@finalai/agent-provider 0.1.0

package/dist/modules/sandbox/rpc-peer.d.mts

@@ -0,0 +1,35 @@
+import type { JsonValue } from "../json.mjs";
+import { type StreamMuxIface } from "./stream-mux.mjs";
+import { type FrameChannelCloseIface, type FrameChannelIface, type JsonRpcId } from "./wire.mjs";
+export interface RpcRequestContextIface {
+    id: JsonRpcId;
+    method: string;
+    params: JsonValue;
+    signal: AbortSignal;
+}
+export interface RpcPeerIface {
+    readonly streams: StreamMuxIface;
+    readonly closed: Promise<FrameChannelCloseIface>;
+    readonly isClosed: () => boolean;
+    request(method: string, params: object, options?: {
+        signal?: AbortSignal;
+        timeoutMs?: number;
+    }): Promise<JsonValue>;
+    notify(method: string, params: object): void;
+    close(code?: number, reason?: string): void;
+    pendingCount(): number;
+}
+export interface JsonRpcErrorBodyIface {
+    code: number;
+    message: string;
+    data: JsonValue;
+}
+export declare const toJsonRpcError: (cause: unknown) => JsonRpcErrorBodyIface;
+export declare const createRpcPeer: (args: {
+    channel: FrameChannelIface;
+    binary: boolean;
+    onRequest?: (context: RpcRequestContextIface) => Promise<object>;
+    onNotification?: (method: string, params: JsonValue) => void;
+    onClose?: (info: FrameChannelCloseIface) => void;
+    beforeRequest?: (context: RpcRequestContextIface) => void;
+}) => RpcPeerIface;

package/dist/modules/sandbox/rpc-peer.mjs

@@ -0,0 +1,224 @@
+import { createStreamMux } from "./stream-mux.mjs";
+import {
+  cancelRequestParamsSchema,
+  errnoOf,
+  handleRpcError,
+  HandleRpcErrorCode,
+  handleRpcErrorDataSchema,
+  HandleRpcNotification,
+  isHandleRpcError,
+  jsonRpcErrorResponseSchema,
+  jsonRpcNotificationSchema,
+  jsonRpcRequestSchema,
+  jsonRpcSuccessSchema
+} from "./wire.mjs";
+const toJsonRpcError = (cause) => {
+  if (isHandleRpcError(cause)) {
+    return {
+      code: cause.code,
+      message: cause.message,
+      data: { errno: cause.errno, retryable: cause.retryable }
+    };
+  }
+  const errno = errnoOf(cause);
+  const message = cause instanceof Error ? cause.message : String(cause);
+  const code = errno === "ENOENT" ? HandleRpcErrorCode.NotFound : errno === "EACCES" || errno === "EPERM" ? HandleRpcErrorCode.Forbidden : HandleRpcErrorCode.Internal;
+  return { code, message, data: { errno, retryable: false } };
+};
+const createRpcPeer = (args) => {
+  let nextId = 1;
+  const pending = /* @__PURE__ */ new Map();
+  const inbound = /* @__PURE__ */ new Map();
+  let closedInfo = null;
+  let resolveClosed = () => void 0;
+  const closed = new Promise((resolve) => {
+    resolveClosed = resolve;
+  });
+  const send = (frame) => {
+    if (closedInfo == null) args.channel.send(frame);
+  };
+  const streams = createStreamMux({ send, binary: args.binary });
+  const sendJson = (message) => send(JSON.stringify({ jsonrpc: "2.0", ...message }));
+  const respond = async (context, controller) => {
+    try {
+      const result = await (args.onRequest?.(context) ?? Promise.reject(
+        handleRpcError({ code: HandleRpcErrorCode.MethodNotFound, message: context.method })
+      ));
+      if (!controller.signal.aborted) sendJson({ id: context.id, result: result ?? {} });
+      else
+        sendJson({
+          id: context.id,
+          error: { code: HandleRpcErrorCode.Cancelled, message: "request cancelled" }
+        });
+    } catch (error) {
+      const rpcError = controller.signal.aborted ? { code: HandleRpcErrorCode.Cancelled, message: "request cancelled", data: null } : toJsonRpcError(error);
+      sendJson({ id: context.id, error: rpcError });
+    } finally {
+      inbound.delete(context.id);
+    }
+  };
+  const handleText = (text) => {
+    let message;
+    try {
+      message = JSON.parse(text);
+    } catch {
+      sendJson({
+        id: null,
+        error: { code: HandleRpcErrorCode.ParseError, message: "invalid JSON" }
+      });
+      return;
+    }
+    const request2 = jsonRpcRequestSchema.safeParse(message);
+    if (request2.success) {
+      const controller = new AbortController();
+      inbound.set(request2.data.id, controller);
+      const context = {
+        id: request2.data.id,
+        method: request2.data.method,
+        params: request2.data.params ?? {},
+        signal: controller.signal
+      };
+      try {
+        args.beforeRequest?.(context);
+      } catch (error) {
+        inbound.delete(request2.data.id);
+        sendJson({ id: request2.data.id, error: toJsonRpcError(error) });
+        return;
+      }
+      void respond(context, controller);
+      return;
+    }
+    const failure = jsonRpcErrorResponseSchema.safeParse(message);
+    if (failure.success) {
+      if (failure.data.id == null) return;
+      const entry = pending.get(failure.data.id);
+      pending.delete(failure.data.id);
+      const data = handleRpcErrorDataSchema.safeParse(failure.data.error.data);
+      entry?.reject(
+        handleRpcError({
+          code: failure.data.error.code,
+          message: failure.data.error.message,
+          errno: data.success ? data.data.errno ?? null : null,
+          retryable: data.success ? data.data.retryable ?? false : false
+        })
+      );
+      return;
+    }
+    const success = jsonRpcSuccessSchema.safeParse(message);
+    if (success.success) {
+      const entry = pending.get(success.data.id);
+      pending.delete(success.data.id);
+      entry?.resolve(success.data.result);
+      return;
+    }
+    const notification = jsonRpcNotificationSchema.safeParse(message);
+    if (!notification.success) return;
+    const params = notification.data.params ?? {};
+    if (streams.handleNotification(notification.data.method, params)) return;
+    if (notification.data.method === HandleRpcNotification.CancelRequest) {
+      const parsed = cancelRequestParamsSchema.safeParse(params);
+      if (parsed.success) inbound.get(parsed.data.requestId)?.abort();
+      return;
+    }
+    args.onNotification?.(notification.data.method, params);
+  };
+  const handleClose = (info) => {
+    if (closedInfo != null) return;
+    closedInfo = info;
+    const error = handleRpcError({
+      code: HandleRpcErrorCode.ConnectionClosed,
+      message: `connection closed (${info.code}${info.reason === "" ? "" : `: ${info.reason}`})`,
+      retryable: true
+    });
+    for (const entry of pending.values()) entry.reject(error);
+    pending.clear();
+    for (const controller of inbound.values()) controller.abort();
+    inbound.clear();
+    streams.failAll(error);
+    args.onClose?.(info);
+    resolveClosed(info);
+  };
+  args.channel.listen({
+    frame: (frame) => {
+      if (frame instanceof Uint8Array) streams.handleBinary(frame);
+      else handleText(frame);
+    },
+    close: handleClose
+  });
+  const request = (method, params, options) => {
+    if (closedInfo != null) {
