subharness 0.0.4 → 0.0.7

package/dist/sdk/execution-options.js

@@ -0,0 +1,115 @@
+import { stat } from "node:fs/promises";
+import { isAbsolute } from "node:path";
+import { parseAccess } from "../config/access.js";
+import { AgentError } from "../errors.js";
+const inheritedExecutionContext = ["AGENT_STATE_DIR", "AGENT_PARENT_TOKEN", "AGENT_CLI_PATH"];
+function record(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value)
+        && [Object.prototype, null].includes(Object.getPrototypeOf(value));
+}
+function invalid(message) {
+    throw new AgentError("INVALID_ARGUMENT", message);
+}
+function exactObject(value, fields, label) {
+    if (!record(value))
+        invalid(`${label} must be an object.`);
+    if (Reflect.ownKeys(value).some(key => typeof key !== "string" || !fields.includes(key))) {
+        invalid(`${label} contains an unknown field.`);
+    }
+}
+export function runnerConfiguration(options) {
+    if (options !== undefined)
+        exactObject(options, ["env", "access"], "Runner options");
+    const suppliedEnvironment = options?.env;
+    if (suppliedEnvironment !== undefined && ((typeof suppliedEnvironment !== "object" || suppliedEnvironment === null
+        || Array.isArray(suppliedEnvironment))
+        || Reflect.ownKeys(suppliedEnvironment).some(key => typeof key !== "string"))) {
+        invalid("Runner environment must be an object.");
+    }
+    const source = (suppliedEnvironment ?? process.env);
+    // Runner environments are exact replacements, so framework-required ambient keys cannot be synthesized here.
+    const env = {};
+    for (const key of Object.keys(source)) {
+        const value = source[key];
+        if (value !== undefined && typeof value !== "string")
+            invalid("Runner environment values must be strings or undefined.");
+        env[key] = value;
+    }
+    for (const key of inheritedExecutionContext)
+        delete env[key];
+    const selectedAccess = options?.access;
+    const access = selectedAccess === undefined
+        ? {}
+        : parseRunnerAccess(selectedAccess);
+    return { env, access };
+}
+function parseRunnerAccess(access) {
+    try {
+        return parseAccess({ access: cloneAccess(access) });
+    }
+    catch (error) {
+        const prefix = "Personal access settings are invalid at ";
+        if (error instanceof AgentError && error.code === "INVALID_CONFIG" && error.message.startsWith(prefix)) {
+            throw new AgentError(error.code, `Runner access settings are invalid at ${error.message.slice(prefix.length)}`);
+        }
+        throw error;
+    }
+}
+function cloneAccess(access) {
+    if (!record(access)) {
+        throw new AgentError("INVALID_CONFIG", "Runner access settings are invalid at access: Value must be an object.");
+    }
+    return Object.fromEntries(Object.entries(access).map(([kind, connections]) => [
+        kind,
+        Array.isArray(connections) ? connections.map(connection => record(connection) ? { ...connection } : connection) : connections,
+    ]));
+}
+export function validatePrompt(prompt) {
+    if (typeof prompt !== "string" || !prompt.trim() || Buffer.byteLength(prompt, "utf8") > 1024 * 1024) {
+        invalid("Prompt must contain text and cannot exceed 1 MiB.");
+    }
+}
+export async function validateCwd(cwd) {
+    if (typeof cwd !== "string" || !isAbsolute(cwd))
+        invalid("Execution cwd must be an existing absolute directory.");
+    try {
+        if (!(await stat(cwd)).isDirectory())
+            throw new Error();
+    }
+    catch {
+        invalid("Execution cwd must be an existing absolute directory.");
+    }
+    return cwd;
+}
+export function runCwd(options) {
+    exactObject(options, ["cwd"], "Run options");
+    return options.cwd;
+}
+export function delivery(options) {
+    if (options === undefined)
+        return "queue";
+    exactObject(options, ["delivery"], "Send options");
+    const selected = options.delivery ?? "queue";
+    if (selected !== "queue" && selected !== "steer" && selected !== "interrupt")
+        invalid("Unknown delivery mode.");
+    return selected;
+}
+export function observeOptions(options) {
+    if (options === undefined)
+        return {};
+    exactObject(options, ["after", "signal"], "Observe options");
+    if (options.after !== undefined && typeof options.after !== "string")
+        invalid("Observation cursor must be a string.");
+    if (options.signal !== undefined && !(options.signal instanceof AbortSignal))
+        invalid("Observation signal must be an AbortSignal.");
+    return options;
+}
+export function watchOptions(options) {
+    if (options === undefined)
+        return {};
+    exactObject(options, ["signal"], "Watch options");
+    if (options.signal !== undefined && !(options.signal instanceof AbortSignal))
+        invalid("Watch signal must be an AbortSignal.");
+    return options;
+}
+//# sourceMappingURL=execution-options.js.map

