@geminixiang/mikan 1.0.0-beta.21 → 1.0.0-beta.23

package/dist/workspace-projection/index.d.ts

@@ -0,0 +1,5 @@
+import type { ImageWorkspaceMountMode } from "../types.js";
+import type { WorkspaceProjection } from "./types.js";
+export declare function resolveWorkspaceProjection(hostWorkspaceRoot: string | undefined, conversationId: string): WorkspaceProjection;
+export declare function readWorkspaceProjectionMode(hostWorkspaceRoot: string | undefined, conversationId: string): ImageWorkspaceMountMode;
+//# sourceMappingURL=index.d.ts.map

package/dist/workspace-projection/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/workspace-projection/index.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEtD,wBAAgB,0BAA0B,CACxC,iBAAiB,EAAE,MAAM,GAAG,SAAS,EACrC,cAAc,EAAE,MAAM,GACrB,mBAAmB,CAsBrB;AAED,wBAAgB,2BAA2B,CACzC,iBAAiB,EAAE,MAAM,GAAG,SAAS,EACrC,cAAc,EAAE,MAAM,GACrB,uBAAuB,CAiBzB"}

package/dist/workspace-projection/index.js

@@ -0,0 +1,71 @@
+import { join } from "node:path";
+import { ensureDirExists, isRecord, readJsonFileIfExists } from "../utils/file-guards.js";
+import { conversationSettingsPath, loadGlobalSettings, resolveConversationSettings, } from "../config.js";
+import * as log from "../log.js";
+export function resolveWorkspaceProjection(hostWorkspaceRoot, conversationId) {
+    assertConversationPathSegment(conversationId);
+    const mode = readWorkspaceProjectionMode(hostWorkspaceRoot, conversationId);
+    if (!hostWorkspaceRoot)
+        return { mode, mounts: [] };
+    if (mode === "full") {
+        return {
+            mode,
+            mounts: [{ source: hostWorkspaceRoot, target: "/workspace" }],
+        };
+    }
+    const conversationDir = join(hostWorkspaceRoot, conversationId);
+    ensureDirExists(conversationDir);
+    return {
+        mode,
+        mounts: [
+            { source: join(hostWorkspaceRoot, "MEMORY.md"), target: "/workspace/MEMORY.md" },
+            { source: join(hostWorkspaceRoot, "skills"), target: "/workspace/skills" },
+            { source: join(hostWorkspaceRoot, "events"), target: "/workspace/events" },
+            { source: conversationDir, target: `/workspace/${conversationId}` },
+        ],
+    };
+}
+export function readWorkspaceProjectionMode(hostWorkspaceRoot, conversationId) {
+    assertConversationPathSegment(conversationId);
+    const globalDefault = readGlobalMode();
+    if (!hostWorkspaceRoot)
+        return globalDefault;
+    const conversationDir = join(hostWorkspaceRoot, conversationId);
+    try {
+        return (resolveConversationSettings(conversationDir).sandbox?.image?.workspaceMount ?? globalDefault);
+    }
+    catch (err) {
+        log.logWarning("Falling back while resolving conversation workspace projection", err instanceof Error ? err.message : String(err));
+        return readFallback(conversationSettingsPath(conversationDir)) ?? globalDefault;
+    }
+}
+function assertConversationPathSegment(conversationId) {
+    if (conversationId.length === 0 ||
+        conversationId === "." ||
+        conversationId === ".." ||
+        conversationId.includes("/") ||
+        conversationId.includes("\\") ||
+        conversationId.includes("\0")) {
+        throw new Error("Conversation id must be a safe path segment");
+    }
+}
+function readGlobalMode() {
+    try {
+        return loadGlobalSettings().sandbox?.image?.workspaceMount ?? "private";
+    }
+    catch (err) {
+        log.logWarning("Using default workspace projection because global settings could not be read", err instanceof Error ? err.message : String(err));
+        return "private";
+    }
+}
+function readFallback(settingsPath) {
+    try {
+        const raw = readJsonFileIfExists(settingsPath, (value) => isRecord(value), () => "Ignoring malformed conversation settings while resolving workspace projection");
+        return raw?.sandbox?.image?.workspaceMount;
+    }
+    catch (err) {
+        log.logWarning("Ignoring malformed conversation settings fallback while resolving workspace projection", err instanceof Error ? err.message : String(err));
+        return undefined;
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/workspace-projection/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/workspace-projection/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC1F,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EAClB,2BAA2B,GAC5B,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,GAAG,MAAM,WAAW,CAAC;AAIjC,MAAM,UAAU,0BAA0B,CACxC,iBAAqC,EACrC,cAAsB;IAEtB,6BAA6B,CAAC,cAAc,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,2BAA2B,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC;IAC5E,IAAI,CAAC,iBAAiB;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACpD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,OAAO;YACL,IAAI;YACJ,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;SAC9D,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,IAAI,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC;IAChE,eAAe,CAAC,eAAe,CAAC,CAAC;IACjC,OAAO;QACL,IAAI;QACJ,MAAM,EAAE;YACN,EAAE,MAAM,EAAE,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE;YAChF,EAAE,MAAM,EAAE,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE;YAC1E,EAAE,MAAM,EAAE,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE;YAC1E,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,cAAc,cAAc,EAAE,EAAE;SACpE;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,iBAAqC,EACrC,cAAsB;IAEtB,6BAA6B,CAAC,cAAc,CAAC,CAAC;IAC9C,MAAM,aAAa,GAAG,cAAc,EAAE,CAAC;IACvC,IAAI,CAAC,iBAAiB;QAAE,OAAO,aAAa,CAAC;IAE7C,MAAM,eAAe,GAAG,IAAI,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,OAAO,CACL,2BAA2B,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,cAAc,IAAI,aAAa,CAC7F,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,UAAU,CACZ,gEAAgE,EAChE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CACjD,CAAC;QACF,OAAO,YAAY,CAAC,wBAAwB,CAAC,eAAe,CAAC,CAAC,IAAI,aAAa,CAAC;IAClF,CAAC;AACH,CAAC;AAED,SAAS,6BAA6B,CAAC,cAAsB;IAC3D,IACE,cAAc,CAAC,MAAM,KAAK,CAAC;QAC3B,cAAc,KAAK,GAAG;QACtB,cAAc,KAAK,IAAI;QACvB,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC;QAC5B,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC7B,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,EAC7B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,SAAS,cAAc;IACrB,IAAI,CAAC;QACH,OAAO,kBAAkB,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,cAAc,IAAI,SAAS,CAAC;IAC1E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,UAAU,CACZ,8EAA8E,EAC9E,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CACjD,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,YAAoB;IACxC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,oBAAoB,CAC9B,YAAY,EACZ,CAAC,KAAK,EAAmF,EAAE,CACzF,QAAQ,CAAC,KAAK,CAAC,EACjB,GAAG,EAAE,CAAC,+EAA+E,CACtF,CAAC;QACF,OAAO,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,UAAU,CACZ,wFAAwF,EACxF,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CACjD,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC","sourcesContent":["import { join } from \"node:path\";\nimport { ensureDirExists, isRecord, readJsonFileIfExists } from \"../utils/file-guards.js\";\nimport {\n  conversationSettingsPath,\n  loadGlobalSettings,\n  resolveConversationSettings,\n} from \"../config.js\";\nimport * as log from \"../log.js\";\nimport type { ImageWorkspaceMountMode } from \"../types.js\";\nimport type { WorkspaceProjection } from \"./types.js\";\n\nexport function resolveWorkspaceProjection(\n  hostWorkspaceRoot: string | undefined,\n  conversationId: string,\n): WorkspaceProjection {\n  assertConversationPathSegment(conversationId);\n  const mode = readWorkspaceProjectionMode(hostWorkspaceRoot, conversationId);\n  if (!hostWorkspaceRoot) return { mode, mounts: [] };\n  if (mode === \"full\") {\n    return {\n      mode,\n      mounts: [{ source: hostWorkspaceRoot, target: \"/workspace\" }],\n    };\n  }\n\n  const conversationDir = join(hostWorkspaceRoot, conversationId);\n  ensureDirExists(conversationDir);\n  return {\n    mode,\n    mounts: [\n      { source: join(hostWorkspaceRoot, \"MEMORY.md\"), target: \"/workspace/MEMORY.md\" },\n      { source: join(hostWorkspaceRoot, \"skills\"), target: \"/workspace/skills\" },\n      { source: join(hostWorkspaceRoot, \"events\"), target: \"/workspace/events\" },\n      { source: conversationDir, target: `/workspace/${conversationId}` },\n    ],\n  };\n}\n\nexport function readWorkspaceProjectionMode(\n  hostWorkspaceRoot: string | undefined,\n  conversationId: string,\n): ImageWorkspaceMountMode {\n  assertConversationPathSegment(conversationId);\n  const globalDefault = readGlobalMode();\n  if (!hostWorkspaceRoot) return globalDefault;\n\n  const conversationDir = join(hostWorkspaceRoot, conversationId);\n  try {\n    return (\n      resolveConversationSettings(conversationDir).sandbox?.image?.workspaceMount ?? globalDefault\n    );\n  } catch (err) {\n    log.logWarning(\n      \"Falling back while resolving conversation workspace projection\",\n      err instanceof Error ? err.message : String(err),\n    );\n    return readFallback(conversationSettingsPath(conversationDir)) ?? globalDefault;\n  }\n}\n\nfunction assertConversationPathSegment(conversationId: string): void {\n  if (\n    conversationId.length === 0 ||\n    conversationId === \".\" ||\n    conversationId === \"..\" ||\n    conversationId.includes(\"/\") ||\n    conversationId.includes(\"\\\\\") ||\n    conversationId.includes(\"\\0\")\n  ) {\n    throw new Error(\"Conversation id must be a safe path segment\");\n  }\n}\n\nfunction readGlobalMode(): ImageWorkspaceMountMode {\n  try {\n    return loadGlobalSettings().sandbox?.image?.workspaceMount ?? \"private\";\n  } catch (err) {\n    log.logWarning(\n      \"Using default workspace projection because global settings could not be read\",\n      err instanceof Error ? err.message : String(err),\n    );\n    return \"private\";\n  }\n}\n\nfunction readFallback(settingsPath: string): ImageWorkspaceMountMode | undefined {\n  try {\n    const raw = readJsonFileIfExists(\n      settingsPath,\n      (value): value is { sandbox?: { image?: { workspaceMount?: ImageWorkspaceMountMode } } } =>\n        isRecord(value),\n      () => \"Ignoring malformed conversation settings while resolving workspace projection\",\n    );\n    return raw?.sandbox?.image?.workspaceMount;\n  } catch (err) {\n    log.logWarning(\n      \"Ignoring malformed conversation settings fallback while resolving workspace projection\",\n      err instanceof Error ? err.message : String(err),\n    );\n    return undefined;\n  }\n}\n"]}

