@galaxy-stack/ai-coder-core 0.3.0-alpha.1 → 0.3.0-alpha.7

package/dist/adapters/node/host/file-run-store.js

@@ -0,0 +1,94 @@
+import { assertAiCoderRunCheckpoint, } from "../../../index.js";
+import { randomUUID } from "node:crypto";
+import { lstat, mkdir, readFile, realpath, rename, unlink, writeFile } from "node:fs/promises";
+import { basename, join, resolve } from "node:path";
+import { sha256Text } from "./content-hash.js";
+function assertActive(context) {
+    if (context.signal.aborted)
+        throw context.signal.reason ?? new Error("Run-store operation was canceled.");
+    if (Date.now() >= context.deadline)
+        throw new Error("Run-store operation deadline elapsed.");
+}
+async function writeJsonAtomically(path, value) {
+    const temporary = join(resolve(path, ".."), `.${basename(path)}.${process.pid}.${randomUUID()}.tmp`);
+    try {
+        await writeFile(temporary, `${JSON.stringify(value)}\n`, { encoding: "utf8", flag: "wx", mode: 0o600 });
+        await rename(temporary, path);
+    }
+    finally {
+        await unlink(temporary).catch((error) => {
+            if (error.code !== "ENOENT")
+                throw error;
+        });
+    }
+}
+/**
+ * Minimal durable host store for the CLI laboratory. The configured directory
+ * must be outside model-writable workspace roots in production hosts.
+ */
+export class FileRunStore {
+    root;
+    checkpointTrust = "trusted_host";
+    constructor(root) {
+        this.root = root;
+    }
+    static async create(root) {
+        const target = resolve(root);
+        await mkdir(target, { recursive: true, mode: 0o700 });
+        const info = await lstat(target);
+        if (!info.isDirectory() || info.isSymbolicLink()) {
+            throw new Error("FileRunStore root must be a real directory.");
+        }
+        return new FileRunStore(await realpath(target));
+    }
+    async runDirectory(runId) {
+        const directory = join(this.root, sha256Text(runId));
+        await mkdir(directory, { recursive: true, mode: 0o700 });
+        const info = await lstat(directory);
+        if (!info.isDirectory() || info.isSymbolicLink()) {
+            throw new Error("FileRunStore run path must be a real directory.");
+        }
+        return directory;
+    }
+    async loadLatestCheckpoint(runId, context) {
+        assertActive(context);
+        const path = join(await this.runDirectory(runId), "checkpoint.json");
+        let raw;
+        try {
+            raw = await readFile(path, "utf8");
+        }
+        catch (error) {
+            if (error.code === "ENOENT")
+                return null;
+            throw error;
+        }
+        assertActive(context);
+        return assertAiCoderRunCheckpoint(JSON.parse(raw));
+    }
+    async saveCheckpoint(checkpoint, context) {
+        assertActive(context);
+        const verified = await assertAiCoderRunCheckpoint(checkpoint);
+        const directory = await this.runDirectory(verified.runId);
+        await writeJsonAtomically(join(directory, "checkpoint.json"), verified);
+        assertActive(context);
+        return Object.freeze({ artifactRef: `galaxy-checkpoint://${sha256Text(verified.runId)}/${verified.contentHash}` });
+    }
+    async saveFinalReport(report, context) {
+        assertActive(context);
+        const directory = await this.runDirectory(report.runId);
+        await writeJsonAtomically(join(directory, "final-report.json"), report);
+        assertActive(context);
+    }
+    async loadFinalReport(runId) {
+        const path = join(await this.runDirectory(runId), "final-report.json");
+        try {
+            return JSON.parse(await readFile(path, "utf8"));
+        }
+        catch (error) {
+            if (error.code === "ENOENT")
+                return null;
+            throw error;
+        }
+    }
+}
+//# sourceMappingURL=file-run-store.js.map

