAAG,GAAG,GAAG,CAAC,iBAAiB,CAAC;IAClC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACjB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,mBAAU,CAAC,+CAA+C,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAsB;IAChD,MAAM,GAAG,GAAG,GAAG,CAAC,sBAAsB,CAAC;IACvC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;QAClB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,IAAI,mBAAU,CAAC,2CAA2C,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAsB;IACjD,MAAM,GAAG,GAAG,GAAG,CAAC,uBAAuB,CAAC;IACxC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3C,OAAO,yBAAyB,CAAC;IACnC,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,mBAAU,CAAC,iDAAiD,CAAC,CAAC;IAC1E,CAAC;IAED,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QAChB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAsB;IAC9C,MAAM,GAAG,GAAG,GAAG,CAAC,mBAAmB,CAAC;IACpC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,mBAAU,CAAC,uFAAuF,CAAC,CAAC;IAChH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,GAAsB;IAC5C,MAAM,GAAG,GAAG,GAAG,CAAC,iBAAiB,CAAC;IAClC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,mBAAU,CAAC,wCAAwC,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,mBAAU,CAAC,kCAAkC,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mBAAU,CAAC,2CAA2C,CAAC,CAAC;IACpE,CAAC;IAED,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,mBAAU,CAAC,4CAA4C,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;QAC7B,KAAK,EAAE,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QAC5D,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,WAA4B,CAAC,CAAC,CAAC,EAAE;QACpF,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,OAAmC,CAAC,CAAC,CAAC,EAAE;QACtI,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,MAAwB,CAAC,CAAC,CAAC,EAAE;KACvE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,OAAe,EACf,IAAc,EACd,GAAW,EACX,SAAkB;IAElB,MAAM,KAAK,GAAG,IAAA,0BAAK,EAAC,OAAO,EAAE,IAAI,EAAE;QACjC,KAAK,EAAE,KAAK;QACZ,GAAG;QACH,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;IAEH,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,MAAM,GAAG,EAAE,CAAC;IAEhB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;QAChC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;QAChC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,KAAiC,CAAC;IACtC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YACtB,QAAQ,GAAG,IAAI,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC,EAAE,SAAS,CAAC,CAAC;IAChB,CAAC;IAED,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAI,KAAK,EAAE,CAAC;YACV,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC5C,CAAC"}

package/dist/runner/hostRunner.d.ts

@@ -1,5 +1,5 @@
 import { SpellBundleManifest, StepResult } from "../types";
-export declare function runHost(manifest: SpellBundleManifest, bundlePath: string, input: Record<string, unknown>): Promise<{
+export declare function runHost(manifest: SpellBundleManifest, bundlePath: string, input: Record<string, unknown>, executionTimeoutMs?: number): Promise<{
     outputs: Record<string, unknown>;
     stepResults: StepResult[];
 }>;

package/dist/runner/hostRunner.js

@@ -10,10 +10,12 @@ const node_path_1 = __importDefault(require("node:path"));
 const errors_1 = require("../util/errors");
 const httpStep_1 = require("../steps/httpStep");
 const shellStep_1 = require("../steps/shellStep");
-async function runHost(manifest, bundlePath, input) {
+const runtimeLimits_1 = require("./runtimeLimits");
+async function runHost(manifest, bundlePath, input, executionTimeoutMs) {
     const tempDir = await (0, promises_1.mkdtemp)(node_path_1.default.join((0, node_os_1.tmpdir)(), "spell-input-"));
     const inputPath = node_path_1.default.join(tempDir, "input.json");
     await (0, promises_1.writeFile)(inputPath, JSON.stringify(input), "utf8");
+    const executionDeadlineMs = executionTimeoutMs !== undefined ? Date.now() + executionTimeoutMs : undefined;
     const env = {
         ...process.env,
         INPUT_JSON: inputPath
@@ -22,14 +24,21 @@ async function runHost(manifest, bundlePath, input) {
     const stepResults = [];
     for (const step of manifest.steps) {
         const runPath = node_path_1.default.resolve(bundlePath, step.run);
+        const remainingExecutionMs = executionDeadlineMs !== undefined ? executionDeadlineMs - Date.now() : undefined;
+        if (remainingExecutionMs !== undefined && remainingExecutionMs <= 0) {
+            throw new errors_1.SpellError((0, runtimeLimits_1.formatExecutionTimeoutMessage)(executionTimeoutMs, step.name));
+        }
         if (step.uses === "shell") {
-            const result = await (0, shellStep_1.runShellStep)(step, runPath, bundlePath, env);
+            const result = await (0, shellStep_1.runShellStep)(step, runPath, bundlePath, env, {
+                maxDurationMs: remainingExecutionMs,
+                executionTimeoutMs
+            });
             stepResults.push(result.stepResult);
             outputs[`step.${step.name}.stdout`] = result.stdout;
             continue;
         }
         if (step.uses === "http") {
-            const result = await (0, httpStep_1.runHttpStep)(step, runPath, input, env);
+            const result = await runHttpStepWithExecutionTimeout(step, runPath, input, env, remainingExecutionMs, executionTimeoutMs);
             stepResults.push(result.stepResult);
             outputs[`step.${step.name}.json`] = result.responseBody;
             continue;
@@ -38,4 +47,22 @@ async function runHost(manifest, bundlePath, input) {
     }
     return { outputs, stepResults };
 }
+async function runHttpStepWithExecutionTimeout(step, runPath, input, env, remainingExecutionMs, executionTimeoutMs) {
+    if (remainingExecutionMs === undefined) {
+        return (0, httpStep_1.runHttpStep)(step, runPath, input, env);
+    }
+    if (remainingExecutionMs <= 0) {
+        throw new errors_1.SpellError((0, runtimeLimits_1.formatExecutionTimeoutMessage)(executionTimeoutMs, step.name));
+    }
+    const controller = new AbortController();
+    const timer = setTimeout(() => {
+        controller.abort(new errors_1.SpellError((0, runtimeLimits_1.formatExecutionTimeoutMessage)(executionTimeoutMs, step.name)));
+    }, remainingExecutionMs);
+    try {
+        return await (0, httpStep_1.runHttpStep)(step, runPath, input, env, controller.signal);
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
 //# sourceMappingURL=hostRunner.js.map