package/dist/workspace-projection/types.d.ts

@@ -0,0 +1,7 @@
+import type { ContainerMount } from "../types.js";
+import type { ImageWorkspaceMountMode } from "../types.js";
+export interface WorkspaceProjection {
+    mode: ImageWorkspaceMountMode;
+    mounts: ContainerMount[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/workspace-projection/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/workspace-projection/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAE3D,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,uBAAuB,CAAC;IAC9B,MAAM,EAAE,cAAc,EAAE,CAAC;CAC1B"}

package/dist/workspace-projection/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/workspace-projection/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/workspace-projection/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { ContainerMount } from \"../types.js\";\nimport type { ImageWorkspaceMountMode } from \"../types.js\";\n\nexport interface WorkspaceProjection {\n  mode: ImageWorkspaceMountMode;\n  mounts: ContainerMount[];\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@geminixiang/mikan",
-  "version": "1.0.0-beta.21",
+  "version": "1.0.0-beta.23",
   "description": "Multi-platform AI coding agent for Slack, Telegram, and Discord",
   "keywords": [
     "agent",
@@ -43,19 +43,19 @@
     "test:e2e": "vitest --run --config vitest.e2e.config.ts",
     "test:e2e:slack": "vitest --run --config vitest.e2e.config.ts e2e/slack",
     "test:e2e:slack:coverage": "vitest --run --coverage --coverage.reportsDirectory=.workspace/coverage --config vitest.e2e.config.ts e2e/slack",
-    "gondolin:image:build": "sh scripts/build-gondolin-image.sh",
     "docs:dev": "astro dev",
     "docs:build": "astro build",
     "docs:preview": "astro preview"
   },
   "dependencies": {
-    "@earendil-works/gondolin": "0.12.0",
     "@earendil-works/pi-agent-core": "^0.80.6",
     "@earendil-works/pi-ai": "^0.80.6",
+    "@kubernetes/client-node": "^1.0.0",
     "@sentry/node": "^10.60.0",
     "@sinclair/typebox": "^0.34.49",
     "@slack/socket-mode": "^2.0.7",
     "@slack/web-api": "^7.17.0",
+    "agentic-sandbox-client": "file:vendor/agent-sandbox-sdk/agentic-sandbox-client-0.1.0.tgz",
     "chalk": "^5.6.2",
     "croner": "^10.0.1",
     "diff": "^9.0.0",

