ci

volatile state
encoding casting
2026-03-13 18:07:13 -04:00 · 2026-03-13 14:19:47 +00:00 · 2026-03-13 11:11:09 +00:00 · 2026-03-13 11:08:43 +00:00 · 2026-03-13 09:30:09 +00:00 · 2026-03-13 09:10:35 +00:00
41 changed files with 7564 additions and 620 deletions
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -78,7 +78,7 @@ jobs:
    # Upload runner package tar.gz/zip as artifact
    - name: Publish Artifact
      if: github.event_name != 'pull_request'
-      uses: actions/upload-artifact@v7
+      uses: actions/upload-artifact@v6
      with:
        name: runner-package-${{ matrix.runtime }}
        path: |
@@ -111,10 +111,10 @@ jobs:
          core.setOutput('version', version);

    - name: Setup Docker buildx
-      uses: docker/setup-buildx-action@v4
+      uses: docker/setup-buildx-action@v3

    - name: Build Docker image
-      uses: docker/build-push-action@v7
+      uses: docker/build-push-action@v6
      with:
        context: ./images
        load: true
--- a/.github/workflows/docker-publish.yml
+++ b/.github/workflows/docker-publish.yml
@@ -38,10 +38,10 @@ jobs:
            core.setOutput('version', runnerVersion);

      - name: Setup Docker buildx
-        uses: docker/setup-buildx-action@v4
+        uses: docker/setup-buildx-action@v3

      - name: Log into registry ${{ env.REGISTRY }}
-        uses: docker/login-action@v4
+        uses: docker/login-action@v3
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.actor }}
@@ -49,7 +49,7 @@ jobs:

      - name: Build and push Docker image
        id: build-and-push
-        uses: docker/build-push-action@v7
+        uses: docker/build-push-action@v6
        with:
          context: ./images
          platforms: |
@@ -68,7 +68,7 @@ jobs:
            org.opencontainers.image.description=https://github.com/actions/runner/releases/tag/v${{ steps.image.outputs.version }}

      - name: Generate attestation
-        uses: actions/attest-build-provenance@v4
+        uses: actions/attest-build-provenance@v3
        with:
          subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
          subject-digest: ${{ steps.build-and-push.outputs.digest }}
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -118,7 +118,7 @@ jobs:
    # Upload runner package tar.gz/zip as artifact.
    - name: Publish Artifact
      if: github.event_name != 'pull_request'
-      uses: actions/upload-artifact@v7
+      uses: actions/upload-artifact@v6
      with:
        name: runner-packages-${{ matrix.runtime }}
        path: |
@@ -309,10 +309,10 @@ jobs:
            core.setOutput('version', runnerVersion);

      - name: Setup Docker buildx
-        uses: docker/setup-buildx-action@v4
+        uses: docker/setup-buildx-action@v3

      - name: Log into registry ${{ env.REGISTRY }}
-        uses: docker/login-action@v4
+        uses: docker/login-action@v3
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.actor }}
@@ -320,7 +320,7 @@ jobs:

      - name: Build and push Docker image
        id: build-and-push
-        uses: docker/build-push-action@v7
+        uses: docker/build-push-action@v6
        with:
          context: ./images
          platforms: |
@@ -339,7 +339,7 @@ jobs:
            org.opencontainers.image.description=https://github.com/actions/runner/releases/tag/v${{ steps.image.outputs.version }}

      - name: Generate attestation
-        uses: actions/attest-build-provenance@v4
+        uses: actions/attest-build-provenance@v3
        with:
          subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
          subject-digest: ${{ steps.build-and-push.outputs.digest }}
--- a/images/Dockerfile
+++ b/images/Dockerfile
@@ -5,8 +5,8 @@ ARG TARGETOS
 ARG TARGETARCH
 ARG RUNNER_VERSION
 ARG RUNNER_CONTAINER_HOOKS_VERSION=0.7.0
-ARG DOCKER_VERSION=29.3.0
-ARG BUILDX_VERSION=0.32.1
+ARG DOCKER_VERSION=29.2.0
+ARG BUILDX_VERSION=0.31.1

 RUN apt update -y && apt install curl unzip -y

--- a/src/Misc/expressionFunc/hashFiles/package-lock.json
+++ b/src/Misc/expressionFunc/hashFiles/package-lock.json
@@ -12,9 +12,9 @@
        "@actions/glob": "^0.4.0"
      },
      "devDependencies": {
-        "@stylistic/eslint-plugin": "^5.10.0",
+        "@stylistic/eslint-plugin": "^5.9.0",
        "@types/node": "^22.0.0",
-        "@typescript-eslint/eslint-plugin": "^8.54.0",
+        "@typescript-eslint/eslint-plugin": "^8.0.0",
        "@typescript-eslint/parser": "^8.0.0",
        "@vercel/ncc": "^0.38.3",
        "eslint": "^8.47.0",
@@ -93,9 +93,9 @@
      }
    },
    "node_modules/@eslint-community/regexpp": {
-      "version": "4.12.2",
-      "resolved": "https://registry.npmjs.org/@eslint-community/regexpp/-/regexpp-4.12.2.tgz",
-      "integrity": "sha512-EriSTlt5OC9/7SXkRSCAhfSxxoSUgBm33OH+IkwbdpgoqsSsUg7y3uh+IICI/Qg4BBWr3U2i39RpmycbxMq4ew==",
+      "version": "4.10.0",
+      "resolved": "https://registry.npmjs.org/@eslint-community/regexpp/-/regexpp-4.10.0.tgz",
+      "integrity": "sha512-Cu96Sd2By9mCNTx2iyKOmq10v22jUVQv0lQnlGNy16oE9589yE+QADPbrMGCkA51cKZSg3Pu/aTJVTGfL/qjUA==",
      "dev": true,
      "engines": {
        "node": "^12.0.0 || ^14.0.0 || >=16.0.0"
@@ -228,9 +228,9 @@
      }
    },
    "node_modules/@stylistic/eslint-plugin": {
-      "version": "5.10.0",
-      "resolved": "https://registry.npmjs.org/@stylistic/eslint-plugin/-/eslint-plugin-5.10.0.tgz",
-      "integrity": "sha512-nPK52ZHvot8Ju/0A4ucSX1dcPV2/1clx0kLcH5wDmrE4naKso7TUC/voUyU1O9OTKTrR6MYip6LP0ogEMQ9jPQ==",
+      "version": "5.9.0",
+      "resolved": "https://registry.npmjs.org/@stylistic/eslint-plugin/-/eslint-plugin-5.9.0.tgz",
+      "integrity": "sha512-FqqSkvDMYJReydrMhlugc71M76yLLQWNfmGq+SIlLa7N3kHp8Qq8i2PyWrVNAfjOyOIY+xv9XaaYwvVW7vroMA==",
      "dev": true,
      "dependencies": {
        "@eslint-community/eslint-utils": "^4.9.1",
@@ -321,19 +321,21 @@
      }
    },
    "node_modules/@typescript-eslint/eslint-plugin": {
-      "version": "8.54.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-8.54.0.tgz",
-      "integrity": "sha512-hAAP5io/7csFStuOmR782YmTthKBJ9ND3WVL60hcOjvtGFb+HJxH4O5huAcmcZ9v9G8P+JETiZ/G1B8MALnWZQ==",
+      "version": "8.47.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-8.47.0.tgz",
+      "integrity": "sha512-fe0rz9WJQ5t2iaLfdbDc9T80GJy0AeO453q8C3YCilnGozvOyCG5t+EZtg7j7D88+c3FipfP/x+wzGnh1xp8ZA==",
      "dev": true,
+      "license": "MIT",
      "dependencies": {
-        "@eslint-community/regexpp": "^4.12.2",
-        "@typescript-eslint/scope-manager": "8.54.0",
-        "@typescript-eslint/type-utils": "8.54.0",
-        "@typescript-eslint/utils": "8.54.0",
-        "@typescript-eslint/visitor-keys": "8.54.0",
-        "ignore": "^7.0.5",
+        "@eslint-community/regexpp": "^4.10.0",
+        "@typescript-eslint/scope-manager": "8.47.0",
+        "@typescript-eslint/type-utils": "8.47.0",
+        "@typescript-eslint/utils": "8.47.0",
+        "@typescript-eslint/visitor-keys": "8.47.0",
+        "graphemer": "^1.4.0",
+        "ignore": "^7.0.0",
        "natural-compare": "^1.4.0",
-        "ts-api-utils": "^2.4.0"
+        "ts-api-utils": "^2.1.0"
      },
      "engines": {
        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
@@ -343,7 +345,7 @@
        "url": "https://opencollective.com/typescript-eslint"
      },
      "peerDependencies": {
-        "@typescript-eslint/parser": "^8.54.0",
+        "@typescript-eslint/parser": "^8.47.0",
        "eslint": "^8.57.0 || ^9.0.0",
        "typescript": ">=4.8.4 <6.0.0"
      }
@@ -359,10 +361,11 @@
      }
    },
    "node_modules/@typescript-eslint/eslint-plugin/node_modules/ts-api-utils": {
-      "version": "2.4.0",
-      "resolved": "https://registry.npmjs.org/ts-api-utils/-/ts-api-utils-2.4.0.tgz",
-      "integrity": "sha512-3TaVTaAv2gTiMB35i3FiGJaRfwb3Pyn/j3m/bfAvGe8FB7CF6u+LMYqYlDh7reQf7UNvoTvdfAqHGmPGOSsPmA==",
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/ts-api-utils/-/ts-api-utils-2.1.0.tgz",
+      "integrity": "sha512-CUgTZL1irw8u29bzrOD/nH85jqyc74D6SshFgujOIA7osm2Rz7dYH77agkx7H4FBNxDq7Cjf+IjaX/8zwFW+ZQ==",
      "dev": true,
+      "license": "MIT",
      "engines": {
        "node": ">=18.12"
      },
@@ -371,16 +374,17 @@
      }
    },
    "node_modules/@typescript-eslint/parser": {
-      "version": "8.54.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-8.54.0.tgz",
-      "integrity": "sha512-BtE0k6cjwjLZoZixN0t5AKP0kSzlGu7FctRXYuPAm//aaiZhmfq1JwdYpYr1brzEspYyFeF+8XF5j2VK6oalrA==",
+      "version": "8.47.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-8.47.0.tgz",
+      "integrity": "sha512-lJi3PfxVmo0AkEY93ecfN+r8SofEqZNGByvHAI3GBLrvt1Cw6H5k1IM02nSzu0RfUafr2EvFSw0wAsZgubNplQ==",
      "dev": true,
+      "license": "MIT",
      "dependencies": {
-        "@typescript-eslint/scope-manager": "8.54.0",
-        "@typescript-eslint/types": "8.54.0",
-        "@typescript-eslint/typescript-estree": "8.54.0",
-        "@typescript-eslint/visitor-keys": "8.54.0",
-        "debug": "^4.4.3"
+        "@typescript-eslint/scope-manager": "8.47.0",
+        "@typescript-eslint/types": "8.47.0",
+        "@typescript-eslint/typescript-estree": "8.47.0",
+        "@typescript-eslint/visitor-keys": "8.47.0",
+        "debug": "^4.3.4"
      },
      "engines": {
        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
@@ -395,14 +399,15 @@
      }
    },
    "node_modules/@typescript-eslint/project-service": {
-      "version": "8.54.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/project-service/-/project-service-8.54.0.tgz",
-      "integrity": "sha512-YPf+rvJ1s7MyiWM4uTRhE4DvBXrEV+d8oC3P9Y2eT7S+HBS0clybdMIPnhiATi9vZOYDc7OQ1L/i6ga6NFYK/g==",
+      "version": "8.47.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/project-service/-/project-service-8.47.0.tgz",
+      "integrity": "sha512-2X4BX8hUeB5JcA1TQJ7GjcgulXQ+5UkNb0DL8gHsHUHdFoiCTJoYLTpib3LtSDPZsRET5ygN4qqIWrHyYIKERA==",
      "dev": true,
+      "license": "MIT",
      "dependencies": {
-        "@typescript-eslint/tsconfig-utils": "^8.54.0",
-        "@typescript-eslint/types": "^8.54.0",
-        "debug": "^4.4.3"
+        "@typescript-eslint/tsconfig-utils": "^8.47.0",
+        "@typescript-eslint/types": "^8.47.0",
+        "debug": "^4.3.4"
      },
      "engines": {
        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
@@ -416,13 +421,14 @@
      }
    },
    "node_modules/@typescript-eslint/scope-manager": {
-      "version": "8.54.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-8.54.0.tgz",
-      "integrity": "sha512-27rYVQku26j/PbHYcVfRPonmOlVI6gihHtXFbTdB5sb6qA0wdAQAbyXFVarQ5t4HRojIz64IV90YtsjQSSGlQg==",
+      "version": "8.47.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-8.47.0.tgz",
+      "integrity": "sha512-a0TTJk4HXMkfpFkL9/WaGTNuv7JWfFTQFJd6zS9dVAjKsojmv9HT55xzbEpnZoY+VUb+YXLMp+ihMLz/UlZfDg==",
      "dev": true,
+      "license": "MIT",
      "dependencies": {
-        "@typescript-eslint/types": "8.54.0",
-        "@typescript-eslint/visitor-keys": "8.54.0"
+        "@typescript-eslint/types": "8.47.0",
+        "@typescript-eslint/visitor-keys": "8.47.0"
      },
      "engines": {
        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
@@ -433,10 +439,11 @@
      }
    },
    "node_modules/@typescript-eslint/tsconfig-utils": {
-      "version": "8.54.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/tsconfig-utils/-/tsconfig-utils-8.54.0.tgz",
-      "integrity": "sha512-dRgOyT2hPk/JwxNMZDsIXDgyl9axdJI3ogZ2XWhBPsnZUv+hPesa5iuhdYt2gzwA9t8RE5ytOJ6xB0moV0Ujvw==",
+      "version": "8.47.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/tsconfig-utils/-/tsconfig-utils-8.47.0.tgz",
+      "integrity": "sha512-ybUAvjy4ZCL11uryalkKxuT3w3sXJAuWhOoGS3T/Wu+iUu1tGJmk5ytSY8gbdACNARmcYEB0COksD2j6hfGK2g==",
      "dev": true,
+      "license": "MIT",
      "engines": {
        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
      },
@@ -449,16 +456,17 @@
      }
    },
    "node_modules/@typescript-eslint/type-utils": {
-      "version": "8.54.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/type-utils/-/type-utils-8.54.0.tgz",
-      "integrity": "sha512-hiLguxJWHjjwL6xMBwD903ciAwd7DmK30Y9Axs/etOkftC3ZNN9K44IuRD/EB08amu+Zw6W37x9RecLkOo3pMA==",
+      "version": "8.47.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/type-utils/-/type-utils-8.47.0.tgz",
+      "integrity": "sha512-QC9RiCmZ2HmIdCEvhd1aJELBlD93ErziOXXlHEZyuBo3tBiAZieya0HLIxp+DoDWlsQqDawyKuNEhORyku+P8A==",
      "dev": true,
+      "license": "MIT",
      "dependencies": {
-        "@typescript-eslint/types": "8.54.0",
-        "@typescript-eslint/typescript-estree": "8.54.0",
-        "@typescript-eslint/utils": "8.54.0",
-        "debug": "^4.4.3",
-        "ts-api-utils": "^2.4.0"
+        "@typescript-eslint/types": "8.47.0",
+        "@typescript-eslint/typescript-estree": "8.47.0",
+        "@typescript-eslint/utils": "8.47.0",
+        "debug": "^4.3.4",
+        "ts-api-utils": "^2.1.0"
      },
      "engines": {
        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
@@ -473,10 +481,11 @@
      }
    },
    "node_modules/@typescript-eslint/type-utils/node_modules/ts-api-utils": {
-      "version": "2.4.0",
-      "resolved": "https://registry.npmjs.org/ts-api-utils/-/ts-api-utils-2.4.0.tgz",
-      "integrity": "sha512-3TaVTaAv2gTiMB35i3FiGJaRfwb3Pyn/j3m/bfAvGe8FB7CF6u+LMYqYlDh7reQf7UNvoTvdfAqHGmPGOSsPmA==",
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/ts-api-utils/-/ts-api-utils-2.1.0.tgz",
+      "integrity": "sha512-CUgTZL1irw8u29bzrOD/nH85jqyc74D6SshFgujOIA7osm2Rz7dYH77agkx7H4FBNxDq7Cjf+IjaX/8zwFW+ZQ==",
      "dev": true,
+      "license": "MIT",
      "engines": {
        "node": ">=18.12"
      },
@@ -485,10 +494,11 @@
      }
    },
    "node_modules/@typescript-eslint/types": {
-      "version": "8.54.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/types/-/types-8.54.0.tgz",
-      "integrity": "sha512-PDUI9R1BVjqu7AUDsRBbKMtwmjWcn4J3le+5LpcFgWULN3LvHC5rkc9gCVxbrsrGmO1jfPybN5s6h4Jy+OnkAA==",
+      "version": "8.47.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/types/-/types-8.47.0.tgz",
+      "integrity": "sha512-nHAE6bMKsizhA2uuYZbEbmp5z2UpffNrPEqiKIeN7VsV6UY/roxanWfoRrf6x/k9+Obf+GQdkm0nPU+vnMXo9A==",
      "dev": true,
+      "license": "MIT",
      "engines": {
        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
      },
@@ -498,20 +508,22 @@
      }
    },
    "node_modules/@typescript-eslint/typescript-estree": {
-      "version": "8.54.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-8.54.0.tgz",
-      "integrity": "sha512-BUwcskRaPvTk6fzVWgDPdUndLjB87KYDrN5EYGetnktoeAvPtO4ONHlAZDnj5VFnUANg0Sjm7j4usBlnoVMHwA==",
+      "version": "8.47.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-8.47.0.tgz",
+      "integrity": "sha512-k6ti9UepJf5NpzCjH31hQNLHQWupTRPhZ+KFF8WtTuTpy7uHPfeg2NM7cP27aCGajoEplxJDFVCEm9TGPYyiVg==",
      "dev": true,
+      "license": "MIT",
      "dependencies": {
-        "@typescript-eslint/project-service": "8.54.0",
-        "@typescript-eslint/tsconfig-utils": "8.54.0",
-        "@typescript-eslint/types": "8.54.0",
-        "@typescript-eslint/visitor-keys": "8.54.0",
-        "debug": "^4.4.3",
-        "minimatch": "^9.0.5",
-        "semver": "^7.7.3",
-        "tinyglobby": "^0.2.15",
-        "ts-api-utils": "^2.4.0"
+        "@typescript-eslint/project-service": "8.47.0",
+        "@typescript-eslint/tsconfig-utils": "8.47.0",
+        "@typescript-eslint/types": "8.47.0",
+        "@typescript-eslint/visitor-keys": "8.47.0",
+        "debug": "^4.3.4",
+        "fast-glob": "^3.3.2",
+        "is-glob": "^4.0.3",
+        "minimatch": "^9.0.4",
+        "semver": "^7.6.0",
+        "ts-api-utils": "^2.1.0"
      },
      "engines": {
        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
@@ -561,10 +573,11 @@
      }
    },
    "node_modules/@typescript-eslint/typescript-estree/node_modules/ts-api-utils": {
-      "version": "2.4.0",
-      "resolved": "https://registry.npmjs.org/ts-api-utils/-/ts-api-utils-2.4.0.tgz",
-      "integrity": "sha512-3TaVTaAv2gTiMB35i3FiGJaRfwb3Pyn/j3m/bfAvGe8FB7CF6u+LMYqYlDh7reQf7UNvoTvdfAqHGmPGOSsPmA==",
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/ts-api-utils/-/ts-api-utils-2.1.0.tgz",
+      "integrity": "sha512-CUgTZL1irw8u29bzrOD/nH85jqyc74D6SshFgujOIA7osm2Rz7dYH77agkx7H4FBNxDq7Cjf+IjaX/8zwFW+ZQ==",
      "dev": true,
+      "license": "MIT",
      "engines": {
        "node": ">=18.12"
      },
@@ -573,15 +586,16 @@
      }
    },
    "node_modules/@typescript-eslint/utils": {
-      "version": "8.54.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/utils/-/utils-8.54.0.tgz",
-      "integrity": "sha512-9Cnda8GS57AQakvRyG0PTejJNlA2xhvyNtEVIMlDWOOeEyBkYWhGPnfrIAnqxLMTSTo6q8g12XVjjev5l1NvMA==",
+      "version": "8.47.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/utils/-/utils-8.47.0.tgz",
+      "integrity": "sha512-g7XrNf25iL4TJOiPqatNuaChyqt49a/onq5YsJ9+hXeugK+41LVg7AxikMfM02PC6jbNtZLCJj6AUcQXJS/jGQ==",
      "dev": true,
+      "license": "MIT",
      "dependencies": {
-        "@eslint-community/eslint-utils": "^4.9.1",
-        "@typescript-eslint/scope-manager": "8.54.0",
-        "@typescript-eslint/types": "8.54.0",
-        "@typescript-eslint/typescript-estree": "8.54.0"
+        "@eslint-community/eslint-utils": "^4.7.0",
+        "@typescript-eslint/scope-manager": "8.47.0",
+        "@typescript-eslint/types": "8.47.0",
+        "@typescript-eslint/typescript-estree": "8.47.0"
      },
      "engines": {
        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
@@ -596,12 +610,13 @@
      }
    },
    "node_modules/@typescript-eslint/visitor-keys": {
-      "version": "8.54.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-8.54.0.tgz",
-      "integrity": "sha512-VFlhGSl4opC0bprJiItPQ1RfUhGDIBokcPwaFH4yiBCaNPeld/9VeXbiPO1cLyorQi1G1vL+ecBk1x8o1axORA==",
+      "version": "8.47.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-8.47.0.tgz",
+      "integrity": "sha512-SIV3/6eftCy1bNzCQoPmbWsRLujS8t5iDIZ4spZOBHqrM+yfX2ogg8Tt3PDTAVKw3sSCiUgg30uOAvK2r9zGjQ==",
      "dev": true,
+      "license": "MIT",
      "dependencies": {
-        "@typescript-eslint/types": "8.54.0",
+        "@typescript-eslint/types": "8.47.0",
        "eslint-visitor-keys": "^4.2.1"
      },
      "engines": {
@@ -617,6 +632,7 @@
      "resolved": "https://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-4.2.1.tgz",
      "integrity": "sha512-Uhdk5sfqcee/9H/rCOJikYz67o0a2Tw2hGRPOG2Y1R2dg7brRe1uG0yaNQDHu+TO/uQPF/5eCapvYSmHUjt7JQ==",
      "dev": true,
+      "license": "Apache-2.0",
      "engines": {
        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
      },
@@ -1134,10 +1150,11 @@
      "dev": true
    },
    "node_modules/debug": {
-      "version": "4.4.3",
-      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
-      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
+      "version": "4.4.0",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.0.tgz",
+      "integrity": "sha512-6WTZ/IxCY/T6BALoZHaE4ctp9xm+Z5kY/pzYaCHRFeyVhojxlrm+46y68HA6hr0TcwEssoxNiDEUJQjfPZ/RYA==",
      "dev": true,
+      "license": "MIT",
      "dependencies": {
        "ms": "^2.1.3"
      },
@@ -4002,9 +4019,9 @@
      }
    },
    "node_modules/semver": {
-      "version": "7.7.4",
-      "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.4.tgz",
-      "integrity": "sha512-vFKC2IEtQnVhpT78h1Yp8wzwrf8CM+MzKMHGJZfBtzhZNycRFnXsHk6E5TxIkkMsgNS7mdX3AGB7x2QM2di4lA==",
+      "version": "7.6.2",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.6.2.tgz",
+      "integrity": "sha512-FNAIBWCx9qcRhoHcgcJ0gvU7SN1lYU2ZXuSfl04bSC5OpvDHFyJCjdNHomPXxjQlCBU67YW64PzY7/VIEH7F2w==",
      "dev": true,
      "bin": {
        "semver": "bin/semver.js"
@@ -4302,51 +4319,6 @@
      "integrity": "sha512-N+8UisAXDGk8PFXP4HAzVR9nbfmVJ3zYLAWiTIoqC5v5isinhr+r5uaO8+7r3BMfuNIufIsA7RdpVgacC2cSpw==",
      "dev": true
    },
-    "node_modules/tinyglobby": {
-      "version": "0.2.15",
-      "resolved": "https://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.15.tgz",
-      "integrity": "sha512-j2Zq4NyQYG5XMST4cbs02Ak8iJUdxRM0XI5QyxXuZOzKOINmWurp3smXu3y5wDcJrptwpSjgXHzIQxR0omXljQ==",
-      "dev": true,
-      "dependencies": {
-        "fdir": "^6.5.0",
-        "picomatch": "^4.0.3"
-      },
-      "engines": {
-        "node": ">=12.0.0"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/SuperchupuDev"
-      }
-    },
-    "node_modules/tinyglobby/node_modules/fdir": {
-      "version": "6.5.0",
-      "resolved": "https://registry.npmjs.org/fdir/-/fdir-6.5.0.tgz",
-      "integrity": "sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==",
-      "dev": true,
-      "engines": {
-        "node": ">=12.0.0"
-      },
-      "peerDependencies": {
-        "picomatch": "^3 || ^4"
-      },
-      "peerDependenciesMeta": {
-        "picomatch": {
-          "optional": true
-        }
-      }
-    },
-    "node_modules/tinyglobby/node_modules/picomatch": {
-      "version": "4.0.3",
-      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz",
-      "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==",
-      "dev": true,
-      "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/jonschlinkert"
-      }
-    },
    "node_modules/titleize": {
      "version": "3.0.0",
      "resolved": "https://registry.npmjs.org/titleize/-/titleize-3.0.0.tgz",
@@ -4784,9 +4756,9 @@
      }
    },
    "@eslint-community/regexpp": {
-      "version": "4.12.2",
-      "resolved": "https://registry.npmjs.org/@eslint-community/regexpp/-/regexpp-4.12.2.tgz",
-      "integrity": "sha512-EriSTlt5OC9/7SXkRSCAhfSxxoSUgBm33OH+IkwbdpgoqsSsUg7y3uh+IICI/Qg4BBWr3U2i39RpmycbxMq4ew==",
+      "version": "4.10.0",
+      "resolved": "https://registry.npmjs.org/@eslint-community/regexpp/-/regexpp-4.10.0.tgz",
+      "integrity": "sha512-Cu96Sd2By9mCNTx2iyKOmq10v22jUVQv0lQnlGNy16oE9589yE+QADPbrMGCkA51cKZSg3Pu/aTJVTGfL/qjUA==",
      "dev": true
    },
    "@eslint/eslintrc": {
@@ -4882,9 +4854,9 @@
      }
    },
    "@stylistic/eslint-plugin": {
-      "version": "5.10.0",
-      "resolved": "https://registry.npmjs.org/@stylistic/eslint-plugin/-/eslint-plugin-5.10.0.tgz",
-      "integrity": "sha512-nPK52ZHvot8Ju/0A4ucSX1dcPV2/1clx0kLcH5wDmrE4naKso7TUC/voUyU1O9OTKTrR6MYip6LP0ogEMQ9jPQ==",
+      "version": "5.9.0",
+      "resolved": "https://registry.npmjs.org/@stylistic/eslint-plugin/-/eslint-plugin-5.9.0.tgz",
+      "integrity": "sha512-FqqSkvDMYJReydrMhlugc71M76yLLQWNfmGq+SIlLa7N3kHp8Qq8i2PyWrVNAfjOyOIY+xv9XaaYwvVW7vroMA==",
      "dev": true,
      "requires": {
        "@eslint-community/eslint-utils": "^4.9.1",
@@ -4942,19 +4914,20 @@
      }
    },
    "@typescript-eslint/eslint-plugin": {
-      "version": "8.54.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-8.54.0.tgz",
-      "integrity": "sha512-hAAP5io/7csFStuOmR782YmTthKBJ9ND3WVL60hcOjvtGFb+HJxH4O5huAcmcZ9v9G8P+JETiZ/G1B8MALnWZQ==",
+      "version": "8.47.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-8.47.0.tgz",
+      "integrity": "sha512-fe0rz9WJQ5t2iaLfdbDc9T80GJy0AeO453q8C3YCilnGozvOyCG5t+EZtg7j7D88+c3FipfP/x+wzGnh1xp8ZA==",
      "dev": true,
      "requires": {
-        "@eslint-community/regexpp": "^4.12.2",
-        "@typescript-eslint/scope-manager": "8.54.0",
-        "@typescript-eslint/type-utils": "8.54.0",
-        "@typescript-eslint/utils": "8.54.0",
-        "@typescript-eslint/visitor-keys": "8.54.0",
-        "ignore": "^7.0.5",
+        "@eslint-community/regexpp": "^4.10.0",
+        "@typescript-eslint/scope-manager": "8.47.0",
+        "@typescript-eslint/type-utils": "8.47.0",
+        "@typescript-eslint/utils": "8.47.0",
+        "@typescript-eslint/visitor-keys": "8.47.0",
+        "graphemer": "^1.4.0",
+        "ignore": "^7.0.0",
        "natural-compare": "^1.4.0",
-        "ts-api-utils": "^2.4.0"
+        "ts-api-utils": "^2.1.0"
      },
      "dependencies": {
        "ignore": {
@@ -4964,98 +4937,99 @@
          "dev": true
        },
        "ts-api-utils": {
-          "version": "2.4.0",
-          "resolved": "https://registry.npmjs.org/ts-api-utils/-/ts-api-utils-2.4.0.tgz",
-          "integrity": "sha512-3TaVTaAv2gTiMB35i3FiGJaRfwb3Pyn/j3m/bfAvGe8FB7CF6u+LMYqYlDh7reQf7UNvoTvdfAqHGmPGOSsPmA==",
+          "version": "2.1.0",
+          "resolved": "https://registry.npmjs.org/ts-api-utils/-/ts-api-utils-2.1.0.tgz",
+          "integrity": "sha512-CUgTZL1irw8u29bzrOD/nH85jqyc74D6SshFgujOIA7osm2Rz7dYH77agkx7H4FBNxDq7Cjf+IjaX/8zwFW+ZQ==",
          "dev": true,
          "requires": {}
        }
      }
    },
    "@typescript-eslint/parser": {
-      "version": "8.54.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-8.54.0.tgz",
-      "integrity": "sha512-BtE0k6cjwjLZoZixN0t5AKP0kSzlGu7FctRXYuPAm//aaiZhmfq1JwdYpYr1brzEspYyFeF+8XF5j2VK6oalrA==",
+      "version": "8.47.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-8.47.0.tgz",
+      "integrity": "sha512-lJi3PfxVmo0AkEY93ecfN+r8SofEqZNGByvHAI3GBLrvt1Cw6H5k1IM02nSzu0RfUafr2EvFSw0wAsZgubNplQ==",
      "dev": true,
      "requires": {
-        "@typescript-eslint/scope-manager": "8.54.0",
-        "@typescript-eslint/types": "8.54.0",
-        "@typescript-eslint/typescript-estree": "8.54.0",
-        "@typescript-eslint/visitor-keys": "8.54.0",
-        "debug": "^4.4.3"
+        "@typescript-eslint/scope-manager": "8.47.0",
+        "@typescript-eslint/types": "8.47.0",
+        "@typescript-eslint/typescript-estree": "8.47.0",
+        "@typescript-eslint/visitor-keys": "8.47.0",
+        "debug": "^4.3.4"
      }
    },
    "@typescript-eslint/project-service": {
-      "version": "8.54.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/project-service/-/project-service-8.54.0.tgz",
-      "integrity": "sha512-YPf+rvJ1s7MyiWM4uTRhE4DvBXrEV+d8oC3P9Y2eT7S+HBS0clybdMIPnhiATi9vZOYDc7OQ1L/i6ga6NFYK/g==",
+      "version": "8.47.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/project-service/-/project-service-8.47.0.tgz",
+      "integrity": "sha512-2X4BX8hUeB5JcA1TQJ7GjcgulXQ+5UkNb0DL8gHsHUHdFoiCTJoYLTpib3LtSDPZsRET5ygN4qqIWrHyYIKERA==",
      "dev": true,
      "requires": {
-        "@typescript-eslint/tsconfig-utils": "^8.54.0",
-        "@typescript-eslint/types": "^8.54.0",
-        "debug": "^4.4.3"
+        "@typescript-eslint/tsconfig-utils": "^8.47.0",
+        "@typescript-eslint/types": "^8.47.0",
+        "debug": "^4.3.4"
      }
    },
    "@typescript-eslint/scope-manager": {
-      "version": "8.54.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-8.54.0.tgz",
-      "integrity": "sha512-27rYVQku26j/PbHYcVfRPonmOlVI6gihHtXFbTdB5sb6qA0wdAQAbyXFVarQ5t4HRojIz64IV90YtsjQSSGlQg==",
+      "version": "8.47.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-8.47.0.tgz",
+      "integrity": "sha512-a0TTJk4HXMkfpFkL9/WaGTNuv7JWfFTQFJd6zS9dVAjKsojmv9HT55xzbEpnZoY+VUb+YXLMp+ihMLz/UlZfDg==",
      "dev": true,
      "requires": {
-        "@typescript-eslint/types": "8.54.0",
-        "@typescript-eslint/visitor-keys": "8.54.0"
+        "@typescript-eslint/types": "8.47.0",
+        "@typescript-eslint/visitor-keys": "8.47.0"
      }
    },
    "@typescript-eslint/tsconfig-utils": {
-      "version": "8.54.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/tsconfig-utils/-/tsconfig-utils-8.54.0.tgz",
-      "integrity": "sha512-dRgOyT2hPk/JwxNMZDsIXDgyl9axdJI3ogZ2XWhBPsnZUv+hPesa5iuhdYt2gzwA9t8RE5ytOJ6xB0moV0Ujvw==",
+      "version": "8.47.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/tsconfig-utils/-/tsconfig-utils-8.47.0.tgz",
+      "integrity": "sha512-ybUAvjy4ZCL11uryalkKxuT3w3sXJAuWhOoGS3T/Wu+iUu1tGJmk5ytSY8gbdACNARmcYEB0COksD2j6hfGK2g==",
      "dev": true,
      "requires": {}
    },
    "@typescript-eslint/type-utils": {
-      "version": "8.54.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/type-utils/-/type-utils-8.54.0.tgz",
-      "integrity": "sha512-hiLguxJWHjjwL6xMBwD903ciAwd7DmK30Y9Axs/etOkftC3ZNN9K44IuRD/EB08amu+Zw6W37x9RecLkOo3pMA==",
+      "version": "8.47.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/type-utils/-/type-utils-8.47.0.tgz",
+      "integrity": "sha512-QC9RiCmZ2HmIdCEvhd1aJELBlD93ErziOXXlHEZyuBo3tBiAZieya0HLIxp+DoDWlsQqDawyKuNEhORyku+P8A==",
      "dev": true,
      "requires": {
-        "@typescript-eslint/types": "8.54.0",
-        "@typescript-eslint/typescript-estree": "8.54.0",
-        "@typescript-eslint/utils": "8.54.0",
-        "debug": "^4.4.3",
-        "ts-api-utils": "^2.4.0"
+        "@typescript-eslint/types": "8.47.0",
+        "@typescript-eslint/typescript-estree": "8.47.0",
+        "@typescript-eslint/utils": "8.47.0",
+        "debug": "^4.3.4",
+        "ts-api-utils": "^2.1.0"
      },
      "dependencies": {
        "ts-api-utils": {
-          "version": "2.4.0",
-          "resolved": "https://registry.npmjs.org/ts-api-utils/-/ts-api-utils-2.4.0.tgz",
-          "integrity": "sha512-3TaVTaAv2gTiMB35i3FiGJaRfwb3Pyn/j3m/bfAvGe8FB7CF6u+LMYqYlDh7reQf7UNvoTvdfAqHGmPGOSsPmA==",
+          "version": "2.1.0",
+          "resolved": "https://registry.npmjs.org/ts-api-utils/-/ts-api-utils-2.1.0.tgz",
+          "integrity": "sha512-CUgTZL1irw8u29bzrOD/nH85jqyc74D6SshFgujOIA7osm2Rz7dYH77agkx7H4FBNxDq7Cjf+IjaX/8zwFW+ZQ==",
          "dev": true,
          "requires": {}
        }
      }
    },
    "@typescript-eslint/types": {
-      "version": "8.54.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/types/-/types-8.54.0.tgz",
-      "integrity": "sha512-PDUI9R1BVjqu7AUDsRBbKMtwmjWcn4J3le+5LpcFgWULN3LvHC5rkc9gCVxbrsrGmO1jfPybN5s6h4Jy+OnkAA==",
+      "version": "8.47.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/types/-/types-8.47.0.tgz",
+      "integrity": "sha512-nHAE6bMKsizhA2uuYZbEbmp5z2UpffNrPEqiKIeN7VsV6UY/roxanWfoRrf6x/k9+Obf+GQdkm0nPU+vnMXo9A==",
      "dev": true
    },
    "@typescript-eslint/typescript-estree": {
-      "version": "8.54.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-8.54.0.tgz",
-      "integrity": "sha512-BUwcskRaPvTk6fzVWgDPdUndLjB87KYDrN5EYGetnktoeAvPtO4ONHlAZDnj5VFnUANg0Sjm7j4usBlnoVMHwA==",
+      "version": "8.47.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-8.47.0.tgz",
+      "integrity": "sha512-k6ti9UepJf5NpzCjH31hQNLHQWupTRPhZ+KFF8WtTuTpy7uHPfeg2NM7cP27aCGajoEplxJDFVCEm9TGPYyiVg==",
      "dev": true,
      "requires": {
-        "@typescript-eslint/project-service": "8.54.0",
-        "@typescript-eslint/tsconfig-utils": "8.54.0",
-        "@typescript-eslint/types": "8.54.0",
-        "@typescript-eslint/visitor-keys": "8.54.0",
-        "debug": "^4.4.3",
-        "minimatch": "^9.0.5",
-        "semver": "^7.7.3",
-        "tinyglobby": "^0.2.15",
-        "ts-api-utils": "^2.4.0"
+        "@typescript-eslint/project-service": "8.47.0",
+        "@typescript-eslint/tsconfig-utils": "8.47.0",
+        "@typescript-eslint/types": "8.47.0",
+        "@typescript-eslint/visitor-keys": "8.47.0",
+        "debug": "^4.3.4",
+        "fast-glob": "^3.3.2",
+        "is-glob": "^4.0.3",
+        "minimatch": "^9.0.4",
+        "semver": "^7.6.0",
+        "ts-api-utils": "^2.1.0"
      },
      "dependencies": {
        "balanced-match": {
@@ -5083,33 +5057,33 @@
          }
        },
        "ts-api-utils": {
-          "version": "2.4.0",
-          "resolved": "https://registry.npmjs.org/ts-api-utils/-/ts-api-utils-2.4.0.tgz",
-          "integrity": "sha512-3TaVTaAv2gTiMB35i3FiGJaRfwb3Pyn/j3m/bfAvGe8FB7CF6u+LMYqYlDh7reQf7UNvoTvdfAqHGmPGOSsPmA==",
+          "version": "2.1.0",
+          "resolved": "https://registry.npmjs.org/ts-api-utils/-/ts-api-utils-2.1.0.tgz",
+          "integrity": "sha512-CUgTZL1irw8u29bzrOD/nH85jqyc74D6SshFgujOIA7osm2Rz7dYH77agkx7H4FBNxDq7Cjf+IjaX/8zwFW+ZQ==",
          "dev": true,
          "requires": {}
        }
      }
    },
    "@typescript-eslint/utils": {
-      "version": "8.54.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/utils/-/utils-8.54.0.tgz",
-      "integrity": "sha512-9Cnda8GS57AQakvRyG0PTejJNlA2xhvyNtEVIMlDWOOeEyBkYWhGPnfrIAnqxLMTSTo6q8g12XVjjev5l1NvMA==",
+      "version": "8.47.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/utils/-/utils-8.47.0.tgz",
+      "integrity": "sha512-g7XrNf25iL4TJOiPqatNuaChyqt49a/onq5YsJ9+hXeugK+41LVg7AxikMfM02PC6jbNtZLCJj6AUcQXJS/jGQ==",
      "dev": true,
      "requires": {
-        "@eslint-community/eslint-utils": "^4.9.1",
-        "@typescript-eslint/scope-manager": "8.54.0",
-        "@typescript-eslint/types": "8.54.0",
-        "@typescript-eslint/typescript-estree": "8.54.0"
+        "@eslint-community/eslint-utils": "^4.7.0",
+        "@typescript-eslint/scope-manager": "8.47.0",
+        "@typescript-eslint/types": "8.47.0",
+        "@typescript-eslint/typescript-estree": "8.47.0"
      }
    },
    "@typescript-eslint/visitor-keys": {
-      "version": "8.54.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-8.54.0.tgz",
-      "integrity": "sha512-VFlhGSl4opC0bprJiItPQ1RfUhGDIBokcPwaFH4yiBCaNPeld/9VeXbiPO1cLyorQi1G1vL+ecBk1x8o1axORA==",
+      "version": "8.47.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-8.47.0.tgz",
+      "integrity": "sha512-SIV3/6eftCy1bNzCQoPmbWsRLujS8t5iDIZ4spZOBHqrM+yfX2ogg8Tt3PDTAVKw3sSCiUgg30uOAvK2r9zGjQ==",
      "dev": true,
      "requires": {
-        "@typescript-eslint/types": "8.54.0",
+        "@typescript-eslint/types": "8.47.0",
        "eslint-visitor-keys": "^4.2.1"
      },
      "dependencies": {
@@ -5464,9 +5438,9 @@
      "dev": true
    },
    "debug": {
-      "version": "4.4.3",
-      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
-      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
+      "version": "4.4.0",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.0.tgz",
+      "integrity": "sha512-6WTZ/IxCY/T6BALoZHaE4ctp9xm+Z5kY/pzYaCHRFeyVhojxlrm+46y68HA6hr0TcwEssoxNiDEUJQjfPZ/RYA==",
      "dev": true,
      "requires": {
        "ms": "^2.1.3"
@@ -7415,9 +7389,9 @@
      }
    },
    "semver": {
-      "version": "7.7.4",
-      "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.4.tgz",
-      "integrity": "sha512-vFKC2IEtQnVhpT78h1Yp8wzwrf8CM+MzKMHGJZfBtzhZNycRFnXsHk6E5TxIkkMsgNS7mdX3AGB7x2QM2di4lA==",
+      "version": "7.6.2",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.6.2.tgz",
+      "integrity": "sha512-FNAIBWCx9qcRhoHcgcJ0gvU7SN1lYU2ZXuSfl04bSC5OpvDHFyJCjdNHomPXxjQlCBU67YW64PzY7/VIEH7F2w==",
      "dev": true
    },
    "shebang-command": {
@@ -7613,31 +7587,6 @@
      "integrity": "sha512-N+8UisAXDGk8PFXP4HAzVR9nbfmVJ3zYLAWiTIoqC5v5isinhr+r5uaO8+7r3BMfuNIufIsA7RdpVgacC2cSpw==",
      "dev": true
    },
-    "tinyglobby": {
-      "version": "0.2.15",
-      "resolved": "https://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.15.tgz",
-      "integrity": "sha512-j2Zq4NyQYG5XMST4cbs02Ak8iJUdxRM0XI5QyxXuZOzKOINmWurp3smXu3y5wDcJrptwpSjgXHzIQxR0omXljQ==",
-      "dev": true,
-      "requires": {
-        "fdir": "^6.5.0",
-        "picomatch": "^4.0.3"
-      },
-      "dependencies": {
-        "fdir": {
-          "version": "6.5.0",
-          "resolved": "https://registry.npmjs.org/fdir/-/fdir-6.5.0.tgz",
-          "integrity": "sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==",
-          "dev": true,
-          "requires": {}
-        },
-        "picomatch": {
-          "version": "4.0.3",
-          "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz",
-          "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==",
-          "dev": true
-        }
-      }
-    },
    "titleize": {
      "version": "3.0.0",
      "resolved": "https://registry.npmjs.org/titleize/-/titleize-3.0.0.tgz",
--- a/src/Misc/expressionFunc/hashFiles/package.json
+++ b/src/Misc/expressionFunc/hashFiles/package.json
@@ -35,9 +35,9 @@
    "@actions/glob": "^0.4.0"
  },
  "devDependencies": {
-    "@stylistic/eslint-plugin": "^5.10.0",
+    "@stylistic/eslint-plugin": "^5.9.0",
    "@types/node": "^22.0.0",
-    "@typescript-eslint/eslint-plugin": "^8.54.0",
+    "@typescript-eslint/eslint-plugin": "^8.0.0",
    "@typescript-eslint/parser": "^8.0.0",
    "@vercel/ncc": "^0.38.3",
    "eslint": "^8.47.0",
--- a/src/Misc/externals.sh
+++ b/src/Misc/externals.sh
@@ -6,7 +6,7 @@ NODE_URL=https://nodejs.org/dist
 NODE_ALPINE_URL=https://github.com/actions/alpine_nodejs/releases/download
 # When you update Node versions you must also create a new release of alpine_nodejs at that updated version.
 # Follow the instructions here: https://github.com/actions/alpine_nodejs?tab=readme-ov-file#getting-started
-NODE20_VERSION="20.20.1"
+NODE20_VERSION="20.20.0"
 NODE24_VERSION="24.14.0"

