@kodax-ai/kodax 0.7.78 → 0.7.79

package/dist/chunks/chunk-6GVQDQTQ.js

@@ -0,0 +1,292 @@
+// @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.
+import{Ja as Ee,La as Ae,Na as J,Ta as de,Wa as ce}from"./chunk-RQPMGRTR.js";import{d as B,g as U}from"./chunk-GEECPO2H.js";import{a}from"./chunk-ONUPGMER.js";import{spawn as De,spawnSync as Be}from"node:child_process";import{createHash as Ye,randomUUID as W}from"node:crypto";import{once as _e}from"node:events";import{constants as Ze,readdirSync as Qe,statSync as Ie,writeSync as sn}from"node:fs";import{copyFile as Le,lstat as er,mkdir as T,readFile as q,realpath as H,rename as rr,rm as N,stat as te,writeFile as K}from"node:fs/promises";import{createRequire as nr}from"node:module";import{createServer as tr}from"node:net";import se from"node:os";import o from"node:path";import or from"node:readline";import{fileURLToPath as Te,pathToFileURL as sr}from"node:url";import{DEFAULT_WINDOWS_PROXY_PORT_RANGE as ar,SandboxManager as le,getSrtWinPath as ir,getWindowsSandboxUserStatus as dr,grantWindowsAcl as cr,installWindowsSandbox as lr,resolveSrtWin as ur,revokeWindowsAcl as Me}from"@anthropic-ai/sandbox-runtime";var j="0.0.65";function pr(){let e=process.platform==="win32"?"windows-restricted-user":process.platform==="darwin"?"macos-seatbelt":process.platform==="linux"?"linux-bubblewrap":"unsupported";return{version:1,asrtVersion:j,platform:process.platform,backend:e,genericCommandExecution:!0,controls:["filesystem","network","environment","timeout","output"],ordinaryCallsTriggerSetup:!1,setupMayElevate:process.platform==="win32",unavailableBehavior:"structured-no-execution",permissionFallback:"normal-permission-policy"}}a(pr,"sandboxRuntimeCapability");var be=1048576,ye=12e4,$e=nr(import.meta.url),je=process.env.KODAX_BUNDLED==="true"?void 0:sr($e.resolve("@anthropic-ai/sandbox-runtime")).href,fr=new Set([".ssh",".aws",".azure",".gnupg",".kodax",".agents",".codex",".claude",".gemini",".direnv",".terraform.d"]),mr=new Set([".env",".envrc",".pgpass",".npmrc",".pypirc","credentials","id_rsa","id_ed25519"]),wr=[".ssh",".aws",".azure",".gnupg",".kube",".docker",".kodax",".agents",".codex",".claude",".gemini",".direnv",".terraform.d",o.join(".cargo","credentials.toml"),o.join(".config","gcloud"),o.join(".config","gh"),o.join(".config","openai"),o.join(".config","anthropic"),".gitconfig",o.join(".config","git","config"),".terraformrc",o.join(".config","pypoetry","auth.toml"),".condarc",".bashrc",".bash_profile",".zshrc",".zprofile",".profile",o.join(".config","fish","config.fish"),o.join(".config","fish","fish_variables"),".bash_history",".zsh_history",o.join(".m2","settings.xml"),o.join(".m2","settings-security.xml"),o.join(".gradle","gradle.properties"),o.join(".nuget","NuGet","NuGet.Config"),o.join(".pip","pip.conf"),o.join(".config","pip","pip.conf"),o.join(".cache","huggingface","token"),o.join(".huggingface","token"),o.join(".config","rclone","rclone.conf"),o.join(".local","share","keyrings"),o.join("Library","Keychains"),o.join("AppData","Roaming","Microsoft","Protect"),o.join("AppData","Roaming","Microsoft","Credentials"),o.join("AppData","Roaming","Microsoft","Vault"),o.join("AppData","Local","Microsoft","Credentials"),o.join("AppData","Local","Microsoft","Protect"),o.join("AppData","Local","Microsoft","Vault"),".password-store",".env",".envrc",".pgpass",".env.local",".env.development",".env.production",".env.test",".env.staging",".npmrc",".pypirc",".netrc",".git-credentials","credentials","credentials.json","application_default_credentials.json","id_rsa","id_dsa","id_ecdsa","id_ed25519"],Pe=JSON.stringify(Ae),ue=JSON.stringify(Ee),gr=String.raw`
+const { spawn } = require('node:child_process');
+const { writeSync } = require('node:fs');
+const input = JSON.parse(Buffer.from(process.argv[2], 'base64').toString('utf8'));
+const child = spawn(input.command, input.args, {
+  cwd: input.cwd,
+  env: process.env,
+  shell: false,
+  stdio: ['inherit', 'inherit', 'pipe'],
+  windowsHide: true,
+});
+const stop = (signal) => child.kill(signal);
+process.once('SIGINT', () => stop('SIGINT'));
+process.once('SIGTERM', () => stop('SIGTERM'));
+child.once('spawn', () => {
+  writeSync(2, input.targetStartedMarker);
+  child.stderr.pipe(process.stderr);
+});
+child.once('error', (error) => {
+  process.stderr.write((error instanceof Error ? error.message : String(error)) + '\n');
+  process.exitCode = 1;
+});
+child.once('exit', (code, signal) => {
+  process.exitCode = signal ? 1 : code ?? 1;
+});
+`,Sr="eval(Buffer.from(process.argv[1],'base64').toString('utf8'))",br=JSON.stringify(Sr),yr=Buffer.from(gr,"utf8").toString("base64"),hr=JSON.stringify(yr),qe=String.raw`
+import { spawn } from 'node:child_process';
+import { randomUUID } from 'node:crypto';
+import { readFile, rm, writeFile } from 'node:fs/promises';
+let SandboxManager;
+const request = JSON.parse(await readFile(process.argv[2], 'utf8'));
+await rm(process.argv[2], { force: true });
+const targetStartedMarker = request.targetStartedMarker
+  ?? '\u0000KODAX_ASRT_TARGET_STARTED:' + randomUUID() + '\u0000\n';
+const endpoints = new Set(request.endpoints.map((item) => item.host.toLowerCase() + ':' + item.port));
+const callback = request.allowAllNetwork === true
+  ? async () => true
+  : request.endpoints.length === 0
+    ? undefined
+    : async ({ host, port }) => endpoints.has(host.toLowerCase() + ':' + port);
+const withWindowsChildEnvironment = (argv, environment) => {