+      return Promise.reject(
+        handleRpcError({
+          code: HandleRpcErrorCode.ConnectionClosed,
+          message: "connection closed",
+          retryable: true
+        })
+      );
+    }
+    if (options?.signal?.aborted === true) {
+      return Promise.reject(
+        handleRpcError({ code: HandleRpcErrorCode.Cancelled, message: "request aborted" })
+      );
+    }
+    const id = nextId;
+    nextId += 1;
+    return new Promise((resolve, reject) => {
+      let timer = null;
+      const onAbort = () => {
+        if (!pending.has(id)) return;
+        sendJson({ method: HandleRpcNotification.CancelRequest, params: { requestId: id } });
+        pending.delete(id);
+        cleanup();
+        reject(handleRpcError({ code: HandleRpcErrorCode.Cancelled, message: "request aborted" }));
+      };
+      const cleanup = () => {
+        if (timer != null) clearTimeout(timer);
+        options?.signal?.removeEventListener("abort", onAbort);
+      };
+      pending.set(id, {
+        resolve: (value) => {
+          cleanup();
+          resolve(value);
+        },
+        reject: (error) => {
+          cleanup();
+          reject(error);
+        }
+      });
+      options?.signal?.addEventListener("abort", onAbort);
+      if (options?.timeoutMs != null) {
+        timer = setTimeout(() => {
+          if (!pending.has(id)) return;
+          sendJson({ method: HandleRpcNotification.CancelRequest, params: { requestId: id } });
+          pending.delete(id);
+          cleanup();
+          reject(
+            handleRpcError({
+              code: HandleRpcErrorCode.Timeout,
+              message: `${method} timed out`,
+              retryable: true
+            })
+          );
+        }, options.timeoutMs);
+      }
+      sendJson({ id, method, params });
+    });
+  };
+  return {
+    streams,
+    closed,
+    isClosed: () => closedInfo != null,
+    request,
+    notify: (method, params) => sendJson({ method, params }),
+    close: (code, reason) => {
+      args.channel.close(code, reason);
+      handleClose({ code: code ?? 1e3, reason: reason ?? "" });
+    },
+    pendingCount: () => pending.size
+  };
+};
+export {
+  createRpcPeer,
+  toJsonRpcError
+};
+//# sourceMappingURL=rpc-peer.mjs.map

package/dist/modules/sandbox/rpc-peer.mjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/sandbox/rpc-peer.ts"],
+  "sourcesContent": ["import type { JsonValue } from \"../json.mjs\";\nimport { createStreamMux, type StreamMuxIface } from \"./stream-mux.mjs\";\nimport {\n  cancelRequestParamsSchema,\n  errnoOf,\n  handleRpcError,\n  HandleRpcErrorCode,\n  handleRpcErrorDataSchema,\n  HandleRpcNotification,\n  isHandleRpcError,\n  jsonRpcErrorResponseSchema,\n  jsonRpcNotificationSchema,\n  jsonRpcRequestSchema,\n  jsonRpcSuccessSchema,\n  type FrameChannelCloseIface,\n  type FrameChannelIface,\n  type JsonRpcId,\n  type WireFrame,\n} from \"./wire.mjs\";\n\n// JSON-RPC 2.0 over a frame channel with the handle RPC's stream mux attached.\n// One peer per connection; both client and server use it.\n\nexport interface RpcRequestContextIface {\n  id: JsonRpcId;\n  method: string;\n  params: JsonValue;\n  signal: AbortSignal;\n}\n\nexport interface RpcPeerIface {\n  readonly streams: StreamMuxIface;\n  readonly closed: Promise<FrameChannelCloseIface>;\n  readonly isClosed: () => boolean;\n  request(\n    method: string,\n    // Params are serialized as is; wire.ts schemas own their shape.\n    // oxlint-disable-next-line anti-slop/no-object-parameters -- JSON-RPC serialization boundary.\n    params: object,\n    options?: { signal?: AbortSignal; timeoutMs?: number },\n  ): Promise<JsonValue>;\n  // oxlint-disable-next-line anti-slop/no-object-parameters -- JSON-RPC serialization boundary.\n  notify(method: string, params: object): void;\n  close(code?: number, reason?: string): void;\n  // Number of requests awaiting a response.\n  pendingCount(): number;\n}\n\ninterface PendingIface {\n  resolve: (value: JsonValue) => void;\n  reject: (error: Error) => void;\n}\n\n// Converts a thrown value into a JSON-RPC error object.\nexport interface JsonRpcErrorBodyIface {\n  code: number;\n  message: string;\n  data: JsonValue;\n}\n\nexport const toJsonRpcError = (cause: unknown): JsonRpcErrorBodyIface => {\n  if (isHandleRpcError(cause)) {\n    return {\n      code: cause.code,\n      message: cause.message,\n      data: { errno: cause.errno, retryable: cause.retryable },\n    };\n  }\n  const errno = errnoOf(cause);\n  const message = cause instanceof Error ? cause.message : String(cause);\n  const code =\n    errno === 'ENOENT'\n      ? HandleRpcErrorCode.NotFound\n      : errno === 'EACCES' || errno === 'EPERM'\n        ? HandleRpcErrorCode.Forbidden\n        : HandleRpcErrorCode.Internal;\n  return { code, message, data: { errno, retryable: false } };\n};\n\nexport const createRpcPeer = (args: {\n  channel: FrameChannelIface;\n  binary: boolean;\n  onRequest?: (context: RpcRequestContextIface) => Promise<object>;\n  onNotification?: (method: string, params: JsonValue) => void;\n  onClose?: (info: FrameChannelCloseIface) => void;\n  // Called synchronously before onRequest, in frame order; used by the server\n  // to register incoming streams before their chunks can arrive.\n  beforeRequest?: (context: RpcRequestContextIface) => void;\n}): RpcPeerIface => {\n  let nextId = 1;\n  const pending = new Map<JsonRpcId, PendingIface>();\n  const inbound = new Map<JsonRpcId, AbortController>();\n  let closedInfo: FrameChannelCloseIface | null = null;\n  let resolveClosed: (info: FrameChannelCloseIface) => void = () => undefined;\n  const closed = new Promise<FrameChannelCloseIface>((resolve) => {\n    resolveClosed = resolve;\n  });\n\n  const send = (frame: WireFrame) => {\n    if (closedInfo == null) args.channel.send(frame);\n  };\n  const streams = createStreamMux({ send, binary: args.binary });\n\n  // oxlint-disable-next-line anti-slop/no-object-parameters -- JSON-RPC serialization boundary.\n  const sendJson = (message: object) => send(JSON.stringify({ jsonrpc: '2.0', ...message }));\n\n  const respond = async (context: RpcRequestContextIface, controller: AbortController) => {\n    try {\n      const result = await (args.onRequest?.(context) ??