package/dist/runner/hostRunner.js.map

@@ -1 +1 @@
-{"version":3,"file":"hostRunner.js","sourceRoot":"","sources":["../../src/runner/hostRunner.ts"],"names":[],"mappings":";;;;;AAQA,0BAsCC;AA9CD,+CAAsD;AACtD,qCAAiC;AACjC,0DAA6B;AAE7B,2CAA4C;AAC5C,gDAAgD;AAChD,kDAAkD;AAE3C,KAAK,UAAU,OAAO,CAC3B,QAA6B,EAC7B,UAAkB,EAClB,KAA8B;IAE9B,MAAM,OAAO,GAAG,MAAM,IAAA,kBAAO,EAAC,mBAAI,CAAC,IAAI,CAAC,IAAA,gBAAM,GAAE,EAAE,cAAc,CAAC,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,mBAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACnD,MAAM,IAAA,oBAAS,EAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;IAE1D,MAAM,GAAG,GAAG;QACV,GAAG,OAAO,CAAC,GAAG;QACd,UAAU,EAAE,SAAS;KACtB,CAAC;IAEF,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,MAAM,WAAW,GAAiB,EAAE,CAAC;IAErC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,mBAAI,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAEnD,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,MAAM,IAAA,wBAAY,EAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;YAClE,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACpC,OAAO,CAAC,QAAQ,IAAI,CAAC,IAAI,SAAS,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;YACpD,SAAS;QACX,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,IAAA,sBAAW,EAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YAC5D,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACpC,OAAO,CAAC,QAAQ,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC;YACxD,SAAS;QACX,CAAC;QAED,MAAM,IAAI,mBAAU,CAAC,0BAA0B,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AAClC,CAAC"}
+{"version":3,"file":"hostRunner.js","sourceRoot":"","sources":["../../src/runner/hostRunner.ts"],"names":[],"mappings":";;;;;AASA,0BAuDC;AAhED,+CAAsD;AACtD,qCAAiC;AACjC,0DAA6B;AAE7B,2CAA4C;AAC5C,gDAAgD;AAChD,kDAAkD;AAClD,mDAAgE;AAEzD,KAAK,UAAU,OAAO,CAC3B,QAA6B,EAC7B,UAAkB,EAClB,KAA8B,EAC9B,kBAA2B;IAE3B,MAAM,OAAO,GAAG,MAAM,IAAA,kBAAO,EAAC,mBAAI,CAAC,IAAI,CAAC,IAAA,gBAAM,GAAE,EAAE,cAAc,CAAC,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,mBAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACnD,MAAM,IAAA,oBAAS,EAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;IAC1D,MAAM,mBAAmB,GAAG,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;IAE3G,MAAM,GAAG,GAAG;QACV,GAAG,OAAO,CAAC,GAAG;QACd,UAAU,EAAE,SAAS;KACtB,CAAC;IAEF,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,MAAM,WAAW,GAAiB,EAAE,CAAC;IAErC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,mBAAI,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACnD,MAAM,oBAAoB,GAAG,mBAAmB,KAAK,SAAS,CAAC,CAAC,CAAC,mBAAmB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAE9G,IAAI,oBAAoB,KAAK,SAAS,IAAI,oBAAoB,IAAI,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,mBAAU,CAAC,IAAA,6CAA6B,EAAC,kBAA4B,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/F,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,MAAM,IAAA,wBAAY,EAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE;gBAChE,aAAa,EAAE,oBAAoB;gBACnC,kBAAkB;aACnB,CAAC,CAAC;YACH,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACpC,OAAO,CAAC,QAAQ,IAAI,CAAC,IAAI,SAAS,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;YACpD,SAAS;QACX,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,+BAA+B,CAClD,IAAI,EACJ,OAAO,EACP,KAAK,EACL,GAAG,EACH,oBAAoB,EACpB,kBAAkB,CACnB,CAAC;YACF,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACpC,OAAO,CAAC,QAAQ,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC;YACxD,SAAS;QACX,CAAC;QAED,MAAM,IAAI,mBAAU,CAAC,0BAA0B,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,+BAA+B,CAC5C,IAA0C,EAC1C,OAAe,EACf,KAA8B,EAC9B,GAAsB,EACtB,oBAAwC,EACxC,kBAAsC;IAEtC,IAAI,oBAAoB,KAAK,SAAS,EAAE,CAAC;QACvC,OAAO,IAAA,sBAAW,EAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAChD,CAAC;IAED,IAAI,oBAAoB,IAAI,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,mBAAU,CAAC,IAAA,6CAA6B,EAAC,kBAA4B,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/F,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;QAC5B,UAAU,CAAC,KAAK,CAAC,IAAI,mBAAU,CAAC,IAAA,6CAA6B,EAAC,kBAA4B,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3G,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAEzB,IAAI,CAAC;QACH,OAAO,MAAM,IAAA,sBAAW,EAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IACzE,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC"}

