@ai-sdk/sandbox-just-bash 1.0.123 → 1.0.126

package/CHANGELOG.md

@@ -1,5 +1,32 @@
 # @ai-sdk/sandbox-just-bash
 
+## 1.0.126
+
+### Patch Changes
+
+- 31742b9: feat(harness): refactor sandbox APIs for cleaner separation of concerns from harness layer, more intuitive DX regardless of how your sandbox is configured, and streamlined handling of sandbox templates/snapshots
+- Updated dependencies [af9597b]
+- Updated dependencies [31742b9]
+- Updated dependencies [bc49f78]
+  - @ai-sdk/harness@1.0.126
+  - @ai-sdk/provider-utils@5.0.49
+
+## 1.0.125
+
+### Patch Changes
+
+- 5482b08: fix(sandbox-just-bash): preserve command resolution when providing realpath on non-synchronous filesystems
+- Updated dependencies [be877ff]
+  - @ai-sdk/provider-utils@5.0.48
+  - @ai-sdk/harness@1.0.125
+
+## 1.0.124
+
+### Patch Changes
+
+- Updated dependencies [40231b6]
+  - @ai-sdk/harness@1.0.124
+
 ## 1.0.123
 
 ### Patch Changes

package/README.md

@@ -2,9 +2,9 @@
 
 _This package is **experimental**._
 
-`HarnessV1SandboxProvider` implementation for [`just-bash`](https://github.com/vercel-labs/just-bash), an in-process JavaScript bash environment with a virtual filesystem. File operations and spawned processes share the same in-memory state.
+Sandbox session implementation for [`just-bash`](https://github.com/vercel-labs/just-bash), an in-process JavaScript bash environment with a virtual filesystem.
 
-This provider does not expose ports, so it cannot be used with features that require actual network sandboxes. It is primarily useful for handing a local `Experimental_SandboxSession` to AI SDK tools that accept `experimental_sandbox`.
+`just-bash` sandboxes do not expose ports, so they cannot be used with features that require actual network sandboxes.
 
 ## Setup
 
@@ -14,14 +14,14 @@ npm i @ai-sdk/sandbox-just-bash
 
 ## Usage
 
-The factory is synchronous. The returned provider is stable; the actual `just-bash` `Sandbox` is created on demand inside `provider.createSession()`.
+Each creation produces a fresh in-memory sandbox and applies an optional harness template.
 
 ```ts
-import { createJustBashSandbox } from '@ai-sdk/sandbox-just-bash';
+import { createJustBashNetworkSandboxSession } from '@ai-sdk/sandbox-just-bash';
 
-const justBashSandbox = createJustBashSandbox({ cwd: '/work' });
-
-const networkSandboxSession = await justBashSandbox.createSession();
+const networkSandboxSession = await createJustBashNetworkSandboxSession({
+  cwd: '/work',
+});
 const sandboxSession = networkSandboxSession.restricted();
 
 await sandboxSession.writeTextFile({ path: '/work/hello.txt', content: 'hi' });
@@ -30,18 +30,11 @@ const { stdout } = await sandboxSession.run({
   command: 'cat /work/hello.txt',
 });
 console.log(stdout); // "hi"
+await networkSandboxSession.destroy();
 ```
 
-`networkSandboxSession.restricted()` is typed as `Experimental_SandboxSession` and is the surface to hand to user tools. The network sandbox session's `getPortEndpoint` throws (just-bash has no port story), `getPortUrl` remains as a deprecated compatibility wrapper, and `setNetworkPolicy` is omitted (no local enforcement primitive).
+### Use cases
 
-To wrap an already-created `just-bash` `Sandbox` (e.g. with a custom `fs`), pass it via `sandbox`. Install `just-bash` directly if your application imports `Sandbox`, `OverlayFs`, or other `just-bash` exports:
-
-```ts
-import { createJustBashSandbox } from '@ai-sdk/sandbox-just-bash';
-import { OverlayFs, Sandbox } from 'just-bash';
-
-const overlay = new OverlayFs({ root: process.cwd() });
-const sandbox = createJustBashSandbox({
-  sandbox: await Sandbox.create({ fs: overlay, cwd: overlay.getMountPoint() }),
-});
-```
+- Create a fresh in-memory session with `createJustBashNetworkSandboxSession()` and pass it to `HarnessAgent.createSession({ sandboxSession })`. An optional `sandboxId` only labels its wrapper and cannot enforce uniqueness.
+- Take a network sandbox session's process-restricted subset with `networkSandboxSession.restricted()` and use it with AI SDK tools that accept `experimental_sandbox`.
+- Adapt an existing native `Sandbox` with `createJustBashSandboxSessionFromNativeSandbox(nativeSandbox)` for AI SDK tools. `resumeJustBashNetworkSandboxSession()` reports that cross-process resume is unsupported.

package/dist/index.d.ts

@@ -1,15 +1,13 @@
-import { HarnessV1SandboxProvider, HarnessV1NetworkSandboxSession } from '@ai-sdk/harness';
+import { HarnessV1SandboxProvider, HarnessV1NetworkSandboxSession, HarnessV1SandboxSessionCreateOptions, HarnessV1SandboxSessionResumeOptions } from '@ai-sdk/harness';
 import { Experimental_SandboxSession } from '@ai-sdk/provider-utils';
 import { Sandbox } from 'just-bash';
 
+type JustBashSandboxCreateParams$1 = NonNullable<Parameters<typeof Sandbox.create>[0]>;
+type JustBashCreationSettings$1 = JustBashSandboxCreateParams$1 & {
+    sandbox?: never;
+};
 /**
- * Parameters forwarded to `just-bash`'s `Sandbox.create` when creating a
- * sandbox from scratch. Aliased directly from the underlying SDK so the full
- * surface is available without us re-declaring it.
- */
-type JustBashSandboxCreateParams = NonNullable<Parameters<typeof Sandbox.create>[0]>;
-/**
- * Settings for {@link createJustBashSandbox}. Two mutually-exclusive shapes:
+ * Settings for `createJustBashSandbox`. Two mutually-exclusive shapes:
  *
  * - `{ sandbox }` — wrap an already-created `just-bash` `Sandbox`. The caller
  *   owns its lifecycle.
@@ -19,12 +17,13 @@ type JustBashSandboxCreateParams = NonNullable<Parameters<typeof Sandbox.create>
  * just-bash has no port exposure and no snapshot mechanism, so image
  * management is a per-call no-op: if an adapter declares a bootstrap recipe
  * the provider runs it once on the freshly-created sandbox before returning.
+ *
+ * @deprecated Use `JustBashNetworkSandboxSessionCreateOptions` for new sessions.
  */
 type JustBashSandboxSettings = {
     sandbox: Sandbox;
-} | (JustBashSandboxCreateParams & {
-    sandbox?: never;
-});
+} | JustBashCreationSettings$1;
+/** @deprecated Use `createJustBashNetworkSandboxSession` instead. */
 declare function createJustBashSandbox(settings?: JustBashSandboxSettings): HarnessV1SandboxProvider;
 /**
  * `HarnessV1SandboxProvider` implementation backed by `just-bash`. Useful for
@@ -35,6 +34,7 @@ declare function createJustBashSandbox(settings?: JustBashSandboxSettings): Harn
  * Note: just-bash cannot expose ports, so bridge-backed harness adapters
  * (claude-code, codex) will reject this provider at start.
  */
+/** @deprecated Use `createJustBashNetworkSandboxSession` instead. */
 declare class JustBashSandboxProvider implements HarnessV1SandboxProvider {
     private readonly settings;
     readonly specificationVersion: "harness-sandbox-v1";
@@ -50,4 +50,30 @@ declare class JustBashSandboxProvider implements HarnessV1SandboxProvider {
     }) => Promise<HarnessV1NetworkSandboxSession>;
 }
 
-export { JustBashSandboxProvider, type JustBashSandboxSettings, createJustBashSandbox };
+/**
+ * Flattens an intersection of object types into a single object type so the
+ * resolved shape displays as its named properties rather than a chain of
+ * `A & B & C`.
+ */
+type Prettify<T> = {
+    [K in keyof T]: T[K];
+} & {};
+type JustBashNativeSandboxSession = Sandbox;
+/**
+ * Parameters forwarded to `just-bash`'s `Sandbox.create` when creating a
+ * sandbox from scratch. Aliased directly from the underlying SDK so the full
+ * surface is available without us re-declaring it.
+ */
+type JustBashSandboxCreateParams = NonNullable<Parameters<typeof Sandbox.create>[0]>;
+type JustBashCreationSettings = Omit<JustBashSandboxCreateParams, 'sandbox'>;
+type JustBashNetworkSandboxSessionCreateOptions = Prettify<HarnessV1SandboxSessionCreateOptions<JustBashCreationSettings> & {
+    sandbox?: never;
+}>;
+type JustBashLookupSettings = Record<never, never>;
+type JustBashNetworkSandboxSessionResumeOptions = HarnessV1SandboxSessionResumeOptions<JustBashLookupSettings>;
+declare function createJustBashNetworkSandboxSession(options?: JustBashNetworkSandboxSessionCreateOptions): Promise<HarnessV1NetworkSandboxSession>;
+declare function resumeJustBashNetworkSandboxSession(options: JustBashNetworkSandboxSessionResumeOptions): Promise<HarnessV1NetworkSandboxSession>;
+declare function createJustBashSandboxSessionFromNativeSandbox(nativeSandbox: JustBashNativeSandboxSession): Experimental_SandboxSession;
+declare function createJustBashNetworkSandboxSessionFromNativeSandbox(nativeSandbox: JustBashNativeSandboxSession): HarnessV1NetworkSandboxSession;
+
+export { type JustBashNativeSandboxSession, type JustBashNetworkSandboxSessionCreateOptions, type JustBashNetworkSandboxSessionResumeOptions, JustBashSandboxProvider, type JustBashSandboxSettings, createJustBashNetworkSandboxSession, createJustBashNetworkSandboxSessionFromNativeSandbox, createJustBashSandbox, createJustBashSandboxSessionFromNativeSandbox, resumeJustBashNetworkSandboxSession };

package/dist/index.js

@@ -1,4 +1,4 @@
-// src/just-bash-sandbox.ts
+// src/just-bash-legacy-sandbox-provider.ts
 import { Sandbox } from "just-bash";
 
 // src/just-bash-network-sandbox-session.ts
@@ -12,6 +12,103 @@ import { isAbsolute, posix } from "path";
 import {
   extractLines
 } from "@ai-sdk/provider-utils";
+
+// src/utils.ts
+import { defineCommand } from "just-bash";
+var preparations = /* @__PURE__ */ new WeakMap();
+async function ensureRealpath(sandbox) {
+  let preparation = preparations.get(sandbox);
+  if (preparation == null) {
+    preparation = prepareRealpath(sandbox);
+    preparations.set(sandbox, preparation);
+  }
+  try {
+    await preparation;
+  } catch (error) {
+    if (preparations.get(sandbox) === preparation) {
+      preparations.delete(sandbox);
+    }
+    throw error;
+  }
+}
+async function prepareRealpath(sandbox) {
+  const realpathType = await sandbox.bashEnvInstance.exec("type realpath");
+  if (realpathType.exitCode === 0) {
+    return;
+  }
+  sandbox.bashEnvInstance.registerCommand(
+    defineCommand("realpath", executeRealpath)
+  );
+}
+async function executeRealpath(args, context) {
+  if (args.length === 0 || args[0] === "") {
+    return {
+      stdout: "",
+      stderr: "realpath: missing operand\n",
+      exitCode: 1
+    };
+  }
+  let pending = args[0].startsWith("/") ? args[0] : `${context.cwd}/${args[0]}`;
+  let resolved = "";
+  let linkCount = 0;
+  while (pending.length > 0) {
+    pending = pending.replace(/^\//, "");
+    if (pending.length === 0) {
+      break;
+    }
+    const separatorIndex = pending.indexOf("/");
+    const component = separatorIndex === -1 ? pending : pending.slice(0, separatorIndex);
+    pending = separatorIndex === -1 ? "" : pending.slice(separatorIndex + 1);
+    if (component === "" || component === ".") {
+      continue;
+    }
+    if (component === "..") {
+      resolved = resolved.slice(0, resolved.lastIndexOf("/"));
+      continue;
+    }
+    const candidate = `${resolved}/${component}`;
+    let isSymbolicLink = false;
+    try {
+      isSymbolicLink = (await context.fs.lstat(candidate)).isSymbolicLink;
+    } catch (error) {
+      if (!isFileNotFoundError(error)) {
+        throw error;
+      }
+    }
+    if (!isSymbolicLink) {
+      resolved = candidate;
+      continue;
+    }
+    linkCount += 1;
+    if (linkCount > 64) {
+      return { stdout: "", stderr: "", exitCode: 1 };
+    }
+    let target;
+    try {
+      target = await context.fs.readlink(candidate);
+    } catch {
+      return { stdout: "", stderr: "", exitCode: 1 };
+    }
+    const remainder = pending.length > 0 ? `/${pending}` : "";
+    pending = target.startsWith("/") ? `${target}${remainder}` : `${candidate.slice(0, candidate.lastIndexOf("/"))}/${target}${remainder}`;
+    resolved = "";
+  }
+  return {
+    stdout: `${resolved || "/"}
+`,
+    stderr: "",
+    exitCode: 0
+  };
+}
+function isFileNotFoundError(error) {
+  if (error == null || typeof error !== "object") return false;
+  const code = error.code;
+  if (code === "ENOENT") return true;
+  const message = error.message;
+  return typeof message === "string" && /no such file|not found|ENOENT/i.test(message);
+}
+
+// src/just-bash-sandbox-session.ts
 var JustBashSandboxSession = class {
   constructor(sandbox) {
     this.sandbox = sandbox;
@@ -32,7 +129,9 @@ var JustBashSandboxSession = class {
     env,
     abortSignal
   }) {
-    abortSignal == null ? void 0 : abortSignal.throwIfAborted();
+    abortSignal?.throwIfAborted();
+    await ensureRealpath(this.sandbox);
+    abortSignal?.throwIfAborted();
     const finished = await this.sandbox.runCommand({
       cmd: "bash",
       args: createBashArgs(command, env),
@@ -55,7 +154,9 @@ var JustBashSandboxSession = class {
     env,
     abortSignal
   }) {
-    abortSignal == null ? void 0 : abortSignal.throwIfAborted();
+    abortSignal?.throwIfAborted();
+    await ensureRealpath(this.sandbox);
+    abortSignal?.throwIfAborted();
     const live = await this.sandbox.runCommand({
       cmd: "bash",
       args: createBashArgs(command, env),
@@ -77,13 +178,13 @@ var JustBashSandboxSession = class {
     path,
     abortSignal
   }) {
-    abortSignal == null ? void 0 : abortSignal.throwIfAborted();
+    abortSignal?.throwIfAborted();
     const resolved = this.resolvePath(path);
     try {
       const bytes = await this.sandbox.bashEnvInstance.fs.readFileBuffer(resolved);
       return bytes instanceof Uint8Array ? bytes : new Uint8Array(bytes);
     } catch (error) {
-      if (isFileNotFoundError(error)) return null;
+      if (isFileNotFoundError2(error)) return null;
       throw error;
     }
   }
@@ -112,7 +213,7 @@ var JustBashSandboxSession = class {
     content,
     abortSignal
   }) {
-    abortSignal == null ? void 0 : abortSignal.throwIfAborted();
+    abortSignal?.throwIfAborted();
     const resolved = this.resolvePath(path);
     await this.sandbox.bashEnvInstance.fs.writeFile(resolved, content);
   }
@@ -161,28 +262,26 @@ function createSandboxProcess(command, abortSignal) {
     }
   });
   const drained = (async () => {
-    var _a, _b, _c, _d;
     try {
       for await (const message of command.logs()) {
         const target = message.type === "stdout" ? controllers.stdout : controllers.stderr;
-        target == null ? void 0 : target.enqueue(encoder.encode(message.data));
+        target?.enqueue(encoder.encode(message.data));
       }
-      (_a = controllers.stdout) == null ? void 0 : _a.close();
-      (_b = controllers.stderr) == null ? void 0 : _b.close();
+      controllers.stdout?.close();
+      controllers.stderr?.close();
     } catch (error) {
-      (_c = controllers.stdout) == null ? void 0 : _c.error(error);
-      (_d = controllers.stderr) == null ? void 0 : _d.error(error);
+      controllers.stdout?.error(error);
+      controllers.stderr?.error(error);
     }
   })();
   return {
     stdout,
     stderr,
     async wait() {
-      var _a;
       const finished = await command.wait();
       await drained;
-      if (abortSignal == null ? void 0 : abortSignal.aborted) {
-        throw (_a = abortSignal.reason) != null ? _a : new DOMException("Aborted", "AbortError");
+      if (abortSignal?.aborted) {
+        throw abortSignal.reason ?? new DOMException("Aborted", "AbortError");
       }
       return { exitCode: finished.exitCode };
     },
@@ -219,7 +318,7 @@ async function collectStream(stream) {
   }
   return out;
 }
-function isFileNotFoundError(error) {
+function isFileNotFoundError2(error) {
   if (error == null || typeof error !== "object") return false;
   const code = error.code;
   if (code === "ENOENT") return true;
@@ -246,11 +345,12 @@ var JustBashNetworkSandboxSession = class extends JustBashSandboxSession {
       return (await this.getPortEndpoint(options)).url;
     };
     this.stop = async () => {
+      await this.sandbox.stop();
     };
     this.destroy = async () => {
       await this.stop();
     };
-    this.id = randomUUID();
+    this.id = input.sandboxId ?? randomUUID();
     this.defaultWorkingDirectory = input.sandbox.bashEnvInstance.getCwd();
   }
   restricted() {
@@ -258,77 +358,12 @@ var JustBashNetworkSandboxSession = class extends JustBashSandboxSession {
   }
 };
 
