@librechat/agents 3.4.7 → 3.5.1

package/dist/cjs/tools/cloudflare/CloudflareProgrammaticToolCalling.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"CloudflareProgrammaticToolCalling.cjs","names":["resolveCloudflareSandbox","getCloudflareWorkspaceRoot","execWithClientTimeout","clientExecTimeoutMs","ProgrammaticToolCallingSchema","BashProgrammaticToolCallingSchema","filterBashToolsByUsage","filterToolsByUsage","normalizeToPythonIdentifier","normalizeToBashIdentifier","validateCloudflareBashCommand","executeCloudflareCode","formatCompletedResponse","ProgrammaticToolCallingName","ProgrammaticToolCallingDescription","BashProgrammaticToolCallingDescription"],"sources":["../../../../src/tools/cloudflare/CloudflareProgrammaticToolCalling.ts"],"sourcesContent":["import { tool } from '@langchain/core/tools';\nimport type { DynamicStructuredTool } from '@langchain/core/tools';\nimport type * as t from '@/types';\n\n/* eslint-disable no-useless-escape -- generated sandbox helper source needs escapes for emitted JS/Python string literals. */\nimport {\n  formatCompletedResponse,\n  normalizeToPythonIdentifier,\n  ProgrammaticToolCallingDescription,\n  ProgrammaticToolCallingName,\n  ProgrammaticToolCallingSchema,\n  filterToolsByUsage,\n} from '@/tools/ProgrammaticToolCalling';\nimport {\n  BashProgrammaticToolCallingDescription,\n  BashProgrammaticToolCallingSchema,\n  filterBashToolsByUsage,\n  normalizeToBashIdentifier,\n} from '@/tools/BashProgrammaticToolCalling';\nimport { Constants } from '@/common';\nimport {\n  clientExecTimeoutMs,\n  execWithClientTimeout,\n  executeCloudflareCode,\n  getCloudflareWorkspaceRoot,\n  resolveCloudflareSandbox,\n  validateCloudflareBashCommand,\n} from './CloudflareSandboxExecutionEngine';\n\ntype ProgrammaticParams = {\n  code: string;\n  timeout?: number;\n  lang?: string;\n  runtime?: string;\n  language?: string;\n};\n\nconst DEFAULT_TIMEOUT = 60000;\nconst MIN_TIMEOUT = 1000;\nconst MAX_TIMEOUT = 300000;\nconst DEFAULT_MAX_OUTPUT_CHARS = 200000;\n\ntype TimeoutSchema = {\n  type: 'integer';\n  minimum: number;\n  maximum: number;\n  default: number;\n  description: string;\n};\n\ntype CloudflareProgrammaticToolCallingJsonSchema = {\n  type: 'object';\n  properties: typeof ProgrammaticToolCallingSchema.properties & {\n    timeout: TimeoutSchema;\n    lang: {\n      type: 'string';\n      enum: readonly ['py', 'python', 'bash', 'sh'];\n      default: 'bash';\n      description: string;\n    };\n  };\n  required: readonly ['code'];\n};\n\ntype CloudflareBashProgrammaticToolCallingJsonSchema = {\n  type: 'object';\n  properties: typeof BashProgrammaticToolCallingSchema.properties & {\n    timeout: TimeoutSchema;\n  };\n  required: readonly ['code'];\n};\n\nconst NATIVE_TOOL_NAMES = new Set<string>([\n  Constants.READ_FILE,\n  Constants.WRITE_FILE,\n  Constants.EDIT_FILE,\n  Constants.GREP_SEARCH,\n  Constants.GLOB_SEARCH,\n  Constants.LIST_DIRECTORY,\n  Constants.COMPILE_CHECK,\n  Constants.BASH_TOOL,\n  Constants.EXECUTE_CODE,\n]);\n\nfunction normalizeTimeout(timeoutMs: number | undefined): number {\n  if (timeoutMs == null || !Number.isFinite(timeoutMs)) {\n    return DEFAULT_TIMEOUT;\n  }\n  return Math.max(MIN_TIMEOUT, Math.floor(timeoutMs));\n}\n\nfunction formatTimeout(timeoutMs: number): string {\n  return timeoutMs % 1000 === 0\n    ? `${timeoutMs / 1000} seconds`\n    : `${timeoutMs} milliseconds`;\n}\n\nfunction createTimeoutSchema(timeoutMs?: number): TimeoutSchema {\n  const defaultTimeout = normalizeTimeout(timeoutMs);\n  const maxTimeout = Math.max(MAX_TIMEOUT, defaultTimeout);\n  return {\n    type: 'integer',\n    minimum: MIN_TIMEOUT,\n    maximum: maxTimeout,\n    default: defaultTimeout,\n    description:\n      'Maximum Cloudflare Sandbox execution time in milliseconds. ' +\n      `Default: ${formatTimeout(defaultTimeout)}. Max: ${formatTimeout(maxTimeout)}.`,\n  };\n}\n\nfunction clampExecutionTimeout(\n  requestedTimeoutMs: number | undefined,\n  configuredTimeoutMs: number | undefined\n): number {\n  const defaultTimeout = normalizeTimeout(configuredTimeoutMs);\n  const maxTimeout = Math.max(MAX_TIMEOUT, defaultTimeout);\n  if (requestedTimeoutMs == null || !Number.isFinite(requestedTimeoutMs)) {\n    return defaultTimeout;\n  }\n  return Math.min(\n    Math.max(MIN_TIMEOUT, Math.floor(requestedTimeoutMs)),\n    maxTimeout\n  );\n}\n\nfunction quoteShell(value: string): string {\n  if (/^[A-Za-z0-9_/:=.,@%+-]+$/.test(value)) {\n    return value;\n  }\n  const escapedQuote = String.raw`'\\''`;\n  return `'${value.replace(/'/g, escapedQuote)}'`;\n}\n\nfunction truncateOutput(\n  value: string,\n  maxChars = DEFAULT_MAX_OUTPUT_CHARS\n): string {\n  if (value.length <= maxChars) {\n    return value;\n  }\n  const head = Math.floor(maxChars * 0.6);\n  const tail = maxChars - head;\n  const omitted = value.length - maxChars;\n  return `${value.slice(0, head)}\\n\\n[... ${omitted} characters truncated ...]\\n\\n${value.slice(\n    value.length - tail\n  )}`;\n}\n\nfunction withInSandboxTimeout(command: string, timeoutMs: number): string {\n  const timeoutSeconds = Math.max(1, Math.ceil(timeoutMs / 1000));\n  return `timeout -k 2s ${timeoutSeconds}s ${command}`;\n}\n\nfunction outerTimeoutMs(timeoutMs: number): number {\n  return timeoutMs + 5000;\n}\n\nfunction isInSandboxTimeoutExit(exitCode: number | null): boolean {\n  return exitCode === 124 || exitCode === 137;\n}\n\nasync function executeGeneratedCloudflareBash(\n  command: string,\n  config: t.CloudflareSandboxExecutionConfig\n): ReturnType<typeof executeCloudflareCode> {\n  const sandbox = await resolveCloudflareSandbox(config);\n  const workspaceRoot = getCloudflareWorkspaceRoot(config);\n  const shell = config.shell ?? 