package/dist/runner/runtimeLimits.d.ts

@@ -0,0 +1,6 @@
+export declare const DEFAULT_RUNTIME_INPUT_MAX_BYTES: number;
+export declare const DEFAULT_RUNTIME_STEP_TIMEOUT_MS = 60000;
+export declare function readRuntimeInputMaxBytes(env?: NodeJS.ProcessEnv): number;
+export declare function readRuntimeStepTimeoutMs(env?: NodeJS.ProcessEnv): number;
+export declare function readRuntimeExecutionTimeoutMs(env?: NodeJS.ProcessEnv): number | undefined;
+export declare function formatExecutionTimeoutMessage(timeoutMs: number, stepName?: string): string;

package/dist/runner/runtimeLimits.js

@@ -0,0 +1,48 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_RUNTIME_STEP_TIMEOUT_MS = exports.DEFAULT_RUNTIME_INPUT_MAX_BYTES = void 0;
+exports.readRuntimeInputMaxBytes = readRuntimeInputMaxBytes;
+exports.readRuntimeStepTimeoutMs = readRuntimeStepTimeoutMs;
+exports.readRuntimeExecutionTimeoutMs = readRuntimeExecutionTimeoutMs;
+exports.formatExecutionTimeoutMessage = formatExecutionTimeoutMessage;
+const errors_1 = require("../util/errors");
+exports.DEFAULT_RUNTIME_INPUT_MAX_BYTES = 64 * 1024;
+exports.DEFAULT_RUNTIME_STEP_TIMEOUT_MS = 60_000;
+function readRuntimeInputMaxBytes(env = process.env) {
+    return readPositiveIntegerEnv("SPELL_RUNTIME_INPUT_MAX_BYTES", exports.DEFAULT_RUNTIME_INPUT_MAX_BYTES, env);
+}
+function readRuntimeStepTimeoutMs(env = process.env) {
+    return readPositiveIntegerEnv("SPELL_RUNTIME_STEP_TIMEOUT_MS", exports.DEFAULT_RUNTIME_STEP_TIMEOUT_MS, env);
+}
+function readRuntimeExecutionTimeoutMs(env = process.env) {
+    const raw = env.SPELL_RUNTIME_EXECUTION_TIMEOUT_MS;
+    if (raw === undefined || raw.trim() === "") {
+        return undefined;
+    }
+    const value = Number(raw);
+    if (!Number.isInteger(value) || value < 0) {
+        throw new errors_1.SpellError("SPELL_RUNTIME_EXECUTION_TIMEOUT_MS must be an integer >= 0");
+    }
+    if (value === 0) {
+        return undefined;
+    }
+    return value;
+}
+function formatExecutionTimeoutMessage(timeoutMs, stepName) {
+    if (stepName) {
+        return `cast execution timed out after ${timeoutMs}ms while running step '${stepName}'`;
+    }
+    return `cast execution timed out after ${timeoutMs}ms`;
+}
+function readPositiveIntegerEnv(name, fallback, env) {
+    const raw = env[name];
+    if (raw === undefined || raw.trim() === "") {
+        return fallback;
+    }
+    const value = Number(raw);
+    if (!Number.isInteger(value) || value < 1) {
+        throw new errors_1.SpellError(`${name} must be an integer >= 1`);
+    }
+    return value;
+}
+//# sourceMappingURL=runtimeLimits.js.map