+  const separator = argv.lastIndexOf('--');
+  if (separator < 0) throw new Error('ASRT Windows wrapper omitted its child separator.');
+  const controlled = new Set();
+  for (let index = 0; index < separator - 1; index += 1) {
+    if (argv[index] !== '--env') continue;
+    const name = argv[index + 1].split('=', 1)[0];
+    if (name) controlled.add(name.toLowerCase());
+  }
+  const injected = [];
+  for (const [name, value] of Object.entries(environment ?? {})) {
+    if (value === undefined) continue;
+    if (!name || name.includes('=') || name.includes('\0') || value.includes('\0')) {
+      throw new Error('Invalid environment entry for ASRT Windows child.');
+    }
+    const normalized = name.toLowerCase();
+    if (controlled.has(normalized) && normalized !== 'path' && normalized !== 'pathext') continue;
+    injected.push('--env', name + '=' + value);
+  }
+  const result = [...argv.slice(0, separator), ...injected, ...argv.slice(separator)];
+  const estimate = result.reduce((size, value) => size + value.length + 3, 0);
+  if (estimate > 30000) throw new Error('ASRT Windows child environment exceeds the CreateProcess command-line limit.');
+  return result;
+};
+const writeObservation = async (observation) => {
+  if (typeof request.observationFile !== 'string') return;
+  await writeFile(request.observationFile, JSON.stringify(observation), { mode: 0o600 });
+};
+const waitForTarget = (target, observation) => {
+  const marker = Buffer.from(targetStartedMarker, 'utf8');
+  let pending = Buffer.alloc(0);
+  let diagnostic = Buffer.alloc(0);
+  let processError;
+  let targetStarted = false;
+  let observationWrite = Promise.resolve();
+  return new Promise((resolve, reject) => {
+    let settled = false;
+    const finish = (result) => {
+      if (settled) return;
+      settled = true;
+      void observationWrite.then(() => resolve(result), reject);
+    };
+    target.stderr.on('data', (chunk) => {
+      if (targetStarted) {
+        process.stderr.write(chunk);
+        return;
+      }
+      pending = Buffer.concat([pending, Buffer.from(chunk)]);
+      const markerOffset = pending.indexOf(marker);
+      if (markerOffset >= 0) {
+        targetStarted = true;
+        const suffix = pending.subarray(markerOffset + marker.length);
+        pending = Buffer.alloc(0);
+        diagnostic = Buffer.alloc(0);
+        observationWrite = writeObservation(observation).catch(() => undefined);
+        if (suffix.length > 0) process.stderr.write(suffix);
+        return;
+      }
+      const retained = Math.max(0, marker.length - 1);
+      if (pending.length > retained) {
+        diagnostic = Buffer.concat([
+          diagnostic,
+          pending.subarray(0, pending.length - retained),
+        ]).subarray(-65536);
+        pending = pending.subarray(pending.length - retained);
+      }
+    });
+    target.once('error', (error) => {
+      processError = error instanceof Error ? error.message : String(error);
+    });
+    target.once('close', (exitCode, signal) => {
+      const preTarget = Buffer.concat([diagnostic, pending]).toString('utf8').trim();
+      finish({
+        exitCode: signal ? 1 : exitCode ?? 1,
+        targetStarted,
+        diagnostic: preTarget || processError || undefined,
+      });
+    });
+  });
+};
+let child;
+let targetStarted = false;
+let normalFallbackAttempted = false;
+const runDirect = async () => {
+  const internalElectronNode = request.command === process.execPath && process.versions.electron !== undefined;
+  const directArgs = internalElectronNode
+    ? ['--import', ${Pe}, ...request.args]
+    : request.args;
+  const directEnv = internalElectronNode
+    ? { ...request.env, [${ue}]: '1' }
+    : request.env;
+  child = spawn(request.command, directArgs, {
+    cwd: request.cwd,
+    env: directEnv,
+    shell: false,
+    stdio: 'inherit',
+    windowsHide: true,
+  });
+  return await new Promise((resolve, reject) => {
+    child.once('error', reject);
+    child.once('exit', (exitCode, signal) => resolve(signal ? 1 : exitCode ?? 1));
+  });
+};
+try {
+  if (request.wrappedInvocation) {
+    const wrapped = request.wrappedInvocation;
+    child = spawn(wrapped.executable, wrapped.args, {
+      cwd: request.cwd,
+      env: wrapped.env,
+      shell: wrapped.shell,
+      stdio: ['inherit', 'inherit', 'pipe'],
+      windowsHide: true,
+    });
+    const result = await waitForTarget(child, {
+      version: 1,
+      state: 'applied',
+      backend: request.observationBackend ?? 'unsupported',
+      policyId: 'kodax-workspace-shell-v1',
+    });
+    targetStarted = result.targetStarted;
+    if (request.fallbackToNormalExecution === true && !targetStarted) {
+      await writeObservation({
+        version: 1,
+        state: 'fallback',
+        reason: 'backend_failed',
+        execution: 'normal_permission_policy',
+      }).catch(() => undefined);
+      normalFallbackAttempted = true;
+      process.exitCode = await runDirect();
+    } else {
+      if (!targetStarted && result.diagnostic) {
+        process.stderr.write(result.diagnostic + '\n');
+      }
+      process.exitCode = result.exitCode;
+    }
+  } else {
+  ({ SandboxManager } = await import(process.argv[1]));
+  const bootstrap = request.bootstrapCommand ?? 'node';
+  const bootstrapIsAbsolute = /^(?:[A-Za-z]:[\\/]|\\\\)/.test(bootstrap);
+  const bootstrapIsElectronNode = bootstrap === process.execPath
+    && process.versions.electron !== undefined;