 get_abs_path() {
--- a/src/Misc/layoutroot/run-helper.cmd.template
+++ b/src/Misc/layoutroot/run-helper.cmd.template
@@ -10,13 +10,6 @@ if %ERRORLEVEL% EQU 0 (
  exit /b 0
 )

-if "%ACTIONS_RUNNER_RETURN_VERSION_DEPRECATED_EXIT_CODE%"=="1" (
-  if %ERRORLEVEL% EQU 7 (
-    echo "Runner listener exit with deprecated version error code: %ERRORLEVEL%."
-    exit /b %ERRORLEVEL%
-  )
-)
-
 if %ERRORLEVEL% EQU 1 (
  echo "Runner listener exit with terminated error, stop the service, no retry needed."
  exit /b 0
--- a/src/Misc/layoutroot/run-helper.sh.template
+++ b/src/Misc/layoutroot/run-helper.sh.template
@@ -34,13 +34,11 @@ fi

 updateFile="update.finished"
 "$DIR"/bin/Runner.Listener run $*
+
 returnCode=$?
 if [[ $returnCode == 0 ]]; then
    echo "Runner listener exit with 0 return code, stop the service, no retry needed."
    exit 0
-elif [[ "$ACTIONS_RUNNER_RETURN_VERSION_DEPRECATED_EXIT_CODE" == "1" && $returnCode -eq 7 ]]; then
-    echo "Runner listener exit with deprecated version exit code: ${returnCode}."
-    exit "$returnCode"
 elif [[ $returnCode == 1 ]]; then
    echo "Runner listener exit with terminated error, stop the service, no retry needed."
    exit 0
--- a/src/Misc/layoutroot/run.cmd
+++ b/src/Misc/layoutroot/run.cmd
@@ -25,14 +25,7 @@ call "%~dp0run-helper.cmd" %*
 if %ERRORLEVEL% EQU 1 (
  echo "Restarting runner..."
  goto :launch_helper
+) else (  
+  echo "Exiting runner..."
+  exit /b 0
 )
-
-if "%ACTIONS_RUNNER_RETURN_VERSION_DEPRECATED_EXIT_CODE%"=="1" (
-  if %ERRORLEVEL% EQU 7 (
-    echo "Exiting runner with deprecated version error code: %ERRORLEVEL%"
-    exit /b %ERRORLEVEL%
-  )
-)
-
-echo "Exiting runner..."
-exit /b 0
--- a/src/Misc/layoutroot/run.sh
+++ b/src/Misc/layoutroot/run.sh
@@ -19,9 +19,6 @@ run() {
        returnCode=$?
        if [[ $returnCode -eq 2 ]]; then
            echo "Restarting runner..."
-        elif [[ "$ACTIONS_RUNNER_RETURN_VERSION_DEPRECATED_EXIT_CODE" == "1" && $returnCode -eq 7 ]]; then
-            echo "Exiting runner..."
-            exit "$returnCode"
        else
            echo "Exiting runner..."
            exit 0
@@ -45,9 +42,6 @@ runWithManualTrap() {
        returnCode=$?
        if [[ $returnCode -eq 2 ]]; then
            echo "Restarting runner..."
-        elif [[ "$ACTIONS_RUNNER_RETURN_VERSION_DEPRECATED_EXIT_CODE" == "1" && $returnCode -eq 7 ]]; then
-            echo "Exiting runner..."
-            exit "$returnCode"
        else
            echo "Exiting runner..."
            # Unregister signal handling before exit
--- a/src/Runner.Common/Constants.cs
+++ b/src/Runner.Common/Constants.cs
@@ -159,7 +159,6 @@ namespace GitHub.Runner.Common
                // and the runner should be restarted. This is a temporary code and will be removed in the future after
                // the runner is migrated to runner admin.
                public const int RunnerConfigurationRefreshed = 6;
-                public const int RunnerVersionDeprecated = 7;
            }

            public static class Features
@@ -278,7 +277,6 @@ namespace GitHub.Runner.Common
                public static readonly string AllowUnsupportedCommands = "ACTIONS_ALLOW_UNSECURE_COMMANDS";
                public static readonly string AllowUnsupportedStopCommandTokens = "ACTIONS_ALLOW_UNSECURE_STOPCOMMAND_TOKENS";
                public static readonly string RequireJobContainer = "ACTIONS_RUNNER_REQUIRE_JOB_CONTAINER";
-                public static readonly string ReturnVersionDeprecatedExitCode = "ACTIONS_RUNNER_RETURN_VERSION_DEPRECATED_EXIT_CODE";
                public static readonly string RunnerDebug = "ACTIONS_RUNNER_DEBUG";
                public static readonly string StepDebug = "ACTIONS_STEP_DEBUG";
            }
--- a/src/Runner.Listener/Program.cs
+++ b/src/Runner.Listener/Program.cs
@@ -141,9 +141,9 @@ namespace GitHub.Runner.Listener
            }
            catch (AccessDeniedException e) when (e.ErrorCode == 1)
            {
-                terminal.WriteError($"An error occurred: {e.Message}");
+                terminal.WriteError($"An error occured: {e.Message}");
                trace.Error(e);
-                return GetRunnerVersionDeprecatedExitCode();
+                return Constants.Runner.ReturnCode.TerminatedError;
            }
            catch (RunnerNotFoundException e)
            {
@@ -159,16 +159,6 @@ namespace GitHub.Runner.Listener
            }
        }