-// src/just-bash-sandbox.ts
+// src/just-bash-legacy-sandbox-provider.ts
 var JUST_BASH_PROVIDER_ID2 = "just-bash-sandbox";
-var REALPATH_PATH = "/usr/bin/realpath";
-var REALPATH_SCRIPT = `#!/usr/bin/env bash
-pending=\${1:?}
-resolved=
-link_count=0
-link_marker=__AI_SDK_REALPATH_LINK_END__
-case "$pending" in
-  /*) ;;
-  *) pending=$PWD/$pending ;;
-esac
-while [ -n "$pending" ]; do
-  pending=\${pending#/}
-  [ -n "$pending" ] || break
-  component=\${pending%%/*}
-  if [ "$pending" = "$component" ]; then
-    pending=
-  else
-    pending=\${pending#*/}
-  fi
-  case "$component" in
-    ""|.) continue ;;
-    ..)
-      resolved=\${resolved%/*}
-      continue
-      ;;
-  esac
-  candidate=$resolved/$component
-  if [ -L "$candidate" ]; then
-    link_count=$((link_count + 1))
-    [ "$link_count" -le 64 ] || exit 1
-    link_target_framed=$(readlink "$candidate"; readlink_status=$?; printf '%s' "$link_marker"; exit "$readlink_status")
-    readlink_status=$?
-    [ "$readlink_status" -eq 0 ] || exit 1
-    target=\${link_target_framed%$link_marker}
-    target=\${target%$'
-'}
-    case "$target" in
-      /*) pending=$target\${pending:+/$pending} ;;
-      *) pending=\${candidate%/*}/$target\${pending:+/$pending} ;;
-    esac
-    resolved=
-  else
-    resolved=$candidate
-  fi
-done
-printf '%s
-' "\${resolved:-/}"
-`;
-async function ensureRealpath(sandbox) {
-  const fs = sandbox.bashEnvInstance.fs;
-  try {
-    await fs.lstat(REALPATH_PATH);
-    return;
-  } catch (error) {
-    if (!isFileNotFoundError2(error)) {
-      throw error;
-    }
-  }
-  await sandbox.writeFiles({ [REALPATH_PATH]: REALPATH_SCRIPT });
-  await fs.chmod(REALPATH_PATH, 493);
-}
-function isFileNotFoundError2(error) {
-  if (error == null || typeof error !== "object") return false;
-  const code = error.code;
-  if (code === "ENOENT") return true;
-  const message = error.message;
-  return typeof message === "string" && /no such file|not found|ENOENT/i.test(message);
-}
 function createJustBashSandbox(settings = {}) {
+  console.warn(
+    "createJustBashSandbox is deprecated. Use createJustBashNetworkSandboxSession and HarnessAgent.createSession({ sandboxSession }) instead."
+  );
   return new JustBashSandboxProvider(settings);
 }
 var JustBashSandboxProvider = class {
@@ -337,25 +372,80 @@ var JustBashSandboxProvider = class {
     this.specificationVersion = "harness-sandbox-v1";
     this.providerId = JUST_BASH_PROVIDER_ID2;
     this.createSession = async (options) => {
-      var _a;
-      (_a = options == null ? void 0 : options.abortSignal) == null ? void 0 : _a.throwIfAborted();
+      options?.abortSignal?.throwIfAborted();
       const ownsLifecycle = !("sandbox" in this.settings && this.settings.sandbox);
-      const sandbox = ownsLifecycle ? await Sandbox.create(this.settings) : this.settings.sandbox;
+      const sandbox = ownsLifecycle ? await Sandbox.create(
+        this.settings
+      ) : this.settings.sandbox;
       await ensureRealpath(sandbox);
       const sandboxSession = new JustBashNetworkSandboxSession({
         sandbox
       });
-      if ((options == null ? void 0 : options.onFirstCreate) != null) {
+      if (options?.onFirstCreate != null) {
         await options.onFirstCreate(sandboxSession.restricted(), {
-          abortSignal: options == null ? void 0 : options.abortSignal
+          abortSignal: options?.abortSignal
         });
       }
       return sandboxSession;
     };
+    console.warn(
+      "JustBashSandboxProvider is deprecated. Use createJustBashNetworkSandboxSession instead."
+    );
   }
 };
+
+// src/just-bash-sandbox.ts
+import {
+  HarnessCapabilityUnsupportedError as HarnessCapabilityUnsupportedError2
+} from "@ai-sdk/harness";
+import { Sandbox as Sandbox2 } from "just-bash";
+async function createJustBashNetworkSandboxSession(options = {}) {
+  if ("sandbox" in options) {
+    throw new Error(
+      "createJustBashNetworkSandboxSession: use createJustBashNetworkSandboxSessionFromNativeSandbox for an existing sandbox."
+    );
+  }
+  const {
+    template,
+    abortSignal,
+    sandboxId,
+    sandbox: _sandbox,
+    ...nativeOptions
+  } = options;
+  abortSignal?.throwIfAborted();
+  const nativeSandbox = await Sandbox2.create(nativeOptions);
+  try {
+    await ensureRealpath(nativeSandbox);
+    const session = new JustBashNetworkSandboxSession({
+      sandbox: nativeSandbox,
+      sandboxId
+    });
+    await template?.prepare({ session: session.restricted(), abortSignal });
+    return session;
+  } catch (error) {
+    await nativeSandbox.stop().catch(() => {
+    });
+    throw error;
+  }
+}
+async function resumeJustBashNetworkSandboxSession(options) {
+  options.abortSignal?.throwIfAborted();
+  throw new HarnessCapabilityUnsupportedError2({
+    message: "just-bash sandboxes run in-process and cannot be resumed by sandboxId."
+  });
+}
+function createJustBashSandboxSessionFromNativeSandbox(nativeSandbox) {
+  return new JustBashSandboxSession(nativeSandbox);
+}
+function createJustBashNetworkSandboxSessionFromNativeSandbox(nativeSandbox) {
+  return new JustBashNetworkSandboxSession({ sandbox: nativeSandbox });
+}
 export {
   JustBashSandboxProvider,
-  createJustBashSandbox
+  createJustBashNetworkSandboxSession,
+  createJustBashNetworkSandboxSessionFromNativeSandbox,
+  createJustBashSandbox,
+  createJustBashSandboxSessionFromNativeSandbox,
+  resumeJustBashNetworkSandboxSession
 };
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/just-bash-sandbox.ts","../src/just-bash-network-sandbox-session.ts","../src/just-bash-sandbox-session.ts"],"sourcesContent":["import type {\n  HarnessV1NetworkSandboxSession,\n  HarnessV1SandboxProvider,\n} from '@ai-sdk/harness';\nimport type { Experimental_SandboxSession as SandboxSession } from '@ai-sdk/provider-utils';\nimport { Sandbox } from 'just-bash';\nimport { JustBashNetworkSandboxSession } from './just-bash-network-sandbox-session';\n\n/**\n * Parameters forwarded to `just-bash`'s `Sandbox.create` when creating a\n * sandbox from scratch. Aliased directly from the underlying SDK so the full\n * surface is available without us re-declaring it.\n */\ntype JustBashSandboxCreateParams = NonNullable<\n  Parameters<typeof Sandbox.create>[0]\n>;\n\n/**\n * Settings for {@link createJustBashSandbox}. Two mutually-exclusive shapes:\n *\n * - `{ sandbox }` — wrap an already-created `just-bash` `Sandbox`. The caller\n *   owns its lifecycle.\n * - {@link JustBashSandboxCreateParams} fields — provider calls\n *   `Sandbox.create(settings)` on every `createSession()`.\n *\n * just-bash has no port exposure and no snapshot mechanism, so image\n * management is a per-call no-op: if an adapter declares a bootstrap recipe\n * the provider runs it once on the freshly-created sandbox before returning.\n */\nexport type JustBashSandboxSettings =\n  | { sandbox: Sandbox }\n  | (JustBashSandboxCreateParams & { sandbox?: never });\n\nconst JUST_BASH_PROVIDER_ID = 'just-bash-sandbox';\nconst REALPATH_PATH = '/usr/bin/realpath';\nconst REALPATH_SCRIPT = `#!/usr/bin/env bash\npending=\\${1:?}\nresolved=\nlink_count=0\nlink_marker=__AI_SDK_REALPATH_LINK_END__\ncase \"$pending\" in\n  /*) ;;\n  *) pending=$PWD/$pending ;;\nesac\nwhile [ -n \"$pending\" ]; do\n  pending=\\${pending#/}\n  [ -n \"$pending\" ] || break\n  component=\\${pending%%/*}\n  if [ \"$pending\" = \"$component\" ]; then\n    pending=\n  else\n    pending=\\${pending#*/}\n  fi\n  case \"$component\" in\n    \"\"|.) continue ;;\n    ..)\n      resolved=\\${resolved%/*}\n      continue\n      ;;\n  esac\n  candidate=$resolved/$component\n  if [ -L \"$candidate\" ]; then\n    link_count=$((link_count + 1))\n    [ \"$link_count\" -le 64 ] || exit 1\n    link_target_framed=$(readlink \"$candidate\"; readlink_status=$?; printf '%s' \"$link_marker\"; exit \"$readlink_status\")\n    readlink_status=$?\n    [ \"$readlink_status\" -eq 0 ] || exit 1\n    target=\\${link_target_framed%$link_marker}\n    target=\\${target%$'\\n'}\n    case \"$target\" in\n      /*) pending=$target\\${pending:+/$pending} ;;\n      *) pending=\\${candidate%/*}/$target\\${pending:+/$pending} ;;\n    esac\n    resolved=\n  else\n    resolved=$candidate\n  fi\ndone\nprintf '%s\\n' \"\\${resolved:-/}\"\n`;\n\nasync function ensureRealpath(sandbox: Sandbox): Promise<void> {\n  const fs = sandbox.bashEnvInstance.fs;\n  try {\n    await fs.lstat(REALPATH_PATH);\n    return;\n  } catch (error) {\n    if (!isFileNotFoundError(error)) {\n      throw error;\n    }\n  }\n\n  await sandbox.writeFiles({ [REALPATH_PATH]: REALPATH_SCRIPT });\n  await fs.chmod(REALPATH_PATH, 0o755);\n}\n\nfunction isFileNotFoundError(error: unknown): boolean {\n  if (error == null || typeof error !== 'object') return false;\n  const code = (error as { code?: unknown }).code;\n  if (code === 'ENOENT') return true;\n  const message = (error as { message?: unknown }).message;\n  return (\n    typeof message === 'string' &&\n    /no such file|not found|ENOENT/i.test(message)\n  );\n}\n\nexport function createJustBashSandbox(\n  settings: JustBashSandboxSettings = {} as JustBashSandboxSettings,\n): HarnessV1SandboxProvider {\n  return new JustBashSandboxProvider(settings);\n}\n\n/**\n * `HarnessV1SandboxProvider` implementation backed by `just-bash`. Useful for\n * non-bridge harness flows and for handing a local `Experimental_SandboxSession`\n * to AI SDK tools — use `provider.createSession()` then\n * `sandboxSession.restricted()` to get the latter.\n *\n * Note: just-bash cannot expose ports, so bridge-backed harness adapters\n * (claude-code, codex) will reject this provider at start.\n */\nexport class JustBashSandboxProvider implements HarnessV1SandboxProvider {\n  readonly specificationVersion = 'harness-sandbox-v1' as const;\n  readonly providerId = JUST_BASH_PROVIDER_ID;\n\n  constructor(private readonly settings: JustBashSandboxSettings) {}\n\n  createSession = async (options?: {\n    sessionId?: string;\n    abortSignal?: AbortSignal;\n    identity?: string;\n    onFirstCreate?: (\n      session: SandboxSession,\n      opts: { abortSignal?: AbortSignal },\n    ) => Promise<void>;\n  }): Promise<HarnessV1NetworkSandboxSession> => {\n    options?.abortSignal?.throwIfAborted();\n\n    const ownsLifecycle = !(\n      'sandbox' in this.settings && this.settings.sandbox\n    );\n    const sandbox = ownsLifecycle\n      ? await Sandbox.create(this.settings as JustBashSandboxCreateParams)\n      : this.settings.sandbox;\n    await ensureRealpath(sandbox);\n    const sandboxSession = new JustBashNetworkSandboxSession({\n      sandbox,\n    });\n\n    if (options?.onFirstCreate != null) {\n      await options.onFirstCreate(sandboxSession.restricted(), {\n        abortSignal: options?.abortSignal,\n      });\n    }\n\n    return sandboxSession;\n  };\n}\n","import {\n  HarnessCapabilityUnsupportedError,\n  type HarnessV1NetworkSandboxSession,\n  type HarnessV1PortEndpoint,\n} from '@ai-sdk/harness';\nimport type { Experimental_SandboxSession as SandboxSession } from '@ai-sdk/provider-utils';\nimport { randomUUID } from 'node:crypto';\nimport type { Sandbox } from 'just-bash';\nimport { JustBashSandboxSession } from './just-bash-sandbox-session';\n\nconst JUST_BASH_PROVIDER_ID = 'just-bash-sandbox';\n\n/**\n * `HarnessV1NetworkSandboxSession` backed by a `just-bash` `Sandbox`. It extends\n * {@link JustBashSandboxSession} with the infra surface. Exposes no ports —\n * there is no network namespace and no way to publish an HTTP endpoint\n * reachable from outside the host process. Bridge-backed harness adapters that\n * need `getPortEndpoint` will fail with `HarnessCapabilityUnsupportedError` at\n * start.\n *\n * Network policy is not implementable locally either — `setNetworkPolicy` is\n * omitted.