package/dist/sandbox/firecracker.d.ts

@@ -1,18 +0,0 @@
-import type { ExecOptions, ExecResult, Executor, FirecrackerSandboxConfig, RuntimePathContext, SandboxAdapter } from "./types.js";
-export declare class FirecrackerExecutor implements Executor {
-    private vmId;
-    private hostPath;
-    private sshUser;
-    private sshPort;
-    private env?;
-    constructor(vmId: string, hostPath: string, sshUser?: string, sshPort?: number, env?: Record<string, string> | undefined);
-    exec(command: string, options?: ExecOptions): Promise<ExecResult>;
-    readFile(path: string, options?: ExecOptions): Promise<string>;
-    readFileBase64(path: string, options?: ExecOptions): Promise<string>;
-    writeFile(path: string, content: string, options?: ExecOptions): Promise<void>;
-    getWorkspacePath(_hostPath: string): string;
-    getPathContext(hostWorkspaceRoot: string): RuntimePathContext;
-    getSandboxConfig(): FirecrackerSandboxConfig;
-}
-export declare const firecrackerSandboxAdapter: SandboxAdapter<FirecrackerSandboxConfig>;
-//# sourceMappingURL=firecracker.d.ts.map

package/dist/sandbox/firecracker.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"firecracker.d.ts","sourceRoot":"","sources":["../../src/sandbox/firecracker.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,WAAW,EACX,UAAU,EACV,QAAQ,EACR,wBAAwB,EACxB,kBAAkB,EAClB,cAAc,EACf,MAAM,YAAY,CAAC;AA2FpB,qBAAa,mBAAoB,YAAW,QAAQ;IAEhD,OAAO,CAAC,IAAI;IACZ,OAAO,CAAC,QAAQ;IAChB,OAAO,CAAC,OAAO;IACf,OAAO,CAAC,OAAO;IACf,OAAO,CAAC,GAAG,CAAC;IALd,YACU,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,MAAe,EACxB,OAAO,GAAE,MAAW,EACpB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,YAAA,EAClC;IAEE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAqGtE;IAED,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAE7D;IAED,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAEnE;IAED,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAE7E;IAED,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE1C;IAED,cAAc,CAAC,iBAAiB,EAAE,MAAM,GAAG,kBAAkB,CAK5D;IAED,gBAAgB,IAAI,wBAAwB,CAQ3C;CACF;AAgBD,eAAO,MAAM,yBAAyB,EAAE,cAAc,CAAC,wBAAwB,CAM9E,CAAC"}

package/dist/sandbox/firecracker.js

@@ -1,221 +0,0 @@
-import { spawn } from "child_process";
-import { SandboxError } from "./errors.js";
-import { HostExecutor } from "./host.js";
-import { execReadFile, execReadFileBase64, execWriteFile, execSimple, killProcessTree, shellEscape, } from "./utils.js";
-function parseFirecrackerSandboxArg(value) {
-    if (!value.startsWith("firecracker:")) {
-        return undefined;
-    }
-    const arg = value.slice("firecracker:".length);
-    // Format: firecracker:<vm-id>:<host-path>[:<ssh-user>[:<ssh-port>]]
-    // Example: firecracker:vm1:/home/user/workspace
-    //          firecracker:vm1:/home/user/workspace:root
-    //          firecracker:vm1:/home/user/workspace:root:22
-    const parts = arg.split(":");
-    if (parts.length < 2) {
-        throw new SandboxError("Error: firecracker sandbox requires vm-id and host-path\n" +
-            "Usage: firecracker:<vm-id>:<host-path>[:<ssh-user>[:<ssh-port>]]\n" +
-            "Example: firecracker:vm1:/home/user/workspace");
-    }
-    const vmId = parts[0];
-    const hostPath = parts[1];
-    const sshUser = parts[2] || "root";
-    const sshPort = parts[3] ? parseInt(parts[3], 10) : 22;
-    if (!vmId || !hostPath) {
-        throw new SandboxError("Error: firecracker sandbox requires vm-id and host-path");
-    }
-    if (isNaN(sshPort) || sshPort <= 0 || sshPort > 65535) {
-        throw new SandboxError("Error: invalid SSH port");
-    }
-    return { type: "firecracker", vmId, hostPath, sshUser, sshPort };
-}
-async function validateFirecrackerSandbox(config) {
-    // Check if fc-agent or firecracker CLI is available
-    try {
-        await execSimple("fc-agent", ["--version"]);
-    }
-    catch {
-        // Try alternative: firecracker
-        try {
-            await execSimple("firecracker", ["--version"]);
-        }
-        catch {
-            throw new SandboxError("Error: Firecracker tools (fc-agent or firecracker) not found in PATH", ["Install firecracker: https://github.com/firecracker-microvm/firecracker"]);
-        }
-    }
-    // Check if VM is running using fc-agent
-    try {
-        const result = await execSimple("fc-agent", ["status", config.vmId]);
-        if (!result.includes("running") && !result.includes("Running")) {
-            throw new SandboxError(`Error: Firecracker VM '${config.vmId}' is not running.`, [
-                `Start it with: fc-agent start ${config.vmId}`,
-            ]);
-        }
-    }
-    catch (error) {
-        if (error instanceof SandboxError) {
-            throw error;
-        }
-        // Try alternative: firecracker-ctl or direct check
-        try {
-            await execSimple("firecracker-ctl", ["status", config.vmId]);
-        }
-        catch {
-            console.error(`Warning: Could not verify if VM '${config.vmId}' is running.`);
-            console.error("Make sure the VM is started before running mikan.");
-        }
-    }
-    // Verify host path exists
-    try {
-        await execSimple("ls", ["-d", config.hostPath]);
-    }
-    catch {
-        throw new SandboxError(`Error: Host path '${config.hostPath}' does not exist.`);
-    }
-    console.log(`  Firecracker VM '${config.vmId}' configured with workspace '${config.hostPath}'.`);
-}
-export class FirecrackerExecutor {
-    constructor(vmId, hostPath, sshUser = "root", sshPort = 22, env) {
-        this.vmId = vmId;
-        this.hostPath = hostPath;
-        this.sshUser = sshUser;
-        this.sshPort = sshPort;
-        this.env = env;
-    }
-    async exec(command, options) {
-        if (!this.env || Object.keys(this.env).length === 0) {
-            const sshCmd = this.sshPort === 22
-                ? `ssh -o StrictHostKeyChecking=no -o ConnectTimeout=10 ${this.sshUser}@${this.vmId} sh -c ${shellEscape(command)}`
-                : `ssh -o StrictHostKeyChecking=no -o ConnectTimeout=10 -p ${this.sshPort} ${this.sshUser}@${this.vmId} sh -c ${shellEscape(command)}`;
-            const hostExecutor = new HostExecutor();
-            return hostExecutor.exec(sshCmd, options);
-        }
-        return new Promise((resolve, reject) => {
-            const sshArgs = ["-o", "StrictHostKeyChecking=no", "-o", "ConnectTimeout=10"];
-            if (this.sshPort !== 22) {
-                sshArgs.push("-p", String(this.sshPort));
-            }
-            sshArgs.push(`${this.sshUser}@${this.vmId}`, "sh", "-se");
-            const child = spawn("ssh", sshArgs, {
-                detached: true,
-                stdio: ["pipe", "pipe", "pipe"],
-            });
-            let stdout = "";
-            let stderr = "";
-            let timedOut = false;
-            let settled = false;
-            const timeoutHandle = options?.timeout && options.timeout > 0
-                ? setTimeout(() => {
-                    timedOut = true;
-                    if (child.pid)
-                        killProcessTree(child.pid);
-                }, options.timeout * 1000)
-                : undefined;
-            const onAbort = () => {
-                if (child.pid)
-                    killProcessTree(child.pid);
-            };
-            if (options?.signal) {
-                if (options.signal.aborted) {
-                    onAbort();
-                }
-                else {
-                    options.signal.addEventListener("abort", onAbort, { once: true });
-                }
-            }
-            child.on("error", (error) => {
-                if (settled)
-                    return;
-                settled = true;
-                if (timeoutHandle)
-                    clearTimeout(timeoutHandle);
-                if (options?.signal) {
-                    options.signal.removeEventListener("abort", onAbort);
-                }
-                reject(error);
-            });
-            child.stdout?.on("data", (data) => {
-                stdout += data.toString();
-                if (stdout.length > 10 * 1024 * 1024) {
-                    stdout = stdout.slice(0, 10 * 1024 * 1024);
-                }
-            });
-            child.stderr?.on("data", (data) => {
-                stderr += data.toString();
-                if (stderr.length > 10 * 1024 * 1024) {
-                    stderr = stderr.slice(0, 10 * 1024 * 1024);
-                }
-            });
-            child.stdin?.on("error", (error) => {
-                stderr += `${error.message}\n`;
-            });
-            child.stdin?.end(buildRemoteScript(command, this.env));
-            child.on("close", (code) => {
-                if (settled)
-                    return;
-                settled = true;
-                if (timeoutHandle)
-                    clearTimeout(timeoutHandle);
-                if (options?.signal) {
-                    options.signal.removeEventListener("abort", onAbort);
-                }
-                if (options?.signal?.aborted) {
-                    reject(new Error(`${stdout}\n${stderr}\nCommand aborted`.trim()));
-                    return;
-                }
-                if (timedOut) {
-                    reject(new Error(`${stdout}\n${stderr}\nCommand timed out after ${options?.timeout} seconds`.trim()));
-                    return;
-                }
-                resolve({ stdout, stderr, code: code ?? 0 });
-            });
-        });
-    }
-    readFile(path, options) {
-        return execReadFile(this, path, options);
-    }
-    readFileBase64(path, options) {
-        return execReadFileBase64(this, path, options);
-    }
-    writeFile(path, content, options) {
-        return execWriteFile(this, path, content, options);
-    }
-    getWorkspacePath(_hostPath) {
-        return "/workspace";
-    }
-    getPathContext(hostWorkspaceRoot) {
-        return {
-            hostWorkspaceRoot,
-            runtimeWorkspaceRoot: "/workspace",
-        };
-    }
-    getSandboxConfig() {
-        return {
-            type: "firecracker",
-            vmId: this.vmId,
-            hostPath: this.hostPath,
-            sshUser: this.sshUser,
-            sshPort: this.sshPort,
-        };
-    }
-}
-function buildRemoteScript(command, env) {
-    const exports = env
-        ? Object.entries(env)
-            .map(([key, value]) => {
-            if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) {
-                throw new SandboxError(`Invalid environment variable name for firecracker: ${key}`);
-            }
-            return `export ${key}=${shellEscape(value)}`;
-        })
-            .join("\n") + "\n"
-        : "";
-    return `${exports}${command}\n`;
-}
-export const firecrackerSandboxAdapter = {
-    type: "firecracker",
-    parse: parseFirecrackerSandboxArg,
-    validate: validateFirecrackerSandbox,
-    createExecutor: (config, env) => new FirecrackerExecutor(config.vmId, config.hostPath, config.sshUser, config.sshPort, env),
-};
-//# sourceMappingURL=firecracker.js.map

