@hassangameryt/freeflow 0.3.0 → 0.5.0

package/router/dist/sandbox/eryx-python-adapter.js

@@ -17,420 +17,449 @@ const ERYX_CHILD_MODE_ARG = "__freeflow_eryx_child__";
 const ERYX_CHILD_TIMEOUT_FLOOR_MS = 30_000;
 export const ERYX_ROOT_ENV = "FREEFLOW_ERYX_ROOT";
 const PREVIEW2_IMPORTS = new Map([
-    ["@bytecodealliance/preview2-shim/cli", "../../@bytecodealliance/preview2-shim/lib/browser/cli.js"],
-    ["@bytecodealliance/preview2-shim/clocks", "../../@bytecodealliance/preview2-shim/lib/browser/clocks.js"],
-    ["@bytecodealliance/preview2-shim/filesystem", "../../@bytecodealliance/preview2-shim/lib/browser/filesystem.js"],
-    ["@bytecodealliance/preview2-shim/io", "../../@bytecodealliance/preview2-shim/lib/browser/io.js"],
-    ["@bytecodealliance/preview2-shim/random", "../../@bytecodealliance/preview2-shim/lib/browser/random.js"],
+  ["@bytecodealliance/preview2-shim/cli", "../../@bytecodealliance/preview2-shim/lib/browser/cli.js"],
+  ["@bytecodealliance/preview2-shim/clocks", "../../@bytecodealliance/preview2-shim/lib/browser/clocks.js"],
+  ["@bytecodealliance/preview2-shim/filesystem", "../../@bytecodealliance/preview2-shim/lib/browser/filesystem.js"],
+  ["@bytecodealliance/preview2-shim/io", "../../@bytecodealliance/preview2-shim/lib/browser/io.js"],
+  ["@bytecodealliance/preview2-shim/random", "../../@bytecodealliance/preview2-shim/lib/browser/random.js"],
 ]);
 const eryxProbeCache = new Map();
 export async function discoverEryxPythonSandboxAdaptersFromEnv(env = process.env) {
-    const candidate = await resolveScriptTransformAdapterRoot("python", env);
-    if (!candidate) {
-        return [];
-    }
-    try {
-        return [await createEryxPythonSandboxAdapter({ packageRoot: candidate.packageRoot })];
-    }
-    catch (error) {
-        return [unavailableEryxAdapter(`eryx-python adapter could not load from ${candidate.source === "env" ? candidate.envVar : "global adapter cache"}: ${errorMessage(error)}`)];
-    }
+  const candidate = await resolveScriptTransformAdapterRoot("python", env);
+  if (!candidate) {
+    return [];
+  }
+  try {
+    return [await createEryxPythonSandboxAdapter({ packageRoot: candidate.packageRoot })];
+  } catch (error) {
+    return [
+      unavailableEryxAdapter(
+        `eryx-python adapter could not load from ${candidate.source === "env" ? candidate.envVar : "global adapter cache"}: ${errorMessage(error)}`,
+      ),
+    ];
+  }
 }
 export async function createEryxPythonSandboxAdapter(options) {
-    const runtime = await loadEryxRuntime(options.packageRoot);
-    return {
-        id: options.id ?? "eryx-python",
-        version: options.version ?? runtime.packageVersion,
-        languages: ["python"],
-        async probe(language, config) {
-            if (language !== "python") {
-                return {
-                    status: "unavailable",
-                    reason: `eryx-python supports python, not ${language}.`,
-                    passedProofs: [],
-                    failedProofs: [...SCRIPT_SANDBOX_REQUIRED_PROOFS],
-                    runtime: runtimeInfo(runtime),
-                };
-            }
-            return probeEryxRuntime(runtime, config);
-        },
-        async execute(request) {
-            if (request.language !== "python") {
-                return {
-                    status: "policy_violation",
-                    stdout: "",
-                    stderr: "",
-                    outputFiles: [],
-                    exitCode: null,
-                    reason: `eryx-python supports python, not ${request.language}.`,
-                };
-            }
-            if (request.network !== "off") {
-                return {
-                    status: "policy_violation",
-                    stdout: "",
-                    stderr: "",
-                    outputFiles: [],
-                    exitCode: null,
-                    reason: "eryx-python adapter only supports network=off.",
-                };
-            }
-            if (!runtime.jspiAvailable) {
-                return executeEryxInJspiChild(runtime, request);
-            }
-            const inputs = {};
-            for (const source of request.sources) {
-                inputs[source.alias] = await readFile(source.path, "utf8");
-            }
-            const run = await runEryx(runtime, {
-                code: pythonPrelude(inputs) + request.code,
-                timeoutMs: request.limits.timeoutMs,
-                outputBytes: request.limits.maxOutputBytes,
-                inputs,
-            });
-            return eryxRunToExecutionResult(run);
-        },
-    };
+  const runtime = await loadEryxRuntime(options.packageRoot);
+  return {
+    id: options.id ?? "eryx-python",
+    version: options.version ?? runtime.packageVersion,
+    languages: ["python"],
+    async probe(language, config) {
+      if (language !== "python") {
+        return {
+          status: "unavailable",
+          reason: `eryx-python supports python, not ${language}.`,
+          passedProofs: [],
+          failedProofs: [...SCRIPT_SANDBOX_REQUIRED_PROOFS],
+          runtime: runtimeInfo(runtime),
+        };
+      }
+      return probeEryxRuntime(runtime, config);
+    },
+    async execute(request) {
+      if (request.language !== "python") {
+        return {
+          status: "policy_violation",
+          stdout: "",
+          stderr: "",
+          outputFiles: [],
+          exitCode: null,
+          reason: `eryx-python supports python, not ${request.language}.`,
+        };
+      }
+      if (request.network !== "off") {
+        return {
+          status: "policy_violation",
+          stdout: "",
+          stderr: "",
+          outputFiles: [],
+          exitCode: null,
+          reason: "eryx-python adapter only supports network=off.",
+        };
+      }
+      if (!runtime.jspiAvailable) {
+        return executeEryxInJspiChild(runtime, request);
+      }
+      const inputs = {};
+      for (const source of request.sources) {
+        inputs[source.alias] = await readFile(source.path, "utf8");
+      }
+      const run = await runEryx(runtime, {