'bash';\n  const timeoutMs = config.timeoutMs ?? DEFAULT_TIMEOUT;\n  const result = await execWithClientTimeout(\n    sandbox,\n    withInSandboxTimeout(`${shell} -lc ${quoteShell(command)}`, timeoutMs),\n    {\n      cwd: workspaceRoot,\n      env: config.env,\n      timeout: outerTimeoutMs(timeoutMs),\n    },\n    clientExecTimeoutMs(timeoutMs),\n    'cloudflare bash programmatic exec'\n  );\n  const maxOutputChars = config.maxOutputChars ?? DEFAULT_MAX_OUTPUT_CHARS;\n  return {\n    stdout: truncateOutput(result.stdout, maxOutputChars),\n    stderr: truncateOutput(result.stderr, maxOutputChars),\n    exitCode: result.exitCode,\n    timedOut: isInSandboxTimeoutExit(result.exitCode),\n  };\n}\n\nfunction createCloudflareProgrammaticToolCallingSchema(\n  config: t.CloudflareSandboxExecutionConfig\n): CloudflareProgrammaticToolCallingJsonSchema {\n  return {\n    ...ProgrammaticToolCallingSchema,\n    properties: {\n      ...ProgrammaticToolCallingSchema.properties,\n      timeout: createTimeoutSchema(config.timeoutMs),\n      lang: {\n        type: 'string',\n        enum: ['py', 'python', 'bash', 'sh'],\n        default: 'bash',\n        description:\n          'Cloudflare Sandbox runtime for orchestration code. Defaults to bash; use py/python for Python orchestration.',\n      },\n    },\n  } as const;\n}\n\nfunction createCloudflareBashProgrammaticToolCallingSchema(\n  config: t.CloudflareSandboxExecutionConfig\n): CloudflareBashProgrammaticToolCallingJsonSchema {\n  return {\n    ...BashProgrammaticToolCallingSchema,\n    properties: {\n      ...BashProgrammaticToolCallingSchema.properties,\n      timeout: createTimeoutSchema(config.timeoutMs),\n    },\n  } as const;\n}\n\nfunction resolveRuntime(params: ProgrammaticParams): 'python' | 'bash' {\n  const raw = params.lang ?? params.runtime ?? params.language ?? 'bash';\n  return raw === 'py' || raw === 'python' ? 'python' : 'bash';\n}\n\nfunction filterNativeTools(\n  toolDefs: t.LCTool[],\n  code: string,\n  runtime: 'python' | 'bash'\n): t.LCTool[] {\n  const nativeDefs = toolDefs.filter((def) => NATIVE_TOOL_NAMES.has(def.name));\n  const filter =\n    runtime === 'bash' ? filterBashToolsByUsage : filterToolsByUsage;\n  return filter(nativeDefs, code);\n}\n\nfunction indent(code: string, spaces = 4): string {\n  const prefix = ' '.repeat(spaces);\n  return code\n    .split('\\n')\n    .map((line) => (line === '' ? line : prefix + line))\n    .join('\\n');\n}\n\nfunction pythonBoolean(value: boolean | undefined): 'True' | 'False' {\n  return value === true ? 'True' : 'False';\n}\n\nfunction createPythonNativeToolSource(\n  config: t.CloudflareSandboxExecutionConfig,\n  workspaceRoot: string\n): string {\n  return `\nimport asyncio, fnmatch, glob, json, os, pathlib, re, shlex, shutil, subprocess, sys, tempfile\n\nWORKSPACE = ${JSON.stringify(workspaceRoot)}\nSHELL = ${JSON.stringify(config.shell ?? 'bash')}\nREAD_ONLY = ${pythonBoolean(config.readOnly)}\nALLOW_DANGEROUS_COMMANDS = ${pythonBoolean(config.allowDangerousCommands)}\nDESTRUCTIVE_TARGET = r\"(?:/|~|\\\\$\\\\{?HOME\\\\}?|\\\\.)(?:/?\\\\.?\\\\*|/)?\"\nDANGEROUS_COMMAND_PATTERNS = [\n    re.compile(r\"\\\\brm\\\\s+(?:-[^\\\\s]*[rf][^\\\\s]*\\\\s+|-[^\\\\s]*[r][^\\\\s]*\\\\s+-[^\\\\s]*[f][^\\\\s]*\\\\s+)(?:--\\\\s+)?\" + DESTRUCTIVE_TARGET + r\"\\\\s*(?:$|[;&|])\"),\n    re.compile(r\"\\\\b(?:mkfs|mkswap|fdisk|parted|diskutil)\\\\b\"),\n    re.compile(r\"\\\\bdd\\\\s+[^;&|]*\\\\bof=/dev/\"),\n    re.compile(r\"\\\\bchmod\\\\s+-R\\\\s+(?:777|a\\\\+w)\\\\s+(?:--\\\\s+)?\" + DESTRUCTIVE_TARGET + r\"(?:$|\\\\s|[;&|])\"),\n    re.compile(r\"\\\\bchown\\\\s+-R\\\\s+[^;&|]+\\\\s+(?:--\\\\s+)?\" + DESTRUCTIVE_TARGET + r\"(?:$|\\\\s|[;&|])\"),\n    re.compile(r\":\\\\s*\\\\(\\\\s*\\\\)\\\\s*\\\\{\\\\s*:\\\\s*\\\\|\\\\s*:\\\\s*&\\\\s*\\\\}\\\\s*;\\\\s*:\"),\n]\nQUOTED_DESTRUCTIVE_PATTERNS = [\n    re.compile(r\"\\\\brm\\\\s+(?:-[^\\\\s]*[rf][^\\\\s]*\\\\s+){1,3}(?:--\\\\s+)?[\\\\\"']\" + DESTRUCTIVE_TARGET + r\"[\\\\\"']\"),\n    re.compile(r\"\\\\bchmod\\\\s+-R\\\\s+(?:777|a\\\\+w)\\\\s+(?:--\\\\s+)?[\\\\\"']\" + DESTRUCTIVE_TARGET + r\"[\\\\\"']\"),\n    re.compile(r\"\\\\bchown\\\\s+-R\\\\s+[^;&|]+\\\\s+(?:--\\\\s+)?[\\\\\"']\" + DESTRUCTIVE_TARGET + r\"[\\\\\"']\"),\n]\nNESTED_SHELL_PREFIX = r\"(?:(?:ba|z|da|k)?sh|eval)\\\\s+(?:-l?c\\\\s+)?\"\nNESTED_SHELL_DESTRUCTIVE_PATTERNS = [\n    re.compile(NESTED_SHELL_PREFIX + r\"[\\\\\"'][^\\\\\"']*\\\\brm\\\\s+-[^\\\\s\\\\\"']*[rf][^\\\\s\\\\\"']*\\\\s+(?:--\\\\s+)?(?:/|~|\\\\$\\\\{?HOME\\\\}?|\\\\.)\"),\n    re.compile(NESTED_SHELL_PREFIX + r\"[\\\\\"'][^\\\\\"']*\\\\bchmod\\\\s+-R\\\\s+(?:777|a\\\\+w)\\\\s+(?:--\\\\s+)?(?:/|~|\\\\$\\\\{?HOME\\\\}?|\\\\.)\"),\n    re.compile(NESTED_SHELL_PREFIX + r\"[\\\\\"'][^\\\\\"']*\\\\bchown\\\\s+-R\\\\s+[^;&|]+\\\\s+(?:--\\\\s+)?(?:/|~|\\\\$\\\\{?HOME\\\\}?|\\\\.)\"),\n]\nMUTATING_COMMAND_PATTERN = re.compile(r\"\\\\b(?:rm|mv|cp|touch|mkdir|rmdir|ln|truncate|tee|sed\\\\s+-i|perl\\\\s+-pi|python(?:3)?\\\\s+-c|node\\\\s+-e|npm\\\\s+(?:install|ci|update|publish)|pnpm\\\\s+(?:install|update|publish)|yarn\\\\s+(?:install|add|publish)|git\\\\s+(?:add|commit|checkout|switch|reset|clean|rebase|merge|push|pull|stash|tag|branch)|chmod|chown)\\\\b|(?:^|[^<])>\\\\s*[^&]|\\\\bcat\\\\s+[^|;&]*>\\\\s*\")\nPROTECTED_TARGET_ARG_RE = re.compile(r\"^(?:/|~|\\\\$\\\\{?HOME\\\\}?|\\\\.)(?:/?\\\\.?\\\\*|/)?$\")\nDESTRUCTIVE_OP_IN_COMMAND_RE = re.compile(r\"\\\\b(?:rm\\\\s+-[^\\\\s]*[rf]|chmod\\\\s+-R|chown\\\\s+-R)\\\\b\")\n\ndef _is_within_workspace(file_path):\n    resolved = os.path.abspath(file_path)\n    root = os.path.abspath(WORKSPACE)\n    return os.path.commonpath([root, resolved]) == root\n\ndef _resolve(file_path=\".\"):\n    raw = file_path or \".\"\n    candidate = raw if os.path.isabs(raw) else os.path.join(WORKSPACE, raw)\n    resolved = os.path.abspath(candidate)\n    if not _is_within_workspace(resolved):\n        raise ValueError(f\"Path is outside the Cloudflare sandbox workspace: {file_path}\")\n    return resolved\n\ndef _assert_writable(tool_name):\n    if READ_ONLY:\n        raise PermissionError(f\"{tool_name} is blocked in read-only Cloudflare sandbox mode.