package/dist/runner/runtimeLimits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimeLimits.js","sourceRoot":"","sources":["../../src/runner/runtimeLimits.ts"],"names":[],"mappings":";;;AAKA,4DAEC;AAED,4DAEC;AAED,sEAgBC;AAED,sEAMC;AArCD,2CAA4C;AAE/B,QAAA,+BAA+B,GAAG,EAAE,GAAG,IAAI,CAAC;AAC5C,QAAA,+BAA+B,GAAG,MAAM,CAAC;AAEtD,SAAgB,wBAAwB,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC3E,OAAO,sBAAsB,CAAC,+BAA+B,EAAE,uCAA+B,EAAE,GAAG,CAAC,CAAC;AACvG,CAAC;AAED,SAAgB,wBAAwB,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC3E,OAAO,sBAAsB,CAAC,+BAA+B,EAAE,uCAA+B,EAAE,GAAG,CAAC,CAAC;AACvG,CAAC;AAED,SAAgB,6BAA6B,CAAC,MAAyB,OAAO,CAAC,GAAG;IAChF,MAAM,GAAG,GAAG,GAAG,CAAC,kCAAkC,CAAC;IACnD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,mBAAU,CAAC,4DAA4D,CAAC,CAAC;IACrF,CAAC;IAED,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QAChB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,6BAA6B,CAAC,SAAiB,EAAE,QAAiB;IAChF,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,kCAAkC,SAAS,0BAA0B,QAAQ,GAAG,CAAC;IAC1F,CAAC;IAED,OAAO,kCAAkC,SAAS,IAAI,CAAC;AACzD,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY,EAAE,QAAgB,EAAE,GAAsB;IACpF,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACtB,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3C,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,mBAAU,CAAC,GAAG,IAAI,0BAA0B,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/steps/httpStep.d.ts

@@ -4,4 +4,4 @@ export interface HttpStepExecution {
     responseBody: unknown;
     status: number;
 }
-export declare function runHttpStep(step: SpellStep, runPath: string, input: Record<string, unknown>, env: NodeJS.ProcessEnv): Promise<HttpStepExecution>;
+export declare function runHttpStep(step: SpellStep, runPath: string, input: Record<string, unknown>, env: NodeJS.ProcessEnv, signal?: AbortSignal): Promise<HttpStepExecution>;

package/dist/steps/httpStep.js

@@ -5,7 +5,7 @@ const promises_1 = require("node:fs/promises");
 const errors_1 = require("../util/errors");
 const http_1 = require("../util/http");
 const template_1 = require("../util/template");
-async function runHttpStep(step, runPath, input, env) {
+async function runHttpStep(step, runPath, input, env, signal) {
     const started = new Date().toISOString();
     const raw = await (0, promises_1.readFile)(runPath, "utf8");
     let parsed;
@@ -43,11 +43,25 @@ async function runHttpStep(step, runPath, input, env) {
             }
         }
     }
-    const response = await (0, http_1.fetchHttp)(resolvedUrl, {
-        method: resolvedMethod,
-        headers,
-        body
-    });
+    let response;
+    try {
+        response = await (0, http_1.fetchHttp)(resolvedUrl, {
+            method: resolvedMethod,
+            headers,
+            body,
+            signal
+        });
+    }
+    catch (error) {
+        if (signal?.aborted) {
+            const reason = signal.reason;
+            if (reason instanceof Error) {
+                throw reason;
+            }
+            throw new errors_1.SpellError(`http step '${step.name}' aborted`);
+        }
+        throw new errors_1.SpellError(`http step '${step.name}' request failed: ${error.message}`);
+    }
     const responseText = await response.text();
     let responseBody;
     try {