-        private static int GetRunnerVersionDeprecatedExitCode()
-        {
-            if (StringUtil.ConvertToBoolean(Environment.GetEnvironmentVariable(Constants.Variables.Actions.ReturnVersionDeprecatedExitCode)))
-            {
-                return Constants.Runner.ReturnCode.RunnerVersionDeprecated;
-            }
-
-            return Constants.Runner.ReturnCode.TerminatedError;
-        }
-
        private static void LoadAndSetEnv()
        {
            var binDir = Path.GetDirectoryName(Assembly.GetEntryAssembly().Location);
--- a/src/Runner.Worker/Dap/DapDebugSession.cs
+++ b/src/Runner.Worker/Dap/DapDebugSession.cs
@@ -0,0 +1,906 @@
+using System;
+using System.Collections.Generic;
+using System.Threading;
+using System.Threading.Tasks;
+using GitHub.DistributedTask.WebApi;
+using GitHub.Runner.Common;
+using Newtonsoft.Json;
+
+namespace GitHub.Runner.Worker.Dap
+{
+    /// <summary>
+    /// Stores information about a completed step for stack trace display.
+    /// </summary>
+    internal sealed class CompletedStepInfo
+    {
+        public string DisplayName { get; set; }
+        public TaskResult? Result { get; set; }
+        public int FrameId { get; set; }
+    }
+
+    /// <summary>
+    /// Handles step-level breakpoints with next/continue flow control,
+    /// scope/variable inspection, client reconnection, and cancellation
+    /// signal propagation.
+    ///
+    /// REPL, step manipulation, and time-travel debugging are intentionally
+    /// deferred to future iterations.
+    /// </summary>
+    public sealed class DapDebugSession : RunnerService, IDapDebugSession
+    {
+        // Thread ID for the single job execution thread
+        private const int JobThreadId = 1;
+
+        // Frame ID for the current step (always 1)
+        private const int CurrentFrameId = 1;
+
+        // Frame IDs for completed steps start at 1000
+        private const int CompletedFrameIdBase = 1000;
+
+        private IDapServer _server;
+        private volatile DapSessionState _state = DapSessionState.WaitingForConnection;
+
+        // Synchronization for step execution
+        private TaskCompletionSource<DapCommand> _commandTcs;
+        private readonly object _stateLock = new object();
+
+        // Handshake completion — signaled when configurationDone is received
+        private readonly TaskCompletionSource<bool> _handshakeTcs = new TaskCompletionSource<bool>(TaskCreationOptions.RunContinuationsAsynchronously);
+
+        // Whether to pause before the next step (set by 'next' command)
+        private bool _pauseOnNextStep = true;
+
+        // Current execution context
+        private IStep _currentStep;
+        private IExecutionContext _jobContext;
+        private int _currentStepIndex;
+
+        // Track completed steps for stack trace
+        private readonly List<CompletedStepInfo> _completedSteps = new List<CompletedStepInfo>();
+        private int _nextCompletedFrameId = CompletedFrameIdBase;
+
+        // Client connection tracking for reconnection support
+        private volatile bool _isClientConnected;
+
+        // Scope/variable inspection provider — reusable by future DAP features
+        private DapVariableProvider _variableProvider;
+
+        // REPL command executor for run() commands
+        private DapReplExecutor _replExecutor;
+
+        public bool IsActive =>
+            _state == DapSessionState.Ready ||
+            _state == DapSessionState.Paused ||
+            _state == DapSessionState.Running;
+
+        public DapSessionState State => _state;
+
+        public override void Initialize(IHostContext hostContext)
+        {
+            base.Initialize(hostContext);
+            _variableProvider = new DapVariableProvider(hostContext);
+            Trace.Info("DapDebugSession initialized");
+        }
+
+        public void SetDapServer(IDapServer server)
+        {
+            _server = server;
+            _replExecutor = new DapReplExecutor(HostContext, server);
+            Trace.Info("DAP server reference set");
+        }
+
+        public async Task WaitForHandshakeAsync(CancellationToken cancellationToken)
+        {
+            Trace.Info("Waiting for DAP handshake (configurationDone)...");
+
+            using (cancellationToken.Register(() => _handshakeTcs.TrySetCanceled()))
+            {
+                await _handshakeTcs.Task;
+            }
+
+            Trace.Info("DAP handshake complete, session is ready");
+        }
+
+        #region Message Dispatch
+
+        public async Task HandleMessageAsync(string messageJson, CancellationToken cancellationToken)
+        {
+            Request request = null;
+            try
+            {
+                request = JsonConvert.DeserializeObject<Request>(messageJson);
+                if (request == null)
+                {
+                    Trace.Warning("Failed to deserialize DAP request");
+                    return;
+                }
+
+                Trace.Info("Handling DAP request");
+
+                Response response;
+                if (request.Command == "evaluate")
+                {
+                    response = await HandleEvaluateAsync(request, cancellationToken);
+                }
+                else
+                {
+                    response = request.Command switch
+                    {
+                        "initialize" => HandleInitialize(request),
+                        "attach" => HandleAttach(request),
+                        "configurationDone" => HandleConfigurationDone(request),
+                        "disconnect" => HandleDisconnect(request),
+                        "threads" => HandleThreads(request),
+                        "stackTrace" => HandleStackTrace(request),
+                        "scopes" => HandleScopes(request),
+                        "variables" => HandleVariables(request),
+                        "continue" => HandleContinue(request),
+                        "next" => HandleNext(request),
+                        "setBreakpoints" => HandleSetBreakpoints(request),
+                        "setExceptionBreakpoints" => HandleSetExceptionBreakpoints(request),
+                        "completions" => HandleCompletions(request),
+                        "stepIn" => CreateResponse(request, false, "Step In is not supported. Actions jobs debug at the step level — use 'next' to advance to the next step.", body: null),
+                        "stepOut" => CreateResponse(request, false, "Step Out is not supported. Actions jobs debug at the step level — use 'continue' to resume.", body: null),
+                        "stepBack" => CreateResponse(request, false, "Step Back is not yet supported.", body: null),
+                        "reverseContinue" => CreateResponse(request, false, "Reverse Continue is not yet supported.", body: null),
+                        "pause" => CreateResponse(request, false, "Pause is not supported. The debugger pauses automatically at step boundaries.", body: null),
+                        _ => CreateResponse(request, false, $"Unsupported command: {request.Command}", body: null)
+                    };
+                }
+
+                response.RequestSeq = request.Seq;
+                response.Command = request.Command;
+
+                _server?.SendResponse(response);
+            }
+            catch (Exception ex)
+            {
+                Trace.Error($"Error handling DAP request ({ex.GetType().Name})");
+                if (request != null)
+                {
+                    var maskedMessage = HostContext?.SecretMasker?.MaskSecrets(ex.Message) ?? ex.Message;
+                    var errorResponse = CreateResponse(request, false, maskedMessage, body: null);
+                    errorResponse.RequestSeq = request.Seq;
+                    errorResponse.Command = request.Command;
+                    _server?.SendResponse(errorResponse);
+                }
+            }
+        }
+
+        #endregion
+
+        #region DAP Request Handlers
+
+        private Response HandleInitialize(Request request)
+        {
+            if (request.Arguments != null)
+            {
+                try
+                {
+                    request.Arguments.ToObject<InitializeRequestArguments>();
+                    Trace.Info("Initialize arguments received");
+                }
+                catch (Exception ex)
+                {
+                    Trace.Warning($"Failed to parse initialize arguments ({ex.GetType().Name})");
+                }
+            }
+
+            _state = DapSessionState.Initializing;
+
+            // Build capabilities — MVP only supports configurationDone
+            var capabilities = new Capabilities
+            {
+                SupportsConfigurationDoneRequest = true,
+                // All other capabilities are false for MVP
+                SupportsFunctionBreakpoints = false,
+                SupportsConditionalBreakpoints = false,
+                SupportsEvaluateForHovers = true,
+                SupportsStepBack = false,
+                SupportsSetVariable = false,
+                SupportsRestartFrame = false,
+                SupportsGotoTargetsRequest = false,
+                SupportsStepInTargetsRequest = false,
+                SupportsCompletionsRequest = true,
+                SupportsModulesRequest = false,
+                SupportsTerminateRequest = false,
+                SupportTerminateDebuggee = false,
+                SupportsDelayedStackTraceLoading = false,
+                SupportsLoadedSourcesRequest = false,
+                SupportsProgressReporting = false,
+                SupportsRunInTerminalRequest = false,
+                SupportsCancelRequest = false,
+                SupportsExceptionOptions = false,
+                SupportsValueFormattingOptions = false,
+                SupportsExceptionInfoRequest = false,
+            };
+
+            // Send initialized event after a brief delay to ensure the
+            // response is delivered first (DAP spec requirement)
+            _ = Task.Run(async () =>
+            {
+                await Task.Delay(50);
+                _server?.SendEvent(new Event
+                {
+                    EventType = "initialized"
+                });
+                Trace.Info("Sent initialized event");
+            });
+
+            Trace.Info("Initialize request handled, capabilities sent");
+            return CreateResponse(request, true, body: capabilities);
+        }
+
+        private Response HandleAttach(Request request)
+        {
+            Trace.Info("Attach request handled");
+            return CreateResponse(request, true, body: null);
+        }
+
+        private Response HandleConfigurationDone(Request request)
+        {
+            lock (_stateLock)
+            {
+                _state = DapSessionState.Ready;
+            }
+
+            _handshakeTcs.TrySetResult(true);
+
+            Trace.Info("Configuration done, debug session is ready");
+            return CreateResponse(request, true, body: null);
+        }
+
+        private Response HandleDisconnect(Request request)
+        {
+            Trace.Info("Disconnect request received");
+
+            lock (_stateLock)
+            {
+                _state = DapSessionState.Terminated;
+
+                // Release any blocked step execution
+                _commandTcs?.TrySetResult(DapCommand.Disconnect);
+            }
+
+            return CreateResponse(request, true, body: null);
+        }
+
+        private Response HandleThreads(Request request)
+        {
+            IExecutionContext jobContext;
+            lock (_stateLock)
+            {
+                jobContext = _jobContext;
+            }
+
+            var threadName = jobContext != null
+                ? MaskUserVisibleText($"Job: {jobContext.GetGitHubContext("job") ?? "workflow job"}")
+                : "Job Thread";
+
+            var body = new ThreadsResponseBody
+            {
+                Threads = new List<Thread>
+                {
+                    new Thread
+                    {
+                        Id = JobThreadId,
+                        Name = threadName
+                    }
+                }
+            };
+
+            return CreateResponse(request, true, body: body);
+        }
+
+        private Response HandleStackTrace(Request request)
+        {
+            IStep currentStep;
+            int currentStepIndex;
+            CompletedStepInfo[] completedSteps;
+            lock (_stateLock)
+            {
+                currentStep = _currentStep;
+                currentStepIndex = _currentStepIndex;
+                completedSteps = _completedSteps.ToArray();
+            }
+
+            var frames = new List<StackFrame>();
+
+            // Add current step as the top frame
+            if (currentStep != null)
+            {
+                var resultIndicator = currentStep.ExecutionContext?.Result != null
+                    ? $" [{currentStep.ExecutionContext.Result}]"
+                    : " [running]";
+
+                frames.Add(new StackFrame
+                {
+                    Id = CurrentFrameId,
+                    Name = MaskUserVisibleText($"{currentStep.DisplayName ?? "Current Step"}{resultIndicator}"),
+                    Line = currentStepIndex + 1,
+                    Column = 1,
+                    PresentationHint = "normal"
+                });
+            }
+            else
+            {
+                frames.Add(new StackFrame
+                {
+                    Id = CurrentFrameId,
+                    Name = "(no step executing)",
+                    Line = 0,
+                    Column = 1,
+                    PresentationHint = "subtle"
+                });
+            }
+
+            // Add completed steps as additional frames (most recent first)
+            for (int i = completedSteps.Length - 1; i >= 0; i--)
+            {
+                var completedStep = completedSteps[i];
+                var resultStr = completedStep.Result.HasValue ? $" [{completedStep.Result}]" : "";
+                frames.Add(new StackFrame
+                {
+                    Id = completedStep.FrameId,
+                    Name = MaskUserVisibleText($"{completedStep.DisplayName}{resultStr}"),
+                    Line = 1,
+                    Column = 1,
+                    PresentationHint = "subtle"
+                });
+            }
+
+            var body = new StackTraceResponseBody
+            {
+                StackFrames = frames,
+                TotalFrames = frames.Count
+            };
+
+            return CreateResponse(request, true, body: body);
+        }
+
+        private Response HandleScopes(Request request)
+        {
+            var args = request.Arguments?.ToObject<ScopesArguments>();
+            var frameId = args?.FrameId ?? CurrentFrameId;
+
+            var context = GetExecutionContextForFrame(frameId);
+            if (context == null)
+            {
+                return CreateResponse(request, true, body: new ScopesResponseBody
+                {
+                    Scopes = new List<Scope>()
+                });
+            }
+
+            var scopes = _variableProvider.GetScopes(context);
+            return CreateResponse(request, true, body: new ScopesResponseBody
+            {
+                Scopes = scopes
+            });
+        }
+
+        private Response HandleVariables(Request request)
+        {
+            var args = request.Arguments?.ToObject<VariablesArguments>();
+            var variablesRef = args?.VariablesReference ?? 0;
+
+            var context = GetCurrentExecutionContext();
+            if (context == null)
+            {
+                return CreateResponse(request, true, body: new VariablesResponseBody
+                {
+                    Variables = new List<Variable>()
+                });
+            }
+
+            var variables = _variableProvider.GetVariables(context, variablesRef);
+            return CreateResponse(request, true, body: new VariablesResponseBody
+            {
+                Variables = variables
+            });
+        }
+
+        private async Task<Response> HandleEvaluateAsync(Request request, CancellationToken cancellationToken)
+        {
+            var args = request.Arguments?.ToObject<EvaluateArguments>();
+            var expression = args?.Expression ?? string.Empty;
+            var frameId = args?.FrameId ?? CurrentFrameId;
+            var evalContext = args?.Context ?? "hover";
+
+            Trace.Info("Evaluate request received");
+
+            // REPL context → route through the DSL dispatcher
+            if (string.Equals(evalContext, "repl", StringComparison.OrdinalIgnoreCase))
+            {
+                var result = await HandleReplInputAsync(expression, frameId, cancellationToken);
+                return CreateResponse(request, true, body: result);
+            }
+
+            // Watch/hover/variables/clipboard → expression evaluation only
+            var context = GetExecutionContextForFrame(frameId);
+            var evalResult = _variableProvider.EvaluateExpression(expression, context);
+            return CreateResponse(request, true, body: evalResult);
+        }
+
+        /// <summary>
+        /// Routes REPL input through the DSL parser. If the input matches a
+        /// known command it is dispatched; otherwise it falls through to
+        /// expression evaluation.
+        /// </summary>
+        private async Task<EvaluateResponseBody> HandleReplInputAsync(
+            string input,
+            int frameId,
+            CancellationToken cancellationToken)
+        {
+            // Try to parse as a DSL command
+            var command = DapReplParser.TryParse(input, out var parseError);
+
+            if (parseError != null)
+            {
+                return new EvaluateResponseBody
+                {
+                    Result = parseError,
+                    Type = "error",
+                    VariablesReference = 0
+                };
+            }
+
+            if (command != null)
+            {
+                return await DispatchReplCommandAsync(command, frameId, cancellationToken);
+            }
+
+            // Not a DSL command → evaluate as a GitHub Actions expression
+            // (this lets the REPL console also work for ad-hoc expression queries)
+            var context = GetExecutionContextForFrame(frameId);
+            return _variableProvider.EvaluateExpression(input, context);
+        }
+
+        private async Task<EvaluateResponseBody> DispatchReplCommandAsync(
+            DapReplCommand command,
+            int frameId,
+            CancellationToken cancellationToken)
+        {
+            switch (command)
+            {
+                case HelpCommand help:
+                    var helpText = string.IsNullOrEmpty(help.Topic)
+                        ? DapReplParser.GetGeneralHelp()
+                        : help.Topic.Equals("run", StringComparison.OrdinalIgnoreCase)
+                            ? DapReplParser.GetRunHelp()
+                            : $"Unknown help topic: {help.Topic}. Try: help or help(\"run\")";
+                    return new EvaluateResponseBody
+                    {
+                        Result = helpText,
+                        Type = "string",
+                        VariablesReference = 0
+                    };
+
+                case RunCommand run:
+                    var context = GetExecutionContextForFrame(frameId);
+                    return await _replExecutor.ExecuteRunCommandAsync(run, context, cancellationToken);
+
+                default:
+                    return new EvaluateResponseBody
+                    {
+                        Result = $"Unknown command type: {command.GetType().Name}",
+                        Type = "error",
+                        VariablesReference = 0
+                    };
+            }
+        }
+
+        private Response HandleCompletions(Request request)
+        {
+            var args = request.Arguments?.ToObject<CompletionsArguments>();
+            var text = args?.Text ?? string.Empty;
+
+            var items = new List<CompletionItem>();
+
+            // Offer DSL commands when the user is starting to type
+            if (string.IsNullOrEmpty(text) || "help".StartsWith(text, System.StringComparison.OrdinalIgnoreCase))
+            {
+                items.Add(new CompletionItem
+                {
+                    Label = "help",
+                    Text = "help",
+                    Detail = "Show available debug console commands",
+                    Type = "function"
+                });
+            }
+            if (string.IsNullOrEmpty(text) || "help(\"run\")".StartsWith(text, System.StringComparison.OrdinalIgnoreCase))
+            {
+                items.Add(new CompletionItem
+                {
+                    Label = "help(\"run\")",
+                    Text = "help(\"run\")",
+                    Detail = "Show help for the run command",
+                    Type = "function"
+                });
+            }
+            if (string.IsNullOrEmpty(text) || "run(".StartsWith(text, System.StringComparison.OrdinalIgnoreCase)
+                || text.StartsWith("run(", System.StringComparison.OrdinalIgnoreCase))
+            {
+                items.Add(new CompletionItem
+                {
+                    Label = "run(\"...\")",
+                    Text = "run(\"",
+                    Detail = "Execute a script (like a workflow run step)",
+                    Type = "function"
+                });
+            }
+
+            return CreateResponse(request, true, body: new CompletionsResponseBody
+            {
+                Targets = items
+            });
+        }
+
+        private Response HandleContinue(Request request)
+        {
+            Trace.Info("Continue command received");
+
+            lock (_stateLock)
+            {
+                if (_state == DapSessionState.Paused)
+                {
+                    _state = DapSessionState.Running;
+                    _pauseOnNextStep = false;
+                    _commandTcs?.TrySetResult(DapCommand.Continue);
+                }
+            }
+
+            return CreateResponse(request, true, body: new ContinueResponseBody
+            {
+                AllThreadsContinued = true
+            });
+        }
+
+        private Response HandleNext(Request request)
+        {
+            Trace.Info("Next (step over) command received");
+
+            lock (_stateLock)
+            {
+                if (_state == DapSessionState.Paused)
+                {
+                    _state = DapSessionState.Running;
+                    _pauseOnNextStep = true;
+                    _commandTcs?.TrySetResult(DapCommand.Next);
+                }
+            }
+
+            return CreateResponse(request, true, body: null);
+        }
+
+        private Response HandleSetBreakpoints(Request request)
+        {
+            // MVP: acknowledge but don't process breakpoints
+            // All steps pause automatically via _pauseOnNextStep
+            return CreateResponse(request, true, body: new { breakpoints = Array.Empty<object>() });
+        }
+
+        private Response HandleSetExceptionBreakpoints(Request request)
+        {
+            // MVP: acknowledge but don't process exception breakpoints
+            return CreateResponse(request, true, body: null);
+        }
+
+        #endregion
+
+        #region Step Lifecycle
+
+        public async Task OnStepStartingAsync(IStep step, IExecutionContext jobContext, bool isFirstStep, CancellationToken cancellationToken)
+        {
+            bool pauseOnNextStep;
+            lock (_stateLock)
+            {
+                if (_state != DapSessionState.Ready &&
+                    _state != DapSessionState.Paused &&
+                    _state != DapSessionState.Running)
+                {
+                    return;
+                }
+
+                _currentStep = step;
+                _jobContext = jobContext;
+                _currentStepIndex = _completedSteps.Count;
+                pauseOnNextStep = _pauseOnNextStep;
+            }
+
+            // Reset variable references so stale nested refs from the
+            // previous step are not served to the client.
+            _variableProvider?.Reset();
+
+            // Determine if we should pause
+            bool shouldPause = isFirstStep || pauseOnNextStep;
+
+            if (!shouldPause)
+            {
+                Trace.Info("Step starting without debugger pause");
+                return;
+            }
+
+            var reason = isFirstStep ? "entry" : "step";
+            var description = isFirstStep
+                ? $"Stopped at job entry: {step.DisplayName}"
+                : $"Stopped before step: {step.DisplayName}";
+
+            Trace.Info("Step starting with debugger pause");
+
+            // Send stopped event to debugger (only if client is connected)
+            SendStoppedEvent(reason, description);
+
+            // Wait for debugger command
+            await WaitForCommandAsync(cancellationToken);
+        }
+
+        public void OnStepCompleted(IStep step)
+        {
+            var result = step.ExecutionContext?.Result;
+            Trace.Info("Step completed");
+
+            // Add to completed steps list for stack trace
+            lock (_stateLock)
+            {
+                if (_state != DapSessionState.Ready &&
+                    _state != DapSessionState.Paused &&
+                    _state != DapSessionState.Running)
+                {
+                    return;
+                }
+
+                _completedSteps.Add(new CompletedStepInfo
+                {
+                    DisplayName = step.DisplayName,
+                    Result = result,
+                    FrameId = _nextCompletedFrameId++
+                });
+            }
+        }
+
+        public void OnJobCompleted()
+        {
+            Trace.Info("Job completed, sending terminated event");
+
+            int exitCode;
+            lock (_stateLock)
+            {
+                if (_state == DapSessionState.Terminated)
+                {
+                    Trace.Info("Session already terminated, skipping OnJobCompleted events");
+                    return;
+                }
+                _state = DapSessionState.Terminated;
+                exitCode = _jobContext?.Result == TaskResult.Succeeded ? 0 : 1;
+            }
+
+            _server?.SendEvent(new Event
+            {
+                EventType = "terminated",
+                Body = new TerminatedEventBody()
+            });
+
+            _server?.SendEvent(new Event
+            {
+                EventType = "exited",
+                Body = new ExitedEventBody
+                {
+                    ExitCode = exitCode
+                }
+            });
+        }
+
+        public void CancelSession()
+        {
+            Trace.Info("CancelSession called - terminating debug session");
+
+            lock (_stateLock)
+            {
+                if (_state == DapSessionState.Terminated)
+                {
+                    Trace.Info("Session already terminated, ignoring CancelSession");
+                    return;
+                }
+                _state = DapSessionState.Terminated;
+            }
+
+            // Send terminated event to debugger so it updates its UI
+            _server?.SendEvent(new Event
+            {
+                EventType = "terminated",
+                Body = new TerminatedEventBody()
+            });
+
+            // Send exited event with cancellation exit code (130 = SIGINT convention)
+            _server?.SendEvent(new Event
+            {
+                EventType = "exited",
+                Body = new ExitedEventBody { ExitCode = 130 }
+            });
+
+            // Release any pending command waits
+            _commandTcs?.TrySetResult(DapCommand.Disconnect);
+
+            // Release handshake wait if still pending
+            _handshakeTcs.TrySetCanceled();
+
+            Trace.Info("Debug session cancelled");
+        }
+
+        #endregion
+
+        #region Client Connection Tracking
+
+        public void HandleClientConnected()
+        {
+            _isClientConnected = true;
+            Trace.Info("Client connected to debug session");
+
+            // If we're paused, re-send the stopped event so the new client
+            // knows the current state (important for reconnection)
+            string description = null;
+            lock (_stateLock)
+            {
+                if (_state == DapSessionState.Paused && _currentStep != null)
+                {
+                    description = $"Stopped before step: {_currentStep.DisplayName}";
+                }
+            }
+
+            if (description != null)
+            {
+                Trace.Info("Re-sending stopped event to reconnected client");
+                SendStoppedEvent("step", description);
+            }
+        }
+
+        public void HandleClientDisconnected()
+        {
+            _isClientConnected = false;
+            Trace.Info("Client disconnected from debug session");
+
+            // Intentionally do NOT release the command TCS here.
+            // The session stays paused, waiting for a client to reconnect.
+            // The server's connection loop will accept a new client and
+            // call HandleClientConnected, which re-sends the stopped event.
+        }
+
+        #endregion
+
+        #region Private Helpers
+
+        /// <summary>
+        /// Blocks the step execution thread until a debugger command is received
+        /// or the job is cancelled.
+        /// </summary>
+        private async Task WaitForCommandAsync(CancellationToken cancellationToken)
+        {
+            lock (_stateLock)
+            {
+                if (_state == DapSessionState.Terminated)
+                {
+                    return;
+                }
+                _state = DapSessionState.Paused;
+                _commandTcs = new TaskCompletionSource<DapCommand>(TaskCreationOptions.RunContinuationsAsynchronously);
+            }
+
+            Trace.Info("Waiting for debugger command...");
+
+            using (cancellationToken.Register(() =>
+            {
+                Trace.Info("Job cancellation detected, releasing debugger wait");
+                _commandTcs?.TrySetResult(DapCommand.Disconnect);
+            }))
+            {
+                var command = await _commandTcs.Task;
+
+                Trace.Info("Received debugger command");
+
+                lock (_stateLock)
+                {
+                    if (_state == DapSessionState.Paused)
+                    {
+                        _state = DapSessionState.Running;
+                    }
+                }
+
+                // Send continued event for normal flow commands
+                if (!cancellationToken.IsCancellationRequested &&
+                    (command == DapCommand.Continue || command == DapCommand.Next))
+                {
+                    _server?.SendEvent(new Event
+                    {
+                        EventType = "continued",
+                        Body = new ContinuedEventBody
+                        {
+                            ThreadId = JobThreadId,
+                            AllThreadsContinued = true
+                        }
+                    });
+                }
+            }
+        }
+
+        /// <summary>
+        /// Resolves the execution context for a given stack frame ID.
+        /// Frame 1 = current step; frames 1000+ = completed steps (no
+        /// context available — those steps have already finished).
+        /// Falls back to the job-level context when no step is active.
+        /// </summary>
+        private IExecutionContext GetExecutionContextForFrame(int frameId)
+        {
+            if (frameId == CurrentFrameId)
+            {
+                return GetCurrentExecutionContext();
+            }
+
+            // Completed-step frames don't carry a live execution context.
+            return null;
+        }
+
+        private IExecutionContext GetCurrentExecutionContext()
+        {
+            lock (_stateLock)
+            {
+                return _currentStep?.ExecutionContext ?? _jobContext;
+            }
+        }
+
+        /// <summary>
+        /// Sends a stopped event to the connected client.
+        /// Silently no-ops if no client is connected.
+        /// </summary>
+        private void SendStoppedEvent(string reason, string description)
+        {
+            if (!_isClientConnected)
+            {
+                Trace.Info("No client connected, deferring stopped event");
+                return;
+            }
+
+            _server?.SendEvent(new Event
+            {
+                EventType = "stopped",
+                Body = new StoppedEventBody
+                {
+                    Reason = reason,
+                    Description = MaskUserVisibleText(description),
+                    ThreadId = JobThreadId,
+                    AllThreadsStopped = true
+                }
+            });
+        }
+
+        private string MaskUserVisibleText(string value)
+        {
+            if (string.IsNullOrEmpty(value))
+            {
+                return value ?? string.Empty;
+            }
+
+            return _variableProvider?.MaskSecrets(value)
+                ?? HostContext?.SecretMasker?.MaskSecrets(value)
+                ?? value;
+        }
+
+        /// <summary>
+        /// Creates a DAP response with common fields pre-populated.
+        /// </summary>
+        private Response CreateResponse(Request request, bool success, string message = null, object body = null)
+        {
+            return new Response
+            {
+                Type = "response",
+                RequestSeq = request.Seq,
+                Command = request.Command,
+                Success = success,
+                Message = success ? null : message,
+                Body = body
+            };
+        }
+
+        #endregion
+    }
+}
--- a/src/Runner.Worker/Dap/DapMessages.cs
+++ b/src/Runner.Worker/Dap/DapMessages.cs
--- a/src/Runner.Worker/Dap/DapReplExecutor.cs
+++ b/src/Runner.Worker/Dap/DapReplExecutor.cs
@@ -0,0 +1,377 @@
+using System;
+using System.Collections.Generic;
+using System.IO;
+using System.Linq;
+using System.Text;
+using System.Threading;
+using System.Threading.Tasks;
+using GitHub.DistributedTask.Pipelines.ContextData;
+using GitHub.Runner.Common;
+using GitHub.Runner.Common.Util;
+using GitHub.Runner.Sdk;
+using GitHub.Runner.Worker.Handlers;
+
+namespace GitHub.Runner.Worker.Dap
+{
+    /// <summary>
+    /// Executes <see cref="RunCommand"/> objects in the job's runtime context.
+    ///
+    /// Mirrors the behavior of a normal workflow <c>run:</c> step as closely
+    /// as possible by reusing the runner's existing shell-resolution logic,
+    /// script fixup helpers, and process execution infrastructure.
+    ///
+    /// Output is streamed to the debugger via DAP <c>output</c> events with
+    /// secrets masked before emission.
+    /// </summary>
+    internal sealed class DapReplExecutor
+    {
+        private readonly IHostContext _hostContext;
+        private readonly IDapServer _server;
+        private readonly Tracing _trace;
+
+        public DapReplExecutor(IHostContext hostContext, IDapServer server)
+        {
+            _hostContext = hostContext ?? throw new ArgumentNullException(nameof(hostContext));
+            _server = server;
+            _trace = hostContext.GetTrace(nameof(DapReplExecutor));
+        }
+
+        /// <summary>
+        /// Executes a <see cref="RunCommand"/> and returns the exit code as a
+        /// formatted <see cref="EvaluateResponseBody"/>.
+        /// </summary>
+        public async Task<EvaluateResponseBody> ExecuteRunCommandAsync(
+            RunCommand command,
+            IExecutionContext context,
+            CancellationToken cancellationToken)
+        {
+            if (context == null)
+            {
+                return ErrorResult("No execution context available. The debugger must be paused at a step to run commands.");
+            }
+
+            try
+            {
+                return await ExecuteScriptAsync(command, context, cancellationToken);
+            }
+            catch (Exception ex)
+            {
+                _trace.Error($"REPL run command failed ({ex.GetType().Name})");
+                var maskedError = _hostContext.SecretMasker.MaskSecrets(ex.Message);
+                return ErrorResult($"Command failed: {maskedError}");
+            }
+        }
+
+        private async Task<EvaluateResponseBody> ExecuteScriptAsync(
+            RunCommand command,
+            IExecutionContext context,
+            CancellationToken cancellationToken)
+        {
+            // 1. Resolve shell — same logic as ScriptHandler
+            string shellCommand;
+            string argFormat;
+
+            if (!string.IsNullOrEmpty(command.Shell))
+            {
+                // Explicit shell from the DSL
+                var parsed = ScriptHandlerHelpers.ParseShellOptionString(command.Shell);
+                shellCommand = parsed.shellCommand;
+                argFormat = string.IsNullOrEmpty(parsed.shellArgs)
+                    ? ScriptHandlerHelpers.GetScriptArgumentsFormat(shellCommand)
+                    : parsed.shellArgs;
+            }
+            else
+            {
+                // Default shell — mirrors ScriptHandler platform defaults
+                shellCommand = ResolveDefaultShell(context);
+                argFormat = ScriptHandlerHelpers.GetScriptArgumentsFormat(shellCommand);
+            }
+
+            _trace.Info("Resolved REPL shell");
+
+            // 2. Expand ${{ }} expressions in the script body, just like
+            //    ActionRunner evaluates step inputs before ScriptHandler sees them
+            var contents = ExpandExpressions(command.Script, context);
+            contents = ScriptHandlerHelpers.FixUpScriptContents(shellCommand, contents);
+
+            // Write to a temp file (same pattern as ScriptHandler)
+            var extension = ScriptHandlerHelpers.GetScriptFileExtension(shellCommand);
+            var scriptFilePath = Path.Combine(
+                _hostContext.GetDirectory(WellKnownDirectory.Temp),
+                $"dap_repl_{Guid.NewGuid()}{extension}");
+
+            Encoding encoding = new UTF8Encoding(false);
+#if OS_WINDOWS
+            contents = contents.Replace("\r\n", "\n").Replace("\n", "\r\n");
+            encoding = Console.InputEncoding.CodePage != 65001
+                ? Console.InputEncoding
+                : encoding;
+#endif
+            File.WriteAllText(scriptFilePath, contents, encoding);
+
+            try
+            {
+                // 3. Format arguments with script path
+                var resolvedPath = scriptFilePath.Replace("\"", "\\\"");
+                if (string.IsNullOrEmpty(argFormat) || !argFormat.Contains("{0}"))
+                {
+                    return ErrorResult($"Invalid shell option '{shellCommand}'. Shell must be a valid built-in (bash, sh, cmd, powershell, pwsh) or a format string containing '{{0}}'");
+                }
+                var arguments = string.Format(argFormat, resolvedPath);
+
+                // 4. Resolve shell command path
+                string prependPath = string.Join(
+                    Path.PathSeparator.ToString(),
+                    Enumerable.Reverse(context.Global.PrependPath));
+                var commandPath = WhichUtil.Which(shellCommand, false, _trace, prependPath)
+                    ?? shellCommand;
+
+                // 5. Build environment — merge from execution context like a real step
+                var environment = BuildEnvironment(context, command.Env);
+
+                // 6. Resolve working directory
+                var workingDirectory = command.WorkingDirectory;
+                if (string.IsNullOrEmpty(workingDirectory))
+                {
+                    var githubContext = context.ExpressionValues.TryGetValue("github", out var gh)
+                        ? gh as DictionaryContextData
+                        : null;
+                    var workspace = githubContext?.TryGetValue("workspace", out var ws) == true
+                        ? (ws as StringContextData)?.Value
+                        : null;
+                    workingDirectory = workspace ?? _hostContext.GetDirectory(WellKnownDirectory.Work);
+                }
+
+                _trace.Info("Executing REPL command");
+
+                // Stream execution info to debugger
+                SendOutput("console", $"$ {shellCommand} {command.Script.Substring(0, Math.Min(command.Script.Length, 80))}{(command.Script.Length > 80 ? "..." : "")}\n");
+
+                // 7. Execute via IProcessInvoker (same as DefaultStepHost)
+                int exitCode;
+                using (var processInvoker = _hostContext.CreateService<IProcessInvoker>())
+                {
+                    processInvoker.OutputDataReceived += (sender, args) =>
+                    {
+                        if (!string.IsNullOrEmpty(args.Data))
+                        {
+                            var masked = _hostContext.SecretMasker.MaskSecrets(args.Data);
+                            SendOutput("stdout", masked + "\n");
+                        }
+                    };
+
+                    processInvoker.ErrorDataReceived += (sender, args) =>
+                    {
+                        if (!string.IsNullOrEmpty(args.Data))
+                        {
+                            var masked = _hostContext.SecretMasker.MaskSecrets(args.Data);
+                            SendOutput("stderr", masked + "\n");
+                        }
+                    };
+
+                    exitCode = await processInvoker.ExecuteAsync(
+                        workingDirectory: workingDirectory,
+                        fileName: commandPath,
+                        arguments: arguments,
+                        environment: environment,
+                        requireExitCodeZero: false,
+                        outputEncoding: null,
+                        killProcessOnCancel: true,
+                        cancellationToken: cancellationToken);
+                }
+
+                _trace.Info($"REPL command exited with code {exitCode}");
+
+                // 8. Return only the exit code summary (output was already streamed)
+                return new EvaluateResponseBody
+                {
+                    Result = exitCode == 0 ? $"(exit code: {exitCode})" : $"Process completed with exit code {exitCode}.",
+                    Type = exitCode == 0 ? "string" : "error",
+                    VariablesReference = 0
+                };
+            }
+            finally
+            {
+                // Clean up temp script file
+                try { File.Delete(scriptFilePath); }
+                catch { /* best effort */ }
+            }
+        }
+
+        /// <summary>
+        /// Expands <c>${{ }}</c> expressions in the input string using the
+        /// runner's template evaluator — the same evaluation path that processes
+        /// step inputs before <see cref="ScriptHandler"/> runs them.
+        ///
+        /// Each <c>${{ expr }}</c> occurrence is individually evaluated and
+        /// replaced with its masked string result, mirroring the semantics of
+        /// expression interpolation in a workflow <c>run:</c> step body.
+        /// </summary>
+        internal string ExpandExpressions(string input, IExecutionContext context)
+        {
+            if (string.IsNullOrEmpty(input) || !input.Contains("${{"))
+            {
+                return input ?? string.Empty;
+            }
+
+            var result = new StringBuilder();
+            int pos = 0;
+
+            while (pos < input.Length)
+            {
+                var start = input.IndexOf("${{", pos, StringComparison.Ordinal);
+                if (start < 0)
+                {
+                    result.Append(input, pos, input.Length - pos);
+                    break;
+                }
+
+                // Append the literal text before the expression
+                result.Append(input, pos, start - pos);
+
+                var end = input.IndexOf("}}", start + 3, StringComparison.Ordinal);
+                if (end < 0)
+                {
+                    // Unterminated expression — keep literal
+                    result.Append(input, start, input.Length - start);
+                    break;
+                }
+
+                var expr = input.Substring(start + 3, end - start - 3).Trim();
+                end += 2; // skip past "}}"
+
+                // Evaluate the expression
+                try
+                {
+                    var templateEvaluator = context.ToPipelineTemplateEvaluator();
+                    var token = new GitHub.DistributedTask.ObjectTemplating.Tokens.BasicExpressionToken(
+                        null, null, null, expr);
+                    var evaluated = templateEvaluator.EvaluateStepDisplayName(
+                        token,
+                        context.ExpressionValues,
+                        context.ExpressionFunctions);
+                    result.Append(_hostContext.SecretMasker.MaskSecrets(evaluated ?? string.Empty));
+                }
+                catch (Exception ex)
+                {
+                    _trace.Warning($"Expression expansion failed ({ex.GetType().Name})");
+                    // Keep the original expression literal on failure
+                    result.Append(input, start, end - start);
+                }
+
+                pos = end;
+            }
+
+            return result.ToString();
+        }
+
+        /// <summary>
+        /// Resolves the default shell the same way <see cref="ScriptHandler"/>
+        /// does: check job defaults, then fall back to platform default.
+        /// </summary>
+        internal string ResolveDefaultShell(IExecutionContext context)
+        {
+            // Check job defaults
+            if (context.Global?.JobDefaults != null &&
+                context.Global.JobDefaults.TryGetValue("run", out var runDefaults) &&
+                runDefaults.TryGetValue("shell", out var defaultShell) &&
+                !string.IsNullOrEmpty(defaultShell))
+            {
+                _trace.Info("Using job default shell");
+                return defaultShell;
+            }
+
+#if OS_WINDOWS
+            string prependPath = string.Join(
+                Path.PathSeparator.ToString(),
+                context.Global?.PrependPath != null ? Enumerable.Reverse(context.Global.PrependPath) : Array.Empty<string>());
+            var pwshPath = WhichUtil.Which("pwsh", false, _trace, prependPath);
+            return !string.IsNullOrEmpty(pwshPath) ? "pwsh" : "powershell";
+#else
+            return "sh";
+#endif
+        }
+
+        /// <summary>
+        /// Merges the job context environment with any REPL-specific overrides.
+        /// </summary>
+        internal Dictionary<string, string> BuildEnvironment(
+            IExecutionContext context,
+            Dictionary<string, string> replEnv)
+        {
+            var env = new Dictionary<string, string>(VarUtil.EnvironmentVariableKeyComparer);
+
+            // Pull environment from the execution context (same as ActionRunner)
+            if (context.ExpressionValues.TryGetValue("env", out var envData))
+            {
+                if (envData is DictionaryContextData dictEnv)
+                {
+                    foreach (var pair in dictEnv)
+                    {
+                        if (pair.Value is StringContextData str)
+                        {
+                            env[pair.Key] = str.Value;
+                        }
+                    }
+                }
+                else if (envData is CaseSensitiveDictionaryContextData csEnv)
+                {
+                    foreach (var pair in csEnv)
+                    {
+                        if (pair.Value is StringContextData str)
+                        {
+                            env[pair.Key] = str.Value;
+                        }
+                    }
+                }
+            }
+
+            // Expose runtime context variables to the environment (GITHUB_*, RUNNER_*, etc.)
+            foreach (var ctxPair in context.ExpressionValues)
+            {
+                if (ctxPair.Value is IEnvironmentContextData runtimeContext && runtimeContext != null)
+                {
+                    foreach (var rtEnv in runtimeContext.GetRuntimeEnvironmentVariables())
+                    {
+                        env[rtEnv.Key] = rtEnv.Value;
+                    }
+                }
+            }
+
+            // Apply REPL-specific overrides last (so they win),
+            // expanding any ${{ }} expressions in the values
+            if (replEnv != null)
+            {
+                foreach (var pair in replEnv)
+                {
+                    env[pair.Key] = ExpandExpressions(pair.Value, context);
+                }
+            }
+
+            return env;
+        }
+
+        private void SendOutput(string category, string text)
+        {
+            _server?.SendEvent(new Event
+            {
+                EventType = "output",
+                Body = new OutputEventBody
+                {
+                    Category = category,