+        code: pythonPrelude(inputs) + request.code,
+        timeoutMs: request.limits.timeoutMs,
+        outputBytes: request.limits.maxOutputBytes,
+        inputs,
+      });
+      return eryxRunToExecutionResult(run);
+    },
+  };
 }
 function unavailableEryxAdapter(reason) {
-    return {
-        id: "eryx-python",
-        version: "unavailable",
-        languages: ["python"],
-        async probe() {
-            return {
-                status: "unavailable",
-                reason,
-                passedProofs: [],
-                failedProofs: [...SCRIPT_SANDBOX_REQUIRED_PROOFS],
-            };
-        },
-        async execute() {
-            return {
-                status: "policy_violation",
-                stdout: "",
-                stderr: "",
-                outputFiles: [],
-                exitCode: null,
-                reason,
-            };
-        },
-    };
+  return {
+    id: "eryx-python",
+    version: "unavailable",
+    languages: ["python"],
+    async probe() {
+      return {
+        status: "unavailable",
+        reason,
+        passedProofs: [],
+        failedProofs: [...SCRIPT_SANDBOX_REQUIRED_PROOFS],
+      };
+    },
+    async execute() {
+      return {
+        status: "policy_violation",
+        stdout: "",
+        stderr: "",
+        outputFiles: [],
+        exitCode: null,
+        reason,
+      };
+    },
+  };
 }
 async function loadEryxRuntime(packageRoot) {
-    const resolvedRoot = resolve(packageRoot);
-    const packageJson = JSON.parse(await readFile(join(resolvedRoot, "package.json"), "utf8"));
-    const preview2ShimRoot = resolve(resolvedRoot, "..", "..", "@bytecodealliance", "preview2-shim");
-    const preview2ShimJson = JSON.parse(await readFile(join(preview2ShimRoot, "package.json"), "utf8"));
-    const runtimeHash = await hashEryxRuntime(resolvedRoot, preview2ShimRoot);
-    return {
-        packageName: String(packageJson.name ?? "@bsull/eryx"),
-        packageVersion: String(packageJson.version ?? "unknown"),
-        packageRoot: resolvedRoot,
-        preview2ShimRoot,
-        preview2ShimVersion: String(preview2ShimJson.version ?? "unknown"),
-        runtimeHash,
-        jspiAvailable: nodeJspiAvailable(),
-    };
+  const resolvedRoot = resolve(packageRoot);
+  const packageJson = JSON.parse(await readFile(join(resolvedRoot, "package.json"), "utf8"));
+  const preview2ShimRoot = resolve(resolvedRoot, "..", "..", "@bytecodealliance", "preview2-shim");
+  const preview2ShimJson = JSON.parse(await readFile(join(preview2ShimRoot, "package.json"), "utf8"));
+  const runtimeHash = await hashEryxRuntime(resolvedRoot, preview2ShimRoot);
+  return {
+    packageName: String(packageJson.name ?? "@bsull/eryx"),
+    packageVersion: String(packageJson.version ?? "unknown"),
+    packageRoot: resolvedRoot,
+    preview2ShimRoot,
+    preview2ShimVersion: String(preview2ShimJson.version ?? "unknown"),
+    runtimeHash,
+    jspiAvailable: nodeJspiAvailable(),
+  };
 }
 async function hashEryxRuntime(packageRoot, preview2ShimRoot) {
-    const hash = createHash("sha256");
-    hash.update("eryx-runtime-tree-v1\0");
-    await hashRuntimeTree(hash, packageRoot, "eryx");
-    await hashRuntimeTree(hash, preview2ShimRoot, "preview2-shim");
-    return `sha256_${hash.digest("hex")}`;
+  const hash = createHash("sha256");
+  hash.update("eryx-runtime-tree-v1\0");
+  await hashRuntimeTree(hash, packageRoot, "eryx");
+  await hashRuntimeTree(hash, preview2ShimRoot, "preview2-shim");
+  return `sha256_${hash.digest("hex")}`;
 }
 async function hashRuntimeTree(hash, root, label, relativeDir = ".") {
-    const dir = join(root, relativeDir);
-    const entries = await readdir(dir, { withFileTypes: true });
-    entries.sort((left, right) => left.name.localeCompare(right.name));
-    for (const entry of entries) {
-        const relativePath = relativeDir === "." ? entry.name : join(relativeDir, entry.name);
-        const fullPath = join(root, relativePath);
-        const stats = await lstat(fullPath);
-        if (stats.isSymbolicLink()) {
-            throw new Error(`${label} runtime tree contains unsupported symlink: ${relativePath}`);
-        }
-        if (stats.isDirectory()) {
-            hash.update(`${label}:dir:${relativePath}\0`);
-            await hashRuntimeTree(hash, root, label, relativePath);
-            continue;
-        }
-        if (!stats.isFile()) {
-            throw new Error(`${label} runtime tree contains unsupported non-file entry: ${relativePath}`);
-        }
-        hash.update(`${label}:file:${relativePath}:${stats.size}\0`);
-        hash.update(await readFile(fullPath));
-    }
+  const dir = join(root, relativeDir);
+  const entries = await readdir(dir, { withFileTypes: true });
+  entries.sort((left, right) => left.name.localeCompare(right.name));
+  for (const entry of entries) {
+    const relativePath = relativeDir === "." ? entry.name : join(relativeDir, entry.name);
+    const fullPath = join(root, relativePath);
+    const stats = await lstat(fullPath);
+    if (stats.isSymbolicLink()) {
+      throw new Error(`${label} runtime tree contains unsupported symlink: ${relativePath}`);
+    }
+    if (stats.isDirectory()) {
+      hash.update(`${label}:dir:${relativePath}\0`);
+      await hashRuntimeTree(hash, root, label, relativePath);
+      continue;
+    }
+    if (!stats.isFile()) {
+      throw new Error(`${label} runtime tree contains unsupported non-file entry: ${relativePath}`);
+    }
+    hash.update(`${label}:file:${relativePath}:${stats.size}\0`);
+    hash.update(await readFile(fullPath));
+  }
 }
 function nodeJspiAvailable() {
-    const nodeOptions = process.env.NODE_OPTIONS ?? "";
-    const flagPresent = process.execArgv.includes("--experimental-wasm-jspi") || nodeOptions.split(/\s+/).includes("--experimental-wasm-jspi");
-    return flagPresent && typeof WebAssembly.Suspending === "function";
+  const nodeOptions = process.env.NODE_OPTIONS ?? "";
+  const flagPresent =
+    process.execArgv.includes("--experimental-wasm-jspi") ||
+    nodeOptions.split(/\s+/).includes("--experimental-wasm-jspi");
