visionclaw 0.1.219-beta.0 → 0.1.219-dev.codex-issue-2805-worker-runtime.2

package/dist/threads/ipc.d.ts

@@ -12,7 +12,9 @@ import type { PublicThreadActivity } from "../agent/public-activity.js";
 import type { CommandMessage, DeliveryKind, DeliveryTarget, MessageAttachment } from "../channels/interface.js";
 import type { SignedLabRuntimePolicyEnvelope } from "./lab-runtime-policy.js";
 import type { FinAppCredentials } from "../finapp-credentials.js";
+import type { ExecutionInput, ExecutionRecord } from "./execution-store.js";
 import type { AgentFeedback } from "../agent/feedback.js";
+import type { ForemanCommand, ForemanCommandResult } from "./foreman-protocol.js";
 /** Deliver an inbound message to the worker for processing. */
 export interface IpcMessageDeliver {
     type: "message";
@@ -58,7 +60,39 @@ export interface IpcLabRuntimeCredentials {
     credentials?: FinAppCredentials;
     errorMessage?: string;
 }
-export type MainToWorkerMessage = IpcMessageDeliver | IpcShutdown | IpcReplyResult | IpcLabRuntimeCredentials;
+/**
+ * Supplementary input for the worker's internal execution (#2805 1c). The
+ * host has already stored it; the worker injects it at its next boundary and
+ * reports `input-applied`.
+ */
+export interface IpcExecutionInput {
+    type: "execution-input";
+    executionId: string;
+    inputSeq: number;
+    questionId: string | null;
+    text: string;
+}
+/** The Foreman host's answer to a conversational worker's background-task command (#2805 stage 3). */
+export interface IpcForemanResponse {
+    type: "foreman-response";
+    requestId: string;
+    result: ForemanCommandResult;
+}
+/**
+ * The host's answer to `execution-bootstrap-ready`: the admitted record this
+ * executor runs, read by the host from its ledger. The worker never opens the
+ * ledger itself.
+ */
+export interface IpcExecutionStart {
+    type: "execution-start";
+    record: ExecutionRecord;
+    unfinishedTools: {
+        toolName: string;
+        callId: string;
+    }[];
+    pendingInputs: ExecutionInput[];
+}
+export type MainToWorkerMessage = IpcMessageDeliver | IpcShutdown | IpcReplyResult | IpcLabRuntimeCredentials | IpcExecutionInput | IpcForemanResponse | IpcExecutionStart;
 /** Worker has initialized and is ready to receive messages. */
 export interface IpcReady {
     type: "ready";
@@ -79,6 +113,17 @@ export interface IpcLabRuntimeBootstrapFailed {
     labId: number;
     errorMessage: string;
 }
+/**
+ * The LabRun lease is gone: Fin-App cancelled, archived or reassigned the run
+ * (#2805 1d). The worker is stopping; the host records the cancel request and
+ * confirms the executor stopped before another writer may use the workspace.
+ */
+export interface IpcLabRuntimeLeaseLost {
+    type: "lab-runtime-lease-lost";
+    threadId: string;
+    runId: string;
+    errorMessage: string;
+}
 /** Worker sends a reply (from notify_user or other outbound paths). */
 export interface IpcReply {
     type: "reply";
@@ -132,10 +177,71 @@ export interface IpcTurnComplete {
     type: "turn-complete";
     threadId: string;
 }
-export type WorkerToMainMessage = IpcReady | IpcLabRuntimeBootstrapReady | IpcLabRuntimeBootstrapFailed | IpcReply | IpcTyping | IpcStatus | IpcFeedback | IpcTurnComplete;
+/**
+ * Internal-execution reports (#2805 1c). The worker never writes the execution
+ * store; the host validates each report against the executor it started.
+ */
+export type IpcExecutionReport = {
+    type: "execution-result";
+    executionId: string;
+    status: "succeeded" | "failed";
+    summary?: string;
+    data?: Record<string, unknown>;
+    artifactRefs?: string[];
+    error?: {
+        code: string;
+        message: string;
+    };
+    processedInputSeq: number;
+    usage?: Record<string, unknown>;
+} | {
+    type: "execution-progress";
+    executionId: string;
+    summary: string;
+} | {
+    type: "execution-question";
+    executionId: string;
+    text: string;
+    choices?: string[];
+    delivery?: "direct" | "review";
+} | {
+    type: "execution-input-applied";
+    executionId: string;
+    inputSeq: number;
+} | {
+    type: "execution-tool";
+    executionId: string;
+    callId: string;
+    toolName: string;
+    phase: "started" | "finished";
+}
+/** Accumulated task budget usage; the host keeps the authoritative copy. */
+ | {
+    type: "execution-usage";
+    executionId: string;
+    usage: Record<string, unknown>;
+};
+/** An execution worker is listening and asks the host for its admitted record. */
+export interface IpcExecutionBootstrapReady {
+    type: "execution-bootstrap-ready";
+    threadId: string;
+}
+export type WorkerToMainMessage = IpcReady | IpcLabRuntimeBootstrapReady | IpcLabRuntimeBootstrapFailed | IpcLabRuntimeLeaseLost | IpcReply | IpcTyping | IpcStatus | IpcFeedback | IpcTurnComplete | IpcExecutionReport | IpcExecutionBootstrapReady | IpcForemanRequest;
+/**
+ * A conversational worker's background-task command for the Foreman host.
+ * The supervisor fills in the thread from the worker it talks to; internal
+ * executions are refused.
+ */
+export interface IpcForemanRequest {
+    type: "foreman-request";
+    requestId: string;
+    command: ForemanCommand;
+}
 /** Lightweight info about an active thread (used in cross-thread awareness). */
 export interface ActiveThreadInfo {
     threadId: string;
+    kind?: "conversation" | "execution";
+    taskId?: string;
     busy: boolean;
     taskDescription: string;
     lastActivityAt: string;