package/dist/sdk/execution-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-options.js","sourceRoot":"","sources":["../../src/sdk/execution-options.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,WAAW,EAAqB,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAG1C,MAAM,yBAAyB,GAAG,CAAC,iBAAiB,EAAE,oBAAoB,EAAE,gBAAgB,CAAU,CAAC;AAEvG,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;WACtE,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,OAAO,CAAC,OAAe;IAC9B,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,MAAyB,EAAE,KAAa;IAC3E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;IAC3D,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACzF,OAAO,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAkC;IACpE,IAAI,OAAO,KAAK,SAAS;QAAE,WAAW,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACrF,MAAM,mBAAmB,GAAG,OAAO,EAAE,GAAG,CAAC;IACzC,IAAI,mBAAmB,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,mBAAmB,KAAK,QAAQ,IAAI,mBAAmB,KAAK,IAAI;WAC7G,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;WACnC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,EAAE,CAAC;QAChF,OAAO,CAAC,uCAAuC,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,CAAiD,CAAC;IACpG,6GAA6G;IAC7G,MAAM,GAAG,GAAG,EAAuB,CAAC;IACpC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,CAAC,yDAAyD,CAAC,CAAC;QACzH,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,yBAAyB;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7D,MAAM,cAAc,GAAG,OAAO,EAAE,MAAM,CAAC;IACvC,MAAM,MAAM,GAAG,cAAc,KAAK,SAAS;QACzC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,iBAAiB,CAAC,cAAiC,CAAC,CAAC;IACzD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;AACzB,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAuB;IAChD,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,0CAA0C,CAAC;QAC1D,IAAI,KAAK,YAAY,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACvG,MAAM,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,yCAAyC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClH,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,MAAuB;IAC1C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,wEAAwE,CAAC,CAAC;IACnH,CAAC;IACD,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC;QAC5E,IAAI;QACJ,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,UAAU,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,WAAW;KAC9H,CAAC,CAA2B,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAe;IAC5C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;QACpG,OAAO,CAAC,mDAAmD,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAY;IAC5C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,uDAAuD,CAAC,CAAC;IAClH,IAAI,CAAC;QACH,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,uDAAuD,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,OAAgB;IACrC,WAAW,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,CAAC;IAC7C,OAAO,OAAO,CAAC,GAAG,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,OAAgB;IACvC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IAC1C,WAAW,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC;IAC7C,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,WAAW;QAAE,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAChH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAgB;IAC7C,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACrC,WAAW,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAC7D,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,sCAAsC,CAAC,CAAC;IACtH,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,YAAY,WAAW,CAAC;QAAE,OAAO,CAAC,4CAA4C,CAAC,CAAC;IACpI,OAAO,OAAmD,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAgB;IAC3C,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACrC,WAAW,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC,CAAC;IAClD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,YAAY,WAAW,CAAC;QAAE,OAAO,CAAC,sCAAsC,CAAC,CAAC;IAC9H,OAAO,OAAmC,CAAC;AAC7C,CAAC","sourcesContent":["import { stat } from \"node:fs/promises\";\nimport { isAbsolute } from \"node:path\";\nimport { parseAccess, type AccessConfig } from \"../config/access.js\";\nimport { AgentError } from \"../errors.js\";\nimport type { AccessSelection, Delivery, RunnerOptions } from \"./execution-types.js\";\n\nconst inheritedExecutionContext = [\"AGENT_STATE_DIR\", \"AGENT_PARENT_TOKEN\", \"AGENT_CLI_PATH\"] as const;\n\nfunction record(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === \"object\" && !Array.isArray(value)\n    && [Object.prototype, null].includes(Object.getPrototypeOf(value));\n}\n\nfunction invalid(message: string): never {\n  throw new AgentError(\"INVALID_ARGUMENT\", message);\n}\n\nfunction exactObject(value: unknown, fields: readonly string[], label: string): asserts value is Record<string, unknown> {\n  if (!record(value)) invalid(`${label} must be an object.`);\n  if (Reflect.ownKeys(value).some(key => typeof key !== \"string\" || !fields.includes(key))) {\n    invalid(`${label} contains an unknown field.`);\n  }\n}\n\nexport function runnerConfiguration(options: RunnerOptions | undefined): { env: NodeJS.ProcessEnv; access: AccessConfig } {\n  if (options !== undefined) exactObject(options, [\"env\", \"access\"], \"Runner options\");\n  const suppliedEnvironment = options?.env;\n  if (suppliedEnvironment !== undefined && ((typeof suppliedEnvironment !== \"object\" || suppliedEnvironment === null\n    || Array.isArray(suppliedEnvironment))\n    || Reflect.ownKeys(suppliedEnvironment).some(key => typeof key !== \"string\"))) {\n    invalid(\"Runner environment must be an object.\");\n  }\n  const source = (suppliedEnvironment ?? process.env) as Readonly<Record<string, string | undefined>>;\n  // Runner environments are exact replacements, so framework-required ambient keys cannot be synthesized here.\n  const env = {} as NodeJS.ProcessEnv;\n  for (const key of Object.keys(source)) {\n    const value = source[key];\n    if (value !== undefined && typeof value !== \"string\") invalid(\"Runner environment values must be strings or undefined.\");\n    env[key] = value;\n  }\n  for (const key of inheritedExecutionContext) delete env[key];\n  const selectedAccess = options?.access;\n  const access = selectedAccess === undefined\n    ? {}\n    : parseRunnerAccess(selectedAccess as AccessSelection);\n  return { env, access };\n}\n\nfunction parseRunnerAccess(access: AccessSelection): AccessConfig {\n  try {\n    return parseAccess({ access: cloneAccess(access) });\n  } catch (error) {\n    const prefix = \"Personal access settings are invalid at \";\n    if (error instanceof AgentError && error.code === \"INVALID_CONFIG\" && error.message.startsWith(prefix)) {\n      throw new AgentError(error.code, `Runner access settings are invalid at ${error.message.slice(prefix.length)}`);\n    }\n    throw error;\n  }\n}\n\nfunction cloneAccess(access: AccessSelection): AccessConfig[\"access\"] {\n  if (!record(access)) {\n    throw new AgentError(\"INVALID_CONFIG\", \"Runner access settings are invalid at access: Value must be an object.\");\n  }\n  return Object.fromEntries(Object.entries(access).map(([kind, connections]) => [\n    kind,\n    Array.isArray(connections) ? connections.map(connection => record(connection) ? { ...connection } : connection) : connections,\n  ])) as AccessConfig[\"access\"];\n}\n\nexport function validatePrompt(prompt: unknown): asserts prompt is string {\n  if (typeof prompt !== \"string\" || !prompt.trim() || Buffer.byteLength(prompt, \"utf8\") > 1024 * 1024) {\n    invalid(\"Prompt must contain text and cannot exceed 1 MiB.\");\n  }\n}\n\nexport async function validateCwd(cwd: unknown): Promise<string> {\n  if (typeof cwd !== \"string\" || !isAbsolute(cwd)) invalid(\"Execution cwd must be an existing absolute directory.\");\n  try {\n    if (!(await stat(cwd)).isDirectory()) throw new Error();\n  } catch {\n    invalid(\"Execution cwd must be an existing absolute directory.\");\n  }\n  return cwd;\n}\n\nexport function runCwd(options: unknown): unknown {\n  exactObject(options, [\"cwd\"], \"Run options\");\n  return options.cwd;\n}\n\nexport function delivery(options: unknown): Delivery {\n  if (options === undefined) return \"queue\";\n  exactObject(options, [\"delivery\"], \"Send options\");\n  const selected = options.delivery ?? \"queue\";\n  if (selected !== \"queue\" && selected !== \"steer\" && selected !== \"interrupt\") invalid(\"Unknown delivery mode.\");\n  return selected;\n}\n\nexport function observeOptions(options: unknown): { after?: string; signal?: AbortSignal } {\n  if (options === undefined) return {};\n  exactObject(options, [\"after\", \"signal\"], \"Observe options\");\n  if (options.after !== undefined && typeof options.after !== \"string\") invalid(\"Observation cursor must be a string.\");\n  if (options.signal !== undefined && !(options.signal instanceof AbortSignal)) invalid(\"Observation signal must be an AbortSignal.\");\n  return options as { after?: string; signal?: AbortSignal };\n}\n\nexport function watchOptions(options: unknown): { signal?: AbortSignal } {\n  if (options === undefined) return {};\n  exactObject(options, [\"signal\"], \"Watch options\");\n  if (options.signal !== undefined && !(options.signal instanceof AbortSignal)) invalid(\"Watch signal must be an AbortSignal.\");\n  return options as { signal?: AbortSignal };\n}\n"]}