+  const config = process.platform === 'win32' && bootstrapIsAbsolute
+    ? {
+        ...request.config,
+        filesystem: {
+          ...request.config.filesystem,
+          allowRead: [...new Set([...request.config.filesystem.allowRead, bootstrap])],
+        },
+      }
+    : request.config;
+  await SandboxManager.initialize(config, callback);
+  const quote = (value) => process.platform === 'win32'
+    ? '"' + value.replaceAll('"', '""') + '"'
+    : "'" + value.replaceAll("'", "'\"'\"'") + "'";
+  const internalElectronNode = request.command === process.execPath && process.versions.electron !== undefined;
+  const childArgs = internalElectronNode
+    ? ['--import', ${Pe}, ...request.args]
+    : request.args;
+  const command = [
+    quote(bootstrap),
+    '-e',
+    quote(${br}),
+    ${hr},
+    Buffer.from(JSON.stringify({
+      command: request.command,
+      args: childArgs,
+      cwd: request.cwd,
+      targetStartedMarker,
+    }), 'utf8').toString('base64'),
+  ].join(' ');
+  if (process.platform === 'win32') {
+    const wrapped = await SandboxManager.wrapWithSandboxArgv(command, 'cmd', undefined, undefined, request.cwd);
+    const requestedEnv = internalElectronNode || bootstrapIsElectronNode
+      ? { ...request.env, [${ue}]: '1' }
+      : request.env;
+    const childArgv = withWindowsChildEnvironment(wrapped.argv, requestedEnv);
+    child = spawn(childArgv[0], childArgv.slice(1), {
+      cwd: request.cwd,
+      env: wrapped.env,
+      shell: false,
+      stdio: ['inherit', 'inherit', 'pipe'],
+      windowsHide: true,
+    });
+  } else {
+    const wrapped = await SandboxManager.wrapWithSandbox(command);
+    const childEnv = internalElectronNode || bootstrapIsElectronNode
+      ? { ...request.env, [${ue}]: '1' }
+      : request.env;
+    child = spawn(wrapped, {
+      cwd: request.cwd,
+      env: childEnv,
+      shell: true,
+      stdio: ['inherit', 'inherit', 'pipe'],
+    });
+  }
+  const stop = () => child?.kill('SIGTERM');
+  process.once('SIGINT', stop);
+  process.once('SIGTERM', stop);
+  const result = await waitForTarget(child, {
+    version: 1,
+    state: 'applied',
+    backend: request.observationBackend ?? 'unsupported',
+    policyId: 'kodax-workspace-shell-v1',
+  });
+  targetStarted = result.targetStarted;
+  try { SandboxManager.cleanupAfterCommand(); } catch {}
+  await SandboxManager.reset().catch(() => undefined);
+  if (request.fallbackToNormalExecution === true && !targetStarted) {
+    await writeObservation({
+      version: 1,
+      state: 'fallback',
+      reason: 'backend_failed',
+      execution: 'normal_permission_policy',
+    }).catch(() => undefined);
+    normalFallbackAttempted = true;
+    process.exitCode = await runDirect();
+  } else {
+    if (!targetStarted && result.diagnostic) {
+      process.stderr.write(result.diagnostic + '\n');
+    }
+    process.exitCode = result.exitCode;
+  }
+  }
+} catch (error) {
+  await SandboxManager?.reset().catch(() => undefined);
+  if (
+    request.fallbackToNormalExecution === true
+    && !targetStarted
+    && !normalFallbackAttempted
+  ) {
+    try {
+      await writeObservation({
+        version: 1,
+        state: 'fallback',
+        reason: 'backend_failed',
+        execution: 'normal_permission_policy',
+      }).catch(() => undefined);
+      normalFallbackAttempted = true;
+      process.exitCode = await runDirect();
+    } catch (fallbackError) {
+      process.stderr.write((fallbackError instanceof Error ? fallbackError.message : String(fallbackError)) + '\n');
+      process.exitCode = 1;
+    }
+  } else {
+    process.stderr.write((error instanceof Error ? error.message : String(error)) + '\n');
+    process.exitCode = 1;
+  }
+}
+`,M,ee=0,vr=3e4,G,oe,I;function we(e){return e instanceof Error?e.message:String(e)}a(we,"errorText");function ge(e,...n){return e instanceof Error&&"code"in e&&typeof e.code=="string"&&n.includes(e.code)}a(ge,"isFileSystemError");async function Ce(e){try{return await q(e)}catch(n){if(ge(n,"ENOENT"))return;throw n}}a(Ce,"readFileIfPresent");async function xr(e,n){let r=await Ce(n);if(r?.equals(e))return;if(r!==void 0)throw new Error(`Prepared Windows sandbox runner failed integrity verification: ${n}.`);let t=`${n}.${process.pid}.${W()}.tmp`;try{await K(t,e,{flag:"wx",mode:448});try{await rr(t,n)}catch(s){if(!(await Ce(n))?.equals(e))throw s}}finally{await N(t,{force:!0})}}a(xr,"installWindowsRunnerCopy");async function kr(){if(G===void 0){let e=(async()=>{let n=await q(ir()),r=Ye("sha256").update(n).digest("hex").slice(0,16),t=o.join(o.resolve(U()),"sandbox-runtime","runner",j,process.arch,r),s=o.join(t,"srt-win.exe");await T(t,{recursive:!0,mode:448}),await xr(n,s);let i={path:s,directory:t,srtWin:ur({path:s})};return oe=i,i})();G=e,e.catch(()=>{G===e&&(G=void 0,oe=void 0)})}return G}a(kr,"prepareWindowsSandboxRunner");function he(){if(process.platform!=="win32")throw new Error("A prepared Windows sandbox runner was requested on a non-Windows platform.");if(oe===void 0)throw new Error("Windows sandbox runner is not prepared; run the sandbox readiness check first.");return oe}a(he,"requirePreparedWindowsRunner");function pe(){I!==void 0&&(Me({sandboxUserSid:I.sandboxUserSid,holderPid:process.pid,srtWin:I.runner.srtWin}),I=void 0)}a(pe,"releasePreparedWindowsRunnerGrant");function Rr(e,n){if(!