package/dist/threads/ipc.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ipc.d.ts","sourceRoot":"","sources":["../../src/threads/ipc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAChH,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAI1D,+DAA+D;AAC/D,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,SAAS,CAAC;IAChB,GAAG,EAAE,cAAc,CAAC;IACpB,wEAAwE;IACxE,gBAAgB,CAAC,EAAE,8BAA8B,CAAC;IAClD,oFAAoF;IACpF,qBAAqB,CAAC,EAAE,gBAAgB,EAAE,CAAC;CAC5C;AAED,uDAAuD;AACvD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,UAAU,CAAC;IACjB,sFAAsF;IACtF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,cAAc,CAAC;IACrB,gDAAgD;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,OAAO,CAAC;IACZ,6EAA6E;IAC7E,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,yBAAyB,CAAC;IAChC,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,mBAAmB,GAC3B,iBAAiB,GACjB,WAAW,GACX,cAAc,GACd,wBAAwB,CAAC;AAI7B,+DAA+D;AAC/D,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,gFAAgF;AAChF,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,6BAA6B,CAAC;IACpC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,6EAA6E;AAC7E,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,8BAA8B,CAAC;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,uEAAuE;AACvE,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,cAAc,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAClC,yDAAyD;IACzD,OAAO,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB;;;OAGG;IACH,eAAe,CAAC,EAAE,IAAI,CAAC;CACxB;AAED,uCAAuC;AACvC,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,cAAc,CAAC;CACxB;AAED,uEAAuE;AACvE,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,QAAQ,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,sCAAsC;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,uFAAuF;IACvF,QAAQ,CAAC,EAAE,oBAAoB,CAAC;CACjC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,aAAa,CAAC;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,eAAe,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,mBAAmB,GAC3B,QAAQ,GACR,2BAA2B,GAC3B,4BAA4B,GAC5B,QAAQ,GACR,SAAS,GACT,SAAS,GACT,WAAW,GACX,eAAe,CAAC;AAIpB,gFAAgF;AAChF,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAID,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,mBAAmB,CAOhF;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,mBAAmB,CAahF"}
+{"version":3,"file":"ipc.d.ts","sourceRoot":"","sources":["../../src/threads/ipc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAChH,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAIlF,+DAA+D;AAC/D,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,SAAS,CAAC;IAChB,GAAG,EAAE,cAAc,CAAC;IACpB,wEAAwE;IACxE,gBAAgB,CAAC,EAAE,8BAA8B,CAAC;IAClD,oFAAoF;IACpF,qBAAqB,CAAC,EAAE,gBAAgB,EAAE,CAAC;CAC5C;AAED,uDAAuD;AACvD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,UAAU,CAAC;IACjB,sFAAsF;IACtF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,cAAc,CAAC;IACrB,gDAAgD;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,OAAO,CAAC;IACZ,6EAA6E;IAC7E,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,yBAAyB,CAAC;IAChC,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,iBAAiB,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;CACd;AAED,sGAAsG;AACtG,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,kBAAkB,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,oBAAoB,CAAC;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,iBAAiB,CAAC;IACxB,MAAM,EAAE,eAAe,CAAC;IACxB,eAAe,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACxD,aAAa,EAAE,cAAc,EAAE,CAAC;CACjC;AAED,MAAM,MAAM,mBAAmB,GAC3B,iBAAiB,GACjB,WAAW,GACX,cAAc,GACd,wBAAwB,GACxB,iBAAiB,GACjB,kBAAkB,GAClB,iBAAiB,CAAC;AAItB,+DAA+D;AAC/D,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,gFAAgF;AAChF,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,6BAA6B,CAAC;IACpC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,6EAA6E;AAC7E,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,8BAA8B,CAAC;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,wBAAwB,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,uEAAuE;AACvE,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,cAAc,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAClC,yDAAyD;IACzD,OAAO,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB;;;OAGG;IACH,eAAe,CAAC,EAAE,IAAI,CAAC;CACxB;AAED,uCAAuC;AACvC,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,cAAc,CAAC;CACxB;AAED,uEAAuE;AACvE,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,QAAQ,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,sCAAsC;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,uFAAuF;IACvF,QAAQ,CAAC,EAAE,oBAAoB,CAAC;CACjC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,aAAa,CAAC;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,eAAe,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1E,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACzG;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACpE;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAA;CAAE,GACrH;IAAE,IAAI,EAAE,yBAAyB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC1E;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,GAAG,UAAU,CAAA;CAAE;AAClH,4EAA4E;GAC1E;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC;AAErF,kFAAkF;AAClF,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,2BAA2B,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,mBAAmB,GAC3B,QAAQ,GACR,2BAA2B,GAC3B,4BAA4B,GAC5B,sBAAsB,GACtB,QAAQ,GACR,SAAS,GACT,SAAS,GACT,WAAW,GACX,eAAe,GACf,kBAAkB,GAClB,0BAA0B,GAC1B,iBAAiB,CAAC;AAEtB;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,iBAAiB,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,cAAc,CAAC;CACzB;AAID,gFAAgF;AAChF,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,cAAc,GAAG,WAAW,CAAC;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAID,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,mBAAmB,CAUhF;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,mBAAmB,CAsBhF"}

package/dist/threads/ipc.js

@@ -16,7 +16,10 @@ export function isMainToWorkerMessage(data) {
     return msg.type === "message" ||
         msg.type === "shutdown" ||
         msg.type === "reply-result" ||
-        msg.type === "lab-runtime-credentials";
+        msg.type === "lab-runtime-credentials" ||
+        msg.type === "execution-input" ||
+        msg.type === "foreman-response" ||
+        msg.type === "execution-start";
 }
 export function isWorkerToMainMessage(data) {
     if (typeof data !== "object" || data === null)
@@ -25,10 +28,19 @@ export function isWorkerToMainMessage(data) {
     return (msg.type === "ready" ||
         msg.type === "lab-runtime-bootstrap-ready" ||
         msg.type === "lab-runtime-bootstrap-failed" ||
+        msg.type === "lab-runtime-lease-lost" ||
         msg.type === "reply" ||
         msg.type === "typing" ||
         msg.type === "status" ||
         msg.type === "feedback" ||
-        msg.type === "turn-complete");
+        msg.type === "turn-complete" ||
+        msg.type === "execution-result" ||
+        msg.type === "execution-progress" ||
+        msg.type === "execution-question" ||
+        msg.type === "execution-input-applied" ||
+        msg.type === "execution-tool" ||
+        msg.type === "foreman-request" ||
+        msg.type === "execution-usage" ||
+        msg.type === "execution-bootstrap-ready");
 }
 //# sourceMappingURL=ipc.js.map