package/dist/steps/httpStep.js.map

@@ -1 +1 @@
-{"version":3,"file":"httpStep.js","sourceRoot":"","sources":["../../src/steps/httpStep.ts"],"names":[],"mappings":";;AAmBA,kCA8EC;AAjGD,+CAA4C;AAE5C,2CAA4C;AAC5C,uCAAyC;AACzC,+CAAiD;AAe1C,KAAK,UAAU,WAAW,CAC/B,IAAe,EACf,OAAe,EACf,KAA8B,EAC9B,GAAsB;IAEtB,MAAM,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAEzC,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAQ,EAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC5C,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,mBAAU,CAAC,8BAA8B,IAAI,CAAC,IAAI,WAAY,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;IACrG,CAAC;IAED,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,mBAAU,CAAC,cAAc,IAAI,CAAC,IAAI,gCAAgC,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC;IACjC,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC;IAE3B,MAAM,cAAc,GAAG,MAAM,CAAC,IAAA,wBAAa,EAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/E,MAAM,WAAW,GAAG,IAAA,wBAAa,EAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IACxD,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,mBAAU,CAAC,cAAc,IAAI,CAAC,IAAI,8BAA8B,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,eAAe,GAAG,IAAA,wBAAa,EAAC,YAAY,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,gBAAgB,CAAC,eAAe,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,IAAA,wBAAa,EAAC,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAE1D,IAAI,IAAwB,CAAC;IAC7B,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;YACrC,IAAI,GAAG,YAAY,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YACpC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,CAAC;gBACxC,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;YAC/C,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,IAAA,gBAAS,EAAC,WAAW,EAAE;QAC5C,MAAM,EAAE,cAAc;QACtB,OAAO;QACP,IAAI;KACL,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,YAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAY,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,YAAY,GAAG,YAAY,CAAC;IAC9B,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE1C,MAAM,UAAU,GAAe;QAC7B,QAAQ,EAAE,IAAI,CAAC,IAAI;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,UAAU,EAAE,OAAO;QACnB,WAAW,EAAE,QAAQ;QACrB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,QAAQ,cAAc,IAAI,WAAW,OAAO,QAAQ,CAAC,MAAM,EAAE;KACvE,CAAC;IAEF,OAAO;QACL,UAAU;QACV,YAAY;QACZ,MAAM,EAAE,QAAQ,CAAC,MAAM;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,GAA4B,EAAE,GAAW;IACnE,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACvB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,mBAAU,CAAC,iCAAiC,GAAG,UAAU,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,mBAAU,CAAC,6CAA6C,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QACtE,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,IAAI,mBAAU,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;QACjE,CAAC;QACD,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,SAAS,CAAC,OAA+B,EAAE,GAAW;IAC7D,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;AAC1E,CAAC"}
+{"version":3,"file":"httpStep.js","sourceRoot":"","sources":["../../src/steps/httpStep.ts"],"names":[],"mappings":";;AAmBA,kCA4FC;AA/GD,+CAA4C;AAE5C,2CAA4C;AAC5C,uCAAyC;AACzC,+CAAiD;AAe1C,KAAK,UAAU,WAAW,CAC/B,IAAe,EACf,OAAe,EACf,KAA8B,EAC9B,GAAsB,EACtB,MAAoB;IAEpB,MAAM,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAEzC,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAQ,EAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC5C,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,mBAAU,CAAC,8BAA8B,IAAI,CAAC,IAAI,WAAY,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;IACrG,CAAC;IAED,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,mBAAU,CAAC,cAAc,IAAI,CAAC,IAAI,gCAAgC,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC;IACjC,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC;IAE3B,MAAM,cAAc,GAAG,MAAM,CAAC,IAAA,wBAAa,EAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/E,MAAM,WAAW,GAAG,IAAA,wBAAa,EAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IACxD,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,mBAAU,CAAC,cAAc,IAAI,CAAC,IAAI,8BAA8B,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,eAAe,GAAG,IAAA,wBAAa,EAAC,YAAY,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,gBAAgB,CAAC,eAAe,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,IAAA,wBAAa,EAAC,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAE1D,IAAI,IAAwB,CAAC;IAC7B,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;YACrC,IAAI,GAAG,YAAY,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YACpC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,CAAC;gBACxC,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;YAC/C,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,QAA+C,CAAC;IACpD,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,IAAA,gBAAS,EAAC,WAAW,EAAE;YACtC,MAAM,EAAE,cAAc;YACtB,OAAO;YACP,IAAI;YACJ,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YAC7B,IAAI,MAAM,YAAY,KAAK,EAAE,CAAC;gBAC5B,MAAM,MAAM,CAAC;YACf,CAAC;YACD,MAAM,IAAI,mBAAU,CAAC,cAAc,IAAI,CAAC,IAAI,WAAW,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,IAAI,mBAAU,CAAC,cAAc,IAAI,CAAC,IAAI,qBAAsB,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/F,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,YAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAY,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,YAAY,GAAG,YAAY,CAAC;IAC9B,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE1C,MAAM,UAAU,GAAe;QAC7B,QAAQ,EAAE,IAAI,CAAC,IAAI;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,UAAU,EAAE,OAAO;QACnB,WAAW,EAAE,QAAQ;QACrB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,QAAQ,cAAc,IAAI,WAAW,OAAO,QAAQ,CAAC,MAAM,EAAE;KACvE,CAAC;IAEF,OAAO;QACL,UAAU;QACV,YAAY;QACZ,MAAM,EAAE,QAAQ,CAAC,MAAM;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,GAA4B,EAAE,GAAW;IACnE,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACvB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,mBAAU,CAAC,iCAAiC,GAAG,UAAU,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,mBAAU,CAAC,6CAA6C,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QACtE,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,IAAI,mBAAU,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;QACjE,CAAC;QACD,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,SAAS,CAAC,OAA+B,EAAE,GAAW;IAC7D,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;AAC1E,CAAC"}