package/dist/adapters/node/host/file-run-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-run-store.js","sourceRoot":"","sources":["../../../../src/adapters/node/host/file-run-store.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,GAE3B,MAAM,mBAAmB,CAAC;AAK3B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC/F,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/C,SAAS,YAAY,CAAC,OAA4D;IAChF,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC1G,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;AAC/F,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAY,EAAE,KAAc;IAC7D,MAAM,SAAS,GAAG,IAAI,CACpB,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,EACnB,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CACxD,CAAC;IACF,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACxG,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC/C,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QACtE,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,YAAY;IAGc;IAF5B,eAAe,GAAG,cAAuB,CAAC;IAEnD,YAAqC,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;IAAG,CAAC;IAErD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAY;QAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,IAAI,YAAY,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,KAAa;QACtC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QACrD,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,KAAa,EACb,OAA4D;QAE5D,YAAY,CAAC,OAAO,CAAC,CAAC;QACtB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,iBAAiB,CAAC,CAAC;QACrE,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACpE,MAAM,KAAK,CAAC;QACd,CAAC;QACD,YAAY,CAAC,OAAO,CAAC,CAAC;QACtB,OAAO,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,UAAgC,EAChC,OAA4D;QAE5D,YAAY,CAAC,OAAO,CAAC,CAAC;QACtB,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,UAAU,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC1D,MAAM,mBAAmB,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,EAAE,QAAQ,CAAC,CAAC;QACxE,YAAY,CAAC,OAAO,CAAC,CAAC;QACtB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,uBAAuB,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACrH,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,MAA0B,EAC1B,OAA4D;QAE5D,YAAY,CAAC,OAAO,CAAC,CAAC;QACtB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxD,MAAM,mBAAmB,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,EAAE,MAAM,CAAC,CAAC;QACxE,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,KAAa;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,mBAAmB,CAAC,CAAC;QACvE,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAuB,CAAC;QACxE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACpE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF"}

package/dist/adapters/node/host/host-environment.d.ts

@@ -0,0 +1,9 @@
+import type { AiCoderHostEnvironment } from "../../../index.js";
+/**
+ * Resolve the exact interpreter contract used by NodeCommandPort.
+ *
+ * This is deliberately independent of the user's login shell. The same frozen
+ * value is exposed to the model and used to build the child-process argv.
+ */
+export declare function nodeCommandHostEnvironment(platform?: NodeJS.Platform, architecture?: string): AiCoderHostEnvironment;
+//# sourceMappingURL=host-environment.d.ts.map

package/dist/adapters/node/host/host-environment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-environment.d.ts","sourceRoot":"","sources":["../../../../src/adapters/node/host/host-environment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAEhE;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAC5C,YAAY,GAAE,MAAqB,GAClC,sBAAsB,CAqBxB"}

package/dist/adapters/node/host/host-environment.js

@@ -0,0 +1,29 @@
+/**
+ * Resolve the exact interpreter contract used by NodeCommandPort.
+ *
+ * This is deliberately independent of the user's login shell. The same frozen
+ * value is exposed to the model and used to build the child-process argv.
+ */
+export function nodeCommandHostEnvironment(platform = process.platform, architecture = process.arch) {
+    if (platform !== "darwin" && platform !== "linux" && platform !== "win32") {
+        throw Object.assign(new Error(`run_command is not supported on platform '${platform}'.`), {
+            code: "UNAVAILABLE",
+        });
+    }
+    const windows = platform === "win32";
+    return Object.freeze({
+        architecture: architecture.trim() || "unknown",
+        command: Object.freeze({
+            argumentsPrefix: Object.freeze(windows ? ["/d", "/s", "/v:off", "/c"] : ["-c"]),
+            commandMode: "shell_string",
+            executable: windows ? "cmd.exe" : "/bin/sh",
+            interactive: false,
+            pathStyle: windows ? "windows" : "posix",
+            shell: windows ? "cmd" : "sh",
+            stdin: "closed",
+            tty: false,
+        }),
+        operatingSystem: platform,
+    });
+}
+//# sourceMappingURL=host-environment.js.map

package/dist/adapters/node/host/host-environment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-environment.js","sourceRoot":"","sources":["../../../../src/adapters/node/host/host-environment.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CACxC,WAA4B,OAAO,CAAC,QAAQ,EAC5C,eAAuB,OAAO,CAAC,IAAI;IAEnC,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC1E,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,6CAA6C,QAAQ,IAAI,CAAC,EAAE;YACxF,IAAI,EAAE,aAAa;SACpB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,KAAK,OAAO,CAAC;IACrC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,YAAY,EAAE,YAAY,CAAC,IAAI,EAAE,IAAI,SAAS;QAC9C,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;YACrB,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC/E,WAAW,EAAE,cAAc;YAC3B,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YAC3C,WAAW,EAAE,KAAK;YAClB,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;YACxC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;YAC7B,KAAK,EAAE,QAAQ;YACf,GAAG,EAAE,KAAK;SACX,CAAC;QACF,eAAe,EAAE,QAAQ;KAC1B,CAAC,CAAC;AACL,CAAC"}