+                    Output = text
+                }
+            });
+        }
+
+        private static EvaluateResponseBody ErrorResult(string message)
+        {
+            return new EvaluateResponseBody
+            {
+                Result = message,
+                Type = "error",
+                VariablesReference = 0
+            };
+        }
+    }
+}
--- a/src/Runner.Worker/Dap/DapReplParser.cs
+++ b/src/Runner.Worker/Dap/DapReplParser.cs
@@ -0,0 +1,409 @@
+using System;
+using System.Collections.Generic;
+using System.Text;
+
+namespace GitHub.Runner.Worker.Dap
+{
+    /// <summary>
+    /// Base type for all REPL DSL commands.
+    /// </summary>
+    internal abstract class DapReplCommand
+    {
+    }
+
+    /// <summary>
+    /// <c>help</c> or <c>help("run")</c>
+    /// </summary>
+    internal sealed class HelpCommand : DapReplCommand
+    {
+        public string Topic { get; set; }
+    }
+
+    /// <summary>
+    /// <c>run("echo hello")</c> or
+    /// <c>run("echo hello", shell: "bash", env: { FOO: "bar" }, working_directory: "/tmp")</c>
+    /// </summary>
+    internal sealed class RunCommand : DapReplCommand
+    {
+        public string Script { get; set; }
+        public string Shell { get; set; }
+        public Dictionary<string, string> Env { get; set; }
+        public string WorkingDirectory { get; set; }
+    }
+
+    /// <summary>
+    /// Parses REPL input into typed <see cref="DapReplCommand"/> objects.
+    ///
+    /// Grammar (intentionally minimal — extend as the DSL grows):
+    /// <code>
+    ///   help                                → HelpCommand { Topic = null }
+    ///   help("run")                         → HelpCommand { Topic = "run" }
+    ///   run("script body")                  → RunCommand  { Script = "script body" }
+    ///   run("script", shell: "bash")        → RunCommand  { Shell = "bash" }
+    ///   run("script", env: { K: "V" })      → RunCommand  { Env = { K → V } }
+    ///   run("script", working_directory: "p")→ RunCommand  { WorkingDirectory = "p" }
+    /// </code>
+    ///
+    /// Parsing is intentionally hand-rolled rather than regex-based so it can
+    /// handle nested braces, quoted strings with escapes, and grow to support
+    /// future commands without accumulating regex complexity.
+    /// </summary>
+    internal static class DapReplParser
+    {
+        /// <summary>
+        /// Attempts to parse REPL input into a command. Returns null if the
+        /// input does not match any known DSL command (i.e. it should be
+        /// treated as an expression instead).
+        /// </summary>
+        internal static DapReplCommand TryParse(string input, out string error)
+        {
+            error = null;
+            if (string.IsNullOrWhiteSpace(input))
+            {
+                return null;
+            }
+
+            var trimmed = input.Trim();
+
+            // help / help("topic")
+            if (trimmed.Equals("help", StringComparison.OrdinalIgnoreCase) ||
+                trimmed.StartsWith("help(", StringComparison.OrdinalIgnoreCase))
+            {
+                return ParseHelp(trimmed, out error);
+            }
+
+            // run("...")
+            if (trimmed.StartsWith("run(", StringComparison.OrdinalIgnoreCase))
+            {
+                return ParseRun(trimmed, out error);
+            }
+
+            // Not a DSL command
+            return null;
+        }
+
+        internal static string GetGeneralHelp()
+        {
+            var sb = new StringBuilder();
+            sb.AppendLine("Actions Debug Console");
+            sb.AppendLine();
+            sb.AppendLine("Commands:");
+            sb.AppendLine("  help                  Show this help");
+            sb.AppendLine("  help(\"run\")           Show help for the run command");
+            sb.AppendLine("  run(\"script\")         Execute a script (like a workflow run step)");
+            sb.AppendLine();
+            sb.AppendLine("Anything else is evaluated as a GitHub Actions expression.");
+            sb.AppendLine("  Example: github.repository");
+            sb.AppendLine("  Example: ${{ github.event_name }}");
+            return sb.ToString();
+        }
+
+        internal static string GetRunHelp()
+        {
+            var sb = new StringBuilder();
+            sb.AppendLine("run command — execute a script in the job context");
+            sb.AppendLine();
+            sb.AppendLine("Usage:");
+            sb.AppendLine("  run(\"echo hello\")");
+            sb.AppendLine("  run(\"echo $FOO\", shell: \"bash\")");
+            sb.AppendLine("  run(\"echo $FOO\", env: { FOO: \"bar\" })");
+            sb.AppendLine("  run(\"ls\", working_directory: \"/tmp\")");
+            sb.AppendLine("  run(\"echo $X\", shell: \"bash\", env: { X: \"1\" }, working_directory: \"/tmp\")");
+            sb.AppendLine();
+            sb.AppendLine("Options:");
+            sb.AppendLine("  shell:             Shell to use (default: job default, e.g. bash)");
+            sb.AppendLine("  env:               Extra environment variables as { KEY: \"value\" }");
+            sb.AppendLine("  working_directory:  Working directory for the command");
+            sb.AppendLine();
+            sb.AppendLine("Behavior:");
+            sb.AppendLine("  - Equivalent to a workflow `run:` step");
+            sb.AppendLine("  - Expressions in the script body are expanded (${{ ... }})");
+            sb.AppendLine("  - Output is streamed in real time and secrets are masked");
+            return sb.ToString();
+        }
+
+        #region Parsers
+
+        private static HelpCommand ParseHelp(string input, out string error)
+        {
+            error = null;
+            if (input.Equals("help", StringComparison.OrdinalIgnoreCase))
+            {
+                return new HelpCommand();
+            }
+
+            // help("topic")
+            var inner = ExtractParenthesizedArgs(input, "help", out error);
+            if (error != null) return null;
+
+            var topic = ExtractQuotedString(inner.Trim(), out error);
+            if (error != null) return null;
+
+            return new HelpCommand { Topic = topic };
+        }
+
+        private static RunCommand ParseRun(string input, out string error)
+        {
+            error = null;
+
+            var inner = ExtractParenthesizedArgs(input, "run", out error);
+            if (error != null) return null;
+
+            // Split into argument list respecting quotes and braces
+            var args = SplitArguments(inner, out error);
+            if (error != null) return null;
+            if (args.Count == 0)
+            {
+                error = "run() requires a script argument. Example: run(\"echo hello\")";
+                return null;
+            }
+
+            // First arg must be the script body (a quoted string)
+            var script = ExtractQuotedString(args[0].Trim(), out error);
+            if (error != null)
+            {
+                error = $"First argument to run() must be a quoted string. {error}";
+                return null;
+            }
+
+            var cmd = new RunCommand { Script = script };
+
+            // Parse remaining keyword arguments
+            for (int i = 1; i < args.Count; i++)
+            {
+                var kv = args[i].Trim();
+                var colonIdx = kv.IndexOf(':');
+                if (colonIdx <= 0)
+                {
+                    error = $"Expected keyword argument (e.g. shell: \"bash\"), got: {kv}";
+                    return null;
+                }
+
+                var key = kv.Substring(0, colonIdx).Trim();
+                var value = kv.Substring(colonIdx + 1).Trim();
+
+                switch (key.ToLowerInvariant())
+                {
+                    case "shell":
+                        cmd.Shell = ExtractQuotedString(value, out error);
+                        if (error != null) { error = $"shell: {error}"; return null; }
+                        break;
+
+                    case "working_directory":
+                        cmd.WorkingDirectory = ExtractQuotedString(value, out error);
+                        if (error != null) { error = $"working_directory: {error}"; return null; }
+                        break;
+
+                    case "env":
+                        cmd.Env = ParseEnvBlock(value, out error);
+                        if (error != null) { error = $"env: {error}"; return null; }
+                        break;
+
+                    default:
+                        error = $"Unknown option: {key}. Valid options: shell, env, working_directory";
+                        return null;
+                }
+            }
+
+            return cmd;
+        }
+
+        #endregion
+
+        #region Low-level parsing helpers
+
+        /// <summary>
+        /// Given "cmd(...)" returns the inner content between the outer parens.
+        /// </summary>
+        private static string ExtractParenthesizedArgs(string input, string prefix, out string error)
+        {
+            error = null;
+            var start = prefix.Length; // skip "cmd"
+            if (start >= input.Length || input[start] != '(')
+            {
+                error = $"Expected '(' after {prefix}";
+                return null;
+            }
+
+            if (input[input.Length - 1] != ')')
+            {
+                error = $"Expected ')' at end of {prefix}(...)";
+                return null;
+            }
+
+            return input.Substring(start + 1, input.Length - start - 2);
+        }
+
+        /// <summary>
+        /// Extracts a double-quoted string value, handling escaped quotes.
+        /// </summary>
+        internal static string ExtractQuotedString(string input, out string error)
+        {
+            error = null;
+            if (string.IsNullOrEmpty(input))
+            {
+                error = "Expected a quoted string, got empty input";
+                return null;
+            }
+
+            if (input[0] != '"')
+            {
+                error = $"Expected a quoted string starting with \", got: {Truncate(input, 40)}";
+                return null;
+            }
+
+            var sb = new StringBuilder();
+            for (int i = 1; i < input.Length; i++)
+            {
+                if (input[i] == '\\' && i + 1 < input.Length)
+                {
+                    sb.Append(input[i + 1]);
+                    i++;
+                }
+                else if (input[i] == '"')
+                {
+                    // Check nothing meaningful follows the closing quote
+                    var rest = input.Substring(i + 1).Trim();
+                    if (rest.Length > 0)
+                    {
+                        error = $"Unexpected content after closing quote: {Truncate(rest, 40)}";
+                        return null;
+                    }
+                    return sb.ToString();
+                }
+                else
+                {
+                    sb.Append(input[i]);
+                }
+            }
+
+            error = "Unterminated string (missing closing \")";
+            return null;
+        }
+
+        /// <summary>
+        /// Splits a comma-separated argument list, respecting quoted strings
+        /// and nested braces so that <c>"a, b", env: { K: "V, W" }</c> is
+        /// correctly split into two arguments.
+        /// </summary>
+        internal static List<string> SplitArguments(string input, out string error)
+        {
+            error = null;
+            var result = new List<string>();
+            var current = new StringBuilder();
+            int depth = 0;
+            bool inQuote = false;
+
+            for (int i = 0; i < input.Length; i++)
+            {
+                var ch = input[i];
+
+                if (ch == '\\' && inQuote && i + 1 < input.Length)
+                {
+                    current.Append(ch);
+                    current.Append(input[++i]);
+                    continue;
+                }
+
+                if (ch == '"')
+                {
+                    inQuote = !inQuote;
+                    current.Append(ch);
+                    continue;
+                }
+
+                if (!inQuote)
+                {
+                    if (ch == '{')
+                    {
+                        depth++;
+                        current.Append(ch);
+                        continue;
+                    }
+                    if (ch == '}')
+                    {
+                        depth--;
+                        current.Append(ch);
+                        continue;
+                    }
+                    if (ch == ',' && depth == 0)
+                    {
+                        result.Add(current.ToString());
+                        current.Clear();
+                        continue;
+                    }
+                }
+
+                current.Append(ch);
+            }
+
+            if (inQuote)
+            {
+                error = "Unterminated string in arguments";
+                return null;
+            }
+            if (depth != 0)
+            {
+                error = "Unmatched braces in arguments";
+                return null;
+            }
+
+            if (current.Length > 0)
+            {
+                result.Add(current.ToString());
+            }
+
+            return result;
+        }
+
+        /// <summary>
+        /// Parses <c>{ KEY: "value", KEY2: "value2" }</c> into a dictionary.
+        /// </summary>
+        internal static Dictionary<string, string> ParseEnvBlock(string input, out string error)
+        {
+            error = null;
+            var trimmed = input.Trim();
+            if (!trimmed.StartsWith("{") || !trimmed.EndsWith("}"))
+            {
+                error = "Expected env block in the form { KEY: \"value\" }";
+                return null;
+            }
+
+            var inner = trimmed.Substring(1, trimmed.Length - 2).Trim();
+            if (string.IsNullOrEmpty(inner))
+            {
+                return new Dictionary<string, string>();
+            }
+
+            var pairs = SplitArguments(inner, out error);
+            if (error != null) return null;
+
+            var result = new Dictionary<string, string>(StringComparer.OrdinalIgnoreCase);
+            foreach (var pair in pairs)
+            {
+                var colonIdx = pair.IndexOf(':');
+                if (colonIdx <= 0)
+                {
+                    error = $"Expected KEY: \"value\" pair, got: {Truncate(pair.Trim(), 40)}";
+                    return null;
+                }
+
+                var key = pair.Substring(0, colonIdx).Trim();
+                var val = ExtractQuotedString(pair.Substring(colonIdx + 1).Trim(), out error);
+                if (error != null) return null;
+
+                result[key] = val;
+            }
+
+            return result;
+        }
+
+        private static string Truncate(string value, int maxLength)
+        {
+            if (value == null) return "(null)";
+            return value.Length <= maxLength ? value : value.Substring(0, maxLength) + "...";
+        }
+
+        #endregion
+    }
+}
--- a/src/Runner.Worker/Dap/DapServer.cs
+++ b/src/Runner.Worker/Dap/DapServer.cs
@@ -0,0 +1,499 @@
+using System;
+using System.IO;
+using System.Net;
+using System.Net.Sockets;
+using System.Text;
+using System.Threading;
+using System.Threading.Tasks;
+using GitHub.Runner.Common;
+using Newtonsoft.Json;
+
+namespace GitHub.Runner.Worker.Dap
+{
+    /// <summary>
+    /// TCP server for the Debug Adapter Protocol.
+    /// Handles Content-Length message framing, JSON serialization,
+    /// client reconnection, and graceful shutdown.
+    /// </summary>
+    public sealed class DapServer : RunnerService, IDapServer
+    {
+        private const string ContentLengthHeader = "Content-Length: ";
+        private const int MaxMessageSize = 10 * 1024 * 1024; // 10 MB
+        private const int MaxHeaderLineLength = 8192; // 8 KB
+
+        private TcpListener _listener;
+        private TcpClient _client;
+        private NetworkStream _stream;
+        private IDapDebugSession _session;
+        private CancellationTokenSource _cts;
+        private TaskCompletionSource<bool> _connectionTcs;
+        private readonly SemaphoreSlim _sendLock = new SemaphoreSlim(1, 1);
+        private int _nextSeq = 1;
+        private Task _connectionLoopTask;
+        private volatile bool _acceptConnections = true;
+
+        public override void Initialize(IHostContext hostContext)
+        {
+            base.Initialize(hostContext);
+            Trace.Info("DapServer initialized");
+        }
+
+        public void SetSession(IDapDebugSession session)
+        {
+            _session = session;
+            Trace.Info("Debug session set");
+        }
+
+        public Task StartAsync(int port, CancellationToken cancellationToken)
+        {
+            Trace.Info($"Starting DAP server on port {port}");
+
+            _cts = CancellationTokenSource.CreateLinkedTokenSource(cancellationToken);
+            _connectionTcs = new TaskCompletionSource<bool>(TaskCreationOptions.RunContinuationsAsynchronously);
+
+            _listener = new TcpListener(IPAddress.Loopback, port);
+            _listener.Start();
+            Trace.Info($"DAP server listening on 127.0.0.1:{port}");
+
+            // Start the connection loop in the background
+            _connectionLoopTask = ConnectionLoopAsync(_cts.Token);
+
+            return Task.CompletedTask;
+        }
+
+        /// <summary>
+        /// Accepts client connections in a loop, supporting reconnection.
+        /// When a client disconnects, the server waits for a new connection
+        /// without blocking step execution.
+        /// </summary>
+        private async Task ConnectionLoopAsync(CancellationToken cancellationToken)
+        {
+            while (_acceptConnections && !cancellationToken.IsCancellationRequested)
+            {
+                try
+                {
+                    Trace.Info("Waiting for debug client connection...");
+
+                    using (cancellationToken.Register(() =>
+                    {
+                        try { _listener?.Stop(); }
+                        catch { /* listener already stopped */ }
+                    }))
+                    {
+                        _client = await _listener.AcceptTcpClientAsync();
+                    }
+
+                    if (cancellationToken.IsCancellationRequested)
+                    {
+                        break;
+                    }
+
+                    _stream = _client.GetStream();
+                    var remoteEndPoint = _client.Client.RemoteEndPoint;
+                    Trace.Info($"Debug client connected from {remoteEndPoint}");
+
+                    // Signal first connection (no-op on subsequent connections)
+                    _connectionTcs.TrySetResult(true);
+
+                    // Notify session of new client
+                    _session?.HandleClientConnected();
+
+                    // Process messages until client disconnects
+                    await ProcessMessagesAsync(cancellationToken);
+
+                    // Client disconnected — notify session and clean up
+                    Trace.Info("Client disconnected, waiting for reconnection...");
+                    _session?.HandleClientDisconnected();
+                    CleanupConnection();
+                }
+                catch (ObjectDisposedException) when (cancellationToken.IsCancellationRequested)
+                {
+                    break;
+                }
+                catch (SocketException) when (cancellationToken.IsCancellationRequested)
+                {
+                    break;
+                }
+                catch (Exception ex)
+                {
+                    Trace.Warning($"Connection error ({ex.GetType().Name})");
+                    CleanupConnection();
+
+                    if (!_acceptConnections || cancellationToken.IsCancellationRequested)
+                    {
+                        break;
+                    }
+
+                    // Brief delay before accepting next connection
+                    try
+                    {
+                        await Task.Delay(100, cancellationToken);
+                    }
+                    catch (OperationCanceledException)
+                    {
+                        break;
+                    }
+                }
+            }
+
+            _connectionTcs.TrySetCanceled();
+            Trace.Info("Connection loop ended");
+        }
+
+        /// <summary>
+        /// Cleans up the current client connection without stopping the listener.
+        /// </summary>
+        private void CleanupConnection()
+        {
+            _sendLock.Wait();
+            try
+            {
+                try { _stream?.Close(); } catch { /* best effort */ }
+                try { _client?.Close(); } catch { /* best effort */ }
+                _stream = null;
+                _client = null;
+            }
+            finally
+            {
+                _sendLock.Release();
+            }
+        }
+
+        public async Task WaitForConnectionAsync(CancellationToken cancellationToken)
+        {
+            Trace.Info("Waiting for debug client to connect...");
+
+            using (cancellationToken.Register(() => _connectionTcs.TrySetCanceled()))
+            {
+                await _connectionTcs.Task;
+            }
+
+            Trace.Info("Debug client connected");
+        }
+
+        public async Task StopAsync()
+        {
+            Trace.Info("Stopping DAP server");
+
+            _acceptConnections = false;
+            _cts?.Cancel();
+
+            CleanupConnection();
+
+            try { _listener?.Stop(); }
+            catch { /* best effort */ }
+
+            if (_connectionLoopTask != null)
+            {
+                try
+                {
+                    await Task.WhenAny(_connectionLoopTask, Task.Delay(5000));
+                }
+                catch { /* best effort */ }
+            }
+
+            Trace.Info("DAP server stopped");
+        }
+
+        private async Task ProcessMessagesAsync(CancellationToken cancellationToken)
+        {
+            Trace.Info("Starting DAP message processing loop");
+
+            try
+            {
+                while (!cancellationToken.IsCancellationRequested && _client?.Connected == true)
+                {
+                    var json = await ReadMessageAsync(cancellationToken);
+                    if (json == null)
+                    {
+                        Trace.Info("Client disconnected (end of stream)");
+                        break;
+                    }
+
+                    await ProcessSingleMessageAsync(json, cancellationToken);
+                }
+            }
+            catch (OperationCanceledException) when (cancellationToken.IsCancellationRequested)
+            {
+                Trace.Info("Message processing cancelled");
+            }
+            catch (IOException ex)
+            {
+                Trace.Info($"Connection closed ({ex.GetType().Name})");
+            }
+            catch (Exception ex)
+            {
+                Trace.Error($"Error in message loop ({ex.GetType().Name})");
+            }
+
+            Trace.Info("DAP message processing loop ended");
+        }
+
+        private async Task ProcessSingleMessageAsync(string json, CancellationToken cancellationToken)
+        {
+            Request request = null;
+            try
+            {
+                request = JsonConvert.DeserializeObject<Request>(json);
+                if (request == null || request.Type != "request")
+                {
+                    Trace.Warning("Received DAP message that was not a request");
+                    return;
+                }
+
+                Trace.Info("Received DAP request");
+
+                if (_session == null)
+                {
+                    Trace.Error("No debug session configured");
+                    SendErrorResponse(request, "No debug session configured");
+                    return;
+                }
+
+                // Pass raw JSON to session — session handles deserialization, dispatch,
+                // and calls back to SendResponse when done.
+                await _session.HandleMessageAsync(json, cancellationToken);
+            }
+            catch (JsonException ex)
+            {
+                Trace.Error($"Failed to parse request ({ex.GetType().Name})");
+            }
+            catch (Exception ex)
+            {
+                Trace.Error($"Error processing request ({ex.GetType().Name})");
+                if (request != null)
+                {
+                    SendErrorResponse(request, ex.Message);
+                }
+            }
+        }
+
+        private void SendErrorResponse(Request request, string message)
+        {
+            var response = new Response
+            {
+                Type = "response",
+                RequestSeq = request.Seq,
+                Command = request.Command,
+                Success = false,
+                Message = message,
+                Body = new ErrorResponseBody
+                {
+                    Error = new Message
+                    {
+                        Id = 1,
+                        Format = message,
+                        ShowUser = true
+                    }
+                }
+            };
+
+            SendResponse(response);
+        }
+
+        /// <summary>
+        /// Reads a DAP message using Content-Length framing.
+        /// Format: Content-Length: N\r\n\r\n{json}
+        /// </summary>
+        private async Task<string> ReadMessageAsync(CancellationToken cancellationToken)
+        {
+            int contentLength = -1;
+
+            while (true)
+            {
+                var line = await ReadLineAsync(cancellationToken);
+                if (line == null)
+                {
+                    return null;
+                }
+
+                if (line.Length == 0)
+                {
+                    break;
+                }
+
+                if (line.StartsWith(ContentLengthHeader, StringComparison.OrdinalIgnoreCase))
+                {
+                    var lengthStr = line.Substring(ContentLengthHeader.Length).Trim();
+                    if (!int.TryParse(lengthStr, out contentLength))
+                    {
+                        throw new InvalidDataException($"Invalid Content-Length: {lengthStr}");
+                    }
+                }
+            }
+
+            if (contentLength < 0)
+            {
+                throw new InvalidDataException("Missing Content-Length header");
+            }
+
+            if (contentLength > MaxMessageSize)
+            {
+                throw new InvalidDataException($"Message size {contentLength} exceeds maximum allowed size of {MaxMessageSize}");
+            }
+
+            var buffer = new byte[contentLength];
+            var totalRead = 0;
+            while (totalRead < contentLength)
+            {
+                var bytesRead = await _stream.ReadAsync(buffer, totalRead, contentLength - totalRead, cancellationToken);
+                if (bytesRead == 0)
+                {
+                    throw new EndOfStreamException("Connection closed while reading message body");
+                }
+                totalRead += bytesRead;
+            }
+
+            var json = Encoding.UTF8.GetString(buffer);
+            Trace.Verbose("Received DAP message body");
+            return json;
+        }
+
+        /// <summary>
+        /// Reads a line terminated by \r\n from the network stream.
+        /// </summary>
+        private async Task<string> ReadLineAsync(CancellationToken cancellationToken)
+        {
+            var lineBuilder = new StringBuilder();
+            var buffer = new byte[1];
+            var previousWasCr = false;
+
+            while (true)
+            {
+                var bytesRead = await _stream.ReadAsync(buffer, 0, 1, cancellationToken);
+                if (bytesRead == 0)
+                {
+                    return lineBuilder.Length > 0 ? lineBuilder.ToString() : null;
+                }
+
+                var c = (char)buffer[0];
+
+                if (c == '\n' && previousWasCr)
+                {
+                    if (lineBuilder.Length > 0 && lineBuilder[lineBuilder.Length - 1] == '\r')
+                    {
+                        lineBuilder.Length--;
+                    }
+                    return lineBuilder.ToString();
+                }
+
+                previousWasCr = (c == '\r');
+                lineBuilder.Append(c);
+
+                if (lineBuilder.Length > MaxHeaderLineLength)
+                {
+                    throw new InvalidDataException($"Header line exceeds maximum length of {MaxHeaderLineLength}");
+                }
+            }
+        }
+
+        /// <summary>
+        /// Serializes and writes a DAP message with Content-Length framing.
+        /// Must be called within the _sendLock.
+        ///
+        /// Secret masking is intentionally NOT applied here at the serialization
+        /// layer. Masking the raw JSON would corrupt protocol envelope fields
+        /// (type, event, command, seq) if a secret collides with those strings.
+        /// Instead, each DAP producer masks user-visible text at the point of
+        /// construction via <see cref="DapVariableProvider.MaskSecrets"/> or the
+        /// runner's SecretMasker directly. See DapVariableProvider, DapReplExecutor,
+        /// and DapDebugSession for the call sites.
+        /// </summary>
+        private void SendMessageInternal(ProtocolMessage message)
+        {
+            var json = JsonConvert.SerializeObject(message, new JsonSerializerSettings
+            {
+                NullValueHandling = NullValueHandling.Ignore
+            });
+
+            var bodyBytes = Encoding.UTF8.GetBytes(json);
+            var header = $"Content-Length: {bodyBytes.Length}\r\n\r\n";
+            var headerBytes = Encoding.ASCII.GetBytes(header);
+
+            _stream.Write(headerBytes, 0, headerBytes.Length);
+            _stream.Write(bodyBytes, 0, bodyBytes.Length);
+            _stream.Flush();
+
+            Trace.Verbose("Sent DAP message");
+        }
+
+        public void SendMessage(ProtocolMessage message)
+        {
+            try
+            {
+                _sendLock.Wait();
+                try
+                {
+                    if (_stream == null)
+                    {
+                        return;
+                    }
+                    message.Seq = _nextSeq++;
+                    SendMessageInternal(message);
+                }
+                finally
+                {
+                    _sendLock.Release();
+                }
+            }
+            catch (Exception ex)
+            {
+                Trace.Warning($"Failed to send message ({ex.GetType().Name})");
+            }
+        }
+
+        public void SendEvent(Event evt)
+        {
+            try
+            {
+                _sendLock.Wait();
+                try
+                {
+                    if (_stream == null)
+                    {
+                        Trace.Warning("Cannot send event: no client connected");
+                        return;
+                    }
+                    evt.Seq = _nextSeq++;
+                    SendMessageInternal(evt);
+                }
+                finally
+                {
+                    _sendLock.Release();
+                }
+                Trace.Info("Sent event");
+            }
+            catch (Exception ex)
+            {
+                Trace.Warning($"Failed to send event ({ex.GetType().Name})");
+            }
+        }
+
+        public void SendResponse(Response response)
+        {
+            try
+            {
+                _sendLock.Wait();
+                try
+                {
+                    if (_stream == null)
+                    {
+                        Trace.Warning("Cannot send response: no client connected");
+                        return;
+                    }
+                    response.Seq = _nextSeq++;
+                    SendMessageInternal(response);
+                }
+                finally
+                {
+                    _sendLock.Release();
+                }
+                Trace.Info("Sent response");
+            }
+            catch (Exception ex)
+            {
+                Trace.Warning($"Failed to send response ({ex.GetType().Name})");
+            }
+        }
+    }
+}
--- a/src/Runner.Worker/Dap/DapVariableProvider.cs
+++ b/src/Runner.Worker/Dap/DapVariableProvider.cs
@@ -0,0 +1,387 @@
+using System;
+using System.Collections.Generic;
+using GitHub.DistributedTask.ObjectTemplating.Tokens;
+using GitHub.DistributedTask.Pipelines.ContextData;
+using GitHub.Runner.Common;
+
+namespace GitHub.Runner.Worker.Dap
+{
+    /// <summary>
+    /// Maps runner execution context data to DAP scopes and variables.
+    ///
+    /// This is the single point where runner context values are materialized
+    /// for the debugger. All string values pass through the runner's existing
+    /// <see cref="GitHub.DistributedTask.Logging.ISecretMasker"/> so the DAP
+    /// surface never exposes anything beyond what a normal CI log would show.
+    ///
+    /// The secrets scope is intentionally opaque: keys are visible but every
+    /// value is replaced with a constant redaction marker.
+    ///
+    /// Designed to be reusable by future DAP features (evaluate, hover, REPL)
+    /// so that masking policy is never duplicated.
+    /// </summary>
+    internal sealed class DapVariableProvider
+    {
+        // Well-known scope names that map to top-level expression contexts.
+        // Order matters: the index determines the stable variablesReference ID.
+        internal static readonly string[] ScopeNames =
+        {
+            "github", "env", "runner", "job", "steps",
+            "secrets", "inputs", "vars", "matrix", "needs"
+        };
+
+        // Scope references occupy the range [1, ScopeReferenceMax].
+        private const int ScopeReferenceBase = 1;
+        private const int ScopeReferenceMax = 100;
+
+        // Dynamic (nested) variable references start above the scope range.
+        private const int DynamicReferenceBase = 101;
+
+        internal const string RedactedValue = "***";
+
+        private readonly IHostContext _hostContext;
+
+        // Maps dynamic variable reference IDs to the backing data and its
+        // dot-separated path (e.g. "github.event.pull_request").
+        private readonly Dictionary<int, (PipelineContextData Data, string Path)> _variableReferences = new();
+        private int _nextVariableReference = DynamicReferenceBase;
+
+        public DapVariableProvider(IHostContext hostContext)
+        {
+            _hostContext = hostContext ?? throw new ArgumentNullException(nameof(hostContext));
+        }
+
+        /// <summary>
+        /// Clears all dynamic variable references.
+        /// Call this whenever the paused execution context changes (e.g. new step)
+        /// so that stale nested references are not served to the client.
+        /// </summary>
+        public void Reset()
+        {
+            _variableReferences.Clear();
+            _nextVariableReference = DynamicReferenceBase;
+        }
+
+        /// <summary>
+        /// Returns the list of DAP scopes for the given execution context.
+        /// Each scope corresponds to a well-known runner expression context
+        /// (github, env, secrets, …) and carries a stable variablesReference
+        /// that the client can use to drill into variables.
+        /// </summary>
+        public List<Scope> GetScopes(IExecutionContext context)
+        {
+            var scopes = new List<Scope>();
+
+            if (context?.ExpressionValues == null)
+            {
+                return scopes;
+            }
+
+            for (int i = 0; i < ScopeNames.Length; i++)
+            {
+                var scopeName = ScopeNames[i];
+                if (!context.ExpressionValues.TryGetValue(scopeName, out var value) || value == null)
+                {
+                    continue;
+                }
+
+                var scope = new Scope
+                {
+                    Name = scopeName,
+                    VariablesReference = ScopeReferenceBase + i,
+                    Expensive = false,
+                    PresentationHint = scopeName == "secrets" ? "registers" : null
+                };
+
+                if (value is DictionaryContextData dict)
+                {
+                    scope.NamedVariables = dict.Count;
+                }
+                else if (value is CaseSensitiveDictionaryContextData csDict)
+                {
+                    scope.NamedVariables = csDict.Count;
+                }
+
+                scopes.Add(scope);
+            }
+
+            return scopes;
+        }
+
+        /// <summary>
+        /// Returns the child variables for a given variablesReference.
+        /// The reference may point at a top-level scope (1–100) or a
+        /// dynamically registered nested container (101+).
+        /// </summary>
+        public List<Variable> GetVariables(IExecutionContext context, int variablesReference)
+        {
+            var variables = new List<Variable>();
+
+            if (context?.ExpressionValues == null)
+            {
+                return variables;
+            }
+
+            PipelineContextData data = null;
+            string basePath = null;
+            bool isSecretsScope = false;
+
+            if (variablesReference >= ScopeReferenceBase && variablesReference <= ScopeReferenceMax)
+            {
+                var scopeIndex = variablesReference - ScopeReferenceBase;
+                if (scopeIndex < ScopeNames.Length)
+                {
+                    var scopeName = ScopeNames[scopeIndex];
+                    isSecretsScope = scopeName == "secrets";
+                    if (context.ExpressionValues.TryGetValue(scopeName, out data))
+                    {
+                        basePath = scopeName;
+                    }
+                }
+            }
+            else if (_variableReferences.TryGetValue(variablesReference, out var refData))
+            {
+                data = refData.Data;
+                basePath = refData.Path;
+                isSecretsScope = basePath?.StartsWith("secrets", StringComparison.OrdinalIgnoreCase) == true;
+            }
+
+            if (data == null)
+            {
+                return variables;
+            }
+
+            ConvertToVariables(data, basePath, isSecretsScope, variables);
+            return variables;
+        }
+
+        /// <summary>
+        /// Applies the runner's secret masker to the given value.
+        /// This is the single masking entry-point for all DAP-visible strings
+        /// and is intentionally public so future DAP features (evaluate, REPL)
+        /// can reuse it without duplicating policy.
+        /// </summary>
+        public string MaskSecrets(string value)
+        {
+            if (string.IsNullOrEmpty(value))
+            {
+                return value ?? string.Empty;
+            }
+
+            return _hostContext.SecretMasker.MaskSecrets(value);
+        }
+
+        /// <summary>
+        /// Evaluates a GitHub Actions expression (e.g. "github.repository",
+        /// "${{ github.event_name }}") in the context of the current step and
+        /// returns a masked result suitable for the DAP evaluate response.
+        ///
+        /// Uses the runner's standard <see cref="GitHub.DistributedTask.Pipelines.ObjectTemplating.IPipelineTemplateEvaluator"/>
+        /// so the full expression language is available (functions, operators,
+        /// context access).
+        /// </summary>
+        public EvaluateResponseBody EvaluateExpression(string expression, IExecutionContext context)
+        {
+            if (context?.ExpressionValues == null)
+            {
+                return new EvaluateResponseBody
+                {
+                    Result = "(no execution context available)",
+                    Type = "string",
+                    VariablesReference = 0
+                };
+            }
+
+            // Strip ${{ }} wrapper if present
+            var expr = expression?.Trim() ?? string.Empty;
+            if (expr.StartsWith("${{") && expr.EndsWith("}}"))
+            {
+                expr = expr.Substring(3, expr.Length - 5).Trim();
+            }
+
+            if (string.IsNullOrEmpty(expr))
+            {
+                return new EvaluateResponseBody
+                {
+                    Result = string.Empty,
+                    Type = "string",
+                    VariablesReference = 0
+                };
+            }
+
+            try
+            {
+                var templateEvaluator = context.ToPipelineTemplateEvaluator();
+                var token = new BasicExpressionToken(null, null, null, expr);
+
+                var result = templateEvaluator.EvaluateStepDisplayName(
+                    token,
+                    context.ExpressionValues,
+                    context.ExpressionFunctions);
+
+                result = MaskSecrets(result ?? "null");
+
+                return new EvaluateResponseBody
+                {
+                    Result = result,
+                    Type = InferResultType(result),
+                    VariablesReference = 0
+                };
+            }
+            catch (Exception ex)
+            {
+                var errorMessage = MaskSecrets($"Evaluation error: {ex.Message}");
+                return new EvaluateResponseBody
+                {
+                    Result = errorMessage,
+                    Type = "string",
+                    VariablesReference = 0
+                };
+            }
+        }
+
+        /// <summary>
+        /// Infers a simple DAP type hint from the string representation of a result.
+        /// </summary>
+        internal static string InferResultType(string value)
+        {
+            if (value == null || value == "null")
+                return "null";
+            if (value == "true" || value == "false")
+                return "boolean";
+            if (double.TryParse(value, System.Globalization.NumberStyles.Any,
+                    System.Globalization.CultureInfo.InvariantCulture, out _))
+                return "number";
+            if (value.StartsWith("{") || value.StartsWith("["))
+                return "object";
+            return "string";
+        }
+
+        #region Private helpers
+
+        private void ConvertToVariables(
+            PipelineContextData data,
+            string basePath,
+            bool isSecretsScope,
+            List<Variable> variables)
+        {
+            switch (data)
+            {
+                case DictionaryContextData dict:
+                    foreach (var pair in dict)
+                    {
+                        variables.Add(CreateVariable(pair.Key, pair.Value, basePath, isSecretsScope));
+                    }
+                    break;
+
+                case CaseSensitiveDictionaryContextData csDict:
+                    foreach (var pair in csDict)
+                    {
+                        variables.Add(CreateVariable(pair.Key, pair.Value, basePath, isSecretsScope));
+                    }
+                    break;
+
+                case ArrayContextData array:
+                    for (int i = 0; i < array.Count; i++)
+                    {
+                        var variable = CreateVariable($"[{i}]", array[i], basePath, isSecretsScope);
+                        variables.Add(variable);
+                    }
+                    break;
+            }
+        }
+
+        private Variable CreateVariable(
+            string name,
+            PipelineContextData value,
+            string basePath,
+            bool isSecretsScope)
+        {
+            var childPath = string.IsNullOrEmpty(basePath) ? name : $"{basePath}.{name}";
+            var variable = new Variable
+            {
+                Name = name,
+                EvaluateName = $"${{{{ {childPath} }}}}"
+            };
+
+            if (value == null)
+            {
+                variable.Value = isSecretsScope ? RedactedValue : "null";
+                variable.Type = "null";
+                variable.VariablesReference = 0;
+                return variable;
+            }
+
+            // Secrets scope: redact ALL values regardless of underlying type.
+            // Keys are visible but values are always replaced with the
+            // redaction marker, and nested containers are not drillable.
+            if (isSecretsScope)
+            {
+                variable.Value = RedactedValue;
+                variable.Type = "string";
+                variable.VariablesReference = 0;
+                return variable;
+            }
+
+            switch (value)
+            {
+                case StringContextData str:
+                    variable.Value = MaskSecrets(str.Value);
+                    variable.Type = "string";
+                    variable.VariablesReference = 0;
+                    break;
+
+                case NumberContextData num:
+                    variable.Value = num.Value.ToString("G15", System.Globalization.CultureInfo.InvariantCulture);
+                    variable.Type = "number";
+                    variable.VariablesReference = 0;
+                    break;
+
+                case BooleanContextData boolVal:
+                    variable.Value = boolVal.Value ? "true" : "false";
+                    variable.Type = "boolean";
+                    variable.VariablesReference = 0;
+                    break;
+
+                case DictionaryContextData dict:
+                    variable.Value = $"Object ({dict.Count} properties)";
+                    variable.Type = "object";
+                    variable.VariablesReference = RegisterVariableReference(dict, childPath);
+                    variable.NamedVariables = dict.Count;
+                    break;
+
+                case CaseSensitiveDictionaryContextData csDict:
+                    variable.Value = $"Object ({csDict.Count} properties)";
+                    variable.Type = "object";
+                    variable.VariablesReference = RegisterVariableReference(csDict, childPath);
+                    variable.NamedVariables = csDict.Count;
+                    break;
+
+                case ArrayContextData array:
+                    variable.Value = $"Array ({array.Count} items)";
+                    variable.Type = "array";
+                    variable.VariablesReference = RegisterVariableReference(array, childPath);
+                    variable.IndexedVariables = array.Count;
+                    break;
+
+                default:
+                    var rawValue = value.ToJToken()?.ToString() ?? "unknown";
+                    variable.Value = MaskSecrets(rawValue);
+                    variable.Type = value.GetType().Name;
+                    variable.VariablesReference = 0;
+                    break;
+            }
+
+            return variable;
+        }
+
+        private int RegisterVariableReference(PipelineContextData data, string path)
+        {
+            var reference = _nextVariableReference++;
+            _variableReferences[reference] = (data, path);
+            return reference;
+        }
+
+        #endregion
+    }
+}
--- a/src/Runner.Worker/Dap/IDapDebugSession.cs
+++ b/src/Runner.Worker/Dap/IDapDebugSession.cs
@@ -0,0 +1,32 @@
+using System.Threading;
+using System.Threading.Tasks;
+using GitHub.Runner.Common;
+
+namespace GitHub.Runner.Worker.Dap
+{
+    public enum DapSessionState
+    {
+        WaitingForConnection,
+        Initializing,
+        Ready,
+        Paused,
+        Running,
+        Terminated
+    }
+
+    [ServiceLocator(Default = typeof(DapDebugSession))]
+    public interface IDapDebugSession : IRunnerService
+    {
+        bool IsActive { get; }
+        DapSessionState State { get; }
+        void SetDapServer(IDapServer server);
+        Task WaitForHandshakeAsync(CancellationToken cancellationToken);
+        Task OnStepStartingAsync(IStep step, IExecutionContext jobContext, bool isFirstStep, CancellationToken cancellationToken);
+        void OnStepCompleted(IStep step);
+        void OnJobCompleted();
+        void CancelSession();
+        void HandleClientConnected();
+        void HandleClientDisconnected();
+        Task HandleMessageAsync(string messageJson, CancellationToken cancellationToken);
+    }
+}
--- a/src/Runner.Worker/Dap/IDapServer.cs
+++ b/src/Runner.Worker/Dap/IDapServer.cs
@@ -0,0 +1,18 @@
+using System.Threading;
+using System.Threading.Tasks;
+using GitHub.Runner.Common;
+
+namespace GitHub.Runner.Worker.Dap
+{
+    [ServiceLocator(Default = typeof(DapServer))]
+    public interface IDapServer : IRunnerService
+    {
+        void SetSession(IDapDebugSession session);
+        Task StartAsync(int port, CancellationToken cancellationToken);
+        Task WaitForConnectionAsync(CancellationToken cancellationToken);
+        Task StopAsync();
+        void SendMessage(ProtocolMessage message);
+        void SendEvent(Event evt);
+        void SendResponse(Response response);
+    }
+}
--- a/src/Runner.Worker/ExecutionContext.cs
+++ b/src/Runner.Worker/ExecutionContext.cs
@@ -77,7 +77,8 @@ namespace GitHub.Runner.Worker