package/dist/threads/ipc.js.map

@@ -1 +1 @@
-{"version":3,"file":"ipc.js","sourceRoot":"","sources":["../../src/threads/ipc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAyKH,8EAA8E;AAE9E,MAAM,UAAU,qBAAqB,CAAC,IAAa;IACjD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC5D,MAAM,GAAG,GAAG,IAA0B,CAAC;IACvC,OAAO,GAAG,CAAC,IAAI,KAAK,SAAS;QAC3B,GAAG,CAAC,IAAI,KAAK,UAAU;QACvB,GAAG,CAAC,IAAI,KAAK,cAAc;QAC3B,GAAG,CAAC,IAAI,KAAK,yBAAyB,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAa;IACjD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC5D,MAAM,GAAG,GAAG,IAA0B,CAAC;IACvC,OAAO,CACL,GAAG,CAAC,IAAI,KAAK,OAAO;QACpB,GAAG,CAAC,IAAI,KAAK,6BAA6B;QAC1C,GAAG,CAAC,IAAI,KAAK,8BAA8B;QAC3C,GAAG,CAAC,IAAI,KAAK,OAAO;QACpB,GAAG,CAAC,IAAI,KAAK,QAAQ;QACrB,GAAG,CAAC,IAAI,KAAK,QAAQ;QACrB,GAAG,CAAC,IAAI,KAAK,UAAU;QACvB,GAAG,CAAC,IAAI,KAAK,eAAe,CAC7B,CAAC;AACJ,CAAC"}
+{"version":3,"file":"ipc.js","sourceRoot":"","sources":["../../src/threads/ipc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAgQH,8EAA8E;AAE9E,MAAM,UAAU,qBAAqB,CAAC,IAAa;IACjD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC5D,MAAM,GAAG,GAAG,IAA0B,CAAC;IACvC,OAAO,GAAG,CAAC,IAAI,KAAK,SAAS;QAC3B,GAAG,CAAC,IAAI,KAAK,UAAU;QACvB,GAAG,CAAC,IAAI,KAAK,cAAc;QAC3B,GAAG,CAAC,IAAI,KAAK,yBAAyB;QACtC,GAAG,CAAC,IAAI,KAAK,iBAAiB;QAC9B,GAAG,CAAC,IAAI,KAAK,kBAAkB;QAC/B,GAAG,CAAC,IAAI,KAAK,iBAAiB,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAa;IACjD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC5D,MAAM,GAAG,GAAG,IAA0B,CAAC;IACvC,OAAO,CACL,GAAG,CAAC,IAAI,KAAK,OAAO;QACpB,GAAG,CAAC,IAAI,KAAK,6BAA6B;QAC1C,GAAG,CAAC,IAAI,KAAK,8BAA8B;QAC3C,GAAG,CAAC,IAAI,KAAK,wBAAwB;QACrC,GAAG,CAAC,IAAI,KAAK,OAAO;QACpB,GAAG,CAAC,IAAI,KAAK,QAAQ;QACrB,GAAG,CAAC,IAAI,KAAK,QAAQ;QACrB,GAAG,CAAC,IAAI,KAAK,UAAU;QACvB,GAAG,CAAC,IAAI,KAAK,eAAe;QAC5B,GAAG,CAAC,IAAI,KAAK,kBAAkB;QAC/B,GAAG,CAAC,IAAI,KAAK,oBAAoB;QACjC,GAAG,CAAC,IAAI,KAAK,oBAAoB;QACjC,GAAG,CAAC,IAAI,KAAK,yBAAyB;QACtC,GAAG,CAAC,IAAI,KAAK,gBAAgB;QAC7B,GAAG,CAAC,IAAI,KAAK,iBAAiB;QAC9B,GAAG,CAAC,IAAI,KAAK,iBAAiB;QAC9B,GAAG,CAAC,IAAI,KAAK,2BAA2B,CACzC,CAAC;AACJ,CAAC"}

package/dist/threads/lab-run-thread.d.ts

@@ -6,11 +6,9 @@
  * its own session, but tools and prompt sections are still assembled
  * process-wide.
  *
- * TODO: abstract thread-kind tool/prompt policy. This prefix check is a
- * one-off for `query_market_data` (and its prompt/skill copy). Workers already
- * isolate session state per threadId; what is missing is a kind → surface map
- * (default / fin-app discussion / LabRun / …) so Lab-only tools are not gated
- * by string prefix at each registration site.
+ * Lab-only tools are registered by the Lab adapter (see
+ * `applyLabRuntimePolicyToSurface`), not by this prefix. The prefix remains a
+ * defensive check inside those tools and in outbound tools such as notify.
  */
 export declare const LAB_RUN_THREAD_PREFIX = "fin-lab-run-";
 export declare function isLabRunThreadId(threadId: string | null | undefined): boolean;

package/dist/threads/lab-run-thread.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lab-run-thread.d.ts","sourceRoot":"","sources":["../../src/threads/lab-run-thread.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,eAAO,MAAM,qBAAqB,iBAAiB,CAAC;AAEpD,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAE7E"}
+{"version":3,"file":"lab-run-thread.d.ts","sourceRoot":"","sources":["../../src/threads/lab-run-thread.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,eAAO,MAAM,qBAAqB,iBAAiB,CAAC;AAEpD,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAE7E"}

package/dist/threads/lab-run-thread.js

@@ -6,11 +6,9 @@
  * its own session, but tools and prompt sections are still assembled
  * process-wide.
  *
- * TODO: abstract thread-kind tool/prompt policy. This prefix check is a
- * one-off for `query_market_data` (and its prompt/skill copy). Workers already
- * isolate session state per threadId; what is missing is a kind → surface map
- * (default / fin-app discussion / LabRun / …) so Lab-only tools are not gated
- * by string prefix at each registration site.
+ * Lab-only tools are registered by the Lab adapter (see
+ * `applyLabRuntimePolicyToSurface`), not by this prefix. The prefix remains a
+ * defensive check inside those tools and in outbound tools such as notify.
  */
 export const LAB_RUN_THREAD_PREFIX = "fin-lab-run-";
 export function isLabRunThreadId(threadId) {

package/dist/threads/lab-run-thread.js.map

@@ -1 +1 @@
-{"version":3,"file":"lab-run-thread.js","sourceRoot":"","sources":["../../src/threads/lab-run-thread.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,cAAc,CAAC;AAEpD,MAAM,UAAU,gBAAgB,CAAC,QAAmC;IAClE,OAAO,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;AACpF,CAAC"}
+{"version":3,"file":"lab-run-thread.js","sourceRoot":"","sources":["../../src/threads/lab-run-thread.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,cAAc,CAAC;AAEpD,MAAM,UAAU,gBAAgB,CAAC,QAAmC;IAClE,OAAO,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;AACpF,CAAC"}