package/dist/adapters/node/host/node-command-port.d.ts

@@ -0,0 +1,21 @@
+import type { CommandRunnerPort, CommandRunResult, PortResult, ToolExecutionContext } from "../../../ports/index.js";
+import { type CommandContainmentMode, type CommandContainmentProbeResult, type CommandContainmentStatus } from "./command-containment.js";
+import { nodeCommandHostEnvironment } from "./host-environment.js";
+export declare class NodeCommandPort implements CommandRunnerPort {
+    private readonly scope;
+    readonly containmentStatus: CommandContainmentStatus;
+    readonly hostEnvironment: ReturnType<typeof nodeCommandHostEnvironment>;
+    private constructor();
+    static create(workspaceRoot: string, options?: Readonly<{
+        containment?: CommandContainmentMode;
+    }>): Promise<NodeCommandPort>;
+    static probeContainment(): Promise<CommandContainmentProbeResult>;
+    run(input: Readonly<{
+        command: string;
+        cwd?: string;
+        env?: Readonly<Record<string, string>>;
+        maxOutputBytes?: number;
+        timeoutMs?: number;
+    }>, context: ToolExecutionContext): Promise<PortResult<CommandRunResult>>;
+}
+//# sourceMappingURL=node-command-port.d.ts.map

package/dist/adapters/node/host/node-command-port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-command-port.d.ts","sourceRoot":"","sources":["../../../../src/adapters/node/host/node-command-port.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,gBAAgB,EAGhB,UAAU,EACV,oBAAoB,EACrB,MAAM,yBAAyB,CAAC;AAIjC,OAAO,EAKL,KAAK,sBAAsB,EAC3B,KAAK,6BAA6B,EAClC,KAAK,wBAAwB,EAC9B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAgHnE,qBAAa,eAAgB,YAAW,iBAAiB;IAErD,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,QAAQ,CAAC,iBAAiB,EAAE,wBAAwB;IACpD,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAC,OAAO,0BAA0B,CAAC;IAHzE,OAAO;WAMM,MAAM,CACjB,aAAa,EAAE,MAAM,EACrB,OAAO,GAAE,QAAQ,CAAC;QAAE,WAAW,CAAC,EAAE,sBAAsB,CAAA;KAAE,CAAM,GAC/D,OAAO,CAAC,eAAe,CAAC;WAYd,gBAAgB,IAAI,OAAO,CAAC,6BAA6B,CAAC;IAIjE,GAAG,CACP,KAAK,EAAE,QAAQ,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACvC,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC,EACF,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;CA2IzC"}