\n */\nexport class JustBashNetworkSandboxSession\n  extends JustBashSandboxSession\n  implements HarnessV1NetworkSandboxSession\n{\n  /**\n   * Minted at construct time. just-bash has no native identifier and no\n   * cross-process reattach surface; the value exists only to satisfy the\n   * `HarnessV1NetworkSandboxSession.id` contract.\n   */\n  readonly id: string;\n  readonly defaultWorkingDirectory: string;\n\n  constructor(input: { sandbox: Sandbox }) {\n    super(input.sandbox);\n    this.id = randomUUID();\n    this.defaultWorkingDirectory = input.sandbox.bashEnvInstance.getCwd();\n  }\n\n  readonly ports: ReadonlyArray<number> = [];\n\n  restricted(): SandboxSession {\n    return new JustBashSandboxSession(this.sandbox);\n  }\n\n  getPortEndpoint = async (_options: {\n    port: number;\n    protocol?: 'http' | 'https' | 'ws';\n  }): Promise<HarnessV1PortEndpoint> => {\n    throw new HarnessCapabilityUnsupportedError({\n      harnessId: JUST_BASH_PROVIDER_ID,\n      message:\n        'just-bash sandboxes run in-process and cannot expose a port URL. ' +\n        'Use a hosted sandbox (e.g. @ai-sdk/sandbox-vercel) for bridge-backed harness adapters.',\n    });\n  };\n\n  /**\n   * @deprecated Use `getPortEndpoint` instead.\n   */\n  getPortUrl = async (options: {\n    port: number;\n    protocol?: 'http' | 'https' | 'ws';\n  }): Promise<string> => {\n    return (await this.getPortEndpoint(options)).url;\n  };\n\n  stop = async (): Promise<void> => {\n    // just-bash has no explicit shutdown; the sandbox is garbage-collected\n    // along with its in-memory filesystem once references drop.\n  };\n\n  destroy = async (): Promise<void> => {\n    await this.stop();\n  };\n}\n","import { isAbsolute, posix } from 'node:path';\nimport {\n  extractLines,\n  type Experimental_SandboxSession,\n  type Experimental_SandboxProcess,\n} from '@ai-sdk/provider-utils';\nimport type { Sandbox, SandboxCommand } from 'just-bash';\n\n/**\n * `Experimental_SandboxSession` implementation backed by a `just-bash`\n * `Sandbox`. File operations and spawned processes share the same in-memory\n * filesystem, so a bridge process spawned via `spawn` can read files the host\n * wrote via `writeTextFile` (and vice versa).\n *\n * This is the tool-safe surface returned by\n * `JustBashNetworkSandboxSession.restricted()` — not constructed directly by\n * consumers.\n */\nexport class JustBashSandboxSession implements Experimental_SandboxSession {\n  constructor(protected readonly sandbox: Sandbox) {}\n\n  get description(): string {\n    return [\n      'just-bash JavaScript bash environment with a virtual filesystem.',\n      'Filesystem changes and spawned processes share the same in-memory state.',\n      `Current working directory: ${this.sandbox.bashEnvInstance.getCwd()}`,\n    ].join('\\n');\n  }\n\n  private resolvePath(path: string): string {\n    return isAbsolute(path)\n      ? path\n      : posix.join(this.sandbox.bashEnvInstance.getCwd(), path);\n  }\n\n  async run({\n    command,\n    workingDirectory,\n    env,\n    abortSignal,\n  }: {\n    command: string;\n    workingDirectory?: string;\n    env?: Record<string, string>;\n    abortSignal?: AbortSignal;\n  }): Promise<{ exitCode: number; stdout: string; stderr: string }> {\n    abortSignal?.throwIfAborted();\n\n    const finished = await this.sandbox.runCommand({\n      cmd: 'bash',\n      args: createBashArgs(command, env),\n      ...(workingDirectory !== undefined ? { cwd: workingDirectory } : {}),\n      ...(abortSignal !== undefined ? { signal: abortSignal } : {}),\n    });\n\n    const [stdout, stderr] = await Promise.all([\n      finished.stdout(),\n      finished.stderr(),\n    ]);\n\n    return {\n      exitCode: finished.exitCode,\n      stdout,\n      stderr,\n    };\n  }\n\n  async spawn({\n    command,\n    workingDirectory,\n    env,\n    abortSignal,\n  }: {\n    command: string;\n    workingDirectory?: string;\n    env?: Record<string, string>;\n    abortSignal?: AbortSignal;\n  }): Promise<Experimental_SandboxProcess> {\n    abortSignal?.throwIfAborted();\n\n    const live = await this.sandbox.runCommand({\n      cmd: 'bash',\n      args: createBashArgs(command, env),\n      detached: true,\n      ...(workingDirectory !== undefined ? { cwd: workingDirectory } : {}),\n      ...(abortSignal !== undefined ? { signal: abortSignal } : {}),\n    });\n\n    return createSandboxProcess(live, abortSignal);\n  }\n\n  async readFile({\n    path,\n    abortSignal,\n  }: {\n    path: string;\n    abortSignal?: AbortSignal;\n  }): Promise<ReadableStream<Uint8Array> | null> {\n    const bytes = await this.readBinaryFile({ path, abortSignal });\n    if (bytes == null) return null;\n    return bytesToStream(bytes);\n  }\n\n  async readBinaryFile({\n    path,\n    abortSignal,\n  }: {\n    path: string;\n    abortSignal?: AbortSignal;\n  }): Promise<Uint8Array | null> {\n    abortSignal?.throwIfAborted();\n    const resolved = this.resolvePath(path);\n    try {\n      const bytes =\n        await this.sandbox.bashEnvInstance.fs.readFileBuffer(resolved);\n      return bytes instanceof Uint8Array ? bytes : new Uint8Array(bytes);\n    } catch (error) {\n      if (isFileNotFoundError(error)) return null;\n      throw error;\n    }\n  }\n\n  async readTextFile({\n    path,\n    encoding = 'utf-8',\n    startLine,\n    endLine,\n    abortSignal,\n  }: {\n    path: string;\n    encoding?: string;\n    startLine?: number;\n    endLine?: number;\n    abortSignal?: AbortSignal;\n  }): Promise<string | null> {\n    const bytes = await this.readBinaryFile({ path, abortSignal });\n    if (bytes == null) return null;\n    const text = Buffer.from(bytes).toString(encoding as BufferEncoding);\n    return extractLines({ text, startLine, endLine });\n  }\n\n  async writeFile({\n    path,\n    content,\n    abortSignal,\n  }: {\n    path: string;\n    content: ReadableStream<Uint8Array>;\n    abortSignal?: AbortSignal;\n  }): Promise<void> {\n    const bytes = await collectStream(content);\n    await this.writeBinaryFile({ path, content: bytes, abortSignal });\n  }\n\n  async writeBinaryFile({\n    path,\n    content,\n    abortSignal,\n  }: {\n    path: string;\n    content: Uint8Array;\n    abortSignal?: AbortSignal;\n  }): Promise<void> {\n    abortSignal?.throwIfAborted();\n    const resolved = this.resolvePath(path);\n    await this.sandbox.bashEnvInstance.fs.writeFile(resolved, content);\n  }\n\n  async writeTextFile({\n    path,\n    content,\n    encoding = 'utf-8',\n    abortSignal,\n  }: {\n    path: string;\n    content: string;\n    encoding?: string;\n    abortSignal?: AbortSignal;\n  }): Promise<void> {\n    const buffer = Buffer.from(content, encoding as BufferEncoding);\n    await this.writeBinaryFile({\n      path,\n      content: new Uint8Array(\n        buffer.buffer,\n        buffer.byteOffset,\n        buffer.byteLength,\n      ),\n      abortSignal,\n    });\n  }\n}\n\nfunction createBashArgs(\n  command: string,\n  env: Record<string, string> | undefined,\n): string[] {\n  // just-bash applies runCommand's env to the outer execution, but its `bash`\n  // command only inherits exported variables. Export assignments passed as\n  // positional arguments so values are not interpolated into the script.\n  const assignments =\n    env == null\n      ? []\n      : Object.entries(env).map(([name, value]) => `${name}=${value}`);\n\n  if (assignments.length === 0) {\n    return ['-c', command];\n  }\n\n  return [\n    '-c',\n    `${assignments.map(() => 'export -- \"$1\"; shift').join('\\n')}\\n${command}`,\n    'bash',\n    ...assignments,\n  ];\n}\n\nfunction createSandboxProcess(\n  command: SandboxCommand,\n  abortSignal: AbortSignal | undefined,\n): Experimental_SandboxProcess {\n  const encoder = new TextEncoder();\n  const controllers: {\n    stdout?: ReadableStreamDefaultController<Uint8Array>;\n    stderr?: ReadableStreamDefaultController<Uint8Array>;\n  } = {};\n\n  const stdout = new ReadableStream<Uint8Array>({\n    start(controller) {\n      controllers.stdout = controller;\n    },\n  });\n\n  const stderr = new ReadableStream<Uint8Array>({\n    start(controller) {\n      controllers.stderr = controller;\n    },\n  });\n\n  const drained = (async () => {\n    try {\n      for await (const message of command.logs()) {\n        const target =\n          message.type === 'stdout' ? controllers.stdout : controllers.stderr;\n        target?.enqueue(encoder.encode(message.data));\n      }\n      controllers.stdout?.close();\n      controllers.stderr?.close();\n    } catch (error) {\n      controllers.stdout?.error(error);\n      controllers.stderr?.error(error);\n    }\n  })();\n\n  return {\n    stdout,\n    stderr,\n    async wait(): Promise<{ exitCode: number }> {\n      const finished = await command.wait();\n      await drained;\n      if (abortSignal?.aborted) {\n        throw abortSignal.reason ?? new DOMException('Aborted', 'AbortError');\n      }\n      return { exitCode: finished.exitCode };\n    },\n    async kill(): Promise<void> {\n      await command.kill();\n    },\n  };\n}\n\nfunction bytesToStream(bytes: Uint8Array): ReadableStream<Uint8Array> {\n  return new ReadableStream<Uint8Array>({\n    start(controller) {\n      controller.enqueue(bytes);\n      controller.close();\n    },\n  });\n}\n\nasync function collectStream(\n  stream: ReadableStream<Uint8Array>,\n): Promise<Uint8Array> {\n  const reader = stream.getReader();\n  const chunks: Uint8Array[] = [];\n  let total = 0;\n  while (true) {\n    const { value, done } = await reader.read();\n    if (done) break;\n    if (value) {\n      chunks.push(value);\n      total += value.byteLength;\n    }\n  }\n  const out = new Uint8Array(total);\n  let offset = 0;\n  for (const chunk of chunks) {\n    out.set(chunk, offset);\n    offset += chunk.byteLength;\n  }\n  return out;\n}\n\nfunction isFileNotFoundError(error: unknown): boolean {\n  if (error == null || typeof error !== 'object') return false;\n  const code = (error as { code?: unknown }).code;\n  if (code === 'ENOENT') return true;\n  const message = (error as { message?: unknown }).message;\n  return (\n    typeof message === 'string' &&\n    /no such file|not found|does not exist|ENOENT/i.test(message)\n  );\n}\n"],"mappings":";AAKA,SAAS,eAAe;;;ACLxB;AAAA,EACE;AAAA,OAGK;AAEP,SAAS,kBAAkB;;;ACN3B,SAAS,YAAY,aAAa;AAClC;AAAA,EACE;AAAA,OAGK;AAaA,IAAM,yBAAN,MAAoE;AAAA,EACzE,YAA+B,SAAkB;AAAlB;AAAA,EAAmB;AAAA,EAElD,IAAI,cAAsB;AACxB,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,8BAA8B,KAAK,QAAQ,gBAAgB,OAAO,CAAC;AAAA,IACrE,EAAE,KAAK,IAAI;AAAA,EACb;AAAA,EAEQ,YAAY,MAAsB;AACxC,WAAO,WAAW,IAAI,IAClB,OACA,MAAM,KAAK,KAAK,QAAQ,gBAAgB,OAAO,GAAG,IAAI;AAAA,EAC5D;AAAA,EAEA,MAAM,IAAI;AAAA,IACR;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAKkE;AAChE,+CAAa;AAEb,UAAM,WAAW,MAAM,KAAK,QAAQ,WAAW;AAAA,MAC7C,KAAK;AAAA,MACL,MAAM,eAAe,SAAS,GAAG;AAAA,MACjC,GAAI,qBAAqB,SAAY,EAAE,KAAK,iBAAiB,IAAI,CAAC;AAAA,MAClE,GAAI,gBAAgB,SAAY,EAAE,QAAQ,YAAY,IAAI,CAAC;AAAA,IAC7D,CAAC;AAED,UAAM,CAAC,QAAQ,MAAM,IAAI,MAAM,QAAQ,IAAI;AAAA,MACzC,SAAS,OAAO;AAAA,MAChB,SAAS,OAAO;AAAA,IAClB,CAAC;AAED,WAAO;AAAA,MACL,UAAU,SAAS;AAAA,MACnB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,MAAM;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAKyC;AACvC,+CAAa;AAEb,UAAM,OAAO,MAAM,KAAK,QAAQ,WAAW;AAAA,MACzC,KAAK;AAAA,MACL,MAAM,eAAe,SAAS,GAAG;AAAA,MACjC,UAAU;AAAA,MACV,GAAI,qBAAqB,SAAY,EAAE,KAAK,iBAAiB,IAAI,CAAC;AAAA,MAClE,GAAI,gBAAgB,SAAY,EAAE,QAAQ,YAAY,IAAI,CAAC;AAAA,IAC7D,CAAC;AAED,WAAO,qBAAqB,MAAM,WAAW;AAAA,EAC/C;AAAA,EAEA,MAAM,SAAS;AAAA,IACb;AAAA,IACA;AAAA,EACF,GAG+C;AAC7C,UAAM,QAAQ,MAAM,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7D,QAAI,SAAS,KAAM,QAAO;AAC1B,WAAO,cAAc,KAAK;AAAA,EAC5B;AAAA,EAEA,MAAM,eAAe;AAAA,IACnB;AAAA,IACA;AAAA,EACF,GAG+B;AAC7B,+CAAa;AACb,UAAM,WAAW,KAAK,YAAY,IAAI;AACtC,QAAI;AACF,YAAM,QACJ,MAAM,KAAK,QAAQ,gBAAgB,GAAG,eAAe,QAAQ;AAC/D,aAAO,iBAAiB,aAAa,QAAQ,IAAI,WAAW,KAAK;AAAA,IACnE,SAAS,OAAO;AACd,UAAI,oBAAoB,KAAK,EAAG,QAAO;AACvC,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAM,aAAa;AAAA,IACjB;AAAA,IACA,WAAW;AAAA,IACX;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAM2B;AACzB,UAAM,QAAQ,MAAM,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7D,QAAI,SAAS,KAAM,QAAO;AAC1B,UAAM,OAAO,OAAO,KAAK,KAAK,EAAE,SAAS,QAA0B;AACnE,WAAO,aAAa,EAAE,MAAM,WAAW,QAAQ,CAAC;AAAA,EAClD;AAAA,EAEA,MAAM,UAAU;AAAA,IACd;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAIkB;AAChB,UAAM,QAAQ,MAAM,cAAc,OAAO;AACzC,UAAM,KAAK,gBAAgB,EAAE,MAAM,SAAS,OAAO,YAAY,CAAC;AAAA,EAClE;AAAA,EAEA,MAAM,gBAAgB;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAIkB;AAChB,+CAAa;AACb,UAAM,WAAW,KAAK,YAAY,IAAI;AACtC,UAAM,KAAK,QAAQ,gBAAgB,GAAG,UAAU,UAAU,OAAO;AAAA,EACnE;AAAA,EAEA,MAAM,cAAc;AAAA,IAClB;AAAA,IACA;AAAA,IACA,WAAW;AAAA,IACX;AAAA,EACF,GAKkB;AAChB,UAAM,SAAS,OAAO,KAAK,SAAS,QAA0B;AAC9D,UAAM,KAAK,gBAAgB;AAAA,MACzB;AAAA,MACA,SAAS,IAAI;AAAA,QACX,OAAO;AAAA,QACP,OAAO;AAAA,QACP,OAAO;AAAA,MACT;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAEA,SAAS,eACP,SACA,KACU;AAIV,QAAM,cACJ,OAAO,OACH,CAAC,IACD,OAAO,QAAQ,GAAG,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,GAAG,IAAI,IAAI,KAAK,EAAE;AAEnE,MAAI,YAAY,WAAW,GAAG;AAC5B,WAAO,CAAC,MAAM,OAAO;AAAA,EACvB;AAEA,SAAO;AAAA,IACL;AAAA,IACA,GAAG,YAAY,IAAI,MAAM,uBAAuB,EAAE,KAAK,IAAI,CAAC;AAAA,EAAK,OAAO;AAAA,IACxE;AAAA,IACA,GAAG;AAAA,EACL;AACF;AAEA,SAAS,qBACP,SACA,aAC6B;AAC7B,QAAM,UAAU,IAAI,YAAY;AAChC,QAAM,cAGF,CAAC;AAEL,QAAM,SAAS,IAAI,eAA2B;AAAA,IAC5C,MAAM,YAAY;AAChB,kBAAY,SAAS;AAAA,IACvB;AAAA,EACF,CAAC;AAED,QAAM,SAAS,IAAI,eAA2B;AAAA,IAC5C,MAAM,YAAY;AAChB,kBAAY,SAAS;AAAA,IACvB;AAAA,EACF,CAAC;AAED,QAAM,WAAW,YAAY;AA9O/B;AA+OI,QAAI;AACF,uBAAiB,WAAW,QAAQ,KAAK,GAAG;AAC1C,cAAM,SACJ,QAAQ,SAAS,WAAW,YAAY,SAAS,YAAY;AAC/D,yCAAQ,QAAQ,QAAQ,OAAO,QAAQ,IAAI;AAAA,MAC7C;AACA,wBAAY,WAAZ,mBAAoB;AACpB,wBAAY,WAAZ,mBAAoB;AAAA,IACtB,SAAS,OAAO;AACd,wBAAY,WAAZ,mBAAoB,MAAM;AAC1B,wBAAY,WAAZ,mBAAoB,MAAM;AAAA,IAC5B;AAAA,EACF,GAAG;AAEH,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,MAAM,OAAsC;AAhQhD;AAiQM,YAAM,WAAW,MAAM,QAAQ,KAAK;AACpC,YAAM;AACN,UAAI,2CAAa,SAAS;AACxB,eAAM,iBAAY,WAAZ,YAAsB,IAAI,aAAa,WAAW,YAAY;AAAA,MACtE;AACA,aAAO,EAAE,UAAU,SAAS,SAAS;AAAA,IACvC;AAAA,IACA,MAAM,OAAsB;AAC1B,YAAM,QAAQ,KAAK;AAAA,IACrB;AAAA,EACF;AACF;AAEA,SAAS,cAAc,OAA+C;AACpE,SAAO,IAAI,eAA2B;AAAA,IACpC,MAAM,YAAY;AAChB,iBAAW,QAAQ,KAAK;AACxB,iBAAW,MAAM;AAAA,IACnB;AAAA,EACF,CAAC;AACH;AAEA,eAAe,cACb,QACqB;AACrB,QAAM,SAAS,OAAO,UAAU;AAChC,QAAM,SAAuB,CAAC;AAC9B,MAAI,QAAQ;AACZ,SAAO,MAAM;AACX,UAAM,EAAE,OAAO,KAAK,IAAI,MAAM,OAAO,KAAK;AAC1C,QAAI,KAAM;AACV,QAAI,OAAO;AACT,aAAO,KAAK,KAAK;AACjB,eAAS,MAAM;AAAA,IACjB;AAAA,EACF;AACA,QAAM,MAAM,IAAI,WAAW,KAAK;AAChC,MAAI,SAAS;AACb,aAAW,SAAS,QAAQ;AAC1B,QAAI,IAAI,OAAO,MAAM;AACrB,cAAU,MAAM;AAAA,EAClB;AACA,SAAO;AACT;AAEA,SAAS,oBAAoB,OAAyB;AACpD,MAAI,SAAS,QAAQ,OAAO,UAAU,SAAU,QAAO;AACvD,QAAM,OAAQ,MAA6B;AAC3C,MAAI,SAAS,SAAU,QAAO;AAC9B,QAAM,UAAW,MAAgC;AACjD,SACE,OAAO,YAAY,YACnB,gDAAgD,KAAK,OAAO;AAEhE;;;AD7SA,IAAM,wBAAwB;AAavB,IAAM,gCAAN,cACG,uBAEV;AAAA,EASE,YAAY,OAA6B;AACvC,UAAM,MAAM,OAAO;AAKrB,SAAS,QAA+B,CAAC;AAMzC,2BAAkB,OAAO,aAGa;AACpC,YAAM,IAAI,kCAAkC;AAAA,QAC1C,WAAW;AAAA,QACX,SACE;AAAA,MAEJ,CAAC;AAAA,IACH;AAKA;AAAA;AAAA;AAAA,sBAAa,OAAO,YAGG;AACrB,cAAQ,MAAM,KAAK,gBAAgB,OAAO,GAAG;AAAA,IAC/C;AAEA,gBAAO,YAA2B;AAAA,IAGlC;AAEA,mBAAU,YAA2B;AACnC,YAAM,KAAK,KAAK;AAAA,IAClB;AAvCE,SAAK,KAAK,WAAW;AACrB,SAAK,0BAA0B,MAAM,QAAQ,gBAAgB,OAAO;AAAA,EACtE;AAAA,EAIA,aAA6B;AAC3B,WAAO,IAAI,uBAAuB,KAAK,OAAO;AAAA,EAChD;AAgCF;;;AD5CA,IAAMA,yBAAwB;AAC9B,IAAM,gBAAgB;AACtB,IAAM,kBAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA8CxB,eAAe,eAAe,SAAiC;AAC7D,QAAM,KAAK,QAAQ,gBAAgB;AACnC,MAAI;AACF,UAAM,GAAG,MAAM,aAAa;AAC5B;AAAA,EACF,SAAS,OAAO;AACd,QAAI,CAACC,qBAAoB,KAAK,GAAG;AAC/B,YAAM;AAAA,IACR;AAAA,EACF;AAEA,QAAM,QAAQ,WAAW,EAAE,CAAC,aAAa,GAAG,gBAAgB,CAAC;AAC7D,QAAM,GAAG,MAAM,eAAe,GAAK;AACrC;AAEA,SAASA,qBAAoB,OAAyB;AACpD,MAAI,SAAS,QAAQ,OAAO,UAAU,SAAU,QAAO;AACvD,QAAM,OAAQ,MAA6B;AAC3C,MAAI,SAAS,SAAU,QAAO;AAC9B,QAAM,UAAW,MAAgC;AACjD,SACE,OAAO,YAAY,YACnB,iCAAiC,KAAK,OAAO;AAEjD;AAEO,SAAS,sBACd,WAAoC,CAAC,GACX;AAC1B,SAAO,IAAI,wBAAwB,QAAQ;AAC7C;AAWO,IAAM,0BAAN,MAAkE;AAAA,EAIvE,YAA6B,UAAmC;AAAnC;AAH7B,SAAS,uBAAuB;AAChC,SAAS,aAAaD;AAItB,yBAAgB,OAAO,YAQwB;AAxIjD;AAyII,+CAAS,gBAAT,mBAAsB;AAEtB,YAAM,gBAAgB,EACpB,aAAa,KAAK,YAAY,KAAK,SAAS;AAE9C,YAAM,UAAU,gBACZ,MAAM,QAAQ,OAAO,KAAK,QAAuC,IACjE,KAAK,SAAS;AAClB,YAAM,eAAe,OAAO;AAC5B,YAAM,iBAAiB,IAAI,8BAA8B;AAAA,QACvD;AAAA,MACF,CAAC;AAED,WAAI,mCAAS,kBAAiB,MAAM;AAClC,cAAM,QAAQ,cAAc,eAAe,WAAW,GAAG;AAAA,UACvD,aAAa,mCAAS;AAAA,QACxB,CAAC;AAAA,MACH;AAEA,aAAO;AAAA,IACT;AAAA,EA/BiE;AAgCnE;","names":["JUST_BASH_PROVIDER_ID","isFileNotFoundError"]}
+{"version":3,"sources":["../src/just-bash-legacy-sandbox-provider.ts","../src/just-bash-network-sandbox-session.ts","../src/just-bash-sandbox-session.ts","../src/utils.ts","../src/just-bash-sandbox.ts"],"sourcesContent":["import type {\n  HarnessV1NetworkSandboxSession,\n  HarnessV1SandboxProvider,\n} from '@ai-sdk/harness';\nimport type { Experimental_SandboxSession as SandboxSession } from '@ai-sdk/provider-utils';\nimport { Sandbox } from 'just-bash';\nimport { JustBashNetworkSandboxSession } from './just-bash-network-sandbox-session';\nimport { ensureRealpath } from './utils';\n\ntype JustBashSandboxCreateParams = NonNullable<\n  Parameters<typeof Sandbox.create>[0]\n>;\n\ntype JustBashCreationSettings = JustBashSandboxCreateParams & {\n  sandbox?: never;\n};\n\n/**\n * Settings for `createJustBashSandbox`. Two mutually-exclusive shapes:\n *\n * - `{ sandbox }` — wrap an already-created `just-bash` `Sandbox`. The caller\n *   owns its lifecycle.\n * - {@link JustBashSandboxCreateParams} fields — provider calls\n *   `Sandbox.create(settings)` on every `createSession()`.\n *\n * just-bash has no port exposure and no snapshot mechanism, so image\n * management is a per-call no-op: if an adapter declares a bootstrap recipe\n * the provider runs it once on the freshly-created sandbox before returning.\n *\n * @deprecated Use `JustBashNetworkSandboxSessionCreateOptions` for new sessions.\n */\nexport type JustBashSandboxSettings =\n  | { sandbox: Sandbox }\n  | JustBashCreationSettings;\n\nconst JUST_BASH_PROVIDER_ID = 'just-bash-sandbox';\n\n/** @deprecated Use `createJustBashNetworkSandboxSession` instead. */\nexport function createJustBashSandbox(\n  settings: JustBashSandboxSettings = {} as JustBashSandboxSettings,\n): HarnessV1SandboxProvider {\n  console.warn(\n    'createJustBashSandbox is deprecated. Use createJustBashNetworkSandboxSession and HarnessAgent.createSession({ sandboxSession }) instead.',\n  );\n  return new JustBashSandboxProvider(settings);\n}\n\n/**\n * `HarnessV1SandboxProvider` implementation backed by `just-bash`. Useful for\n * non-bridge harness flows and for handing a local `Experimental_SandboxSession`\n * to AI SDK tools — use `provider.createSession()` then\n * `sandboxSession.restricted()` to get the latter.\n *\n * Note: just-bash cannot expose ports, so bridge-backed harness adapters\n * (claude-code, codex) will reject this provider at start.\n */\n/** @deprecated Use `createJustBashNetworkSandboxSession` instead. */\nexport class JustBashSandboxProvider implements HarnessV1SandboxProvider {\n  readonly specificationVersion = 'harness-sandbox-v1' as const;\n  readonly providerId = JUST_BASH_PROVIDER_ID;\n\n  constructor(private readonly settings: JustBashSandboxSettings) {\n    console.warn(\n      'JustBashSandboxProvider is deprecated. Use createJustBashNetworkSandboxSession instead.',\n    );\n  }\n\n  createSession = async (options?: {\n    sessionId?: string;\n    abortSignal?: AbortSignal;\n    identity?: string;\n    onFirstCreate?: (\n      session: SandboxSession,\n      opts: { abortSignal?: AbortSignal },\n    ) => Promise<void>;\n  }): Promise<HarnessV1NetworkSandboxSession> => {\n    options?.abortSignal?.throwIfAborted();\n\n    const ownsLifecycle = !(\n      'sandbox' in this.settings && this.settings.sandbox\n    );\n    const sandbox = ownsLifecycle\n      ? await Sandbox.create(\n          this.settings as NonNullable<Parameters<typeof Sandbox.create>[0]>,\n        )\n      : this.settings.sandbox;\n    await ensureRealpath(sandbox);\n    const sandboxSession = new JustBashNetworkSandboxSession({\n      sandbox,\n    });\n\n    if (options?.onFirstCreate != null) {\n      await options.onFirstCreate(sandboxSession.restricted(), {\n        abortSignal: options?.abortSignal,\n      });\n    }\n\n    return sandboxSession;\n  };\n}\n","import {\n  HarnessCapabilityUnsupportedError,\n  type HarnessV1NetworkSandboxSession,\n  type HarnessV1PortEndpoint,\n} from '@ai-sdk/harness';\nimport type { Experimental_SandboxSession as SandboxSession } from '@ai-sdk/provider-utils';\nimport { randomUUID } from 'node:crypto';\nimport type { Sandbox } from 'just-bash';\nimport { JustBashSandboxSession } from './just-bash-sandbox-session';\n\nconst JUST_BASH_PROVIDER_ID = 'just-bash-sandbox';\n\n/**\n * `HarnessV1NetworkSandboxSession` backed by a `just-bash` `Sandbox`. It extends\n * {@link JustBashSandboxSession} with the infra surface. Exposes no ports —\n * there is no network namespace and no way to publish an HTTP endpoint\n * reachable from outside the host process. Bridge-backed harness adapters that\n * need `getPortEndpoint` will fail with `HarnessCapabilityUnsupportedError` at\n * start.\n *\n * Network policy is not implementable locally either — `setNetworkPolicy` is\n * omitted.\n */\nexport class JustBashNetworkSandboxSession\n  extends JustBashSandboxSession\n  implements HarnessV1NetworkSandboxSession\n{\n  /**\n   * Caller-supplied label or a UUID minted at construct time. just-bash has\n   * no native identifier and cannot reattach across processes.\n   */\n  readonly id: string;\n  readonly defaultWorkingDirectory: string;\n\n  constructor(input: { sandbox: Sandbox; sandboxId?: string }) {\n    super(input.sandbox);\n    this.id = input.sandboxId ?? randomUUID();\n    this.defaultWorkingDirectory = input.sandbox.bashEnvInstance.getCwd();\n  }\n\n  readonly ports: ReadonlyArray<number> = [];\n\n  restricted(): SandboxSession {\n    return new JustBashSandboxSession(this.sandbox);\n  }\n\n  getPortEndpoint = async (_options: {\n    port: number;\n    protocol?: 'http' | 'https' | 'ws';\n  }): Promise<HarnessV1PortEndpoint> => {\n    throw new HarnessCapabilityUnsupportedError({\n      harnessId: JUST_BASH_PROVIDER_ID,\n      message:\n        'just-bash sandboxes run in-process and cannot expose a port URL. ' +\n        'Use a hosted sandbox (e.g. @ai-sdk/sandbox-vercel) for bridge-backed harness adapters.',\n    });\n  };\n\n  /**\n   * @deprecated Use `getPortEndpoint` instead.\n   */\n  getPortUrl = async (options: {\n    port: number;\n    protocol?: 'http' | 'https' | 'ws';\n  }): Promise<string> => {\n    return (await this.getPortEndpoint(options)).url;\n  };\n\n  stop = async (): Promise<void> => {\n    // just-bash has no explicit shutdown; the sandbox is garbage-collected\n    // along with its in-memory filesystem once references drop.\n    await this.sandbox.stop();\n  };\n\n  destroy = async (): Promise<void> => {\n    await this.stop();\n  };\n}\n","import { isAbsolute, posix } from 'node:path';\nimport {\n  extractLines,\n  type Experimental_SandboxSession as SandboxSession,\n  type Experimental_SandboxProcess as SandboxProcess,\n} from '@ai-sdk/provider-utils';\nimport type { Sandbox, SandboxCommand } from 'just-bash';\nimport { ensureRealpath } from './utils';\n\n/**\n * `Experimental_SandboxSession` implementation backed by a `just-bash`\n * `Sandbox`. File operations and spawned processes share the same in-memory\n * filesystem, so a bridge process spawned via `spawn` can read files the host\n * wrote via `writeTextFile` (and vice versa).\n *\n * This is the tool-safe surface returned by\n * `JustBashNetworkSandboxSession.restricted()` — not constructed directly by\n * consumers.