\n        Promise.reject(\n          handleRpcError({ code: HandleRpcErrorCode.MethodNotFound, message: context.method }),\n        ));\n      if (!controller.signal.aborted) sendJson({ id: context.id, result: result ?? {} });\n      else\n        sendJson({\n          id: context.id,\n          error: { code: HandleRpcErrorCode.Cancelled, message: 'request cancelled' },\n        });\n    } catch (error) {\n      const rpcError = controller.signal.aborted\n        ? { code: HandleRpcErrorCode.Cancelled, message: 'request cancelled', data: null }\n        : toJsonRpcError(error);\n      sendJson({ id: context.id, error: rpcError });\n    } finally {\n      inbound.delete(context.id);\n    }\n  };\n\n  const handleText = (text: string) => {\n    let message: unknown;\n    try {\n      message = JSON.parse(text);\n    } catch {\n      sendJson({\n        id: null,\n        error: { code: HandleRpcErrorCode.ParseError, message: 'invalid JSON' },\n      });\n      return;\n    }\n    const request = jsonRpcRequestSchema.safeParse(message);\n    if (request.success) {\n      const controller = new AbortController();\n      inbound.set(request.data.id, controller);\n      const context: RpcRequestContextIface = {\n        id: request.data.id,\n        method: request.data.method,\n        params: request.data.params ?? {},\n        signal: controller.signal,\n      };\n      try {\n        args.beforeRequest?.(context);\n      } catch (error) {\n        inbound.delete(request.data.id);\n        sendJson({ id: request.data.id, error: toJsonRpcError(error) });\n        return;\n      }\n      void respond(context, controller);\n      return;\n    }\n    const failure = jsonRpcErrorResponseSchema.safeParse(message);\n    if (failure.success) {\n      if (failure.data.id == null) return;\n      const entry = pending.get(failure.data.id);\n      pending.delete(failure.data.id);\n      const data = handleRpcErrorDataSchema.safeParse(failure.data.error.data);\n      entry?.reject(\n        handleRpcError({\n          code: failure.data.error.code,\n          message: failure.data.error.message,\n          errno: data.success ? (data.data.errno ?? null) : null,\n          retryable: data.success ? (data.data.retryable ?? false) : false,\n        }),\n      );\n      return;\n    }\n    const success = jsonRpcSuccessSchema.safeParse(message);\n    if (success.success) {\n      const entry = pending.get(success.data.id);\n      pending.delete(success.data.id);\n      entry?.resolve(success.data.result);\n      return;\n    }\n    const notification = jsonRpcNotificationSchema.safeParse(message);\n    if (!notification.success) return;\n    const params = notification.data.params ?? {};\n    if (streams.handleNotification(notification.data.method, params)) return;\n    if (notification.data.method === HandleRpcNotification.CancelRequest) {\n      const parsed = cancelRequestParamsSchema.safeParse(params);\n      if (parsed.success) inbound.get(parsed.data.requestId)?.abort();\n      return;\n    }\n    args.onNotification?.(notification.data.method, params);\n  };\n\n  const handleClose = (info: FrameChannelCloseIface) => {\n    if (closedInfo != null) return;\n    closedInfo = info;\n    const error = handleRpcError({\n      code: HandleRpcErrorCode.ConnectionClosed,\n      message: `connection closed (${info.code}${info.reason === '' ? '' : `: ${info.reason}`})`,\n      retryable: true,\n    });\n    for (const entry of pending.values()) entry.reject(error);\n    pending.clear();\n    for (const controller of inbound.values()) controller.abort();\n    inbound.clear();\n    streams.failAll(error);\n    args.onClose?.(info);\n    resolveClosed(info);\n  };\n\n  args.channel.listen({\n    frame: (frame) => {\n      if (frame instanceof Uint8Array) streams.handleBinary(frame);\n      else handleText(frame);\n    },\n    close: handleClose,\n  });\n\n  const request: RpcPeerIface['request'] = (method, params, options) => {\n    if (closedInfo != null) {\n      return Promise.reject(\n        handleRpcError({\n          code: HandleRpcErrorCode.ConnectionClosed,\n          message: 'connection closed',\n          retryable: true,\n        }),\n      );\n    }\n    if (options?.signal?.aborted === true) {\n      return Promise.reject(\n        handleRpcError({ code: HandleRpcErrorCode.Cancelled, message: 'request aborted' }),\n      );\n    }\n    const id = nextId;\n    nextId += 1;\n    return new Promise<JsonValue>((resolve, reject) => {\n      let timer: ReturnType<typeof setTimeout> | null = null;\n      const onAbort = () => {\n        if (!pending.has(id)) return;\n        sendJson({ method: HandleRpcNotification.CancelRequest, params: { requestId: id } });\n        pending.delete(id);\n        cleanup();\n        reject(handleRpcError({ code: HandleRpcErrorCode.Cancelled, message: 'request aborted' }));\n      };\n      const cleanup = () => {\n        if (timer != null) clearTimeout(timer);\n        options?.signal?.removeEventListener('abort', onAbort);\n      };\n      pending.set(id, {\n        resolve: (value) => {\n          cleanup();\n          resolve(value);\n        },\n        reject: (error) => {\n          cleanup();\n          reject(error);\n        },\n      });\n      options?.signal?.addEventListener('abort', onAbort);\n      if (options?.timeoutMs != null) {\n        timer = setTimeout(() => {\n          if (!pending.has(id)) return;\n          sendJson({ method: HandleRpcNotification.CancelRequest, params: { requestId: id } });\n          pending.delete(id);\n          cleanup();\n          reject(\n            handleRpcError({\n              code: HandleRpcErrorCode.Timeout,\n              message: `${method} timed out`,\n              retryable: true,\n            }),\n          );\n        }, options.timeoutMs);\n      }\n      sendJson({ id, method, params });\n    });\n  };\n\n  return {\n    streams,\n    closed,\n    isClosed: () => closedInfo != null,\n    request,\n    notify: (method, params) => sendJson({ method, params }),\n    close: (code, reason) => {\n      args.channel.close(code, reason);\n      handleClose({ code: code ?? 1000, reason: reason ?? '' });\n    },\n    pendingCount: () => pending.size,\n  };\n};\n"],
+  "mappings": "AACA,SAAS,uBAA4C;AACrD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAKK;AA0CA,MAAM,iBAAiB,CAAC,UAA0C;AACvE,MAAI,iBAAiB,KAAK,GAAG;AAC3B,WAAO;AAAA,MACL,MAAM,MAAM;AAAA,MACZ,SAAS,MAAM;AAAA,MACf,MAAM,EAAE,OAAO,MAAM,OAAO,WAAW,MAAM,UAAU;AAAA,IACzD;AAAA,EACF;AACA,QAAM,QAAQ,QAAQ,KAAK;AAC3B,QAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,QAAM,OACJ,UAAU,WACN,mBAAmB,WACnB,UAAU,YAAY,UAAU,UAC9B,mBAAmB,YACnB,mBAAmB;AAC3B,SAAO,EAAE,MAAM,SAAS,MAAM,EAAE,OAAO,WAAW,MAAM,EAAE;AAC5D;AAEO,MAAM,gBAAgB,CAAC,SASV;AAClB,MAAI,SAAS;AACb,QAAM,UAAU,oBAAI,IAA6B;AACjD,QAAM,UAAU,oBAAI,IAAgC;AACpD,MAAI,aAA4C;AAChD,MAAI,gBAAwD,MAAM;AAClE,QAAM,SAAS,IAAI,QAAgC,CAAC,YAAY;AAC9D,oBAAgB;AAAA,EAClB,CAAC;AAED,QAAM,OAAO,CAAC,UAAqB;AACjC,QAAI,cAAc,KAAM,MAAK,QAAQ,KAAK,KAAK;AAAA,EACjD;AACA,QAAM,UAAU,gBAAgB,EAAE,MAAM,QAAQ,KAAK,OAAO,CAAC;AAG7D,QAAM,WAAW,CAAC,YAAoB,KAAK,KAAK,UAAU,EAAE,SAAS,OAAO,GAAG,QAAQ,CAAC,CAAC;AAEzF,QAAM,UAAU,OAAO,SAAiC,eAAgC;AACtF,QAAI;AACF,YAAM,SAAS,OAAO,KAAK,YAAY,OAAO,KAC5C,QAAQ;AAAA,QACN,eAAe,EAAE,MAAM,mBAAmB,gBAAgB,SAAS,QAAQ,OAAO,CAAC;AAAA,MACrF;AACF,UAAI,CAAC,WAAW,OAAO,QAAS,UAAS,EAAE,IAAI,QAAQ,IAAI,QAAQ,UAAU,CAAC,EAAE,CAAC;AAAA;AAE/E,iBAAS;AAAA,UACP,IAAI,QAAQ;AAAA,UACZ,OAAO,EAAE,MAAM,mBAAmB,WAAW,SAAS,oBAAoB;AAAA,QAC5E,CAAC;AAAA,IACL,SAAS,OAAO;AACd,YAAM,WAAW,WAAW,OAAO,UAC/B,EAAE,MAAM,mBAAmB,WAAW,SAAS,qBAAqB,MAAM,KAAK,IAC/E,eAAe,KAAK;AACxB,eAAS,EAAE,IAAI,QAAQ,IAAI,OAAO,SAAS,CAAC;AAAA,IAC9C,UAAE;AACA,cAAQ,OAAO,QAAQ,EAAE;AAAA,IAC3B;AAAA,EACF;AAEA,QAAM,aAAa,CAAC,SAAiB;AACnC,QAAI;AACJ,QAAI;AACF,gBAAU,KAAK,MAAM,IAAI;AAAA,IAC3B,QAAQ;AACN,eAAS;AAAA,QACP,IAAI;AAAA,QACJ,OAAO,EAAE,MAAM,mBAAmB,YAAY,SAAS,eAAe;AAAA,MACxE,CAAC;AACD;AAAA,IACF;AACA,UAAMA,WAAU,qBAAqB,UAAU,OAAO;AACtD,QAAIA,SAAQ,SAAS;AACnB,YAAM,aAAa,IAAI,gBAAgB;AACvC,cAAQ,IAAIA,SAAQ,KAAK,IAAI,UAAU;AACvC,YAAM,UAAkC;AAAA,QACtC,IAAIA,SAAQ,KAAK;AAAA,QACjB,QAAQA,SAAQ,KAAK;AAAA,QACrB,QAAQA,SAAQ,KAAK,UAAU,CAAC;AAAA,QAChC,QAAQ,WAAW;AAAA,MACrB;AACA,UAAI;AACF,aAAK,gBAAgB,OAAO;AAAA,MAC9B,SAAS,OAAO;AACd,gBAAQ,OAAOA,SAAQ,KAAK,EAAE;AAC9B,iBAAS,EAAE,IAAIA,SAAQ,KAAK,IAAI,OAAO,eAAe,KAAK,EAAE,CAAC;AAC9D;AAAA,MACF;AACA,WAAK,QAAQ,SAAS,UAAU;AAChC;AAAA,IACF;AACA,UAAM,UAAU,2BAA2B,UAAU,OAAO;AAC5D,QAAI,QAAQ,SAAS;AACnB,UAAI,QAAQ,KAAK,MAAM,KAAM;AAC7B,YAAM,QAAQ,QAAQ,IAAI,QAAQ,KAAK,EAAE;AACzC,cAAQ,OAAO,QAAQ,KAAK,EAAE;AAC9B,YAAM,OAAO,yBAAyB,UAAU,QAAQ,KAAK,MAAM,IAAI;AACvE,aAAO;AAAA,QACL,eAAe;AAAA,UACb,MAAM,QAAQ,KAAK,MAAM;AAAA,UACzB,SAAS,QAAQ,KAAK,MAAM;AAAA,UAC5B,OAAO,KAAK,UAAW,KAAK,KAAK,SAAS,OAAQ;AAAA,UAClD,WAAW,KAAK,UAAW,KAAK,KAAK,aAAa,QAAS;AAAA,QAC7D,CAAC;AAAA,MACH;AACA;AAAA,IACF;AACA,UAAM,UAAU,qBAAqB,UAAU,OAAO;AACtD,QAAI,QAAQ,SAAS;AACnB,YAAM,QAAQ,QAAQ,IAAI,QAAQ,KAAK,EAAE;AACzC,cAAQ,OAAO,QAAQ,KAAK,EAAE;AAC9B,aAAO,QAAQ,QAAQ,KAAK,MAAM;AAClC;AAAA,IACF;AACA,UAAM,eAAe,0BAA0B,UAAU,OAAO;AAChE,QAAI,CAAC,aAAa,QAAS;AAC3B,UAAM,SAAS,aAAa,KAAK,UAAU,CAAC;AAC5C,QAAI,QAAQ,mBAAmB,aAAa,KAAK,QAAQ,MAAM,EAAG;AAClE,QAAI,aAAa,KAAK,WAAW,sBAAsB,eAAe;AACpE,YAAM,SAAS,0BAA0B,UAAU,MAAM;AACzD,UAAI,OAAO,QAAS,SAAQ,IAAI,OAAO,KAAK,SAAS,GAAG,MAAM;AAC9D;AAAA,IACF;AACA,SAAK,iBAAiB,aAAa,KAAK,QAAQ,MAAM;AAAA,EACxD;AAEA,QAAM,cAAc,CAAC,SAAiC;AACpD,QAAI,cAAc,KAAM;AACxB,iBAAa;AACb,UAAM,QAAQ,eAAe;AAAA,MAC3B,MAAM,mBAAmB;AAAA,MACzB,SAAS,sBAAsB,KAAK,IAAI,GAAG,KAAK,WAAW,KAAK,KAAK,KAAK,KAAK,MAAM,EAAE;AAAA,MACvF,WAAW;AAAA,IACb,CAAC;AACD,eAAW,SAAS,QAAQ,OAAO,EAAG,OAAM,OAAO,KAAK;AACxD,YAAQ,MAAM;AACd,eAAW,cAAc,QAAQ,OAAO,EAAG,YAAW,MAAM;AAC5D,YAAQ,MAAM;AACd,YAAQ,QAAQ,KAAK;AACrB,SAAK,UAAU,IAAI;AACnB,kBAAc,IAAI;AAAA,EACpB;AAEA,OAAK,QAAQ,OAAO;AAAA,IAClB,OAAO,CAAC,UAAU;AAChB,UAAI,iBAAiB,WAAY,SAAQ,aAAa,KAAK;AAAA,UACtD,YAAW,KAAK;AAAA,IACvB;AAAA,IACA,OAAO;AAAA,EACT,CAAC;AAED,QAAM,UAAmC,CAAC,QAAQ,QAAQ,YAAY;AACpE,QAAI,cAAc,MAAM;AACtB,aAAO,QAAQ;AAAA,QACb,eAAe;AAAA,UACb,MAAM,mBAAmB;AAAA,UACzB,SAAS;AAAA,UACT,WAAW;AAAA,QACb,CAAC;AAAA,MACH;AAAA,IACF;AACA,QAAI,SAAS,QAAQ,YAAY,MAAM;AACrC,aAAO,QAAQ;AAAA,QACb,eAAe,EAAE,MAAM,mBAAmB,WAAW,SAAS,kBAAkB,CAAC;AAAA,MACnF;AAAA,IACF;AACA,UAAM,KAAK;AACX,cAAU;AACV,WAAO,IAAI,QAAmB,CAAC,SAAS,WAAW;AACjD,UAAI,QAA8C;AAClD,YAAM,UAAU,MAAM;AACpB,YAAI,CAAC,QAAQ,IAAI,EAAE,EAAG;AACtB,iBAAS,EAAE,QAAQ,sBAAsB,eAAe,QAAQ,EAAE,WAAW,GAAG,EAAE,CAAC;AACnF,gBAAQ,OAAO,EAAE;AACjB,gBAAQ;AACR,eAAO,eAAe,EAAE,MAAM,mBAAmB,WAAW,SAAS,kBAAkB,CAAC,CAAC;AAAA,MAC3F;AACA,YAAM,UAAU,MAAM;AACpB,YAAI,SAAS,KAAM,cAAa,KAAK;AACrC,iBAAS,QAAQ,oBAAoB,SAAS,OAAO;AAAA,MACvD;AACA,cAAQ,IAAI,IAAI;AAAA,QACd,SAAS,CAAC,UAAU;AAClB,kBAAQ;AACR,kBAAQ,KAAK;AAAA,QACf;AAAA,QACA,QAAQ,CAAC,UAAU;AACjB,kBAAQ;AACR,iBAAO,KAAK;AAAA,QACd;AAAA,MACF,CAAC;AACD,eAAS,QAAQ,iBAAiB,SAAS,OAAO;AAClD,UAAI,SAAS,aAAa,MAAM;AAC9B,gBAAQ,WAAW,MAAM;AACvB,cAAI,CAAC,QAAQ,IAAI,EAAE,EAAG;AACtB,mBAAS,EAAE,QAAQ,sBAAsB,eAAe,QAAQ,EAAE,WAAW,GAAG,EAAE,CAAC;AACnF,kBAAQ,OAAO,EAAE;AACjB,kBAAQ;AACR;AAAA,YACE,eAAe;AAAA,cACb,MAAM,mBAAmB;AAAA,cACzB,SAAS,GAAG,MAAM;AAAA,cAClB,WAAW;AAAA,YACb,CAAC;AAAA,UACH;AAAA,QACF,GAAG,QAAQ,SAAS;AAAA,MACtB;AACA,eAAS,EAAE,IAAI,QAAQ,OAAO,CAAC;AAAA,IACjC,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,UAAU,MAAM,cAAc;AAAA,IAC9B;AAAA,IACA,QAAQ,CAAC,QAAQ,WAAW,SAAS,EAAE,QAAQ,OAAO,CAAC;AAAA,IACvD,OAAO,CAAC,MAAM,WAAW;AACvB,WAAK,QAAQ,MAAM,MAAM,MAAM;AAC/B,kBAAY,EAAE,MAAM,QAAQ,KAAM,QAAQ,UAAU,GAAG,CAAC;AAAA,IAC1D;AAAA,IACA,cAAc,MAAM,QAAQ;AAAA,EAC9B;AACF;",
+  "names": ["request"]
+}

package/dist/modules/sandbox/seeds.d.mts

@@ -0,0 +1,26 @@
+import * as z from 'zod';
+import type { SandboxPrepareContextIface, SandboxSessionIface, SandboxStartContextIface } from "./types.mjs";
+export declare const sandboxPreparationInputs: (files: Record<string, string>) => Pick<SandboxPrepareContextIface, "files" | "resources">;
+export declare const MAX_SANDBOX_SEED_BYTES: number;
+export declare const sandboxSeedFilesSchema: z.ZodPreprocess<z.ZodPipe<z.ZodArray<z.ZodTuple<[z.ZodString, z.ZodString], null>>, z.ZodTransform<{
+    [k: string]: string;
+}, [string, string][]>>, unknown>;
+export declare const sandboxSeedFiles: (ctx: Pick<SandboxPrepareContextIface, "files" | "resources">) => Record<string, string>;
+export declare const sandboxSeedIdentity: (files: Record<string, string>) => string;
+export declare const SANDBOX_SEED_MARKER = "workspace-seeded";
+export declare const SANDBOX_SEED_PROTOCOL = "workspace-seed-v1";
+export declare const SANDBOX_SEED_SCRIPT = "import json, os, stat, sys, uuid\np = json.load(sys.stdin)\nflags = os.O_RDONLY | os.O_DIRECTORY | os.O_NOFOLLOW\nroot = os.open('/', flags)\ntry:\n    for part in p['root'].split('/'):\n        if not part:\n            continue\n        if part in ('.', '..'):\n            raise ValueError('invalid workspace root')\n        next_fd = os.open(part, flags, dir_fd=root)\n        os.close(root)\n        root = next_fd\n    try:\n        os.mkdir('.final', dir_fd=root)\n    except FileExistsError:\n        pass\n    state = os.open('.final', flags, dir_fd=root)\n    try:\n        marker = os.open('workspace-seeded', os.O_RDONLY | os.O_NOFOLLOW | os.O_NONBLOCK, dir_fd=state)\n    except FileNotFoundError:\n        marker = None\n    if marker is not None:\n        try:\n            if not stat.S_ISREG(os.fstat(marker).st_mode) or os.read(marker, 64) != b'workspace-seed-v1':\n                raise ValueError('invalid workspace seed marker')\n        finally:\n            os.close(marker)\n            os.close(state)\n        sys.exit(0)\n    for path, content in p['files'].items():\n        parts = path.split('/')\n        if parts[0] == '.final' or any(x in ('', '.', '..') or '\\\\' in x or '\\x00' in x for x in parts):\n            raise ValueError('invalid seed path')\n        parent = os.dup(root)\n        temporary = None\n        try:\n            for part in parts[:-1]:\n                try:\n                    os.mkdir(part, dir_fd=parent)\n                except FileExistsError:\n                    pass\n                next_fd = os.open(part, flags, dir_fd=parent)\n                os.close(parent)\n                parent = next_fd\n            name = parts[-1]\n            try:\n                existing = os.stat(name, dir_fd=parent, follow_symlinks=False)\n            except FileNotFoundError:\n                existing = None\n            if existing is not None:\n                if not stat.S_ISREG(existing.st_mode):\n                    raise ValueError('seed destination is not a regular file: ' + path)\n                continue\n            temporary = '.final-seed-' + uuid.uuid4().hex\n            fd = os.open(temporary, os.O_WRONLY | os.O_CREAT | os.O_EXCL | os.O_NOFOLLOW, 0o644, dir_fd=parent)\n            with os.fdopen(fd, 'wb') as output:\n                output.write(content.encode('utf-8'))\n                output.flush()\n                os.fsync(output.fileno())\n            try:\n                os.link(temporary, name, src_dir_fd=parent, dst_dir_fd=parent, follow_symlinks=False)\n            except FileExistsError:\n                if not stat.S_ISREG(os.stat(name, dir_fd=parent, follow_symlinks=False).st_mode):\n                    raise ValueError('seed destination is not a regular file: ' + path)\n        finally:\n            if temporary is not None:\n                os.unlink(temporary, dir_fd=parent)\n            os.close(parent)\n    temporary = '.seed-marker-' + uuid.uuid4().hex\n    marker = os.open(temporary, os.O_WRONLY | os.O_CREAT | os.O_EXCL | os.O_NOFOLLOW, 0o600, dir_fd=state)\n    try:\n        with os.fdopen(marker, 'wb') as output:\n            output.write(b'workspace-seed-v1')\n            output.flush()\n            os.fsync(output.fileno())\n        try:\n            os.link(temporary, 'workspace-seeded', src_dir_fd=state, dst_dir_fd=state, follow_symlinks=False)\n        except FileExistsError:\n            pass\n    finally:\n        os.unlink(temporary, dir_fd=state)\n    os.close(state)\nfinally:\n    os.close(root)\n";
+export declare const materializeSandboxSeeds: (args: {
+    sandbox: Pick<SandboxSessionIface, "run">;
+    root: string;
+    files: Record<string, string>;
+}) => Promise<void>;
+export declare const sandboxSeedArtifactSchema: z.ZodObject<{
+    seedFiles: z.ZodDefault<z.ZodPreprocess<z.ZodPipe<z.ZodArray<z.ZodTuple<[z.ZodString, z.ZodString], null>>, z.ZodTransform<{
+        [k: string]: string;
+    }, [string, string][]>>, unknown>>;
+    seedSourceRevision: z.ZodOptional<z.ZodString>;
+    seedHash: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const sandboxSeedArtifact: (ctx: SandboxPrepareContextIface, files: Record<string, string>) => Promise<z.output<typeof sandboxSeedArtifactSchema>>;
+export declare const sandboxSeedFilesForStart: (ctx: SandboxStartContextIface, artifact: z.output<typeof sandboxSeedArtifactSchema>) => Promise<Record<string, string>>;

package/dist/modules/sandbox/seeds.mjs

@@ -0,0 +1,228 @@
+import * as z from "zod";
+const sandboxPreparationInputs = (files) => {
+  const workspace = /* @__PURE__ */ new Map();
+  const skills = /* @__PURE__ */ new Map();
+  for (const [path, content] of Object.entries(files)) {
+    if (path.startsWith("workspace/")) workspace.set(path.slice("workspace/".length), content);
+    if (!path.startsWith("skills/")) continue;
+    const segments = path.slice("skills/".length).split("/");
+    const key = segments.shift();
+    if (key == null || segments.length === 0) continue;
+    const skill = skills.get(key) ?? /* @__PURE__ */ new Map();
+    skill.set(segments.join("/"), content);
+    skills.set(key, skill);
+  }
+  const resources = {
+    workspace: { files: Object.fromEntries(workspace) },
+    skills: Object.fromEntries(
+      [...skills].map(([key, entries]) => [key, Object.fromEntries(entries)])
+    )
+  };
+  return { files: Object.fromEntries(workspace), resources };
+};
+const skillResourcesSchema = z.record(z.string(), z.record(z.string(), z.string()));
+const MAX_SANDBOX_SEED_BYTES = 8 * 1024 * 1024;
+const sandboxSeedFilesSchema = z.preprocess(
+  (value) => z.record(z.string(), z.unknown()).safeParse(value).success ? Object.entries(value ?? {}) : null,
+  z.array(z.tuple([z.string(), z.string()])).transform((entries) => Object.fromEntries(entries))
+);
+const seedPath = (path) => {
+  if (path === ".final" || path.startsWith(".final/") || path.includes("\\") || path.includes("\0") || path.split("/").some((part) => part === "" || part === "." || part === "..")) {
+    throw new Error(`invalid workspace seed path: ${path}`);
+  }
+  return path;
+};
+const sandboxSeedFiles = (ctx) => {
+  const entries = Object.entries(ctx.files).map(([path, content]) => [
+    seedPath(path),
+    content
+  ]);
+  const skills = ctx.resources.skills ?? {};
+  skillResourcesSchema.parse(skills);
+  const skillEntries = Object.entries(skills);
+  for (const [name, files] of skillEntries) {
+    if (seedPath(name).includes("/")) throw new Error(`invalid skill resource name: ${name}`);
+    z.record(z.string(), z.string()).parse(files);
+    const fileEntries = Object.entries(files ?? {});
+    for (const [path, content] of fileEntries)
+      entries.push([`.agents/skills/${name}/${seedPath(path)}`, z.string().parse(content)]);
+  }
+  const paths = /* @__PURE__ */ new Set();
+  for (const [path] of entries) {
+    if (paths.has(path)) throw new Error(`conflicting workspace seed path: ${path}`);
+    paths.add(path);
+  }
+  for (const path of paths) {
+    const parts = path.split("/");
+    for (let end = 1; end < parts.length; end += 1) {
+      const ancestor = parts.slice(0, end).join("/");
+      if (paths.has(ancestor))
+        throw new Error(`conflicting workspace seed paths: ${ancestor}, ${path}`);
+    }
+  }
+  const encoder = new TextEncoder();
+  let bytes = 0;
+  for (const [path, content] of entries) {
+    if (!path.isWellFormed() || !content.isWellFormed())
+      throw new Error(`workspace seed ${path} must contain valid Unicode text`);
+    bytes += encoder.encode(path).byteLength + encoder.encode(content).byteLength;
+    if (bytes > MAX_SANDBOX_SEED_BYTES)
+      throw new Error("workspace and skill resources exceed the combined 8 MiB limit");
+  }
+  return Object.fromEntries(entries);
+};
+const sandboxSeedIdentity = (files) => JSON.stringify(
+  Object.entries(files).sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0)
+);
+const SANDBOX_SEED_MARKER = "workspace-seeded";
+const SANDBOX_SEED_PROTOCOL = "workspace-seed-v1";
+const SANDBOX_SEED_SCRIPT = `import json, os, stat, sys, uuid
+p = json.load(sys.stdin)
+flags = os.O_RDONLY | os.O_DIRECTORY | os.O_NOFOLLOW
+root = os.open('/', flags)
+try:
+    for part in p['root'].split('/'):
+        if not part:
+            continue
+        if part in ('.', '..'):
+            raise ValueError('invalid workspace root')
+        next_fd = os.open(part, flags, dir_fd=root)
+        os.close(root)
+        root = next_fd
+    try:
+        os.mkdir('.final', dir_fd=root)
+    except FileExistsError:
+        pass
+    state = os.open('.final', flags, dir_fd=root)
+    try:
+        marker = os.open('${SANDBOX_SEED_MARKER}', os.O_RDONLY | os.O_NOFOLLOW | os.O_NONBLOCK, dir_fd=state)
+    except FileNotFoundError:
+        marker = None
+    if marker is not None:
+        try:
+            if not stat.S_ISREG(os.fstat(marker).st_mode) or os.read(marker, 64) != b'${SANDBOX_SEED_PROTOCOL}':
+                raise ValueError('invalid workspace seed marker')
+        finally:
+            os.close(marker)