package/dist/adapters/node/host/node-command-port.js

@@ -0,0 +1,281 @@
+import { spawn } from "node:child_process";
+import { lstat } from "node:fs/promises";
+import { assertWorkspaceHasNoHardLinks, buildBubblewrapArguments, containmentStatus, probeCommandContainment, } from "./command-containment.js";
+import { nodeCommandHostEnvironment } from "./host-environment.js";
+import { WorkspaceScope } from "./path-scope.js";
+const DEFAULT_TIMEOUT_MS = 120_000;
+const DEFAULT_MAX_OUTPUT_BYTES = 256 * 1024;
+const MAX_OUTPUT_BYTES = 4 * 1024 * 1024;
+function failure(code, message, retryable = false) {
+    return Object.freeze({ ok: false, error: Object.freeze({ code, message, retryable }) });
+}
+class TailBuffer {
+    maxBytes;
+    value = Buffer.alloc(0);
+    didTruncate = false;
+    constructor(maxBytes) {
+        this.maxBytes = maxBytes;
+    }
+    append(chunk) {
+        const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk, "utf8");
+        const combined = Buffer.concat([this.value, buffer]);
+        if (combined.length > this.maxBytes) {
+            this.didTruncate = true;
+            this.value = combined.subarray(combined.length - this.maxBytes);
+        }
+        else {
+            this.value = combined;
+        }
+    }
+    get text() {
+        let decoded = this.value.toString("utf8");
+        // stdout/stderr are byte streams and may be truncated in the middle of a
+        // UTF-8 sequence. Replacement characters can encode to more bytes than
+        // the retained buffer, so trim complete code points until the public text
+        // representation also honours maxOutputBytes.
+        while (Buffer.byteLength(decoded, "utf8") > this.maxBytes) {
+            const first = decoded.codePointAt(0);
+            if (first === undefined)
+                break;
+            decoded = decoded.slice(first > 0xffff ? 2 : 1);
+        }
+        return decoded;
+    }
+    get truncated() {
+        return this.didTruncate;
+    }
+}
+function terminate(child, signal) {
+    if (child.pid === undefined)
+        return;
+    if (process.platform === "win32") {
+        try {
+            const killer = spawn("taskkill", ["/pid", String(child.pid), "/T", "/F"], {
+                stdio: "ignore",
+                windowsHide: true,
+            });
+            killer.once("error", () => child.kill(signal));
+            killer.unref();
+            return;
+        }
+        catch {
+            child.kill(signal);
+            return;
+        }
+    }
+    try {
+        process.kill(-child.pid, signal);
+        return;
+    }
+    catch {
+        // Fall through when the process group has already ended.
+    }
+    child.kill(signal);
+}
+function commandEnvironment(overrides) {
+    if (overrides !== undefined && (typeof overrides !== "object" || overrides === null || Array.isArray(overrides))) {
+        throw Object.assign(new Error("Command environment overrides must be an object."), { code: "INVALID_INPUT" });
+    }
+    const inheritedNames = ["PATH", "LANG", "LC_ALL", "TERM", "TMPDIR", "TMP", "TEMP", "SystemRoot", "ComSpec", "PATHEXT"];
+    const environment = { CI: "1", FORCE_COLOR: "0" };
+    for (const name of inheritedNames) {
+        const value = process.env[name];
+        if (value !== undefined)
+            environment[name] = value;
+    }
+    for (const [name, value] of Object.entries(overrides ?? {})) {
+        if (typeof value !== "string" || !/^[A-Za-z_][A-Za-z0-9_]*$/.test(name) || value.includes("\0")) {
+            throw Object.assign(new Error(`Invalid environment entry '${name}'.`), { code: "INVALID_INPUT" });
+        }
+        environment[name] = value;
+    }
+    return environment;
+}
+function exceptionFailure(error) {
+    const message = error instanceof Error ? error.message : String(error);
+    const nativeCode = typeof error === "object" && error !== null && "code" in error
+        ? String(error.code ?? "COMMAND_ERROR")
+        : "COMMAND_ERROR";
+    const code = nativeCode === "INVALID_INPUT"
+        ? "INVALID_INPUT"
+        : nativeCode === "PERMISSION_DENIED" || nativeCode === "EACCES" || nativeCode === "EPERM"
+            ? "PERMISSION_DENIED"
+            : nativeCode === "ENOENT" || nativeCode === "ENOTDIR"
+                ? "NOT_FOUND"
+                : nativeCode === "CANCELED" || nativeCode === "ABORT_ERR"
+                    ? "CANCELED"
+                    : nativeCode === "DEADLINE_EXCEEDED"
+                        ? "DEADLINE_EXCEEDED"
+                        : nativeCode === "EAGAIN" || nativeCode === "EBUSY"
+                            ? "UNAVAILABLE"
+                            : "IO_ERROR";
+    return failure(code, message, code === "UNAVAILABLE");
+}
+export class NodeCommandPort {
+    scope;
+    containmentStatus;
+    hostEnvironment;
+    constructor(scope, containmentStatus, hostEnvironment) {
+        this.scope = scope;
+        this.containmentStatus = containmentStatus;
+        this.hostEnvironment = hostEnvironment;
+    }
+    static async create(workspaceRoot, options = {}) {
+        const mode = options.containment ?? "best_effort";
+        if (mode !== "best_effort" && mode !== "required") {
+            throw Object.assign(new Error("containment must be 'best_effort' or 'required'."), { code: "INVALID_INPUT" });
+        }
+        const [scope, probe] = await Promise.all([
+            WorkspaceScope.create(workspaceRoot),
+            probeCommandContainment(),
+        ]);
+        return new NodeCommandPort(scope, containmentStatus(mode, probe), nodeCommandHostEnvironment());
+    }
+    static async probeContainment() {
+        return await probeCommandContainment();
+    }
+    async run(input, context) {
+        if (context.signal.aborted)
+            return failure("CANCELED", "The run was canceled.");
+        if (context.deadline <= Date.now())
+            return failure("DEADLINE_EXCEEDED", "The run deadline elapsed.");
+        if (typeof input.command !== "string" || input.command.trim().length === 0 || input.command.length > 32_768) {
+            return failure("INVALID_INPUT", "Command must contain between 1 and 32768 characters.");
+        }
+        try {
+            const cwd = await this.scope.resolveExisting(input.cwd ?? ".");
+            if (!(await lstat(cwd)).isDirectory()) {
+                return failure("INVALID_INPUT", "Command cwd must be a workspace directory.");
+            }
+            if (context.signal.aborted)
+                return failure("CANCELED", "The run was canceled.");