\n */\nexport class JustBashSandboxSession implements SandboxSession {\n  constructor(protected readonly sandbox: Sandbox) {}\n\n  get description(): string {\n    return [\n      'just-bash JavaScript bash environment with a virtual filesystem.',\n      'Filesystem changes and spawned processes share the same in-memory state.',\n      `Current working directory: ${this.sandbox.bashEnvInstance.getCwd()}`,\n    ].join('\\n');\n  }\n\n  private resolvePath(path: string): string {\n    return isAbsolute(path)\n      ? path\n      : posix.join(this.sandbox.bashEnvInstance.getCwd(), path);\n  }\n\n  async run({\n    command,\n    workingDirectory,\n    env,\n    abortSignal,\n  }: {\n    command: string;\n    workingDirectory?: string;\n    env?: Record<string, string>;\n    abortSignal?: AbortSignal;\n  }): Promise<{ exitCode: number; stdout: string; stderr: string }> {\n    abortSignal?.throwIfAborted();\n    await ensureRealpath(this.sandbox);\n    abortSignal?.throwIfAborted();\n\n    const finished = await this.sandbox.runCommand({\n      cmd: 'bash',\n      args: createBashArgs(command, env),\n      ...(workingDirectory !== undefined ? { cwd: workingDirectory } : {}),\n      ...(abortSignal !== undefined ? { signal: abortSignal } : {}),\n    });\n\n    const [stdout, stderr] = await Promise.all([\n      finished.stdout(),\n      finished.stderr(),\n    ]);\n\n    return {\n      exitCode: finished.exitCode,\n      stdout,\n      stderr,\n    };\n  }\n\n  async spawn({\n    command,\n    workingDirectory,\n    env,\n    abortSignal,\n  }: {\n    command: string;\n    workingDirectory?: string;\n    env?: Record<string, string>;\n    abortSignal?: AbortSignal;\n  }): Promise<SandboxProcess> {\n    abortSignal?.throwIfAborted();\n    await ensureRealpath(this.sandbox);\n    abortSignal?.throwIfAborted();\n\n    const live = await this.sandbox.runCommand({\n      cmd: 'bash',\n      args: createBashArgs(command, env),\n      detached: true,\n      ...(workingDirectory !== undefined ? { cwd: workingDirectory } : {}),\n      ...(abortSignal !== undefined ? { signal: abortSignal } : {}),\n    });\n\n    return createSandboxProcess(live, abortSignal);\n  }\n\n  async readFile({\n    path,\n    abortSignal,\n  }: {\n    path: string;\n    abortSignal?: AbortSignal;\n  }): Promise<ReadableStream<Uint8Array> | null> {\n    const bytes = await this.readBinaryFile({ path, abortSignal });\n    if (bytes == null) return null;\n    return bytesToStream(bytes);\n  }\n\n  async readBinaryFile({\n    path,\n    abortSignal,\n  }: {\n    path: string;\n    abortSignal?: AbortSignal;\n  }): Promise<Uint8Array | null> {\n    abortSignal?.throwIfAborted();\n    const resolved = this.resolvePath(path);\n    try {\n      const bytes =\n        await this.sandbox.bashEnvInstance.fs.readFileBuffer(resolved);\n      return bytes instanceof Uint8Array ? bytes : new Uint8Array(bytes);\n    } catch (error) {\n      if (isFileNotFoundError(error)) return null;\n      throw error;\n    }\n  }\n\n  async readTextFile({\n    path,\n    encoding = 'utf-8',\n    startLine,\n    endLine,\n    abortSignal,\n  }: {\n    path: string;\n    encoding?: string;\n    startLine?: number;\n    endLine?: number;\n    abortSignal?: AbortSignal;\n  }): Promise<string | null> {\n    const bytes = await this.readBinaryFile({ path, abortSignal });\n    if (bytes == null) return null;\n    const text = Buffer.from(bytes).toString(encoding as BufferEncoding);\n    return extractLines({ text, startLine, endLine });\n  }\n\n  async writeFile({\n    path,\n    content,\n    abortSignal,\n  }: {\n    path: string;\n    content: ReadableStream<Uint8Array>;\n    abortSignal?: AbortSignal;\n  }): Promise<void> {\n    const bytes = await collectStream(content);\n    await this.writeBinaryFile({ path, content: bytes, abortSignal });\n  }\n\n  async writeBinaryFile({\n    path,\n    content,\n    abortSignal,\n  }: {\n    path: string;\n    content: Uint8Array;\n    abortSignal?: AbortSignal;\n  }): Promise<void> {\n    abortSignal?.throwIfAborted();\n    const resolved = this.resolvePath(path);\n    await this.sandbox.bashEnvInstance.fs.writeFile(resolved, content);\n  }\n\n  async writeTextFile({\n    path,\n    content,\n    encoding = 'utf-8',\n    abortSignal,\n  }: {\n    path: string;\n    content: string;\n    encoding?: string;\n    abortSignal?: AbortSignal;\n  }): Promise<void> {\n    const buffer = Buffer.from(content, encoding as BufferEncoding);\n    await this.writeBinaryFile({\n      path,\n      content: new Uint8Array(\n        buffer.buffer,\n        buffer.byteOffset,\n        buffer.byteLength,\n      ),\n      abortSignal,\n    });\n  }\n}\n\nfunction createBashArgs(\n  command: string,\n  env: Record<string, string> | undefined,\n): string[] {\n  // just-bash applies runCommand's env to the outer execution, but its `bash`\n  // command only inherits exported variables. Export assignments passed as\n  // positional arguments so values are not interpolated into the script.\n  const assignments =\n    env == null\n      ? []\n      : Object.entries(env).map(([name, value]) => `${name}=${value}`);\n\n  if (assignments.length === 0) {\n    return ['-c', command];\n  }\n\n  return [\n    '-c',\n    `${assignments.map(() => 'export -- \"$1\"; shift').join('\\n')}\\n${command}`,\n    'bash',\n    ...assignments,\n  ];\n}\n\nfunction createSandboxProcess(\n  command: SandboxCommand,\n  abortSignal: AbortSignal | undefined,\n): SandboxProcess {\n  const encoder = new TextEncoder();\n  const controllers: {\n    stdout?: ReadableStreamDefaultController<Uint8Array>;\n    stderr?: ReadableStreamDefaultController<Uint8Array>;\n  } = {};\n\n  const stdout = new ReadableStream<Uint8Array>({\n    start(controller) {\n      controllers.stdout = controller;\n    },\n  });\n\n  const stderr = new ReadableStream<Uint8Array>({\n    start(controller) {\n      controllers.stderr = controller;\n    },\n  });\n\n  const drained = (async () => {\n    try {\n      for await (const message of command.logs()) {\n        const target =\n          message.type === 'stdout' ? controllers.stdout : controllers.stderr;\n        target?.enqueue(encoder.encode(message.data));\n      }\n      controllers.stdout?.close();\n      controllers.stderr?.close();\n    } catch (error) {\n      controllers.stdout?.error(error);\n      controllers.stderr?.error(error);\n    }\n  })();\n\n  return {\n    stdout,\n    stderr,\n    async wait(): Promise<{ exitCode: number }> {\n      const finished = await command.wait();\n      await drained;\n      if (abortSignal?.aborted) {\n        throw abortSignal.reason ?? new DOMException('Aborted', 'AbortError');\n      }\n      return { exitCode: finished.exitCode };\n    },\n    async kill(): Promise<void> {\n      await command.kill();\n    },\n  };\n}\n\nfunction bytesToStream(bytes: Uint8Array): ReadableStream<Uint8Array> {\n  return new ReadableStream<Uint8Array>({\n    start(controller) {\n      controller.enqueue(bytes);\n      controller.close();\n    },\n  });\n}\n\nasync function collectStream(\n  stream: ReadableStream<Uint8Array>,\n): Promise<Uint8Array> {\n  const reader = stream.getReader();\n  const chunks: Uint8Array[] = [];\n  let total = 0;\n  while (true) {\n    const { value, done } = await reader.read();\n    if (done) break;\n    if (value) {\n      chunks.push(value);\n      total += value.byteLength;\n    }\n  }\n  const out = new Uint8Array(total);\n  let offset = 0;\n  for (const chunk of chunks) {\n    out.set(chunk, offset);\n    offset += chunk.byteLength;\n  }\n  return out;\n}\n\nfunction isFileNotFoundError(error: unknown): boolean {\n  if (error == null || typeof error !== 'object') return false;\n  const code = (error as { code?: unknown }).code;\n  if (code === 'ENOENT') return true;\n  const message = (error as { message?: unknown }).message;\n  return (\n    typeof message === 'string' &&\n    /no such file|not found|does not exist|ENOENT/i.test(message)\n  );\n}\n","import { defineCommand, type CommandContext, type Sandbox } from 'just-bash';\n\nconst preparations = new WeakMap<Sandbox, Promise<void>>();\n\nexport async function ensureRealpath(sandbox: Sandbox): Promise<void> {\n  let preparation = preparations.get(sandbox);\n  if (preparation == null) {\n    preparation = prepareRealpath(sandbox);\n    preparations.set(sandbox, preparation);\n  }\n\n  try {\n    await preparation;\n  } catch (error) {\n    if (preparations.get(sandbox) === preparation) {\n      preparations.delete(sandbox);\n    }\n    throw error;\n  }\n}\n\nasync function prepareRealpath(sandbox: Sandbox): Promise<void> {\n  const realpathType = await sandbox.bashEnvInstance.exec('type realpath');\n  if (realpathType.exitCode === 0) {\n    return;\n  }\n\n  sandbox.bashEnvInstance.registerCommand(\n    defineCommand('realpath', executeRealpath),\n  );\n}\n\nasync function executeRealpath(\n  args: string[],\n  context: CommandContext,\n): Promise<{ stdout: string; stderr: string; exitCode: number }> {\n  if (args.length === 0 || args[0] === '') {\n    return {\n      stdout: '',\n      stderr: 'realpath: missing operand\\n',\n      exitCode: 1,\n    };\n  }\n\n  let pending = args[0].startsWith('/') ? args[0] : `${context.cwd}/${args[0]}`;\n  let resolved = '';\n  let linkCount = 0;\n\n  while (pending.length > 0) {\n    pending = pending.replace(/^\\//, '');\n    if (pending.length === 0) {\n      break;\n    }\n\n    const separatorIndex = pending.indexOf('/');\n    const component =\n      separatorIndex === -1 ? pending : pending.slice(0, separatorIndex);\n    pending = separatorIndex === -1 ? '' : pending.slice(separatorIndex + 1);\n\n    if (component === '' || component === '.') {\n      continue;\n    }\n    if (component === '..') {\n      resolved = resolved.slice(0, resolved.lastIndexOf('/'));\n      continue;\n    }\n\n    const candidate = `${resolved}/${component}`;\n    let isSymbolicLink = false;\n    try {\n      isSymbolicLink = (await context.fs.lstat(candidate)).isSymbolicLink;\n    } catch (error) {\n      if (!isFileNotFoundError(error)) {\n        throw error;\n      }\n    }\n\n    if (!isSymbolicLink) {\n      resolved = candidate;\n      continue;\n    }\n\n    linkCount += 1;\n    if (linkCount > 64) {\n      return { stdout: '', stderr: '', exitCode: 1 };\n    }\n\n    let target: string;\n    try {\n      target = await context.fs.readlink(candidate);\n    } catch {\n      return { stdout: '', stderr: '', exitCode: 1 };\n    }\n\n    const remainder = pending.length > 0 ? `/${pending}` : '';\n    pending = target.startsWith('/')\n      ? `${target}${remainder}`\n      : `${candidate.slice(0, candidate.lastIndexOf('/'))}/${target}${remainder}`;\n    resolved = '';\n  }\n\n  return {\n    stdout: `${resolved || '/'}\\n`,\n    stderr: '',\n    exitCode: 0,\n  };\n}\n\nfunction isFileNotFoundError(error: unknown): boolean {\n  if (error == null || typeof error !== 'object') return false;\n  const code = (error as { code?: unknown }).code;\n  if (code === 'ENOENT') return true;\n  const message = (error as { message?: unknown }).message;\n  return (\n    typeof message === 'string' &&\n    /no such file|not found|ENOENT/i.test(message)\n  );\n}\n","import {\n  HarnessCapabilityUnsupportedError,\n  type HarnessV1NetworkSandboxSession,\n  type HarnessV1SandboxSessionCreateOptions,\n  type HarnessV1SandboxSessionResumeOptions,\n} from '@ai-sdk/harness';\nimport type { Experimental_SandboxSession as SandboxSession } from '@ai-sdk/provider-utils';\nimport { Sandbox } from 'just-bash';\nimport { JustBashNetworkSandboxSession } from './just-bash-network-sandbox-session';\nimport { JustBashSandboxSession } from './just-bash-sandbox-session';\nimport { ensureRealpath } from './utils';\n\n/**\n * Flattens an intersection of object types into a single object type so the\n * resolved shape displays as its named properties rather than a chain of\n * `A & B & C`.