\")\n\ndef _strip_quoted_content(command):\n    output = []\n    quote = None\n    escaped = False\n    index = 0\n    while index < len(command):\n        char = command[index]\n        if escaped:\n            escaped = False\n            output.append(\" \")\n            index += 1\n            continue\n        if char == \"\\\\\\\\\":\n            escaped = True\n            output.append(\" \")\n            index += 1\n            continue\n        if quote is not None:\n            if char == quote:\n                quote = None\n            output.append(\" \")\n            index += 1\n            continue\n        if char in (\"'\", '\"', \"\\`\"):\n            quote = char\n            output.append(\" \")\n            index += 1\n            continue\n        if char == \"#\":\n            while index < len(command) and command[index] != \"\\\\n\":\n                output.append(\" \")\n                index += 1\n            output.append(\"\\\\n\")\n            index += 1\n            continue\n        output.append(char)\n        index += 1\n    return \"\".join(output)\n\ndef _validate_bash_command(command, args=None):\n    errors = []\n    normalized = _strip_quoted_content(command)\n    if command.strip() == \"\":\n        errors.append(\"Command is empty.\")\n    if \"\\\\0\" in command:\n        errors.append(\"Command contains a NUL byte.\")\n    if not ALLOW_DANGEROUS_COMMANDS:\n        if any(pattern.search(normalized) for pattern in DANGEROUS_COMMAND_PATTERNS):\n            errors.append(\"Command matches a destructive command pattern.\")\n        elif any(pattern.search(command) for pattern in QUOTED_DESTRUCTIVE_PATTERNS):\n            errors.append(\"Command matches a destructive command pattern (quoted target).\")\n        elif any(pattern.search(command) for pattern in NESTED_SHELL_DESTRUCTIVE_PATTERNS):\n            errors.append(\"Command matches a destructive command pattern (nested shell payload).\")\n        elif args and DESTRUCTIVE_OP_IN_COMMAND_RE.search(command):\n            offending = next((str(arg) for arg in args if PROTECTED_TARGET_ARG_RE.search(str(arg))), None)\n            if offending is not None:\n                errors.append(f\"Command matches a destructive command pattern (protected target \\\\\"{offending}\\\\\" passed via positional arg).\")\n    if READ_ONLY and MUTATING_COMMAND_PATTERN.search(normalized):\n        errors.append(\"Command appears to mutate files or repository state in read-only Cloudflare sandbox mode.\")\n    if errors:\n        raise ValueError(\"\\\\n\".join(errors))\n\ndef _line_window(content, offset=None, limit=None):\n    start = max((offset or 1) - 1, 0)\n    lines = content.split(\"\\\\n\")\n    selected = lines[start:] if not limit or limit <= 0 else lines[start:start + limit]\n    return \"\\\\n\".join(f\"{start + idx + 1:6d}\\\\t{line}\" for idx, line in enumerate(selected))\n\ndef _run(command, timeout=None, args=None):\n    _validate_bash_command(command, args=args)\n    completed = subprocess.run(\n        [SHELL, \"-lc\", command, \"--\"] + [str(arg) for arg in (args or [])],\n        cwd=WORKSPACE,\n        capture_output=True,\n        text=True,\n        timeout=(timeout / 1000 if timeout else None),\n    )\n    return {\n        \"stdout\": completed.stdout,\n        \"stderr\": completed.stderr,\n        \"exit_code\": completed.returncode,\n    }\n\ndef _format_run(result):\n    text = \"\"\n    if result.get(\"stdout\"):\n        text += f\"stdout:\\\\n{result['stdout']}\\\\n\"\n    else:\n        text += \"stdout: Empty. Ensure you're writing output explicitly.\\\\n\"\n    if result.get(\"stderr\"):\n        text += f\"stderr:\\\\n{result['stderr']}\\\\n\"\n    if result.get(\"exit_code\") not in (None, 0):\n        text += f\"exit_code: {result['exit_code']}\\\\n\"\n    text += f\"working_directory: {WORKSPACE}\"\n    return text.strip()\n\ndef _detect_compile_command():\n    if os.path.exists(os.path.join(WORKSPACE, \"tsconfig.json\")):\n        return \"typescript\", \"npx --no-install tsc --noEmit\", \"tsconfig.json present\"\n    package_json = os.path.join(WORKSPACE, \"package.json\")\n    if os.path.exists(package_json):\n        try:\n            if '\"typescript\"' in open(package_json, encoding=\"utf-8\").read():\n                return \"typescript\", \"npx --no-install tsc --noEmit\", \"package.json declares typescript\"\n        except Exception:\n            pass\n    if os.path.exists(os.path.join(WORKSPACE, \"Cargo.toml\")):\n        return \"rust\", \"cargo check --message-format=short\", \"Cargo.toml present\"\n    if os.path.exists(os.path.join(WORKSPACE, \"go.mod\")):\n        return \"go\", \"go vet ./...\", \"go.mod present\"\n    if any(os.path.exists(os.path.join(WORKSPACE, name)) for name in [\"pyproject.toml\", \"setup.py\", \"setup.cfg\"]):\n        return \"python-compile\", \"python3 -m py_compile $(find . -name '*.py' -not -path './.venv/*' -not -path './node_modules/*')\", \"Python project\"\n    return \"unknown\", \"\", \"no recognised project marker\"\n\nasync def bash_tool(command, args=None):\n    return _format_run(_run(command, args=args))\n\nasync def execute_code(lang, code, args=None):\n    args = args or []\n    temp_dir = tempfile.mkdtemp(prefix=\"lc-ptc-\", dir=WORKSPACE)\n    try:\n        def q(value):\n            import shlex\n            return shlex.quote(str(value))\n        arg_text = \" \".join(q(arg) for arg in args)\n        if lang in (\"py\", \"python\"):\n            file_path = os.path.join(temp_dir, \"main.py\")\n            open(file_path, \"w\", encoding=\"utf-8\").write(code)\n            return _format_run(_run(f\"python3 {q(file_path)} {arg_text}\"))\n        if lang in (\"js\", \"javascript\"):\n            file_path = os.path.join(temp_dir, \"main.js\")\n            open(file_path, \"w\", encoding=\"utf-8\").write(code)\n            return _format_run(_run(f\"node {q(file_path)} {arg_text}\"))\n        if lang in (\"ts\", \"typescript\"):\n            file_path = os.path.join(temp_dir, \"main.ts\")\n            open(file_path, \"w\", encoding=\"utf-8\").write(code)\n            return _format_run(_run(f\"npx --no-install tsx {q(file_path)} {arg_text}\"))\n        if lang == \"php\":\n            file_path = os.path.join(temp_dir, \"main.php\")\n            open(file_path, \"w\", encoding=\"utf-8\").write(code)\n            return _format_run(_run(f\"php {q(file_path)} {arg_text}\"))\n        if lang == \"go\":\n            file_path = os.path.join(temp_dir, \"main.go\")\n            open(file_path, \"w\", encoding=\"utf-8\").write(code)\n            return _format_run(_run(f\"go run {q(file_path)} {arg_text}\"))\n        if lang == \"rs\":\n            file_path = os.path.join(temp_dir, \"main.rs\")\n            open(file_path, \"w\", encoding=\"utf-8\").write(code)\n            binary = os.path.join(temp_dir, \"main-rs\")\n            return _format_run(_run(f\"rustc {q(file_path)} -o {q(binary)} && {q(binary)} {arg_text}\"))\n        if lang == \"c\":\n            file_path = os.path.join(temp_dir, \"main.c\")\n            open(file_path, \"w\", encoding=\"utf-8\").write(code)\n            binary = os.path.join(temp_dir, \"main-c\")\n            return _format_run(_run(f\"cc {q(file_path)} -o {q(binary)} && {q(binary)} {arg_text}\"))\n        if lang == \"cpp\":\n            file_path = os.path.join(temp_dir, \"main.cpp\")\n            open(file_path, \"w\", encoding=\"utf-8\").write(code)\n            binary = os.path.join(temp_dir, \"main-cpp\")\n            return _format_run(_run(f\"c++ {q(file_path)} -o {q(binary)} && {q(binary)} {arg_text}\"))\n        if lang == \"java\":\n            file_path = os.path.join(temp_dir, \"Main.java\")\n            open(file_path, \"w\", encoding=\"utf-8\").write(code)\n            return _format_run(_run(f\"javac {q(file_path)} && java -cp {q(temp_dir)} Main {arg_text}\"))\n        if lang == \"r\":\n            file_path = os.path.join(temp_dir, \"main.R\")\n            open(file_path, \"w\", encoding=\"utf-8\").write(code)\n            return _format_run(_run(f\"Rscript {q(file_path)} {arg_text}\"))\n        if lang == \"d\":\n            file_path = os.path.join(temp_dir, \"main.d\")\n            open(file_path, \"w\", encoding=\"utf-8\").write(code)\n            binary = os.path.join(temp_dir, \"main-d\")\n            return _format_run(_run(f\"dmd {q(file_path)} -of={q(binary)} && {q(binary)} {arg_text}\"))\n        if lang == \"f90\":\n            file_path = os.path.join(temp_dir, \"main.f90\")\n            open(file_path, \"w\", encoding=\"utf-8\").write(code)\n            binary = os.path.join(temp_dir, \"main-f90\")\n            return _format_run(_run(f\"gfortran {q(file_path)} -o {q(binary)} && {q(binary)} {arg_text}\"))\n        if lang in (\"bash\", \"sh\"):\n            return _format_run(_run(code, args=args))\n        raise ValueError(f\"Unsupported Cloudflare sandbox runtime: {lang}\")\n    finally:\n        shutil.rmtree(temp_dir, ignore_errors=True)\n\nasync def read_file(path, offset=None, limit=None):\n    resolved = _resolve(path)\n    with open(resolved, encoding=\"utf-8\") as handle:\n        return _line_window(handle.read(), offset, limit)\n\nasync def write_file(path, content):\n    _assert_writable(\"write_file\")\n    resolved = _resolve(path)\n    os.makedirs(os.path.dirname(resolved), exist_ok=True)\n    existed = os.path.exists(resolved)\n    with open(resolved, \"w\", encoding=\"utf-8\") as handle:\n        handle.write(content)\n    return f\"{'Overwrote' if existed else 'Created'} {resolved} ({len(content)} chars).\"\n\nasync def edit_file(path, old_text=None, new_text=None, edits=None):\n    _assert_writable(\"edit_file\")\n    resolved = _resolve(path)\n    edits = edits or [{\"old_text\": old_text, \"new_text\": new_text}]\n    content = open(resolved, encoding=\"utf-8\").read()\n    for edit in edits:\n        old = edit.get(\"old_text\") or \"\"\n        new = edit.get(\"new_text\") or \"\"\n        if content.count(old) != 1:\n            raise ValueError(f\"Could not locate old_text exactly once in {path}\")\n        content = content.replace(old, new, 1)\n    open(resolved, \"w\", encoding=\"utf-8\").write(content)\n    return f\"Applied {len(edits)} edit(s) to {resolved}.\"\n\nasync def list_directory(path=\".\"):\n    resolved = _resolve(path)\n    entries = []\n    for name in sorted(os.listdir(resolved)):\n        full = os.path.join(resolved, name)\n        entries.append((\"dir \" if os.path.isdir(full) else \"file\") + \"\\\\t\" + name)\n    return \"\\\\n\".join(entries) or \"Directory is empty.\"\n\nasync def grep_search(pattern, path=\".\", glob=None, max_results=200):\n    root = _resolve(path)\n    regex = re.compile(pattern)\n    out = []\n    for current, dirs, files in os.walk(root):\n        dirs[:] = [d for d in dirs if d not in {\".git\", \"node_modules\", \".venv\", \"dist\", \"build\"}]\n        for name in files:\n            rel = os.path.relpath(os.path.join(current, name), root)\n            if glob and not fnmatch.fnmatch(rel, glob):\n                continue\n            try:\n                for line_no, line in enumerate(open(os.path.join(current, name), encoding=\"utf-8\", errors=\"ignore\"), 1):\n                    if regex.search(line):\n                        out.append(f\"{os.path.join(current, name)}:{line_no}:{line.rstrip()}\")\n                        if len(out) >= max_results:\n                            return \"\\\\n\".join(out)\n            except Exception:\n                pass\n    return \"\\\\n\".join(out) if out else \"No matches found.\"\n\nasync def glob_search(pattern, path=\".\", max_results=200):\n    root = _resolve(path)\n    target = pattern if os.path.isabs(pattern) else os.path.join(root, pattern)\n    matches = []\n    for match in glob_module.glob(target, recursive=True):\n        resolved = os.path.abspath(match)\n        if _is_within_workspace(resolved):\n            matches.append(resolved)\n            if len(matches) >= max_results:\n                break\n    return \"\\\\n\".join(matches) if matches else \"No files found.\"\n\nasync def compile_check(command=None, timeout_ms=None):\n    kind, detected, reason = _detect_compile_command()\n    command = command or detected\n    if not command:\n        return f\"compile_check: {reason}. Pass an explicit command to override.\"\n    result = _run(command, timeout_ms)\n    status = \"PASSED\" if result[\"exit_code\"] == 0 else \"FAILED\"\n    return f\"compile_check ({kind}) {status} via {command}\\\\n\\\\nstdout:\\\\n{result['stdout']}\\\\nstderr:\\\\n{result['stderr']}\\\\nworking_directory: {WORKSPACE}\\\\nreason: {reason}\"\n\n# Avoid shadowing the glob_search function argument named \"glob\".\nglob_module = glob\n`.trim();\n}\n\nfunction createNodeNativeToolSource(\n  config: t.CloudflareSandboxExecutionConfig,\n  workspaceRoot: string\n): string {\n  return `\nconst fs = require(\"fs\");\nconst fsp = fs.promises;\nconst path = require(\"path\");\nconst cp = require(\"child_process\");\n\nconst WORKSPACE = ${JSON.stringify(workspaceRoot)};\nconst SHELL = ${JSON.stringify(config.shell ?? 