@geminixiang/mikan 1.3.0 → 1.4.0-beta.0

package/dist/harness/execution-env.js

@@ -1,322 +0,0 @@
-import { randomBytes } from "node:crypto";
-import { posix } from "node:path";
-import { ExecutionError, FileError, LineScanner, err, ok, } from "@earendil-works/pi-durable/env";
-import { NodeExecutionEnv } from "@earendil-works/pi-durable/env/node";
-import { execAppendFile, execWriteFile, shellEscape } from "../sandbox/utils.js";
-import { errorMessage } from "../unknown-values.js";
-const SPILL_DIR = ".mikan/bash-output";
-const READ_REGULAR_FILE = [
-    'if [ "$2" = 1 ] && [ -L "$1" ]; then echo link;',
-    'elif [ -d "$1" ]; then echo directory;',
-    'elif [ -f "$1" ]; then echo "file $(date -r "$1" +%s)"; base64 < "$1";',
-    'elif [ -e "$1" ]; then echo other; else echo missing; fi',
-].join(" ");
-export function createSandboxExecutionEnv(executor, sandboxType, runtimeWorkspaceRoot) {
-    if (sandboxType === "host") {
-        return new NodeExecutionEnv({ cwd: runtimeWorkspaceRoot });
-    }
-    return new ShellExecutionEnv(executor, runtimeWorkspaceRoot);
-}
-class ShellExecutionEnv {
-    constructor(executor, runtimeWorkspaceRoot) {
-        this.executor = executor;
-        this.id = `mikan-sandbox:${randomBytes(8).toString("hex")}`;
-        this.cwd = runtimeWorkspaceRoot;
-    }
-    async absolutePath(path, _context) {
-        return ok(posix.isAbsolute(path) ? posix.normalize(path) : posix.resolve(this.cwd, path));
-    }
-    async joinPath(parts, _context) {
-        return ok(posix.join(...parts));
-    }
-    readTextFile(path, context) {
-        return this.fileOp(() => this.executor.readFile(path, this.execOptions(context)));
-    }
-    openTextLineReader(path, context) {
-        return this.fileOp(async () => {
-            const content = await this.executor.readFile(path, this.execOptions(context));
-            return new ShellTextLineReader(content);
-        });
-    }
-    async readBinaryFile(path, context) {
-        return this.fileOp(async () => Buffer.from(await this.executor.readFileBase64(path, this.execOptions(context)), "base64"));
-    }
-    readTextLines(path, options, context) {
-        return this.fileOp(async () => {
-            const max = options?.maxLines;
-            const command = max === undefined
-                ? `cat ${shellEscape(path)}`
-                : `head -n ${Math.max(0, Math.floor(max))} ${shellEscape(path)}`;
-            const { stdout } = await this.run(command, context);
-            const lines = stdout.split("\n");
-            if (lines.at(-1) === "")
-                lines.pop();
-            return lines;
-        });
-    }
-    writeFile(path, content, context) {
-        return this.fileOp(() => execWriteFile(this.executor, path, content, this.execOptions(context)));
-    }
-    appendFile(path, content, context) {
-        return this.fileOp(() => execAppendFile(this.executor, path, content, this.execOptions(context)));
-    }
-    truncateFile(path, size, context) {
-        return this.fileOp(async () => {
-            await this.run(`truncate -s ${Math.max(0, Math.floor(size))} ${shellEscape(path)}`, context);
-        });
-    }
-    flushFile(path, context) {
-        return this.fileOp(async () => {
-            await this.run(`sync ${shellEscape(path)}`, context);
-        });
-    }
-    renameFile(sourcePath, destinationPath, context) {
-        return this.fileOp(async () => {
-            await this.run(`mv -f ${shellEscape(sourcePath)} ${shellEscape(destinationPath)}`, context);
-        });
-    }
-    fileInfo(path, context) {
-        return this.fileOp(async () => {
-            const escaped = shellEscape(path);
-            const probe = await this.executor.exec(`if [ -L ${escaped} ]; then printf 'symlink'; elif [ -d ${escaped} ]; then printf 'directory'; ` +
-                `elif [ -f ${escaped} ]; then printf 'file'; else exit 1; fi`, this.execOptions(context));
-            if (probe.code !== 0)
-                throw new Error(`No such file or directory: ${path}`);
-            const kind = probe.stdout.trim();
-            let size = 0;
-            if (kind === "file") {
-                const stat = await this.executor.exec(`wc -c < ${escaped}`, this.execOptions(context));
-                if (stat.code === 0)
-                    size = Number.parseInt(stat.stdout.trim(), 10) || 0;
-            }
-            let mtimeMs = 0;
-            const mtime = await this.executor.exec(`date -r ${escaped} +%s`, this.execOptions(context));
-            if (mtime.code === 0)
-                mtimeMs = (Number.parseInt(mtime.stdout.trim(), 10) || 0) * 1000;
-            return { name: posix.basename(path), path, kind, size, mtimeMs };
-        });
-    }
-    async openBinaryReader(path, options, context) {
-        return this.fileOp(async () => {
-            const { stdout } = await this.run(`sh -c ${shellEscape(READ_REGULAR_FILE)} _ ${shellEscape(path)} ${options?.noFollow ? 1 : 0}`, context);
-            const headerEnd = stdout.indexOf("\n");
-            const [kind, mtime] = stdout.slice(0, headerEnd).split(" ");
-            if (kind === "missing")
-                throw new FileError("not_found", `No such file: ${path}`, path);