\n */\ntype Prettify<T> = { [K in keyof T]: T[K] } & {};\n\nexport type JustBashNativeSandboxSession = Sandbox;\n\n/**\n * Parameters forwarded to `just-bash`'s `Sandbox.create` when creating a\n * sandbox from scratch. Aliased directly from the underlying SDK so the full\n * surface is available without us re-declaring it.\n */\ntype JustBashSandboxCreateParams = NonNullable<\n  Parameters<typeof Sandbox.create>[0]\n>;\n\ntype JustBashCreationSettings = Omit<JustBashSandboxCreateParams, 'sandbox'>;\n\nexport type JustBashNetworkSandboxSessionCreateOptions = Prettify<\n  HarnessV1SandboxSessionCreateOptions<JustBashCreationSettings> & {\n    sandbox?: never;\n  }\n>;\n\ntype JustBashLookupSettings = Record<never, never>;\n\nexport type JustBashNetworkSandboxSessionResumeOptions =\n  HarnessV1SandboxSessionResumeOptions<JustBashLookupSettings>;\n\nexport async function createJustBashNetworkSandboxSession(\n  options: JustBashNetworkSandboxSessionCreateOptions = {},\n): Promise<HarnessV1NetworkSandboxSession> {\n  if ('sandbox' in options) {\n    throw new Error(\n      'createJustBashNetworkSandboxSession: use createJustBashNetworkSandboxSessionFromNativeSandbox for an existing sandbox.',\n    );\n  }\n  const {\n    template,\n    abortSignal,\n    sandboxId,\n    sandbox: _sandbox,\n    ...nativeOptions\n  } = options;\n  abortSignal?.throwIfAborted();\n  const nativeSandbox = await Sandbox.create(nativeOptions);\n  try {\n    await ensureRealpath(nativeSandbox);\n    const session = new JustBashNetworkSandboxSession({\n      sandbox: nativeSandbox,\n      sandboxId,\n    });\n    await template?.prepare({ session: session.restricted(), abortSignal });\n    return session;\n  } catch (error) {\n    await nativeSandbox.stop().catch(() => {});\n    throw error;\n  }\n}\n\nexport async function resumeJustBashNetworkSandboxSession(\n  options: JustBashNetworkSandboxSessionResumeOptions,\n): Promise<HarnessV1NetworkSandboxSession> {\n  options.abortSignal?.throwIfAborted();\n  throw new HarnessCapabilityUnsupportedError({\n    message:\n      'just-bash sandboxes run in-process and cannot be resumed by sandboxId.',\n  });\n}\n\nexport function createJustBashSandboxSessionFromNativeSandbox(\n  nativeSandbox: JustBashNativeSandboxSession,\n): SandboxSession {\n  return new JustBashSandboxSession(nativeSandbox);\n}\n\nexport function createJustBashNetworkSandboxSessionFromNativeSandbox(\n  nativeSandbox: JustBashNativeSandboxSession,\n): HarnessV1NetworkSandboxSession {\n  return new JustBashNetworkSandboxSession({ sandbox: nativeSandbox });\n}\n"],"mappings":";AAKA,SAAS,eAAe;;;ACLxB;AAAA,EACE;AAAA,OAGK;AAEP,SAAS,kBAAkB;;;ACN3B,SAAS,YAAY,aAAa;AAClC;AAAA,EACE;AAAA,OAGK;;;ACLP,SAAS,qBAAwD;AAEjE,IAAM,eAAe,oBAAI,QAAgC;AAEzD,eAAsB,eAAe,SAAiC;AACpE,MAAI,cAAc,aAAa,IAAI,OAAO;AAC1C,MAAI,eAAe,MAAM;AACvB,kBAAc,gBAAgB,OAAO;AACrC,iBAAa,IAAI,SAAS,WAAW;AAAA,EACvC;AAEA,MAAI;AACF,UAAM;AAAA,EACR,SAAS,OAAO;AACd,QAAI,aAAa,IAAI,OAAO,MAAM,aAAa;AAC7C,mBAAa,OAAO,OAAO;AAAA,IAC7B;AACA,UAAM;AAAA,EACR;AACF;AAEA,eAAe,gBAAgB,SAAiC;AAC9D,QAAM,eAAe,MAAM,QAAQ,gBAAgB,KAAK,eAAe;AACvE,MAAI,aAAa,aAAa,GAAG;AAC/B;AAAA,EACF;AAEA,UAAQ,gBAAgB;AAAA,IACtB,cAAc,YAAY,eAAe;AAAA,EAC3C;AACF;AAEA,eAAe,gBACb,MACA,SAC+D;AAC/D,MAAI,KAAK,WAAW,KAAK,KAAK,CAAC,MAAM,IAAI;AACvC,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,UAAU;AAAA,IACZ;AAAA,EACF;AAEA,MAAI,UAAU,KAAK,CAAC,EAAE,WAAW,GAAG,IAAI,KAAK,CAAC,IAAI,GAAG,QAAQ,GAAG,IAAI,KAAK,CAAC,CAAC;AAC3E,MAAI,WAAW;AACf,MAAI,YAAY;AAEhB,SAAO,QAAQ,SAAS,GAAG;AACzB,cAAU,QAAQ,QAAQ,OAAO,EAAE;AACnC,QAAI,QAAQ,WAAW,GAAG;AACxB;AAAA,IACF;AAEA,UAAM,iBAAiB,QAAQ,QAAQ,GAAG;AAC1C,UAAM,YACJ,mBAAmB,KAAK,UAAU,QAAQ,MAAM,GAAG,cAAc;AACnE,cAAU,mBAAmB,KAAK,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAEvE,QAAI,cAAc,MAAM,cAAc,KAAK;AACzC;AAAA,IACF;AACA,QAAI,cAAc,MAAM;AACtB,iBAAW,SAAS,MAAM,GAAG,SAAS,YAAY,GAAG,CAAC;AACtD;AAAA,IACF;AAEA,UAAM,YAAY,GAAG,QAAQ,IAAI,SAAS;AAC1C,QAAI,iBAAiB;AACrB,QAAI;AACF,wBAAkB,MAAM,QAAQ,GAAG,MAAM,SAAS,GAAG;AAAA,IACvD,SAAS,OAAO;AACd,UAAI,CAAC,oBAAoB,KAAK,GAAG;AAC/B,cAAM;AAAA,MACR;AAAA,IACF;AAEA,QAAI,CAAC,gBAAgB;AACnB,iBAAW;AACX;AAAA,IACF;AAEA,iBAAa;AACb,QAAI,YAAY,IAAI;AAClB,aAAO,EAAE,QAAQ,IAAI,QAAQ,IAAI,UAAU,EAAE;AAAA,IAC/C;AAEA,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,QAAQ,GAAG,SAAS,SAAS;AAAA,IAC9C,QAAQ;AACN,aAAO,EAAE,QAAQ,IAAI,QAAQ,IAAI,UAAU,EAAE;AAAA,IAC/C;AAEA,UAAM,YAAY,QAAQ,SAAS,IAAI,IAAI,OAAO,KAAK;AACvD,cAAU,OAAO,WAAW,GAAG,IAC3B,GAAG,MAAM,GAAG,SAAS,KACrB,GAAG,UAAU,MAAM,GAAG,UAAU,YAAY,GAAG,CAAC,CAAC,IAAI,MAAM,GAAG,SAAS;AAC3E,eAAW;AAAA,EACb;AAEA,SAAO;AAAA,IACL,QAAQ,GAAG,YAAY,GAAG;AAAA;AAAA,IAC1B,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ;AACF;AAEA,SAAS,oBAAoB,OAAyB;AACpD,MAAI,SAAS,QAAQ,OAAO,UAAU,SAAU,QAAO;AACvD,QAAM,OAAQ,MAA6B;AAC3C,MAAI,SAAS,SAAU,QAAO;AAC9B,QAAM,UAAW,MAAgC;AACjD,SACE,OAAO,YAAY,YACnB,iCAAiC,KAAK,OAAO;AAEjD;;;ADlGO,IAAM,yBAAN,MAAuD;AAAA,EAC5D,YAA+B,SAAkB;AAAlB;AAAA,EAAmB;AAAA,EAElD,IAAI,cAAsB;AACxB,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,8BAA8B,KAAK,QAAQ,gBAAgB,OAAO,CAAC;AAAA,IACrE,EAAE,KAAK,IAAI;AAAA,EACb;AAAA,EAEQ,YAAY,MAAsB;AACxC,WAAO,WAAW,IAAI,IAClB,OACA,MAAM,KAAK,KAAK,QAAQ,gBAAgB,OAAO,GAAG,IAAI;AAAA,EAC5D;AAAA,EAEA,MAAM,IAAI;AAAA,IACR;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAKkE;AAChE,iBAAa,eAAe;AAC5B,UAAM,eAAe,KAAK,OAAO;AACjC,iBAAa,eAAe;AAE5B,UAAM,WAAW,MAAM,KAAK,QAAQ,WAAW;AAAA,MAC7C,KAAK;AAAA,MACL,MAAM,eAAe,SAAS,GAAG;AAAA,MACjC,GAAI,qBAAqB,SAAY,EAAE,KAAK,iBAAiB,IAAI,CAAC;AAAA,MAClE,GAAI,gBAAgB,SAAY,EAAE,QAAQ,YAAY,IAAI,CAAC;AAAA,IAC7D,CAAC;AAED,UAAM,CAAC,QAAQ,MAAM,IAAI,MAAM,QAAQ,IAAI;AAAA,MACzC,SAAS,OAAO;AAAA,MAChB,SAAS,OAAO;AAAA,IAClB,CAAC;AAED,WAAO;AAAA,MACL,UAAU,SAAS;AAAA,MACnB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,MAAM;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAK4B;AAC1B,iBAAa,eAAe;AAC5B,UAAM,eAAe,KAAK,OAAO;AACjC,iBAAa,eAAe;AAE5B,UAAM,OAAO,MAAM,KAAK,QAAQ,WAAW;AAAA,MACzC,KAAK;AAAA,MACL,MAAM,eAAe,SAAS,GAAG;AAAA,MACjC,UAAU;AAAA,MACV,GAAI,qBAAqB,SAAY,EAAE,KAAK,iBAAiB,IAAI,CAAC;AAAA,MAClE,GAAI,gBAAgB,SAAY,EAAE,QAAQ,YAAY,IAAI,CAAC;AAAA,IAC7D,CAAC;AAED,WAAO,qBAAqB,MAAM,WAAW;AAAA,EAC/C;AAAA,EAEA,MAAM,SAAS;AAAA,IACb;AAAA,IACA;AAAA,EACF,GAG+C;AAC7C,UAAM,QAAQ,MAAM,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7D,QAAI,SAAS,KAAM,QAAO;AAC1B,WAAO,cAAc,KAAK;AAAA,EAC5B;AAAA,EAEA,MAAM,eAAe;AAAA,IACnB;AAAA,IACA;AAAA,EACF,GAG+B;AAC7B,iBAAa,eAAe;AAC5B,UAAM,WAAW,KAAK,YAAY,IAAI;AACtC,QAAI;AACF,YAAM,QACJ,MAAM,KAAK,QAAQ,gBAAgB,GAAG,eAAe,QAAQ;AAC/D,aAAO,iBAAiB,aAAa,QAAQ,IAAI,WAAW,KAAK;AAAA,IACnE,SAAS,OAAO;AACd,UAAIA,qBAAoB,KAAK,EAAG,QAAO;AACvC,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAM,aAAa;AAAA,IACjB;AAAA,IACA,WAAW;AAAA,IACX;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAM2B;AACzB,UAAM,QAAQ,MAAM,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7D,QAAI,SAAS,KAAM,QAAO;AAC1B,UAAM,OAAO,OAAO,KAAK,KAAK,EAAE,SAAS,QAA0B;AACnE,WAAO,aAAa,EAAE,MAAM,WAAW,QAAQ,CAAC;AAAA,EAClD;AAAA,EAEA,MAAM,UAAU;AAAA,IACd;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAIkB;AAChB,UAAM,QAAQ,MAAM,cAAc,OAAO;AACzC,UAAM,KAAK,gBAAgB,EAAE,MAAM,SAAS,OAAO,YAAY,CAAC;AAAA,EAClE;AAAA,EAEA,MAAM,gBAAgB;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAIkB;AAChB,iBAAa,eAAe;AAC5B,UAAM,WAAW,KAAK,YAAY,IAAI;AACtC,UAAM,KAAK,QAAQ,gBAAgB,GAAG,UAAU,UAAU,OAAO;AAAA,EACnE;AAAA,EAEA,MAAM,cAAc;AAAA,IAClB;AAAA,IACA;AAAA,IACA,WAAW;AAAA,IACX;AAAA,EACF,GAKkB;AAChB,UAAM,SAAS,OAAO,KAAK,SAAS,QAA0B;AAC9D,UAAM,KAAK,gBAAgB;AAAA,MACzB;AAAA,MACA,SAAS,IAAI;AAAA,QACX,OAAO;AAAA,QACP,OAAO;AAAA,QACP,OAAO;AAAA,MACT;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAEA,SAAS,eACP,SACA,KACU;AAIV,QAAM,cACJ,OAAO,OACH,CAAC,IACD,OAAO,QAAQ,GAAG,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,GAAG,IAAI,IAAI,KAAK,EAAE;AAEnE,MAAI,YAAY,WAAW,GAAG;AAC5B,WAAO,CAAC,MAAM,OAAO;AAAA,EACvB;AAEA,SAAO;AAAA,IACL;AAAA,IACA,GAAG,YAAY,IAAI,MAAM,uBAAuB,EAAE,KAAK,IAAI,CAAC;AAAA,EAAK,OAAO;AAAA,IACxE;AAAA,IACA,GAAG;AAAA,EACL;AACF;AAEA,SAAS,qBACP,SACA,aACgB;AAChB,QAAM,UAAU,IAAI,YAAY;AAChC,QAAM,cAGF,CAAC;AAEL,QAAM,SAAS,IAAI,eAA2B;AAAA,IAC5C,MAAM,YAAY;AAChB,kBAAY,SAAS;AAAA,IACvB;AAAA,EACF,CAAC;AAED,QAAM,SAAS,IAAI,eAA2B;AAAA,IAC5C,MAAM,YAAY;AAChB,kBAAY,SAAS;AAAA,IACvB;AAAA,EACF,CAAC;AAED,QAAM,WAAW,YAAY;AAC3B,QAAI;AACF,uBAAiB,WAAW,QAAQ,KAAK,GAAG;AAC1C,cAAM,SACJ,QAAQ,SAAS,WAAW,YAAY,SAAS,YAAY;AAC/D,gBAAQ,QAAQ,QAAQ,OAAO,QAAQ,IAAI,CAAC;AAAA,MAC9C;AACA,kBAAY,QAAQ,MAAM;AAC1B,kBAAY,QAAQ,MAAM;AAAA,IAC5B,SAAS,OAAO;AACd,kBAAY,QAAQ,MAAM,KAAK;AAC/B,kBAAY,QAAQ,MAAM,KAAK;AAAA,IACjC;AAAA,EACF,GAAG;AAEH,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,MAAM,OAAsC;AAC1C,YAAM,WAAW,MAAM,QAAQ,KAAK;AACpC,YAAM;AACN,UAAI,aAAa,SAAS;AACxB,cAAM,YAAY,UAAU,IAAI,aAAa,WAAW,YAAY;AAAA,MACtE;AACA,aAAO,EAAE,UAAU,SAAS,SAAS;AAAA,IACvC;AAAA,IACA,MAAM,OAAsB;AAC1B,YAAM,QAAQ,KAAK;AAAA,IACrB;AAAA,EACF;AACF;AAEA,SAAS,cAAc,OAA+C;AACpE,SAAO,IAAI,eAA2B;AAAA,IACpC,MAAM,YAAY;AAChB,iBAAW,QAAQ,KAAK;AACxB,iBAAW,MAAM;AAAA,IACnB;AAAA,EACF,CAAC;AACH;AAEA,eAAe,cACb,QACqB;AACrB,QAAM,SAAS,OAAO,UAAU;AAChC,QAAM,SAAuB,CAAC;AAC9B,MAAI,QAAQ;AACZ,SAAO,MAAM;AACX,UAAM,EAAE,OAAO,KAAK,IAAI,MAAM,OAAO,KAAK;AAC1C,QAAI,KAAM;AACV,QAAI,OAAO;AACT,aAAO,KAAK,KAAK;AACjB,eAAS,MAAM;AAAA,IACjB;AAAA,EACF;AACA,QAAM,MAAM,IAAI,WAAW,KAAK;AAChC,MAAI,SAAS;AACb,aAAW,SAAS,QAAQ;AAC1B,QAAI,IAAI,OAAO,MAAM;AACrB,cAAU,MAAM;AAAA,EAClB;AACA,SAAO;AACT;AAEA,SAASA,qBAAoB,OAAyB;AACpD,MAAI,SAAS,QAAQ,OAAO,UAAU,SAAU,QAAO;AACvD,QAAM,OAAQ,MAA6B;AAC3C,MAAI,SAAS,SAAU,QAAO;AAC9B,QAAM,UAAW,MAAgC;AACjD,SACE,OAAO,YAAY,YACnB,gDAAgD,KAAK,OAAO;AAEhE;;;ADlTA,IAAM,wBAAwB;AAavB,IAAM,gCAAN,cACG,uBAEV;AAAA,EAQE,YAAY,OAAiD;AAC3D,UAAM,MAAM,OAAO;AAKrB,SAAS,QAA+B,CAAC;AAMzC,2BAAkB,OAAO,aAGa;AACpC,YAAM,IAAI,kCAAkC;AAAA,QAC1C,WAAW;AAAA,QACX,SACE;AAAA,MAEJ,CAAC;AAAA,IACH;AAKA;AAAA;AAAA;AAAA,sBAAa,OAAO,YAGG;AACrB,cAAQ,MAAM,KAAK,gBAAgB,OAAO,GAAG;AAAA,IAC/C;AAEA,gBAAO,YAA2B;AAGhC,YAAM,KAAK,QAAQ,KAAK;AAAA,IAC1B;AAEA,mBAAU,YAA2B;AACnC,YAAM,KAAK,KAAK;AAAA,IAClB;AAxCE,SAAK,KAAK,MAAM,aAAa,WAAW;AACxC,SAAK,0BAA0B,MAAM,QAAQ,gBAAgB,OAAO;AAAA,EACtE;AAAA,EAIA,aAA6B;AAC3B,WAAO,IAAI,uBAAuB,KAAK,OAAO;AAAA,EAChD;AAiCF;;;AD1CA,IAAMC,yBAAwB;AAGvB,SAAS,sBACd,WAAoC,CAAC,GACX;AAC1B,UAAQ;AAAA,IACN;AAAA,EACF;AACA,SAAO,IAAI,wBAAwB,QAAQ;AAC7C;AAYO,IAAM,0BAAN,MAAkE;AAAA,EAIvE,YAA6B,UAAmC;AAAnC;AAH7B,SAAS,uBAAuB;AAChC,SAAS,aAAaA;AAQtB,yBAAgB,OAAO,YAQwB;AAC7C,eAAS,aAAa,eAAe;AAErC,YAAM,gBAAgB,EACpB,aAAa,KAAK,YAAY,KAAK,SAAS;AAE9C,YAAM,UAAU,gBACZ,MAAM,QAAQ;AAAA,QACZ,KAAK;AAAA,MACP,IACA,KAAK,SAAS;AAClB,YAAM,eAAe,OAAO;AAC5B,YAAM,iBAAiB,IAAI,8BAA8B;AAAA,QACvD;AAAA,MACF,CAAC;AAED,UAAI,SAAS,iBAAiB,MAAM;AAClC,cAAM,QAAQ,cAAc,eAAe,WAAW,GAAG;AAAA,UACvD,aAAa,SAAS;AAAA,QACxB,CAAC;AAAA,MACH;AAEA,aAAO;AAAA,IACT;AApCE,YAAQ;AAAA,MACN;AAAA,IACF;AAAA,EACF;AAkCF;;;AInGA;AAAA,EACE,qCAAAC;AAAA,OAIK;AAEP,SAAS,WAAAC,gBAAe;AAoCxB,eAAsB,oCACpB,UAAsD,CAAC,GACd;AACzC,MAAI,aAAa,SAAS;AACxB,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT,GAAG;AAAA,EACL,IAAI;AACJ,eAAa,eAAe;AAC5B,QAAM,gBAAgB,MAAMC,SAAQ,OAAO,aAAa;AACxD,MAAI;AACF,UAAM,eAAe,aAAa;AAClC,UAAM,UAAU,IAAI,8BAA8B;AAAA,MAChD,SAAS;AAAA,MACT;AAAA,IACF,CAAC;AACD,UAAM,UAAU,QAAQ,EAAE,SAAS,QAAQ,WAAW,GAAG,YAAY,CAAC;AACtE,WAAO;AAAA,EACT,SAAS,OAAO;AACd,UAAM,cAAc,KAAK,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AACzC,UAAM;AAAA,EACR;AACF;AAEA,eAAsB,oCACpB,SACyC;AACzC,UAAQ,aAAa,eAAe;AACpC,QAAM,IAAIC,mCAAkC;AAAA,IAC1C,SACE;AAAA,EACJ,CAAC;AACH;AAEO,SAAS,8CACd,eACgB;AAChB,SAAO,IAAI,uBAAuB,aAAa;AACjD;AAEO,SAAS,qDACd,eACgC;AAChC,SAAO,IAAI,8BAA8B,EAAE,SAAS,cAAc,CAAC;AACrE;","names":["isFileNotFoundError","JUST_BASH_PROVIDER_ID","HarnessCapabilityUnsupportedError","Sandbox","Sandbox","HarnessCapabilityUnsupportedError"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-sdk/sandbox-just-bash",
-  "version": "1.0.123",
+  "version": "1.0.126",
   "type": "module",
   "license": "Apache-2.0",
   "sideEffects": false,
@@ -26,8 +26,8 @@
     }
   },
   "dependencies": {
-    "@ai-sdk/harness": "1.0.123",
-    "@ai-sdk/provider-utils": "5.0.47",
+    "@ai-sdk/harness": "1.0.126",
+    "@ai-sdk/provider-utils": "5.0.49",
     "just-bash": "^2.14.5"
   },
   "devDependencies": {