+            const deadlineRemaining = context.deadline - Date.now();
+            if (deadlineRemaining <= 0)
+                return failure("DEADLINE_EXCEEDED", "The run deadline elapsed.");
+            const requestedTimeout = input.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+            if (!Number.isSafeInteger(requestedTimeout) || requestedTimeout < 1) {
+                return failure("INVALID_INPUT", "timeoutMs must be a positive integer.");
+            }
+            const timeoutMs = Math.min(requestedTimeout, deadlineRemaining);
+            const maxOutputBytes = input.maxOutputBytes ?? DEFAULT_MAX_OUTPUT_BYTES;
+            if (!Number.isSafeInteger(maxOutputBytes) || maxOutputBytes < 1 || maxOutputBytes > MAX_OUTPUT_BYTES) {
+                return failure("INVALID_INPUT", `maxOutputBytes must be between 1 and ${MAX_OUTPUT_BYTES}.`);
+            }
+            const stdout = new TailBuffer(maxOutputBytes);
+            const stderr = new TailBuffer(maxOutputBytes);
+            const environment = commandEnvironment(input.env);
+            const startedAt = Date.now();
+            if (this.containmentStatus.mode === "required" && !this.containmentStatus.active) {
+                return failure("UNAVAILABLE", `Required command containment is unavailable (${this.containmentStatus.backend}/${this.containmentStatus.state}): ${this.containmentStatus.reason ?? "the backend did not pass conformance"}`);
+            }
+            let launchCommand = this.hostEnvironment.command.executable;
+            let launchArguments = Object.freeze([
+                ...this.hostEnvironment.command.argumentsPrefix,
+                input.command,
+            ]);
+            let launchCwd = cwd;
+            let launchEnvironment = environment;
+            if (this.containmentStatus.active) {
+                if (this.containmentStatus.backend !== "linux_bubblewrap" || this.containmentStatus.executable === null) {
+                    return failure("UNAVAILABLE", "The active command-containment backend has no executable implementation.");
+                }
+                await assertWorkspaceHasNoHardLinks(this.scope.root);
+                launchCommand = this.containmentStatus.executable;
+                launchEnvironment = {
+                    ...environment,
+                    HOME: "/tmp",
+                    TEMP: "/tmp",
+                    TMP: "/tmp",
+                    TMPDIR: "/tmp",
+                };
+                launchArguments = buildBubblewrapArguments({
+                    command: this.hostEnvironment.command.executable,
+                    commandArguments: Object.freeze([
+                        ...this.hostEnvironment.command.argumentsPrefix,
+                        input.command,
+                    ]),
+                    cwd,
+                    environment: launchEnvironment,
+                    workspace: this.scope.root,
+                });
+                launchCwd = this.scope.root;
+            }
+            return await new Promise((resolveResult) => {
+                const child = spawn(launchCommand, [...launchArguments], {
+                    cwd: launchCwd,
+                    env: launchEnvironment,
+                    shell: false,
+                    detached: process.platform !== "win32",
+                    stdio: ["ignore", "pipe", "pipe"],
+                    windowsHide: true,
+                });
+                let status = "exited";
+                let settled = false;
+                let terminationRequested = false;
+                let killTimer;
+                const abort = () => {
+                    if (settled || terminationRequested)
+                        return;
+                    terminationRequested = true;
+                    status = "canceled";
+                    terminate(child, "SIGTERM");
+                    killTimer = setTimeout(() => terminate(child, "SIGKILL"), 750);
+                    killTimer.unref();
+                };
+                const timeout = setTimeout(() => {
+                    if (settled || terminationRequested)
+                        return;
+                    terminationRequested = true;
+                    status = "timed_out";
+                    terminate(child, "SIGTERM");
+                    killTimer = setTimeout(() => terminate(child, "SIGKILL"), 750);
+                    killTimer.unref();
+                }, timeoutMs);
+                timeout.unref();
+                context.signal.addEventListener("abort", abort, { once: true });
+                // AbortSignal may have fired between the preflight check and listener
+                // registration. Re-read it after subscribing to close that race.
+                if (context.signal.aborted)
+                    abort();
+                child.stdout?.on("data", (chunk) => stdout.append(chunk));
+                child.stderr?.on("data", (chunk) => stderr.append(chunk));
+                child.once("error", (error) => {
+                    if (settled)
+                        return;
+                    settled = true;
+                    clearTimeout(timeout);
+                    if (killTimer !== undefined)
+                        clearTimeout(killTimer);
+                    context.signal.removeEventListener("abort", abort);
+                    resolveResult(exceptionFailure(error));
+                });
+                child.once("close", (exitCode) => {
+                    if (settled)
+                        return;
+                    settled = true;
+                    clearTimeout(timeout);
+                    if (killTimer !== undefined)
+                        clearTimeout(killTimer);
+                    context.signal.removeEventListener("abort", abort);
+                    resolveResult({
+                        ok: true,
+                        data: Object.freeze({
+                            command: input.command,
+                            durationMs: Date.now() - startedAt,
+                            exitCode,
+                            status,
+                            stdout: stdout.text,
+                            stderr: stderr.text,
+                            stdoutTruncated: stdout.truncated,
+                            stderrTruncated: stderr.truncated,
+                        }),
+                    });
+                });
+            });
+        }
+        catch (error) {
+            return exceptionFailure(error);
+        }
+    }
+}
+//# sourceMappingURL=node-command-port.js.map