-            if (kind === "directory")
-                throw new FileError("is_directory", `Is a directory: ${path}`, path);
-            if (kind !== "file")
-                throw new FileError("invalid", `Not a regular file: ${path}`, path);
-            const bytes = Buffer.from(stdout.slice(headerEnd + 1).replace(/\s+/g, ""), "base64");
-            return new SnapshotBinaryReader(bytes, {
-                name: posix.basename(path),
-                path,
-                kind: "file",
-                size: bytes.length,
-                mtimeMs: (Number.parseInt(mtime ?? "", 10) || 0) * 1000,
-            });
-        });
-    }
-    openDirReader(path, context) {
-        return this.fileOp(async () => {
-            const listed = await this.listDir(path, context);
-            if (!listed.ok)
-                throw listed.error;
-            return new SnapshotDirReader(listed.value);
-        });
-    }
-    async watch() {
-        return err(new FileError("not_supported", "The sandbox does not report file changes"));
-    }
-    async listDir(path, context) {
-        return this.fileOp(async () => {
-            const { stdout } = await this.run(`ls -A ${shellEscape(path)}`, context);
-            const names = stdout.split("\n").filter(Boolean).toSorted();
-            const entries = [];
-            for (const name of names) {
-                const child = posix.join(path, name);
-                const info = await this.fileInfo(child, context);
-                if (info.ok)
-                    entries.push(info.value);
-            }
-            return entries;
-        });
-    }
-    canonicalPath(path, context) {
-        return this.fileOp(async () => (await this.run(`realpath ${shellEscape(path)}`, context)).stdout.trim());
-    }
-    async exists(path, context) {
-        try {
-            const result = await this.executor.exec(`test -e ${shellEscape(path)}`, this.execOptions(context));
-            return ok(result.code === 0);
-        }
-        catch (error) {
-            return err(toFileError(error));
-        }
-    }
-    createDir(path, options, context) {
-        return this.fileOp(async () => {
-            const flag = options?.recursive === false ? "" : "-p ";
-            await this.run(`mkdir ${flag}${shellEscape(path)}`, context);
-        });
-    }
-    remove(path, options, context) {
-        return this.fileOp(async () => {
-            const recursive = options?.recursive ? "-r" : "";
-            const force = options?.force ? "-f" : "";
-            await this.run(`rm ${recursive} ${force} ${shellEscape(path)}`, context);
-        });
-    }
-    createTempDir(prefix, context) {
-        return this.fileOp(async () => {
-            const template = prefix === undefined ? "" : shellEscape(`${prefix}XXXXXX`);
-            const { stdout } = await this.run(`mktemp -d ${template}`.trim(), context);
-            return stdout.trim();
-        });
-    }
-    createTempFile(options, context) {
-        return this.fileOp(async () => {
-            const template = options?.prefix === undefined && options?.suffix === undefined
-                ? ""
-                : shellEscape(`${options?.prefix ?? ""}XXXXXX${options?.suffix ?? ""}`);
-            const { stdout } = await this.run(`mktemp ${template}`.trim(), context);
-            return stdout.trim();
-        });
-    }
-    async cleanup(_context) { }
-    async exec(command, options, context) {
-        try {
-            const shellCommand = typeof command === "string" ? command : command.map(shellEscape).join(" ");
-            const result = await this.executor.exec(shellCommand, {
-                cwd: options?.cwd || undefined,
-                timeout: options?.timeout || undefined,
-                signal: context.abortSignal,
-            });
-            const stdout = result.stdout.length > 0 && result.stderr.length > 0 ? `${result.stdout}\n` : result.stdout;
-            if (stdout.length > 0)
-                options?.onOutput?.(stdout, context, { stream: "stdout" });
-            if (result.stderr.length > 0) {
-                options?.onOutput?.(result.stderr, context, { stream: "stderr" });
-            }
-            const combined = `${stdout}${result.stderr}`;
-            return ok({ exitCode: result.code, spillPath: await this.spill(combined, options, context) });
-        }
-        catch (error) {
-            return err(toExecutionError(error, context));
-        }
-    }
-    async spill(output, options, context) {
-        const limits = options?.spill;
-        if (!limits)
-            return undefined;
-        const lines = output.split("\n").length;
-        if (Buffer.byteLength(output, "utf8") <= limits.afterBytes && lines <= limits.afterLines)
-            return undefined;
-        try {
-            const spillPath = posix.join(this.cwd, SPILL_DIR, `${randomBytes(8).toString("hex")}.log`);
-            await this.executor.writeFile(spillPath, output, this.execOptions(context));
-            return spillPath;
-        }
-        catch {
-            return undefined;
-        }
-    }
-    execOptions(context) {
-        return { signal: context.abortSignal };
-    }