package/dist/threads/lab-runtime-policy.d.ts

@@ -1,17 +1,12 @@
 import { z } from "zod";
-import type { VisionClawConfig } from "../config/types.js";
+import type { AdapterTool } from "../tools/adapter-tool.js";
 import type { RuntimeSurface } from "../agent/runtime-surface.js";
+import { type ActiveWorkerRuntimePolicy } from "./worker-runtime-policy.js";
+import { type SigningDomain } from "./execution-authority.js";
 export declare const LAB_RUNTIME_POLICY_META_KEY = "visionclawLabRuntimePolicy";
 export declare const LAB_RUNTIME_POLICY_ENV = "VISIONCLAW_LAB_RUNTIME_POLICY";
 export declare const LAB_RUNTIME_POLICY_FILE = "lab-runtime-policy.json";
 export declare const LabRuntimePolicyV1Schema: z.ZodObject<{
-    version: z.ZodLiteral<1>;
-    runId: z.ZodUUID;
-    labId: z.ZodNumber;
-    tenantId: z.ZodString;
-    bundlePath: z.ZodString;
-    bundleStoragePath: z.ZodOptional<z.ZodString>;
-    bundleDownloadPath: z.ZodOptional<z.ZodString>;
     prompt: z.ZodObject<{
         trustedOverlay: z.ZodDefault<z.ZodString>;
     }, z.core.$strict>;
@@ -27,6 +22,13 @@ export declare const LabRuntimePolicyV1Schema: z.ZodObject<{
     channels: z.ZodObject<{
         outbound: z.ZodTuple<[], null>;
     }, z.core.$strict>;
+    version: z.ZodLiteral<1>;
+    runId: z.ZodUUID;
+    labId: z.ZodNumber;
+    tenantId: z.ZodString;
+    bundlePath: z.ZodString;
+    bundleStoragePath: z.ZodOptional<z.ZodString>;
+    bundleDownloadPath: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>;
 export type LabRuntimePolicyV1 = z.infer<typeof LabRuntimePolicyV1Schema>;
 export interface SignedLabRuntimePolicyEnvelope {
@@ -41,22 +43,25 @@ export declare const LAB_RUNTIME_CODING_TOOLS: readonly ["read", "write", "edit"
 export declare const LAB_RUNTIME_INTERACTION_TOOLS: readonly ["wait", "computer_use_click", "computer_use_move", "computer_use_scroll", "computer_use_drag", "computer_use_type", "computer_use_key", "computer_use_screenshot"];
 export declare const LAB_RUNTIME_CONTROL_TOOLS: readonly ["query_market_data", "lab_run_control"];
 export declare const LAB_RUNTIME_ALLOWED_TOOLS: readonly ["read", "write", "edit", "grep", "find", "ls", "bash", "todo_write", "wait", "computer_use_click", "computer_use_move", "computer_use_scroll", "computer_use_drag", "computer_use_type", "computer_use_key", "computer_use_screenshot", "query_market_data", "lab_run_control"];
-/**
- * Claude Agent SDK 0.3.233+ omits todo/task-tracking tools from the default
- * surface on Opus 4.8 / Sonnet 5 and newer. Lab allowlists are explicit, so
- * `todo_write` must name both the legacy snapshot tool and the incremental
- * Task* tools the CLI actually emits.
- */
-export declare const CLAUDE_TODO_TRACKING_TOOLS: readonly ["TodoWrite", "TaskCreate", "TaskUpdate", "TaskGet", "TaskList"];
-export declare function resolvePiLabToolNames(toolNames: readonly string[]): string[];
-export declare function resolveClaudeLabNativeToolNames(toolNames: readonly string[]): string[];
 export declare const LAB_RUNTIME_ALLOWED_SKILLS: readonly ["browser-automation", "content-creation", "search", "web-design"];
 export declare const LAB_RUNTIME_ALLOWED_MCP: readonly ["playwright", "serpapi", "financial-tool"];
 export declare function parseLabRuntimePolicy(raw: unknown, threadId: string): LabRuntimePolicyV1;
-export declare function signLabRuntimePolicy(policy: LabRuntimePolicyV1, secret: string): SignedLabRuntimePolicyEnvelope;
-export declare function verifyLabRuntimePolicyEnvelope(raw: unknown, secret: string, threadId: string): ActiveLabRuntimePolicy;
+/** Sign with the host's Lab policy key, a domain separate from execution snapshots. */
+export declare function signLabRuntimePolicy(policy: LabRuntimePolicyV1, domain: SigningDomain): SignedLabRuntimePolicyEnvelope;
+export declare function verifyLabRuntimePolicyEnvelope(raw: unknown, publicKey: string, threadId: string): ActiveLabRuntimePolicy;
+/**
+ * Write a private local record of the verified policy for diagnostics. It is
+ * not re-read as authorization: the host keeps the policy it verified.
+ */
 export declare function writeWorkerLabRuntimePolicy(policy: ActiveLabRuntimePolicy, envelope?: SignedLabRuntimePolicyEnvelope): void;
-export declare function loadWorkerLabRuntimePolicy(threadId: string): ActiveLabRuntimePolicy | null;
-export declare function applyLabRuntimePolicyToConfig(config: VisionClawConfig, _active: ActiveLabRuntimePolicy): VisionClawConfig;
+/** Project only capabilities into the shared execution layer. */
+export declare function labRuntimePolicyToWorkerPolicy(active: ActiveLabRuntimePolicy): ActiveWorkerRuntimePolicy;
+/**
+ * The Lab adapter's restricted surface: the shared restrictions plus the Lab
+ * tool registrations. The policy allowlist decides which of them the engines
+ * expose; the engines never interpret Lab tool names.
+ */
 export declare function applyLabRuntimePolicyToSurface(surface: RuntimeSurface, active: ActiveLabRuntimePolicy): RuntimeSurface;
+/** Lab tool registrations supplied to the host; exported for the worker host only. */
+export declare const LAB_ADAPTER_TOOLS: readonly AdapterTool[];
 //# sourceMappingURL=lab-runtime-policy.d.ts.map