+  return flagPresent && typeof WebAssembly.Suspending === "function";
 }
 function runtimeInfo(runtime) {
-    return {
-        name: runtime.packageName,
-        version: `${runtime.packageVersion}+preview2-shim-${runtime.preview2ShimVersion}`,
-    };
+  return {
+    name: runtime.packageName,
+    version: `${runtime.packageVersion}+preview2-shim-${runtime.preview2ShimVersion}`,
+  };
 }
 async function probeEryxRuntime(runtime, config) {
-    const timeoutMs = Math.min(config.limits.timeoutMs, DEFAULT_PROBE_TIMEOUT_MS);
-    const outputBytes = Math.min(config.limits.maxOutputBytes, DEFAULT_PROBE_OUTPUT_BYTES);
-    const currentRuntimeHash = await hashEryxRuntime(runtime.packageRoot, runtime.preview2ShimRoot);
-    if (currentRuntimeHash !== runtime.runtimeHash) {
-        return {
-            status: "unavailable",
-            reason: "eryx-python explicit package root changed after adapter creation; refusing to reuse stale proof cache.",
-            passedProofs: [],
-            failedProofs: [...SCRIPT_SANDBOX_REQUIRED_PROOFS],
-            runtime: runtimeInfo(runtime),
-        };
-    }
-    const cacheKey = [runtime.packageVersion, runtime.preview2ShimVersion, currentRuntimeHash, runtime.jspiAvailable, timeoutMs, outputBytes, config.network].join(":");
-    const cached = eryxProbeCache.get(cacheKey);
-    if (cached) {
-        return cloneProbeResult(await cached);
-    }
-    const probePromise = runEryxProbe(runtime, config, timeoutMs, outputBytes);
-    eryxProbeCache.set(cacheKey, probePromise);
-    try {
-        return cloneProbeResult(await probePromise);
-    }
-    catch (error) {
-        eryxProbeCache.delete(cacheKey);
-        throw error;
-    }
+  const timeoutMs = Math.min(config.limits.timeoutMs, DEFAULT_PROBE_TIMEOUT_MS);
+  const outputBytes = Math.min(config.limits.maxOutputBytes, DEFAULT_PROBE_OUTPUT_BYTES);
+  const currentRuntimeHash = await hashEryxRuntime(runtime.packageRoot, runtime.preview2ShimRoot);
+  if (currentRuntimeHash !== runtime.runtimeHash) {
+    return {
+      status: "unavailable",
+      reason: "eryx-python explicit package root changed after adapter creation; refusing to reuse stale proof cache.",
+      passedProofs: [],
+      failedProofs: [...SCRIPT_SANDBOX_REQUIRED_PROOFS],
+      runtime: runtimeInfo(runtime),
+    };
+  }
+  const cacheKey = [
+    runtime.packageVersion,
+    runtime.preview2ShimVersion,
+    currentRuntimeHash,
+    runtime.jspiAvailable,
+    timeoutMs,
+    outputBytes,
+    config.network,
+  ].join(":");
+  const cached = eryxProbeCache.get(cacheKey);
+  if (cached) {
+    return cloneProbeResult(await cached);
+  }
+  const probePromise = runEryxProbe(runtime, config, timeoutMs, outputBytes);
+  eryxProbeCache.set(cacheKey, probePromise);
+  try {
+    return cloneProbeResult(await probePromise);
+  } catch (error) {
+    eryxProbeCache.delete(cacheKey);
+    throw error;
+  }
 }
 async function runEryxProbe(runtime, config, timeoutMs, outputBytes) {
-    if (config.network !== "off") {
-        return {
-            status: "unavailable",
-            reason: "eryx-python adapter only supports network=off.",
-            passedProofs: [],
-            failedProofs: [...SCRIPT_SANDBOX_REQUIRED_PROOFS],
-            runtime: runtimeInfo(runtime),
-        };
-    }
-    if (!runtime.jspiAvailable) {
-        return probeEryxInJspiChild(runtime, config);
-    }
-    const previousSecret = process.env.FREEFLOW_SANDBOX_SECRET_SENTINEL;
-    process.env.FREEFLOW_SANDBOX_SECRET_SENTINEL = SECRET_SENTINEL;
-    try {
-        const passedProofs = [];
-        const failedProofs = [];
-        const fixtures = scriptSandboxProofFixturesForLanguage("python");
-        for (const fixture of fixtures) {
-            const run = await runEryx(runtime, {
-                code: fixture.program,
-                timeoutMs,
-                outputBytes,
-            });
-            const assessment = assessEryxProof(fixture.proof, run, timeoutMs, outputBytes);
-            if (assessment) {
-                passedProofs.push(fixture.proof);
-            }
-            else {
-                failedProofs.push(fixture.proof);
-            }
-        }
-        const allPassed = SCRIPT_SANDBOX_REQUIRED_PROOFS.every((proof) => passedProofs.includes(proof));
-        return {
-            status: allPassed ? "available" : "unavailable",
-            reason: allPassed ? "eryx-python passed every required Python sandbox proof." : "eryx-python did not pass every required Python sandbox proof.",
-            passedProofs,
-            failedProofs,
-            runtime: runtimeInfo(runtime),
-        };
+  if (config.network !== "off") {
+    return {
+      status: "unavailable",
+      reason: "eryx-python adapter only supports network=off.",
+      passedProofs: [],
+      failedProofs: [...SCRIPT_SANDBOX_REQUIRED_PROOFS],
+      runtime: runtimeInfo(runtime),
+    };
+  }
+  if (!runtime.jspiAvailable) {
+    return probeEryxInJspiChild(runtime, config);
+  }
+  const previousSecret = process.env.FREEFLOW_SANDBOX_SECRET_SENTINEL;
+  process.env.FREEFLOW_SANDBOX_SECRET_SENTINEL = SECRET_SENTINEL;
+  try {
+    const passedProofs = [];
+    const failedProofs = [];
+    const fixtures = scriptSandboxProofFixturesForLanguage("python");
+    for (const fixture of fixtures) {
+      const run = await runEryx(runtime, {
+        code: fixture.program,
+        timeoutMs,
+        outputBytes,
+      });
+      const assessment = assessEryxProof(fixture.proof, run, timeoutMs, outputBytes);
+      if (assessment) {
+        passedProofs.push(fixture.proof);
+      } else {
+        failedProofs.push(fixture.proof);
+      }
     }
-    finally {
-        if (previousSecret === undefined) {
-            delete process.env.FREEFLOW_SANDBOX_SECRET_SENTINEL;
-        }
-        else {
-            process.env.FREEFLOW_SANDBOX_SECRET_SENTINEL = previousSecret;
-        }
+    const allPassed = SCRIPT_SANDBOX_REQUIRED_PROOFS.every((proof) => passedProofs.includes(proof));
+    return {
+      status: allPassed ? "available" : "unavailable",
+      reason: allPassed
+        ? "eryx-python passed every required Python sandbox proof."