-    async run(command, context) {
-        const result = await this.executor.exec(command, this.execOptions(context));
-        if (result.code !== 0) {
-            throw new Error(result.stderr.trim() || `Command failed (${result.code}): ${command}`);
-        }
-        return result;
-    }
-    async fileOp(op) {
-        try {
-            return ok(await op());
-        }
-        catch (error) {
-            return err(toFileError(error));
-        }
-    }
-}
-class SnapshotBinaryReader {
-    constructor(bytes, metadata) {
-        this.bytes = bytes;
-        this.metadata = metadata;
-    }
-    async info(_context) {
-        return ok(this.metadata);
-    }
-    async read(offset, length, _context) {
-        return ok(this.bytes.subarray(offset, offset + length));
-    }
-    async scanLines(options, _context) {
-        const scanner = new LineScanner(options.startLine, options.endLine);
-        scanner.push(this.bytes);
-        return ok(scanner.finish());
-    }
-    async close(_context) { }
-}
-class SnapshotDirReader {
-    constructor(entries) {
-        this.entries = entries;
-        this.offset = 0;
-    }
-    async next(maxEntries, _context) {
-        const page = this.entries.slice(this.offset, this.offset + Math.max(1, maxEntries));
-        this.offset += page.length;
-        return ok({ entries: page, done: this.offset >= this.entries.length });
-    }
-    async close(_context) {
-        this.offset = this.entries.length;
-    }
-}
-class ShellTextLineReader {
-    constructor(content) {
-        this.content = content;
-        this.offset = 0;
-    }
-    async readLine(_context) {
-        if (this.offset >= this.content.length)
-            return ok(undefined);
-        const newline = this.content.indexOf("\n", this.offset);
-        if (newline === -1) {
-            const text = this.content.slice(this.offset);
-            this.offset = this.content.length;
-            return ok({ text, terminated: false });
-        }
-        const text = this.content.slice(this.offset, newline);
-        this.offset = newline + 1;
-        return ok({ text, terminated: true });
-    }
-    async close(_context) {
-        this.offset = this.content.length;
-    }
-}
-function toFileError(error) {
-    if (error instanceof FileError)
-        return error;
-    const message = errorMessage(error);
-    if (/aborted/i.test(message))
-        return new FileError("aborted", message);
-    if (/no such file|not found/i.test(message))
-        return new FileError("not_found", message);
-    if (/permission denied/i.test(message))
-        return new FileError("permission_denied", message);
-    if (/not a directory/i.test(message))
-        return new FileError("not_directory", message);
-    if (/is a directory/i.test(message))
-        return new FileError("is_directory", message);
-    return new FileError("unknown", message, undefined, error instanceof Error ? error : undefined);
-}
-function toExecutionError(error, context) {
-    const message = errorMessage(error);
-    if (context.abortSignal?.aborted || /aborted/i.test(message)) {
-        return new ExecutionError("aborted", message);
-    }
-    if (/timed out/i.test(message))
-        return new ExecutionError("timeout", message);
-    return new ExecutionError("unknown", message, error instanceof Error ? error : undefined);
-}
-//# sourceMappingURL=execution-env.js.map

package/dist/harness/execution-env.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"execution-env.js","sourceRoot":"","sources":["../../src/harness/execution-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAElC,OAAO,EACL,cAAc,EACd,SAAS,EACT,WAAW,EACX,GAAG,EACH,EAAE,GAaH,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AAEvE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,MAAM,SAAS,GAAG,oBAAoB,CAAC;AAEvC,MAAM,iBAAiB,GAAG;IACxB,iDAAiD;IACjD,wCAAwC;IACxC,wEAAwE;IACxE,0DAA0D;CAC3D,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEZ,MAAM,UAAU,yBAAyB,CACvC,QAAkB,EAClB,WAAkC,EAClC,oBAA4B;IAE5B,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,IAAI,gBAAgB,CAAC,EAAE,GAAG,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,IAAI,iBAAiB,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,iBAAiB;IAIrB,YACmB,QAAkB,EACnC,oBAA4B;wBADX,QAAQ;QAGzB,IAAI,CAAC,EAAE,GAAG,iBAAiB,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5D,IAAI,CAAC,GAAG,GAAG,oBAAoB,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,QAAiB;QAChD,OAAO,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IAC5F,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAe,EAAE,QAAiB;QAC/C,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;IAClC,CAAC;IAED,YAAY,CAAC,IAAY,EAAE,OAAgB;QACzC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACpF,CAAC;IAED,kBAAkB,CAAC,IAAY,EAAE,OAAgB;QAC/C,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;YAC5B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;YAC9E,OAAO,IAAI,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,IAAY,EAAE,OAAgB;QACjD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAC5B,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,EAAE,QAAQ,CAAC,CAC3F,CAAC;IACJ,CAAC;IAED,aAAa,CACX,IAAY,EACZ,OAA0C,EAC1C,OAAgB;QAEhB