package/dist/threads/lab-runtime-policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lab-runtime-policy.d.ts","sourceRoot":"","sources":["../../src/threads/lab-runtime-policy.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAGlE,eAAO,MAAM,2BAA2B,+BAA+B,CAAC;AACxE,eAAO,MAAM,sBAAsB,kCAAkC,CAAC;AACtE,eAAO,MAAM,uBAAuB,4BAA4B,CAAC;AAIjE,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;kBAyB1B,CAAC;AAEZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,MAAM,WAAW,8BAA8B;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,eAAO,MAAM,wBAAwB,gFAS3B,CAAC;AACX,eAAO,MAAM,6BAA6B,8KAShC,CAAC;AACX,eAAO,MAAM,yBAAyB,mDAAoD,CAAC;AAC3F,eAAO,MAAM,yBAAyB,2RAI5B,CAAC;AAaX;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,2EAM7B,CAAC;AAaX,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAE5E;AAED,wBAAgB,+BAA+B,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAMtF;AACD,eAAO,MAAM,0BAA0B,6EAK7B,CAAC;AACX,eAAO,MAAM,uBAAuB,sDAI1B,CAAC;AAMX,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,kBAAkB,CAexF;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,GAAG,8BAA8B,CAO/G;AAED,wBAAgB,8BAA8B,CAC5C,GAAG,EAAE,OAAO,EACZ,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,sBAAsB,CAsBxB;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,sBAAsB,EAC9B,QAAQ,CAAC,EAAE,8BAA8B,GACxC,IAAI,CAON;AAED,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,GAAG,sBAAsB,GAAG,IAAI,CA0B1F;AAED,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,sBAAsB,GAAG,gBAAgB,CAazH;AAED,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,sBAAsB,GAC7B,cAAc,CAiBhB"}
+{"version":3,"file":"lab-runtime-policy.d.ts","sourceRoot":"","sources":["../../src/threads/lab-runtime-policy.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAGL,KAAK,yBAAyB,EAC/B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAA6B,KAAK,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzF,eAAO,MAAM,2BAA2B,+BAA+B,CAAC;AACxE,eAAO,MAAM,sBAAsB,kCAAkC,CAAC;AACtE,eAAO,MAAM,uBAAuB,4BAA4B,CAAC;AAEjE,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;kBAU1B,CAAC;AAEZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,MAAM,WAAW,8BAA8B;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,eAAO,MAAM,wBAAwB,gFAS3B,CAAC;AACX,eAAO,MAAM,6BAA6B,8KAShC,CAAC;AACX,eAAO,MAAM,yBAAyB,mDAAoD,CAAC;AAC3F,eAAO,MAAM,yBAAyB,2RAI5B,CAAC;AAEX,eAAO,MAAM,0BAA0B,6EAK7B,CAAC;AACX,eAAO,MAAM,uBAAuB,sDAI1B,CAAC;AAMX,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,kBAAkB,CAexF;AAED,uFAAuF;AACvF,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,aAAa,GAAG,8BAA8B,CAGtH;AAED,wBAAgB,8BAA8B,CAC5C,GAAG,EAAE,OAAO,EACZ,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,GACf,sBAAsB,CAoBxB;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,sBAAsB,EAC9B,QAAQ,CAAC,EAAE,8BAA8B,GACxC,IAAI,CAON;AAED,iEAAiE;AACjE,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,sBAAsB,GAAG,yBAAyB,CAMxG;AAKD;;;;GAIG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,sBAAsB,GAC7B,cAAc,CAEhB;AAED,sFAAsF;AACtF,eAAO,MAAM,iBAAiB,EAAE,SAAS,WAAW,EAAkB,CAAC"}