package/dist/sdk/execution-types.d.ts

@@ -0,0 +1,72 @@
+import type { AgentDefinition, HarnessKind } from './types.js';
+import type { CompleteResponse, Page, PageOptions, SdkSessionSnapshot as SessionSnapshot, SdkSessionSummary as SessionSummary, SdkTaskDetails as TaskDetails, SdkTaskSnapshot as TaskSnapshot, SdkTaskSummary as TaskSummary, TaskResult, WorkspaceInfo } from '../runtime/snapshots.js';
+import type { ApprovalAction, ApprovalGrant, ApprovalResponse, ApprovalScope, SdkApprovalRequest as ApprovalRequest, TaskState } from '../runtime/task-data.js';
+export interface RunnerOptions {
+    readonly env?: Readonly<Record<string, string | undefined>>;
+    readonly access?: AccessSelection;
+}
+export type AccessSelection = Readonly<Partial<Record<HarnessKind, readonly AccessConnection[]>>>;
+export type AccessConnection = {
+    readonly type: 'subscription';
+    readonly provider?: string;
+} | {
+    readonly type: 'api-key';
+    readonly provider?: string;
+    readonly env?: string;
+    readonly envFile?: string;
+    readonly baseUrl?: string;
+    readonly wireApi?: 'completions' | 'responses';
+    readonly apiVersion?: string;
+    readonly wireModel?: string;
+} | {
+    readonly type: 'vercel-api-key';
+    readonly env?: string;
+    readonly envFile?: string;
+} | {
+    readonly type: 'vercel-oidc';
+    readonly env?: string;
+    readonly envFile?: string;
+    readonly project?: string;
+};
+export type Delivery = 'queue' | 'steer' | 'interrupt';
+export interface Runner {
+    createSession(definition: AgentDefinition, options: {
+        readonly cwd: string;
+    }): Promise<SessionHandle>;
+    session(id: string): SessionHandle;
+    task(id: string): TaskHandle;
+    respond(requestId: string, response: ApprovalResponse): Promise<void>;
+    close(): Promise<void>;
+}
+export interface SessionHandle {
+    readonly id: string;
+    prompt(text: string, options?: {
+        readonly delivery?: Delivery;
+    }): Promise<PromptReceipt>;
+    snapshot(): Promise<SessionSnapshot>;
+    close(): Promise<void>;
+}
+export interface PromptReceipt {
+    readonly task: TaskHandle;
+    readonly requestedDelivery: Delivery;
+    readonly effectiveDelivery: Delivery;
+    readonly paused?: true;
+    readonly blockedByTaskId?: string;
+}
+export interface TaskHandle {
+    readonly id: string;
+    readonly sessionId: string;
+    readonly result: Promise<TaskResult>;
+    snapshot(): Promise<TaskSnapshot>;
+    inspect(): Promise<TaskDetails>;
+    watch(options?: {
+        readonly signal?: AbortSignal;
+    }): AsyncIterable<TaskSnapshot>;
+    responses(options?: {
+        readonly after?: string;
+        readonly signal?: AbortSignal;
+    }): AsyncIterable<CompleteResponse>;
+    cancel(): Promise<TaskSnapshot>;
+}
+export type TerminalState = 'completed' | 'failed' | 'cancelled' | 'interrupted';
+export type { ApprovalAction, ApprovalGrant, ApprovalRequest, ApprovalResponse, ApprovalScope, CompleteResponse, Page, PageOptions, SessionSnapshot, SessionSummary, TaskDetails, TaskResult, TaskSnapshot, TaskState, TaskSummary, WorkspaceInfo };

package/dist/sdk/execution-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=execution-types.js.map

package/dist/sdk/execution-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-types.js","sourceRoot":"","sources":["../../src/sdk/execution-types.ts"],"names":[],"mappings":"","sourcesContent":["import type { AgentDefinition, HarnessKind } from './types.js';\nimport type {\n  CompleteResponse, Page, PageOptions, SdkSessionSnapshot as SessionSnapshot,\n  SdkSessionSummary as SessionSummary, SdkTaskDetails as TaskDetails,\n  SdkTaskSnapshot as TaskSnapshot, SdkTaskSummary as TaskSummary, TaskResult, WorkspaceInfo,\n} from '../runtime/snapshots.js';\nimport type {\n  ApprovalAction, ApprovalGrant, ApprovalResponse, ApprovalScope, SdkApprovalRequest as ApprovalRequest, TaskState,\n} from '../runtime/task-data.js';\n\nexport interface RunnerOptions {\n  readonly env?: Readonly<Record<string, string | undefined>>;\n  readonly access?: AccessSelection;\n}\nexport type AccessSelection = Readonly<Partial<Record<HarnessKind, readonly AccessConnection[]>>>;\nexport type AccessConnection =\n  | { readonly type:'subscription'; readonly provider?:string }\n  | { readonly type:'api-key'; readonly provider?:string; readonly env?:string; readonly envFile?:string;\n      readonly baseUrl?:string; readonly wireApi?:'completions'|'responses'; readonly apiVersion?:string; readonly wireModel?:string }\n  | { readonly type:'vercel-api-key'; readonly env?:string; readonly envFile?:string }\n  | { readonly type:'vercel-oidc'; readonly env?:string; readonly envFile?:string; readonly project?:string };\n\nexport type Delivery = 'queue' | 'steer' | 'interrupt';\nexport interface Runner {\n  createSession(definition: AgentDefinition, options: {readonly cwd:string}): Promise<SessionHandle>;\n  session(id:string): SessionHandle;\n  task(id:string): TaskHandle;\n  respond(requestId:string,response:ApprovalResponse): Promise<void>;\n  close(): Promise<void>;\n}\nexport interface SessionHandle {\n  readonly id:string;\n  prompt(text:string,options?:{readonly delivery?:Delivery}): Promise<PromptReceipt>;\n  snapshot(): Promise<SessionSnapshot>;\n  close(): Promise<void>;\n}\nexport interface PromptReceipt {\n  readonly task:TaskHandle;\n  readonly requestedDelivery:Delivery;\n  readonly effectiveDelivery:Delivery;\n  readonly paused?:true;\n  readonly blockedByTaskId?:string;\n}\nexport interface TaskHandle {\n  readonly id:string;\n  readonly sessionId:string;\n  readonly result:Promise<TaskResult>;\n  snapshot():Promise<TaskSnapshot>;\n  inspect():Promise<TaskDetails>;\n  watch(options?:{readonly signal?:AbortSignal}):AsyncIterable<TaskSnapshot>;\n  responses(options?:{readonly after?:string;readonly signal?:AbortSignal}):AsyncIterable<CompleteResponse>;\n  cancel():Promise<TaskSnapshot>;\n}\n\nexport type TerminalState='completed'|'failed'|'cancelled'|'interrupted';\nexport type { ApprovalAction, ApprovalGrant, ApprovalRequest, ApprovalResponse, ApprovalScope, CompleteResponse, Page, PageOptions,\n  SessionSnapshot, SessionSummary, TaskDetails, TaskResult, TaskSnapshot, TaskState, TaskSummary, WorkspaceInfo };\n"]}

package/dist/sdk/execution.d.ts

@@ -0,0 +1,3 @@
+import type { Runner, RunnerOptions } from './execution-types.js';
+export declare function createRunner(options?: RunnerOptions): Runner;
+export type { AccessConnection, AccessSelection, ApprovalAction, ApprovalGrant, ApprovalRequest, ApprovalResponse, ApprovalScope, CompleteResponse, Delivery, Page, PageOptions, PromptReceipt, Runner, RunnerOptions, SessionHandle, SessionSnapshot, SessionSummary, TaskDetails, TaskHandle, TaskResult, TaskSnapshot, TaskState, TaskSummary, TerminalState, WorkspaceInfo, } from './execution-types.js';

package/dist/sdk/execution.js

@@ -0,0 +1,3 @@
+import { createRunner as createApplicationRunner } from './runner.js';
+export function createRunner(options) { return createApplicationRunner(options); }
+//# sourceMappingURL=execution.js.map

package/dist/sdk/execution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution.js","sourceRoot":"","sources":["../../src/sdk/execution.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,IAAI,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAGtE,MAAM,UAAU,YAAY,CAAC,OAAsB,IAAW,OAAO,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC","sourcesContent":["import { createRunner as createApplicationRunner } from './runner.js';\nimport type { Runner, RunnerOptions } from './execution-types.js';\n\nexport function createRunner(options?:RunnerOptions):Runner { return createApplicationRunner(options); }\nexport type { AccessConnection, AccessSelection, ApprovalAction, ApprovalGrant, ApprovalRequest, ApprovalResponse, ApprovalScope,\n  CompleteResponse, Delivery, Page, PageOptions, PromptReceipt, Runner, RunnerOptions, SessionHandle, SessionSnapshot,\n  SessionSummary, TaskDetails, TaskHandle, TaskResult, TaskSnapshot, TaskState, TaskSummary, TerminalState,\n  WorkspaceInfo,\n} from './execution-types.js';\n"]}

package/dist/sdk/hosted-error.d.ts

@@ -0,0 +1,3 @@
+import { AgentError } from "../errors.js";
+export declare function markHostedError(error: unknown): unknown;
+export declare function isHostedError(error: unknown): error is AgentError;