'bash')};\nconst READ_ONLY = ${JSON.stringify(config.readOnly === true)};\nconst ALLOW_DANGEROUS_COMMANDS = ${JSON.stringify(config.allowDangerousCommands === true)};\nconst DESTRUCTIVE_TARGET = \"(?:\\\\\\\\/|~|\\\\\\\\$\\\\\\\\{?HOME\\\\\\\\}?|\\\\\\\\.)(?:\\\\\\\\/?\\\\\\\\.?\\\\\\\\*|\\\\\\\\/)?\";\nconst DANGEROUS_COMMAND_PATTERNS = [\n  new RegExp(\"\\\\\\\\brm\\\\\\\\s+(?:-[^\\\\\\\\s]*[rf][^\\\\\\\\s]*\\\\\\\\s+|-[^\\\\\\\\s]*[r][^\\\\\\\\s]*\\\\\\\\s+-[^\\\\\\\\s]*[f][^\\\\\\\\s]*\\\\\\\\s+)(?:--\\\\\\\\s+)?\" + DESTRUCTIVE_TARGET + \"\\\\\\\\s*(?:$|[;&|])\"),\n  /\\\\b(?:mkfs|mkswap|fdisk|parted|diskutil)\\\\b/,\n  /\\\\bdd\\\\s+[^;&|]*\\\\bof=\\\\/dev\\\\//,\n  new RegExp(\"\\\\\\\\bchmod\\\\\\\\s+-R\\\\\\\\s+(?:777|a\\\\\\\\+w)\\\\\\\\s+(?:--\\\\\\\\s+)?\" + DESTRUCTIVE_TARGET + \"(?:$|\\\\\\\\s|[;&|])\"),\n  new RegExp(\"\\\\\\\\bchown\\\\\\\\s+-R\\\\\\\\s+[^;&|]+\\\\\\\\s+(?:--\\\\\\\\s+)?\" + DESTRUCTIVE_TARGET + \"(?:$|\\\\\\\\s|[;&|])\"),\n  /:\\\\s*\\\\(\\\\s*\\\\)\\\\s*\\\\{\\\\s*:\\\\s*\\\\|\\\\s*:\\\\s*&\\\\s*\\\\}\\\\s*;\\\\s*:/,\n];\nconst QUOTED_DESTRUCTIVE_PATTERNS = [\n  new RegExp(\"\\\\\\\\brm\\\\\\\\s+(?:-[^\\\\\\\\s]*[rf][^\\\\\\\\s]*\\\\\\\\s+){1,3}(?:--\\\\\\\\s+)?[\\\\\\\"']\" + DESTRUCTIVE_TARGET + \"[\\\\\\\"']\"),\n  new RegExp(\"\\\\\\\\bchmod\\\\\\\\s+-R\\\\\\\\s+(?:777|a\\\\\\\\+w)\\\\\\\\s+(?:--\\\\\\\\s+)?[\\\\\\\"']\" + DESTRUCTIVE_TARGET + \"[\\\\\\\"']\"),\n  new RegExp(\"\\\\\\\\bchown\\\\\\\\s+-R\\\\\\\\s+[^;&|]+\\\\\\\\s+(?:--\\\\\\\\s+)?[\\\\\\\"']\" + DESTRUCTIVE_TARGET + \"[\\\\\\\"']\"),\n];\nconst NESTED_SHELL_PREFIX = \"(?:(?:ba|z|da|k)?sh|eval)\\\\\\\\s+(?:-l?c\\\\\\\\s+)?\";\nconst NESTED_SHELL_DESTRUCTIVE_PATTERNS = [\n  new RegExp(NESTED_SHELL_PREFIX + \"[\\\\\\\"'][^\\\\\\\"']*\\\\\\\\brm\\\\\\\\s+-[^\\\\\\\\s\\\\\\\"']*[rf][^\\\\\\\\s\\\\\\\"']*\\\\\\\\s+(?:--\\\\\\\\s+)?(?:\\\\\\\\/|~|\\\\\\\\$\\\\\\\\{?HOME\\\\\\\\}?|\\\\\\\\.)\"),\n  new RegExp(NESTED_SHELL_PREFIX + \"[\\\\\\\"'][^\\\\\\\"']*\\\\\\\\bchmod\\\\\\\\s+-R\\\\\\\\s+(?:777|a\\\\\\\\+w)\\\\\\\\s+(?:--\\\\\\\\s+)?(?:\\\\\\\\/|~|\\\\\\\\$\\\\\\\\{?HOME\\\\\\\\}?|\\\\\\\\.)\"),\n  new RegExp(NESTED_SHELL_PREFIX + \"[\\\\\\\"'][^\\\\\\\"']*\\\\\\\\bchown\\\\\\\\s+-R\\\\\\\\s+[^;&|]+\\\\\\\\s+(?:--\\\\\\\\s+)?(?:\\\\\\\\/|~|\\\\\\\\$\\\\\\\\{?HOME\\\\\\\\}?|\\\\\\\\.)\"),\n];\nconst MUTATING_COMMAND_PATTERN = /\\\\b(?:rm|mv|cp|touch|mkdir|rmdir|ln|truncate|tee|sed\\\\s+-i|perl\\\\s+-pi|python(?:3)?\\\\s+-c|node\\\\s+-e|npm\\\\s+(?:install|ci|update|publish)|pnpm\\\\s+(?:install|update|publish)|yarn\\\\s+(?:install|add|publish)|git\\\\s+(?:add|commit|checkout|switch|reset|clean|rebase|merge|push|pull|stash|tag|branch)|chmod|chown)\\\\b|(?:^|[^<])>\\\\s*[^&]|\\\\bcat\\\\s+[^|;&]*>\\\\s*/;\nconst PROTECTED_TARGET_ARG_RE = /^(?:\\\\/|~|\\\\$\\\\{?HOME\\\\}?|\\\\.)(?:\\\\/?\\\\.?\\\\*|\\\\/)?$/;\nconst DESTRUCTIVE_OP_IN_COMMAND_RE = /\\\\b(?:rm\\\\s+-[^\\\\s]*[rf]|chmod\\\\s+-R|chown\\\\s+-R)\\\\b/;\n\nfunction resolvePath(filePath) {\n  const raw = filePath || \".\";\n  const candidate = path.isAbsolute(raw) ? raw : path.join(WORKSPACE, raw);\n  const resolved = path.resolve(candidate);\n  const root = path.resolve(WORKSPACE);\n  const relative = path.relative(root, resolved);\n  if (relative && (relative.startsWith(\"..\") || path.isAbsolute(relative))) {\n    throw new Error(\"Path is outside the Cloudflare sandbox workspace: \" + filePath);\n  }\n  return resolved;\n}\n\nfunction assertWritable(toolName) {\n  if (READ_ONLY) {\n    throw new Error(toolName + \" is blocked in read-only Cloudflare sandbox mode.\");\n  }\n}\n\nfunction stripQuotedContent(command) {\n  let output = \"\";\n  let quote;\n  let escaped = false;\n  for (let index = 0; index < command.length; index++) {\n    const char = command[index];\n    if (escaped) {\n      escaped = false;\n      output += \" \";\n      continue;\n    }\n    if (char === \"\\\\\\\\\") {\n      escaped = true;\n      output += \" \";\n      continue;\n    }\n    if (quote != null) {\n      if (char === quote) quote = undefined;\n      output += \" \";\n      continue;\n    }\n    if (char === \"\\\\\\\"\" || char === \"'\" || char === \"\\`\") {\n      quote = char;\n      output += \" \";\n      continue;\n    }\n    if (char === \"#\") {\n      while (index < command.length && command[index] !== \"\\\\n\") {\n        output += \" \";\n        index += 1;\n      }\n      output += \"\\\\n\";\n      continue;\n    }\n    output += char;\n  }\n  return output;\n}\n\nfunction validateBashCommand(command, args) {\n  const errors = [];\n  const normalized = stripQuotedContent(command);\n  if (command.trim() === \"\") {\n    errors.push(\"Command is empty.\");\n  }\n  if (command.includes(\"\\\\0\")) {\n    errors.push(\"Command contains a NUL byte.\");\n  }\n  if (!ALLOW_DANGEROUS_COMMANDS) {\n    if (DANGEROUS_COMMAND_PATTERNS.some((pattern) => pattern.test(normalized))) {\n      errors.push(\"Command matches a destructive command pattern.\");\n    } else if (QUOTED_DESTRUCTIVE_PATTERNS.some((pattern) => pattern.test(command))) {\n      errors.push(\"Command matches a destructive command pattern (quoted target).\");\n    } else if (NESTED_SHELL_DESTRUCTIVE_PATTERNS.some((pattern) => pattern.test(command))) {\n      errors.push(\"Command matches a destructive command pattern (nested shell payload).\");\n    } else if ((args || []).length > 0 && DESTRUCTIVE_OP_IN_COMMAND_RE.test(command)) {\n      const offending = (args || []).map(String).find((arg) => PROTECTED_TARGET_ARG_RE.test(arg));\n      if (offending !== undefined) {\n        errors.push(\"Command matches a destructive command pattern (protected target \\\\\"\" + offending + \"\\\\\" passed via positional arg).\");\n      }\n    }\n  }\n  if (READ_ONLY && MUTATING_COMMAND_PATTERN.test(normalized)) {\n    errors.push(\"Command appears to mutate files or repository state in read-only Cloudflare sandbox mode.