package/dist/threads/lab-runtime-policy.js

@@ -3,12 +3,14 @@ import fs from "node:fs";
 import path from "node:path";
 import { z } from "zod";
 import { getConfigDir } from "../config/index.js";
-import { isLabRunThreadId } from "./lab-run-thread.js";
+import { queryMarketDataTool } from "../tools/data-service.js";
+import { labRunControlTool } from "../tools/lab-run-control.js";
+import { WorkerRuntimePolicySchema, applyWorkerRuntimePolicyToSurface, } from "./worker-runtime-policy.js";
+import { signWith, verifySignature } from "./execution-authority.js";
 export const LAB_RUNTIME_POLICY_META_KEY = "visionclawLabRuntimePolicy";
 export const LAB_RUNTIME_POLICY_ENV = "VISIONCLAW_LAB_RUNTIME_POLICY";
 export const LAB_RUNTIME_POLICY_FILE = "lab-runtime-policy.json";
-const slugSchema = z.string().regex(/^[a-z0-9][a-z0-9._-]{0,63}$/);
-export const LabRuntimePolicyV1Schema = z.object({
+export const LabRuntimePolicyV1Schema = WorkerRuntimePolicySchema.extend({
     version: z.literal(1),
     runId: z.uuid(),
     labId: z.number().int().positive(),
@@ -18,21 +20,6 @@ export const LabRuntimePolicyV1Schema = z.object({
     bundleStoragePath: z.string().min(1).optional(),
     /** Signed fin-app download path for runtimes without the producer volume. */
     bundleDownloadPath: z.string().min(1).optional(),
-    prompt: z.object({
-        trustedOverlay: z.string().max(20_000).default(""),
-    }).strict(),
-    skills: z.object({
-        allowed: z.array(slugSchema).max(64).default([]),
-    }).strict(),
-    mcp: z.object({
-        staticServers: z.record(slugSchema, z.object({}).strict()).default({}),
-    }).strict(),
-    tools: z.object({
-        allowed: z.array(slugSchema).min(1).max(64),
-    }).strict(),
-    channels: z.object({
-        outbound: z.tuple([]),
-    }).strict(),
 }).strict();
 export const LAB_RUNTIME_CODING_TOOLS = [
     "read",
@@ -60,50 +47,6 @@ export const LAB_RUNTIME_ALLOWED_TOOLS = [
     ...LAB_RUNTIME_INTERACTION_TOOLS,
     ...LAB_RUNTIME_CONTROL_TOOLS,
 ];
-const PI_LAB_TOOL_NAMES = {
-    read: "visionclaw_read",
-    write: "visionclaw_write",
-    edit: "visionclaw_edit",
-    grep: "visionclaw_grep",
-    find: "visionclaw_find",
-    ls: "visionclaw_ls",
-    bash: "visionclaw_bash",
-    todo_write: "TodoWrite",
-};
-/**
- * Claude Agent SDK 0.3.233+ omits todo/task-tracking tools from the default
- * surface on Opus 4.8 / Sonnet 5 and newer. Lab allowlists are explicit, so
- * `todo_write` must name both the legacy snapshot tool and the incremental
- * Task* tools the CLI actually emits.
- */
-export const CLAUDE_TODO_TRACKING_TOOLS = [
-    "TodoWrite",
-    "TaskCreate",
-    "TaskUpdate",
-    "TaskGet",
-    "TaskList",
-];
-const CLAUDE_LAB_TOOL_NAMES = {
-    read: "Read",
-    write: "Write",
-    edit: "Edit",
-    grep: "Grep",
-    find: "Glob",
-    ls: "Glob",
-    bash: "Bash",
-    todo_write: CLAUDE_TODO_TRACKING_TOOLS,
-};
-export function resolvePiLabToolNames(toolNames) {
-    return [...new Set(toolNames.map((name) => PI_LAB_TOOL_NAMES[name] ?? name))];
-}
-export function resolveClaudeLabNativeToolNames(toolNames) {
-    return [...new Set(toolNames.flatMap((name) => {
-            const mapped = CLAUDE_LAB_TOOL_NAMES[name];
-            if (!mapped)
-                return [];
-            return typeof mapped === "string" ? [mapped] : [...mapped];
-        }))];
-}
 export const LAB_RUNTIME_ALLOWED_SKILLS = [
     "browser-automation",
     "content-creation",
@@ -137,25 +80,19 @@ export function parseLabRuntimePolicy(raw, threadId) {
     }
     return policy;
 }
-export function signLabRuntimePolicy(policy, secret) {
-    if (secret.length < 32)
-        throw new Error("Lab runtime policy signing authority is unavailable");
+/** Sign with the host's Lab policy key, a domain separate from execution snapshots. */
+export function signLabRuntimePolicy(policy, domain) {
     const payload = Buffer.from(JSON.stringify(policy), "utf8").toString("base64url");
-    return {
-        payload,
-        signature: crypto.createHmac("sha256", secret).update(payload).digest("base64url"),
-    };
+    return { payload, signature: signWith(domain, payload) };
 }
-export function verifyLabRuntimePolicyEnvelope(raw, secret, threadId) {
+export function verifyLabRuntimePolicyEnvelope(raw, publicKey, threadId) {
     const envelope = z.object({
         payload: z.string().min(1).max(200_000),
         signature: z.string().min(32).max(256),
     }).strict().parse(raw);
-    if (secret.length < 32)
+    if (!publicKey)
         throw new Error("Lab runtime policy signing authority is unavailable");
-    const expected = crypto.createHmac("sha256", secret).update(envelope.payload).digest();
-    const supplied = Buffer.from(envelope.signature, "base64url");
-    if (supplied.length !== expected.length || !crypto.timingSafeEqual(supplied, expected)) {
+    if (!verifySignature(publicKey, envelope.payload, envelope.signature)) {
         throw new Error("Lab runtime policy signature is invalid");
     }
     let decoded;
@@ -171,6 +108,10 @@ export function verifyLabRuntimePolicyEnvelope(raw, secret, threadId) {
         digest: crypto.createHash("sha256").update(envelope.payload).digest("hex"),
     };
 }
+/**
+ * Write a private local record of the verified policy for diagnostics. It is
+ * not re-read as authorization: the host keeps the policy it verified.
+ */
 export function writeWorkerLabRuntimePolicy(policy, envelope) {
     const target = path.join(getConfigDir(), LAB_RUNTIME_POLICY_FILE);
     const temp = `${target}.${process.pid}.tmp`;
@@ -179,60 +120,24 @@ export function writeWorkerLabRuntimePolicy(policy, envelope) {
     fs.renameSync(temp, target);
     fs.chmodSync(target, 0o600);
 }
-export function loadWorkerLabRuntimePolicy(threadId) {
-    if (!isLabRunThreadId(threadId))
-        return null;
-    const target = path.join(getConfigDir(), LAB_RUNTIME_POLICY_FILE);
-    if (!fs.existsSync(target))
-        throw new Error("Lab runtime policy is missing");
-    const parsed = z.object({
-        policy: LabRuntimePolicyV1Schema,
-        digest: z.string().regex(/^[0-9a-f]{64}$/),
-        envelope: z.object({ payload: z.string(), signature: z.string() }).strict().optional(),
-    }).strict().parse(JSON.parse(fs.readFileSync(target, "utf8")));
-    if (threadId !== `fin-lab-run-${parsed.policy.runId}`) {
-        throw new Error("Persisted Lab runtime policy does not match the worker thread");
-    }
-    const expectedDigest = parsed.envelope
-        ? crypto.createHash("sha256").update(parsed.envelope.payload).digest("hex")
-        : null;
-    if (!parsed.envelope || expectedDigest !== parsed.digest) {
-        throw new Error("Persisted Lab runtime policy integrity check failed");
-    }
-    const persistedPolicy = parseLabRuntimePolicy(JSON.parse(Buffer.from(parsed.envelope.payload, "base64url").toString("utf8")), threadId);
-    if (JSON.stringify(persistedPolicy) !== JSON.stringify(parsed.policy)) {
-        throw new Error("Persisted Lab runtime policy payload does not match its envelope");
-    }
-    return { policy: persistedPolicy, digest: parsed.digest };
-}
-export function applyLabRuntimePolicyToConfig(config, _active) {
-    const isolated = structuredClone(config);
-    isolated.gmail = "";
-    isolated.channels = {};
-    isolated.capabilities = {
-        schemaVersion: 1,
-        ...isolated.capabilities,
-        managedWorkspace: false,
-        proactiveWake: false,
-        tunnel: false,
-        gemini: false,
+/** Project only capabilities into the shared execution layer. */
+export function labRuntimePolicyToWorkerPolicy(active) {
+    const { prompt, skills, mcp, tools, channels } = active.policy;
+    return {
+        policy: WorkerRuntimePolicySchema.parse({ prompt, skills, mcp, tools, channels }),
+        digest: active.digest,
     };
-    return isolated;
 }
+/** Lab-only tools, backed by the run's host-held fin-app credential and lease. */
+const LAB_RUN_TOOLS = [queryMarketDataTool, labRunControlTool];
+/**
+ * The Lab adapter's restricted surface: the shared restrictions plus the Lab
+ * tool registrations. The policy allowlist decides which of them the engines
+ * expose; the engines never interpret Lab tool names.
+ */
 export function applyLabRuntimePolicyToSurface(surface, active) {
-    const allowed = active.policy.tools.allowed;
-    return {
-        ...surface,
-        credentialBacked: {
-            eventTrigger: false,
-            financialTool: false,
-            finApp: allowed.includes("query_market_data") || allowed.includes("lab_run_control"),
-            serpApi: false,
-        },
-        externalMcpServers: Object.fromEntries(Object.entries(surface.externalMcpServers)
-            .filter(([name]) => Object.hasOwn(active.policy.mcp.staticServers, name))
-            .map(([name, server]) => [name, server])),
-        labRuntimePolicy: active,
-    };
+    return applyWorkerRuntimePolicyToSurface(surface, labRuntimePolicyToWorkerPolicy(active), LAB_RUN_TOOLS);
 }
+/** Lab tool registrations supplied to the host; exported for the worker host only. */
+export const LAB_ADAPTER_TOOLS = LAB_RUN_TOOLS;
 //# sourceMappingURL=lab-runtime-policy.js.map