(I?.runner.path===e.path&&I.sandboxUserSid===n)){process.removeListener("exit",pe),pe();try{cr({read:[e.directory,e.path],write:[],sandboxUserSid:n,holderPid:process.pid,srtWin:e.srtWin})}catch(r){try{Me({sandboxUserSid:n,holderPid:process.pid,srtWin:e.srtWin})}catch(t){throw new AggregateError([r,t],"Windows sandbox runner ACL grant failed and its partial grant could not be revoked.")}throw r}I={runner:e,sandboxUserSid:n},process.once("exit",pe)}}a(Rr,"retainPreparedWindowsRunnerGrant");async function Er(){let[e,n]=ar;for(let r=0;r<5;r+=1){let t=tr();t.listen(0,"127.0.0.1"),await _e(t,"listening");let s=t.address();if(typeof s=="object"&&s!==null&&(s.port<e||s.port>n))return{server:t,target:`127.0.0.1:${s.port}`};let i=_e(t,"close");t.close(),await i}throw new Error(`[wfp_probe_bind_failed] Could not bind a loopback listener outside the Windows sandbox proxy range [${e},${n}].`)}a(Er,"bindWindowsWfpProbe");function Oe(e){return/0x80070005|access (?:is )?denied|拒绝访问/i.test(e)?"runner_launch_access_denied":/seclogon|secondary logon/i.test(e)?"secondary_logon_unavailable":"wfp_probe_failed"}a(Oe,"windowsRunnerFailureCode");function Ar(e){return ge(e,"ETIMEDOUT")?"wfp_probe_timeout":ge(e,"EACCES","EPERM")?"runner_launch_access_denied":"runner_spawn_failed"}a(Ar,"windowsRunnerSpawnFailureCode");async function _r(e){let{server:n,target:r}=await Er();try{let t=Be(e.srtWin.exe,[...e.srtWin.prependArgs,"wfp","verify","--target",r],{cwd:e.directory,encoding:"utf8",timeout:3e4,windowsHide:!0}),s=(t.stderr??"").trim();if(t.error)throw new Error(`[${Ar(t.error)}] Windows sandbox runner failed to start: ${t.error.message}`);let i;try{i=JSON.parse((t.stdout??"").trim())}catch{let c=t.status===null?"wfp_probe_timeout":Oe(s);throw new Error(`[${c}] Windows sandbox WFP probe exited ${String(t.status)}${t.signal?` (signal ${t.signal})`:""} with unparseable output; stderr: ${s||"(empty)"}.`)}if(t.status===3)throw new Error(`[wfp_fence_inactive] Direct outbound access to ${String(i.target??r)} succeeded. Run "kodax sandbox setup" to reinstall the Windows network policy.`);if(t.status!==0||i.egress_probe!=="blocked")throw new Error(`[${Oe(s)}] Windows sandbox WFP probe to ${String(i.target??r)} was ${String(i.egress_probe)} (exit ${String(t.status)}): ${s||"(empty stderr)"}.`)}finally{n.close()}}a(_r,"verifyPreparedWindowsWfp");function Tr(e){let n=[];return e.provisioned||n.push("Windows sandbox account does not exist."),e.sid||n.push("Windows sandbox account SID is unavailable."),(!e.groupExists||!e.groupSid)&&n.push("Windows sandbox local group is unavailable."),e.inBuiltinUsers||n.push("Windows sandbox account is not in the built-in Users group."),e.inSandboxGroup||n.push("Windows sandbox account is not in the sandbox-runtime-users group."),e.hiddenFromLogon||n.push("Windows sandbox account is not hidden from interactive logon."),e.credPresent||n.push("Windows sandbox account credential is unavailable."),n}a(Tr,"windowsSandboxAccountDiagnostics");function Pr(e){let n=JSON.parse(e);if(typeof n!="object"||n===null)return;let r=n;if(r.version===1&&(r.state==="applied"&&r.policyId==="kodax-workspace-shell-v1"&&(r.backend==="windows-restricted-user"||r.backend==="macos-seatbelt"||r.backend==="linux-bubblewrap"||r.backend==="unsupported")||r.state==="fallback"&&r.reason==="backend_failed"&&r.execution==="normal_permission_policy"))return r}a(Pr,"parseBrokerObservation");function ae(){return process.env.KODAX_A2A_NODE??(process.env.KODAX_BUNDLED==="true"?"node":process.execPath)}a(ae,"sandboxJavaScriptCommand");async function L(e={}){if(e.refresh||M===void 0||Date.now()>=ee){let n=Cr();M=n,ee=Number.POSITIVE_INFINITY,n.then(r=>{M===n&&(ee=r.ready?Number.POSITIVE_INFINITY:Date.now()+vr)},()=>{M===n&&(M=void 0,ee=0)})}return M}a(L,"doctorSandboxRuntime");async function Cr(){let e=[];le.isSupportedPlatform()||e.push(`Unsupported platform: ${process.platform}.`);let n=le.checkDependencies();e.push(...n.warnings,...n.errors);let r=n.errors.length>0;if(process.env.KODAX_BUNDLED!=="true")try{let c=JSON.parse(await q($e.resolve("@anthropic-ai/sandbox-runtime/package.json"),"utf8"));c.version!==j&&(r=!0,e.push(`ASRT package version mismatch: expected ${j}, found ${String(c.version)}.`))}catch(c){r=!0,e.push(`ASRT package provenance check failed: ${we(c)}`)}let t=ae(),s=J({args:["--version"],env:X(),isElectron:t===process.execPath&&process.versions.electron!==void 0}),i=Be(t,s.args,{env:s.env,shell:!1,encoding:"utf8",windowsHide:!0,timeout:5e3});if(i.status!==0){r=!0;let c=i.error?.message??(i.stderr.trim()||t);e.push(`JavaScript Skill interpreter is unavailable: ${c}.`)}if(process.platform==="win32")try{let c=await kr(),d=dr({srtWin:c.srtWin}),l=Tr(d);l.length>0||!d.sid?(r=!0,e.push(...l)):(Rr(c,d.sid),await _r(c))}catch(c){r=!0,e.push(we(c))}return{ready:le.isSupportedPlatform()&&!r,platform:process.platform,version:j,diagnostics:e,setupRequired:r}}a(Cr,"inspectSandboxRuntime");async function Or(){if(process.platform!=="win32")return L({refresh:!0});if(lr().cancelled)throw new Error("Sandbox setup was cancelled.");return L({refresh:!0})}a(Or,"setupSandboxRuntime");function re(e){return e.ready?[`KodaX sandbox is active (${e.platform}, ASRT ${e.version}).`]:e.platform==="win32"?['Run "kodax sandbox setup". Windows will show a UAC prompt for the one-time sandbox account and network policy setup.',"The terminal itself does not need to be started as Administrator; approve the UAC prompt when it appears."]:e.platform==="darwin"?