package/dist/sandbox/firecracker.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"firecracker.js","sourceRoot":"","sources":["../../src/sandbox/firecracker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAStC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,aAAa,EACb,UAAU,EACV,eAAe,EACf,WAAW,GACZ,MAAM,YAAY,CAAC;AAEpB,SAAS,0BAA0B,CAAC,KAAa;IAC/C,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACtC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IAC/C,oEAAoE;IACpE,gDAAgD;IAChD,qDAAqD;IACrD,wDAAwD;IACxD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,YAAY,CACpB,2DAA2D;YACzD,oEAAoE;YACpE,+CAA+C,CAClD,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACtB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IACnC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAEvD,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACvB,MAAM,IAAI,YAAY,CAAC,yDAAyD,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,OAAO,GAAG,KAAK,EAAE,CAAC;QACtD,MAAM,IAAI,YAAY,CAAC,yBAAyB,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACnE,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,MAAgC;IACxE,oDAAoD;IACpD,IAAI,CAAC;QACH,MAAM,UAAU,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,+BAA+B;QAC/B,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,aAAa,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,YAAY,CACpB,sEAAsE,EACtE,CAAC,yEAAyE,CAAC,CAC5E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,wCAAwC;IACxC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACrE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,YAAY,CAAC,0BAA0B,MAAM,CAAC,IAAI,mBAAmB,EAAE;gBAC/E,iCAAiC,MAAM,CAAC,IAAI,EAAE;aAC/C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;YAClC,MAAM,KAAK,CAAC;QACd,CAAC;QACD,mDAAmD;QACnD,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,iBAAiB,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,KAAK,CAAC,oCAAoC,MAAM,CAAC,IAAI,eAAe,CAAC,CAAC;YAC9E,OAAO,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,0BAA0B;IAC1B,IAAI,CAAC;QACH,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CAAC,qBAAqB,MAAM,CAAC,QAAQ,mBAAmB,CAAC,CAAC;IAClF,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,qBAAqB,MAAM,CAAC,IAAI,gCAAgC,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;AACnG,CAAC;AAED,MAAM,OAAO,mBAAmB;IAC9B,YACU,IAAY,EACZ,QAAgB,EAChB,OAAO,GAAW,MAAM,EACxB,OAAO,GAAW,EAAE,EACpB,GAA4B;oBAJ5B,IAAI;wBACJ,QAAQ;uBACR,OAAO;uBACP,OAAO;mBACP,GAAG;IACV,CAAC;IAEJ,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,OAAqB;QAC/C,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,MAAM,MAAM,GACV,IAAI,CAAC,OAAO,KAAK,EAAE;gBACjB,CAAC,CAAC,wDAAwD,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,UAAU,WAAW,CAAC,OAAO,CAAC,EAAE;gBACnH,CAAC,CAAC,2DAA2D,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,UAAU,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3I,MAAM,YAAY,GAAG,IAAI,YAAY,EAAE,CAAC;YACxC,OAAO,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;QAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,mBAAmB,CAAC,CAAC;YAC9E,IAAI,IAAI,CAAC,OAAO,KAAK,EAAE,EAAE,CAAC;gBACxB,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3C,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAE1D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE;gBAClC,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;aAChC,CAAC,CAAC;YAEH,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,IAAI,OAAO,GAAG,KAAK,CAAC;YAEpB,MAAM,aAAa,GACjB,OAAO,EAAE,OAAO,IAAI,OAAO,CAAC,OAAO,GAAG,CAAC;gBACrC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE;oBACd,QAAQ,GAAG,IAAI,CAAC;oBAChB,IAAI,KAAK,CAAC,GAAG;wBAAE,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC5C,CAAC,EAAE,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;gBAC5B,CAAC,CAAC,SAAS,CAAC;YAEhB,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,IAAI,KAAK,CAAC,GAAG;oBAAE,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5C,CAAC,CAAC;YAEF,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;gBACpB,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAC3B,OAAO,EAAE,CAAC;gBACZ,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpE,CAAC;YACH,CAAC;YAED,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC1B,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,IAAI,aAAa;oBAAE,YAAY,CAAC,aAAa,CAAC,CAAC;gBAC/C,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;oBACpB,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACvD,CAAC;gBACD,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBAChC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC1B,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;oBACrC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;gBAC7C,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBAChC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC1B,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;oBACrC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;gBAC7C,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBACjC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,IAAI,CAAC;YACjC,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAEvD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACzB,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,IAAI,aAAa;oBAAE,YAAY,CAAC,aAAa,CAAC,CAAC;gBAC/C,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;oBACpB,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACvD,CAAC;gBAED,IAAI,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;oBAC7B,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,MAAM,KAAK,MAAM,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;oBAClE,OAAO;gBACT,CAAC;gBAED,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,CACJ,IAAI,KAAK,CACP,GAAG,MAAM,KAAK,MAAM,6BAA6B,OAAO,EAAE,OAAO,UAAU,CAAC,IAAI,EAAE,CACnF,CACF,CAAC;oBACF,OAAO;gBACT,CAAC;gBAED,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;YAC/C,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,QAAQ,CAAC,IAAY,EAAE,OAAqB;QAC1C,OAAO,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IAED,cAAc,CAAC,IAAY,EAAE,OAAqB;QAChD,OAAO,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IAED,SAAS,CAAC,IAAY,EAAE,OAAe,EAAE,OAAqB;QAC5D,OAAO,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACrD,CAAC;IAED,gBAAgB,CAAC,SAAiB;QAChC,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,cAAc,CAAC,iBAAyB;QACtC,OAAO;YACL,iBAAiB;YACjB,oBAAoB,EAAE,YAAY;SACnC,CAAC;IACJ,CAAC;IAED,gBAAgB;QACd,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC;IACJ,CAAC;CACF;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,GAA4B;IACtE,MAAM,OAAO,GAAG,GAAG;QACjB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;aAChB,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;YACpB,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1C,MAAM,IAAI,YAAY,CAAC,sDAAsD,GAAG,EAAE,CAAC,CAAC;YACtF,CAAC;YACD,OAAO,UAAU,GAAG,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/C,CAAC,CAAC;aACD,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI;QACtB,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,GAAG,OAAO,GAAG,OAAO,IAAI,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAA6C;IACjF,IAAI,EAAE,aAAa;IACnB,KAAK,EAAE,0BAA0B;IACjC,QAAQ,EAAE,0BAA0B;IACpC,cAAc,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAC9B,IAAI,mBAAmB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC;CAC7F,CAAC","sourcesContent":["import { spawn } from \"child_process\";\nimport type {\n  ExecOptions,\n  ExecResult,\n  Executor,\n  FirecrackerSandboxConfig,\n  RuntimePathContext,\n  SandboxAdapter,\n} from \"./types.js\";\nimport { SandboxError } from \"./errors.js\";\nimport { HostExecutor } from \"./host.js\";\nimport {\n  execReadFile,\n  execReadFileBase64,\n  execWriteFile,\n  execSimple,\n  killProcessTree,\n  shellEscape,\n} from \"./utils.js\";\n\nfunction parseFirecrackerSandboxArg(value: string): FirecrackerSandboxConfig | undefined {\n  if (!value.startsWith(\"firecracker:\")) {\n    return undefined;\n  }\n\n  const arg = value.slice(\"firecracker:\".length);\n  // Format: firecracker:<vm-id>:<host-path>[:<ssh-user>[:<ssh-port>]]\n  // Example: firecracker:vm1:/home/user/workspace\n  //          firecracker:vm1:/home/user/workspace:root\n  //          firecracker:vm1:/home/user/workspace:root:22\n  const parts = arg.split(\":\");\n  if (parts.length < 2) {\n    throw new SandboxError(\n      \"Error: firecracker sandbox requires vm-id and host-path\\n\" +\n        \"Usage: firecracker:<vm-id>:<host-path>[:<ssh-user>[:<ssh-port>]]\\n\" +\n        \"Example: firecracker:vm1:/home/user/workspace\",\n    );\n  }\n  const vmId = parts[0];\n  const hostPath = parts[1];\n  const sshUser = parts[2] || \"root\";\n  const sshPort = parts[3] ? parseInt(parts[3], 10) : 22;\n\n  if (!vmId || !hostPath) {\n    throw new SandboxError(\"Error: firecracker sandbox requires vm-id and host-path\");\n  }\n  if (isNaN(sshPort) || sshPort <= 0 || sshPort > 65535) {\n    throw new SandboxError(\"Error: invalid SSH port\");\n  }\n  return { type: \"firecracker\", vmId, hostPath, sshUser, sshPort };\n}\n\nasync function validateFirecrackerSandbox(config: FirecrackerSandboxConfig): Promise<void> {\n  // Check if fc-agent or firecracker CLI is available\n  try {\n    await execSimple(\"fc-agent\", [\"--version\"]);\n  } catch {\n    // Try alternative: firecracker\n    try {\n      await execSimple(\"firecracker\", [\"--version\"]);\n    } catch {\n      throw new SandboxError(\n        \"Error: Firecracker tools (fc-agent or firecracker) not found in PATH\",\n        [\"Install firecracker: https://github.com/firecracker-microvm/firecracker\"],\n      );\n    }\n  }\n\n  // Check if VM is running using fc-agent\n  try {\n    const result = await execSimple(\"fc-agent\", [\"status\", config.vmId]);\n    if (!result.includes(\"running\") && !result.includes(\"Running\")) {\n      throw new SandboxError(`Error: Firecracker VM '${config.vmId}' is not running.`, [\n        `Start it with: fc-agent start ${config.vmId}`,\n      ]);\n    }\n  } catch (error) {\n    if (error instanceof SandboxError) {\n      throw error;\n    }\n    // Try alternative: firecracker-ctl or direct check\n    try {\n      await execSimple(\"firecracker-ctl\", [\"status\", config.vmId]);\n    } catch {\n      console.error(`Warning: Could not verify if VM '${config.vmId}' is running.`);\n      console.error(\"Make sure the VM is started before running mikan.\");\n    }\n  }\n\n  // Verify host path exists\n  try {\n    await execSimple(\"ls\", [\"-d\", config.hostPath]);\n  } catch {\n    throw new SandboxError(`Error: Host path '${config.hostPath}' does not exist.`);\n  }\n\n  console.log(`  Firecracker VM '${config.vmId}' configured with workspace '${config.hostPath}'.`);\n}\n\nexport class FirecrackerExecutor implements Executor {\n  constructor(\n    private vmId: string,\n    private hostPath: string,\n    private sshUser: string = \"root\",\n    private sshPort: number = 22,\n    private env?: Record<string, string>,\n  ) {}\n\n  async exec(command: string, options?: ExecOptions): Promise<ExecResult> {\n    if (!this.env || Object.keys(this.env).length === 0) {\n      const sshCmd =\n        this.sshPort === 22\n          ? `ssh -o StrictHostKeyChecking=no -o ConnectTimeout=10 ${this.sshUser}@${this.vmId} sh -c ${shellEscape(command)}`\n          : `ssh -o StrictHostKeyChecking=no -o ConnectTimeout=10 -p ${this.sshPort} ${this.sshUser}@${this.vmId} sh -c ${shellEscape(command)}`;\n      const hostExecutor = new HostExecutor();\n      return hostExecutor.exec(sshCmd, options);\n    }\n\n    return new Promise((resolve, reject) => {\n      const sshArgs = [\"-o\", \"StrictHostKeyChecking=no\", \"-o\", \"ConnectTimeout=10\"];\n      if (this.sshPort !== 22) {\n        sshArgs.push(\"-p\", String(this.sshPort));\n      }\n      sshArgs.push(`${this.sshUser}@${this.vmId}`, \"sh\", \"-se\");\n\n      const child = spawn(\"ssh\", sshArgs, {\n        detached: true,\n        stdio: [\"pipe\", \"pipe\", \"pipe\"],\n      });\n\n      let stdout = \"\";\n      let stderr = \"\";\n      let timedOut = false;\n      let settled = false;\n\n      const timeoutHandle =\n        options?.timeout && options.timeout > 0\n          ? setTimeout(() => {\n              timedOut = true;\n              if (child.pid) killProcessTree(child.pid);\n            }, options.timeout * 1000)\n          : undefined;\n\n      const onAbort = () => {\n        if (child.pid) killProcessTree(child.pid);\n      };\n\n      if (options?.signal) {\n        if (options.signal.aborted) {\n          onAbort();\n        } else {\n          options.signal.addEventListener(\"abort\", onAbort, { once: true });\n        }\n      }\n\n      child.on(\"error\", (error) => {\n        if (settled) return;\n        settled = true;\n        if (timeoutHandle) clearTimeout(timeoutHandle);\n        if (options?.signal) {\n          options.signal.removeEventListener(\"abort\", onAbort);\n        }\n        reject(error);\n      });\n\n      child.stdout?.on(\"data\", (data) => {\n        stdout += data.toString();\n        if (stdout.length > 10 * 1024 * 1024) {\n          stdout = stdout.slice(0, 10 * 1024 * 1024);\n        }\n      });\n\n      child.stderr?.on(\"data\", (data) => {\n        stderr += data.toString();\n        if (stderr.length > 10 * 1024 * 1024) {\n          stderr = stderr.slice(0, 10 * 1024 * 1024);\n        }\n      });\n\n      child.stdin?.on(\"error\", (error) => {\n        stderr += `${error.message}\\n`;\n      });\n      child.stdin?.end(buildRemoteScript(command, this.env));\n\n      child.on(\"close\", (code) => {\n        if (settled) return;\n        settled = true;\n        if (timeoutHandle) clearTimeout(timeoutHandle);\n        if (options?.signal) {\n          options.signal.removeEventListener(\"abort\", onAbort);\n        }\n\n        if (options?.signal?.aborted) {\n          reject(new Error(`${stdout}\\n${stderr}\\nCommand aborted`.trim()));\n          return;\n        }\n\n        if (timedOut) {\n          reject(\n            new Error(\n              `${stdout}\\n${stderr}\\nCommand timed out after ${options?.timeout} seconds`.trim(),\n            ),\n          );\n          return;\n        }\n\n        resolve({ stdout, stderr, code: code ?? 0 });\n      });\n    });\n  }\n\n  readFile(path: string, options?: ExecOptions): Promise<string> {\n    return execReadFile(this, path, options);\n  }\n\n  readFileBase64(path: string, options?: ExecOptions): Promise<string> {\n    return execReadFileBase64(this, path, options);\n  }\n\n  writeFile(path: string, content: string, options?: ExecOptions): Promise<void> {\n    return execWriteFile(this, path, content, options);\n  }\n\n  getWorkspacePath(_hostPath: string): string {\n    return \"/workspace\";\n  }\n\n  getPathContext(hostWorkspaceRoot: string): RuntimePathContext {\n    return {\n      hostWorkspaceRoot,\n      runtimeWorkspaceRoot: \"/workspace\",\n    };\n  }\n\n  getSandboxConfig(): FirecrackerSandboxConfig {\n    return {\n      type: \"firecracker\",\n      vmId: this.vmId,\n      hostPath: this.hostPath,\n      sshUser: this.sshUser,\n      sshPort: this.sshPort,\n    };\n  }\n}\n\nfunction buildRemoteScript(command: string, env?: Record<string, string>): string {\n  const exports = env\n    ? Object.entries(env)\n        .map(([key, value]) => {\n          if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) {\n            throw new SandboxError(`Invalid environment variable name for firecracker: ${key}`);\n          }\n          return `export ${key}=${shellEscape(value)}`;\n        })\n        .join(\"\\n\") + \"\\n\"\n    : \"\";\n  return `${exports}${command}\\n`;\n}\n\nexport const firecrackerSandboxAdapter: SandboxAdapter<FirecrackerSandboxConfig> = {\n  type: \"firecracker\",\n  parse: parseFirecrackerSandboxArg,\n  validate: validateFirecrackerSandbox,\n  createExecutor: (config, env) =>\n    new FirecrackerExecutor(config.vmId, config.hostPath, config.sshUser, config.sshPort, env),\n};\n"]}