+        : "eryx-python did not pass every required Python sandbox proof.",
+      passedProofs,
+      failedProofs,
+      runtime: runtimeInfo(runtime),
+    };
+  } finally {
+    if (previousSecret === undefined) {
+      delete process.env.FREEFLOW_SANDBOX_SECRET_SENTINEL;
+    } else {
+      process.env.FREEFLOW_SANDBOX_SECRET_SENTINEL = previousSecret;
     }
+  }
 }
 async function probeEryxInJspiChild(runtime, config) {
-    try {
-        const result = await runEryxChildRequest({
-            kind: "probe",
-            packageRoot: runtime.packageRoot,
-            config,
-        }, childTimeoutMsForProbe(config));
-        if (isProbeResult(result)) {
-            return {
-                ...result,
-                reason: result.status === "available"
-                    ? `${result.reason} via child Node --experimental-wasm-jspi.`
-                    : result.reason,
-            };
-        }
-        return unavailableProbeResult("eryx-python child probe returned an execution result instead of a probe result.", runtime);
-    }
-    catch (error) {
-        return unavailableProbeResult(`eryx-python child JSPI probe failed: ${errorMessage(error)}`, runtime);
-    }
+  try {
+    const result = await runEryxChildRequest(
+      {
+        kind: "probe",
+        packageRoot: runtime.packageRoot,
+        config,
+      },
+      childTimeoutMsForProbe(config),
+    );
+    if (isProbeResult(result)) {
+      return {
+        ...result,
+        reason:
+          result.status === "available" ? `${result.reason} via child Node --experimental-wasm-jspi.` : result.reason,
+      };
+    }
+    return unavailableProbeResult(
+      "eryx-python child probe returned an execution result instead of a probe result.",
+      runtime,
+    );
+  } catch (error) {
+    return unavailableProbeResult(`eryx-python child JSPI probe failed: ${errorMessage(error)}`, runtime);
+  }
 }
 async function executeEryxInJspiChild(runtime, request) {
-    try {
-        const result = await runEryxChildRequest({
-            kind: "execute",
-            packageRoot: runtime.packageRoot,
-            request,
-        }, childTimeoutMsForExecution(request));
-        if (isExecutionResult(result)) {
-            return result;
-        }
-        return {
-            status: "failed",
-            stdout: "",
-            stderr: "eryx-python child execution returned a probe result instead of an execution result.",
-            outputFiles: [],
-            exitCode: null,
-            reason: "Invalid child execution response.",
-        };
-    }
-    catch (error) {
-        const message = errorMessage(error);
-        return {
-            status: "failed",
-            stdout: "",
-            stderr: message,
-            outputFiles: [],
-            exitCode: null,
-            reason: `eryx-python child JSPI execution failed: ${message}`,
-        };
+  try {
+    const result = await runEryxChildRequest(
+      {
+        kind: "execute",
+        packageRoot: runtime.packageRoot,
+        request,
+      },
+      childTimeoutMsForExecution(request),
+    );
+    if (isExecutionResult(result)) {
+      return result;
     }
+    return {
+      status: "failed",
+      stdout: "",
+      stderr: "eryx-python child execution returned a probe result instead of an execution result.",
+      outputFiles: [],
+      exitCode: null,
+      reason: "Invalid child execution response.",
+    };
+  } catch (error) {
+    const message = errorMessage(error);
+    return {
+      status: "failed",
+      stdout: "",
+      stderr: message,
+      outputFiles: [],
+      exitCode: null,
+      reason: `eryx-python child JSPI execution failed: ${message}`,
+    };
+  }
 }
 async function runEryxChildRequest(request, timeoutMs) {
-    const root = await mkdtemp(join(tmpdir(), "freeflow-eryx-child-"));
-    const requestPath = join(root, "request.json");
-    const responsePath = join(root, "response.json");
-    try {
-        await writeFile(requestPath, JSON.stringify(request), "utf8");
-        await runEryxChildProcess(requestPath, responsePath, timeoutMs);
-        const response = JSON.parse(await readFile(responsePath, "utf8"));
-        if (!response.ok) {
-            throw new Error(response.message);
-        }
-        return response.result;
-    }
-    finally {
-        await rm(root, { recursive: true, force: true });
-    }
+  const root = await mkdtemp(join(tmpdir(), "freeflow-eryx-child-"));
+  const requestPath = join(root, "request.json");
+  const responsePath = join(root, "response.json");
+  try {
+    await writeFile(requestPath, JSON.stringify(request), "utf8");
+    await runEryxChildProcess(requestPath, responsePath, timeoutMs);
+    const response = JSON.parse(await readFile(responsePath, "utf8"));
+    if (!response.ok) {
+      throw new Error(response.message);
+    }
+    return response.result;
+  } finally {
+    await rm(root, { recursive: true, force: true });
+  }
 }
 async function runEryxChildProcess(requestPath, responsePath, timeoutMs) {
-    const nodeBinary = await resolveEryxChildNodeBinary();
-    const child = spawn(nodeBinary, ["--experimental-wasm-jspi", fileURLToPath(import.meta.url), ERYX_CHILD_MODE_ARG, requestPath, responsePath], {
-        stdio: ["ignore", "ignore", "pipe"],
-        env: process.env,
-    });
-    let stderr = "";
-    child.stderr.setEncoding("utf8");
-    child.stderr.on("data", (chunk) => {
-        stderr += String(chunk);
+  const nodeBinary = await resolveEryxChildNodeBinary();
+  const child = spawn(
+    nodeBinary,
+    ["--experimental-wasm-jspi", fileURLToPath(import.meta.url), ERYX_CHILD_MODE_ARG, requestPath, responsePath],
+    {
+      stdio: ["ignore", "ignore", "pipe"],
+      env: process.env,
+    },
+  );
+  let stderr = "";
+  child.stderr.setEncoding("utf8");
+  child.stderr.on("data", (chunk) => {
+    stderr += String(chunk);
+  });
+  await new Promise((resolvePromise, reject) => {
+    const timer = setTimeout(() => {
+      child.kill("SIGKILL");
+      reject(new Error(`eryx-python child process timed out after ${timeoutMs}ms.`));
+    }, timeoutMs);
+    child.on("error", (error) => {
+      clearTimeout(timer);
+      reject(error);
     });
-    await new Promise((resolvePromise, reject) => {
-        const timer = setTimeout(() => {
-            child.kill("SIGKILL");
-            reject(new Error(`eryx-python child process timed out after ${timeoutMs}ms.`));
-        }, timeoutMs);
-        child.on("error", (error) => {
-            clearTimeout(timer);
-            reject(error);
-        });
-        child.on("close", (code) => {
-            clearTimeout(timer);
-            if (code === 0) {
-                resolvePromise();
-            }
-            else {