        List<string> StepEnvironmentOverrides { get; }

-        IExecutionContext Root { get; }
+        ExecutionContext Root { get; }
+        ExecutionContext Parent { get; }

        // Initialize
        void InitializeJob(Pipelines.AgentJobRequestMessage message, CancellationToken token);
@@ -250,9 +251,7 @@ namespace GitHub.Runner.Worker
            }
        }

-        IExecutionContext IExecutionContext.Root => Root;
-
-        private ExecutionContext Root
+        public ExecutionContext Root
        {
            get
            {
@@ -267,7 +266,13 @@ namespace GitHub.Runner.Worker
            }
        }

-
+        public ExecutionContext Parent
+        {
+            get
+            {
+                return _parentExecutionContext;
+            }
+        }

        public JobContext JobContext
        {
@@ -963,6 +968,9 @@ namespace GitHub.Runner.Worker
            // Verbosity (from GitHub.Step_Debug).
            Global.WriteDebug = Global.Variables.Step_Debug ?? false;

+            // Debugger enabled flag (from acquire response).
+            Global.EnableDebugger = message.EnableDebugger;
+
            // Hook up JobServerQueueThrottling event, we will log warning on server tarpit.
            _jobServerQueue.JobServerQueueThrottling += JobServerQueueThrottling_EventReceived;
        }
--- a/src/Runner.Worker/GlobalContext.cs
+++ b/src/Runner.Worker/GlobalContext.cs
@@ -27,6 +27,7 @@ namespace GitHub.Runner.Worker
        public StepsContext StepsContext { get; set; }
        public Variables Variables { get; set; }
        public bool WriteDebug { get; set; }
+        public bool EnableDebugger { get; set; }
        public string InfrastructureFailureCategory { get; set; }
        public JObject ContainerHookState { get; set; }
        public bool HasTemplateEvaluatorMismatch { get; set; }
--- a/src/Runner.Worker/JobRunner.cs
+++ b/src/Runner.Worker/JobRunner.cs
@@ -13,6 +13,7 @@ using GitHub.DistributedTask.WebApi;
 using GitHub.Runner.Common;
 using GitHub.Runner.Common.Util;
 using GitHub.Runner.Sdk;
+using GitHub.Runner.Worker.Dap;
 using GitHub.Services.Common;
 using GitHub.Services.WebApi;
 using Sdk.RSWebApi.Contracts;
@@ -112,6 +113,9 @@ namespace GitHub.Runner.Worker

            IExecutionContext jobContext = null;
            CancellationTokenRegistration? runnerShutdownRegistration = null;
+            IDapServer dapServer = null;
+            IDapDebugSession debugSession = null;
+            CancellationTokenRegistration? dapCancellationRegistration = null;
            try
            {
                // Create the job execution context.
@@ -121,6 +125,36 @@ namespace GitHub.Runner.Worker
                jobContext.Start();
                jobContext.Debug($"Starting: {message.JobDisplayName}");

+                if (jobContext.Global.EnableDebugger)
+                {
+                    Trace.Info("Debugger enabled for this job run");
+
+                    try
+                    {
+                        var port = 4711;
+                        var portEnv = Environment.GetEnvironmentVariable("ACTIONS_DAP_PORT");
+                        if (!string.IsNullOrEmpty(portEnv) && int.TryParse(portEnv, out var customPort))
+                        {
+                            port = customPort;
+                        }
+
+                        dapServer = HostContext.GetService<IDapServer>();
+                        debugSession = HostContext.GetService<IDapDebugSession>();
+
+                        dapServer.SetSession(debugSession);
+                        debugSession.SetDapServer(dapServer);
+
+                        await dapServer.StartAsync(port, jobRequestCancellationToken);
+                        Trace.Info($"DAP server started on port {port}, listening for debugger client");
+                    }
+                    catch (Exception ex)
+                    {
+                        Trace.Warning($"Failed to start DAP server: {ex.Message}. Job will continue without debugging.");
+                        dapServer = null;
+                        debugSession = null;
+                    }
+                }
+
                runnerShutdownRegistration = HostContext.RunnerShutdownToken.Register(() =>
                {
                    // log an issue, then runner get shutdown by Ctrl-C or Ctrl-Break.
@@ -219,6 +253,41 @@ namespace GitHub.Runner.Worker
                    await Task.WhenAny(_jobServerQueue.JobRecordUpdated.Task, Task.Delay(1000));
                }

+                // Wait for DAP debugger client connection and handshake after "Set up job"
+                // so the job page shows the setup step before we block on the debugger
+                if (dapServer != null && debugSession != null)
+                {
+                    try
+                    {
+                        Trace.Info("Waiting for debugger client connection...");
+                        await dapServer.WaitForConnectionAsync(jobRequestCancellationToken);
+                        Trace.Info("Debugger client connected.");
+
+                        await debugSession.WaitForHandshakeAsync(jobRequestCancellationToken);
+                        Trace.Info("DAP handshake complete.");
+
+                        dapCancellationRegistration = jobRequestCancellationToken.Register(() =>
+                        {
+                            Trace.Info("Job cancellation requested, cancelling debug session.");
+                            debugSession.CancelSession();
+                        });
+                    }
+                    catch (OperationCanceledException) when (jobRequestCancellationToken.IsCancellationRequested)
+                    {
+                        Trace.Info("Job was cancelled before debugger client connected. Continuing without debugger.");
+                        try { await dapServer.StopAsync(); } catch { }
+                        dapServer = null;
+                        debugSession = null;
+                    }
+                    catch (Exception ex)
+                    {
+                        Trace.Warning($"Failed to complete DAP handshake: {ex.Message}. Job will continue without debugging.");
+                        try { await dapServer.StopAsync(); } catch { }
+                        dapServer = null;
+                        debugSession = null;
+                    }
+                }
+
                // Run all job steps
                Trace.Info("Run all job steps.");
                var stepsRunner = HostContext.GetService<IStepsRunner>();
@@ -259,6 +328,25 @@ namespace GitHub.Runner.Worker
                    runnerShutdownRegistration = null;
                }

+                if (dapCancellationRegistration.HasValue)
+                {
+                    dapCancellationRegistration.Value.Dispose();
+                    dapCancellationRegistration = null;
+                }
+
+                if (dapServer != null)
+                {
+                    try
+                    {
+                        Trace.Info("Stopping DAP server");
+                        await dapServer.StopAsync();
+                    }
+                    catch (Exception ex)
+                    {
+                        Trace.Warning($"Error stopping DAP server: {ex.Message}");
+                    }
+                }
+
                await ShutdownQueue(throwOnFailure: false);
            }
        }
--- a/src/Runner.Worker/PipelineTemplateEvaluatorWrapper.cs
+++ b/src/Runner.Worker/PipelineTemplateEvaluatorWrapper.cs
@@ -1,6 +1,5 @@
 using System;
 using System.Collections.Generic;
-using System.Threading;
 using GitHub.Actions.WorkflowParser;
 using GitHub.DistributedTask.Expressions2;
 using GitHub.DistributedTask.ObjectTemplating.Tokens;
@@ -227,12 +226,8 @@ namespace GitHub.Runner.Worker
            Func<TNew> newEvaluator,
            Func<TLegacy, TNew, bool> resultComparer)
        {
-            // Use the root (job-level) cancellation token to detect cancellation race conditions.
-            // The step-level token only fires on step timeout, not on job cancellation.
-            // Job cancellation mutates JobContext.Status which expression functions read,
-            // so we need the root token to properly detect cancellation between evaluator runs.
-            var rootCancellationToken = _context.Root?.CancellationToken ?? CancellationToken.None;
-            var cancellationRequestedBefore = rootCancellationToken.IsCancellationRequested;
+            // Capture cancellation state before evaluation
+            var cancellationRequestedBefore = _context.CancellationToken.IsCancellationRequested;

            // Legacy evaluator
            var legacyException = default(Exception);
@@ -266,7 +261,7 @@ namespace GitHub.Runner.Worker
                }

                // Capture cancellation state after evaluation
-                var cancellationRequestedAfter = rootCancellationToken.IsCancellationRequested;
+                var cancellationRequestedAfter = _context.CancellationToken.IsCancellationRequested;

                // Compare results or exceptions
                bool hasMismatch = false;
--- a/src/Runner.Worker/StepsRunner.cs
+++ b/src/Runner.Worker/StepsRunner.cs
@@ -10,6 +10,7 @@ using GitHub.DistributedTask.WebApi;
 using GitHub.Runner.Common;
 using GitHub.Runner.Common.Util;
 using GitHub.Runner.Sdk;
+using GitHub.Runner.Worker.Dap;
 using GitHub.Runner.Worker.Expressions;

 namespace GitHub.Runner.Worker
@@ -50,6 +51,16 @@ namespace GitHub.Runner.Worker
            jobContext.JobContext.Status = (jobContext.Result ?? TaskResult.Succeeded).ToActionResult();
            var scopeInputs = new Dictionary<string, PipelineContextData>(StringComparer.OrdinalIgnoreCase);
            bool checkPostJobActions = false;
+            IDapDebugSession debugSession = null;
+            try
+            {
+                debugSession = HostContext.GetService<IDapDebugSession>();
+            }
+            catch
+            {
+                // Debug session not available — continue without debugging
+            }
+            bool isFirstStep = true;
            while (jobContext.JobSteps.Count > 0 || !checkPostJobActions)
            {
                if (jobContext.JobSteps.Count == 0 && !checkPostJobActions)
@@ -226,9 +237,35 @@ namespace GitHub.Runner.Worker
                        }
                        else
                        {
+                            // Pause for DAP debugger before step execution
+                            if (debugSession?.IsActive == true)
+                            {
+                                try
+                                {
+                                    await debugSession.OnStepStartingAsync(step, jobContext, isFirstStep, jobContext.CancellationToken);
+                                }
+                                catch (Exception ex)
+                                {
+                                    Trace.Warning($"DAP OnStepStarting error: {ex.Message}");
+                                }
+                                isFirstStep = false;
+                            }
+
                            // Run the step
                            await RunStepAsync(step, jobContext.CancellationToken);
                            CompleteStep(step);
+
+                            if (debugSession?.IsActive == true)
+                            {
+                                try
+                                {
+                                    debugSession.OnStepCompleted(step);
+                                }
+                                catch (Exception ex)
+                                {
+                                    Trace.Warning($"DAP OnStepCompleted error: {ex.Message}");
+                                }
+                            }
                        }
                    }
                    finally
@@ -255,6 +292,18 @@ namespace GitHub.Runner.Worker