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;YAC5B,MAAM,GAAG,GAAG,OAAO,EAAE,QAAQ,CAAC;YAC9B,MAAM,OAAO,GACX,GAAG,KAAK,SAAS;gBACf,CAAC,CAAC,OAAO,WAAW,CAAC,IAAI,CAAC,EAAE;gBAC5B,CAAC,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACrE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACpD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE;gBAAE,KAAK,CAAC,GAAG,EAAE,CAAC;YACrC,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,CACP,IAAY,EACZ,OAA4B,EAC5B,OAAgB;QAEhB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CACtB,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CACvE,CAAC;IACJ,CAAC;IAED,UAAU,CACR,IAAY,EACZ,OAA4B,EAC5B,OAAgB;QAEhB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CACtB,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CACxE,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,IAAY,EAAE,IAAY,EAAE,OAAgB;QACvD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;YAC5B,MAAM,IAAI,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAC/F,CAAC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,CAAC,IAAY,EAAE,OAAgB;QACtC,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;YAC5B,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,UAAU,CACR,UAAkB,EAClB,eAAuB,EACvB,OAAgB;QAEhB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;YAC5B,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,WAAW,CAAC,UAAU,CAAC,IAAI,WAAW,CAAC,eAAe,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAC9F,CAAC,CAAC,CAAC;IACL,CAAC;IAED,QAAQ,CAAC,IAAY,EAAE,OAAgB;QACrC,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;YAC5B,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CACpC,WAAW,OAAO,wCAAwC,OAAO,+BAA+B;gBAC9F,aAAa,OAAO,yCAAyC,EAC/D,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAC1B,CAAC;YACF,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,EAAE,CAAC,CAAC;YAC5E,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAc,CAAC;YAC7C,IAAI,IAAI,GAAG,CAAC,CAAC;YACb,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,OAAO,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;gBACvF,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;oBAAE,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;YAC3E,CAAC;YACD,IAAI,OAAO,GAAG,CAAC,CAAC;YAChB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,OAAO,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5F,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC;gBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;YACvF,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACnE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,IAAY,EACZ,OAA2C,EAC3C,OAAgB;QAEhB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;YAC5B,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAC/B,SAAS,WAAW,CAAC,iBAAiB,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAC7F,OAAO,CACR,CAAC;YACF,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5D,IAAI,IAAI,KAAK,SAAS;gBAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,iBAAiB,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;YACxF,IAAI,IAAI,KAAK,WAAW;gBACtB,MAAM,IAAI,SAAS,CAAC,cAAc,EAAE,mBAAmB,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;YACvE,IAAI,IAAI,KAAK,MAAM;gBAAE,MAAM,IAAI,SAAS,CAAC,SAAS,EAAE,uBAAuB,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;YACzF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;YACrF,OAAO,IAAI,oBAAoB,CAAC,KAAK,EAAE;gBACrC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAC1B,IAAI;gBACJ,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,KAAK,CAAC,MAAM;gBAClB,OAAO,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI;aACxD,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CAAC,IAAY,EAAE,OAAgB;QAC1C,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;YAC5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACjD,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,MAAM,MAAM,CAAC,KAAK,CAAC;YACnC,OAAO,IAAI,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK;QACT,OAAO,GAAG,CAAC,IAAI,SAAS,CAAC,eAAe,EAAE,0CAA0C,CAAC,CAAC,CAAC;IACzF,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,OAAgB;QAC1C,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;YAC5B,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YACzE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC5D,MAAM,OAAO,GAAe,EAAE,CAAC;YAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACrC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBACjD,IAAI,IAAI,CAAC,EAAE;oBAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxC,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CAAC,IAAY,EAAE,OAAgB;QAC1C,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAC5B,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,YAAY,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CACzE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,OAAgB;QACzC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CACrC,WAAW,WAAW,CAAC,IAAI,CAAC,EAAE,EAC9B,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAC1B,CAAC;YACF,OAAO,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,SAAS,CACP,IAAY,EACZ,OAA4C,EAC5C,OAAgB;QAEhB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;YAC5B,MAAM,IAAI,GAAG,OAAO,EAAE,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;YACvD,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CACJ,IAAY,EACZ,OAA6D,