['KodaX uses macOS Seatbelt through sandbox-exec. Install the missing dependency, then rerun "kodax sandbox doctor".',"Homebrew: brew install ripgrep"]:e.platform==="linux"?['KodaX uses bubblewrap on Linux. Install bubblewrap, socat, and ripgrep, then rerun "kodax sandbox doctor".',"Debian/Ubuntu: sudo apt install bubblewrap socat ripgrep","Fedora/RHEL: sudo dnf install bubblewrap socat ripgrep","Arch Linux: sudo pacman -S bubblewrap socat ripgrep"]:[`KodaX sandbox is not supported on ${e.platform}.`]}a(re,"sandboxSetupGuidance");async function gn(e={}){let n=await L({refresh:!0});if(n.ready)return{status:"ready",attempted:!1,doctor:n,guidance:re(n)};if(n.platform!=="win32"||e.allowElevation===!1)return{status:"unavailable",attempted:!1,doctor:n,guidance:re(n)};try{let r=await Or();return{status:r.ready?"ready":"unavailable",attempted:!0,doctor:r,guidance:re(r)}}catch(r){let t=await L({refresh:!0}),s=we(r);return{status:/cancelled/i.test(s)?"cancelled":"unavailable",attempted:!0,doctor:t,guidance:re(t),error:s}}}a(gn,"prepareSandboxRuntimeForSetup");function D(e,n){let r=e.replaceAll("\\","/").replace(/^\.\//,"");if(!r||o.posix.isAbsolute(r)||r.split("/").includes(".."))throw new Error(`${n} must be a safe relative path.`);return r}a(D,"canonicalRelative");function F(e,n){let r=o.relative(e,n);return r===""||!r.startsWith("..")&&!o.isAbsolute(r)}a(F,"isInside");function Ke(e){let n=e.split(o.sep).map(r=>r.toLowerCase());return n.some(r=>fr.has(r))||n.some(r=>mr.has(r)||r.startsWith(".env."))}a(Ke,"isSensitiveRelative");async function Wr(e,n){await T(n,{recursive:!0,mode:448});let r=[...(e.scripts??[]).map(t=>({folder:"scripts",file:t})),...(e.references??[]).map(t=>({folder:"references",file:t})),...(e.assets??[]).map(t=>({folder:"assets",file:t})),...(e.templates??[]).map(t=>({folder:"templates",file:t})),...(e.resources??[]).map(t=>({folder:"resources",file:t}))];await K(o.join(n,"SKILL.md"),await q(e.skillFilePath),{mode:384});for(let{folder:t,file:s}of r){let i=D(s.relativePath,`Skill ${e.name} support file`),c=o.join(n,t,...i.split("/"));await T(o.dirname(c),{recursive:!0,mode:448}),await K(c,await q(s.path),{mode:384})}}a(Wr,"copySkillSnapshot");async function Nr(e,n){let r=new Map;for(let[t,s]of Object.entries(e.admissions)){let i=await e.registry.loadFull(t),c=new Map((i.scripts??[]).map(l=>[`scripts/${D(l.relativePath,`Skill ${t} script`)}`,l])),d=o.join(n,t.replace(/[^A-Za-z0-9._-]/g,"_"));await Wr(i,d);for(let l of s){let u=D(l,`toolPolicy.skillScripts.${t}`);if(!c.has(u))throw new Error(`Skill "${t}" has no script "${u}".`);r.set(`${t}\0${u}`,{skill:t,relativePath:u,snapshotPath:o.join(d,...u.split("/"))})}}return r}a(Nr,"snapshotAdmissions");function Dr(e){return e.mode==="deny"?[]:e.origins.map(n=>{let r=new URL(n);return{host:r.hostname.toLowerCase(),port:r.port?Number(r.port):r.protocol==="https:"?443:80}})}a(Dr,"networkEndpoints");function X(){let e=["PATH","Path","PATHEXT","SystemRoot","COMSPEC","TEMP","TMP","HOME","USERPROFILE","LOCALAPPDATA","LANG"],n={NO_COLOR:"1"};for(let r of e)process.env[r]!==void 0&&(n[r]=process.env[r]);for(let[r,t]of Object.entries(process.env))r.startsWith("LC_")&&t!==void 0&&(n[r]=t);return n}a(X,"sanitizedEnvironment");function Br(e){let n=o.extname(e).toLowerCase();if([".js",".mjs",".cjs"].includes(n))return{command:process.env.KODAX_A2A_NODE??(process.env.KODAX_BUNDLED==="true"?"node":process.execPath),args:[e]};if(n===".py")return{command:process.env.KODAX_A2A_PYTHON??(process.platform==="win32"?"python.exe":"python3"),args:[e]};if(n===".ps1")return{command:process.env.KODAX_A2A_POWERSHELL??(process.platform==="win32"?o.join(process.env.SystemRoot??"C:\\Windows","System32","WindowsPowerShell","v1.0","powershell.exe"):"pwsh"),args:["-NoProfile","-NonInteractive","-File",e]};if(n===".sh"&&process.platform!=="win32")return{command:"/bin/sh",args:[e]};if([".cmd",".bat"].includes(n)&&process.platform==="win32")return{command:process.env.COMSPEC??o.join(process.env.SystemRoot??"C:\\Windows","System32","cmd.exe"),args:["/d","/s","/c",e]};throw new Error(`Unsupported admitted Skill script type: ${n||"<none>"}.`)}a(Br,"interpreterFor");var We=250,Ir=1500;async function Lr(e,n,r=ye,t=be){let s=[],i=[],c=0,d,l=a(()=>{},"rejectStopped"),u,w=new Promise((m,f)=>{l=f}),b=a(m=>{if(d!==void 0)return;d=m;let f=!1,h=a(()=>{f||(f=!0,u!==void 0&&clearTimeout(u),l(m))},"finish");u=setTimeout(()=>{try{e.kill("SIGKILL")}finally{h()}},Ir),ce(e,{forceMs:We,taskkillMs:We}).then(h,h)},"requestStop"),v=a((m,f)=>{c+=f.byteLength,c>t?b(new Error(`Sandboxed command output exceeded ${t} bytes.`)):m.push(f)},"append");e.stdout?.on("data",m=>{v(s,m)}),e.stderr?.on("data",m=>{v(i,m)});let y=setTimeout(()=>{b(new Error(`Sandboxed command exceeded its ${r} ms timeout.`))},r),g=a(()=>{let m=n?.reason;b(m instanceof Error?m:new Error("Sandboxed command was cancelled."))},"abort");n?.addEventListener("abort",g,{once:!0}),n?.aborted&&g();try{let m=new Promise((h,P)=>{e.once("error",P),e.once("close",z=>h(z??1))}),f=await Promise.race([m,w]);if(d!==void 0)throw d;return{exitCode:f,stdout:Buffer.concat(s).toString("utf8"),stderr:Buffer.concat(i).toString("utf8")}}finally{clearTimeout(y),u!==void 0&&clearTimeout(u),n?.removeEventListener("abort",g)}}a(Lr,"collectProcess");async function Fe(e,n,r=ye,t=be){let s=o.join(se.tmpdir(),`kodax-asrt-${process.pid}-${W()}.json`),i={...e,bootstrapCommand:e.bootstrapCommand??ae(),config:{...e.config,filesystem:{...e.config.filesystem,denyRead:[...e.config.filesystem.denyRead,s]}}};await K(s,JSON.stringify(i),{mode:384});try{let c=process.env.KODAX_BUNDLED==="true"?