package/dist/adapters/node/host/node-command-port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-command-port.js","sourceRoot":"","sources":["../../../../src/adapters/node/host/node-command-port.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAEzC,OAAO,EACL,6BAA6B,EAC7B,wBAAwB,EACxB,iBAAiB,EACjB,uBAAuB,GAIxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,MAAM,kBAAkB,GAAG,OAAO,CAAC;AACnC,MAAM,wBAAwB,GAAG,GAAG,GAAG,IAAI,CAAC;AAC5C,MAAM,gBAAgB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEzC,SAAS,OAAO,CAAC,IAAmB,EAAE,OAAe,EAAE,SAAS,GAAG,KAAK;IACtE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU;IAIe;IAHrB,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxB,WAAW,GAAG,KAAK,CAAC;IAE5B,YAA6B,QAAgB;QAAhB,aAAQ,GAAR,QAAQ,CAAQ;IAAG,CAAC;IAEjD,MAAM,CAAC,KAAsB;QAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC3E,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QACrD,IAAI,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClE,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC;QACxB,CAAC;IACH,CAAC;IAED,IAAI,IAAI;QACN,IAAI,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1C,yEAAyE;QACzE,uEAAuE;QACvE,0EAA0E;QAC1E,8CAA8C;QAC9C,OAAO,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YACrC,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM;YAC/B,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;CACF;AAED,SAAS,SAAS,CAAC,KAAmB,EAAE,MAAsB;IAC5D,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;QAAE,OAAO;IACpC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;gBACxE,KAAK,EAAE,QAAQ;gBACf,WAAW,EAAE,IAAI;aAClB,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YAC/C,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACnB,OAAO;QACT,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACjC,OAAO;IACT,CAAC;IAAC,MAAM,CAAC;QACP,yDAAyD;IAC3D,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,kBAAkB,CAAC,SAAuD;IACjF,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACjH,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,kDAAkD,CAAC,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;IAChH,CAAC;IACD,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,CAAU,CAAC;IAChI,MAAM,WAAW,GAAsB,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;IACrE,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,SAAS;YAAE,WAAW,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACrD,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC;QAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAChG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,IAAI,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;QACpG,CAAC;QACD,WAAW,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAC5B,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,MAAM,UAAU,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK;QAC/E,CAAC,CAAC,MAAM,CAAE,KAA4B,CAAC,IAAI,IAAI,eAAe,CAAC;QAC/D,CAAC,CAAC,eAAe,CAAC;IACpB,MAAM,IAAI,GAAkB,UAAU,KAAK,eAAe;QACxD,CAAC,CAAC,eAAe;QACjB,CAAC,CAAC,UAAU,KAAK,mBAAmB,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,OAAO;YACvF,CAAC,CAAC,mBAAmB;YACrB,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,SAAS;gBACnD,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,UAAU,KAAK,UAAU,IAAI,UAAU,KAAK,WAAW;oBACvD,CAAC,CAAC,UAAU;oBACZ,CAAC,CAAC,UAAU,KAAK,mBAAmB;wBAClC,CAAC,CAAC,mBAAmB;wBACrB,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,OAAO;4BACjD,CAAC,CAAC,aAAa;4BACf,CAAC,CAAC,UAAU,CAAC;IACzB,OAAO,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,KAAK,aAAa,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,OAAO,eAAe;IAEP;IACR;IACA;IAHX,YACmB,KAAqB,EAC7B,iBAA2C,EAC3C,eAA8D;QAFtD,UAAK,GAAL,KAAK,CAAgB;QAC7B,sBAAiB,GAAjB,iBAAiB,CAA0B;QAC3C,oBAAe,GAAf,eAAe,CAA+C;IACtE,CAAC;IAEJ,MAAM,CAAC,KAAK,CAAC,MAAM,CACjB,aAAqB,EACrB,UAA8D,EAAE;QAEhE,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,IAAI,aAAa,CAAC;QAClD,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YAClD,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,kDAAkD,CAAC,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;QAChH,CAAC;QACD,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACvC,cAAc,CAAC,MAAM,CAAC,aAAa,CAAC;YACpC,uBAAuB,EAAE;SAC1B,CAAC,CAAC;QACH,OAAO,IAAI,eAAe,CAAC,KAAK,EAAE,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,0BAA0B,EAAE,CAAC,CAAC;IAClG,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,gBAAgB;QAC3B,OAAO,MAAM,uBAAuB,EAAE,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,GAAG,CACP,KAME,EACF,OAA6B;QAE7B,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC;QAChF,IAAI,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,OAAO,CAAC,mBAAmB,EAAE,2BAA2B,CAAC,CAAC;QACrG,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;YAC5G,OAAO,OAAO,CAAC,eAAe,EAAE,sDAAsD,CAAC,CAAC;QAC1F,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;YAC/D,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBACtC,OAAO,OAAO,CAAC,eAAe,EAAE,4CAA4C,CAAC,CAAC;YAChF,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAO,OAAO,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC;YAChF,MAAM,iBAAiB,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACxD,IAAI,iBAAiB,IAAI,CAAC;gBAAE,OAAO,OAAO,CAAC,mBAAmB,EAAE,2BAA2B,CAAC,CAAC;YAC7F,MAAM,gBAAgB,GAAG,KAAK,CAAC,SAAS,IAAI,kBAAkB,CAAC;YAC/D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;gBACpE,OAAO,OAAO,CAAC,eAAe,EAAE,uCAAuC,CAAC,CAAC;YAC3E,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,CAAC;YAChE,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,IAAI,wBAAwB,CAAC;YACxE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,CAAC,IAAI,cAAc,GAAG,gBAAgB,EAAE,CAAC;gBACrG,OAAO,OAAO,CAAC,eAAe,EAAE,wCAAwC,gBAAgB,GAAG,CAAC,CAAC;YAC/F,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,cAAc,CAAC,CAAC;YAC9C,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,cAAc,CAAC,CAAC;YAC9C,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAClD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAE7B,IAAI,IAAI,CAAC,iBAAiB,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC;gBACjF,OAAO,OAAO,CACZ,aAAa,EACb,gDAAgD,IAAI,CAAC,iBAAiB,CAAC,OAAO,IAAI,IAAI,CAAC,iBAAiB,CAAC,KAAK,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,IAAI,sCAAsC,EAAE,CAC9L,CAAC;YACJ,CAAC;YAED,IAAI,aAAa,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC;YAC5D,IAAI,eAAe,GAAsB,MAAM,CAAC,MAAM,CAAC;gBACrD,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,eAAe;gBAC/C,KAAK,CAAC,OAAO;aACd,CAAC,CAAC;YACH,IAAI,SAAS,GAAG,GAAG,CAAC;YACpB,IAAI,iBAAiB,GAAG,WAAW,CAAC;YACpC,IAAI,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC;gBAClC,IAAI,IAAI,CAAC,iBAAiB,CAAC,OAAO,KAAK,kBAAkB,IAAI,IAAI,CAAC,iBAAiB,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;oBACxG,OAAO,OAAO,CAAC,aAAa,EAAE,0EAA0E,CAAC,CAAC;gBAC5G,CAAC;gBACD,MAAM,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACrD,aAAa,GAAG,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC;gBAClD,iBAAiB,GAAG;oBAClB,GAAG,WAAW;oBACd,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,MAAM;oBACZ,GAAG,EAAE,MAAM;oBACX,MAAM,EAAE,MAAM;iBACf,CAAC;gBACF,eAAe,GAAG,wBAAwB,CAAC;oBACzC,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,UAAU;oBAChD,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC;wBAC9B,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,eAAe;wBAC/C,KAAK,CAAC,OAAO;qBACd,CAAC;oBACF,GAAG;oBACH,WAAW,EAAE,iBAAiB;oBAC9B,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;iBAC3B,CAAC,CAAC;gBACH,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAC9B,CAAC;YAED,OAAO,MAAM,IAAI,OAAO,CAA+B,CAAC,aAAa,EAAE,EAAE;gBACvE,MAAM,KAAK,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC,GAAG,eAAe,CAAC,EAAE;oBACvD,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,iBAAiB;oBACtB,KAAK,EAAE,KAAK;oBACZ,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;oBACtC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;oBACjC,WAAW,EAAE,IAAI;iBAClB,CAAC,CAAC;gBACH,IAAI,MAAM,GAA+B,QAAQ,CAAC;gBAClD,IAAI,OAAO,GAAG,KAAK,CAAC;gBACpB,IAAI,oBAAoB,GAAG,KAAK,CAAC;gBACjC,IAAI,SAAqC,CAAC;gBAC1C,MAAM,KAAK,GAAG,GAAS,EAAE;oBACvB,IAAI,OAAO,IAAI,oBAAoB;wBAAE,OAAO;oBAC5C,oBAAoB,GAAG,IAAI,CAAC;oBAC5B,MAAM,GAAG,UAAU,CAAC;oBACpB,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;oBAC5B,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;oBAC/D,SAAS,CAAC,KAAK,EAAE,CAAC;gBACpB,CAAC,CAAC;gBACF,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC9B,IAAI,OAAO,IAAI,oBAAoB;wBAAE,OAAO;oBAC5C,oBAAoB,GAAG,IAAI,CAAC;oBAC5B,MAAM,GAAG,WAAW,CAAC;oBACrB,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;oBAC5B,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;oBAC/D,SAAS,CAAC,KAAK,EAAE,CAAC;gBACpB,CAAC,EAAE,SAAS,CAAC,CAAC;gBACd,OAAO,CAAC,KAAK,EAAE,CAAC;gBAEhB,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChE,sEAAsE;gBACtE,iEAAiE;gBACjE,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;oBAAE,KAAK,EAAE,CAAC;gBACpC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAClE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAClE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;oBAC5B,IAAI,OAAO;wBAAE,OAAO;oBACpB,OAAO,GAAG,IAAI,CAAC;oBACf,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,IAAI,SAAS,KAAK,SAAS;wBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;oBACrD,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;oBACnD,aAAa,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;gBACzC,CAAC,CAAC,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE;oBAC/B,IAAI,OAAO;wBAAE,OAAO;oBACpB,OAAO,GAAG,IAAI,CAAC;oBACf,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,IAAI,SAAS,KAAK,SAAS;wBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;oBACrD,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;oBACnD,aAAa,CAAC;wBACZ,EAAE,EAAE,IAAI;wBACR,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC;4BAClB,OAAO,EAAE,KAAK,CAAC,OAAO;4BACtB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;4BAClC,QAAQ;4BACR,MAAM;4BACN,MAAM,EAAE,MAAM,CAAC,IAAI;4BACnB,MAAM,EAAE,MAAM,CAAC,IAAI;4BACnB,eAAe,EAAE,MAAM,CAAC,SAAS;4BACjC,eAAe,EAAE,MAAM,CAAC,SAAS;yBAClC,CAAC;qBACH,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;CACF"}