EAC7D,OAAgB;QAEhB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;YAC5B,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,SAAS,IAAI,KAAK,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CAAC,MAA0B,EAAE,OAAgB;QACxD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;YAC5B,MAAM,QAAQ,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,MAAM,QAAQ,CAAC,CAAC;YAC5E,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,aAAa,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;YAC3E,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,cAAc,CACZ,OAAyD,EACzD,OAAgB;QAEhB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;YAC5B,MAAM,QAAQ,GACZ,OAAO,EAAE,MAAM,KAAK,SAAS,IAAI,OAAO,EAAE,MAAM,KAAK,SAAS;gBAC5D,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,WAAW,CAAC,GAAG,OAAO,EAAE,MAAM,IAAI,EAAE,SAAS,OAAO,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;YAC5E,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;YACxE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,QAAiB,IAAkB,CAAC;IAElD,KAAK,CAAC,IAAI,CACR,OAAmC,EACnC,OAAqC,EACrC,OAAgB;QAEhB,IAAI,CAAC;YACH,MAAM,YAAY,GAChB,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE;gBACpD,GAAG,EAAE,OAAO,EAAE,GAAG,IAAI,SAAS;gBAC9B,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,SAAS;gBACtC,MAAM,EAAE,OAAO,CAAC,WAAW;aAC5B,CAAC,CAAC;YACH,MAAM,MAAM,GACV,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;YAC9F,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YAClF,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,OAAO,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,MAAM,QAAQ,GAAG,GAAG,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;YAC7C,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QAChG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,GAAG,CAAC,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAK,CACjB,MAAc,EACd,OAAqC,EACrC,OAAgB;QAEhB,MAAM,MAAM,GAAG,OAAO,EAAE,KAAK,CAAC;QAC9B,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;QACxC,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,IAAI,KAAK,IAAI,MAAM,CAAC,UAAU;YACtF,OAAO,SAAS,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC3F,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5E,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,OAAgB;QAClC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;IACzC,CAAC;IAEO,KAAK,CAAC,GAAG,CACf,OAAe,EACf,OAAgB;QAEhB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;QAC5E,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,mBAAmB,MAAM,CAAC,IAAI,MAAM,OAAO,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,MAAM,CAAI,EAAoB;QAC1C,IAAI,CAAC;YACH,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;CACF;AAED,MAAM,oBAAoB;IACxB,YACmB,KAAiB,EACjB,QAAkB;qBADlB,KAAK;wBACL,QAAQ;IACxB,CAAC;IAEJ,KAAK,CAAC,IAAI,CAAC,QAAiB;QAC1B,OAAO,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,IAAI,CACR,MAAc,EACd,MAAc,EACd,QAAiB;QAEjB,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,SAAS,CACb,OAAgD,EAChD,QAAiB;QAEjB,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,OAAO,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,QAAiB,IAAkB,CAAC;CACjD;AAED,MAAM,iBAAiB;IAGrB,YAA6B,OAAmB;QAAnB,YAAO,GAAP,OAAO,CAAY;QAFxC,WAAM,GAAG,CAAC,CAAC;IAEgC,CAAC;IAEpD,KAAK,CAAC,IAAI,CACR,UAAkB,EAClB,QAAiB;QAEjB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;QACpF,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;QAC3B,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,QAAiB;QAC3B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IACpC,CAAC;CACF;AAED,MAAM,mBAAmB;IAGvB,YAA6B,OAAe;QAAf,YAAO,GAAP,OAAO,CAAQ;QAFpC,WAAM,GAAG,CAAC,CAAC;IAE4B,CAAC;IAEhD,KAAK,CAAC,QAAQ,CAAC,QAAiB;QAC9B,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YAClC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,GAAG,OAAO,GAAG,CAAC,CAAC;QAC1B,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,QAAiB;QAC3B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IACpC,CAAC;CACF;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,YAAY,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACvE,IAAI,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,SAAS,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACxF,IAAI,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,SAAS,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;IAC3F,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,SAAS,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;IACrF,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,SAAS,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IACnF,OAAO,IAAI,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAClG,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,OAAgB;IACxD,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,OAAO,CAAC,WAAW,EAAE,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7D,OAAO,IAAI,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC9E,OAAO,IAAI,cAAc,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAC5F,CAAC","sourcesContent":["import { randomBytes } from \"node:crypto\";\nimport { posix } from \"node:path\";\nimport type { Context } from \"@earendil-works/chord\";\nimport {\n  ExecutionError,\n  FileError,\n  LineScanner,\n  err,\n  ok,\n  type BinaryReader,\n  type DirReader,\n  type ExecutionEnv,\n  type FileInfo,\n  