["__asrt-broker",s]:["--input-type=module","-e",qe,je,s],d=J({args:c,env:X(),isElectron:process.versions.electron!==void 0}),l=De(process.execPath,d.args,{cwd:process.platform==="win32"?he().directory:void 0,env:d.env,shell:!1,stdio:["ignore","pipe","pipe"],windowsHide:!0,detached:process.platform!=="win32"});return de(l),await Lr(l,n,r,t)}finally{await N(s,{force:!0})}}a(Fe,"runBrokerResult");async function Mr(e,n){let r=await Fe(e,n);if(r.exitCode!==0){let t=r.stderr.trim()||r.stdout.trim();throw new Error(`Sandboxed Skill script failed (${r.exitCode}): ${t}`)}return r.stdout}a(Mr,"runBroker");async function $r(e,n){let r=await H(e),t=o.resolve(e,D(n,"Skill script input")),s=await H(t);if(!F(r,s)||Ke(o.relative(r,s)))throw new Error("Skill script input is outside the permitted workspace surface.");if(!(await te(s)).isFile())throw new Error("Skill script inputs must be files.");return s}a($r,"workspaceSource");async function jr(e,n){let r=await H(e),t=o.resolve(e,D(n,"Skill script output target"));if(!F(o.resolve(e),t)||Ke(o.relative(o.resolve(e),t)))throw new Error("Skill script output target is outside the permitted workspace surface.");if(await T(o.dirname(t),{recursive:!0}),!F(r,await H(o.dirname(t))))throw new Error("Skill script output target escapes through a symlink.");try{throw await te(t),new Error("Skill script output target already exists.")}catch(s){if(s.code!=="ENOENT")throw s}return t}a(jr,"workspaceTarget");async function qr(e,n,r,t){if(r.inputs.length>0&&t==="none")throw new Error("Skill script inputs require workspace read access.");for(let s of r.inputs){let i=await $r(e,s.path),c=D(s.as??o.basename(i),"Skill script staged input"),d=o.resolve(n,"inputs",...c.split("/"));if(!F(o.join(n,"inputs"),d))throw new Error("Skill script staged input escapes staging.");await T(o.dirname(d),{recursive:!0,mode:448}),await Le(i,d)}}a(qr,"stageInputFiles");async function Kr(e,n,r,t,s){if(r.outputs.length>0&&t!=="write")throw new Error("Skill script outputs require workspace write access.");let i=[];for(let c of r.outputs){let d=D(c.path,"Skill script staged output"),l=o.resolve(n,"outputs",...d.split("/")),u=await H(l);if(!F(o.join(n,"outputs"),u)||(await er(l)).isSymbolicLink()||!(await te(l)).isFile())throw new Error(`Skill script did not produce output "${d}".`);let w=await jr(e,c.target);if(s!==void 0&&Xe(e,!0)+(await te(l)).size>s)throw new Error("Skill script outputs would exceed the remote workspace byte quota.");await Le(l,w,Ze.COPYFILE_EXCL),i.push(o.relative(e,w))}return i}a(Kr,"promoteOutputs");function Xe(e,n=!1){let r=0;for(let t of Qe(e,{withFileTypes:!0})){if(n&&t.name===".kodax-a2a-script"||t.isSymbolicLink())continue;let s=o.join(e,t.name);t.isDirectory()?r+=Xe(s):t.isFile()&&(r+=Ie(s).size)}return r}a(Xe,"directorySize");function ve(e){if(process.platform!=="win32")return e;let n=he();return{...e,windows:{...e.windows,srtWin:{path:n.path}},filesystem:{...e.filesystem,allowRead:[...new Set([...e.filesystem.allowRead,n.directory])],denyWrite:[...new Set([...e.filesystem.denyWrite??[],n.directory])]}}}a(ve,"withPreparedWindowsRunner");function Fr(e,n,r,t){let s=se.homedir(),i=o.isAbsolute(t)?[t]:[];return ve({network:{allowedDomains:[],deniedDomains:[],strictAllowlist:r.length===0,allowUnixSockets:[],allowAllUnixSockets:!1,allowLocalBinding:!1},filesystem:{denyRead:[s],allowRead:[e,n,process.execPath,...i],allowWrite:[e],denyWrite:[s]}})}a(Fr,"sandboxConfig");function Xr(){let e=[se.tmpdir(),process.env.TEMP,process.env.TMP,process.env.TMPDIR,...process.platform==="win32"?[]:["/tmp","/var/tmp"]];return[...new Set(e.filter(n=>typeof n=="string"&&o.isAbsolute(n)).map(n=>o.resolve(n)))]}a(Xr,"canonicalTempDirectories");function Ur(e){return[o.join(e,".git","config"),o.join(e,".git","hooks")].filter(r=>{try{return Ie(r),!0}catch{return!1}})}a(Ur,"existingWorkspaceDenyWrites");function Jr(e,n,r){return[...new Set([o.resolve(r),o.resolve(n),...wr.map(t=>o.resolve(e,t))])]}a(Jr,"workspaceShellSensitiveReadDenies");function Ue(e){let n=o.resolve(U()),r=o.join(n,"sandbox-runtime"),t=o.resolve(se.homedir()),s=Jr(t,n,r),i=(process.env.PATH??process.env.Path??"").split(o.delimiter).map(d=>d.replace(/^"|"$/g,"")).filter(d=>o.isAbsolute(d)).map(d=>o.resolve(d)).filter(d=>{let l=o.relative(t,d);return l!==""&&!l.startsWith("..")&&!o.isAbsolute(l)&&!s.some(u=>F(u,d))}),c=ae();return ve({network:{allowedDomains:[],deniedDomains:[],strictAllowlist:!1,allowUnixSockets:[],allowAllUnixSockets:!1,allowLocalBinding:!1},filesystem:{denyRead:s,allowRead:[...new Set([...i,...o.isAbsolute(c)?[c]:[]])],allowWrite:[e,...Xr()],denyWrite:[r,...Ur(e)]}})}a(Ue,"workspaceShellSandboxConfig");function Gr(e){let n=Ue(e);return process.platform!=="win32"?n:{...n,filesystem:{...n.filesystem,denyRead:[o.resolve(U(),"sandbox-runtime")]}}}a(Gr,"workspaceShellSessionSandboxConfig");function ne(e,n){return[...new Set((e??[]).map(r=>o.resolve(n,r)))]}a(ne,"normalizedSandboxPaths");function Hr(e){return e.mode!=="allowlist"?[]:e.origins.map(n=>{let r=new URL(n);if(r.protocol!=="http:"&&r.protocol!=="https:"||r.username||r.password||r.pathname!=="/"||r.search||r.hash)throw new Error(`Sandbox network origin must be an HTTP(S) origin: ${n}`);return{host:r.hostname.toLowerCase(),port:r.port?Number(r.port):r.protocol==="https:"?443:80}})}a(Hr,"sdkSandboxEndpoints");async function Sn(e){if(!e.command.trim())throw new Error("Sandbox command must not be empty.");if(e.timeoutMs!