-                reject(new Error(`eryx-python child process ${nodeBinary} exited with code ${code}. ${stderr.trim()}`));
-            }
-        });
+    child.on("close", (code) => {
+      clearTimeout(timer);
+      if (code === 0) {
+        resolvePromise();
+      } else {
+        reject(new Error(`eryx-python child process ${nodeBinary} exited with code ${code}. ${stderr.trim()}`));
+      }
     });
+  });
 }
 async function resolveEryxChildNodeBinary() {
-    const configured = defaultScriptTransformNodeBinary();
-    if (await fileExists(configured)) {
-        return configured;
-    }
-    return process.execPath;
+  const configured = defaultScriptTransformNodeBinary();
+  if (await fileExists(configured)) {
+    return configured;
+  }
+  return process.execPath;
 }
 async function fileExists(path) {
-    try {
-        await access(path);
-        return true;
-    }
-    catch {
-        return false;
-    }
+  try {
+    await access(path);
+    return true;
+  } catch {
+    return false;
+  }
 }
 function childTimeoutMsForProbe(config) {
-    return Math.max(ERYX_CHILD_TIMEOUT_FLOOR_MS, Math.min(config.limits.timeoutMs, DEFAULT_PROBE_TIMEOUT_MS) * SCRIPT_SANDBOX_REQUIRED_PROOFS.length * 8);
+  return Math.max(
+    ERYX_CHILD_TIMEOUT_FLOOR_MS,
+    Math.min(config.limits.timeoutMs, DEFAULT_PROBE_TIMEOUT_MS) * SCRIPT_SANDBOX_REQUIRED_PROOFS.length * 8,
+  );
 }
 function childTimeoutMsForExecution(request) {
-    return Math.max(ERYX_CHILD_TIMEOUT_FLOOR_MS, request.limits.timeoutMs + 5_000);
+  return Math.max(ERYX_CHILD_TIMEOUT_FLOOR_MS, request.limits.timeoutMs + 5_000);
 }
 function unavailableProbeResult(reason, runtime) {
-    return {
-        status: "unavailable",
-        reason,
-        passedProofs: [],
-        failedProofs: [...SCRIPT_SANDBOX_REQUIRED_PROOFS],
-        runtime: runtimeInfo(runtime),
-    };
+  return {
+    status: "unavailable",
+    reason,
+    passedProofs: [],
+    failedProofs: [...SCRIPT_SANDBOX_REQUIRED_PROOFS],
+    runtime: runtimeInfo(runtime),
+  };
 }
 function isProbeResult(value) {
-    return Array.isArray(value.passedProofs) && Array.isArray(value.failedProofs);
+  return Array.isArray(value.passedProofs) && Array.isArray(value.failedProofs);
 }
 function isExecutionResult(value) {
-    return Array.isArray(value.outputFiles);
+  return Array.isArray(value.outputFiles);
 }
 async function runEryx(runtime, options) {
-    const start = Date.now();
-    const patched = await createPatchedPackageTree(runtime);
-    try {
-        const eryxEntryUrl = pathToFileURL(join(patched.eryxRoot, "index.js")).href;
-        return await runEryxWorker({ eryxEntryUrl, code: options.code, timeoutMs: options.timeoutMs, outputBytes: options.outputBytes, startedAt: start });
-    }
-    finally {
-        await rm(patched.root, { recursive: true, force: true });
-    }
+  const start = Date.now();
+  const patched = await createPatchedPackageTree(runtime);
+  try {
+    const eryxEntryUrl = pathToFileURL(join(patched.eryxRoot, "index.js")).href;
+    return await runEryxWorker({
+      eryxEntryUrl,
+      code: options.code,
+      timeoutMs: options.timeoutMs,
+      outputBytes: options.outputBytes,
+      startedAt: start,
+    });
+  } finally {
+    await rm(patched.root, { recursive: true, force: true });
+  }
 }
 async function createPatchedPackageTree(runtime) {
-    const root = await mkdtemp(join(tmpdir(), "freeflow-eryx-adapter-"));
-    const eryxRoot = join(root, "node_modules", "@bsull", "eryx");
-    const preview2ShimRoot = join(root, "node_modules", "@bytecodealliance", "preview2-shim");
-    try {
-        await mkdir(dirname(eryxRoot), { recursive: true });
-        await mkdir(dirname(preview2ShimRoot), { recursive: true });
-        await cp(runtime.packageRoot, eryxRoot, { recursive: true, dereference: false });
-        await cp(runtime.preview2ShimRoot, preview2ShimRoot, { recursive: true, dereference: false });
-        const copiedRuntimeHash = await hashEryxRuntime(eryxRoot, preview2ShimRoot);
-        if (copiedRuntimeHash !== runtime.runtimeHash) {
-            throw new Error("eryx-python explicit package root changed while preparing sandbox copy; refusing to execute unproven runtime files.");
-        }
-        for (const file of [join(eryxRoot, "index.js"), join(eryxRoot, "eryx-sandbox.js")]) {
-            let text = await readFile(file, "utf8");
-            for (const [from, to] of PREVIEW2_IMPORTS) {
-                text = text.split(from).join(to);
-            }
-            await writeFile(file, text, "utf8");
-        }
-        await writeInstrumentedNetworkDenyShim(eryxRoot);
-        return { root, eryxRoot };
-    }
-    catch (error) {
-        await rm(root, { recursive: true, force: true });
-        throw error;
+  const root = await mkdtemp(join(tmpdir(), "freeflow-eryx-adapter-"));
+  const eryxRoot = join(root, "node_modules", "@bsull", "eryx");
+  const preview2ShimRoot = join(root, "node_modules", "@bytecodealliance", "preview2-shim");
+  try {
+    await mkdir(dirname(eryxRoot), { recursive: true });
+    await mkdir(dirname(preview2ShimRoot), { recursive: true });
+    await cp(runtime.packageRoot, eryxRoot, { recursive: true, dereference: false });
+    await cp(runtime.preview2ShimRoot, preview2ShimRoot, { recursive: true, dereference: false });
+    const copiedRuntimeHash = await hashEryxRuntime(eryxRoot, preview2ShimRoot);
+    if (copiedRuntimeHash !== runtime.runtimeHash) {
+      throw new Error(
+        "eryx-python explicit package root changed while preparing sandbox copy; refusing to execute unproven runtime files.",
+      );
+    }
+    for (const file of [join(eryxRoot, "index.js"), join(eryxRoot, "eryx-sandbox.js")]) {
+      let text = await readFile(file, "utf8");
+      for (const [from, to] of PREVIEW2_IMPORTS) {
+        text = text.split(from).join(to);
+      }
+      await writeFile(file, text, "utf8");
     }
+    await writeInstrumentedNetworkDenyShim(eryxRoot);
+    return { root, eryxRoot };
+  } catch (error) {
+    await rm(root, { recursive: true, force: true });
+    throw error;
+  }
 }
 async function writeInstrumentedNetworkDenyShim(eryxRoot) {
-    await writeFile(join(eryxRoot, "shims", "net.js"), `
+  await writeFile(
+    join(eryxRoot, "shims", "net.js"),
+    `
 const recordNetworkDeny = (kind, operation) => {
   globalThis.__freeflowEryxNetworkEvents ??= [];
   globalThis.__freeflowEryxNetworkEvents.push({ kind, operation, decision: "not-permitted" });
@@ -473,10 +502,12 @@ export const tls = {
     recordNetworkDeny("tls", "close");
   },
 };
-`, "utf8");
+`,
+    "utf8",
+  );
 }
 async function runEryxWorker(options) {
-    const workerSource = `
+  const workerSource = `
     import { parentPort, workerData } from 'node:worker_threads';
 
     let stdout = '';
@@ -544,254 +575,294 @@ async function runEryxWorker(options) {