package/dist/sdk/hosted-error.js

@@ -0,0 +1,14 @@
+import { AgentError } from "../errors.js";
+const registered = new WeakSet();
+const safeCode = /^[A-Z][A-Z0-9_]*$/u;
+export function markHostedError(error) {
+    if (!(error instanceof AgentError) || !safeCode.test(error.code))
+        return error;
+    const failure = new AgentError(error.code, `Hosted tool failed (${error.code}).`);
+    registered.add(failure);
+    return failure;
+}
+export function isHostedError(error) {
+    return error instanceof AgentError && registered.has(error);
+}
+//# sourceMappingURL=hosted-error.js.map

package/dist/sdk/hosted-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-error.js","sourceRoot":"","sources":["../../src/sdk/hosted-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,MAAM,UAAU,GAAG,IAAI,OAAO,EAAc,CAAC;AAC7C,MAAM,QAAQ,GAAG,oBAAoB,CAAC;AAEtC,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/E,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,uBAAuB,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC;IAClF,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACxB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,KAAK,YAAY,UAAU,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC","sourcesContent":["import { AgentError } from \"../errors.js\";\n\nconst registered = new WeakSet<AgentError>();\nconst safeCode = /^[A-Z][A-Z0-9_]*$/u;\n\nexport function markHostedError(error: unknown): unknown {\n  if (!(error instanceof AgentError) || !safeCode.test(error.code)) return error;\n  const failure = new AgentError(error.code, `Hosted tool failed (${error.code}).`);\n  registered.add(failure);\n  return failure;\n}\n\nexport function isHostedError(error: unknown): error is AgentError {\n  return error instanceof AgentError && registered.has(error);\n}\n"]}

package/dist/sdk/hosted.d.ts

@@ -0,0 +1,23 @@
+import type { ExecutionDefinition } from "../adapters/types.js";
+import type { Coordinator } from "../runtime/coordinator.js";
+import type { DriverInput } from "../runtime/types.js";
+import type { AgentDefinition } from "./types.js";
+export declare class HostedDelegation {
+    private readonly coordinator;
+    private readonly input;
+    private readonly definition;
+    private turn?;
+    constructor(coordinator: Coordinator, input: DriverInput, definition: AgentDefinition);
+    prepare(): ExecutionDefinition;
+    beginTurn(): void;
+    finishTurn(): Promise<void>;
+    stopManagedWaits(): void;
+    drain(): Promise<void>;
+    private nativeDefinition;
+    private tools;
+    private invoke;
+    private current;
+    private assertCurrent;
+    private stopAdmission;
+    private isSelfOrAncestor;
+}

package/dist/sdk/hosted.js

@@ -0,0 +1,204 @@
+import { z } from "zod";
+import { AgentError } from "../errors.js";
+import { markHostedError } from "./hosted-error.js";
+import { observeTask } from "./execution-observation.js";
+import { delivery, validateCwd, validatePrompt } from "./execution-options.js";
+const prompt = z.string();
+const deliverySchema = z.enum(["queue", "steer", "interrupt"]);
+const approvalValue = z.union([z.string(), z.number(), z.boolean(), z.array(z.string())]);
+const approvalContent = z.record(z.string(), approvalValue);
+export class HostedDelegation {
+    coordinator;
+    input;
+    definition;
+    turn;
+    constructor(coordinator, input, definition) {
+        this.coordinator = coordinator;
+        this.input = input;
+        this.definition = definition;
+    }
+    prepare() {
+        if (!Object.keys(this.definition.subagents ?? {}).length)
+            return this.nativeDefinition({});
+        return this.nativeDefinition(this.tools());
+    }
+    beginTurn() {
+        if (this.turn?.accepting)
+            throw new AgentError("SESSION_BUSY", "A hosted turn is already active.");
+        const { taskId } = this.coordinator.parentContext(this.input.token);
+        this.turn = { taskId, accepting: true, waits: new Set(), callbacks: new Set() };
+    }
+    async finishTurn() {
+        const turn = this.turn;
+        if (!turn)
+            return;
+        this.stopAdmission(turn);
+        await Promise.allSettled([...turn.callbacks]);
+        if (this.turn === turn)
+            this.turn = undefined;
+    }
+    stopManagedWaits() {
+        if (this.turn)
+            this.stopAdmission(this.turn);
+    }
+    async drain() {
+        if (this.turn)
+            await Promise.allSettled([...this.turn.callbacks]);
+    }
+    nativeDefinition(hosted) {
+        return {
+            name: this.definition.name,
+            description: this.definition.description,
+            instructions: this.definition.instructions,
+            harness: this.definition.harness,
+            tools: { ...(this.definition.tools ?? {}), ...hosted },
+        };
+    }
+    tools() {
+        const children = this.definition.subagents ?? {};
+        const childKeys = Object.keys(children);
+        const childCatalog = Object.entries(children).map(([key, child]) => ({
+            key,
+            name: child.name,
+            description: child.description,
+        }));
+        return {
+            agent_run: {
+                description: `Start one directly declared child agent and return its admitted task and session. Available direct children: ${JSON.stringify(childCatalog)}`,
+                inputSchema: z.object({ agent: z.enum(childKeys), prompt, cwd: z.string().optional() }).strict(),
+                execute: input => this.invoke(async (binding) => {
+                    validatePrompt(input.prompt);
+                    const children = this.definition.subagents;
+                    const child = children && Object.hasOwn(children, input.agent) ? children[input.agent] : undefined;
+                    if (!child)
+                        throw new AgentError("INVALID_PARENT", "This subagent is not available in the active parent context.");
+                    const cwd = await validateCwd(input.cwd ?? this.input.cwd);
+                    this.assertCurrent(binding);
+                    const receipt = this.coordinator.run({
+                        reference: { kind: "inline", definition: child },
+                        cwd,
+                        env: this.input.env,
+                        prompt: input.prompt,
+                        parentToken: this.input.token,
+                    });
+                    return { taskId: receipt.taskId, sessionId: receipt.sessionId, state: receipt.state };
+                }),
+            },
+            agent_send: {
+                description: "Send a follow-up to an existing hosted child session.",
+                inputSchema: z.object({ sessionId: z.string(), prompt, delivery: deliverySchema.optional() }).strict(),
+                execute: input => this.invoke(async (binding) => {
+                    validatePrompt(input.prompt);
+                    this.assertCurrent(binding);
+                    const requestedDelivery = delivery(input.delivery === undefined ? undefined : { delivery: input.delivery });
+                    const receipt = await this.coordinator.send(input.sessionId, input.prompt, requestedDelivery, this.input.token);
+                    return {
+                        taskId: receipt.taskId,
+                        sessionId: receipt.sessionId,
+                        requestedDelivery,
+                        effectiveDelivery: receipt.delivery ?? requestedDelivery,
+                    };
+                }),
+            },
+            agent_wait: {
+                description: "Wait for the next complete response, approval request, or terminal outcome of a hosted task.",
+                inputSchema: z.object({ taskId: z.string(), after: z.string().optional() }).strict(),
+                execute: input => this.invoke(async (binding) => {
+                    this.assertCurrent(binding);
+                    if (this.isSelfOrAncestor(input.taskId, binding.taskId)) {
+                        throw new AgentError("INVALID_PARENT", "A hosted callback cannot wait for its own or an ancestor task.");
+                    }
+                    const controller = new AbortController();
+                    binding.waits.add(controller);
+                    try {
+                        return await observeTask(this.coordinator, input.taskId, input.after, this.input.token, controller.signal);
+                    }
+                    finally {
+                        binding.waits.delete(controller);
+                    }
+                }),
+            },
+            agent_status: {
+                description: "Read a detached snapshot of a hosted task.",
+                inputSchema: z.object({ taskId: z.string() }).strict(),
+                execute: input => this.invoke(async (binding) => {
+                    this.assertCurrent(binding);
+                    return this.coordinator.snapshot(input.taskId);
+                }),
+            },
+            agent_queue: {
+                description: "Read a detached snapshot of a hosted session queue.",
+                inputSchema: z.object({ sessionId: z.string() }).strict(),
+                execute: input => this.invoke(async (binding) => {
+                    this.assertCurrent(binding);
+                    return this.coordinator.sessionSnapshot(input.sessionId);
+                }),
+            },
+            agent_cancel: {
+                description: "Cancel a hosted task and its descendants after native stop is confirmed.",
+                inputSchema: z.object({ taskId: z.string() }).strict(),
+                execute: input => this.invoke(async (binding) => {
+                    this.assertCurrent(binding);
+                    if (this.isSelfOrAncestor(input.taskId, binding.taskId)) {
+                        throw new AgentError("INVALID_PARENT", "A hosted callback cannot cancel its own or an ancestor task.");
+                    }
+                    await this.coordinator.cancel(input.taskId);
+                    return this.coordinator.snapshot(input.taskId);
+                }),
+            },
+            agent_respond: {
+                description: "Answer one pending permission request owned by a strict descendant.",
+                inputSchema: z.object({ requestId: z.string(), content: approvalContent }).strict(),
+                execute: input => this.invoke(async (binding) => {
+                    this.assertCurrent(binding);
+                    await this.coordinator.respond(input.requestId, input.content, this.input.token);
+                    return { requestId: input.requestId, answered: true };
+                }),
+            },
+        };
+    }
+    invoke(operation) {
+        let binding;
+        try {
+            binding = this.current();
+        }
+        catch (error) {
+            return Promise.reject(markHostedError(error));
+        }
+        const callback = Promise.resolve().then(() => operation(binding)).catch(error => {
+            throw markHostedError(error);
+        });
+        binding.callbacks.add(callback);
+        void callback.finally(() => binding.callbacks.delete(callback)).catch(() => { });
+        return callback;
+    }
+    current() {
+        const binding = this.turn;
+        if (!binding?.accepting)
+            throw new AgentError("INVALID_PARENT", "The hosted tool is not bound to an active task.");
+        this.assertCurrent(binding);
+        return binding;
+    }
+    assertCurrent(binding) {
+        if (!binding.accepting || this.turn !== binding
+            || this.coordinator.parentContext(this.input.token).taskId !== binding.taskId) {
+            throw new AgentError("INVALID_PARENT", "The hosted tool is no longer bound to its invoking task.");
+        }
+    }
+    stopAdmission(binding) {
+        binding.accepting = false;
+        for (const controller of binding.waits)
+            controller.abort();
+    }
+    isSelfOrAncestor(candidateId, taskId) {
+        let current = this.coordinator.snapshot(taskId);
+        for (;;) {
+            if (current.taskId === candidateId)
+                return true;
+            if (!current.parentTaskId)
+                return false;
+            current = this.coordinator.snapshot(current.parentTaskId);
+        }
+    }
+}
+//# sourceMappingURL=hosted.js.map