package/src/index.ts

@@ -1,5 +1,14 @@
 export {
+  type JustBashSandboxSettings,
   createJustBashSandbox,
   JustBashSandboxProvider,
-  type JustBashSandboxSettings,
+} from './just-bash-legacy-sandbox-provider';
+export {
+  createJustBashNetworkSandboxSession,
+  resumeJustBashNetworkSandboxSession,
+  createJustBashSandboxSessionFromNativeSandbox,
+  createJustBashNetworkSandboxSessionFromNativeSandbox,
+  type JustBashNativeSandboxSession,
+  type JustBashNetworkSandboxSessionCreateOptions,
+  type JustBashNetworkSandboxSessionResumeOptions,
 } from './just-bash-sandbox';

package/src/just-bash-legacy-sandbox-provider.ts

@@ -0,0 +1,100 @@
+import type {
+  HarnessV1NetworkSandboxSession,
+  HarnessV1SandboxProvider,
+} from '@ai-sdk/harness';
+import type { Experimental_SandboxSession as SandboxSession } from '@ai-sdk/provider-utils';
+import { Sandbox } from 'just-bash';
+import { JustBashNetworkSandboxSession } from './just-bash-network-sandbox-session';
+import { ensureRealpath } from './utils';
+
+type JustBashSandboxCreateParams = NonNullable<
+  Parameters<typeof Sandbox.create>[0]
+>;
+
+type JustBashCreationSettings = JustBashSandboxCreateParams & {
+  sandbox?: never;
+};
+
+/**
+ * Settings for `createJustBashSandbox`. Two mutually-exclusive shapes:
+ *
+ * - `{ sandbox }` — wrap an already-created `just-bash` `Sandbox`. The caller
+ *   owns its lifecycle.
+ * - {@link JustBashSandboxCreateParams} fields — provider calls
+ *   `Sandbox.create(settings)` on every `createSession()`.
+ *
+ * just-bash has no port exposure and no snapshot mechanism, so image
+ * management is a per-call no-op: if an adapter declares a bootstrap recipe
+ * the provider runs it once on the freshly-created sandbox before returning.
+ *
+ * @deprecated Use `JustBashNetworkSandboxSessionCreateOptions` for new sessions.
+ */
+export type JustBashSandboxSettings =
+  | { sandbox: Sandbox }
+  | JustBashCreationSettings;
+
+const JUST_BASH_PROVIDER_ID = 'just-bash-sandbox';
+
+/** @deprecated Use `createJustBashNetworkSandboxSession` instead. */
+export function createJustBashSandbox(
+  settings: JustBashSandboxSettings = {} as JustBashSandboxSettings,
+): HarnessV1SandboxProvider {
+  console.warn(
+    'createJustBashSandbox is deprecated. Use createJustBashNetworkSandboxSession and HarnessAgent.createSession({ sandboxSession }) instead.',
+  );
+  return new JustBashSandboxProvider(settings);
+}
+
+/**
+ * `HarnessV1SandboxProvider` implementation backed by `just-bash`. Useful for
+ * non-bridge harness flows and for handing a local `Experimental_SandboxSession`
+ * to AI SDK tools — use `provider.createSession()` then
+ * `sandboxSession.restricted()` to get the latter.
+ *
+ * Note: just-bash cannot expose ports, so bridge-backed harness adapters
+ * (claude-code, codex) will reject this provider at start.
+ */
+/** @deprecated Use `createJustBashNetworkSandboxSession` instead. */
+export class JustBashSandboxProvider implements HarnessV1SandboxProvider {
+  readonly specificationVersion = 'harness-sandbox-v1' as const;
+  readonly providerId = JUST_BASH_PROVIDER_ID;
+
+  constructor(private readonly settings: JustBashSandboxSettings) {
+    console.warn(
+      'JustBashSandboxProvider is deprecated. Use createJustBashNetworkSandboxSession instead.',
+    );
+  }
+
+  createSession = async (options?: {
+    sessionId?: string;
+    abortSignal?: AbortSignal;
+    identity?: string;
+    onFirstCreate?: (
+      session: SandboxSession,
+      opts: { abortSignal?: AbortSignal },
+    ) => Promise<void>;
+  }): Promise<HarnessV1NetworkSandboxSession> => {
+    options?.abortSignal?.throwIfAborted();
+
+    const ownsLifecycle = !(
+      'sandbox' in this.settings && this.settings.sandbox
+    );
+    const sandbox = ownsLifecycle
+      ? await Sandbox.create(
+          this.settings as NonNullable<Parameters<typeof Sandbox.create>[0]>,
+        )
+      : this.settings.sandbox;
+    await ensureRealpath(sandbox);
+    const sandboxSession = new JustBashNetworkSandboxSession({
+      sandbox,
+    });
+
+    if (options?.onFirstCreate != null) {
+      await options.onFirstCreate(sandboxSession.restricted(), {
+        abortSignal: options?.abortSignal,
+      });
+    }
+
+    return sandboxSession;
+  };
+}

package/src/just-bash-network-sandbox-session.ts

@@ -26,16 +26,15 @@ export class JustBashNetworkSandboxSession
   implements HarnessV1NetworkSandboxSession
 {
   /**
-   * Minted at construct time. just-bash has no native identifier and no
-   * cross-process reattach surface; the value exists only to satisfy the
-   * `HarnessV1NetworkSandboxSession.id` contract.
+   * Caller-supplied label or a UUID minted at construct time. just-bash has
+   * no native identifier and cannot reattach across processes.
    */
   readonly id: string;
   readonly defaultWorkingDirectory: string;
 
-  constructor(input: { sandbox: Sandbox }) {
+  constructor(input: { sandbox: Sandbox; sandboxId?: string }) {
     super(input.sandbox);
-    this.id = randomUUID();
+    this.id = input.sandboxId ?? randomUUID();
     this.defaultWorkingDirectory = input.sandbox.bashEnvInstance.getCwd();
   }
 