package/dist/sandbox/gondolin-bootstrap.d.ts

@@ -1,26 +0,0 @@
-import type { GondolinRemoteSettings, ResourceLimits } from "../types.js";
-export interface GondolinBootstrapOptions {
-    /** Host-only state dir; inventory, placements, and gateway CA live under it. */
-    stateDir: string;
-    /** Default per-runtime resource limits. */
-    limits?: ResourceLimits;
-    /** Boosted limits applied while a runtime holds a boost. */
-    boostLimits?: ResourceLimits;
-    /** Remote fleet settings (workers, gateway); omit for local-only gondolin. */
-    remote?: GondolinRemoteSettings;
-    /**
-     * Fail loudly when the remote profile is requested but no worker source is
-     * configured, instead of discovering it on the first runtime ensure.
-     */
-    requireRemote?: boolean;
-}
-/**
- * Configure every gondolin runtime singleton for one process — resources,
- * inventory, placements, fleet, join, gateway — from one options object.
- * This is the managed-sandbox bootstrap seam: main.ts and embedders
- * (src/index.ts) call it before creating conversation runtimes with a
- * gondolin sandbox config; nothing else may call the individual configure()
- * methods outside tests.
- */
-export declare function configureGondolinRuntime(options: GondolinBootstrapOptions): void;
-//# sourceMappingURL=gondolin-bootstrap.d.ts.map