                Trace.Info($"Current state: job state = '{jobContext.Result}'");
            }
+
+            if (debugSession?.IsActive == true)
+            {
+                try
+                {
+                    debugSession.OnJobCompleted();
+                }
+                catch (Exception ex)
+                {
+                    Trace.Warning($"DAP OnJobCompleted error: {ex.Message}");
+                }
+            }
        }

        private async Task RunStepAsync(IStep step, CancellationToken jobCancellationToken)
--- a/src/Sdk/DTExpressions2/Expressions2/ExpressionParser.cs
+++ b/src/Sdk/DTExpressions2/Expressions2/ExpressionParser.cs
@@ -20,7 +20,7 @@ namespace GitHub.DistributedTask.Expressions2
            IEnumerable<IFunctionInfo> functions,
            Boolean allowCaseFunction = true)
        {
-            var context = new ParseContext(expression, trace, namedValues, functions, allowCaseFunction: allowCaseFunction);
+            var context = new ParseContext(expression, trace, namedValues, functions, allowCaseFunction);
            context.Trace.Info($"Parsing expression: <{expression}>");
            return CreateTree(context);
        }
--- a/src/Sdk/DTPipelines/Pipelines/AgentJobRequestMessage.cs
+++ b/src/Sdk/DTPipelines/Pipelines/AgentJobRequestMessage.cs
@@ -253,6 +253,13 @@ namespace GitHub.DistributedTask.Pipelines
            set;
        }

+        [DataMember(EmitDefaultValue = false)]
+        public bool EnableDebugger
+        {
+            get;
+            set;
+        }
+
        /// <summary>
        /// Gets the collection of variables associated with the current context.
        /// </summary>
--- a/src/Test/L0/Sdk/ExpressionParserL0.cs
+++ b/src/Test/L0/Sdk/ExpressionParserL0.cs
@@ -1,104 +0,0 @@
-using GitHub.DistributedTask.Expressions2;
-using GitHub.DistributedTask.Expressions2.Sdk;
-using GitHub.DistributedTask.ObjectTemplating;
-using System;
-using System.Collections.Generic;
-using Xunit;
-
-namespace GitHub.Runner.Common.Tests.Sdk
-{
-    /// <summary>
-    /// Regression tests for ExpressionParser.CreateTree to verify that
-    /// allowCaseFunction does not accidentally set allowUnknownKeywords.
-    /// </summary>
-    public sealed class ExpressionParserL0
-    {
-        [Fact]
-        [Trait("Level", "L0")]
-        [Trait("Category", "Sdk")]
-        public void CreateTree_RejectsUnrecognizedNamedValue()
-        {
-            // Regression: allowCaseFunction was passed positionally into
-            // the allowUnknownKeywords parameter, causing all named values
-            // to be silently accepted.
-            var parser = new ExpressionParser();
-            var namedValues = new List<INamedValueInfo>
-            {
-                new NamedValueInfo<ContextValueNode>("inputs"),
-            };
-
-            var ex = Assert.Throws<ParseException>(() =>
-                parser.CreateTree("github.event.repository.private", null, namedValues, null));
-
-            Assert.Contains("Unrecognized named-value", ex.Message);
-        }
-
-        [Fact]
-        [Trait("Level", "L0")]
-        [Trait("Category", "Sdk")]
-        public void CreateTree_AcceptsRecognizedNamedValue()
-        {
-            var parser = new ExpressionParser();
-            var namedValues = new List<INamedValueInfo>
-            {
-                new NamedValueInfo<ContextValueNode>("inputs"),
-            };
-
-            var node = parser.CreateTree("inputs.foo", null, namedValues, null);
-
-            Assert.NotNull(node);
-        }
-
-        [Fact]
-        [Trait("Level", "L0")]
-        [Trait("Category", "Sdk")]
-        public void CreateTree_CaseFunctionWorks_WhenAllowed()
-        {
-            var parser = new ExpressionParser();
-            var namedValues = new List<INamedValueInfo>
-            {
-                new NamedValueInfo<ContextValueNode>("github"),
-            };
-
-            var node = parser.CreateTree("case(github.event_name, 'push', 'Push Event')", null, namedValues, null, allowCaseFunction: true);
-
-            Assert.NotNull(node);
-        }
-
-        [Fact]
-        [Trait("Level", "L0")]
-        [Trait("Category", "Sdk")]
-        public void CreateTree_CaseFunctionRejected_WhenDisallowed()
-        {
-            var parser = new ExpressionParser();
-            var namedValues = new List<INamedValueInfo>
-            {
-                new NamedValueInfo<ContextValueNode>("github"),
-            };
-
-            var ex = Assert.Throws<ParseException>(() =>
-                parser.CreateTree("case(github.event_name, 'push', 'Push Event')", null, namedValues, null, allowCaseFunction: false));
-
-            Assert.Contains("Unrecognized function", ex.Message);
-        }
-
-        [Fact]
-        [Trait("Level", "L0")]
-        [Trait("Category", "Sdk")]
-        public void CreateTree_CaseFunctionDoesNotAffectUnknownKeywords()
-        {
-            // The key regression test: with allowCaseFunction=true (default),
-            // unrecognized named values must still be rejected.
-            var parser = new ExpressionParser();
-            var namedValues = new List<INamedValueInfo>
-            {
-                new NamedValueInfo<ContextValueNode>("inputs"),
-            };
-
-            var ex = Assert.Throws<ParseException>(() =>
-                parser.CreateTree("github.ref", null, namedValues, null, allowCaseFunction: true));
-
-            Assert.Contains("Unrecognized named-value", ex.Message);
-        }
-    }
-}
--- a/src/Test/L0/Sdk/RSWebApi/AgentJobRequestMessageL0.cs
+++ b/src/Test/L0/Sdk/RSWebApi/AgentJobRequestMessageL0.cs
@@ -0,0 +1,76 @@
+using System.Collections.Generic;
+using System.IO;
+using System.Runtime.Serialization.Json;
+using System.Text;
+using Xunit;
+using GitHub.DistributedTask.Pipelines;
+
+namespace GitHub.Actions.RunService.WebApi.Tests;
+
+public sealed class AgentJobRequestMessageL0
+{
+    [Fact]
+    [Trait("Level", "L0")]
+    [Trait("Category", "Common")]
+    public void VerifyEnableDebuggerDeserialization_WithTrue()
+    {
+        // Arrange
+        var serializer = new DataContractJsonSerializer(typeof(AgentJobRequestMessage));
+        string jsonWithEnabledDebugger = DoubleQuotify("{'EnableDebugger': true}");
+        
+        // Act
+        using var stream = new MemoryStream();
+        stream.Write(Encoding.UTF8.GetBytes(jsonWithEnabledDebugger));
+        stream.Position = 0;
+        var recoveredMessage = serializer.ReadObject(stream) as AgentJobRequestMessage;
+        
+        // Assert
+        Assert.NotNull(recoveredMessage);
+        Assert.True(recoveredMessage.EnableDebugger, "EnableDebugger should be true when JSON contains 'EnableDebugger': true");
+    }
+
+    [Fact]
+    [Trait("Level", "L0")]
+    [Trait("Category", "Common")]
+    public void VerifyEnableDebuggerDeserialization_DefaultToFalse()
+    {
+        // Arrange
+        var serializer = new DataContractJsonSerializer(typeof(AgentJobRequestMessage));
+        string jsonWithoutDebugger = DoubleQuotify("{'messageType': 'PipelineAgentJobRequest'}");
+        
+        // Act
+        using var stream = new MemoryStream();
+        stream.Write(Encoding.UTF8.GetBytes(jsonWithoutDebugger));
+        stream.Position = 0;
+        var recoveredMessage = serializer.ReadObject(stream) as AgentJobRequestMessage;
+        
+        // Assert
+        Assert.NotNull(recoveredMessage);
+        Assert.False(recoveredMessage.EnableDebugger, "EnableDebugger should default to false when JSON field is absent");
+    }
+
+    [Fact]
+    [Trait("Level", "L0")]
+    [Trait("Category", "Common")]
+    public void VerifyEnableDebuggerDeserialization_WithFalse()
+    {
+        // Arrange
+        var serializer = new DataContractJsonSerializer(typeof(AgentJobRequestMessage));
+        string jsonWithDisabledDebugger = DoubleQuotify("{'EnableDebugger': false}");
+        
+        // Act
+        using var stream = new MemoryStream();
+        stream.Write(Encoding.UTF8.GetBytes(jsonWithDisabledDebugger));
+        stream.Position = 0;
+        var recoveredMessage = serializer.ReadObject(stream) as AgentJobRequestMessage;
+        
+        // Assert
+        Assert.NotNull(recoveredMessage);
+        Assert.False(recoveredMessage.EnableDebugger, "EnableDebugger should be false when JSON contains 'EnableDebugger': false");
+    }
+
+    private static string DoubleQuotify(string text)
+    {
+        return text.Replace('\'', '"');
+    }
+}
--- a/src/Test/L0/Worker/ActionManifestManagerL0.cs
+++ b/src/Test/L0/Worker/ActionManifestManagerL0.cs
@@ -928,58 +928,6 @@ namespace GitHub.Runner.Common.Tests.Worker
            }
        }

-        [Fact]
-        [Trait("Level", "L0")]
-        [Trait("Category", "Worker")]
-        public void Load_ContainerAction_RejectsInvalidExpressionContext()
-        {
-            try
-            {
-                // Arrange
-                Setup();
-
-                var actionManifest = new ActionManifestManager();
-                actionManifest.Initialize(_hc);
-
-                // Act & Assert — github is not a valid context for container-runs-env (only inputs is allowed)
-                var ex = Assert.Throws<ArgumentException>(() =>
-                    actionManifest.Load(_ec.Object, Path.Combine(TestUtil.GetTestDataPath(), "dockerfileaction_env_invalid_context.yml")));
-
-                Assert.Contains("Failed to load", ex.Message);
-            }
-            finally
-            {
-                Teardown();
-            }
-        }
-
-        [Fact]
-        [Trait("Level", "L0")]
-        [Trait("Category", "Worker")]
-        public void Load_ContainerAction_AcceptsValidExpressionContext()
-        {
-            try
-            {
-                // Arrange
-                Setup();
-
-                var actionManifest = new ActionManifestManager();
-                actionManifest.Initialize(_hc);
-
-                // Act — inputs is a valid context for container-runs-env
-                var result = actionManifest.Load(_ec.Object, Path.Combine(TestUtil.GetTestDataPath(), "dockerfileaction_arg_env_expression.yml"));
-
-                // Assert
-                var containerAction = result.Execution as ContainerActionExecutionDataNew;
-                Assert.NotNull(containerAction);
-                Assert.Equal("${{ inputs.entryPoint }}", containerAction.Environment[1].Value.ToString());
-            }
-            finally
-            {
-                Teardown();
-            }
-        }
-
        private void Setup([CallerMemberName] string name = "")
        {
            _ecTokenSource?.Dispose();
--- a/src/Test/L0/Worker/ActionManifestManagerLegacyL0.cs
+++ b/src/Test/L0/Worker/ActionManifestManagerLegacyL0.cs
@@ -926,58 +926,6 @@ namespace GitHub.Runner.Common.Tests.Worker
            }
        }

-        [Fact]
-        [Trait("Level", "L0")]
-        [Trait("Category", "Worker")]
-        public void Load_ContainerAction_RejectsInvalidExpressionContext()
-        {
-            try
-            {
-                // Arrange
-                Setup();
-
-                var actionManifest = new ActionManifestManagerLegacy();
-                actionManifest.Initialize(_hc);
-
-                // Act & Assert — github is not a valid context for container-runs-env (only inputs is allowed)
-                var ex = Assert.Throws<ArgumentException>(() =>
-                    actionManifest.Load(_ec.Object, Path.Combine(TestUtil.GetTestDataPath(), "dockerfileaction_env_invalid_context.yml")));
-
-                Assert.Contains("Failed to load", ex.Message);
-            }
-            finally
-            {
-                Teardown();
-            }
-        }
-
-        [Fact]
-        [Trait("Level", "L0")]
-        [Trait("Category", "Worker")]
-        public void Load_ContainerAction_AcceptsValidExpressionContext()
-        {
-            try
-            {
-                // Arrange
-                Setup();
-
-                var actionManifest = new ActionManifestManagerLegacy();
-                actionManifest.Initialize(_hc);
-
-                // Act — inputs is a valid context for container-runs-env
-                var result = actionManifest.Load(_ec.Object, Path.Combine(TestUtil.GetTestDataPath(), "dockerfileaction_arg_env_expression.yml"));
-
-                // Assert
-                var containerAction = result.Execution as ContainerActionExecutionData;
-                Assert.NotNull(containerAction);
-                Assert.Equal("${{ inputs.entryPoint }}", containerAction.Environment[1].Value.ToString());
-            }
-            finally
-            {
-                Teardown();
-            }
-        }
-
        private void Setup([CallerMemberName] string name = "")
        {
            _ecTokenSource?.Dispose();
--- a/src/Test/L0/Worker/ActionManifestParserComparisonL0.cs
+++ b/src/Test/L0/Worker/ActionManifestParserComparisonL0.cs
@@ -379,40 +379,6 @@ namespace GitHub.Runner.Common.Tests.Worker
            }
        }