package/dist/steps/shellStep.d.ts

@@ -4,4 +4,8 @@ export interface ShellStepExecution {
     stdout: string;
     stderr: string;
 }
-export declare function runShellStep(step: SpellStep, runPath: string, cwd: string, env: NodeJS.ProcessEnv): Promise<ShellStepExecution>;
+export interface ShellStepRunOptions {
+    maxDurationMs?: number;
+    executionTimeoutMs?: number;
+}
+export declare function runShellStep(step: SpellStep, runPath: string, cwd: string, env: NodeJS.ProcessEnv, options?: ShellStepRunOptions): Promise<ShellStepExecution>;

package/dist/steps/shellStep.js

@@ -3,8 +3,17 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.runShellStep = runShellStep;
 const node_child_process_1 = require("node:child_process");
 const errors_1 = require("../util/errors");
-async function runShellStep(step, runPath, cwd, env) {
+const runtimeLimits_1 = require("../runner/runtimeLimits");
+async function runShellStep(step, runPath, cwd, env, options = {}) {
     const started = new Date().toISOString();
+    const configuredStepTimeoutMs = (0, runtimeLimits_1.readRuntimeStepTimeoutMs)(env);
+    const cappedByExecution = options.maxDurationMs !== undefined &&
+        Number.isFinite(options.maxDurationMs) &&
+        options.maxDurationMs > 0 &&
+        options.maxDurationMs < configuredStepTimeoutMs;
+    const timeoutMs = cappedByExecution
+        ? Math.max(1, Math.ceil(options.maxDurationMs))
+        : configuredStepTimeoutMs;
     const child = (0, node_child_process_1.spawn)(runPath, [], {
         shell: false,
         cwd,
@@ -18,12 +27,29 @@ async function runShellStep(step, runPath, cwd, env) {
     child.stderr.on("data", (chunk) => {
         stderr += chunk.toString();
     });
-    const exitCode = await new Promise((resolve, reject) => {
-        child.on("error", reject);
-        child.on("close", resolve);
-    }).catch((error) => {
-        throw new errors_1.SpellError(`failed to execute shell step '${step.name}': ${error.message}`);
-    });
+    let timeoutHit = false;
+    const timer = setTimeout(() => {
+        timeoutHit = true;
+        child.kill("SIGKILL");
+    }, timeoutMs);
+    let exitCode;
+    try {
+        exitCode = await new Promise((resolve, reject) => {
+            child.on("error", reject);
+            child.on("close", resolve);
+        }).catch((error) => {
+            throw new errors_1.SpellError(`failed to execute shell step '${step.name}': ${error.message}`);
+        });
+    }
+    finally {
+        clearTimeout(timer);
+    }
+    if (timeoutHit) {
+        if (cappedByExecution && options.executionTimeoutMs !== undefined) {
+            throw new errors_1.SpellError((0, runtimeLimits_1.formatExecutionTimeoutMessage)(options.executionTimeoutMs, step.name));
+        }
+        throw new errors_1.SpellError(`shell step '${step.name}' timed out after ${timeoutMs}ms`);
+    }
     const finished = new Date().toISOString();
     const stepResult = {
         stepName: step.name,