package/dist/sdk/hosted.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted.js","sourceRoot":"","sources":["../../src/sdk/hosted.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAK1C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAS/E,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;AAC1B,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;AAC/D,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;AAC1F,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC;AAE5D,MAAM,OAAO,gBAAgB;IAIR,WAAW;IACX,KAAK;IACL,UAAU;IALrB,IAAI,CAAe;IAE3B,YACmB,WAAwB,EACxB,KAAkB,EAClB,UAA2B;2BAF3B,WAAW;qBACX,KAAK;0BACL,UAAU;IAC1B,CAAC;IAEJ,OAAO;QACL,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAC3F,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,SAAS;QACP,IAAI,IAAI,CAAC,IAAI,EAAE,SAAS;YAAE,MAAM,IAAI,UAAU,CAAC,cAAc,EAAE,kCAAkC,CAAC,CAAC;QACnG,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpE,IAAI,CAAC,IAAI,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;IAClF,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QACzB,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAC9C,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;YAAE,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC;IAChD,CAAC;IAED,gBAAgB;QACd,IAAI,IAAI,CAAC,IAAI;YAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,IAAI;YAAE,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACpE,CAAC;IAEO,gBAAgB,CAAC,MAAqD;QAC5E,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAC1B,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,WAAW;YACxC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,YAAY;YAC1C,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO;YAChC,KAAK,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,EAAE;SAChC,CAAC;IAC3B,CAAC;IAEO,KAAK;QACX,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,IAAI,EAAE,CAAC;QACjD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAA0B,CAAC;QACjE,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YACnE,GAAG;YACH,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC,CAAC,CAAC;QACJ,OAAO;YACL,SAAS,EAAE;gBACT,WAAW,EAAE,gHAAgH,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE;gBAC3J,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;gBAChG,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAC,OAAO,EAAC,EAAE;oBAC5C,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;oBAC3C,MAAM,KAAK,GAAG,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;oBACnG,IAAI,CAAC,KAAK;wBAAE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,8DAA8D,CAAC,CAAC;oBACnH,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBAC3D,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;oBAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;wBACnC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE;wBAChD,GAAG;wBACH,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG;wBACnB,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK;qBAC9B,CAAC,CAAC;oBACH,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,KAAM,EAAE,CAAC;gBACzF,CAAC,CAAC;aACH;YACD,UAAU,EAAE;gBACV,WAAW,EAAE,uDAAuD;gBACpE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;gBACtG,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAC,OAAO,EAAC,EAAE;oBAC5C,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBAC7B,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;oBAC5B,MAAM,iBAAiB,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;oBAC5G,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBAChH,OAAO;wBACL,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,SAAS,EAAE,OAAO,CAAC,SAAS;wBAC5B,iBAAiB;wBACjB,iBAAiB,EAAE,OAAO,CAAC,QAAQ,IAAI,iBAAiB;qBACzD,CAAC;gBACJ,CAAC,CAAC;aACH;YACD,UAAU,EAAE;gBACV,WAAW,EAAE,8FAA8F;gBAC3G,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;gBACpF,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAC,OAAO,EAAC,EAAE;oBAC5C,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;oBAC5B,IAAI,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;wBACxD,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,gEAAgE,CAAC,CAAC;oBAC3G,CAAC;oBACD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;oBACzC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;oBAC9B,IAAI,CAAC;wBACH,OAAO,MAAM,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;oBAC7G,CAAC;4BAAS,CAAC;wBACT,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;oBACnC,CAAC;gBACH,CAAC,CAAC;aACH;YACD,YAAY,EAAE;gBACZ,WAAW,EAAE,4CAA4C;gBACzD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;gBACtD,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAC,OAAO,EAAC,EAAE;oBAC5C,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;oBAC5B,OAAO,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACjD,CAAC,CAAC;aACH;YACD,WAAW,EAAE;gBACX,WAAW,EAAE,qDAAqD;gBAClE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;gBACzD,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAC,OAAO,EAAC,EAAE;oBAC5C,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;oBAC5B,OAAO,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBAC3D,CAAC,CAAC;aACH;YACD,YAAY,EAAE;gBACZ,WAAW,EAAE,0EAA0E;gBACvF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;gBACtD,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAC,OAAO,EAAC,EAAE;oBAC5C,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;oBAC5B,IAAI,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;wBACxD,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,8DAA8D,CAAC,CAAC;oBACzG,CAAC;oBACD,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBAC5C,OAAO,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACjD,CAAC,CAAC;aACH;YACD,aAAa,EAAE;gBACb,WAAW,EAAE,qEAAqE;gBAClF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;gBACnF,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAC,OAAO,EAAC,EAAE;oBAC5C,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;oBAC5B,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,OAA0B,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACpG,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAa,EAAE,CAAC;gBACjE,CAAC,CAAC;aACH;SACF,CAAC;IACJ,CAAC;IAEO,MAAM,CAAI,SAA+C;QAC/D,IAAI,OAAoB,CAAC;QACzB,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;YAC9E,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAChC,KAAK,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAChF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,OAAO;QACb,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;QAC1B,IAAI,CAAC,OAAO,EAAE,SAAS;YAAE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,iDAAiD,CAAC,CAAC;QACnH,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,aAAa,CAAC,OAAoB;QACxC,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;eAC1C,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YAChF,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,0DAA0D,CAAC,CAAC;QACrG,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,OAAoB;QACxC,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC;QAC1B,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,KAAK;YAAE,UAAU,CAAC,KAAK,EAAE,CAAC;IAC7D,CAAC;IAEO,gBAAgB,CAAC,WAAmB,EAAE,MAAc;QAC1D,IAAI,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAChD,SAAS,CAAC;YACR,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW;gBAAE,OAAO,IAAI,CAAC;YAChD,IAAI,CAAC,OAAO,CAAC,YAAY;gBAAE,OAAO,KAAK,CAAC;YACxC,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;CACF","sourcesContent":["import { z } from \"zod\";\nimport type { ExecutionDefinition } from \"../adapters/types.js\";\nimport type { ApprovalContent } from \"../approvals/types.js\";\nimport { AgentError } from \"../errors.js\";\nimport type { Coordinator } from \"../runtime/coordinator.js\";\nimport type { DriverInput } from \"../runtime/types.js\";\nimport type { AgentDefinition, ToolDefinition } from \"./types.js\";\nimport { hostedToolNames } from \"./execution-definition.js\";\nimport { markHostedError } from \"./hosted-error.js\";\nimport { observeTask } from \"./execution-observation.js\";\nimport { delivery, validateCwd, validatePrompt } from \"./execution-options.js\";\n\ntype TurnBinding = {\n  readonly taskId: string;\n  accepting: boolean;\n  readonly waits: Set<AbortController>;\n  readonly callbacks: Set<Promise<unknown>>;\n};\n\nconst prompt = z.string();\nconst deliverySchema = z.enum([\"queue\", \"steer\", \"interrupt\"]);\nconst approvalValue = z.union([z.string(), z.number(), z.boolean(), z.array(z.string())]);\nconst approvalContent = z.record(z.string(), approvalValue);\n\nexport class HostedDelegation {\n  private turn?: TurnBinding;\n\n  constructor(\n    private readonly coordinator: Coordinator,\n    private readonly input: DriverInput,\n    private readonly definition: AgentDefinition,\n  ) {}\n\n  prepare(): ExecutionDefinition {\n    if (!Object.keys(this.definition.subagents ?? {}).length) return this.nativeDefinition({});\n    return this.nativeDefinition(this.tools());\n  }\n\n  beginTurn(): void {\n    if (this.turn?.accepting) throw new AgentError(\"SESSION_BUSY\", \"A hosted turn is already active.