-        [Fact]
-        [Trait("Level", "L0")]
-        [Trait("Category", "Worker")]
-        public void Load_BothParsersRejectInvalidExpressionContext()
-        {
-            try
-            {
-                // Arrange — regression test: both parsers must reject github context
-                // in container-runs-env (only inputs is allowed per schema)
-                Setup();
-                _ec.Object.Global.Variables.Set(Constants.Runner.Features.CompareWorkflowParser, "true");
-
-                var legacyManager = new ActionManifestManagerLegacy();
-                legacyManager.Initialize(_hc);
-                _hc.SetSingleton<IActionManifestManagerLegacy>(legacyManager);
-
-                var newManager = new ActionManifestManager();
-                newManager.Initialize(_hc);
-                _hc.SetSingleton<IActionManifestManager>(newManager);
-
-                var wrapper = new ActionManifestManagerWrapper();
-                wrapper.Initialize(_hc);
-
-                var manifestPath = Path.Combine(TestUtil.GetTestDataPath(), "dockerfileaction_env_invalid_context.yml");
-
-                // Act & Assert — both parsers should reject, wrapper should throw
-                Assert.Throws<ArgumentException>(() => wrapper.Load(_ec.Object, manifestPath));
-            }
-            finally
-            {
-                Teardown();
-            }
-        }
-
        private string GetFullExceptionMessage(Exception ex)
        {
            var messages = new List<string>();
--- a/src/Test/L0/Worker/DapDebugSessionL0.cs
+++ b/src/Test/L0/Worker/DapDebugSessionL0.cs
--- a/src/Test/L0/Worker/DapMessagesL0.cs
+++ b/src/Test/L0/Worker/DapMessagesL0.cs
@@ -0,0 +1,233 @@
+using System.Collections.Generic;
+using Newtonsoft.Json;
+using Newtonsoft.Json.Linq;
+using Xunit;
+using GitHub.Runner.Worker.Dap;
+
+namespace GitHub.Runner.Common.Tests.Worker
+{
+    public sealed class DapMessagesL0
+    {
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void RequestSerializesCorrectly()
+        {
+            var request = new Request
+            {
+                Seq = 1,
+                Type = "request",
+                Command = "initialize",
+                Arguments = JObject.FromObject(new { clientID = "test-client" })
+            };
+
+            var json = JsonConvert.SerializeObject(request);
+            var deserialized = JsonConvert.DeserializeObject<Request>(json);
+
+            Assert.Equal(1, deserialized.Seq);
+            Assert.Equal("request", deserialized.Type);
+            Assert.Equal("initialize", deserialized.Command);
+            Assert.Equal("test-client", deserialized.Arguments["clientID"].ToString());
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void ResponseSerializesCorrectly()
+        {
+            var response = new Response
+            {
+                Seq = 2,
+                Type = "response",
+                RequestSeq = 1,
+                Success = true,
+                Command = "initialize",
+                Body = new Capabilities { SupportsConfigurationDoneRequest = true }
+            };
+
+            var json = JsonConvert.SerializeObject(response);
+            var deserialized = JsonConvert.DeserializeObject<Response>(json);
+
+            Assert.Equal(2, deserialized.Seq);
+            Assert.Equal("response", deserialized.Type);
+            Assert.Equal(1, deserialized.RequestSeq);
+            Assert.True(deserialized.Success);
+            Assert.Equal("initialize", deserialized.Command);
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void EventSerializesWithCorrectType()
+        {
+            var evt = new Event
+            {
+                EventType = "stopped",
+                Body = new StoppedEventBody
+                {
+                    Reason = "entry",
+                    Description = "Stopped at entry",
+                    ThreadId = 1,
+                    AllThreadsStopped = true
+                }
+            };
+
+            Assert.Equal("event", evt.Type);
+
+            var json = JsonConvert.SerializeObject(evt);
+            Assert.Contains("\"type\":\"event\"", json);
+            Assert.Contains("\"event\":\"stopped\"", json);
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void StoppedEventBodyOmitsNullFields()
+        {
+            var body = new StoppedEventBody
+            {
+                Reason = "step"
+            };
+
+            var json = JsonConvert.SerializeObject(body);
+            Assert.Contains("\"reason\":\"step\"", json);
+            Assert.DoesNotContain("\"threadId\"", json);
+            Assert.DoesNotContain("\"allThreadsStopped\"", json);
+            Assert.DoesNotContain("\"description\"", json);
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void CapabilitiesMvpDefaults()
+        {
+            var caps = new Capabilities
+            {
+                SupportsConfigurationDoneRequest = true,
+                SupportsFunctionBreakpoints = false,
+                SupportsStepBack = false
+            };
+
+            var json = JsonConvert.SerializeObject(caps);
+            var deserialized = JsonConvert.DeserializeObject<Capabilities>(json);
+
+            Assert.True(deserialized.SupportsConfigurationDoneRequest);
+            Assert.False(deserialized.SupportsFunctionBreakpoints);
+            Assert.False(deserialized.SupportsStepBack);
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void ContinueResponseBodySerialization()
+        {
+            var body = new ContinueResponseBody { AllThreadsContinued = true };
+            var json = JsonConvert.SerializeObject(body);
+            var deserialized = JsonConvert.DeserializeObject<ContinueResponseBody>(json);
+
+            Assert.True(deserialized.AllThreadsContinued);
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void ThreadsResponseBodySerialization()
+        {
+            var body = new ThreadsResponseBody
+            {
+                Threads = new List<Thread>
+                {
+                    new Thread { Id = 1, Name = "Job Thread" }
+                }
+            };
+
+            var json = JsonConvert.SerializeObject(body);
+            var deserialized = JsonConvert.DeserializeObject<ThreadsResponseBody>(json);
+
+            Assert.Single(deserialized.Threads);
+            Assert.Equal(1, deserialized.Threads[0].Id);
+            Assert.Equal("Job Thread", deserialized.Threads[0].Name);
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void StackFrameSerialization()
+        {
+            var frame = new StackFrame
+            {
+                Id = 1,
+                Name = "Step: Checkout",
+                Line = 1,
+                Column = 1,
+                PresentationHint = "normal"
+            };
+
+            var json = JsonConvert.SerializeObject(frame);
+            var deserialized = JsonConvert.DeserializeObject<StackFrame>(json);
+
+            Assert.Equal(1, deserialized.Id);
+            Assert.Equal("Step: Checkout", deserialized.Name);
+            Assert.Equal("normal", deserialized.PresentationHint);
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void ExitedEventBodySerialization()
+        {
+            var body = new ExitedEventBody { ExitCode = 130 };
+            var json = JsonConvert.SerializeObject(body);
+            var deserialized = JsonConvert.DeserializeObject<ExitedEventBody>(json);
+
+            Assert.Equal(130, deserialized.ExitCode);
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void DapCommandEnumValues()
+        {
+            Assert.Equal(0, (int)DapCommand.Continue);
+            Assert.Equal(1, (int)DapCommand.Next);
+            Assert.Equal(4, (int)DapCommand.Disconnect);
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void RequestDeserializesFromRawJson()
+        {
+            var json = @"{""seq"":5,""type"":""request"",""command"":""continue"",""arguments"":{""threadId"":1}}";
+            var request = JsonConvert.DeserializeObject<Request>(json);
+
+            Assert.Equal(5, request.Seq);
+            Assert.Equal("request", request.Type);
+            Assert.Equal("continue", request.Command);
+            Assert.Equal(1, request.Arguments["threadId"].Value<int>());
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void ErrorResponseBodySerialization()
+        {
+            var body = new ErrorResponseBody
+            {
+                Error = new Message
+                {
+                    Id = 1,
+                    Format = "Something went wrong",
+                    ShowUser = true
+                }
+            };
+
+            var json = JsonConvert.SerializeObject(body);
+            var deserialized = JsonConvert.DeserializeObject<ErrorResponseBody>(json);
+
+            Assert.Equal(1, deserialized.Error.Id);
+            Assert.Equal("Something went wrong", deserialized.Error.Format);
+            Assert.True(deserialized.Error.ShowUser);
+        }
+    }
+}
--- a/src/Test/L0/Worker/DapReplExecutorL0.cs
+++ b/src/Test/L0/Worker/DapReplExecutorL0.cs
@@ -0,0 +1,230 @@
+using System;
+using System.Collections.Generic;
+using System.Runtime.CompilerServices;
+using System.Threading;
+using System.Threading.Tasks;
+using GitHub.DistributedTask.Expressions2;
+using GitHub.DistributedTask.Pipelines.ContextData;
+using GitHub.Runner.Common.Tests;
+using GitHub.Runner.Worker;
+using GitHub.Runner.Worker.Dap;
+using Moq;
+using Xunit;
+
+namespace GitHub.Runner.Common.Tests.Worker
+{
+    public sealed class DapReplExecutorL0
+    {
+        private TestHostContext _hc;
+        private DapReplExecutor _executor;
+        private Mock<IDapServer> _mockServer;
+        private List<Event> _sentEvents;
+
+        private TestHostContext CreateTestContext([CallerMemberName] string testName = "")
+        {
+            _hc = new TestHostContext(this, testName);
+            _sentEvents = new List<Event>();
+            _mockServer = new Mock<IDapServer>();
+            _mockServer.Setup(x => x.SendEvent(It.IsAny<Event>()))
+                .Callback<Event>(e => _sentEvents.Add(e));
+            _executor = new DapReplExecutor(_hc, _mockServer.Object);
+            return _hc;
+        }
+
+        private Mock<IExecutionContext> CreateMockContext(
+            DictionaryContextData exprValues = null,
+            IDictionary<string, IDictionary<string, string>> jobDefaults = null)
+        {
+            var mock = new Mock<IExecutionContext>();
+            mock.Setup(x => x.ExpressionValues).Returns(exprValues ?? new DictionaryContextData());
+            mock.Setup(x => x.ExpressionFunctions).Returns(new List<IFunctionInfo>());
+
+            var global = new GlobalContext
+            {
+                PrependPath = new List<string>(),
+                JobDefaults = jobDefaults
+                    ?? new Dictionary<string, IDictionary<string, string>>(StringComparer.OrdinalIgnoreCase),
+            };
+            mock.Setup(x => x.Global).Returns(global);
+
+            return mock;
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public async Task ExecuteRunCommand_NullContext_ReturnsError()
+        {
+            using (CreateTestContext())
+            {
+                var command = new RunCommand { Script = "echo hello" };
+                var result = await _executor.ExecuteRunCommandAsync(command, null, CancellationToken.None);
+
+                Assert.Equal("error", result.Type);
+                Assert.Contains("No execution context available", result.Result);
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void ExpandExpressions_NoExpressions_ReturnsInput()
+        {
+            using (CreateTestContext())
+            {
+                var context = CreateMockContext();
+                var result = _executor.ExpandExpressions("echo hello", context.Object);
+
+                Assert.Equal("echo hello", result);
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void ExpandExpressions_NullInput_ReturnsEmpty()
+        {
+            using (CreateTestContext())
+            {
+                var context = CreateMockContext();
+                var result = _executor.ExpandExpressions(null, context.Object);
+
+                Assert.Equal(string.Empty, result);
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void ExpandExpressions_EmptyInput_ReturnsEmpty()
+        {
+            using (CreateTestContext())
+            {
+                var context = CreateMockContext();
+                var result = _executor.ExpandExpressions("", context.Object);
+
+                Assert.Equal(string.Empty, result);
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void ExpandExpressions_UnterminatedExpression_KeepsLiteral()
+        {
+            using (CreateTestContext())
+            {
+                var context = CreateMockContext();
+                var result = _executor.ExpandExpressions("echo ${{ github.repo", context.Object);
+
+                Assert.Equal("echo ${{ github.repo", result);
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void ResolveDefaultShell_NoJobDefaults_ReturnsPlatformDefault()
+        {
+            using (CreateTestContext())
+            {
+                var context = CreateMockContext();
+                var result = _executor.ResolveDefaultShell(context.Object);
+
+#if OS_WINDOWS
+                Assert.True(result == "pwsh" || result == "powershell");
+#else
+                Assert.Equal("sh", result);
+#endif
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void ResolveDefaultShell_WithJobDefault_ReturnsJobDefault()
+        {
+            using (CreateTestContext())
+            {
+                var jobDefaults = new Dictionary<string, IDictionary<string, string>>(StringComparer.OrdinalIgnoreCase)
+                {
+                    ["run"] = new Dictionary<string, string>(StringComparer.OrdinalIgnoreCase)
+                    {
+                        ["shell"] = "bash"
+                    }
+                };
+                var context = CreateMockContext(jobDefaults: jobDefaults);
+                var result = _executor.ResolveDefaultShell(context.Object);
+
+                Assert.Equal("bash", result);
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void BuildEnvironment_MergesEnvContextAndReplOverrides()
+        {
+            using (CreateTestContext())
+            {
+                var exprValues = new DictionaryContextData();
+                var envData = new DictionaryContextData
+                {
+                    ["FOO"] = new StringContextData("bar"),
+                };
+                exprValues["env"] = envData;
+
+                var context = CreateMockContext(exprValues);
+                var replEnv = new Dictionary<string, string> { { "BAZ", "qux" } };
+                var result = _executor.BuildEnvironment(context.Object, replEnv);
+
+                Assert.Equal("bar", result["FOO"]);
+                Assert.Equal("qux", result["BAZ"]);
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void BuildEnvironment_ReplOverridesWin()
+        {
+            using (CreateTestContext())
+            {
+                var exprValues = new DictionaryContextData();
+                var envData = new DictionaryContextData
+                {
+                    ["FOO"] = new StringContextData("original"),
+                };
+                exprValues["env"] = envData;
+
+                var context = CreateMockContext(exprValues);
+                var replEnv = new Dictionary<string, string> { { "FOO", "override" } };
+                var result = _executor.BuildEnvironment(context.Object, replEnv);
+
+                Assert.Equal("override", result["FOO"]);
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void BuildEnvironment_NullReplEnv_ReturnsContextEnvOnly()
+        {
+            using (CreateTestContext())
+            {
+                var exprValues = new DictionaryContextData();
+                var envData = new DictionaryContextData
+                {
+                    ["FOO"] = new StringContextData("bar"),
+                };
+                exprValues["env"] = envData;
+
+                var context = CreateMockContext(exprValues);
+                var result = _executor.BuildEnvironment(context.Object, null);
+
+                Assert.Equal("bar", result["FOO"]);
+                Assert.False(result.ContainsKey("BAZ"));
+            }
+        }
+    }
+}
--- a/src/Test/L0/Worker/DapReplParserL0.cs
+++ b/src/Test/L0/Worker/DapReplParserL0.cs
@@ -0,0 +1,314 @@
+using System.Collections.Generic;
+using System.Runtime.CompilerServices;
+using GitHub.Runner.Common.Tests;
+using GitHub.Runner.Worker.Dap;
+using Xunit;
+
+namespace GitHub.Runner.Common.Tests.Worker
+{
+    public sealed class DapReplParserL0
+    {
+        #region help command
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void Parse_HelpReturnsHelpCommand()
+        {
+            var cmd = DapReplParser.TryParse("help", out var error);
+
+            Assert.Null(error);
+            var help = Assert.IsType<HelpCommand>(cmd);
+            Assert.Null(help.Topic);
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void Parse_HelpCaseInsensitive()
+        {
+            var cmd = DapReplParser.TryParse("Help", out var error);
+            Assert.Null(error);
+            Assert.IsType<HelpCommand>(cmd);
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void Parse_HelpWithTopic()
+        {
+            var cmd = DapReplParser.TryParse("help(\"run\")", out var error);
+
+            Assert.Null(error);
+            var help = Assert.IsType<HelpCommand>(cmd);
+            Assert.Equal("run", help.Topic);
+        }
+
+        #endregion
+
+        #region run command — basic
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void Parse_RunSimpleScript()
+        {
+            var cmd = DapReplParser.TryParse("run(\"echo hello\")", out var error);
+
+            Assert.Null(error);
+            var run = Assert.IsType<RunCommand>(cmd);
+            Assert.Equal("echo hello", run.Script);
+            Assert.Null(run.Shell);
+            Assert.Null(run.Env);
+            Assert.Null(run.WorkingDirectory);
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void Parse_RunWithShell()
+        {
+            var cmd = DapReplParser.TryParse("run(\"echo hello\", shell: \"bash\")", out var error);
+
+            Assert.Null(error);
+            var run = Assert.IsType<RunCommand>(cmd);
+            Assert.Equal("echo hello", run.Script);
+            Assert.Equal("bash", run.Shell);
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void Parse_RunWithWorkingDirectory()
+        {
+            var cmd = DapReplParser.TryParse("run(\"ls\", working_directory: \"/tmp\")", out var error);
+
+            Assert.Null(error);
+            var run = Assert.IsType<RunCommand>(cmd);
+            Assert.Equal("ls", run.Script);
+            Assert.Equal("/tmp", run.WorkingDirectory);
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void Parse_RunWithEnv()
+        {
+            var cmd = DapReplParser.TryParse("run(\"echo $FOO\", env: { FOO: \"bar\" })", out var error);
+
+            Assert.Null(error);
+            var run = Assert.IsType<RunCommand>(cmd);
+            Assert.Equal("echo $FOO", run.Script);
+            Assert.NotNull(run.Env);
+            Assert.Equal("bar", run.Env["FOO"]);
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void Parse_RunWithMultipleEnvVars()
+        {
+            var cmd = DapReplParser.TryParse("run(\"echo\", env: { A: \"1\", B: \"2\" })", out var error);
+
+            Assert.Null(error);
+            var run = Assert.IsType<RunCommand>(cmd);
+            Assert.Equal(2, run.Env.Count);
+            Assert.Equal("1", run.Env["A"]);
+            Assert.Equal("2", run.Env["B"]);
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void Parse_RunWithAllOptions()
+        {
+            var input = "run(\"echo $X\", shell: \"zsh\", env: { X: \"1\" }, working_directory: \"/tmp\")";
+            var cmd = DapReplParser.TryParse(input, out var error);
+
+            Assert.Null(error);
+            var run = Assert.IsType<RunCommand>(cmd);
+            Assert.Equal("echo $X", run.Script);
+            Assert.Equal("zsh", run.Shell);
+            Assert.Equal("1", run.Env["X"]);
+            Assert.Equal("/tmp", run.WorkingDirectory);
+        }
+
+        #endregion
+
+        #region run command — edge cases
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void Parse_RunWithEscapedQuotes()
+        {
+            var cmd = DapReplParser.TryParse("run(\"echo \\\"hello\\\"\")", out var error);
+
+            Assert.Null(error);
+            var run = Assert.IsType<RunCommand>(cmd);
+            Assert.Equal("echo \"hello\"", run.Script);
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void Parse_RunWithCommaInEnvValue()
+        {
+            var cmd = DapReplParser.TryParse("run(\"echo\", env: { CSV: \"a,b,c\" })", out var error);
+
+            Assert.Null(error);
+            var run = Assert.IsType<RunCommand>(cmd);
+            Assert.Equal("a,b,c", run.Env["CSV"]);
+        }
+
+        #endregion
+
+        #region error cases
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void Parse_RunEmptyArgsReturnsError()
+        {
+            var cmd = DapReplParser.TryParse("run()", out var error);
+
+            Assert.NotNull(error);
+            Assert.Null(cmd);
+            Assert.Contains("requires a script argument", error);
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void Parse_RunUnquotedArgReturnsError()
+        {
+            var cmd = DapReplParser.TryParse("run(echo hello)", out var error);
+
+            Assert.NotNull(error);
+            Assert.Null(cmd);
+            Assert.Contains("quoted string", error);
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void Parse_RunUnknownOptionReturnsError()
+        {
+            var cmd = DapReplParser.TryParse("run(\"echo\", timeout: \"10\")", out var error);
+
+            Assert.NotNull(error);
+            Assert.Null(cmd);
+            Assert.Contains("Unknown option", error);
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void Parse_RunMissingClosingParenReturnsError()
+        {
+            var cmd = DapReplParser.TryParse("run(\"echo\"", out var error);
+
+            Assert.NotNull(error);
+            Assert.Null(cmd);
+        }
+
+        #endregion
+
+        #region non-DSL input falls through
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void Parse_ExpressionReturnsNull()
+        {
+            var cmd = DapReplParser.TryParse("github.repository", out var error);
+
+            Assert.Null(error);
+            Assert.Null(cmd);
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void Parse_WrappedExpressionReturnsNull()
+        {
+            var cmd = DapReplParser.TryParse("${{ github.event_name }}", out var error);
+
+            Assert.Null(error);
+            Assert.Null(cmd);
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void Parse_EmptyInputReturnsNull()
+        {
+            var cmd = DapReplParser.TryParse("", out var error);
+            Assert.Null(error);
+            Assert.Null(cmd);
+
+            cmd = DapReplParser.TryParse(null, out error);
+            Assert.Null(error);
+            Assert.Null(cmd);
+        }
+
+        #endregion
+
+        #region help text
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void GetGeneralHelp_ContainsCommands()
+        {
+            var help = DapReplParser.GetGeneralHelp();
+
+            Assert.Contains("help", help);
+            Assert.Contains("run", help);
+            Assert.Contains("expression", help, System.StringComparison.OrdinalIgnoreCase);
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void GetRunHelp_ContainsOptions()
+        {
+            var help = DapReplParser.GetRunHelp();
+
+            Assert.Contains("shell", help);
+            Assert.Contains("env", help);
+            Assert.Contains("working_directory", help);
+        }
+
+        #endregion
+
+        #region internal parser helpers
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void SplitArguments_HandlesNestedBraces()
+        {
+            var args = DapReplParser.SplitArguments("\"hello\", env: { A: \"1\", B: \"2\" }", out var error);
+
+            Assert.Null(error);
+            Assert.Equal(2, args.Count);
+            Assert.Equal("\"hello\"", args[0].Trim());
+            Assert.Contains("A:", args[1]);
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void ParseEnvBlock_HandlesEmptyBlock()
+        {
+            var result = DapReplParser.ParseEnvBlock("{ }", out var error);
+
+            Assert.Null(error);
+            Assert.NotNull(result);
+            Assert.Empty(result);
+        }
+
+        #endregion
+    }
+}
--- a/src/Test/L0/Worker/DapServerL0.cs
+++ b/src/Test/L0/Worker/DapServerL0.cs
@@ -0,0 +1,403 @@
+using System;
+using System.Collections.Generic;
+using System.IO;
+using System.Net;
+using System.Net.Sockets;
+using System.Reflection;
+using System.Runtime.CompilerServices;
+using System.Text;
+using System.Threading;
+using System.Threading.Tasks;
+using GitHub.Runner.Worker.Dap;
+using Moq;
+using Xunit;
+
+namespace GitHub.Runner.Common.Tests.Worker
+{
+    public sealed class DapServerL0
+    {
+        private DapServer _server;
+
+        private TestHostContext CreateTestContext([CallerMemberName] string testName = "")
+        {
+            var hc = new TestHostContext(this, testName);
+            _server = new DapServer();
+            _server.Initialize(hc);
+            return hc;
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void InitializeSucceeds()
+        {
+            using (CreateTestContext())
+            {
+                Assert.NotNull(_server);
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void SetSessionAcceptsMock()
+        {
+            using (CreateTestContext())
+            {
+                var mockSession = new Mock<IDapDebugSession>();
+                _server.SetSession(mockSession.Object);
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void SendEventNoClientDoesNotThrow()
+        {
+            using (CreateTestContext())
+            {
+                var evt = new Event
+                {
+                    EventType = "stopped",
+                    Body = new StoppedEventBody
+                    {
+                        Reason = "entry",
+                        ThreadId = 1,
+                        AllThreadsStopped = true
+                    }
+                };
+
+                _server.SendEvent(evt);
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void SendResponseNoClientDoesNotThrow()
+        {
+            using (CreateTestContext())
+            {
+                var response = new Response
+                {
+                    Type = "response",
+                    RequestSeq = 1,
+                    Command = "initialize",
+                    Success = true
+                };
+
+                _server.SendResponse(response);
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void SendMessageNoClientDoesNotThrow()
+        {
+            using (CreateTestContext())
+            {
+                var msg = new ProtocolMessage
+                {
+                    Type = "response",
+                    Seq = 1
+                };
+
+                _server.SendMessage(msg);
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public async Task StopWithoutStartDoesNotThrow()
+        {
+            using (CreateTestContext())
+            {
+                await _server.StopAsync();
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public async Task StartAndStopOnAvailablePort()
+        {
+            using (CreateTestContext())
+            {
+                var cts = new CancellationTokenSource();
+                await _server.StartAsync(0, cts.Token);
+                await _server.StopAsync();
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public async Task WaitForConnectionCancelledByCancellationToken()
+        {
+            using (CreateTestContext())
+            {
+                var cts = new CancellationTokenSource();
+                await _server.StartAsync(0, cts.Token);
+
+                var waitTask = _server.WaitForConnectionAsync(cts.Token);
+
+                cts.Cancel();
+
+                await Assert.ThrowsAnyAsync<OperationCanceledException>(async () =>
+                {
+                    await waitTask;
+                });
+
+                await _server.StopAsync();
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public async Task StartAndStopMultipleTimesDoesNotThrow()
+        {
+            using (CreateTestContext())
+            {
+                var cts1 = new CancellationTokenSource();
+                await _server.StartAsync(0, cts1.Token);
+                await _server.StopAsync();
+            }
+
+            using (CreateTestContext($"{nameof(StartAndStopMultipleTimesDoesNotThrow)}_SecondStart"))
+            {
+                var cts2 = new CancellationTokenSource();
+                await _server.StartAsync(0, cts2.Token);
+                await _server.StopAsync();
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public async Task MessageFraming_ValidMessage_ProcessedSuccessfully()
+        {
+            using (var hc = CreateTestContext())
+            {
+                var messageReceived = new TaskCompletionSource<string>(TaskCreationOptions.RunContinuationsAsynchronously);
+                var mockSession = new Mock<IDapDebugSession>();
+                mockSession.Setup(x => x.HandleMessageAsync(It.IsAny<string>(), It.IsAny<CancellationToken>()))
+                    .Callback<string, CancellationToken>((json, ct) => messageReceived.TrySetResult(json))
+                    .Returns(Task.CompletedTask);
+                _server.SetSession(mockSession.Object);
+
+                var cts = new CancellationTokenSource(TimeSpan.FromSeconds(10));
+                await _server.StartAsync(0, cts.Token);
+
+                var listenerField = typeof(DapServer).GetField("_listener", BindingFlags.NonPublic | BindingFlags.Instance);
+                var listener = (TcpListener)listenerField.GetValue(_server);
+                var port = ((IPEndPoint)listener.LocalEndpoint).Port;
+
+                var connectionTask = _server.WaitForConnectionAsync(cts.Token);
+                using var client = new TcpClient();
+                await client.ConnectAsync(IPAddress.Loopback, port);
+                await connectionTask;
+                var stream = client.GetStream();
+
+                // Send a valid DAP request with Content-Length framing
+                var requestJson = "{\"seq\":1,\"type\":\"request\",\"command\":\"initialize\"}";
+                var body = Encoding.UTF8.GetBytes(requestJson);
+                var header = $"Content-Length: {body.Length}\r\n\r\n";
+                var headerBytes = Encoding.ASCII.GetBytes(header);
+
+                await stream.WriteAsync(headerBytes, 0, headerBytes.Length);
+                await stream.WriteAsync(body, 0, body.Length);
+                await stream.FlushAsync();
+
+                // Wait for session to receive the message (deterministic, bounded)
+                var completed = await Task.WhenAny(messageReceived.Task, Task.Delay(5000));
+                Assert.Equal(messageReceived.Task, completed);
+                Assert.Contains("initialize", await messageReceived.Task);
+
+                cts.Cancel();
+                await _server.StopAsync();
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public async Task ProtocolMetadata_PreservedWhenSecretCollidesWithKeywords()
+        {
+            using (var hc = CreateTestContext())
+            {
+                // Register secrets that match DAP protocol keywords
+                hc.SecretMasker.AddValue("response");
+                hc.SecretMasker.AddValue("output");
+                hc.SecretMasker.AddValue("evaluate");
+
+                var cts = new CancellationTokenSource(TimeSpan.FromSeconds(10));
+                await _server.StartAsync(0, cts.Token);
+
+                var listenerField = typeof(DapServer).GetField("_listener", BindingFlags.NonPublic | BindingFlags.Instance);
+                var listener = (TcpListener)listenerField.GetValue(_server);
+                var port = ((IPEndPoint)listener.LocalEndpoint).Port;
+
+                var connectionTask = _server.WaitForConnectionAsync(cts.Token);
+                using var client = new TcpClient();
+                await client.ConnectAsync(IPAddress.Loopback, port);
+                await connectionTask;
+                var stream = client.GetStream();
+
+                // Send a response whose protocol fields collide with secrets
+                var response = new Response
+                {
+                    Type = "response",
+                    RequestSeq = 1,
+                    Command = "evaluate",
+                    Success = true,
+                    Body = new EvaluateResponseBody
+                    {
+                        Result = "some result",
+                        Type = "string",
+                        VariablesReference = 0
+                    }
+                };
+
+                _server.SendResponse(response);
+
+                // Read a full framed DAP message with timeout
+                var received = await ReadDapMessageAsync(stream, TimeSpan.FromSeconds(5));
+
+                // Protocol metadata MUST be preserved even when secrets collide
+                Assert.Contains("\"type\":\"response\"", received);
+                Assert.Contains("\"command\":\"evaluate\"", received);
+                Assert.Contains("\"success\":true", received);
+
+                cts.Cancel();
+                await _server.StopAsync();
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public async Task ProtocolMetadata_EventFieldsPreservedWhenSecretCollidesWithKeywords()
+        {
+            using (var hc = CreateTestContext())
+            {
+                hc.SecretMasker.AddValue("output");
+                hc.SecretMasker.AddValue("stdout");
+
+                var cts = new CancellationTokenSource(TimeSpan.FromSeconds(10));
+                await _server.StartAsync(0, cts.Token);
+
+                var listenerField = typeof(DapServer).GetField("_listener", BindingFlags.NonPublic | BindingFlags.Instance);
+                var listener = (TcpListener)listenerField.GetValue(_server);
+                var port = ((IPEndPoint)listener.LocalEndpoint).Port;
+
+                var connectionTask = _server.WaitForConnectionAsync(cts.Token);
+                using var client = new TcpClient();
+                await client.ConnectAsync(IPAddress.Loopback, port);
+                await connectionTask;
+                var stream = client.GetStream();
+
+                _server.SendEvent(new Event
+                {
+                    EventType = "output",
+                    Body = new OutputEventBody
+                    {
+                        Category = "stdout",
+                        Output = "hello world"
+                    }
+                });
+
+                // Read a full framed DAP message with timeout
+                var received = await ReadDapMessageAsync(stream, TimeSpan.FromSeconds(5));
+
+                // Protocol fields MUST be preserved
+                Assert.Contains("\"type\":\"event\"", received);
+                Assert.Contains("\"event\":\"output\"", received);
+                Assert.Contains("\"category\":\"stdout\"", received);
+
+                cts.Cancel();
+                await _server.StopAsync();
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public async Task StopAsync_AwaitsConnectionLoopShutdown()
+        {
+            using (CreateTestContext())
+            {
+                var cts = new CancellationTokenSource();
+                await _server.StartAsync(0, cts.Token);
+
+                // Stop should complete within a reasonable time
+                var stopTask = _server.StopAsync();
+                var completed = await Task.WhenAny(stopTask, Task.Delay(10000));
+                Assert.Equal(stopTask, completed);
+            }
+        }
+
+        /// <summary>
+        /// Reads a single DAP-framed message from a stream with a timeout.
+        /// Parses the Content-Length header, reads exactly that many bytes,
+        /// and returns the JSON body. Fails with a clear error on timeout.
+        /// </summary>
+        private static async Task<string> ReadDapMessageAsync(NetworkStream stream, TimeSpan timeout)
+        {
+            using var cts = new CancellationTokenSource(timeout);
+            var token = cts.Token;
+
+            // Read headers byte-by-byte until we see \r\n\r\n
+            var headerBuilder = new StringBuilder();
+            var buffer = new byte[1];
+            var contentLength = -1;
+
+            while (true)
+            {
+                var readTask = stream.ReadAsync(buffer, 0, 1, token);
+                var bytesRead = await readTask;
+                if (bytesRead == 0)
+                {
+                    throw new EndOfStreamException("Connection closed while reading DAP headers");
+                }
+
+                headerBuilder.Append((char)buffer[0]);
+                var headers = headerBuilder.ToString();
+                if (headers.EndsWith("\r\n\r\n"))
+                {
+                    // Parse Content-Length
+                    foreach (var line in headers.Split(new[] { "\r\n" }, StringSplitOptions.RemoveEmptyEntries))
+                    {
+                        if (line.StartsWith("Content-Length: ", StringComparison.OrdinalIgnoreCase))
+                        {
+                            contentLength = int.Parse(line.Substring("Content-Length: ".Length).Trim());
+                        }
+                    }
+                    break;
+                }
+            }
+
+            if (contentLength < 0)
+            {
+                throw new InvalidOperationException("No Content-Length header found in DAP message");
+            }
+
+            // Read exactly contentLength bytes
+            var body = new byte[contentLength];
+            var totalRead = 0;
+            while (totalRead < contentLength)
+            {
+                var bytesRead = await stream.ReadAsync(body, totalRead, contentLength - totalRead, token);
+                if (bytesRead == 0)
+                {
+                    throw new EndOfStreamException("Connection closed while reading DAP body");
+                }
+                totalRead += bytesRead;
+            }
+
+            return Encoding.UTF8.GetString(body);
+        }
+    }
+}
--- a/src/Test/L0/Worker/DapVariableProviderL0.cs
+++ b/src/Test/L0/Worker/DapVariableProviderL0.cs
@@ -0,0 +1,772 @@
+using System;
+using System.Collections.Generic;
+using System.Runtime.CompilerServices;
+using GitHub.DistributedTask.Pipelines.ContextData;
+using GitHub.DistributedTask.WebApi;
+using GitHub.Runner.Common;
+using GitHub.Runner.Common.Tests;
+using GitHub.Runner.Worker;
+using GitHub.Runner.Worker.Dap;
+using Xunit;
+
+namespace GitHub.Runner.Common.Tests.Worker
+{
+    public sealed class DapVariableProviderL0
+    {
+        private TestHostContext _hc;
+        private DapVariableProvider _provider;
+
+        private TestHostContext CreateTestContext([CallerMemberName] string testName = "")
+        {
+            _hc = new TestHostContext(this, testName);
+            _provider = new DapVariableProvider(_hc);
+            return _hc;
+        }
+
+        private Moq.Mock<GitHub.Runner.Worker.IExecutionContext> CreateMockContext(DictionaryContextData expressionValues)
+        {
+            var mock = new Moq.Mock<GitHub.Runner.Worker.IExecutionContext>();
+            mock.Setup(x => x.ExpressionValues).Returns(expressionValues);
+            return mock;
+        }
+
+        #region GetScopes tests
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void GetScopes_ReturnsEmptyWhenContextIsNull()
+        {
+            using (CreateTestContext())
+            {
+                var scopes = _provider.GetScopes(null);
+                Assert.Empty(scopes);
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void GetScopes_ReturnsOnlyPopulatedScopes()
+        {
+            using (CreateTestContext())
+            {
+                var exprValues = new DictionaryContextData();
+                exprValues["github"] = new DictionaryContextData
+                {
+                    { "repository", new StringContextData("owner/repo") }
+                };
+                exprValues["env"] = new DictionaryContextData
+                {
+                    { "CI", new StringContextData("true") },
+                    { "HOME", new StringContextData("/home/runner") }
+                };
+                // "runner" is not set — should not appear in scopes
+
+                var ctx = CreateMockContext(exprValues);
+                var scopes = _provider.GetScopes(ctx.Object);
+
+                Assert.Equal(2, scopes.Count);
+                Assert.Equal("github", scopes[0].Name);
+                Assert.Equal("env", scopes[1].Name);
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void GetScopes_ReportsNamedVariableCount()
+        {
+            using (CreateTestContext())
+            {
+                var exprValues = new DictionaryContextData();
+                exprValues["env"] = new DictionaryContextData
+                {
+                    { "A", new StringContextData("1") },
+                    { "B", new StringContextData("2") },
+                    { "C", new StringContextData("3") }
+                };
+
+                var ctx = CreateMockContext(exprValues);
+                var scopes = _provider.GetScopes(ctx.Object);
+
+                Assert.Single(scopes);
+                Assert.Equal(3, scopes[0].NamedVariables);
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void GetScopes_SecretsGetSpecialPresentationHint()
+        {
+            using (CreateTestContext())
+            {
+                var exprValues = new DictionaryContextData();
+                exprValues["secrets"] = new DictionaryContextData
+                {
+                    { "MY_SECRET", new StringContextData("super-secret") }
+                };
+                exprValues["env"] = new DictionaryContextData
+                {
+                    { "CI", new StringContextData("true") }
+                };
+
+                var ctx = CreateMockContext(exprValues);
+                var scopes = _provider.GetScopes(ctx.Object);
+
+                var envScope = scopes.Find(s => s.Name == "env");
+                var secretsScope = scopes.Find(s => s.Name == "secrets");
+
+                Assert.NotNull(envScope);
+                Assert.Null(envScope.PresentationHint);
+
+                Assert.NotNull(secretsScope);
+                Assert.Equal("registers", secretsScope.PresentationHint);
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void GetScopes_StableVariablesReferenceIds()
+        {
+            using (CreateTestContext())
+            {
+                // Populate all 10 scopes and verify their reference IDs
+                // are stable and based on array position
+                var exprValues = new DictionaryContextData();
+                foreach (var name in DapVariableProvider.ScopeNames)
+                {
+                    exprValues[name] = new DictionaryContextData();
+                }
+
+                var ctx = CreateMockContext(exprValues);
+                var scopes = _provider.GetScopes(ctx.Object);
+
+                Assert.Equal(DapVariableProvider.ScopeNames.Length, scopes.Count);
+                for (int i = 0; i < scopes.Count; i++)
+                {
+                    Assert.Equal(DapVariableProvider.ScopeNames[i], scopes[i].Name);
+                    // Reference IDs are 1-based: index 0 -> ref 1, index 1 -> ref 2, etc.
+                    Assert.Equal(i + 1, scopes[i].VariablesReference);
+                }
+            }
+        }
+
+        #endregion
+
+        #region GetVariables — basic types
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void GetVariables_ReturnsEmptyWhenContextIsNull()
+        {
+            using (CreateTestContext())
+            {
+                var variables = _provider.GetVariables(null, 1);
+                Assert.Empty(variables);
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void GetVariables_ReturnsStringVariables()
+        {
+            using (CreateTestContext())
+            {
+                var exprValues = new DictionaryContextData();
+                exprValues["env"] = new DictionaryContextData
+                {
+                    { "CI", new StringContextData("true") },
+                    { "HOME", new StringContextData("/home/runner") }
+                };
+
+                var ctx = CreateMockContext(exprValues);
+                // "env" is at ScopeNames index 1 → variablesReference = 2
+                var variables = _provider.GetVariables(ctx.Object, 2);
+
+                Assert.Equal(2, variables.Count);
+
+                var ciVar = variables.Find(v => v.Name == "CI");
+                Assert.NotNull(ciVar);
+                Assert.Equal("true", ciVar.Value);
+                Assert.Equal("string", ciVar.Type);
+                Assert.Equal(0, ciVar.VariablesReference);
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void GetVariables_ReturnsBooleanVariables()
+        {
+            using (CreateTestContext())
+            {
+                var exprValues = new DictionaryContextData();
+                exprValues["github"] = new DictionaryContextData
+                {
+                    { "event_name", new StringContextData("push") },
+                };
+                // Use a nested dict with boolean to test
+                var jobDict = new DictionaryContextData();
+                // BooleanContextData is a valid PipelineContextData type
+                // but job context typically has strings. Use env scope instead.
+                exprValues["env"] = new DictionaryContextData
+                {
+                    { "flag", new BooleanContextData(true) }
+                };
+
+                var ctx = CreateMockContext(exprValues);
+                // "env" is at index 1 → ref 2
+                var variables = _provider.GetVariables(ctx.Object, 2);
+
+                var flagVar = variables.Find(v => v.Name == "flag");
+                Assert.NotNull(flagVar);
+                Assert.Equal("true", flagVar.Value);
+                Assert.Equal("boolean", flagVar.Type);
+                Assert.Equal(0, flagVar.VariablesReference);
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void GetVariables_ReturnsNumberVariables()
+        {
+            using (CreateTestContext())
+            {
+                var exprValues = new DictionaryContextData();
+                exprValues["env"] = new DictionaryContextData
+                {
+                    { "count", new NumberContextData(42) }
+                };
+
+                var ctx = CreateMockContext(exprValues);
+                var variables = _provider.GetVariables(ctx.Object, 2);
+
+                var countVar = variables.Find(v => v.Name == "count");
+                Assert.NotNull(countVar);
+                Assert.Equal("42", countVar.Value);
+                Assert.Equal("number", countVar.Type);
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void GetVariables_HandlesNullValues()
+        {
+            using (CreateTestContext())
+            {
+                var exprValues = new DictionaryContextData();
+                var dict = new DictionaryContextData();
+                dict["present"] = new StringContextData("yes");
+                dict["missing"] = null;
+                exprValues["env"] = dict;
+
+                var ctx = CreateMockContext(exprValues);
+                var variables = _provider.GetVariables(ctx.Object, 2);
+
+                var nullVar = variables.Find(v => v.Name == "missing");
+                Assert.NotNull(nullVar);
+                Assert.Equal("null", nullVar.Value);
+                Assert.Equal("null", nullVar.Type);
+                Assert.Equal(0, nullVar.VariablesReference);
+            }
+        }
+
+        #endregion
+
+        #region GetVariables — nested expansion
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void GetVariables_NestedDictionaryIsExpandable()
+        {
+            using (CreateTestContext())
+            {
+                var innerDict = new DictionaryContextData
+                {
+                    { "name", new StringContextData("push") },
+                    { "ref", new StringContextData("refs/heads/main") }
+                };
+                var exprValues = new DictionaryContextData();
+                exprValues["github"] = new DictionaryContextData
+                {
+                    { "event", innerDict }
+                };
+
+                var ctx = CreateMockContext(exprValues);
+                // "github" is at index 0 → ref 1
+                var variables = _provider.GetVariables(ctx.Object, 1);
+
+                var eventVar = variables.Find(v => v.Name == "event");
+                Assert.NotNull(eventVar);
+                Assert.Equal("object", eventVar.Type);
+                Assert.True(eventVar.VariablesReference > 0, "Nested dict should have a non-zero variablesReference");
+                Assert.Equal(2, eventVar.NamedVariables);
+
+                // Now expand it
+                var children = _provider.GetVariables(ctx.Object, eventVar.VariablesReference);
+                Assert.Equal(2, children.Count);
+
+                var nameVar = children.Find(v => v.Name == "name");
+                Assert.NotNull(nameVar);
+                Assert.Equal("push", nameVar.Value);
+                Assert.Equal("${{ github.event.name }}", nameVar.EvaluateName);
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void GetVariables_NestedArrayIsExpandable()
+        {
+            using (CreateTestContext())
+            {
+                var array = new ArrayContextData();
+                array.Add(new StringContextData("item0"));
+                array.Add(new StringContextData("item1"));
+
+                var exprValues = new DictionaryContextData();
+                exprValues["env"] = new DictionaryContextData
+                {
+                    { "list", array }
+                };
+
+                var ctx = CreateMockContext(exprValues);
+                var variables = _provider.GetVariables(ctx.Object, 2);
+
+                var listVar = variables.Find(v => v.Name == "list");
+                Assert.NotNull(listVar);
+                Assert.Equal("array", listVar.Type);
+                Assert.True(listVar.VariablesReference > 0);
+                Assert.Equal(2, listVar.IndexedVariables);
+
+                // Expand the array
+                var items = _provider.GetVariables(ctx.Object, listVar.VariablesReference);
+                Assert.Equal(2, items.Count);
+                Assert.Equal("[0]", items[0].Name);
+                Assert.Equal("item0", items[0].Value);
+                Assert.Equal("[1]", items[1].Name);
+                Assert.Equal("item1", items[1].Value);
+            }
+        }
+
+        #endregion
+
+        #region Secret masking
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void GetVariables_SecretsScopeValuesAreRedacted()
+        {
+            using (CreateTestContext())
+            {
+                var exprValues = new DictionaryContextData();
+                exprValues["secrets"] = new DictionaryContextData
+                {
+                    { "MY_TOKEN", new StringContextData("ghp_abc123secret") },
+                    { "DB_PASSWORD", new StringContextData("p@ssword!") }
+                };
+
+                var ctx = CreateMockContext(exprValues);
+                // "secrets" is at index 5 → ref 6
+                var variables = _provider.GetVariables(ctx.Object, 6);
+
+                Assert.Equal(2, variables.Count);
+                foreach (var v in variables)
+                {
+                    Assert.Equal(DapVariableProvider.RedactedValue, v.Value);
+                    Assert.Equal("string", v.Type);
+                }
+
+                // Keys should still be visible
+                Assert.Contains(variables, v => v.Name == "MY_TOKEN");
+                Assert.Contains(variables, v => v.Name == "DB_PASSWORD");
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void GetVariables_NonSecretScopeValuesMaskedBySecretMasker()
+        {
+            using (var hc = CreateTestContext())
+            {
+                // Register a known secret value with the masker
+                hc.SecretMasker.AddValue("super-secret-token");
+
+                var exprValues = new DictionaryContextData();
+                exprValues["env"] = new DictionaryContextData
+                {
+                    { "SAFE", new StringContextData("hello world") },
+                    { "LEAKED", new StringContextData("prefix-super-secret-token-suffix") }
+                };
+
+                var ctx = CreateMockContext(exprValues);
+                var variables = _provider.GetVariables(ctx.Object, 2);
+
+                var safeVar = variables.Find(v => v.Name == "SAFE");
+                Assert.NotNull(safeVar);
+                Assert.Equal("hello world", safeVar.Value);
+
+                var leakedVar = variables.Find(v => v.Name == "LEAKED");
+                Assert.NotNull(leakedVar);
+                Assert.DoesNotContain("super-secret-token", leakedVar.Value);
+                Assert.Contains("***", leakedVar.Value);
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void MaskSecrets_DelegatesToHostContextSecretMasker()
+        {
+            using (var hc = CreateTestContext())
+            {
+                hc.SecretMasker.AddValue("my-secret");
+
+                Assert.Equal("before-***-after", _provider.MaskSecrets("before-my-secret-after"));
+                Assert.Equal("no secrets here", _provider.MaskSecrets("no secrets here"));
+                Assert.Equal(string.Empty, _provider.MaskSecrets(null));
+                Assert.Equal(string.Empty, _provider.MaskSecrets(string.Empty));
+            }
+        }
+
+        #endregion
+
+        #region Reset
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void Reset_InvalidatesNestedReferences()
+        {
+            using (CreateTestContext())
+            {
+                var innerDict = new DictionaryContextData
+                {
+                    { "name", new StringContextData("push") }
+                };
+                var exprValues = new DictionaryContextData();
+                exprValues["github"] = new DictionaryContextData
+                {
+                    { "event", innerDict }
+                };
+
+                var ctx = CreateMockContext(exprValues);
+                var variables = _provider.GetVariables(ctx.Object, 1);
+                var eventVar = variables.Find(v => v.Name == "event");
+                Assert.True(eventVar.VariablesReference > 0);
+
+                var savedRef = eventVar.VariablesReference;
+
+                // Reset should clear all dynamic references
+                _provider.Reset();
+
+                var children = _provider.GetVariables(ctx.Object, savedRef);
+                Assert.Empty(children);
+            }
+        }
+
+        #endregion
+
+        #region EvaluateName
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void GetVariables_SetsEvaluateNameWithDotPath()
+        {
+            using (CreateTestContext())
+            {
+                var exprValues = new DictionaryContextData();
+                exprValues["github"] = new DictionaryContextData
+                {
+                    { "repository", new StringContextData("owner/repo") }
+                };
+
+                var ctx = CreateMockContext(exprValues);
+                var variables = _provider.GetVariables(ctx.Object, 1);
+
+                var repoVar = variables.Find(v => v.Name == "repository");
+                Assert.NotNull(repoVar);
+                Assert.Equal("${{ github.repository }}", repoVar.EvaluateName);
+            }
+        }
+
+        #endregion
+
+        #region EvaluateExpression
+
+        /// <summary>
+        /// Creates a mock execution context with Global set up so that
+        /// ToPipelineTemplateEvaluator() works for real expression evaluation.
+        /// </summary>
+        private Moq.Mock<IExecutionContext> CreateEvaluatableContext(
+            TestHostContext hc,
+            DictionaryContextData expressionValues)
+        {
+            var mock = new Moq.Mock<IExecutionContext>();
+            mock.Setup(x => x.ExpressionValues).Returns(expressionValues);
+            mock.Setup(x => x.ExpressionFunctions)
+                .Returns(new List<GitHub.DistributedTask.Expressions2.IFunctionInfo>());
+            mock.Setup(x => x.Global).Returns(new GlobalContext
+            {
+                FileTable = new List<string>(),
+                Variables = new Variables(hc, new Dictionary<string, VariableValue>()),
+            });
+            // ToPipelineTemplateEvaluator uses ToTemplateTraceWriter which calls
+            // context.Write — provide a no-op so it doesn't NRE.
+            mock.Setup(x => x.Write(Moq.It.IsAny<string>(), Moq.It.IsAny<string>()));
+            return mock;
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void EvaluateExpression_ReturnsValueForSimpleExpression()
+        {
+            using (var hc = CreateTestContext())
+            {
+                var exprValues = new DictionaryContextData();
+                exprValues["github"] = new DictionaryContextData
+                {
+                    { "repository", new StringContextData("owner/repo") }
+                };
+
+                var ctx = CreateEvaluatableContext(hc, exprValues);
+                var result = _provider.EvaluateExpression("github.repository", ctx.Object);
+
+                Assert.Equal("owner/repo", result.Result);
+                Assert.Equal("string", result.Type);
+                Assert.Equal(0, result.VariablesReference);
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void EvaluateExpression_StripsWrapperSyntax()
+        {
+            using (var hc = CreateTestContext())
+            {
+                var exprValues = new DictionaryContextData();
+                exprValues["github"] = new DictionaryContextData
+                {
+                    { "event_name", new StringContextData("push") }
+                };
+
+                var ctx = CreateEvaluatableContext(hc, exprValues);
+                var result = _provider.EvaluateExpression("${{ github.event_name }}", ctx.Object);
+
+                Assert.Equal("push", result.Result);
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void EvaluateExpression_MasksSecretInResult()
+        {
+            using (var hc = CreateTestContext())
+            {
+                hc.SecretMasker.AddValue("super-secret");
+
+                var exprValues = new DictionaryContextData();
+                exprValues["env"] = new DictionaryContextData
+                {
+                    { "TOKEN", new StringContextData("super-secret") }
+                };
+
+                var ctx = CreateEvaluatableContext(hc, exprValues);
+                var result = _provider.EvaluateExpression("env.TOKEN", ctx.Object);
+
+                Assert.DoesNotContain("super-secret", result.Result);
+                Assert.Contains("***", result.Result);
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void EvaluateExpression_ReturnsErrorForInvalidExpression()
+        {
+            using (var hc = CreateTestContext())
+            {
+                var exprValues = new DictionaryContextData();
+                exprValues["github"] = new DictionaryContextData();
+
+                var ctx = CreateEvaluatableContext(hc, exprValues);
+                // An invalid expression syntax should not throw — it should
+                // return an error result.
+                var result = _provider.EvaluateExpression("!!!invalid[[", ctx.Object);
+
+                Assert.Contains("error", result.Result, StringComparison.OrdinalIgnoreCase);
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void EvaluateExpression_ReturnsMessageWhenNoContext()
+        {
+            using (CreateTestContext())
+            {
+                var result = _provider.EvaluateExpression("github.repository", null);
+
+                Assert.Contains("no execution context", result.Result, StringComparison.OrdinalIgnoreCase);
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void EvaluateExpression_ReturnsEmptyForEmptyExpression()
+        {
+            using (var hc = CreateTestContext())
+            {
+                var exprValues = new DictionaryContextData();
+                var ctx = CreateEvaluatableContext(hc, exprValues);
+                var result = _provider.EvaluateExpression("", ctx.Object);
+
+                Assert.Equal(string.Empty, result.Result);
+            }
+        }
+
+        #endregion
+
+        #region InferResultType
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void InferResultType_ClassifiesCorrectly()
+        {
+            using (CreateTestContext())
+            {
+                Assert.Equal("null", DapVariableProvider.InferResultType(null));
+                Assert.Equal("null", DapVariableProvider.InferResultType("null"));
+                Assert.Equal("boolean", DapVariableProvider.InferResultType("true"));
+                Assert.Equal("boolean", DapVariableProvider.InferResultType("false"));
+                Assert.Equal("number", DapVariableProvider.InferResultType("42"));
+                Assert.Equal("number", DapVariableProvider.InferResultType("3.14"));
+                Assert.Equal("object", DapVariableProvider.InferResultType("{\"key\":\"val\"}"));
+                Assert.Equal("object", DapVariableProvider.InferResultType("[1,2,3]"));
+                Assert.Equal("string", DapVariableProvider.InferResultType("hello world"));
+                Assert.Equal("string", DapVariableProvider.InferResultType("owner/repo"));
+            }
+        }
+
+        #endregion
+
+        #region Non-string secret type redaction
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void GetVariables_SecretsScopeRedactsNumberContextData()
+        {
+            using (CreateTestContext())
+            {
+                var exprValues = new DictionaryContextData();
+                exprValues["secrets"] = new DictionaryContextData
+                {
+                    { "NUMERIC_SECRET", new NumberContextData(12345) }
+                };
+
+                var ctx = CreateMockContext(exprValues);
+                var variables = _provider.GetVariables(ctx.Object, 6);
+
+                Assert.Single(variables);
+                Assert.Equal("NUMERIC_SECRET", variables[0].Name);
+                Assert.Equal(DapVariableProvider.RedactedValue, variables[0].Value);
+                Assert.Equal("string", variables[0].Type);
+                Assert.Equal(0, variables[0].VariablesReference);
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void GetVariables_SecretsScopeRedactsBooleanContextData()
+        {
+            using (CreateTestContext())
+            {
+                var exprValues = new DictionaryContextData();
+                exprValues["secrets"] = new DictionaryContextData
+                {
+                    { "BOOL_SECRET", new BooleanContextData(true) }
+                };
+
+                var ctx = CreateMockContext(exprValues);
+                var variables = _provider.GetVariables(ctx.Object, 6);
+
+                Assert.Single(variables);
+                Assert.Equal("BOOL_SECRET", variables[0].Name);
+                Assert.Equal(DapVariableProvider.RedactedValue, variables[0].Value);
+                Assert.Equal("string", variables[0].Type);
+                Assert.Equal(0, variables[0].VariablesReference);
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void GetVariables_SecretsScopeRedactsNestedDictionary()
+        {
+            using (CreateTestContext())
+            {
+                var exprValues = new DictionaryContextData();
+                exprValues["secrets"] = new DictionaryContextData
+                {
+                    { "NESTED_SECRET", new DictionaryContextData
+                        {
+                            { "inner_key", new StringContextData("inner_value") }
+                        }
+                    }
+                };
+
+                var ctx = CreateMockContext(exprValues);
+                var variables = _provider.GetVariables(ctx.Object, 6);
+
+                Assert.Single(variables);
+                Assert.Equal("NESTED_SECRET", variables[0].Name);
+                Assert.Equal(DapVariableProvider.RedactedValue, variables[0].Value);
+                Assert.Equal("string", variables[0].Type);
+                // Nested container should NOT be drillable under secrets
+                Assert.Equal(0, variables[0].VariablesReference);
+            }
+        }
+
+        [Fact]
+        [Trait("Level", "L0")]
+        [Trait("Category", "Worker")]
+        public void GetVariables_SecretsScopeRedactsNullValue()
+        {
+            using (CreateTestContext())
+            {
+                var exprValues = new DictionaryContextData();
+                var secrets = new DictionaryContextData();
+                secrets["NULL_SECRET"] = null;
+                exprValues["secrets"] = secrets;
+
+                var ctx = CreateMockContext(exprValues);
+                var variables = _provider.GetVariables(ctx.Object, 6);
+
+                Assert.Single(variables);
+                Assert.Equal("NULL_SECRET", variables[0].Name);
+                Assert.Equal(DapVariableProvider.RedactedValue, variables[0].Value);
+                Assert.Equal(0, variables[0].VariablesReference);
+            }
+        }
+
+        #endregion
+    }
+}
--- a/src/Test/L0/Worker/PipelineTemplateEvaluatorWrapperL0.cs
+++ b/src/Test/L0/Worker/PipelineTemplateEvaluatorWrapperL0.cs
@@ -19,7 +19,6 @@ namespace GitHub.Runner.Common.Tests.Worker
    public sealed class PipelineTemplateEvaluatorWrapperL0
    {
        private CancellationTokenSource _ecTokenSource;
-        private CancellationTokenSource _rootTokenSource;
        private Mock<IExecutionContext> _ec;
        private TestHostContext _hc;