package/dist/sandbox/gondolin-bootstrap.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"gondolin-bootstrap.d.ts","sourceRoot":"","sources":["../../src/sandbox/gondolin-bootstrap.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAQ1E,MAAM,WAAW,wBAAwB;IACvC,gFAAgF;IAChF,QAAQ,EAAE,MAAM,CAAC;IACjB,2CAA2C;IAC3C,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,4DAA4D;IAC5D,WAAW,CAAC,EAAE,cAAc,CAAC;IAC7B,8EAA8E;IAC9E,MAAM,CAAC,EAAE,sBAAsB,CAAC;IAChC;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,wBAAwB,GAAG,IAAI,CAUhF"}

package/dist/sandbox/gondolin-bootstrap.js

@@ -1,27 +0,0 @@
-import { join } from "node:path";
-import { assertRemoteConfigured, gondolinResources } from "./gondolin.js";
-import { gondolinFleet } from "./gondolin-fleet.js";
-import { gondolinGateway } from "./gondolin-gateway.js";
-import { gondolinInventory } from "./gondolin-inventory.js";
-import { gondolinJoin } from "./gondolin-join.js";
-import { gondolinPlacements } from "./gondolin-placement.js";
-/**
- * Configure every gondolin runtime singleton for one process — resources,
- * inventory, placements, fleet, join, gateway — from one options object.
- * This is the managed-sandbox bootstrap seam: main.ts and embedders
- * (src/index.ts) call it before creating conversation runtimes with a
- * gondolin sandbox config; nothing else may call the individual configure()
- * methods outside tests.
- */
-export function configureGondolinRuntime(options) {
-    gondolinResources.configure(options.limits, options.boostLimits);
-    gondolinInventory.configure(join(options.stateDir, "gondolin-runtimes"));
-    gondolinPlacements.configure(join(options.stateDir, "gondolin-placement.json"));
-    gondolinFleet.configure(options.remote);
-    gondolinJoin.configure(join(options.stateDir, "gondolin-gateway"));
-    gondolinGateway.configure(options.remote?.gateway);
-    if (options.requireRemote) {
-        assertRemoteConfigured();
-    }
-}
-//# sourceMappingURL=gondolin-bootstrap.js.map

package/dist/sandbox/gondolin-bootstrap.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gondolin-bootstrap.js","sourceRoot":"","sources":["../../src/sandbox/gondolin-bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAkB7D;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAiC;IACxE,iBAAiB,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IACjE,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC,CAAC;IACzE,kBAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC,CAAC;IAChF,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACnE,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnD,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,sBAAsB,EAAE,CAAC;IAC3B,CAAC;AACH,CAAC","sourcesContent":["import { join } from \"node:path\";\nimport type { GondolinRemoteSettings, ResourceLimits } from \"../types.js\";\nimport { assertRemoteConfigured, gondolinResources } from \"./gondolin.js\";\nimport { gondolinFleet } from \"./gondolin-fleet.js\";\nimport { gondolinGateway } from \"./gondolin-gateway.js\";\nimport { gondolinInventory } from \"./gondolin-inventory.js\";\nimport { gondolinJoin } from \"./gondolin-join.js\";\nimport { gondolinPlacements } from \"./gondolin-placement.js\";\n\nexport interface GondolinBootstrapOptions {\n  /** Host-only state dir; inventory, placements, and gateway CA live under it. */\n  stateDir: string;\n  /** Default per-runtime resource limits. */\n  limits?: ResourceLimits;\n  /** Boosted limits applied while a runtime holds a boost. */\n  boostLimits?: ResourceLimits;\n  /** Remote fleet settings (workers, gateway); omit for local-only gondolin. */\n  remote?: GondolinRemoteSettings;\n  /**\n   * Fail loudly when the remote profile is requested but no worker source is\n   * configured, instead of discovering it on the first runtime ensure.\n   */\n  requireRemote?: boolean;\n}\n\n/**\n * Configure every gondolin runtime singleton for one process — resources,\n * inventory, placements, fleet, join, gateway — from one options object.\n * This is the managed-sandbox bootstrap seam: main.ts and embedders\n * (src/index.ts) call it before creating conversation runtimes with a\n * gondolin sandbox config; nothing else may call the individual configure()\n * methods outside tests.\n */\nexport function configureGondolinRuntime(options: GondolinBootstrapOptions): void {\n  gondolinResources.configure(options.limits, options.boostLimits);\n  gondolinInventory.configure(join(options.stateDir, \"gondolin-runtimes\"));\n  gondolinPlacements.configure(join(options.stateDir, \"gondolin-placement.json\"));\n  gondolinFleet.configure(options.remote);\n  gondolinJoin.configure(join(options.stateDir, \"gondolin-gateway\"));\n  gondolinGateway.configure(options.remote?.gateway);\n  if (options.requireRemote) {\n    assertRemoteConfigured();\n  }\n}\n"]}