type FileKind,\n  type FileWatcher,\n  type LineScan,\n  type Result,\n  type ShellExecOptions,\n  type ShellExecResult,\n  type TextLine,\n  type TextLineReader,\n} from \"@earendil-works/pi-durable/env\";\nimport { NodeExecutionEnv } from \"@earendil-works/pi-durable/env/node\";\nimport type { Executor, SandboxConfig } from \"../sandbox/types.js\";\nimport { execAppendFile, execWriteFile, shellEscape } from \"../sandbox/utils.js\";\nimport { errorMessage } from \"../unknown-values.js\";\n\nconst SPILL_DIR = \".mikan/bash-output\";\n\nconst READ_REGULAR_FILE = [\n  'if [ \"$2\" = 1 ] && [ -L \"$1\" ]; then echo link;',\n  'elif [ -d \"$1\" ]; then echo directory;',\n  'elif [ -f \"$1\" ]; then echo \"file $(date -r \"$1\" +%s)\"; base64 < \"$1\";',\n  'elif [ -e \"$1\" ]; then echo other; else echo missing; fi',\n].join(\" \");\n\nexport function createSandboxExecutionEnv(\n  executor: Executor,\n  sandboxType: SandboxConfig[\"type\"],\n  runtimeWorkspaceRoot: string,\n): ExecutionEnv {\n  if (sandboxType === \"host\") {\n    return new NodeExecutionEnv({ cwd: runtimeWorkspaceRoot });\n  }\n  return new ShellExecutionEnv(executor, runtimeWorkspaceRoot);\n}\n\nclass ShellExecutionEnv implements ExecutionEnv {\n  readonly id: string;\n  readonly cwd: string;\n\n  constructor(\n    private readonly executor: Executor,\n    runtimeWorkspaceRoot: string,\n  ) {\n    this.id = `mikan-sandbox:${randomBytes(8).toString(\"hex\")}`;\n    this.cwd = runtimeWorkspaceRoot;\n  }\n\n  async absolutePath(path: string, _context: Context): Promise<Result<string, FileError>> {\n    return ok(posix.isAbsolute(path) ? posix.normalize(path) : posix.resolve(this.cwd, path));\n  }\n\n  async joinPath(parts: string[], _context: Context): Promise<Result<string, FileError>> {\n    return ok(posix.join(...parts));\n  }\n\n  readTextFile(path: string, context: Context): Promise<Result<string, FileError>> {\n    return this.fileOp(() => this.executor.readFile(path, this.execOptions(context)));\n  }\n\n  openTextLineReader(path: string, context: Context): Promise<Result<TextLineReader, FileError>> {\n    return this.fileOp(async () => {\n      const content = await this.executor.readFile(path, this.execOptions(context));\n      return new ShellTextLineReader(content);\n    });\n  }\n\n  async readBinaryFile(path: string, context: Context): Promise<Result<Uint8Array, FileError>> {\n    return this.fileOp(async () =>\n      Buffer.from(await this.executor.readFileBase64(path, this.execOptions(context)), \"base64\"),\n    );\n  }\n\n  readTextLines(\n    path: string,\n    options: { maxLines?: number } | undefined,\n    context: Context,\n  ): Promise<Result<string[], FileError>> {\n    return this.fileOp(async () => {\n      const max = options?.maxLines;\n      const command =\n        max === undefined\n          ? `cat ${shellEscape(path)}`\n          : `head -n ${Math.max(0, Math.floor(max))} ${shellEscape(path)}`;\n      const { stdout } = await this.run(command, context);\n      const lines = stdout.split(\"\\n\");\n      if (lines.at(-1) === \"\") lines.pop();\n      return lines;\n    });\n  }\n\n  writeFile(\n    path: string,\n    content: string | Uint8Array,\n    context: Context,\n  ): Promise<Result<void, FileError>> {\n    return this.fileOp(() =>\n      execWriteFile(this.executor, path, content, this.execOptions(context)),\n    );\n  }\n\n  appendFile(\n    path: string,\n    content: string | Uint8Array,\n    context: Context,\n  ): Promise<Result<void, FileError>> {\n    return this.fileOp(() =>\n      execAppendFile(this.executor, path, content, this.execOptions(context)),\n    );\n  }\n\n  truncateFile(path: string, size: number, context: Context): Promise<Result<void, FileError>> {\n    return this.fileOp(async () => {\n      await this.run(`truncate -s ${Math.max(0, Math.floor(size))} ${shellEscape(path)}`, context);\n    });\n  }\n\n  flushFile(path: string, context: Context): Promise<Result<void, FileError>> {\n    return this.fileOp(async () => {\n      await this.run(`sync ${shellEscape(path)}`, context);\n    });\n  }\n\n  renameFile(\n    sourcePath: string,\n    destinationPath: string,\n    context: Context,\n  ): Promise<Result<void, FileError>> {\n    return this.fileOp(async () => {\n      await this.run(`mv -f ${shellEscape(sourcePath)} ${shellEscape(destinationPath)}`, context);\n    });\n  }\n\n  fileInfo(path: string, context: Context): Promise<Result<FileInfo, FileError>> {\n    return this.fileOp(async () => {\n      const escaped = shellEscape(path);\n      const probe = await this.executor.exec(\n        `if [ -L ${escaped} ]; then printf 'symlink'; elif [ -d ${escaped} ]; then printf 'directory'; ` +\n          `elif [ -f ${escaped} ]; then printf 'file'; else exit 1; fi`,\n        this.execOptions(context),\n      );\n      if (probe.code !