\");\n    const { taskId } = this.coordinator.parentContext(this.input.token);\n    this.turn = { taskId, accepting: true, waits: new Set(), callbacks: new Set() };\n  }\n\n  async finishTurn(): Promise<void> {\n    const turn = this.turn;\n    if (!turn) return;\n    this.stopAdmission(turn);\n    await Promise.allSettled([...turn.callbacks]);\n    if (this.turn === turn) this.turn = undefined;\n  }\n\n  stopManagedWaits(): void {\n    if (this.turn) this.stopAdmission(this.turn);\n  }\n\n  async drain(): Promise<void> {\n    if (this.turn) await Promise.allSettled([...this.turn.callbacks]);\n  }\n\n  private nativeDefinition(hosted: Readonly<Record<string, ToolDefinition<any>>>): ExecutionDefinition {\n    return {\n      name: this.definition.name,\n      description: this.definition.description,\n      instructions: this.definition.instructions,\n      harness: this.definition.harness,\n      tools: { ...(this.definition.tools ?? {}), ...hosted },\n    } as ExecutionDefinition;\n  }\n\n  private tools(): Record<(typeof hostedToolNames)[number], ToolDefinition<any>> {\n    const children = this.definition.subagents ?? {};\n    const childKeys = Object.keys(children) as [string, ...string[]];\n    const childCatalog = Object.entries(children).map(([key, child]) => ({\n      key,\n      name: child.name,\n      description: child.description,\n    }));\n    return {\n      agent_run: {\n        description: `Start one directly declared child agent and return its admitted task and session. Available direct children: ${JSON.stringify(childCatalog)}`,\n        inputSchema: z.object({ agent: z.enum(childKeys), prompt, cwd: z.string().optional() }).strict(),\n        execute: input => this.invoke(async binding => {\n          validatePrompt(input.prompt);\n          const children = this.definition.subagents;\n          const child = children && Object.hasOwn(children, input.agent) ? children[input.agent] : undefined;\n          if (!child) throw new AgentError(\"INVALID_PARENT\", \"This subagent is not available in the active parent context.\");\n          const cwd = await validateCwd(input.cwd ?? this.input.cwd);\n          this.assertCurrent(binding);\n          const receipt = this.coordinator.run({\n            reference: { kind: \"inline\", definition: child },\n            cwd,\n            env: this.input.env,\n            prompt: input.prompt,\n            parentToken: this.input.token,\n          });\n          return { taskId: receipt.taskId, sessionId: receipt.sessionId, state: receipt.state! };\n        }),\n      },\n      agent_send: {\n        description: \"Send a follow-up to an existing hosted child session.\",\n        inputSchema: z.object({ sessionId: z.string(), prompt, delivery: deliverySchema.optional() }).strict(),\n        execute: input => this.invoke(async binding => {\n          validatePrompt(input.prompt);\n          this.assertCurrent(binding);\n          const requestedDelivery = delivery(input.delivery === undefined ? undefined : { delivery: input.delivery });\n          const receipt = await this.coordinator.send(input.sessionId, input.prompt, requestedDelivery, this.input.token);\n          return {\n            taskId: receipt.taskId,\n            sessionId: receipt.sessionId,\n            requestedDelivery,\n            effectiveDelivery: receipt.delivery ?? requestedDelivery,\n          };\n        }),\n      },\n      agent_wait: {\n        description: \"Wait for the next complete response, approval request, or terminal outcome of a hosted task.\",\n        inputSchema: z.object({ taskId: z.string(), after: z.string().optional() }).strict(),\n        execute: input => this.invoke(async binding => {\n          this.assertCurrent(binding);\n          if (this.isSelfOrAncestor(input.taskId, binding.taskId)) {\n            throw new AgentError(\"INVALID_PARENT\", \"A hosted callback cannot wait for its own or an ancestor task.\");\n          }\n          const controller = new AbortController();\n          binding.waits.add(controller);\n          try {\n            return await observeTask(this.coordinator, input.taskId, input.after, this.input.token, controller.signal);\n          } finally {\n            binding.waits.delete(controller);\n          }\n        }),\n      },\n      agent_status: {\n        description: \"Read a detached snapshot of a hosted task.\",\n        inputSchema: z.object({ taskId: z.string() }).strict(),\n        execute: input => this.invoke(async binding => {\n          this.assertCurrent(binding);\n          return this.coordinator.snapshot(input.taskId);\n        }),\n      },\n      agent_queue: {\n        description: \"Read a detached snapshot of a hosted session queue.\",\n        inputSchema: z.object({ sessionId: z.string() }).strict(),\n        execute: input => this.invoke(async binding => {\n          this.assertCurrent(binding);\n          return this.coordinator.sessionSnapshot(input.sessionId);\n        }),\n      },\n      agent_cancel: {\n        description: \"Cancel a hosted task and its descendants after native stop is confirmed.\",\n        inputSchema: z.object({ taskId: z.string() }).strict(),\n        execute: input => this.invoke(async binding => {\n          this.assertCurrent(binding);\n          if (this.isSelfOrAncestor(input.taskId, binding.taskId)) {\n            throw new AgentError(\"INVALID_PARENT\", \"A hosted callback cannot cancel its own or an ancestor task.\");\n          }\n          await this.coordinator.cancel(input.taskId);\n          return this.coordinator.snapshot(input.taskId);\n        }),\n      },\n      agent_respond: {\n        description: \"Answer one pending permission request owned by a strict descendant.\",\n        inputSchema: z.object({ requestId: z.string(), content: approvalContent }).strict(),\n        execute: input => this.invoke(async binding => {\n          this.assertCurrent(binding);\n          await this.coordinator.respond(input.requestId, input.content as ApprovalContent, this.input.token);\n          return { requestId: input.requestId, answered: true as const };\n        }),\n      },\n    };\n  }\n\n  private invoke<T>(operation: (binding: TurnBinding) => Promise<T>): Promise<T> {\n    let binding: TurnBinding;\n    try {\n      binding = this.current();\n    } catch (error) {\n      return Promise.reject(markHostedError(error));\n    }\n    const callback = Promise.resolve().then(() => operation(binding)).catch(error => {\n      throw markHostedError(error);\n    });\n    binding.callbacks.add(callback);\n    void callback.finally(() => binding.callbacks.delete(callback)).catch(() => {});\n    return callback;\n  }\n\n  private current(): TurnBinding {\n    const binding = this.turn;\n    if (!binding?.accepting) throw new AgentError(\"INVALID_PARENT\", \"The hosted tool is not bound to an active task.\");\n    this.assertCurrent(binding);\n    return binding;\n  }\n\n  private assertCurrent(binding: TurnBinding): void {\n    if (!binding.accepting || this.turn !== binding\n      || this.coordinator.parentContext(this.input.token).taskId !== binding.taskId) {\n      throw new AgentError(\"INVALID_PARENT\", \"The hosted tool is no longer bound to its invoking task.\");\n    }\n  }\n\n  private stopAdmission(binding: TurnBinding): void {\n    binding.accepting = false;\n    for (const controller of binding.waits) controller.abort();\n  }\n\n  private isSelfOrAncestor(candidateId: string, taskId: string): boolean {\n    let current = this.coordinator.snapshot(taskId);\n    for (;;) {\n      if (current.taskId === candidateId) return true;\n      if (!current.parentTaskId) return false;\n      current = this.coordinator.snapshot(current.parentTaskId);\n    }\n  }\n}\n"]}