package/dist/threads/lab-runtime-policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"lab-runtime-policy.js","sourceRoot":"","sources":["../../src/threads/lab-runtime-policy.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGlD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD,MAAM,CAAC,MAAM,2BAA2B,GAAG,4BAA4B,CAAC;AACxE,MAAM,CAAC,MAAM,sBAAsB,GAAG,+BAA+B,CAAC;AACtE,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAyB,CAAC;AAEjE,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;AAEnE,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE;IACf,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACpC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,oEAAoE;IACpE,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/C,6EAA6E;IAC7E,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;KACnD,CAAC,CAAC,MAAM,EAAE;IACX,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;KACjD,CAAC,CAAC,MAAM,EAAE;IACX,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC;QACZ,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;KACvE,CAAC,CAAC,MAAM,EAAE;IACX,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;KAC5C,CAAC,CAAC,MAAM,EAAE;IACX,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;KACtB,CAAC,CAAC,MAAM,EAAE;CACZ,CAAC,CAAC,MAAM,EAAE,CAAC;AAcZ,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;IACN,IAAI;IACJ,MAAM;IACN,YAAY;CACJ,CAAC;AACX,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,MAAM;IACN,oBAAoB;IACpB,mBAAmB;IACnB,qBAAqB;IACrB,mBAAmB;IACnB,mBAAmB;IACnB,kBAAkB;IAClB,yBAAyB;CACjB,CAAC;AACX,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,mBAAmB,EAAE,iBAAiB,CAAU,CAAC;AAC3F,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,GAAG,wBAAwB;IAC3B,GAAG,6BAA6B;IAChC,GAAG,yBAAyB;CACpB,CAAC;AAEX,MAAM,iBAAiB,GAA2B;IAChD,IAAI,EAAE,iBAAiB;IACvB,KAAK,EAAE,kBAAkB;IACzB,IAAI,EAAE,iBAAiB;IACvB,IAAI,EAAE,iBAAiB;IACvB,IAAI,EAAE,iBAAiB;IACvB,EAAE,EAAE,eAAe;IACnB,IAAI,EAAE,iBAAiB;IACvB,UAAU,EAAE,WAAW;CACxB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,SAAS;IACT,UAAU;CACF,CAAC;AAEX,MAAM,qBAAqB,GAA+C;IACxE,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,EAAE,EAAE,MAAM;IACV,IAAI,EAAE,MAAM;IACZ,UAAU,EAAE,0BAA0B;CACvC,CAAC;AAEF,MAAM,UAAU,qBAAqB,CAAC,SAA4B;IAChE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,SAA4B;IAC1E,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YAC5C,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM;gBAAE,OAAO,EAAE,CAAC;YACvB,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC,CAAC,CAAC;AACP,CAAC;AACD,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,oBAAoB;IACpB,kBAAkB;IAClB,QAAQ;IACR,YAAY;CACJ,CAAC;AACX,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,YAAY;IACZ,SAAS;IACT,gBAAgB;CACR,CAAC;AAEX,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAS,yBAAyB,CAAC,CAAC;AACtE,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAS,0BAA0B,CAAC,CAAC;AACxE,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAS,uBAAuB,CAAC,CAAC;AAEnE,MAAM,UAAU,qBAAqB,CAAC,GAAY,EAAE,QAAgB;IAClE,MAAM,MAAM,GAAG,wBAAwB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnD,IAAI,QAAQ,KAAK,eAAe,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACxC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,IAAI,EAAE,CAAC,CAAC;IAC1G,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC1C,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,KAAK,EAAE,CAAC,CAAC;IAC9G,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;QACzD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,IAAI,EAAE,CAAC,CAAC;IAC/G,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAA0B,EAAE,MAAc;IAC7E,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IAC/F,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAClF,OAAO;QACL,OAAO;QACP,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;KACnF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,GAAY,EACZ,MAAc,EACd,QAAgB;IAEhB,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC;QACxB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;QACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;KACvC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvB,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IAC/F,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;IACvF,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC9D,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACpF,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACxD,OAAO;QACL,MAAM;QACN,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;KAC3E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,MAA8B,EAC9B,QAAyC;IAEzC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,uBAAuB,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IAC5C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1H,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5B,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,QAAgB;IACzD,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,uBAAuB,CAAC,CAAC;IAClE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;QACtB,MAAM,EAAE,wBAAwB;QAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAC1C,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACvF,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC/D,IAAI,QAAQ,KAAK,eAAe,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ;QACpC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAC3E,CAAC,CAAC,IAAI,CAAC;IACT,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,cAAc,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,eAAe,GAAG,qBAAqB,CAC3C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAC9E,QAAQ,CACT,CAAC;IACF,IAAI,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,MAAwB,EAAE,OAA+B;IACrG,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACzC,QAAQ,CAAC,KAAK,GAAG,EAAE,CAAC;IACpB,QAAQ,CAAC,QAAQ,GAAG,EAAE,CAAC;IACvB,QAAQ,CAAC,YAAY,GAAG;QACtB,aAAa,EAAE,CAAC;QAChB,GAAG,QAAQ,CAAC,YAAY;QACxB,gBAAgB,EAAE,KAAK;QACvB,aAAa,EAAE,KAAK;QACpB,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,KAAK;KACd,CAAC;IACF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,OAAuB,EACvB,MAA8B;IAE9B,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;IAC5C,OAAO;QACL,GAAG,OAAO;QACV,gBAAgB,EAAE;YAChB,YAAY,EAAE,KAAK;YACnB,aAAa,EAAE,KAAK;YACpB,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YACpF,OAAO,EAAE,KAAK;SACf;QACD,kBAAkB,EAAE,MAAM,CAAC,WAAW,CACpC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC;aACvC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;aACxE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAC3C;QACD,gBAAgB,EAAE,MAAM;KACzB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"lab-runtime-policy.js","sourceRoot":"","sources":["../../src/threads/lab-runtime-policy.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAGhE,OAAO,EACL,yBAAyB,EACzB,iCAAiC,GAElC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAsB,MAAM,0BAA0B,CAAC;AAEzF,MAAM,CAAC,MAAM,2BAA2B,GAAG,4BAA4B,CAAC;AACxE,MAAM,CAAC,MAAM,sBAAsB,GAAG,+BAA+B,CAAC;AACtE,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAyB,CAAC;AAEjE,MAAM,CAAC,MAAM,wBAAwB,GAAG,yBAAyB,CAAC,MAAM,CAAC;IACvE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE;IACf,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACpC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,oEAAoE;IACpE,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/C,6EAA6E;IAC7E,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC,MAAM,EAAE,CAAC;AAcZ,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;IACN,IAAI;IACJ,MAAM;IACN,YAAY;CACJ,CAAC;AACX,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,MAAM;IACN,oBAAoB;IACpB,mBAAmB;IACnB,qBAAqB;IACrB,mBAAmB;IACnB,mBAAmB;IACnB,kBAAkB;IAClB,yBAAyB;CACjB,CAAC;AACX,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,mBAAmB,EAAE,iBAAiB,CAAU,CAAC;AAC3F,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,GAAG,wBAAwB;IAC3B,GAAG,6BAA6B;IAChC,GAAG,yBAAyB;CACpB,CAAC;AAEX,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,oBAAoB;IACpB,kBAAkB;IAClB,QAAQ;IACR,YAAY;CACJ,CAAC;AACX,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,YAAY;IACZ,SAAS;IACT,gBAAgB;CACR,CAAC;AAEX,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAS,yBAAyB,CAAC,CAAC;AACtE,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAS,0BAA0B,CAAC,CAAC;AACxE,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAS,uBAAuB,CAAC,CAAC;AAEnE,MAAM,UAAU,qBAAqB,CAAC,GAAY,EAAE,QAAgB;IAClE,MAAM,MAAM,GAAG,wBAAwB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnD,IAAI,QAAQ,KAAK,eAAe,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACxC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,IAAI,EAAE,CAAC,CAAC;IAC1G,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC1C,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,KAAK,EAAE,CAAC,CAAC;IAC9G,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;QACzD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,IAAI,EAAE,CAAC,CAAC;IAC/G,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,oBAAoB,CAAC,MAA0B,EAAE,MAAqB;IACpF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAClF,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,GAAY,EACZ,SAAiB,EACjB,QAAgB;IAEhB,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC;QACxB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;QACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;KACvC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvB,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACvF,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACpF,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACxD,OAAO;QACL,MAAM;QACN,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;KAC3E,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CACzC,MAA8B,EAC9B,QAAyC;IAEzC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,uBAAuB,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IAC5C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1H,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5B,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,8BAA8B,CAAC,MAA8B;IAC3E,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/D,OAAO;QACL,MAAM,EAAE,yBAAyB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QACjF,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,aAAa,GAA2B,CAAC,mBAAmB,EAAE,iBAAiB,CAAC,CAAC;AAEvF;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAC5C,OAAuB,EACvB,MAA8B;IAE9B,OAAO,iCAAiC,CAAC,OAAO,EAAE,8BAA8B,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,CAAC;AAC3G,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,MAAM,iBAAiB,GAA2B,aAAa,CAAC"}