==void 0&&(!Number.isFinite(e.timeoutMs)||e.timeoutMs<=0))throw new Error("Sandbox timeoutMs must be a positive finite number.");if(e.maxOutputBytes!==void 0&&(!Number.isSafeInteger(e.maxOutputBytes)||e.maxOutputBytes<=0))throw new Error("Sandbox maxOutputBytes must be a positive safe integer.");let n=o.resolve(e.cwd),r=e.network??{mode:"deny"},t=Hr(r),s=await L();if(!s.ready)return{status:"unavailable",sandboxed:!1,doctor:s};let i={...e.inheritEnvironment===!0?process.env:X(),...e.env},c={config:ve({network:{allowedDomains:[],deniedDomains:[],strictAllowlist:r.mode==="deny",allowUnixSockets:[],allowAllUnixSockets:!1,allowLocalBinding:!1},filesystem:{allowRead:ne(e.filesystem.allowRead,n),allowWrite:ne(e.filesystem.allowWrite,n),denyRead:ne(e.filesystem.denyRead,n),denyWrite:ne(e.filesystem.denyWrite,n)}}),command:e.command,args:e.args??[],cwd:n,env:i,endpoints:t,allowAllNetwork:r.mode==="allow"},d=await Fe(c,e.signal,e.timeoutMs??ye,e.maxOutputBytes??be);return{status:"completed",sandboxed:!0,exitCode:d.exitCode,stdout:d.stdout,stderr:d.stderr}}a(Sn,"runKodaXSandboxed");var zr=5*6e4,Vr=18e4,Yr=3e4,fe=1500,Zr=13e4,$=new Map;function Je(){let e=new Error("ASRT workspace session preparation timed out.");return e.name="TimeoutError",e}a(Je,"workspacePreparationTimeoutError");function Se(e,n){if(e?.aborted)throw new DOMException("Operation aborted","AbortError");if(n!==void 0&&Date.now()>=n)throw Je()}a(Se,"throwIfWorkspacePreparationStopped");function Ge(e,n,r){return Se(n,r),n===void 0&&r===void 0?e:new Promise((t,s)=>{let i=!1,c,d=a(u=>{i||(i=!0,c&&clearTimeout(c),n?.removeEventListener("abort",l),u())},"finish"),l=a(()=>{d(()=>s(new DOMException("Operation aborted","AbortError")))},"onAbort");n?.addEventListener("abort",l,{once:!0}),r!==void 0&&(c=setTimeout(()=>{d(()=>s(Je()))},Math.max(0,r-Date.now())),c.unref()),e.then(u=>d(()=>t(u)),u=>d(()=>s(u)))})}a(Ge,"waitForWorkspacePreparation");async function He(){let e=o.join(U(),"sandbox-runtime");return await T(e,{recursive:!0,mode:448}),e}a(He,"sandboxControlDirectory");function Qr(e){if(process.env.KODAX_BUNDLED==="true")return["__asrt-workspace-session",e];if(import.meta.url.endsWith(".ts"))return["--import","tsx",Te(new URL("./sandbox-workspace-session-entry.ts",import.meta.url)),e];let n=o.dirname(Te(import.meta.url)),r=o.basename(n)==="chunks"?o.dirname(n):n;return[o.join(r,"sandbox-workspace-session.js"),e]}a(Qr,"workspaceSessionEntryArgs");function me(e,n){let r=n?"ref":"unref";e[r]();for(let t of e.stdio){if(!t)continue;t[r]?.()}}a(me,"setWorkspaceSessionReferenced");async function en(e,n){let r=await He(),t=o.join(r,`workspace-${process.pid}-${W()}.json`);await K(t,JSON.stringify({config:Gr(e)}),{mode:384});let s=J({args:Qr(t),env:X(),isElectron:process.versions.electron!==void 0}),i=De(process.execPath,s.args,{cwd:process.platform==="win32"?he().directory:void 0,env:s.env,shell:!1,stdio:["pipe","pipe","pipe","pipe"],windowsHide:!0});de(i);let c=i.stdio[3];if(!c)throw new Error("ASRT workspace session control pipe was not created.");let d=or.createInterface({input:c}),l=new Map,u="",w=!1,b=!1,v=!1,y=0,g=0,m,f,h,P=new Promise(p=>{i.once("exit",()=>p())}),z,ie,ze=new Promise((p,S)=>{z=p,ie=S}),xe=a(()=>{v||(v=!0,n())},"evict"),V,C=a(()=>V||(V=(async()=>{try{await ce(i,{gracefulStdinEnd:!0,gracefulMs:process.platform==="win32"?Zr:fe,forceMs:fe,taskkillMs:fe})}finally{d.close(),c.destroy(),i.stdin.destroy()}})().finally(xe),V),"terminate"),O=a(p=>{if(!w){w=!0,ie(p);for(let S of l.values())S.reject(p);l.clear()}},"fail");i.stderr.on("data",p=>{u=(u+p.toString("utf8")).slice(-16384)}),i.stdout.on("data",p=>{u=(u+p.toString("utf8")).slice(-16384)}),d.on("line",p=>{let S;try{S=JSON.parse(p)}catch{O(new Error("ASRT workspace session returned malformed control data.")),C();return}if(S.type==="ready"){S.ok?z():ie(new Error(S.error??"ASRT workspace session failed."));return}if(S.type!=="result"||!S.id){O(new Error("ASRT workspace session returned an invalid control response.")),C();return}let k=l.get(S.id);k&&(l.delete(S.id),k.resolve(S))}),i.once("error",p=>{O(p),C()}),d.once("close",()=>{b||w||(O(new Error("ASRT workspace session control pipe closed unexpectedly.")),C())}),i.once("exit",p=>{f&&clearTimeout(f),O(new Error(`ASRT workspace session exited ${p??1}: ${u.trim()||"no diagnostics"}`)),xe()});let Ve=setTimeout(()=>{O(new Error("ASRT workspace session initialization timed out.")),C()},Vr);try{await ze.finally(()=>clearTimeout(Ve))}catch(p){throw await C(),await N(t,{force:!0}),p}let Y=a(async(p,S)=>{if(w||b&&p==="wrap")throw new Error("ASRT workspace session is unavailable.");let k=`workspace_${++y}`,Z=new Promise((x,E)=>{l.set(k,{resolve:x,reject:E})}),R=setTimeout(()=>{O(new Error(`ASRT workspace session ${p} request timed out.`)),C()},Yr);R.unref();try{await new Promise((x,E)=>{i.stdin.write(`${JSON.stringify({id:k,type:p,request:S})}