== 0) throw new Error(`No such file or directory: ${path}`);\n      const kind = probe.stdout.trim() as FileKind;\n      let size = 0;\n      if (kind === \"file\") {\n        const stat = await this.executor.exec(`wc -c < ${escaped}`, this.execOptions(context));\n        if (stat.code === 0) size = Number.parseInt(stat.stdout.trim(), 10) || 0;\n      }\n      let mtimeMs = 0;\n      const mtime = await this.executor.exec(`date -r ${escaped} +%s`, this.execOptions(context));\n      if (mtime.code === 0) mtimeMs = (Number.parseInt(mtime.stdout.trim(), 10) || 0) * 1000;\n      return { name: posix.basename(path), path, kind, size, mtimeMs };\n    });\n  }\n\n  async openBinaryReader(\n    path: string,\n    options: { noFollow?: boolean } | undefined,\n    context: Context,\n  ): Promise<Result<BinaryReader, FileError>> {\n    return this.fileOp(async () => {\n      const { stdout } = await this.run(\n        `sh -c ${shellEscape(READ_REGULAR_FILE)} _ ${shellEscape(path)} ${options?.noFollow ? 1 : 0}`,\n        context,\n      );\n      const headerEnd = stdout.indexOf(\"\\n\");\n      const [kind, mtime] = stdout.slice(0, headerEnd).split(\" \");\n      if (kind === \"missing\") throw new FileError(\"not_found\", `No such file: ${path}`, path);\n      if (kind === \"directory\")\n        throw new FileError(\"is_directory\", `Is a directory: ${path}`, path);\n      if (kind !== \"file\") throw new FileError(\"invalid\", `Not a regular file: ${path}`, path);\n      const bytes = Buffer.from(stdout.slice(headerEnd + 1).replace(/\\s+/g, \"\"), \"base64\");\n      return new SnapshotBinaryReader(bytes, {\n        name: posix.basename(path),\n        path,\n        kind: \"file\",\n        size: bytes.length,\n        mtimeMs: (Number.parseInt(mtime ?? \"\", 10) || 0) * 1000,\n      });\n    });\n  }\n\n  openDirReader(path: string, context: Context): Promise<Result<DirReader, FileError>> {\n    return this.fileOp(async () => {\n      const listed = await this.listDir(path, context);\n      if (!listed.ok) throw listed.error;\n      return new SnapshotDirReader(listed.value);\n    });\n  }\n\n  async watch(): Promise<Result<FileWatcher, FileError>> {\n    return err(new FileError(\"not_supported\", \"The sandbox does not report file changes\"));\n  }\n\n  async listDir(path: string, context: Context): Promise<Result<FileInfo[], FileError>> {\n    return this.fileOp(async () => {\n      const { stdout } = await this.run(`ls -A ${shellEscape(path)}`, context);\n      const names = stdout.split(\"\\n\").filter(Boolean).toSorted();\n      const entries: FileInfo[] = [];\n      for (const name of names) {\n        const child = posix.join(path, name);\n        const info = await this.fileInfo(child, context);\n        if (info.ok) entries.push(info.value);\n      }\n      return entries;\n    });\n  }\n\n  canonicalPath(path: string, context: Context): Promise<Result<string, FileError>> {\n    return this.fileOp(async () =>\n      (await this.run(`realpath ${shellEscape(path)}`, context)).stdout.trim(),\n    );\n  }\n\n  async exists(path: string, context: Context): Promise<Result<boolean, FileError>> {\n    try {\n      const result = await this.executor.exec(\n        `test -e ${shellEscape(path)}`,\n        this.execOptions(context),\n      );\n      return ok(result.code === 0);\n    } catch (error) {\n      return err(toFileError(error));\n    }\n  }\n\n  createDir(\n    path: string,\n    options: { recursive?: boolean } | undefined,\n    context: Context,\n  ): Promise<Result<void, FileError>> {\n    return this.fileOp(async () => {\n      const flag = options?.recursive === false ? \"\" : \"-p \";\n      await this.run(`mkdir ${flag}${shellEscape(path)}`, context);\n    });\n  }\n\n  remove(\n    path: string,\n    options: { recursive?: boolean; force?: boolean } | undefined,\n    context: Context,\n  ): Promise<Result<void, FileError>> {\n    return this.fileOp(async () => {\n      const recursive = options?.recursive ? \"-r\" : \"\";\n      const force = options?.force ? \"-f\" : \"\";\n      await this.run(`rm ${recursive} ${force} ${shellEscape(path)}`, context);\n    });\n  }\n\n  createTempDir(prefix: string | undefined, context: Context): Promise<Result<string, FileError>> {\n    return this.fileOp(async () => {\n      const template = prefix === undefined ? \"\" : shellEscape(`${prefix}XXXXXX`);\n      const { stdout } = await this.run(`mktemp -d ${template}`.trim(), context);\n      return stdout.trim();\n    });\n  }\n\n  createTempFile(\n    options: { prefix?: string; suffix?: string } | undefined,\n    context: Context,\n  ): Promise<Result<string, FileError>> {\n    return this.fileOp(async () => {\n      const template =\n        options?.prefix === undefined && options?.suffix === undefined\n          ? \"\"\n          : shellEscape(`${options?.prefix ?? \"\"}XXXXXX${options?.suffix ?? \"\"}`);\n      const { stdout } = await this.run(`mktemp ${template}`.trim(), context);\n      return stdout.trim();\n    });\n  }\n\n  async cleanup(_context: Context): Promise<void> {}\n\n  async exec(\n    command: string | readonly string[],\n    options: ShellExecOptions | undefined,\n    context: Context,\n  ): Promise<Result<ShellExecResult, ExecutionError>> {\n    try {\n      const shellCommand =\n        typeof command === \"string\" ? command : command.map(shellEscape).join(\" \");\n      const result = await this.executor.exec(shellCommand, {\n        cwd: options?.cwd || undefined,\n        timeout: options?.timeout || undefined,\n        signal: context.abortSignal,\n      });\n      const stdout =\n        result.stdout.length > 0 && result.stderr.length > 0 ? `${result.stdout}\\n` : result.stdout;\n      if (stdout.length > 0) options?.onOutput?.