package/dist/sdk/permission-validation.js

@@ -3,6 +3,9 @@ const fields = {
     codex: Object.freeze(["approvalPolicy", "sandboxMode", "networkAccessEnabled"]),
     claudeCode: Object.freeze(["permissionMode", "allowedTools", "disallowedTools"]),
     fx: Object.freeze(["permissionMode"]),
+    opencode: Object.freeze([]),
+    copilot: Object.freeze([]),
+    cursor: Object.freeze(["sandboxMode"]),
 };
 const allFields = new Set(Object.values(fields).flat());
 export function permissionOptionFields(kind) {
@@ -48,7 +51,13 @@ export function validateHarnessPermissions(kind, value) {
         }
         return;
     }
-    if (value.permissionMode !== undefined && !["ask", "auto", "full-access"].includes(value.permissionMode)) {
+    if (kind === "cursor") {
+        if (value.sandboxMode !== undefined && !["enabled", "disabled"].includes(value.sandboxMode)) {
+            invalid("Cursor sandboxMode must be enabled or disabled.");
+        }
+        return;
+    }
+    if (kind === "fx" && value.permissionMode !== undefined && !["ask", "auto", "full-access"].includes(value.permissionMode)) {
         invalid("fx permissionMode must be ask, auto, or full-access.");
     }
 }