\");\n  }\n  if (errors.length > 0) {\n    throw new Error(errors.join(\"\\\\n\"));\n  }\n}\n\nfunction lineWindow(content, offset, limit) {\n  const start = Math.max((offset || 1) - 1, 0);\n  const lines = content.split(\"\\\\n\");\n  const selected = !limit || limit <= 0 ? lines.slice(start) : lines.slice(start, start + limit);\n  return selected.map((line, index) => String(start + index + 1).padStart(6, \" \") + \"\\\\t\" + line).join(\"\\\\n\");\n}\n\nfunction quote(value) {\n  const text = String(value);\n  if (text === \"\") return \"''\";\n  if (/^[A-Za-z0-9_/:=.,@%+-]+$/.test(text)) return text;\n  return \"'\" + text.replace(/'/g, \"'\\\\\\\\''\") + \"'\";\n}\n\nfunction run(command, timeoutMs, args) {\n  validateBashCommand(command, args);\n  return new Promise((resolve) => {\n    const child = cp.spawn(SHELL, [\"-lc\", command, \"--\", ...((args || []).map(String))], {\n      cwd: WORKSPACE,\n      env: process.env,\n    });\n    let stdout = \"\";\n    let stderr = \"\";\n    let timedOut = false;\n    const timer = timeoutMs\n      ? setTimeout(() => {\n        timedOut = true;\n        child.kill(\"SIGTERM\");\n      }, timeoutMs)\n      : null;\n\n    child.stdout.on(\"data\", (chunk) => {\n      stdout += chunk.toString();\n    });\n    child.stderr.on(\"data\", (chunk) => {\n      stderr += chunk.toString();\n    });\n    child.on(\"error\", (error) => {\n      if (timer) clearTimeout(timer);\n      resolve({ stdout, stderr: stderr + error.message, exit_code: 1, timed_out: timedOut });\n    });\n    child.on(\"close\", (code) => {\n      if (timer) clearTimeout(timer);\n      resolve({ stdout, stderr, exit_code: timedOut ? null : code, timed_out: timedOut });\n    });\n  });\n}\n\nfunction formatRun(result) {\n  let text = \"\";\n  if (result.stdout) {\n    text += \"stdout:\\\\n\" + result.stdout + \"\\\\n\";\n  } else {\n    text += \"stdout: Empty. Ensure you're writing output explicitly.\\\\n\";\n  }\n  if (result.stderr) {\n    text += \"stderr:\\\\n\" + result.stderr + \"\\\\n\";\n  }\n  if (result.timed_out) {\n    text += \"timed_out: true\\\\n\";\n  }\n  if (result.exit_code !== null && result.exit_code !== undefined && result.exit_code !== 0) {\n    text += \"exit_code: \" + result.exit_code + \"\\\\n\";\n  }\n  text += \"working_directory: \" + WORKSPACE;\n  return text.trim();\n}\n\nasync function detectCompileCommand() {\n  async function exists(name) {\n    try {\n      await fsp.access(path.join(WORKSPACE, name));\n      return true;\n    } catch {\n      return false;\n    }\n  }\n  if (await exists(\"tsconfig.json\")) {\n    return [\"typescript\", \"npx --no-install tsc --noEmit\", \"tsconfig.json present\"];\n  }\n  if (await exists(\"package.json\")) {\n    try {\n      if ((await fsp.readFile(path.join(WORKSPACE, \"package.json\"), \"utf8\")).includes('\"typescript\"')) {\n        return [\"typescript\", \"npx --no-install tsc --noEmit\", \"package.json declares typescript\"];\n      }\n    } catch {}\n  }\n  if (await exists(\"Cargo.toml\")) return [\"rust\", \"cargo check --message-format=short\", \"Cargo.toml present\"];\n  if (await exists(\"go.mod\")) return [\"go\", \"go vet ./...\", \"go.mod present\"];\n  if (await exists(\"pyproject.toml\") || await exists(\"setup.py\") || await exists(\"setup.cfg\")) {\n    return [\"python-compile\", \"python3 -m py_compile $(find . -name '*.py' -not -path './.venv/*' -not -path './node_modules/*')\", \"Python project\"];\n  }\n  return [\"unknown\", \"\", \"no recognised project marker\"];\n}\n\nfunction globToRegExp(pattern) {\n  const escaped = pattern.replace(/[|\\\\\\\\{}()[\\\\]^$+*?.]/g, \"\\\\\\\\$&\");\n  return new RegExp(\"^\" + escaped.replace(/\\\\\\\\\\\\*\\\\\\\\\\\\*/g, \".*\").replace(/\\\\\\\\\\\\*/g, \"[^/]*\") + \"$\");\n}\n\nfunction globMatch(relativePath, pattern) {\n  const matcher = globToRegExp(pattern);\n  return matcher.test(relativePath) || matcher.test(path.basename(relativePath));\n}\n\nasync function walkFiles(root, visit) {\n  const entries = await fsp.readdir(root, { withFileTypes: true });\n  for (const entry of entries) {\n    const full = path.join(root, entry.name);\n    if (entry.isDirectory()) {\n      if ([\".git\", \"node_modules\", \".venv\", \"dist\", \"build\"].includes(entry.name)) continue;\n      await walkFiles(full, visit);\n    } else if (entry.isFile()) {\n      await visit(full);\n    }\n  }\n}\n\nasync function bash_tool(payload) {\n  return formatRun(await run(payload.command, undefined, payload.args));\n}\n\nasync function execute_code(payload) {\n  const lang = payload.lang;\n  const code = payload.code;\n  const args = payload.args || [];\n  const tempDir = await fsp.mkdtemp(path.join(WORKSPACE, \"lc-ptc-\"));\n  try {\n    const argText = args.map(quote).join(\" \");\n    async function writeAndRun(fileName, command) {\n      const filePath = path.join(tempDir, fileName);\n      await fsp.writeFile(filePath, code, \"utf8\");\n      return formatRun(await run(command(filePath, argText), undefined, []));\n    }\n    if (lang === \"py\" || lang === \"python\") {\n      return writeAndRun(\"main.py\", (filePath, argText) => \"python3 \" + quote(filePath) + \" \" + argText);\n    }\n    if (lang === \"js\" || lang === \"javascript\") {\n      return writeAndRun(\"main.js\", (filePath, argText) => \"node \" + quote(filePath) + \" \" + argText);\n    }\n    if (lang === \"ts\" || lang === \"typescript\") {\n      return writeAndRun(\"main.ts\", (filePath, argText) => \"npx --no-install tsx \" + quote(filePath) + \" \" + argText);\n    }\n    if (lang === \"php\") {\n      return writeAndRun(\"main.php\", (filePath, argText) => \"php \" + quote(filePath) + \" \" + argText);\n    }\n    if (lang === \"go\") {\n      return writeAndRun(\"main.go\", (filePath, argText) => \"go run \" + quote(filePath) + \" \" + argText);\n    }\n    if (lang === \"rs\") {\n      return writeAndRun(\"main.rs\", (filePath, argText) => {\n        const binary = path.join(tempDir, \"main-rs\");\n        return \"rustc \" + quote(filePath) + \" -o \" + quote(binary) + \" && \" + quote(binary) + \" \" + argText;\n      });\n    }\n    if (lang === \"c\") {\n      return writeAndRun(\"main.c\", (filePath, argText) => {\n        const binary = path.join(tempDir, \"main-c\");\n        return \"cc \" + quote(filePath) + \" -o \" + quote(binary) + \" && \" + quote(binary) + \" \" + argText;\n      });\n    }\n    if (lang === \"cpp\") {\n      return writeAndRun(\"main.cpp\", (filePath, argText) => {\n        const binary = path.join(tempDir, \"main-cpp\");\n        return \"c++ \" + quote(filePath) + \" -o \" + quote(binary) + \" && \" + quote(binary) + \" \" + argText;\n      });\n    }\n    if (lang === \"java\") {\n      return writeAndRun(\"Main.java\", (filePath, argText) => \"javac \" + quote(filePath) + \" && java -cp \" + quote(tempDir) + \" Main \" + argText);\n    }\n    if (lang === \"r\") {\n      return writeAndRun(\"main.R\", (filePath, argText) => \"Rscript \" + quote(filePath) + \" \" + argText);\n    }\n    if (lang === \"d\") {\n      return writeAndRun(\"main.d\", (filePath, argText) => {\n        const binary = path.join(tempDir, \"main-d\");\n        return \"dmd \" + quote(filePath) + \" -of=\" + quote(binary) + \" && \" + quote(binary) + \" \" + argText;\n      });\n    }\n    if (lang === \"f90\") {\n      return writeAndRun(\"main.f90\", (filePath, argText) => {\n        const binary = path.join(tempDir, \"main-f90\");\n        return \"gfortran \" + quote(filePath) + \" -o \" + quote(binary) + \" && \" + quote(binary) + \" \" + argText;\n      });\n    }\n    if (lang === \"bash\" || lang === \"sh\") {\n      return formatRun(await run(code, undefined, args));\n    }\n    throw new Error(\"Unsupported Cloudflare sandbox runtime: \" + lang);\n  } finally {\n    await fsp.rm(tempDir, { recursive: true, force: true });\n  }\n}\n\nasync function read_file(payload) {\n  const resolved = resolvePath(payload.path);\n  return lineWindow(await fsp.readFile(resolved, \"utf8\"), payload.offset, payload.limit);\n}\n\nasync function write_file(payload) {\n  assertWritable(\"write_file\");\n  const resolved = resolvePath(payload.path);\n  await fsp.mkdir(path.dirname(resolved), { recursive: true });\n  const existed = fs.existsSync(resolved);\n  await fsp.writeFile(resolved, payload.content, \"utf8\");\n  return (existed ? \"Overwrote \" : \"Created \") + resolved + \" (\" + payload.content.length + \" chars).\";\n}\n\nasync function edit_file(payload) {\n  assertWritable(\"edit_file\");\n  const resolved = resolvePath(payload.path);\n  const edits = payload.edits || [{ old_text: payload.old_text, new_text: payload.new_text }];\n  let content = await fsp.readFile(resolved, \"utf8\");\n  for (const edit of edits) {\n    const oldText = edit.old_text || \"\";\n    const newText = edit.new_text || \"\";\n    if (oldText === \"\" || content.split(oldText).length - 1 !== 1) {\n      throw new Error(\"Could not locate old_text exactly once in \" + payload.path);\n    }\n    content = content.replace(oldText, newText);\n  }\n  await fsp.writeFile(resolved, content, \"utf8\");\n  return \"Applied \" + edits.length + \" edit(s) to \" + resolved + \".\";\n}\n\nasync function list_directory(payload) {\n  const resolved = resolvePath(payload.path || \".\");\n  const entries = await fsp.readdir(resolved, { withFileTypes: true });\n  const lines = entries\n    .sort((a, b) => a.name.localeCompare(b.name))\n    .map((entry) => (entry.isDirectory() ? \"dir\" : \"file\") + \"\\\\t\" + entry.name);\n  return lines.join(\"\\\\n\") || \"Directory is empty.\";\n}\n\nasync function grep_search(payload) {\n  const root = resolvePath(payload.path || \".\");\n  const regex = new RegExp(payload.pattern);\n  const maxResults = payload.max_results || 200;\n  const out = [];\n  await walkFiles(root, async (filePath) => {\n    if (out.length >= maxResults) return;\n    const relative = path.relative(root, filePath);\n    if (payload.glob && !globMatch(relative, payload.glob)) return;\n    let text = \"\";\n    try {\n      text = await fsp.readFile(filePath, \"utf8\");\n    } catch {\n      return;\n    }\n    text.split(\"\\\\n\").forEach((line, index) => {\n      if (out.length < maxResults && regex.test(line)) {\n        out.push(filePath + \":\" + (index + 1) + \":\" + line);\n      }\n    });\n  });\n  return out.join(\"\\\\n\") || \"No matches found.\";\n}\n\nasync function glob_search(payload) {\n  const root = resolvePath(payload.path || \".\");\n  const maxResults = payload.max_results || 200;\n  const out = [];\n  await walkFiles(root, async (filePath) => {\n    if (out.length >= maxResults) return;\n    const relative = path.relative(root, filePath);\n    if (globMatch(relative, payload.pattern)) out.push(filePath);\n  });\n  return out.join(\"\\\\n\") || \"No files found.\";\n}\n\nasync function compile_check(payload) {\n  const [kind, detected, reason] = await detectCompileCommand();\n  const command = payload.command || detected;\n  if (!command) {\n    return \"compile_check: \" + reason + \". Pass an explicit command to override.\";\n  }\n  const result = await run(command, payload.timeout_ms);\n  const status = result.exit_code === 0 ? \"PASSED\" : \"FAILED\";\n  return \"compile_check (\" + kind + \") \" + status + \" via \" + command + \"\\\\n\\\\nstdout:\\\\n\" + result.stdout + \"\\\\nstderr:\\\\n\" + result.stderr + \"\\\\nworking_directory: \" + WORKSPACE + \"\\\\nreason: \" + reason;\n}\n\nconst TOOLS = {\n  bash_tool,\n  execute_code,\n  read_file,\n  write_file,\n  edit_file,\n  list_directory,\n  grep_search,\n  glob_search,\n  compile_check,\n};\n\nasync function main() {\n  const name = process.argv[2];\n  const payload = JSON.parse(process.argv[3] || \"{}\");\n  if (!TOOLS[name]) throw new Error(\"Unknown tool: \" + name);\n  const result = await TOOLS[name](payload);\n  process.stdout.write(typeof result === \"string\" ? result : JSON.stringify(result));\n}\n\nmain().catch((error) => {\n  console.error(error && error.stack ? error.stack : String(error));\n  process.exit(1);\n});\n`.trim();\n}\n\nfunction createPythonProgram(\n  userCode: string,\n  toolDefs: t.LCTool[],\n  config: t.CloudflareSandboxExecutionConfig,\n  workspaceRoot: string\n): string {\n  const aliases = toolDefs\n    .map((def) => {\n      const pythonName = normalizeToPythonIdentifier(def.name);\n      return NATIVE_TOOL_NAMES.has(def.name) && pythonName !