package/dist/sandbox/gondolin-contract.d.ts

@@ -1,125 +0,0 @@
-import { type Static } from "@sinclair/typebox";
-/**
- * Everything a worker process needs to host one Gondolin VM. Serialized as a
- * single JSON argv entry by both spawners (the local TS worker client and
- * the Go daemon's supervisor).
- */
-export declare const GondolinWorkerConfigSchema: import("@sinclair/typebox").TObject<{
-    /** mikan session key the runtime belongs to. */
-    instanceId: import("@sinclair/typebox").TString;
-    /** Resolved guest image asset directory. */
-    image: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
-    /** Image selector resolved inside the worker (remote workers, where the
-     * spawning host has no image store). Ignored when `image` is set. */
-    imageSelector: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
-    mounts: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
-        source: import("@sinclair/typebox").TString;
-        target: import("@sinclair/typebox").TString;
-    }>>;
-    cpus: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TNumber>;
-    memory: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
-    /** Desired-runtime fingerprint recorded for adoption checks. */
-    fingerprint: import("@sinclair/typebox").TString;
-    /** Runtime inventory directory (shared with the spawning mikan). */
-    inventoryDir: import("@sinclair/typebox").TString;
-    /** Self-stop when the mikan heartbeat file is older than this. 0 disables. */
-    heartbeatStaleMs: import("@sinclair/typebox").TNumber;
-}>;
-export type GondolinWorkerConfig = Static<typeof GondolinWorkerConfigSchema>;
-/** First stdout line of a worker, consumed by both spawners. */
-export declare const GondolinWorkerHandshakeSchema: import("@sinclair/typebox").TObject<{
-    ready: import("@sinclair/typebox").TBoolean;
-    error: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
-    sessionId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
-    socketPath: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
-    workerPid: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TNumber>;
-    runnerPid: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TNumber, import("@sinclair/typebox").TNull]>>;
-}>;
-export type GondolinWorkerHandshake = Static<typeof GondolinWorkerHandshakeSchema>;
-/**
- * One `<sessionId>.json` inventory record, written by the worker process and
- * read back by the TS inventory and the Go daemon's rediscovery.
- */
-export declare const GondolinRuntimeRecordSchema: import("@sinclair/typebox").TObject<{
-    /** Gondolin session id (`vm.id`); also names the record file. */
-    sessionId: import("@sinclair/typebox").TString;
-    /** mikan session key (vault key) the runtime was created for. */
-    instanceId: import("@sinclair/typebox").TString;
-    /** Process that owns the runtime (the worker process). */
-    ownerPid: import("@sinclair/typebox").TNumber;
-    /** Host pid of the active VM runner process (QEMU/krun), if started. */
-    runnerPid: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TNumber, import("@sinclair/typebox").TNull]>;
-    createdAt: import("@sinclair/typebox").TString;
-    /** Session IPC socket for adopting the runtime from a new mikan process. */
-    socketPath: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
-    /** Desired-runtime fingerprint the VM was created from. */
-    fingerprint: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
-}>;
-export type GondolinRuntimeRecord = Static<typeof GondolinRuntimeRecordSchema>;
-export declare function isGondolinRuntimeRecord(value: unknown): value is GondolinRuntimeRecord;
-/** A vault credential shipped by content on the ensure request (never a shared-fs mount). */
-declare const GondolinCredentialFileSchema: import("@sinclair/typebox").TObject<{
-    target: import("@sinclair/typebox").TString;
-    contentBase64: import("@sinclair/typebox").TString;
-}>;
-export type GondolinCredentialFile = Static<typeof GondolinCredentialFileSchema>;
-/** POST /v1/runtimes body sent to the remote worker daemon. */
-export declare const GondolinEnsureRuntimeRequestSchema: import("@sinclair/typebox").TObject<{
-    instanceId: import("@sinclair/typebox").TString;
-    imageSelector: import("@sinclair/typebox").TString;
-    mounts: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
-        source: import("@sinclair/typebox").TString;
-        target: import("@sinclair/typebox").TString;
-    }>>;
-    credentialFiles: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
-        target: import("@sinclair/typebox").TString;
-        contentBase64: import("@sinclair/typebox").TString;
-    }>>;
-    /** Fractional cgroup CPU limit as a string; "" when unset. */
-    cpus: import("@sinclair/typebox").TString;
-    memory: import("@sinclair/typebox").TString;
-    fingerprint: import("@sinclair/typebox").TString;
-    /** Accepted by the daemon; the TS client currently leaves it unset (0). */
-    heartbeatStaleMs: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TNumber>;
-}>;
-export type GondolinEnsureRuntimeRequest = Static<typeof GondolinEnsureRuntimeRequestSchema>;
-/**
- * One runtime as reported by the daemon (ensure response, GET, and the
- * elements of the list response). The daemon's socketPath never crosses the
- * wire — sessions reach the runtime through the tunnel, not the socket.
- */
-export declare const GondolinRemoteRuntimeSchema: import("@sinclair/typebox").TObject<{
-    sessionId: import("@sinclair/typebox").TString;
-    instanceId: import("@sinclair/typebox").TString;
-    fingerprint: import("@sinclair/typebox").TString;
-    workerPid: import("@sinclair/typebox").TNumber;
-    runnerPid: import("@sinclair/typebox").TNumber;
-    epoch: import("@sinclair/typebox").TNumber;
-    adopted: import("@sinclair/typebox").TBoolean;
-}>;
-export type GondolinRemoteRuntime = Static<typeof GondolinRemoteRuntimeSchema>;
-/** POST /v1/leases response: a fenced, epoch-monotonic per-instance lease. */
-export declare const GondolinLeaseGrantSchema: import("@sinclair/typebox").TObject<{
-    id: import("@sinclair/typebox").TString;
-    instanceId: import("@sinclair/typebox").TString;
-    epoch: import("@sinclair/typebox").TNumber;
-    /** RFC 3339 timestamp (Go time.Time marshalling). */
-    expiresAt: import("@sinclair/typebox").TString;
-}>;
-/** Structural shape of the JSON messages on the session protocol. */
-export interface SessionFrameCallbacks {
-    onJson: (message: {
-        type: string;
-        id?: number;
-        exit_code?: number | null;
-        code?: string;
-        message?: string;
-    }) => void;
-    onBinary: (frame: Buffer) => void;
-}
-/** Parses the daemon-to-client session framing: u8 type + u32be length + payload. */
-export declare function createSessionFrameParser(callbacks: SessionFrameCallbacks): (chunk: Buffer) => void;
-/** Encodes a client-to-daemon session message: u32be length + JSON. */
-export declare function encodeSessionMessage(message: object): Buffer;
-export {};
-//# sourceMappingURL=gondolin-contract.d.ts.map

package/dist/sandbox/gondolin-contract.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"gondolin-contract.d.ts","sourceRoot":"","sources":["../../src/sandbox/gondolin-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,KAAK,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAuBtD;;;;GAIG;AACH,eAAO,MAAM,0BAA0B;IACrC,gDAAgD;;IAEhD,4CAA4C;;IAE5C;yEACqE;;;;;;;;IAKrE,gEAAgE;;IAEhE,oEAAoE;;IAEpE,8EAA8E;;EAE9E,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE7E,gEAAgE;AAChE,eAAO,MAAM,6BAA6B;;;;;;;EAOxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEnF;;;GAGG;AACH,eAAO,MAAM,2BAA2B;IACtC,iEAAiE;;IAEjE,iEAAiE;;IAEjE,0DAA0D;;IAE1D,wEAAwE;;;IAGxE,4EAA4E;;IAE5E,2DAA2D;;EAE3D,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,MAAM,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAE/E,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,qBAAqB,CAYtF;AAED,6FAA6F;AAC7F,QAAA,MAAM,4BAA4B;;;EAGhC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAEjF,+DAA+D;AAC/D,eAAO,MAAM,kCAAkC;;;;;;;;;;;IAK7C,8DAA8D;;;;IAI9D,2EAA2E;;EAE3E,CAAC;AAEH,MAAM,MAAM,4BAA4B,GAAG,MAAM,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAE7F;;;;GAIG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;EAQtC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,MAAM,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAE/E,8EAA8E;AAC9E,eAAO,MAAM,wBAAwB;;;;IAInC,qDAAqD;;EAErD,CAAC;AAOH,qEAAqE;AACrE,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,CAAC,OAAO,EAAE;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,KAAK,IAAI,CAAC;IACX,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;CACnC;AAED,qFAAqF;AACrF,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,qBAAqB,GAC/B,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAqBzB;AAED,uEAAuE;AACvE,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAK5D"}