       finish({ status: 'error', errorName: error?.name ?? 'Error', errorMessage: message, exitCode: 1 });
     }
   `;
-    const worker = new Worker(workerSource, {
-        eval: true,
-        type: "module",
-        workerData: { eryxEntryUrl: options.eryxEntryUrl, code: options.code, outputBytes: options.outputBytes },
-        stdout: true,
-        stderr: true,
-        resourceLimits: {
-            maxOldGenerationSizeMb: DEFAULT_WORKER_OLD_GENERATION_MB,
-            maxYoungGenerationSizeMb: DEFAULT_WORKER_YOUNG_GENERATION_MB,
-        },
-    });
-    let externalStdout = "";
-    let externalStderr = "";
-    let externalRawStdoutBytes = 0;
-    let externalRawStderrBytes = 0;
-    let externalTruncated = false;
-    const appendExternal = (stream, chunk) => {
-        const text = String(chunk ?? "");
-        const bytes = Buffer.byteLength(text, "utf8");
-        if (stream === "stderr")
-            externalRawStderrBytes += bytes;
-        else
-            externalRawStdoutBytes += bytes;
-        const currentBytes = Buffer.byteLength(externalStdout, "utf8") + Buffer.byteLength(externalStderr, "utf8");
-        const remaining = options.outputBytes - currentBytes;
-        if (remaining <= 0) {
-            externalTruncated = externalTruncated || bytes > 0;
-            return;
-        }
-        const buffer = Buffer.from(text, "utf8");
-        const nextText = buffer.byteLength > remaining ? buffer.subarray(0, remaining).toString("utf8") : text;
-        if (buffer.byteLength > remaining)
-            externalTruncated = true;
-        if (stream === "stderr")
-            externalStderr += nextText;
-        else
-            externalStdout += nextText;
+  const worker = new Worker(workerSource, {
+    eval: true,
+    type: "module",
+    workerData: { eryxEntryUrl: options.eryxEntryUrl, code: options.code, outputBytes: options.outputBytes },
+    stdout: true,
+    stderr: true,
+    resourceLimits: {
+      maxOldGenerationSizeMb: DEFAULT_WORKER_OLD_GENERATION_MB,
+      maxYoungGenerationSizeMb: DEFAULT_WORKER_YOUNG_GENERATION_MB,
+    },
+  });
+  let externalStdout = "";
+  let externalStderr = "";
+  let externalRawStdoutBytes = 0;
+  let externalRawStderrBytes = 0;
+  let externalTruncated = false;
+  const appendExternal = (stream, chunk) => {
+    const text = String(chunk ?? "");
+    const bytes = Buffer.byteLength(text, "utf8");
+    if (stream === "stderr") externalRawStderrBytes += bytes;
+    else externalRawStdoutBytes += bytes;
+    const currentBytes = Buffer.byteLength(externalStdout, "utf8") + Buffer.byteLength(externalStderr, "utf8");
+    const remaining = options.outputBytes - currentBytes;
+    if (remaining <= 0) {
+      externalTruncated = externalTruncated || bytes > 0;
+      return;
+    }
+    const buffer = Buffer.from(text, "utf8");
+    const nextText = buffer.byteLength > remaining ? buffer.subarray(0, remaining).toString("utf8") : text;
+    if (buffer.byteLength > remaining) externalTruncated = true;
+    if (stream === "stderr") externalStderr += nextText;
+    else externalStdout += nextText;
+  };
+  worker.stdout?.on("data", (chunk) => appendExternal("stdout", chunk));
+  worker.stderr?.on("data", (chunk) => appendExternal("stderr", chunk));
+  return new Promise((resolve) => {
+    let settled = false;
+    const finish = (result) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      const merged = mergeWorkerResult(result, {
+        externalStdout,
+        externalStderr,
+        externalRawStdoutBytes,
+        externalRawStderrBytes,
+        externalTruncated,
+        outputBytes: options.outputBytes,
+      });
+      resolve({ ...merged, durationMs: Date.now() - options.startedAt });
     };
-    worker.stdout?.on("data", (chunk) => appendExternal("stdout", chunk));
-    worker.stderr?.on("data", (chunk) => appendExternal("stderr", chunk));
-    return new Promise((resolve) => {
-        let settled = false;
-        const finish = (result) => {
-            if (settled)
-                return;
-            settled = true;
-            clearTimeout(timer);
-            const merged = mergeWorkerResult(result, {
-                externalStdout,
-                externalStderr,
-                externalRawStdoutBytes,
-                externalRawStderrBytes,
-                externalTruncated,
-                outputBytes: options.outputBytes,
-            });
-            resolve({ ...merged, durationMs: Date.now() - options.startedAt });
-        };
-        const timer = setTimeout(() => {
-            if (settled)
-                return;
-            finish({ status: "timed_out", stdout: "", stderr: "", exitCode: null, rawStdoutBytes: 0, rawStderrBytes: 0, stdoutBytes: 0, stderrBytes: 0, outputBytes: 0, truncated: false, outputFiles: [], networkEvents: [] });
-            void worker.terminate();
-        }, options.timeoutMs);
-        worker.on("message", (message) => finish(message));
-        worker.on("error", (error) => {
-            const message = errorMessage(error);
-            finish({ status: "error", stdout: "", stderr: message, exitCode: null, rawStdoutBytes: 0, rawStderrBytes: Buffer.byteLength(message, "utf8"), truncated: false, outputFiles: [], networkEvents: [], errorName: error.name, errorMessage: message });
-        });
-        worker.on("exit", (code) => {
-            if (!settled && code !== 0) {
-                finish({ status: "error", stdout: "", stderr: `worker exited with code ${code}`, exitCode: code, rawStdoutBytes: 0, rawStderrBytes: 0, truncated: false, outputFiles: [], networkEvents: [] });
-            }
+    const timer = setTimeout(() => {
+      if (settled) return;
+      finish({
+        status: "timed_out",
+        stdout: "",
+        stderr: "",
+        exitCode: null,
+        rawStdoutBytes: 0,
+        rawStderrBytes: 0,
+        stdoutBytes: 0,
+        stderrBytes: 0,
+        outputBytes: 0,
+        truncated: false,
+        outputFiles: [],
+        networkEvents: [],
+      });
+      void worker.terminate();
+    }, options.timeoutMs);
+    worker.on("message", (message) => finish(message));
+    worker.on("error", (error) => {
+      const message = errorMessage(error);
+      finish({
+        status: "error",
+        stdout: "",
+        stderr: message,
+        exitCode: null,
+        rawStdoutBytes: 0,
+        rawStderrBytes: Buffer.byteLength(message, "utf8"),
+        truncated: false,
+        outputFiles: [],
+        networkEvents: [],
+        errorName: error.name,
+        errorMessage: message,
+      });
+    });
+    worker.on("exit", (code) => {
+      if (!settled && code !== 0) {
+        finish({
+          status: "error",
+          stdout: "",
+          stderr: `worker exited with code ${code}`,
+          exitCode: code,