@@ -66,7 +65,7 @@ namespace GitHub.Runner.Common.Tests.Worker

                var wrapper = new PipelineTemplateEvaluatorWrapper(_hc, _ec.Object, allowServiceContainerCommand: false);

-                // Call EvaluateAndCompare directly: the new evaluator cancels the root token
+                // Call EvaluateAndCompare directly: the new evaluator cancels the token
                // and returns a different value, forcing hasMismatch = true.
                // Because cancellation flipped during the evaluation window, the
                // mismatch should be skipped.
@@ -75,7 +74,7 @@ namespace GitHub.Runner.Common.Tests.Worker
                    () => "legacy-value",
                    () =>
                    {
-                        _rootTokenSource.Cancel();
+                        _ecTokenSource.Cancel();
                        return "different-value";
                    },
                    (legacy, @new) => string.Equals(legacy, @new, StringComparison.Ordinal));
@@ -89,43 +88,6 @@ namespace GitHub.Runner.Common.Tests.Worker
            }
        }

-        [Fact]
-        [Trait("Level", "L0")]
-        [Trait("Category", "Worker")]
-        public void EvaluateAndCompare_SkipsMismatchRecording_WhenRootCancellationOccursBetweenEvaluators()
-        {
-            // Simulates job-level cancellation firing between legacy and new evaluator runs.
-            // Root is mocked with a separate CancellationTokenSource to exercise the
-            // _context.Root?.CancellationToken path (the job-level token).
-            try
-            {
-                Setup();
-                _ec.Object.Global.Variables.Set(Constants.Runner.Features.CompareWorkflowParser, "true");
-
-                var wrapper = new PipelineTemplateEvaluatorWrapper(_hc, _ec.Object, allowServiceContainerCommand: false);
-
-                // Legacy evaluator cancels the root token (simulating job cancel) and returns a value.
-                // The new evaluator returns a different value. The mismatch should be skipped.
-                var result = wrapper.EvaluateAndCompare<string, string>(
-                    "TestRootCancellationSkip",
-                    () =>
-                    {
-                        var legacyValue = "legacy-value";
-                        _rootTokenSource.Cancel();
-                        return legacyValue;
-                    },
-                    () => "different-value",
-                    (legacy, @new) => string.Equals(legacy, @new, StringComparison.Ordinal));
-
-                Assert.Equal("legacy-value", result);
-                Assert.False(_ec.Object.Global.HasTemplateEvaluatorMismatch);
-            }
-            finally
-            {
-                Teardown();
-            }
-        }
-
        [Fact]
        [Trait("Level", "L0")]
        [Trait("Category", "Worker")]
@@ -900,8 +862,6 @@ namespace GitHub.Runner.Common.Tests.Worker
        {
            _ecTokenSource?.Dispose();
            _ecTokenSource = new CancellationTokenSource();
-            _rootTokenSource?.Dispose();
-            _rootTokenSource = new CancellationTokenSource();

            _hc = new TestHostContext(this, name);

@@ -917,9 +877,6 @@ namespace GitHub.Runner.Common.Tests.Worker
                    WriteDebug = true,
                });
            _ec.Setup(x => x.CancellationToken).Returns(_ecTokenSource.Token);
-            var rootEc = new Mock<IExecutionContext>();
-            rootEc.Setup(x => x.CancellationToken).Returns(_rootTokenSource.Token);
-            _ec.Setup(x => x.Root).Returns(rootEc.Object);
            _ec.Setup(x => x.ExpressionValues).Returns(expressionValues);
            _ec.Setup(x => x.ExpressionFunctions).Returns(expressionFunctions);
            _ec.Setup(x => x.Write(It.IsAny<string>(), It.IsAny<string>())).Callback((string tag, string message) => { _hc.GetTrace().Info($"{tag}{message}"); });
@@ -928,8 +885,6 @@ namespace GitHub.Runner.Common.Tests.Worker

        private void Teardown()
        {
-            _ecTokenSource?.Dispose();
-            _rootTokenSource?.Dispose();
            _hc?.Dispose();
        }
    }
--- a/src/Test/TestData/dockerfileaction_env_invalid_context.yml
+++ b/src/Test/TestData/dockerfileaction_env_invalid_context.yml
@@ -1,13 +0,0 @@
-name: 'Action With Invalid Context'
-description: 'Docker action that uses github context in env (only inputs is allowed)'
-inputs:
-  my-input:
-    description: 'A test input'
-    required: false
-    default: 'hello'
-runs:
-  using: 'docker'
-  image: 'Dockerfile'
-  env:
-    VALID: '${{ inputs.my-input }}'
-    INVALID: '${{ github.event.repository.private }}'
Author	SHA1	Message	Date
Francesco Renzi	9cd74b0f26	ci	2026-03-13 14:19:47 +00:00
Francesco Renzi	9d33c82d61	volatile state	2026-03-13 11:11:09 +00:00
Francesco Renzi	7d0f26a557	encoding casting	2026-03-13 11:08:43 +00:00
Francesco Renzi	e11d6cfa59	lock state	2026-03-13 09:30:09 +00:00
Francesco Renzi	00bde90018	remove waits	2026-03-13 09:10:35 +00:00
Francesco Renzi	5bad8cb359	Mask step display names	2026-03-13 09:10:14 +00:00
Francesco Renzi	8d1e06f436	Remove centralized masking	2026-03-13 08:47:38 +00:00
Francesco Renzi	649dc74be3	More tests	2026-03-13 08:34:24 +00:00
Francesco Renzi	75760d1f34	Centralize outbound DAP masking and harden secrets scope - Add centralized secret masking in DapServer.SendMessageInternal so all outbound DAP payloads (responses, events) are masked before serialization, creating a single egress funnel that catches secrets regardless of caller. - Redact the entire secrets scope in DapVariableProvider regardless of PipelineContextData type (NumberContextData, BooleanContextData, containers) not just StringContextData, closing the defense-in-depth gap. - Null values under secrets scope are now also redacted. - Existing per-call-site masking retained as defense-in-depth. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-03-12 17:20:38 +00:00
Francesco Renzi	e4406e035e	Fix debug session race conditions and step-flow bugs - Guard WaitForCommandAsync against resurrecting terminated sessions (H1) - Mask exception messages in top-level DAP error responses (M1) - Move isFirstStep=false outside try block to prevent continue breakage (M5) - Guard OnJobCompleted with lock-internal state check to prevent duplicate events (M6) Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-03-12 17:16:47 +00:00
Francesco Renzi	a8f3b9195d	Harden DAP server Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-03-12 17:15:34 +00:00
Francesco Renzi	8d6b38a428	Add completions support and friendly errors for unsupported commands Completions (SupportsCompletionsRequest = true): - Respond to DAP 'completions' requests with our DSL commands (help, help("run"), run(...)) so they appear in the debug console autocomplete across all DAP clients - Add CompletionsArguments, CompletionItem, and CompletionsResponseBody to DapMessages Friendly error messages for unsupported stepping commands: - stepIn: explain that Actions debug at the step level - stepOut: suggest using 'continue' - stepBack/reverseContinue: note 'not yet supported' - pause: explain automatic pausing at step boundaries The DAP spec does not provide a capability to hide stepIn/stepOut buttons (they are considered fundamental operations). The best server-side UX is clear error messages when clients send them. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-03-12 11:38:20 +00:00
Francesco Renzi	860a919081	Fix expression expansion in REPL run command The run() command was passing ${{ }} expressions literally to the shell instead of evaluating them first. This caused scripts like `run("echo ${{ github.job }}")` to fail with 'bad substitution'. Fix: add ExpandExpressions() that finds each ${{ expr }} occurrence, evaluates it individually via PipelineTemplateEvaluator, masks the result through SecretMasker, and substitutes it into the script body before writing the temp file — matching how ActionRunner evaluates step inputs before ScriptHandler sees them. Also expands expressions in DSL-provided env values so that `env: { TOKEN: "${{ secrets.MY_TOKEN }}" }` works correctly. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-03-12 11:16:12 +00:00
Francesco Renzi	b76917a8a0	Add L0 tests for REPL parser and session routing Parser tests (DapReplParserL0, 22 tests): - help: bare, case-insensitive, with topic - run: simple script, with shell, env, working_directory, all options - Edge cases: escaped quotes, commas in env values - Errors: empty args, unquoted arg, unknown option, missing paren - Non-DSL input falls through: expressions, wrapped expressions, empty - Help text contains expected commands and options - Internal helpers: SplitArguments with nested braces, empty env block Session integration tests (DapDebugSessionL0, 4 tests): - REPL help returns help text - REPL non-DSL input falls through to expression evaluation - REPL parse error returns error result (not a DAP error response) - watch context still evaluates expressions (not routed through REPL) Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-03-12 11:06:26 +00:00
Francesco Renzi	165fb90296	Wire REPL routing into DapDebugSession Route `evaluate` requests by context: - `repl` context → DSL parser → command dispatch (help/run) - All other contexts (watch, hover, etc.) → expression evaluation If REPL input doesn't match any DSL command, it falls through to expression evaluation so the Debug Console also works for ad-hoc `github.repository`-style queries. Changes: - HandleEvaluateAsync replaces the sync HandleEvaluate - HandleReplInputAsync parses input through DapReplParser.TryParse - DispatchReplCommandAsync dispatches HelpCommand and RunCommand - DapReplExecutor is created alongside the DAP server reference - Remove vestigial `await Task.CompletedTask` from HandleMessageAsync Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-03-12 11:03:10 +00:00
Francesco Renzi	735dd69833	Add DapReplExecutor for run command execution Implement the run command executor that makes REPL `run(...)` behave like a real workflow `run:` step by reusing the runner's existing infrastructure. Key design choices: - Shell resolution mirrors ScriptHandler: job defaults → explicit shell from DSL → platform default (bash→sh on Unix, pwsh→powershell on Windows) - Script fixup via ScriptHandlerHelpers.FixUpScriptContents() adds the same error-handling preamble as a real step - Environment is built from ExecutionContext.ExpressionValues[`env`] plus runtime context variables (GITHUB_, RUNNER_, etc.), with DSL-provided env overrides applied last - Working directory defaults to $GITHUB_WORKSPACE - Output is streamed in real time via DAP output events with secrets masked before emission through HostContext.SecretMasker - Only the exit code is returned in the evaluate response (avoiding the prototype's double-output bug) - Temp script files are cleaned up after execution Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-03-12 11:01:15 +00:00
Francesco Renzi	852e8721d0	Add DAP REPL command model and parser Introduce a typed command model and hand-rolled parser for the debug console DSL. The parser turns REPL input into HelpCommand or RunCommand objects, keeping parsing separate from execution. Ruby-like DSL syntax: help → general help help("run") → command-specific help run("echo hello") → run with default shell run("echo $X", shell: "bash", env: { X: "1" }) → run with explicit shell and env Parser features: - Handles escaped quotes, nested braces, and mixed arguments - Keyword arguments: shell, env, working_directory - Env blocks parsed as { KEY: "value", KEY2: "value2" } - Returns null for non-DSL input (falls through to expression eval) - Descriptive error messages for malformed input - Help text scaffolding for discoverability Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-03-12 10:58:35 +00:00
Francesco Renzi	2a98a8c955	Add L0 tests for DAP expression evaluation Provider tests (DapVariableProviderL0): - Simple expression evaluation (github.repository) - ${{ }} wrapper stripping - Secret masking in evaluation results - Graceful error for invalid expressions - No-context returns descriptive message - Empty expression returns empty string - InferResultType classifies null/bool/number/object/string Session integration tests (DapDebugSessionL0): - evaluate request returns result when paused with context - evaluate request returns graceful error when no step active - evaluate request handles ${{ }} wrapper syntax Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-03-12 09:56:28 +00:00
Francesco Renzi	f31e1c7c43	Wire evaluate request into DapDebugSession Add HandleEvaluate() that delegates expression evaluation to the DapVariableProvider, keeping all masking centralized. Changes: - Register 'evaluate' in the command dispatch switch - HandleEvaluate resolves frame context and delegates to DapVariableProvider.EvaluateExpression() - Set SupportsEvaluateForHovers = true in capabilities so DAP clients enable hover tooltips and the Watch pane No separate feature flag — the debugger is already gated by EnableDebugger on the job context. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-03-12 09:51:45 +00:00
Francesco Renzi	1573e36a44	Add expression evaluation to DapVariableProvider Add EvaluateExpression() that evaluates GitHub Actions expressions using the runner's existing PipelineTemplateEvaluator infrastructure. How it works: - Strips ${{ }} wrapper if present - Creates a BasicExpressionToken and evaluates via EvaluateStepDisplayName (supports the full expression language: functions, operators, context access) - Masks the result through MaskSecrets() — same masking path used by scope inspection - Returns a structured EvaluateResponseBody with type inference - Catches evaluation errors and returns masked error messages Also adds InferResultType() helper for DAP type hints. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-03-12 09:50:39 +00:00
Francesco Renzi	0d33fd1930	Add L0 tests for DAP scope inspection and secret masking Provider tests (DapVariableProviderL0): - Scope discovery: empty context, populated scopes, variable count, stable reference IDs, secrets presentation hint - Variable types: string, boolean, number, null handling - Nested expansion: dictionaries and arrays with child drilling - Secret masking: redacted values in secrets scope, SecretMasker integration for non-secret scopes, MaskSecrets delegation - Reset: stale nested references invalidated after Reset() - EvaluateName: dot-path expression syntax Session integration tests (DapDebugSessionL0): - Scopes request returns scopes from step execution context - Variables request returns variables from step execution context - Scopes request returns empty when no step is active - Secrets values are redacted through the full request path Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-03-12 07:13:15 +00:00
Francesco Renzi	2c65db137a	Wire DapVariableProvider into DapDebugSession for scope inspection Replace the stub HandleScopes/HandleVariables implementations that returned empty lists with real delegation to DapVariableProvider. Changes: - DapDebugSession now creates a DapVariableProvider on Initialize() - HandleScopes() resolves the execution context for the requested frame and delegates to the provider - HandleVariables() delegates to the provider for both top-level scope references and nested dynamic references - GetExecutionContextForFrame() maps frame IDs to contexts: frame 1 = current step, frames 1000+ = completed (no live context) - Provider is reset on each new step to invalidate stale nested refs Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-03-12 07:01:49 +00:00
Francesco Renzi	3d8c844883	Add DapVariableProvider for scope inspection with centralized masking Introduce a reusable component that maps runner ExpressionValues and PipelineContextData into DAP scopes and variables. This is the single point where execution-context values are materialized for the debugger. Key design decisions: - Fixed scope reference IDs (1–100) for the 10 well-known scopes (github, env, runner, job, steps, secrets, inputs, vars, matrix, needs) - Dynamic reference IDs (101+) for lazy nested object/array expansion - All string values pass through HostContext.SecretMasker.MaskSecrets() - The secrets scope is intentionally opaque: keys shown, values replaced with a constant redaction marker - MaskSecrets() is public so future DAP features (evaluate, REPL) can reuse it without duplicating masking policy Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-03-12 07:00:01 +00:00
Francesco Renzi	915e13c842	Integrate DAP debugger into JobRunner and StepsRunner	2026-03-11 08:56:08 -07:00
Francesco Renzi	17b05ddaa4	Add minimal DAP debug session with next/continue support	2026-03-11 08:55:54 -07:00
Francesco Renzi	9737dfadd5	Add DAP TCP server with reconnection support	2026-03-11 08:55:41 -07:00
Francesco Renzi	cca15de3b3	Add DAP protocol message types and service interfaces	2026-03-11 08:55:17 -07:00
Francesco Renzi	8b1b23b5ce	Get EnableDebugger from job context	2026-03-10 04:13:39 -07:00