package/dist/steps/shellStep.js.map

@@ -1 +1 @@
-{"version":3,"file":"shellStep.js","sourceRoot":"","sources":["../../src/steps/shellStep.ts"],"names":[],"mappings":";;AAUA,oCAuDC;AAjED,2DAA2C;AAE3C,2CAA4C;AAQrC,KAAK,UAAU,YAAY,CAChC,IAAe,EACf,OAAe,EACf,GAAW,EACX,GAAsB;IAEtB,MAAM,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAEzC,MAAM,KAAK,GAAG,IAAA,0BAAK,EAAC,OAAO,EAAE,EAAE,EAAE;QAC/B,KAAK,EAAE,KAAK;QACZ,GAAG;QACH,GAAG;KACJ,CAAC,CAAC;IAEH,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,MAAM,GAAG,EAAE,CAAC;IAEhB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;QAChC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;QAChC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACpE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACjB,MAAM,IAAI,mBAAU,CAAC,iCAAiC,IAAI,CAAC,IAAI,MAAO,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;IACnG,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE1C,MAAM,UAAU,GAAe;QAC7B,QAAQ,EAAE,IAAI,CAAC,IAAI;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,UAAU,EAAE,OAAO;QACnB,WAAW,EAAE,QAAQ;QACrB,OAAO,EAAE,QAAQ,KAAK,CAAC;QACvB,QAAQ;QACR,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;QACjC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;QACjC,OAAO,EAAE,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,uBAAuB,QAAQ,EAAE;KACnE,CAAC;IAEF,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,mBAAU,CAAC,gBAAgB,IAAI,CAAC,IAAI,eAAe,QAAQ,GAAG,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO;QACL,UAAU;QACV,MAAM;QACN,MAAM;KACP,CAAC;AACJ,CAAC"}
+{"version":3,"file":"shellStep.js","sourceRoot":"","sources":["../../src/steps/shellStep.ts"],"names":[],"mappings":";;AAgBA,oCAmFC;AAnGD,2DAA2C;AAE3C,2CAA4C;AAC5C,2DAAkG;AAa3F,KAAK,UAAU,YAAY,CAChC,IAAe,EACf,OAAe,EACf,GAAW,EACX,GAAsB,EACtB,UAA+B,EAAE;IAEjC,MAAM,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzC,MAAM,uBAAuB,GAAG,IAAA,wCAAwB,EAAC,GAAG,CAAC,CAAC;IAC9D,MAAM,iBAAiB,GACrB,OAAO,CAAC,aAAa,KAAK,SAAS;QACnC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC;QACtC,OAAO,CAAC,aAAa,GAAG,CAAC;QACzB,OAAO,CAAC,aAAa,GAAG,uBAAuB,CAAC;IAClD,MAAM,SAAS,GAAG,iBAAiB;QACjC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAuB,CAAC,CAAC;QACzD,CAAC,CAAC,uBAAuB,CAAC;IAE5B,MAAM,KAAK,GAAG,IAAA,0BAAK,EAAC,OAAO,EAAE,EAAE,EAAE;QAC/B,KAAK,EAAE,KAAK;QACZ,GAAG;QACH,GAAG;KACJ,CAAC,CAAC;IAEH,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,MAAM,GAAG,EAAE,CAAC;IAEhB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;QAChC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;QAChC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;QAC5B,UAAU,GAAG,IAAI,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxB,CAAC,EAAE,SAAS,CAAC,CAAC;IAEd,IAAI,QAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC9D,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC1B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACjB,MAAM,IAAI,mBAAU,CAAC,iCAAiC,IAAI,CAAC,IAAI,MAAO,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QACnG,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAED,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,iBAAiB,IAAI,OAAO,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;YAClE,MAAM,IAAI,mBAAU,CAAC,IAAA,6CAA6B,EAAC,OAAO,CAAC,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7F,CAAC;QACD,MAAM,IAAI,mBAAU,CAAC,eAAe,IAAI,CAAC,IAAI,qBAAqB,SAAS,IAAI,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE1C,MAAM,UAAU,GAAe;QAC7B,QAAQ,EAAE,IAAI,CAAC,IAAI;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,UAAU,EAAE,OAAO;QACnB,WAAW,EAAE,QAAQ;QACrB,OAAO,EAAE,QAAQ,KAAK,CAAC;QACvB,QAAQ;QACR,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;QACjC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;QACjC,OAAO,EAAE,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,uBAAuB,QAAQ,EAAE;KACnE,CAAC;IAEF,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,mBAAU,CAAC,gBAAgB,IAAI,CAAC,IAAI,eAAe,QAAQ,GAAG,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO;QACL,UAAU;QACV,MAAM;QACN,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/types.d.ts

@@ -92,6 +92,10 @@ export interface ExecutionLog {
         risk: SpellRisk;
         billing: SpellBilling;
         runtime: SpellRuntime;
+        license: {
+            licensed: boolean;
+            name?: string;
+        };
     };
     steps: StepResult[];
     outputs: Record<string, unknown>;

package/dist/util/paths.d.ts

@@ -3,4 +3,5 @@ export declare function spellsRoot(): string;
 export declare function logsRoot(): string;
 export declare function trustRoot(): string;
 export declare function trustedPublishersRoot(): string;
+export declare function licensesRoot(): string;
 export declare function ensureSpellDirs(): Promise<void>;