+            os.close(state)
+        sys.exit(0)
+    for path, content in p['files'].items():
+        parts = path.split('/')
+        if parts[0] == '.final' or any(x in ('', '.', '..') or '\\\\' in x or '\\x00' in x for x in parts):
+            raise ValueError('invalid seed path')
+        parent = os.dup(root)
+        temporary = None
+        try:
+            for part in parts[:-1]:
+                try:
+                    os.mkdir(part, dir_fd=parent)
+                except FileExistsError:
+                    pass
+                next_fd = os.open(part, flags, dir_fd=parent)
+                os.close(parent)
+                parent = next_fd
+            name = parts[-1]
+            try:
+                existing = os.stat(name, dir_fd=parent, follow_symlinks=False)
+            except FileNotFoundError:
+                existing = None
+            if existing is not None:
+                if not stat.S_ISREG(existing.st_mode):
+                    raise ValueError('seed destination is not a regular file: ' + path)
+                continue
+            temporary = '.final-seed-' + uuid.uuid4().hex
+            fd = os.open(temporary, os.O_WRONLY | os.O_CREAT | os.O_EXCL | os.O_NOFOLLOW, 0o644, dir_fd=parent)
+            with os.fdopen(fd, 'wb') as output:
+                output.write(content.encode('utf-8'))
+                output.flush()
+                os.fsync(output.fileno())
+            try:
+                os.link(temporary, name, src_dir_fd=parent, dst_dir_fd=parent, follow_symlinks=False)
+            except FileExistsError:
+                if not stat.S_ISREG(os.stat(name, dir_fd=parent, follow_symlinks=False).st_mode):
+                    raise ValueError('seed destination is not a regular file: ' + path)
+        finally:
+            if temporary is not None:
+                os.unlink(temporary, dir_fd=parent)
+            os.close(parent)
+    temporary = '.seed-marker-' + uuid.uuid4().hex
+    marker = os.open(temporary, os.O_WRONLY | os.O_CREAT | os.O_EXCL | os.O_NOFOLLOW, 0o600, dir_fd=state)
+    try:
+        with os.fdopen(marker, 'wb') as output:
+            output.write(b'${SANDBOX_SEED_PROTOCOL}')
+            output.flush()
+            os.fsync(output.fileno())
+        try:
+            os.link(temporary, '${SANDBOX_SEED_MARKER}', src_dir_fd=state, dst_dir_fd=state, follow_symlinks=False)
+        except FileExistsError:
+            pass
+    finally:
+        os.unlink(temporary, dir_fd=state)
+    os.close(state)
+finally:
+    os.close(root)
+`;
+const materializeSandboxSeeds = async (args) => {
+  if (Object.keys(args.files).length === 0) return;
+  if (!args.root.startsWith("/")) throw new Error("workspace seed root must be absolute");
+  const result = await args.sandbox.run({
+    command: "python3",
+    args: ["-c", SANDBOX_SEED_SCRIPT],
+    cwd: "/",
+    stdin: new ReadableStream({
+      start: (controller) => {
+        const bytes = new TextEncoder().encode(
+          JSON.stringify({ root: args.root, files: args.files })
+        );
+        for (let offset = 0; offset < bytes.byteLength; offset += 64 * 1024)
+          controller.enqueue(bytes.subarray(offset, offset + 64 * 1024));
+        controller.close();
+      }
+    }),
+    timeoutMs: 6e4
+  });
+  if (result.exitCode !== 0)
+    throw new Error(`workspace seeding failed: ${result.stderr.trim().slice(-2e3)}`);
+};
+const sandboxSeedArtifactSchema = z.object({
+  seedFiles: sandboxSeedFilesSchema.default({}),
+  seedSourceRevision: z.string().optional(),
+  seedHash: z.string().optional()
+});
+const seedHash = async (files) => {
+  const digest = await crypto.subtle.digest(
+    "SHA-256",
+    new TextEncoder().encode(sandboxSeedIdentity(files))
+  );
+  return [...new Uint8Array(digest)].map((byte) => byte.toString(16).padStart(2, "0")).join("");
+};
+const sandboxSeedArtifact = async (ctx, files) => {
+  if (ctx.preparation == null || Object.keys(files).length === 0) return { seedFiles: files };
+  if (ctx.preparation.sourceRevision !== ctx.sourceRevision)
+    throw new Error("preparation resource revision does not match");
+  return { seedFiles: {}, seedSourceRevision: ctx.sourceRevision, seedHash: await seedHash(files) };
+};
+const sandboxSeedFilesForStart = async (ctx, artifact) => {
+  if (artifact.seedSourceRevision == null) return artifact.seedFiles;
+  if (ctx.preparation?.sourceRevision !== artifact.seedSourceRevision)
+    throw new Error("pinned sandbox seed resource source is unavailable");
+  const files = sandboxSeedFiles(await ctx.preparation.read());
+  if (artifact.seedHash == null || await seedHash(files) !== artifact.seedHash)
+    throw new Error("pinned sandbox seed resource identity does not match the artifact");
+  return files;
+};
+export {
+  MAX_SANDBOX_SEED_BYTES,
+  SANDBOX_SEED_MARKER,
+  SANDBOX_SEED_PROTOCOL,
+  SANDBOX_SEED_SCRIPT,
+  materializeSandboxSeeds,
+  sandboxPreparationInputs,
+  sandboxSeedArtifact,
+  sandboxSeedArtifactSchema,
+  sandboxSeedFiles,
+  sandboxSeedFilesForStart,
+  sandboxSeedFilesSchema,
+  sandboxSeedIdentity
+};
+//# sourceMappingURL=seeds.mjs.map

package/dist/modules/sandbox/seeds.mjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/sandbox/seeds.ts"],
+  "sourcesContent": ["import * as z from 'zod';\nimport type { JsonValue } from \"../json.mjs\";\nimport type {\n  SandboxPrepareContextIface,\n  SandboxSessionIface,\n  SandboxStartContextIface,\n} from \"./types.mjs\";\n\nexport const sandboxPreparationInputs = (\n  files: Record<string, string>,\n): Pick<SandboxPrepareContextIface, 'files' | 'resources'> => {\n  const workspace = new Map<string, string>();\n  const skills = new Map<string, Map<string, string>>();\n  for (const [path, content] of Object.entries(files)) {\n    if (path.startsWith('workspace/')) workspace.set(path.slice('workspace/'.length), content);\n    if (!path.startsWith('skills/')) continue;\n    const segments = path.slice('skills/'.length).split('/');\n    const key = segments.shift();\n    if (key == null || segments.length === 0) continue;\n    const skill = skills.get(key) ?? new Map<string, string>();\n    skill.set(segments.join('/'), content);\n    skills.set(key, skill);\n  }\n  const resources = {\n    workspace: { files: Object.fromEntries(workspace) },\n    skills: Object.fromEntries(\n      [...skills].map(([key, entries]) => [key, Object.fromEntries(entries)]),\n    ),\n  } satisfies Record<string, JsonValue>;\n  return { files: Object.fromEntries(workspace), resources };\n};\nconst skillResourcesSchema = z.record(z.string(), z.record(z.string(), z.string()));\nexport const MAX_SANDBOX_SEED_BYTES = 8 * 1024 * 1024;\nexport const sandboxSeedFilesSchema = z.preprocess(\n  (value) =>\n    z.record(z.string(), z.unknown()).safeParse(value).success ? Object.entries(value ?? {}) : null,\n  z.array(z.tuple([z.string(), z.string()])).transform((entries) => Object.fromEntries(entries)),\n);\n\nconst seedPath = (path: string): string => {\n  if (\n    path === '.final' ||\n    path.startsWith('.final/') ||\n    path.includes('\\\\') ||\n    path.includes('\\0') ||\n    path.split('/').some((part) => part === '' || part === '.' || part === '..')