package/dist/sdk/permission-validation.js.map

@@ -1 +1 @@
-{"version":3,"file":"permission-validation.js","sourceRoot":"","sources":["../../src/sdk/permission-validation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE1C,MAAM,MAAM,GAAG;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,aAAa,EAAE,sBAAsB,CAAC,CAAC;IAC/E,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,cAAc,EAAE,iBAAiB,CAAC,CAAC;IAChF,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,gBAAgB,CAAC,CAAC;CACoB,CAAC;AAE5D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAExD,MAAM,UAAU,sBAAsB,CAAC,IAAiB;IACtD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,0BAA0B,CAAC,IAAiB,EAAE,KAAwC;IACpG,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACvF,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAwB,CAAC,EAAE,CAAC;YACzH,OAAO,CAAC,+DAA+D,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,CAAC,WAAW,EAAE,iBAAiB,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAqB,CAAC,EAAE,CAAC;YACrI,OAAO,CAAC,8EAA8E,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,KAAK,CAAC,oBAAoB,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;YAChG,OAAO,CAAC,+CAA+C,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,KAAK,CAAC,oBAAoB,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,iBAAiB,EAAE,CAAC;YACxF,OAAO,CAAC,kEAAkE,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;QAC1B,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAwB,CAAC,EAAE,CAAC;YAC/J,OAAO,CAAC,uCAAuC,CAAC,CAAC;QACnD,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,iBAAiB,CAAU,EAAE,CAAC;YACjE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,OAAO,CAAC,UAAU,KAAK,wCAAwC,CAAC,CAAC;YAC5F,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;gBAClD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC1B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;oBAC7C,OAAO,CAAC,UAAU,KAAK,wCAAwC,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAwB,CAAC,EAAE,CAAC;QACnH,OAAO,CAAC,sDAAsD,CAAC,CAAC;IAClE,CAAC;AACH,CAAC","sourcesContent":["import type { HarnessKind } from \"./types.js\";\nimport { invalid } from \"./validation.js\";\n\nconst fields = {\n  codex: Object.freeze([\"approvalPolicy\", \"sandboxMode\", \"networkAccessEnabled\"]),\n  claudeCode: Object.freeze([\"permissionMode\", \"allowedTools\", \"disallowedTools\"]),\n  fx: Object.freeze([\"permissionMode\"]),\n} as const satisfies Record<HarnessKind, readonly string[]>;\n\nconst allFields = new Set(Object.values(fields).flat());\n\nexport function permissionOptionFields(kind: HarnessKind): readonly string[] {\n  return fields[kind];\n}\n\n/** Validates only native permission fields, ignoring unrelated caller-owned fields. */\nexport function validateHarnessPermissions(kind: HarnessKind, value: Readonly<Record<string, unknown>>): void {\n  const supported = new Set<string>(fields[kind]);\n  if ([...allFields].some(field => Object.hasOwn(value, field) && !supported.has(field))) {\n    invalid(\"Unknown configuration field.\");\n  }\n\n  if (kind === \"codex\") {\n    if (value.approvalPolicy !== undefined && ![\"never\", \"on-request\", \"untrusted\"].includes(value.approvalPolicy as string)) {\n      invalid(\"Codex approvalPolicy must be never, on-request, or untrusted.\");\n    }\n    if (value.sandboxMode !== undefined && ![\"read-only\", \"workspace-write\", \"danger-full-access\"].includes(value.sandboxMode as string)) {\n      invalid(\"Codex sandboxMode must be read-only, workspace-write, or danger-full-access.\");\n    }\n    if (value.networkAccessEnabled !== undefined && typeof value.networkAccessEnabled !== \"boolean\") {\n      invalid(\"Codex networkAccessEnabled must be a boolean.\");\n    }\n    if (value.networkAccessEnabled !== undefined && value.sandboxMode !== \"workspace-write\") {\n      invalid(\"Codex networkAccessEnabled requires sandboxMode workspace-write.\");\n    }\n    return;\n  }\n\n  if (kind === \"claudeCode\") {\n    if (value.permissionMode !== undefined && ![\"default\", \"acceptEdits\", \"bypassPermissions\", \"plan\", \"dontAsk\", \"auto\"].includes(value.permissionMode as string)) {\n      invalid(\"Claude permissionMode is unsupported.\");\n    }\n    for (const field of [\"allowedTools\", \"disallowedTools\"] as const) {\n      const rules = value[field];\n      if (rules === undefined) continue;\n      if (!Array.isArray(rules)) invalid(`Claude ${field} must be an array of nonempty strings.`);\n      for (let index = 0; index < rules.length; index++) {\n        const rule = rules[index];\n        if (typeof rule !== \"string\" || !rule.trim()) {\n          invalid(`Claude ${field} must be an array of nonempty strings.`);\n        }\n      }\n    }\n    return;\n  }\n\n  if (value.permissionMode !== undefined && ![\"ask\", \"auto\", \"full-access\"].includes(value.permissionMode as string)) {\n    invalid(\"fx permissionMode must be ask, auto, or full-access.\");\n  }\n}\n"]}
+{"version":3,"file":"permission-validation.js","sourceRoot":"","sources":["../../src/sdk/permission-validation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE1C,MAAM,MAAM,GAAG;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,aAAa,EAAE,sBAAsB,CAAC,CAAC;IAC/E,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,cAAc,EAAE,iBAAiB,CAAC,CAAC;IAChF,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,gBAAgB,CAAC,CAAC;IACrC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC;CACmB,CAAC;AAE5D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAExD,MAAM,UAAU,sBAAsB,CAAC,IAAiB;IACtD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,0BAA0B,CAAC,IAAiB,EAAE,KAAwC;IACpG,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACvF,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAwB,CAAC,EAAE,CAAC;YACzH,OAAO,CAAC,+DAA+D,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,CAAC,WAAW,EAAE,iBAAiB,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAqB,CAAC,EAAE,CAAC;YACrI,OAAO,CAAC,8EAA8E,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,KAAK,CAAC,oBAAoB,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;YAChG,OAAO,CAAC,+CAA+C,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,KAAK,CAAC,oBAAoB,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,iBAAiB,EAAE,CAAC;YACxF,OAAO,CAAC,kEAAkE,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;QAC1B,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAwB,CAAC,EAAE,CAAC;YAC/J,OAAO,CAAC,uCAAuC,CAAC,CAAC;QACnD,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,iBAAiB,CAAU,EAAE,CAAC;YACjE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,OAAO,CAAC,UAAU,KAAK,wCAAwC,CAAC,CAAC;YAC5F,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;gBAClD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC1B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;oBAC7C,OAAO,CAAC,UAAU,KAAK,wCAAwC,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAqB,CAAC,EAAE,CAAC;YACtG,OAAO,CAAC,iDAAiD,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAwB,CAAC,EAAE,CAAC;QACpI,OAAO,CAAC,sDAAsD,CAAC,CAAC;IAClE,CAAC;AACH,CAAC","sourcesContent":["import type { HarnessKind } from \"./types.js\";\nimport { invalid } from \"./validation.js\";\n\nconst fields = {\n  codex: Object.freeze([\"approvalPolicy\", \"sandboxMode\", \"networkAccessEnabled\"]),\n  claudeCode: Object.freeze([\"permissionMode\", \"allowedTools\", \"disallowedTools\"]),\n  fx: Object.freeze([\"permissionMode\"]),\n  opencode: Object.freeze([]),\n  copilot: Object.freeze([]),\n  cursor: Object.freeze([\"sandboxMode\"]),\n} as const satisfies Record<HarnessKind, readonly string[]>;\n\nconst allFields = new Set(Object.values(fields).flat());\n\nexport function permissionOptionFields(kind: HarnessKind): readonly string[] {\n  return fields[kind];\n}\n\n/** Validates only native permission fields, ignoring unrelated caller-owned fields. */\nexport function validateHarnessPermissions(kind: HarnessKind, value: Readonly<Record<string, unknown>>): void {\n  const supported = new Set<string>(fields[kind]);\n  if ([...allFields].some(field => Object.hasOwn(value, field) && !supported.has(field))) {\n    invalid(\"Unknown configuration field.\");\n  }\n\n  if (kind === \"codex\") {\n    if (value.approvalPolicy !== undefined && ![\"never\", \"on-request\", \"untrusted\"].includes(value.approvalPolicy as string)) {\n      invalid(\"Codex approvalPolicy must be never, on-request, or untrusted.\");\n    }\n    if (value.sandboxMode !== undefined && ![\"read-only\", \"workspace-write\", \"danger-full-access\"].includes(value.sandboxMode as string)) {\n      invalid(\"Codex sandboxMode must be read-only, workspace-write, or danger-full-access.\");\n    }\n    if (value.networkAccessEnabled !== undefined && typeof value.networkAccessEnabled !== \"boolean\") {\n      invalid(\"Codex networkAccessEnabled must be a boolean.\");\n    }\n    if (value.networkAccessEnabled !== undefined && value.sandboxMode !== \"workspace-write\") {\n      invalid(\"Codex networkAccessEnabled requires sandboxMode workspace-write.\");\n    }\n    return;\n  }\n\n  if (kind === \"claudeCode\") {\n    if (value.permissionMode !== undefined && ![\"default\", \"acceptEdits\", \"bypassPermissions\", \"plan\", \"dontAsk\", \"auto\"].includes(value.permissionMode as string)) {\n      invalid(\"Claude permissionMode is unsupported.\");\n    }\n    for (const field of [\"allowedTools\", \"disallowedTools\"] as const) {\n      const rules = value[field];\n      if (rules === undefined) continue;\n      if (!Array.isArray(rules)) invalid(`Claude ${field} must be an array of nonempty strings.`);\n      for (let index = 0; index < rules.length; index++) {\n        const rule = rules[index];\n        if (typeof rule !== \"string\" || !rule.trim()) {\n          invalid(`Claude ${field} must be an array of nonempty strings.`);\n        }\n      }\n    }\n    return;\n  }\n\n  if (kind === \"cursor\") {\n    if (value.sandboxMode !== undefined && ![\"enabled\", \"disabled\"].includes(value.sandboxMode as string)) {\n      invalid(\"Cursor sandboxMode must be enabled or disabled.\");\n    }\n    return;\n  }\n\n  if (kind === \"fx\" && value.permissionMode !== undefined && ![\"ask\", \"auto\", \"full-access\"].includes(value.permissionMode as string)) {\n    invalid(\"fx permissionMode must be ask, auto, or full-access.\");\n  }\n}\n"]}

package/dist/sdk/runner.d.ts

@@ -0,0 +1,5 @@
+import { type NativeOpener } from './execution-driver.js';
+import type { Runner, RunnerOptions } from './execution-types.js';
+export declare function createRunner(options?: RunnerOptions): Runner;
+/** Internal test seam replacing only the external native adapter boundary. */
+export declare function createRunnerWithNativeOpener(options: RunnerOptions | undefined, open: NativeOpener): Runner;