(stdout, context, { stream: \"stdout\" });\n      if (result.stderr.length > 0) {\n        options?.onOutput?.(result.stderr, context, { stream: \"stderr\" });\n      }\n      const combined = `${stdout}${result.stderr}`;\n      return ok({ exitCode: result.code, spillPath: await this.spill(combined, options, context) });\n    } catch (error) {\n      return err(toExecutionError(error, context));\n    }\n  }\n\n  private async spill(\n    output: string,\n    options: ShellExecOptions | undefined,\n    context: Context,\n  ): Promise<string | undefined> {\n    const limits = options?.spill;\n    if (!limits) return undefined;\n    const lines = output.split(\"\\n\").length;\n    if (Buffer.byteLength(output, \"utf8\") <= limits.afterBytes && lines <= limits.afterLines)\n      return undefined;\n    try {\n      const spillPath = posix.join(this.cwd, SPILL_DIR, `${randomBytes(8).toString(\"hex\")}.log`);\n      await this.executor.writeFile(spillPath, output, this.execOptions(context));\n      return spillPath;\n    } catch {\n      return undefined;\n    }\n  }\n\n  private execOptions(context: Context): { signal: AbortSignal | undefined } {\n    return { signal: context.abortSignal };\n  }\n\n  private async run(\n    command: string,\n    context: Context,\n  ): Promise<{ stdout: string; stderr: string }> {\n    const result = await this.executor.exec(command, this.execOptions(context));\n    if (result.code !== 0) {\n      throw new Error(result.stderr.trim() || `Command failed (${result.code}): ${command}`);\n    }\n    return result;\n  }\n\n  private async fileOp<T>(op: () => Promise<T>): Promise<Result<T, FileError>> {\n    try {\n      return ok(await op());\n    } catch (error) {\n      return err(toFileError(error));\n    }\n  }\n}\n\nclass SnapshotBinaryReader implements BinaryReader {\n  constructor(\n    private readonly bytes: Uint8Array,\n    private readonly metadata: FileInfo,\n  ) {}\n\n  async info(_context: Context): Promise<Result<FileInfo, FileError>> {\n    return ok(this.metadata);\n  }\n\n  async read(\n    offset: number,\n    length: number,\n    _context: Context,\n  ): Promise<Result<Uint8Array, FileError>> {\n    return ok(this.bytes.subarray(offset, offset + length));\n  }\n\n  async scanLines(\n    options: { startLine: number; endLine?: number },\n    _context: Context,\n  ): Promise<Result<LineScan, FileError>> {\n    const scanner = new LineScanner(options.startLine, options.endLine);\n    scanner.push(this.bytes);\n    return ok(scanner.finish());\n  }\n\n  async close(_context: Context): Promise<void> {}\n}\n\nclass SnapshotDirReader implements DirReader {\n  private offset = 0;\n\n  constructor(private readonly entries: FileInfo[]) {}\n\n  async next(\n    maxEntries: number,\n    _context: Context,\n  ): Promise<Result<{ entries: FileInfo[]; done: boolean }, FileError>> {\n    const page = this.entries.slice(this.offset, this.offset + Math.max(1, maxEntries));\n    this.offset += page.length;\n    return ok({ entries: page, done: this.offset >= this.entries.length });\n  }\n\n  async close(_context: Context): Promise<void> {\n    this.offset = this.entries.length;\n  }\n}\n\nclass ShellTextLineReader implements TextLineReader {\n  private offset = 0;\n\n  constructor(private readonly content: string) {}\n\n  async readLine(_context: Context): Promise<Result<TextLine | undefined, FileError>> {\n    if (this.offset >= this.content.length) return ok(undefined);\n    const newline = this.content.indexOf(\"\\n\", this.offset);\n    if (newline === -1) {\n      const text = this.content.slice(this.offset);\n      this.offset = this.content.length;\n      return ok({ text, terminated: false });\n    }\n    const text = this.content.slice(this.offset, newline);\n    this.offset = newline + 1;\n    return ok({ text, terminated: true });\n  }\n\n  async close(_context: Context): Promise<void> {\n    this.offset = this.content.length;\n  }\n}\n\nfunction toFileError(error: unknown): FileError {\n  if (error instanceof FileError) return error;\n  const message = errorMessage(error);\n  if (/aborted/i.test(message)) return new FileError(\"aborted\", message);\n  if (/no such file|not found/i.test(message)) return new FileError(\"not_found\", message);\n  if (/permission denied/i.test(message)) return new FileError(\"permission_denied\", message);\n  if (/not a directory/i.test(message)) return new FileError(\"not_directory\", message);\n  if (/is a directory/i.test(message)) return new FileError(\"is_directory\", message);\n  return new FileError(\"unknown\", message, undefined, error instanceof Error ? error : undefined);\n}\n\nfunction toExecutionError(error: unknown, context: Context): ExecutionError {\n  const message = errorMessage(error);\n  if (context.abortSignal?.aborted || /aborted/i.test(message)) {\n    return new ExecutionError(\"aborted\", message);\n  }\n  if (/timed out/i.test(message)) return new ExecutionError(\"timeout\", message);\n  return new ExecutionError(\"unknown\", message, error instanceof Error ? error : undefined);\n}\n"]}