package/dist/util/paths.js

@@ -8,6 +8,7 @@ exports.spellsRoot = spellsRoot;
 exports.logsRoot = logsRoot;
 exports.trustRoot = trustRoot;
 exports.trustedPublishersRoot = trustedPublishersRoot;
+exports.licensesRoot = licensesRoot;
 exports.ensureSpellDirs = ensureSpellDirs;
 const promises_1 = require("node:fs/promises");
 const node_os_1 = require("node:os");
@@ -27,9 +28,13 @@ function trustRoot() {
 function trustedPublishersRoot() {
     return node_path_1.default.join(trustRoot(), "publishers");
 }
+function licensesRoot() {
+    return node_path_1.default.join(spellHome(), "licenses");
+}
 async function ensureSpellDirs() {
     await (0, promises_1.mkdir)(spellsRoot(), { recursive: true });
     await (0, promises_1.mkdir)(logsRoot(), { recursive: true });
     await (0, promises_1.mkdir)(trustedPublishersRoot(), { recursive: true });
+    await (0, promises_1.mkdir)(licensesRoot(), { recursive: true });
 }
 //# sourceMappingURL=paths.js.map

package/dist/util/paths.js.map

@@ -1 +1 @@
-{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/util/paths.ts"],"names":[],"mappings":";;;;;AAIA,8BAEC;AAED,gCAEC;AAED,4BAEC;AAED,8BAEC;AAED,sDAEC;AAED,0CAIC;AA5BD,+CAAyC;AACzC,qCAAkC;AAClC,0DAA6B;AAE7B,SAAgB,SAAS;IACvB,OAAO,mBAAI,CAAC,IAAI,CAAC,IAAA,iBAAO,GAAE,EAAE,QAAQ,CAAC,CAAC;AACxC,CAAC;AAED,SAAgB,UAAU;IACxB,OAAO,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC1C,CAAC;AAED,SAAgB,QAAQ;IACtB,OAAO,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;AACxC,CAAC;AAED,SAAgB,SAAS;IACvB,OAAO,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,OAAO,CAAC,CAAC;AACzC,CAAC;AAED,SAAgB,qBAAqB;IACnC,OAAO,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,YAAY,CAAC,CAAC;AAC9C,CAAC;AAEM,KAAK,UAAU,eAAe;IACnC,MAAM,IAAA,gBAAK,EAAC,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,IAAA,gBAAK,EAAC,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,IAAA,gBAAK,EAAC,qBAAqB,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5D,CAAC"}
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/util/paths.ts"],"names":[],"mappings":";;;;;AAIA,8BAEC;AAED,gCAEC;AAED,4BAEC;AAED,8BAEC;AAED,sDAEC;AAED,oCAEC;AAED,0CAKC;AAjCD,+CAAyC;AACzC,qCAAkC;AAClC,0DAA6B;AAE7B,SAAgB,SAAS;IACvB,OAAO,mBAAI,CAAC,IAAI,CAAC,IAAA,iBAAO,GAAE,EAAE,QAAQ,CAAC,CAAC;AACxC,CAAC;AAED,SAAgB,UAAU;IACxB,OAAO,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC1C,CAAC;AAED,SAAgB,QAAQ;IACtB,OAAO,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;AACxC,CAAC;AAED,SAAgB,SAAS;IACvB,OAAO,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,OAAO,CAAC,CAAC;AACzC,CAAC;AAED,SAAgB,qBAAqB;IACnC,OAAO,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,YAAY,CAAC,CAAC;AAC9C,CAAC;AAED,SAAgB,YAAY;IAC1B,OAAO,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,UAAU,CAAC,CAAC;AAC5C,CAAC;AAEM,KAAK,UAAU,eAAe;IACnC,MAAM,IAAA,gBAAK,EAAC,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,IAAA,gBAAK,EAAC,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,IAAA,gBAAK,EAAC,qBAAqB,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,IAAA,gBAAK,EAAC,YAAY,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACnD,CAAC"}

package/package.json

@@ -1,11 +1,13 @@
 {
   "name": "spell-runtime",
-  "version": "1.2.0",
+  "version": "1.2.5",
   "description": "Minimal CLI runtime for SpellBundle v1",
   "license": "MIT",
   "type": "commonjs",
+  "packageManager": "pnpm@10.13.1",
   "files": [
     "dist",
+    "README.md",
     "README.txt",
     "LICENSE"
   ],
@@ -21,12 +23,18 @@
     "api:dev": "tsx src/api/index.ts",
     "api:start": "node dist/api/index.js",
     "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "lint": "npm run typecheck",
     "prepare": "npm run build",
     "test": "vitest run",
     "test:watch": "vitest",
+    "pack:check": "npm pack --dry-run",
     "smoke:link": "npm run build && npm link && spell --help",
     "smoke:npx": "npm run build && npx --yes --package file:. spell --help"
   },
+  "publishConfig": {
+    "access": "public"
+  },
   "dependencies": {
     "ajv": "^8.17.1",
     "commander": "^14.0.1",