+          rawStdoutBytes: 0,
+          rawStderrBytes: 0,
+          truncated: false,
+          outputFiles: [],
+          networkEvents: [],
         });
+      }
     });
+  });
 }
 function mergeWorkerResult(result, external) {
-    let stdout = "";
-    let stderr = "";
-    let truncated = Boolean(result.truncated || external.externalTruncated);
-    const append = (stream, value) => {
-        const currentBytes = Buffer.byteLength(stdout, "utf8") + Buffer.byteLength(stderr, "utf8");
-        const remaining = external.outputBytes - currentBytes;
-        if (remaining <= 0) {
-            truncated = truncated || Buffer.byteLength(value, "utf8") > 0;
-            return;
-        }
-        const buffer = Buffer.from(value, "utf8");
-        const nextText = buffer.byteLength > remaining ? buffer.subarray(0, remaining).toString("utf8") : value;
-        if (buffer.byteLength > remaining)
-            truncated = true;
-        if (stream === "stderr")
-            stderr += nextText;
-        else
-            stdout += nextText;
-    };
-    append("stdout", external.externalStdout);
-    append("stderr", external.externalStderr);
-    append("stdout", result.stdout ?? "");
-    append("stderr", result.stderr ?? "");
-    const rawStdoutBytes = (result.rawStdoutBytes ?? 0) + external.externalRawStdoutBytes;
-    const rawStderrBytes = (result.rawStderrBytes ?? 0) + external.externalRawStderrBytes;
-    const merged = {
-        status: result.status ?? "error",
-        stdout,
-        stderr,
-        rawStdoutBytes,
-        rawStderrBytes,
-        stdoutBytes: Buffer.byteLength(stdout, "utf8"),
-        stderrBytes: Buffer.byteLength(stderr, "utf8"),
-        outputBytes: Buffer.byteLength(stdout, "utf8") + Buffer.byteLength(stderr, "utf8"),
-        truncated,
-        exitCode: result.exitCode ?? null,
-        durationMs: result.durationMs ?? 0,
-        outputFiles: result.outputFiles ?? [],
-        networkEvents: result.networkEvents ?? [],
-    };
-    if (result.errorName !== undefined) {
-        merged.errorName = result.errorName;
-    }
-    if (result.errorMessage !== undefined) {
-        merged.errorMessage = result.errorMessage;
-    }
-    return merged;
+  let stdout = "";
+  let stderr = "";
+  let truncated = Boolean(result.truncated || external.externalTruncated);
+  const append = (stream, value) => {
+    const currentBytes = Buffer.byteLength(stdout, "utf8") + Buffer.byteLength(stderr, "utf8");
+    const remaining = external.outputBytes - currentBytes;
+    if (remaining <= 0) {
+      truncated = truncated || Buffer.byteLength(value, "utf8") > 0;
+      return;
+    }
+    const buffer = Buffer.from(value, "utf8");
+    const nextText = buffer.byteLength > remaining ? buffer.subarray(0, remaining).toString("utf8") : value;
+    if (buffer.byteLength > remaining) truncated = true;
+    if (stream === "stderr") stderr += nextText;
+    else stdout += nextText;
+  };
+  append("stdout", external.externalStdout);
+  append("stderr", external.externalStderr);
+  append("stdout", result.stdout ?? "");
+  append("stderr", result.stderr ?? "");
+  const rawStdoutBytes = (result.rawStdoutBytes ?? 0) + external.externalRawStdoutBytes;
+  const rawStderrBytes = (result.rawStderrBytes ?? 0) + external.externalRawStderrBytes;
+  const merged = {
+    status: result.status ?? "error",
+    stdout,
+    stderr,
+    rawStdoutBytes,
+    rawStderrBytes,
+    stdoutBytes: Buffer.byteLength(stdout, "utf8"),
+    stderrBytes: Buffer.byteLength(stderr, "utf8"),
+    outputBytes: Buffer.byteLength(stdout, "utf8") + Buffer.byteLength(stderr, "utf8"),
+    truncated,
+    exitCode: result.exitCode ?? null,
+    durationMs: result.durationMs ?? 0,
+    outputFiles: result.outputFiles ?? [],
+    networkEvents: result.networkEvents ?? [],
+  };
+  if (result.errorName !== undefined) {
+    merged.errorName = result.errorName;
+  }
+  if (result.errorMessage !== undefined) {
+    merged.errorMessage = result.errorMessage;
+  }
+  return merged;
 }
 function eryxRunToExecutionResult(run) {
-    if (run.status === "timed_out") {
-        return {
-            status: "timed_out",
-            stdout: run.stdout,
-            stderr: run.stderr,
-            outputFiles: [],
-            exitCode: null,
-            durationMs: run.durationMs,
-            reason: "Eryx Python execution exceeded timeoutMs.",
-        };
-    }
-    if (run.truncated || run.status === "output_limit_exceeded") {
-        return {
-            status: "failed",
-            stdout: run.stdout,
-            stderr: run.stderr,
-            outputFiles: [],
-            exitCode: run.exitCode,
-            durationMs: run.durationMs,
-            reason: "Eryx Python execution exceeded maxOutputBytes.",
-        };
-    }
-    if (run.status === "error") {
-        return {
-            status: "failed",
-            stdout: run.stdout,
-            stderr: run.stderr || run.errorMessage || "Eryx Python execution failed.",
-            outputFiles: [],
-            exitCode: run.exitCode,
-            durationMs: run.durationMs,
-            reason: "Eryx Python execution failed.",
-        };
-    }
+  if (run.status === "timed_out") {
     return {
-        status: "success",
-        stdout: run.stdout,
-        stderr: run.stderr,
-        outputFiles: [],
-        exitCode: 0,
-        durationMs: run.durationMs,
+      status: "timed_out",
+      stdout: run.stdout,
+      stderr: run.stderr,
+      outputFiles: [],
+      exitCode: null,
+      durationMs: run.durationMs,
+      reason: "Eryx Python execution exceeded timeoutMs.",
+    };
+  }
+  if (run.truncated || run.status === "output_limit_exceeded") {
+    return {
+      status: "failed",
+      stdout: run.stdout,
+      stderr: run.stderr,
+      outputFiles: [],
+      exitCode: run.exitCode,
+      durationMs: run.durationMs,
+      reason: "Eryx Python execution exceeded maxOutputBytes.",
     };
+  }
+  if (run.status === "error") {
+    return {
+      status: "failed",
+      stdout: run.stdout,
+      stderr: run.stderr || run.errorMessage || "Eryx Python execution failed.",
+      outputFiles: [],
+      exitCode: run.exitCode,
+      durationMs: run.durationMs,
+      reason: "Eryx Python execution failed.",
+    };
+  }
+  return {
+    status: "success",
+    stdout: run.stdout,
+    stderr: run.stderr,
+    outputFiles: [],
+    exitCode: 0,
+    durationMs: run.durationMs,
+  };
 }
 function assessEryxProof(proof, run, timeoutMs, outputBytes) {
-    const combined = `${run.stdout ?? ""}\n${run.stderr ?? ""}\n${run.errorMessage ?? ""}`;
-    switch (proof) {
-        case "env_access_denied":
-            return !combined.includes(SECRET_SENTINEL) && !combined.includes(HOST_HOME) && !combined.includes("process.env") && !/AWS_|GITHUB_|TOKEN|SECRET/i.test(combined);