@@ -70,6 +69,7 @@ export class JustBashNetworkSandboxSession
   stop = async (): Promise<void> => {
     // just-bash has no explicit shutdown; the sandbox is garbage-collected
     // along with its in-memory filesystem once references drop.
+    await this.sandbox.stop();
   };
 
   destroy = async (): Promise<void> => {

package/src/just-bash-sandbox-session.ts

@@ -1,10 +1,11 @@
 import { isAbsolute, posix } from 'node:path';
 import {
   extractLines,
-  type Experimental_SandboxSession,
-  type Experimental_SandboxProcess,
+  type Experimental_SandboxSession as SandboxSession,
+  type Experimental_SandboxProcess as SandboxProcess,
 } from '@ai-sdk/provider-utils';
 import type { Sandbox, SandboxCommand } from 'just-bash';
+import { ensureRealpath } from './utils';
 
 /**
  * `Experimental_SandboxSession` implementation backed by a `just-bash`
@@ -16,7 +17,7 @@ import type { Sandbox, SandboxCommand } from 'just-bash';
  * `JustBashNetworkSandboxSession.restricted()` — not constructed directly by
  * consumers.
  */
-export class JustBashSandboxSession implements Experimental_SandboxSession {
+export class JustBashSandboxSession implements SandboxSession {
   constructor(protected readonly sandbox: Sandbox) {}
 
   get description(): string {
@@ -45,6 +46,8 @@ export class JustBashSandboxSession implements Experimental_SandboxSession {
     abortSignal?: AbortSignal;
   }): Promise<{ exitCode: number; stdout: string; stderr: string }> {
     abortSignal?.throwIfAborted();
+    await ensureRealpath(this.sandbox);
+    abortSignal?.throwIfAborted();
 
     const finished = await this.sandbox.runCommand({
       cmd: 'bash',
@@ -75,7 +78,9 @@ export class JustBashSandboxSession implements Experimental_SandboxSession {
     workingDirectory?: string;
     env?: Record<string, string>;
     abortSignal?: AbortSignal;
-  }): Promise<Experimental_SandboxProcess> {
+  }): Promise<SandboxProcess> {
+    abortSignal?.throwIfAborted();
+    await ensureRealpath(this.sandbox);
     abortSignal?.throwIfAborted();
 
     const live = await this.sandbox.runCommand({
@@ -217,7 +222,7 @@ function createBashArgs(
 function createSandboxProcess(
   command: SandboxCommand,
   abortSignal: AbortSignal | undefined,
-): Experimental_SandboxProcess {
+): SandboxProcess {
   const encoder = new TextEncoder();
   const controllers: {
     stdout?: ReadableStreamDefaultController<Uint8Array>;

package/src/just-bash-sandbox.ts

@@ -1,10 +1,23 @@
-import type {
-  HarnessV1NetworkSandboxSession,
-  HarnessV1SandboxProvider,
+import {
+  HarnessCapabilityUnsupportedError,
+  type HarnessV1NetworkSandboxSession,
+  type HarnessV1SandboxSessionCreateOptions,
+  type HarnessV1SandboxSessionResumeOptions,
 } from '@ai-sdk/harness';
 import type { Experimental_SandboxSession as SandboxSession } from '@ai-sdk/provider-utils';
 import { Sandbox } from 'just-bash';
 import { JustBashNetworkSandboxSession } from './just-bash-network-sandbox-session';
+import { JustBashSandboxSession } from './just-bash-sandbox-session';
+import { ensureRealpath } from './utils';
+
+/**
+ * Flattens an intersection of object types into a single object type so the
+ * resolved shape displays as its named properties rather than a chain of
+ * `A & B & C`.
+ */
+type Prettify<T> = { [K in keyof T]: T[K] } & {};
+
+export type JustBashNativeSandboxSession = Sandbox;
 
 /**
  * Parameters forwarded to `just-bash`'s `Sandbox.create` when creating a
@@ -15,145 +28,68 @@ type JustBashSandboxCreateParams = NonNullable<
   Parameters<typeof Sandbox.create>[0]
 >;
 
-/**
- * Settings for {@link createJustBashSandbox}. Two mutually-exclusive shapes:
- *
- * - `{ sandbox }` — wrap an already-created `just-bash` `Sandbox`. The caller
- *   owns its lifecycle.
- * - {@link JustBashSandboxCreateParams} fields — provider calls
- *   `Sandbox.create(settings)` on every `createSession()`.
- *
- * just-bash has no port exposure and no snapshot mechanism, so image
- * management is a per-call no-op: if an adapter declares a bootstrap recipe
- * the provider runs it once on the freshly-created sandbox before returning.
- */
-export type JustBashSandboxSettings =
-  | { sandbox: Sandbox }
-  | (JustBashSandboxCreateParams & { sandbox?: never });
+type JustBashCreationSettings = Omit<JustBashSandboxCreateParams, 'sandbox'>;
 
-const JUST_BASH_PROVIDER_ID = 'just-bash-sandbox';
-const REALPATH_PATH = '/usr/bin/realpath';
-const REALPATH_SCRIPT = `#!/usr/bin/env bash
-pending=\${1:?}
-resolved=
-link_count=0
-link_marker=__AI_SDK_REALPATH_LINK_END__
-case "$pending" in
-  /*) ;;
-  *) pending=$PWD/$pending ;;
-esac
-while [ -n "$pending" ]; do
-  pending=\${pending#/}
-  [ -n "$pending" ] || break
-  component=\${pending%%/*}
-  if [ "$pending" = "$component" ]; then
-    pending=
-  else
-    pending=\${pending#*/}
-  fi
-  case "$component" in
-    ""|.) continue ;;
-    ..)
-      resolved=\${resolved%/*}
-      continue
-      ;;
-  esac
-  candidate=$resolved/$component
-  if [ -L "$candidate" ]; then
-    link_count=$((link_count + 1))
-    [ "$link_count" -le 64 ] || exit 1
-    link_target_framed=$(readlink "$candidate"; readlink_status=$?; printf '%s' "$link_marker"; exit "$readlink_status")
-    readlink_status=$?
-    [ "$readlink_status" -eq 0 ] || exit 1
-    target=\${link_target_framed%$link_marker}
-    target=\${target%$'\n'}
-    case "$target" in
-      /*) pending=$target\${pending:+/$pending} ;;
-      *) pending=\${candidate%/*}/$target\${pending:+/$pending} ;;
-    esac
-    resolved=
-  else
-    resolved=$candidate
-  fi
-done
-printf '%s\n' "\${resolved:-/}"
-`;
+export type JustBashNetworkSandboxSessionCreateOptions = Prettify<
+  HarnessV1SandboxSessionCreateOptions<JustBashCreationSettings> & {
+    sandbox?: never;
+  }
+>;
+
+type JustBashLookupSettings = Record<never, never>;
 
-async function ensureRealpath(sandbox: Sandbox): Promise<void> {
-  const fs = sandbox.bashEnvInstance.fs;
+export type JustBashNetworkSandboxSessionResumeOptions =
+  HarnessV1SandboxSessionResumeOptions<JustBashLookupSettings>;
+
+export async function createJustBashNetworkSandboxSession(
+  options: JustBashNetworkSandboxSessionCreateOptions = {},
+): Promise<HarnessV1NetworkSandboxSession> {
+  if ('sandbox' in options) {
+    throw new Error(
+      'createJustBashNetworkSandboxSession: use createJustBashNetworkSandboxSessionFromNativeSandbox for an existing sandbox.',
+    );
+  }
+  const {
+    template,
+    abortSignal,
+    sandboxId,
+    sandbox: _sandbox,
+    ...nativeOptions
+  } = options;
+  abortSignal?.throwIfAborted();
+  const nativeSandbox = await Sandbox.create(nativeOptions);
   try {
-    await fs.lstat(REALPATH_PATH);
-    return;
+    await ensureRealpath(nativeSandbox);
+    const session = new JustBashNetworkSandboxSession({
+      sandbox: nativeSandbox,
+      sandboxId,
+    });
+    await template?.prepare({ session: session.restricted(), abortSignal });
+    return session;
   } catch (error) {
-    if (!isFileNotFoundError(error)) {
-      throw error;
-    }
+    await nativeSandbox.stop().catch(() => {});
+    throw error;
   }
-
-  await sandbox.writeFiles({ [REALPATH_PATH]: REALPATH_SCRIPT });
-  await fs.chmod(REALPATH_PATH, 0o755);
 }
 
-function isFileNotFoundError(error: unknown): boolean {
-  if (error == null || typeof error !== 'object') return false;
-  const code = (error as { code?: unknown }).code;
-  if (code === 'ENOENT') return true;
-  const message = (error as { message?: unknown }).message;
-  return (
-    typeof message === 'string' &&
-    /no such file|not found|ENOENT/i.test(message)
-  );
+export async function resumeJustBashNetworkSandboxSession(
+  options: JustBashNetworkSandboxSessionResumeOptions,
+): Promise<HarnessV1NetworkSandboxSession> {
+  options.abortSignal?.throwIfAborted();
+  throw new HarnessCapabilityUnsupportedError({
+    message:
+      'just-bash sandboxes run in-process and cannot be resumed by sandboxId.',
+  });
 }
 
-export function createJustBashSandbox(
-  settings: JustBashSandboxSettings = {} as JustBashSandboxSettings,
-): HarnessV1SandboxProvider {
-  return new JustBashSandboxProvider(settings);
+export function createJustBashSandboxSessionFromNativeSandbox(
+  nativeSandbox: JustBashNativeSandboxSession,
+): SandboxSession {
+  return new JustBashSandboxSession(nativeSandbox);
 }
 
-/**
- * `HarnessV1SandboxProvider` implementation backed by `just-bash`. Useful for
- * non-bridge harness flows and for handing a local `Experimental_SandboxSession`
- * to AI SDK tools — use `provider.createSession()` then
- * `sandboxSession.restricted()` to get the latter.
- *
- * Note: just-bash cannot expose ports, so bridge-backed harness adapters
- * (claude-code, codex) will reject this provider at start.
- */
-export class JustBashSandboxProvider implements HarnessV1SandboxProvider {
-  readonly specificationVersion = 'harness-sandbox-v1' as const;
-  readonly providerId = JUST_BASH_PROVIDER_ID;
-
-  constructor(private readonly settings: JustBashSandboxSettings) {}
-
-  createSession = async (options?: {
-    sessionId?: string;
-    abortSignal?: AbortSignal;
-    identity?: string;
-    onFirstCreate?: (
-      session: SandboxSession,
-      opts: { abortSignal?: AbortSignal },
-    ) => Promise<void>;
-  }): Promise<HarnessV1NetworkSandboxSession> => {
-    options?.abortSignal?.throwIfAborted();
-
-    const ownsLifecycle = !(
-      'sandbox' in this.settings && this.settings.sandbox
-    );
-    const sandbox = ownsLifecycle
-      ? await Sandbox.create(this.settings as JustBashSandboxCreateParams)
-      : this.settings.sandbox;
-    await ensureRealpath(sandbox);
-    const sandboxSession = new JustBashNetworkSandboxSession({
-      sandbox,
-    });
-
-    if (options?.onFirstCreate != null) {
-      await options.onFirstCreate(sandboxSession.restricted(), {
-        abortSignal: options?.abortSignal,
-      });
-    }
-
-    return sandboxSession;
-  };
+export function createJustBashNetworkSandboxSessionFromNativeSandbox(
+  nativeSandbox: JustBashNativeSandboxSession,
+): HarnessV1NetworkSandboxSession {
+  return new JustBashNetworkSandboxSession({ sandbox: nativeSandbox });
 }

package/src/utils.ts

@@ -0,0 +1,118 @@
+import { defineCommand, type CommandContext, type Sandbox } from 'just-bash';
+
+const preparations = new WeakMap<Sandbox, Promise<void>>();
+
+export async function ensureRealpath(sandbox: Sandbox): Promise<void> {
+  let preparation = preparations.get(sandbox);
+  if (preparation == null) {
+    preparation = prepareRealpath(sandbox);
+    preparations.set(sandbox, preparation);
+  }
+
+  try {
+    await preparation;
+  } catch (error) {
+    if (preparations.get(sandbox) === preparation) {
+      preparations.delete(sandbox);
+    }
+    throw error;
+  }
+}
+
+async function prepareRealpath(sandbox: Sandbox): Promise<void> {
+  const realpathType = await sandbox.bashEnvInstance.exec('type realpath');
+  if (realpathType.exitCode === 0) {
+    return;
+  }
+
+  sandbox.bashEnvInstance.registerCommand(
+    defineCommand('realpath', executeRealpath),
+  );
+}
+
+async function executeRealpath(
+  args: string[],
+  context: CommandContext,
+): Promise<{ stdout: string; stderr: string; exitCode: number }> {
+  if (args.length === 0 || args[0] === '') {
+    return {
+      stdout: '',
+      stderr: 'realpath: missing operand\n',
+      exitCode: 1,
+    };
+  }
+
+  let pending = args[0].startsWith('/') ? args[0] : `${context.cwd}/${args[0]}`;
+  let resolved = '';
+  let linkCount = 0;
+
+  while (pending.length > 0) {
+    pending = pending.replace(/^\//, '');
+    if (pending.length === 0) {
+      break;
+    }
+
+    const separatorIndex = pending.indexOf('/');
+    const component =
+      separatorIndex === -1 ? pending : pending.slice(0, separatorIndex);
+    pending = separatorIndex === -1 ? '' : pending.slice(separatorIndex + 1);
+
+    if (component === '' || component === '.') {
+      continue;
+    }
+    if (component === '..') {
+      resolved = resolved.slice(0, resolved.lastIndexOf('/'));
+      continue;
+    }
+
+    const candidate = `${resolved}/${component}`;
+    let isSymbolicLink = false;
+    try {
+      isSymbolicLink = (await context.fs.lstat(candidate)).isSymbolicLink;
+    } catch (error) {
+      if (!isFileNotFoundError(error)) {
+        throw error;
+      }
+    }
+
+    if (!isSymbolicLink) {
+      resolved = candidate;
+      continue;
+    }
+
+    linkCount += 1;
+    if (linkCount > 64) {
+      return { stdout: '', stderr: '', exitCode: 1 };
+    }
+
+    let target: string;
+    try {
+      target = await context.fs.readlink(candidate);
+    } catch {
+      return { stdout: '', stderr: '', exitCode: 1 };
+    }
+
+    const remainder = pending.length > 0 ? `/${pending}` : '';
+    pending = target.startsWith('/')
+      ? `${target}${remainder}`
+      : `${candidate.slice(0, candidate.lastIndexOf('/'))}/${target}${remainder}`;
+    resolved = '';
+  }
+
+  return {
+    stdout: `${resolved || '/'}\n`,
+    stderr: '',
+    exitCode: 0,
+  };
+}
+
+function isFileNotFoundError(error: unknown): boolean {
+  if (error == null || typeof error !== 'object') return false;
+  const code = (error as { code?: unknown }).code;
+  if (code === 'ENOENT') return true;
+  const message = (error as { message?: unknown }).message;
+  return (
+    typeof message === 'string' &&
+    /no such file|not found|ENOENT/i.test(message)
+  );
+}