\n  ) {\n    throw new Error(`invalid workspace seed path: ${path}`);\n  }\n  return path;\n};\n\n// Skills remain harness config; their auxiliary files are also available in the workspace.\nexport const sandboxSeedFiles = (\n  ctx: Pick<SandboxPrepareContextIface, 'files' | 'resources'>,\n): Record<string, string> => {\n  const entries: [string, string][] = Object.entries(ctx.files).map(([path, content]) => [\n    seedPath(path),\n    content,\n  ]);\n  const skills = ctx.resources.skills ?? {};\n  skillResourcesSchema.parse(skills);\n  // Zod dictionaries omit __proto__; validate values while retaining literal filenames.\n  const skillEntries: [string, unknown][] = Object.entries(skills);\n  for (const [name, files] of skillEntries) {\n    if (seedPath(name).includes('/')) throw new Error(`invalid skill resource name: ${name}`);\n    z.record(z.string(), z.string()).parse(files);\n    const fileEntries: [string, unknown][] = Object.entries(files ?? {});\n    for (const [path, content] of fileEntries)\n      entries.push([`.agents/skills/${name}/${seedPath(path)}`, z.string().parse(content)]);\n  }\n  const paths = new Set<string>();\n  for (const [path] of entries) {\n    if (paths.has(path)) throw new Error(`conflicting workspace seed path: ${path}`);\n    paths.add(path);\n  }\n  for (const path of paths) {\n    const parts = path.split('/');\n    for (let end = 1; end < parts.length; end += 1) {\n      const ancestor = parts.slice(0, end).join('/');\n      if (paths.has(ancestor))\n        throw new Error(`conflicting workspace seed paths: ${ancestor}, ${path}`);\n    }\n  }\n  const encoder = new TextEncoder();\n  let bytes = 0;\n  for (const [path, content] of entries) {\n    if (!path.isWellFormed() || !content.isWellFormed())\n      throw new Error(`workspace seed ${path} must contain valid Unicode text`);\n    bytes += encoder.encode(path).byteLength + encoder.encode(content).byteLength;\n    if (bytes > MAX_SANDBOX_SEED_BYTES)\n      throw new Error('workspace and skill resources exceed the combined 8 MiB limit');\n  }\n  return Object.fromEntries(entries);\n};\n\nexport const sandboxSeedIdentity = (files: Record<string, string>): string =>\n  JSON.stringify(\n    Object.entries(files).sort(([left], [right]) => (left < right ? -1 : left > right ? 1 : 0)),\n  );\n\n// As with confined reads, Python 3 is required. Directory descriptors pin every\n// ancestor; link publishes a complete file without replacing existing content.\nexport const SANDBOX_SEED_MARKER = 'workspace-seeded';\nexport const SANDBOX_SEED_PROTOCOL = 'workspace-seed-v1';\nexport const SANDBOX_SEED_SCRIPT = `import json, os, stat, sys, uuid\np = json.load(sys.stdin)\nflags = os.O_RDONLY | os.O_DIRECTORY | os.O_NOFOLLOW\nroot = os.open('/', flags)\ntry:\n    for part in p['root'].split('/'):\n        if not part:\n            continue\n        if part in ('.', '..'):\n            raise ValueError('invalid workspace root')\n        next_fd = os.open(part, flags, dir_fd=root)\n        os.close(root)\n        root = next_fd\n    try:\n        os.mkdir('.final', dir_fd=root)\n    except FileExistsError:\n        pass\n    state = os.open('.final', flags, dir_fd=root)\n    try:\n        marker = os.open('${SANDBOX_SEED_MARKER}', os.O_RDONLY | os.O_NOFOLLOW | os.O_NONBLOCK, dir_fd=state)\n    except FileNotFoundError:\n        marker = None\n    if marker is not None:\n        try:\n            if not stat.S_ISREG(os.fstat(marker).st_mode) or os.read(marker, 64) != b'${SANDBOX_SEED_PROTOCOL}':\n                raise ValueError('invalid workspace seed marker')\n        finally:\n            os.close(marker)\n            os.close(state)\n        sys.exit(0)\n    for path, content in p['files'].items():\n        parts = path.split('/')\n        if parts[0] == '.final' or any(x in ('', '.', '..') or '\\\\\\\\' in x or '\\\\x00' in x for x in parts):\n            raise ValueError('invalid seed path')\n        parent = os.dup(root)\n        temporary = None\n        try:\n            for part in parts[:-1]:\n                try:\n                    os.mkdir(part, dir_fd=parent)\n                except FileExistsError:\n                    pass\n                next_fd = os.open(part, flags, dir_fd=parent)\n                os.close(parent)\n                parent = next_fd\n            name = parts[-1]\n            try:\n                existing = os.stat(name, dir_fd=parent, follow_symlinks=False)\n            except FileNotFoundError:\n                existing = None\n            if existing is not None:\n                if not stat.S_ISREG(existing.st_mode):\n                    raise ValueError('seed destination is not a regular file: ' + path)\n                continue\n            temporary = '.final-seed-' + uuid.uuid4().hex\n            fd = os.open(temporary, os.O_WRONLY | os.O_CREAT | os.O_EXCL | os.O_NOFOLLOW, 0o644, dir_fd=parent)\n            with os.fdopen(fd, 'wb') as output:\n                output.write(content.encode('utf-8'))\n                output.flush()\n                os.fsync(output.fileno())\n            try:\n                os.link(temporary, name, src_dir_fd=parent, dst_dir_fd=parent, follow_symlinks=False)\n            except FileExistsError:\n                if not stat.S_ISREG(os.stat(name, dir_fd=parent, follow_symlinks=False).st_mode):\n                    raise ValueError('seed destination is not a regular file: ' + path)\n        finally:\n            if temporary is not None:\n                os.unlink(temporary, dir_fd=parent)\n            os.close(parent)\n    temporary = '.seed-marker-' + uuid.uuid4().hex\n    marker = os.open(temporary, os.O_WRONLY | os.O_CREAT | os.O_EXCL | os.O_NOFOLLOW, 0o600, dir_fd=state)\n    try:\n        with os.fdopen(marker, 'wb') as output:\n            output.write(b'${SANDBOX_SEED_PROTOCOL}')\n            output.flush()\n            os.fsync(output.fileno())\n        try:\n            os.link(temporary, '${SANDBOX_SEED_MARKER}', src_dir_fd=state, dst_dir_fd=state, follow_symlinks=False)\n        except FileExistsError:\n            pass\n    finally:\n        os.unlink(temporary, dir_fd=state)\n    os.close(state)\nfinally:\n    os.close(root)\n`;\n\nexport const materializeSandboxSeeds = async (args: {\n  sandbox: Pick<SandboxSessionIface, 'run'>;\n  root: string;\n  files: Record<string, string>;\n}): Promise<void> => {\n  if (Object.keys(args.files).length === 0) return;\n  if (!args.root.startsWith('/')) throw new Error('workspace seed root must be absolute');\n  const result = await args.sandbox.run({\n    command: 'python3',\n    args: ['-c', SANDBOX_SEED_SCRIPT],\n    cwd: '/',\n    stdin: new ReadableStream<Uint8Array>({\n      start: (controller) => {\n        const bytes = new TextEncoder().encode(\n          JSON.stringify({ root: args.root, files: args.files }),\n        );\n        for (let offset = 0; offset < bytes.byteLength; offset += 64 * 1024)\n          controller.enqueue(bytes.subarray(offset, offset + 64 * 1024));\n        controller.close();\n      },\n    }),\n    timeoutMs: 60_000,\n  });\n  if (result.exitCode !