+`,A=>A?E(A):x())})}catch(x){throw l.delete(k),clearTimeout(R),O(x instanceof Error?x:new Error(String(x))),C(),x}return Z.finally(()=>clearTimeout(R))},"request"),ke=a(()=>{f&&clearTimeout(f),!(g>0||b||w)&&(f=setTimeout(()=>{Re.close()},zr),f.unref(),me(i,!1))},"scheduleIdleClose"),Re={async acquire(p,S,k){if(Se(S,k),w||b)throw new Error("ASRT workspace session is unavailable.");f&&clearTimeout(f),me(i,!0),g+=1;let Z=!1,R=a(()=>{Z||(Z=!0,g-=1,g===0&&(m?.(),m=void 0),ke())},"finalize"),x=Y("wrap",p),E;try{E=await Ge(x,S,k)}catch(A){throw x.then(async _=>{if(!_.ok||!_.invocation)return;let Q=await Y("cleanup");if(!Q.ok)throw new Error(Q.error??"ASRT command cleanup failed.")}).catch(_=>{B({source:"sandbox:workspace-session",level:"warn",message:"Late workspace sandbox preparation cleanup failed.",detail:_})}).finally(R),A}try{if(!E.ok||!E.invocation)throw R(),new Error(E.error??"ASRT workspace wrapping failed.");try{Se(S,k)}catch(_){try{await Y("cleanup")}catch(Q){B({source:"sandbox:workspace-session",level:"warn",message:"Cancelled workspace sandbox preparation cleanup failed.",detail:Q})}throw R(),_}let A=!1;return{invocation:E.invocation,async release(){if(!A){A=!0;try{let _=await Y("cleanup");if(!_.ok)throw new Error(_.error??"ASRT command cleanup failed.")}finally{R()}}}}}catch(A){throw R(),A}},async close(){return h||(b=!0,h=(async()=>{f&&clearTimeout(f),!w&&(me(i,!0),g>0&&await new Promise(p=>{m=p}),!w&&(i.stdin.end(),await P))})(),h)}};return ke(),Re}a(en,"startWorkspaceSessionClient");async function Ne(e){if(!(await L()).ready)return;let r=process.platform==="win32"?e.toLowerCase():e,t=$.get(r);return t||(t=en(e,()=>{$.get(r)===t&&$.delete(r)}),$.set(r,t),t.catch(()=>{$.get(r)===t&&$.delete(r)})),t}a(Ne,"getWorkspaceSession");function bn(e){let n=o.resolve(e.workspaceRoot);return Ne(n).catch(r=>{B({source:"sandbox:workspace-session",level:"warn",message:"Workspace sandbox warm-up failed; commands will use normal permission fallback.",detail:r})}),{async prepare(r){if(!r.toolCallId){r.reportObservation?.({version:1,state:"not_selected"});return}let t={id:r.toolCallId,name:"bash",input:{...r.toolInput}};if(!e.shouldSandbox(t)){r.reportObservation?.({version:1,state:"not_selected"});return}let s;try{let i=await Ge(Ne(n),r.signal,r.deadlineAt);if(!i){r.reportObservation?.({version:1,state:"fallback",reason:"not_ready",execution:"normal_permission_policy"});return}let c=r.executable??(process.platform==="win32"?process.env.COMSPEC??o.join(process.env.SystemRoot??"C:\\Windows","System32","cmd.exe"):"/bin/sh"),d=r.args??(process.platform==="win32"?["/d","/s","/c",r.command]:["-c",r.command]),l=await He(),u=o.join(l,`kodax-asrt-shell-${process.pid}-${W()}.json`),w=o.join(l,`kodax-asrt-observation-${process.pid}-${W()}.json`),b={...r.env},v={config:Ue(n),command:c,args:d,cwd:r.cwd,env:b,endpoints:[],allowAllNetwork:!0,bootstrapCommand:ae(),fallbackToNormalExecution:!0,observationBackend:pr().backend,observationFile:w,targetStartedMarker:`\0KODAX_ASRT_TARGET_STARTED:${W()}\0
+`},y=await i.acquire(v,r.signal,r.deadlineAt);s=y;let g={...v,wrappedInvocation:y.invocation},m=process.env.KODAX_BUNDLED==="true"?["__asrt-broker",u]:["--input-type=module","-e",qe,je,u],f=J({args:m,env:X(),isElectron:process.versions.electron!==void 0});return await K(u,JSON.stringify(g),{mode:384}),{executable:process.execPath,args:f.args,env:f.env,async cleanup(){let h;try{h=await q(w,"utf8").then(Pr).catch(P=>{if(P.code!=="ENOENT")throw P})}finally{await Promise.all([N(u,{force:!0}),N(w,{force:!0})]);try{await y.release()}catch(P){B({source:"sandbox:workspace-session",level:"warn",message:"Workspace sandbox command cleanup failed.",detail:P})}}return h}}}catch(i){if(s&&await s.release().catch(c=>{B({source:"sandbox:workspace-session",level:"warn",message:"Workspace sandbox lease release failed.",detail:c})}),r.signal?.aborted||r.deadlineAt!==void 0&&Date.now()>=r.deadlineAt)throw i;B({source:"sandbox:workspace-session",level:"warn",message:"Workspace sandbox preparation failed; using normal permission fallback.",detail:i}),r.reportObservation?.({version:1,state:"fallback",reason:"prepare_failed",execution:"normal_permission_policy"});return}}}}a(bn,"createAsrtShellSandbox");async function yn(e){let n=await L();if(!n.ready)throw new Error(`ASRT ${j} is not ready: ${n.diagnostics.join(" ")||"run kodax sandbox setup"}`);let r=o.join(e.snapshotRoot,W()),t=o.join(r,"skills");await T(t,{recursive:!0,mode:448});try{let s=await Nr(e,t),i=Dr(e.network),c=Promise.resolve();return{async run(d,l){let u=c,w;if(c=new Promise(b=>{w=b}),await u,l.signal?.aborted)throw w?.(),l.signal.reason??new Error("Sandboxed Skill script was cancelled.");try{if(d.args.length>64||d.args.some(g=>g.length>8192))throw new Error("Skill script arguments exceed the bounded remote contract.");if(d.inputs.length>32||d.outputs.length>32)throw new Error("Skill script file mappings exceed the bounded remote contract.");let b=D(d.script,"Skill script"),v=s.get(`${d.skill}\0${b}`);if(!v)throw new Error("Skill script is not admitted by this Runtime binding.");if([".cmd",".bat"].includes(o.extname(v.snapshotPath).toLowerCase())&&d.args.some(g=>/[&|<>^]/.test(g)))throw new Error("Batch Skill script arguments cannot contain command operators.");let y=o.join(l.workspaceRoot,".kodax-a2a-script",W());try{await T(o.join(y,"inputs"),{recursive:!0,mode:448}),await T(o.join(y,"outputs"),{recursive:!0,mode:448}),await qr(l.workspaceRoot,y,d,e.workspaceAccess);let g=Br(v.snapshotPath),m=await Mr({config:Fr(y,r,i,g.command),command:g.command,args:[...g.args,...d.args],cwd:y,env:X(),endpoints:i},l.signal),f=await Kr(l.workspaceRoot,y,d,e.workspaceAccess,e.workspaceByteLimit);return JSON.stringify({stdout:m.trim(),outputs:f})}finally{await N(y,{recursive:!0,force:!0})}}finally{w?.()}},async dispose(){await c,await N(r,{recursive:!0,force:!0})}}}catch(s){throw await N(r,{recursive:!0,force:!0}),s}}a(yn,"createAsrtSkillScriptRunner");export{j as a,pr as b,L as c,Or as d,re as e,gn as f,Sn as g,bn as h,yn as i};