package/dist/adapters/node/host/node-workspace-evidence-verifier.d.ts

@@ -0,0 +1,22 @@
+import { type AiCoderResumeWorkspaceVerifier, type AiCoderWorkspaceCheckpointSnapshot, type PortResult, type RunExecutionContext } from "../../../index.js";
+export interface NodeWorkspaceEvidenceVerifierOptions {
+    /** Content bytes hashed for authored files. Derived-directory files use metadata. */
+    readonly maxHashedBytes?: number;
+    readonly maxEntries?: number;
+}
+export declare class NodeWorkspaceEvidenceVerifier implements AiCoderResumeWorkspaceVerifier {
+    private readonly workspaceRoot;
+    private readonly scope;
+    private readonly maxEntries;
+    private readonly maxHashedBytes;
+    readonly consistency: "serialized_workspace";
+    private constructor();
+    static create(workspaceRoot: string, options?: NodeWorkspaceEvidenceVerifierOptions): Promise<NodeWorkspaceEvidenceVerifier>;
+    private fingerprint;
+    capture(input: Parameters<AiCoderResumeWorkspaceVerifier["capture"]>[0], context: RunExecutionContext): Promise<PortResult<AiCoderWorkspaceCheckpointSnapshot>>;
+    verify(snapshot: AiCoderWorkspaceCheckpointSnapshot, context: RunExecutionContext): Promise<PortResult<Readonly<{
+        currentFingerprint: string;
+        matches: boolean;
+    }>>>;
+}
+//# sourceMappingURL=node-workspace-evidence-verifier.d.ts.map

package/dist/adapters/node/host/node-workspace-evidence-verifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-workspace-evidence-verifier.d.ts","sourceRoot":"","sources":["../../../../src/adapters/node/host/node-workspace-evidence-verifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,8BAA8B,EACnC,KAAK,kCAAkC,EACvC,KAAK,UAAU,EACf,KAAK,mBAAmB,EACzB,MAAM,mBAAmB,CAAC;AA4B3B,MAAM,WAAW,oCAAoC;IACnD,qFAAqF;IACrF,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAgED,qBAAa,6BAA8B,YAAW,8BAA8B;IAGhF,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,cAAc;IALjC,QAAQ,CAAC,WAAW,EAAG,sBAAsB,CAAU;IACvD,OAAO;WAOM,MAAM,CACjB,aAAa,EAAE,MAAM,EACrB,OAAO,GAAE,oCAAyC,GACjD,OAAO,CAAC,6BAA6B,CAAC;YAkB3B,WAAW;IA0PnB,OAAO,CACX,KAAK,EAAE,UAAU,CAAC,8BAA8B,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAC/D,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,UAAU,CAAC,kCAAkC,CAAC,CAAC;IAYpD,MAAM,CACV,QAAQ,EAAE,kCAAkC,EAC5C,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,kBAAkB,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC,CAAC;CAWnF"}