== 0)\n    throw new Error(`workspace seeding failed: ${result.stderr.trim().slice(-2000)}`);\n};\n\nexport const sandboxSeedArtifactSchema = z.object({\n  seedFiles: sandboxSeedFilesSchema.default({}),\n  seedSourceRevision: z.string().optional(),\n  seedHash: z.string().optional(),\n});\n\nconst seedHash = async (files: Record<string, string>): Promise<string> => {\n  const digest = await crypto.subtle.digest(\n    'SHA-256',\n    new TextEncoder().encode(sandboxSeedIdentity(files)),\n  );\n  return [...new Uint8Array(digest)].map((byte) => byte.toString(16).padStart(2, '0')).join('');\n};\n\nexport const sandboxSeedArtifact = async (\n  ctx: SandboxPrepareContextIface,\n  files: Record<string, string>,\n): Promise<z.output<typeof sandboxSeedArtifactSchema>> => {\n  if (ctx.preparation == null || Object.keys(files).length === 0) return { seedFiles: files };\n  if (ctx.preparation.sourceRevision !== ctx.sourceRevision)\n    throw new Error('preparation resource revision does not match');\n  return { seedFiles: {}, seedSourceRevision: ctx.sourceRevision, seedHash: await seedHash(files) };\n};\n\nexport const sandboxSeedFilesForStart = async (\n  ctx: SandboxStartContextIface,\n  artifact: z.output<typeof sandboxSeedArtifactSchema>,\n): Promise<Record<string, string>> => {\n  if (artifact.seedSourceRevision == null) return artifact.seedFiles;\n  if (ctx.preparation?.sourceRevision !== artifact.seedSourceRevision)\n    throw new Error('pinned sandbox seed resource source is unavailable');\n  const files = sandboxSeedFiles(await ctx.preparation.read());\n  if (artifact.seedHash == null || (await seedHash(files)) !== artifact.seedHash)\n    throw new Error('pinned sandbox seed resource identity does not match the artifact');\n  return files;\n};\n"],
+  "mappings": "AAAA,YAAY,OAAO;AAQZ,MAAM,2BAA2B,CACtC,UAC4D;AAC5D,QAAM,YAAY,oBAAI,IAAoB;AAC1C,QAAM,SAAS,oBAAI,IAAiC;AACpD,aAAW,CAAC,MAAM,OAAO,KAAK,OAAO,QAAQ,KAAK,GAAG;AACnD,QAAI,KAAK,WAAW,YAAY,EAAG,WAAU,IAAI,KAAK,MAAM,aAAa,MAAM,GAAG,OAAO;AACzF,QAAI,CAAC,KAAK,WAAW,SAAS,EAAG;AACjC,UAAM,WAAW,KAAK,MAAM,UAAU,MAAM,EAAE,MAAM,GAAG;AACvD,UAAM,MAAM,SAAS,MAAM;AAC3B,QAAI,OAAO,QAAQ,SAAS,WAAW,EAAG;AAC1C,UAAM,QAAQ,OAAO,IAAI,GAAG,KAAK,oBAAI,IAAoB;AACzD,UAAM,IAAI,SAAS,KAAK,GAAG,GAAG,OAAO;AACrC,WAAO,IAAI,KAAK,KAAK;AAAA,EACvB;AACA,QAAM,YAAY;AAAA,IAChB,WAAW,EAAE,OAAO,OAAO,YAAY,SAAS,EAAE;AAAA,IAClD,QAAQ,OAAO;AAAA,MACb,CAAC,GAAG,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,OAAO,MAAM,CAAC,KAAK,OAAO,YAAY,OAAO,CAAC,CAAC;AAAA,IACxE;AAAA,EACF;AACA,SAAO,EAAE,OAAO,OAAO,YAAY,SAAS,GAAG,UAAU;AAC3D;AACA,MAAM,uBAAuB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC;AAC3E,MAAM,yBAAyB,IAAI,OAAO;AAC1C,MAAM,yBAAyB,EAAE;AAAA,EACtC,CAAC,UACC,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,UAAU,KAAK,EAAE,UAAU,OAAO,QAAQ,SAAS,CAAC,CAAC,IAAI;AAAA,EAC7F,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,YAAY,OAAO,YAAY,OAAO,CAAC;AAC/F;AAEA,MAAM,WAAW,CAAC,SAAyB;AACzC,MACE,SAAS,YACT,KAAK,WAAW,SAAS,KACzB,KAAK,SAAS,IAAI,KAClB,KAAK,SAAS,IAAI,KAClB,KAAK,MAAM,GAAG,EAAE,KAAK,CAAC,SAAS,SAAS,MAAM,SAAS,OAAO,SAAS,IAAI,GAC3E;AACA,UAAM,IAAI,MAAM,gCAAgC,IAAI,EAAE;AAAA,EACxD;AACA,SAAO;AACT;AAGO,MAAM,mBAAmB,CAC9B,QAC2B;AAC3B,QAAM,UAA8B,OAAO,QAAQ,IAAI,KAAK,EAAE,IAAI,CAAC,CAAC,MAAM,OAAO,MAAM;AAAA,IACrF,SAAS,IAAI;AAAA,IACb;AAAA,EACF,CAAC;AACD,QAAM,SAAS,IAAI,UAAU,UAAU,CAAC;AACxC,uBAAqB,MAAM,MAAM;AAEjC,QAAM,eAAoC,OAAO,QAAQ,MAAM;AAC/D,aAAW,CAAC,MAAM,KAAK,KAAK,cAAc;AACxC,QAAI,SAAS,IAAI,EAAE,SAAS,GAAG,EAAG,OAAM,IAAI,MAAM,gCAAgC,IAAI,EAAE;AACxF,MAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK;AAC5C,UAAM,cAAmC,OAAO,QAAQ,SAAS,CAAC,CAAC;AACnE,eAAW,CAAC,MAAM,OAAO,KAAK;AAC5B,cAAQ,KAAK,CAAC,kBAAkB,IAAI,IAAI,SAAS,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC,CAAC;AAAA,EACxF;AACA,QAAM,QAAQ,oBAAI,IAAY;AAC9B,aAAW,CAAC,IAAI,KAAK,SAAS;AAC5B,QAAI,MAAM,IAAI,IAAI,EAAG,OAAM,IAAI,MAAM,oCAAoC,IAAI,EAAE;AAC/E,UAAM,IAAI,IAAI;AAAA,EAChB;AACA,aAAW,QAAQ,OAAO;AACxB,UAAM,QAAQ,KAAK,MAAM,GAAG;AAC5B,aAAS,MAAM,GAAG,MAAM,MAAM,QAAQ,OAAO,GAAG;AAC9C,YAAM,WAAW,MAAM,MAAM,GAAG,GAAG,EAAE,KAAK,GAAG;AAC7C,UAAI,MAAM,IAAI,QAAQ;AACpB,cAAM,IAAI,MAAM,qCAAqC,QAAQ,KAAK,IAAI,EAAE;AAAA,IAC5E;AAAA,EACF;AACA,QAAM,UAAU,IAAI,YAAY;AAChC,MAAI,QAAQ;AACZ,aAAW,CAAC,MAAM,OAAO,KAAK,SAAS;AACrC,QAAI,CAAC,KAAK,aAAa,KAAK,CAAC,QAAQ,aAAa;AAChD,YAAM,IAAI,MAAM,kBAAkB,IAAI,kCAAkC;AAC1E,aAAS,QAAQ,OAAO,IAAI,EAAE,aAAa,QAAQ,OAAO,OAAO,EAAE;AACnE,QAAI,QAAQ;AACV,YAAM,IAAI,MAAM,+DAA+D;AAAA,EACnF;AACA,SAAO,OAAO,YAAY,OAAO;AACnC;AAEO,MAAM,sBAAsB,CAAC,UAClC,KAAK;AAAA,EACH,OAAO,QAAQ,KAAK,EAAE,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,MAAO,OAAO,QAAQ,KAAK,OAAO,QAAQ,IAAI,CAAE;AAC5F;AAIK,MAAM,sBAAsB;AAC5B,MAAM,wBAAwB;AAC9B,MAAM,sBAAsB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,4BAmBP,mBAAmB;AAAA;AAAA;AAAA;AAAA;AAAA,wFAKyC,qBAAqB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,6BAiDhF,qBAAqB;AAAA;AAAA;AAAA;AAAA,kCAIhB,mBAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAU9C,MAAM,0BAA0B,OAAO,SAIzB;AACnB,MAAI,OAAO,KAAK,KAAK,KAAK,EAAE,WAAW,EAAG;AAC1C,MAAI,CAAC,KAAK,KAAK,WAAW,GAAG,EAAG,OAAM,IAAI,MAAM,sCAAsC;AACtF,QAAM,SAAS,MAAM,KAAK,QAAQ,IAAI;AAAA,IACpC,SAAS;AAAA,IACT,MAAM,CAAC,MAAM,mBAAmB;AAAA,IAChC,KAAK;AAAA,IACL,OAAO,IAAI,eAA2B;AAAA,MACpC,OAAO,CAAC,eAAe;AACrB,cAAM,QAAQ,IAAI,YAAY,EAAE;AAAA,UAC9B,KAAK,UAAU,EAAE,MAAM,KAAK,MAAM,OAAO,KAAK,MAAM,CAAC;AAAA,QACvD;AACA,iBAAS,SAAS,GAAG,SAAS,MAAM,YAAY,UAAU,KAAK;AAC7D,qBAAW,QAAQ,MAAM,SAAS,QAAQ,SAAS,KAAK,IAAI,CAAC;AAC/D,mBAAW,MAAM;AAAA,MACnB;AAAA,IACF,CAAC;AAAA,IACD,WAAW;AAAA,EACb,CAAC;AACD,MAAI,OAAO,aAAa;AACtB,UAAM,IAAI,MAAM,6BAA6B,OAAO,OAAO,KAAK,EAAE,MAAM,IAAK,CAAC,EAAE;AACpF;AAEO,MAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,WAAW,uBAAuB,QAAQ,CAAC,CAAC;AAAA,EAC5C,oBAAoB,EAAE,OAAO,EAAE,SAAS;AAAA,EACxC,UAAU,EAAE,OAAO,EAAE,SAAS;AAChC,CAAC;AAED,MAAM,WAAW,OAAO,UAAmD;AACzE,QAAM,SAAS,MAAM,OAAO,OAAO;AAAA,IACjC;AAAA,IACA,IAAI,YAAY,EAAE,OAAO,oBAAoB,KAAK,CAAC;AAAA,EACrD;AACA,SAAO,CAAC,GAAG,IAAI,WAAW,MAAM,CAAC,EAAE,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AAC9F;AAEO,MAAM,sBAAsB,OACjC,KACA,UACwD;AACxD,MAAI,IAAI,eAAe,QAAQ,OAAO,KAAK,KAAK,EAAE,WAAW,EAAG,QAAO,EAAE,WAAW,MAAM;AAC1F,MAAI,IAAI,YAAY,mBAAmB,IAAI;AACzC,UAAM,IAAI,MAAM,8CAA8C;AAChE,SAAO,EAAE,WAAW,CAAC,GAAG,oBAAoB,IAAI,gBAAgB,UAAU,MAAM,SAAS,KAAK,EAAE;AAClG;AAEO,MAAM,2BAA2B,OACtC,KACA,aACoC;AACpC,MAAI,SAAS,sBAAsB,KAAM,QAAO,SAAS;AACzD,MAAI,IAAI,aAAa,mBAAmB,SAAS;AAC/C,UAAM,IAAI,MAAM,oDAAoD;AACtE,QAAM,QAAQ,iBAAiB,MAAM,IAAI,YAAY,KAAK,CAAC;AAC3D,MAAI,SAAS,YAAY,QAAS,MAAM,SAAS,KAAK,MAAO,SAAS;AACpE,UAAM,IAAI,MAAM,mEAAmE;AACrF,SAAO;AACT;",
+  "names": []
+}