package/dist/threads/process-group.d.ts

@@ -0,0 +1,41 @@
+export type ExecutorGroupStatus = "alive" | "dead" | "unknown";
+/** Whether any process is still a member of `pgid`. EPERM counts as alive. */
+export declare function isProcessGroupAlive(pgid: number): boolean;
+export declare function isProcessAlive(pid: number): boolean;
+/**
+ * Whether the executor group led by `pgid`, whose leader started at
+ * `processStart`, still has members. A live leader with another start time
+ * means the id was reused after our group emptied: ours is gone.
+ */
+export declare function executorGroupStatus(pgid: number, processStart: string): ExecutorGroupStatus;
+/**
+ * Force-kill a recorded executor group and wait until it is empty. Never
+ * signals a group whose identity cannot be confirmed. Resolves false when
+ * members remain after `timeoutMs` or the identity is unknown.
+ */
+export declare function killExecutorGroupAndWait(pgid: number, processStart: string, timeoutMs: number): Promise<boolean>;
+/**
+ * The leader of `pgid` has just exited and been reaped by this host. Kill
+ * whatever is left in its group and wait until it is empty. A live process
+ * with the leader's id is a reuse, so the group is already gone.
+ */
+export declare function reapExitedExecutorGroup(pgid: number, timeoutMs: number): Promise<boolean>;
+/** Signal every member of a live executor's group (the leader is ours and alive). */
+export declare function signalExecutorGroup(pgid: number, signal: NodeJS.Signals): void;
+/**
+ * Process groups an executor's commands created outside its own group (the
+ * Claude CLI starts every shell in a new session). Each shell records its
+ * group id and start time here before the command runs; the host stops every
+ * recorded group with the executor. Lines: `<pgid> <ps lstart>`.
+ */
+export declare const EXECUTOR_GROUP_REGISTRY_FILE = "executor-groups.log";
+/** Shell lines that record the running shell's group before the command. */
+export declare function groupRegistrationPrefix(registryFile: string): string;
+/**
+ * Stop every group recorded in `registryFile` and wait until all are empty.
+ * Never signals a recorded id whose identity no longer matches. Resolves
+ * false while any recorded group may still have members; the registry is
+ * cleared once all are gone.
+ */
+export declare function stopRegisteredGroups(registryFile: string, timeoutMs: number): Promise<boolean>;
+//# sourceMappingURL=process-group.d.ts.map

package/dist/threads/process-group.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-group.d.ts","sourceRoot":"","sources":["../../src/threads/process-group.ts"],"names":[],"mappings":"AAqBA,MAAM,MAAM,mBAAmB,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;AAE/D,8EAA8E;AAC9E,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CASzD;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAOnD;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,mBAAmB,CAO3F;AAED;;;;GAIG;AACH,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAStH;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAQ/F;AAED,qFAAqF;AACrF,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAE9E;AAWD;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B,wBAAwB,CAAC;AAElE,4EAA4E;AAC5E,wBAAgB,uBAAuB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAGpE;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAmBpG"}