-        case "home_access_denied":
-            return !combined.includes(HOST_HOME) && !/PRIVATE KEY|FREEFLOW_SANDBOX_SECRET/.test(combined);
-        case "repo_access_denied":
-            return !combined.includes("@hassangameryt/freeflow") && !combined.includes("@earendil-works/freeflow") && !combined.includes('"scripts"');
-        case "vault_access_denied":
-            return !combined.includes("ffout_") && !combined.includes("ffrec_");
-        case "network_access_denied":
-            return run.status !== "success" && networkDeniedByShim(run) && !combined.includes("Example Domain");
-        case "input_read_only":
-            return run.status !== "success" && !combined.includes("mutated");
-        case "output_escape_denied":
-            return !combined.includes("/etc/passwd") && run.outputFiles.length === 0;
-        case "stdout_stderr_bounded":
-            return run.status !== "error" && run.truncated && run.outputBytes <= outputBytes && run.rawStdoutBytes > outputBytes && run.rawStderrBytes > outputBytes;
-        case "timeout_enforced":
-            return run.status === "timed_out" && run.durationMs < timeoutMs * 5;
-        default:
-            return false;
-    }
+  const combined = `${run.stdout ?? ""}\n${run.stderr ?? ""}\n${run.errorMessage ?? ""}`;
+  switch (proof) {
+    case "env_access_denied":
+      return (
+        !combined.includes(SECRET_SENTINEL) &&
+        !combined.includes(HOST_HOME) &&
+        !combined.includes("process.env") &&
+        !/AWS_|GITHUB_|TOKEN|SECRET/i.test(combined)
+      );
+    case "home_access_denied":
+      return !combined.includes(HOST_HOME) && !/PRIVATE KEY|FREEFLOW_SANDBOX_SECRET/.test(combined);
+    case "repo_access_denied":
+      return (
+        !combined.includes("@hassangameryt/freeflow") &&
+        !combined.includes("@earendil-works/freeflow") &&
+        !combined.includes('"scripts"')
+      );
+    case "vault_access_denied":
+      return !combined.includes("ffout_") && !combined.includes("ffrec_");
+    case "network_access_denied":
+      return run.status !== "success" && networkDeniedByShim(run) && !combined.includes("Example Domain");
+    case "input_read_only":
+      return run.status !== "success" && !combined.includes("mutated");
+    case "output_escape_denied":
+      return !combined.includes("/etc/passwd") && run.outputFiles.length === 0;
+    case "stdout_stderr_bounded":
+      return (
+        run.status !== "error" &&
+        run.truncated &&
+        run.outputBytes <= outputBytes &&
+        run.rawStdoutBytes > outputBytes &&
+        run.rawStderrBytes > outputBytes
+      );
+    case "timeout_enforced":
+      return run.status === "timed_out" && run.durationMs < timeoutMs * 5;
+    default:
+      return false;
+  }
 }
 function networkDeniedByShim(run) {
-    return run.networkEvents.some((event) => event?.decision === "not-permitted" && (event?.kind === "tcp" || event?.kind === "tls"));
+  return run.networkEvents.some(
+    (event) => event?.decision === "not-permitted" && (event?.kind === "tcp" || event?.kind === "tls"),
+  );
 }
 function pythonPrelude(inputs) {
-    const encodedInputs = JSON.stringify(inputs).replaceAll("</", "<\\/");
-    return [
-        "# Freeflow injected input/output helpers.",
-        "import json as __freeflow_json",
-        `__freeflow_sources = __freeflow_json.loads(${JSON.stringify(encodedInputs)})`,
-        "sources = dict(__freeflow_sources)",
-        "def read_text(alias):",
-        "    return __freeflow_sources[alias]",
-        "def write_text(text):",
-        "    print(str(text), end='')",
-        "",
-    ].join("\n");
+  const encodedInputs = JSON.stringify(inputs).replaceAll("</", "<\\/");
+  return [
+    "# Freeflow injected input/output helpers.",
+    "import json as __freeflow_json",
+    `__freeflow_sources = __freeflow_json.loads(${JSON.stringify(encodedInputs)})`,
+    "sources = dict(__freeflow_sources)",
+    "def read_text(alias):",
+    "    return __freeflow_sources[alias]",
+    "def write_text(text):",
+    "    print(str(text), end='')",
+    "",
+  ].join("\n");
 }
 function cloneProbeResult(result) {
-    const cloned = {
-        ...result,
-        passedProofs: [...result.passedProofs],
-        failedProofs: [...result.failedProofs],
-    };
-    if (result.runtime !== undefined) {
-        cloned.runtime = { ...result.runtime };
-    }
-    return cloned;
+  const cloned = {
+    ...result,
+    passedProofs: [...result.passedProofs],
+    failedProofs: [...result.failedProofs],
+  };
+  if (result.runtime !== undefined) {
+    cloned.runtime = { ...result.runtime };
+  }
+  return cloned;
 }
 async function runEryxChildCli(argv) {
-    const requestPath = argv[0];
-    const responsePath = argv[1];
-    if (!requestPath || !responsePath) {
-        throw new Error("eryx-python child mode requires request and response paths.");
-    }
-    const payload = JSON.parse(await readFile(requestPath, "utf8"));
-    let response;
-    try {
-        const adapter = await createEryxPythonSandboxAdapter({ packageRoot: payload.packageRoot });
-        if (payload.kind === "probe") {
-            response = { ok: true, result: await adapter.probe("python", payload.config) };
-        }
-        else {
-            response = { ok: true, result: await adapter.execute(payload.request) };
-        }
-    }
-    catch (error) {
-        response = { ok: false, message: errorMessage(error) };
-    }
-    await writeFile(responsePath, JSON.stringify(response), "utf8");
+  const requestPath = argv[0];
+  const responsePath = argv[1];
+  if (!requestPath || !responsePath) {
+    throw new Error("eryx-python child mode requires request and response paths.");
+  }
+  const payload = JSON.parse(await readFile(requestPath, "utf8"));
+  let response;
+  try {
+    const adapter = await createEryxPythonSandboxAdapter({ packageRoot: payload.packageRoot });
+    if (payload.kind === "probe") {
+      response = { ok: true, result: await adapter.probe("python", payload.config) };
+    } else {
+      response = { ok: true, result: await adapter.execute(payload.request) };
+    }
+  } catch (error) {
+    response = { ok: false, message: errorMessage(error) };
+  }
+  await writeFile(responsePath, JSON.stringify(response), "utf8");
 }
 function errorMessage(error) {
-    return error instanceof Error ? error.message : String(error);
+  return error instanceof Error ? error.message : String(error);
 }
 if (process.argv[2] === ERYX_CHILD_MODE_ARG) {
-    runEryxChildCli(process.argv.slice(3)).catch((error) => {
-        console.error(errorMessage(error));
-        process.exit(1);
-    });
+  runEryxChildCli(process.argv.slice(3)).catch((error) => {
+    console.error(errorMessage(error));
+    process.exit(1);
+  });
 }