== def.name\n        ? `${pythonName} = globals()[${JSON.stringify(def.name)}]`\n        : '';\n    })\n    .filter(Boolean)\n    .join('\\n');\n  return `${createPythonNativeToolSource(config, workspaceRoot)}\n${aliases}\n\nasync def __lc_user_main__():\n${indent(userCode)}\n\nasyncio.run(__lc_user_main__())\n`;\n}\n\nfunction createBashProgram(\n  userCode: string,\n  toolDefs: t.LCTool[],\n  config: t.CloudflareSandboxExecutionConfig,\n  workspaceRoot: string\n): string {\n  const helper = createNodeNativeToolSource(config, workspaceRoot);\n  const functions = toolDefs\n    .map((def) => {\n      const bashName = normalizeToBashIdentifier(def.name);\n      if (!NATIVE_TOOL_NAMES.has(def.name)) {\n        return '';\n      }\n      return `${bashName}() { node \"$__LC_TOOL_HELPER\" ${JSON.stringify(def.name)} \"$1\"; }`;\n    })\n    .filter(Boolean)\n    .join('\\n');\n  return `\nset -euo pipefail\ncommand -v node >/dev/null 2>&1 || { echo \"Cloudflare programmatic tool calling requires node in the sandbox image.\" >&2; exit 127; }\n__LC_TOOL_HELPER=\"$(mktemp /tmp/lc-tools.XXXXXX.js)\"\ncat > \"$__LC_TOOL_HELPER\" <<'JS'\n${helper}\nJS\ntrap 'rm -f \"$__LC_TOOL_HELPER\"' EXIT\n${functions}\n${userCode}\n`.trim();\n}\n\nasync function runProgrammatic(args: {\n  params: ProgrammaticParams;\n  config?: { toolCall?: unknown };\n  cloudflareConfig: t.CloudflareSandboxExecutionConfig;\n  runtime: 'python' | 'bash';\n}): Promise<[string, t.ProgrammaticExecutionArtifact]> {\n  const toolCall = (args.config?.toolCall ??\n    {}) as Partial<t.ProgrammaticCache>;\n  const toolDefs = toolCall.toolDefs ?? [];\n  const effectiveTools = filterNativeTools(\n    toolDefs,\n    args.params.code,\n    args.runtime\n  );\n  const timeoutMs = clampExecutionTimeout(\n    args.params.timeout,\n    args.cloudflareConfig.timeoutMs\n  );\n  const workspaceRoot = getCloudflareWorkspaceRoot(args.cloudflareConfig);\n  let result: Awaited<ReturnType<typeof executeCloudflareCode>>;\n\n  if (args.runtime === 'bash') {\n    await validateCloudflareBashCommand(args.params.code, [], {\n      ...args.cloudflareConfig,\n      timeoutMs,\n    });\n    result = await executeGeneratedCloudflareBash(\n      createBashProgram(\n        args.params.code,\n        effectiveTools,\n        args.cloudflareConfig,\n        workspaceRoot\n      ),\n      { ...args.cloudflareConfig, timeoutMs }\n    );\n  } else {\n    result = await executeCloudflareCode(\n      {\n        lang: 'py',\n        code: createPythonProgram(\n          args.params.code,\n          effectiveTools,\n          args.cloudflareConfig,\n          workspaceRoot\n        ),\n      },\n      { ...args.cloudflareConfig, timeoutMs }\n    );\n  }\n\n  if (result.exitCode !== 0 || result.timedOut) {\n    throw new Error(\n      result.stderr !== ''\n        ? result.stderr\n        : `Cloudflare ${args.runtime} programmatic execution exited with code ${result.exitCode ?? 'unknown'}`\n    );\n  }\n\n  return formatCompletedResponse({\n    status: 'completed',\n    session_id: 'cloudflare-sandbox',\n    stdout: result.stdout,\n    stderr: result.stderr,\n    files: [],\n  });\n}\n\nexport function createCloudflareProgrammaticToolCallingTool(\n  cloudflareConfig: t.CloudflareSandboxExecutionConfig\n): DynamicStructuredTool {\n  return tool(\n    async (rawParams, config) => {\n      const params = rawParams as ProgrammaticParams;\n      return runProgrammatic({\n        params,\n        config,\n        cloudflareConfig,\n        runtime: resolveRuntime(params),\n      });\n    },\n    {\n      name: ProgrammaticToolCallingName,\n      description: `${ProgrammaticToolCallingDescription}\\n\\nCloudflare Sandbox engine: exposes the built-in coding tools inside the sandbox process. Non-coding host tools are not callable from this in-sandbox programmatic runner.`,\n      schema: createCloudflareProgrammaticToolCallingSchema(cloudflareConfig),\n      responseFormat: Constants.CONTENT_AND_ARTIFACT,\n    }\n  );\n}\n\nexport function createCloudflareBashProgrammaticToolCallingTool(\n  cloudflareConfig: t.CloudflareSandboxExecutionConfig\n): DynamicStructuredTool {\n  return tool(\n    async (rawParams, config) => {\n      const params = rawParams as ProgrammaticParams;\n      return runProgrammatic({\n        params,\n        config,\n        cloudflareConfig,\n        runtime: 'bash',\n      });\n    },\n    {\n      name: Constants.BASH_PROGRAMMATIC_TOOL_CALLING,\n      description: `${BashProgrammaticToolCallingDescription}\\n\\nCloudflare Sandbox engine: exposes the built-in coding tools as bash functions inside the sandbox process. Non-coding host tools are not callable from this in-sandbox programmatic runner.`,\n      schema:\n        createCloudflareBashProgrammaticToolCallingSchema(cloudflareConfig),\n      responseFormat: Constants.CONTENT_AND_ARTIFACT,\n    }\n  );\n}\n"],"mappings":";;;;;;;AAqCA,MAAM,kBAAkB;AACxB,MAAM,cAAc;AACpB,MAAM,cAAc;AACpB,MAAM,2BAA2B;AAgCjC,MAAM,oBAAoB,IAAI,IAAY;;;;;;;;;;AAU1C,CAAC;AAED,SAAS,iBAAiB,WAAuC;CAC/D,IAAI,aAAa,QAAQ,CAAC,OAAO,SAAS,SAAS,GACjD,OAAO;CAET,OAAO,KAAK,IAAI,aAAa,KAAK,MAAM,SAAS,CAAC;AACpD;AAEA,SAAS,cAAc,WAA2B;CAChD,OAAO,YAAY,QAAS,IACxB,GAAG,YAAY,IAAK,YACpB,GAAG,UAAU;AACnB;AAEA,SAAS,oBAAoB,WAAmC;CAC9D,MAAM,iBAAiB,iBAAiB,SAAS;CACjD,MAAM,aAAa,KAAK,IAAI,aAAa,cAAc;CACvD,OAAO;EACL,MAAM;EACN,SAAS;EACT,SAAS;EACT,SAAS;EACT,aACE,uEACY,cAAc,cAAc,EAAE,SAAS,cAAc,UAAU,EAAE;CACjF;AACF;AAEA,SAAS,sBACP,oBACA,qBACQ;CACR,MAAM,iBAAiB,iBAAiB,mBAAmB;CAC3D,MAAM,aAAa,KAAK,IAAI,aAAa,cAAc;CACvD,IAAI,sBAAsB,QAAQ,CAAC,OAAO,SAAS,kBAAkB,GACnE,OAAO;CAET,OAAO,KAAK,IACV,KAAK,IAAI,aAAa,KAAK,MAAM,kBAAkB,CAAC,GACpD,UACF;AACF;AAEA,SAAS,WAAW,OAAuB;CACzC,IAAI,2BAA2B,KAAK,KAAK,GACvC,OAAO;CAET,MAAM,eAAe,OAAO,GAAG;CAC/B,OAAO,IAAI,MAAM,QAAQ,MAAM,YAAY,EAAE;AAC/C;AAEA,SAAS,eACP,OACA,WAAW,0BACH;CACR,IAAI,MAAM,UAAU,UAClB,OAAO;CAET,MAAM,OAAO,KAAK,MAAM,WAAW,EAAG;CACtC,MAAM,OAAO,WAAW;CACxB,MAAM,UAAU,MAAM,SAAS;CAC/B,OAAO,GAAG,MAAM,MAAM,GAAG,IAAI,EAAE,WAAW,QAAQ,gCAAgC,MAAM,MACtF,MAAM,SAAS,IACjB;AACF;AAEA,SAAS,qBAAqB,SAAiB,WAA2B;CAExE,OAAO,iBADgB,KAAK,IAAI,GAAG,KAAK,KAAK,YAAY,GAAI,CACxB,EAAE,IAAI;AAC7C;AAEA,SAAS,eAAe,WAA2B;CACjD,OAAO,YAAY;AACrB;AAEA,SAAS,uBAAuB,UAAkC;CAChE,OAAO,aAAa,OAAO,aAAa;AAC1C;AAEA,eAAe,+BACb,SACA,QAC0C;CAC1C,MAAM,UAAU,MAAMA,yCAAAA,yBAAyB,MAAM;CACrD,MAAM,gBAAgBC,yCAAAA,2BAA2B,MAAM;CACvD,MAAM,QAAQ,OAAO,SAAS;CAC9B,MAAM,YAAY,OAAO,aAAa;CACtC,MAAM,SAAS,MAAMC,yCAAAA,sBACnB,SACA,qBAAqB,GAAG,MAAM,OAAO,WAAW,OAAO,KAAK,SAAS,GACrE;EACE,KAAK;EACL,KAAK,OAAO;EACZ,SAAS,eAAe,SAAS;CACnC,GACAC,yCAAAA,oBAAoB,SAAS,GAC7B,mCACF;CACA,MAAM,iBAAiB,OAAO,kBAAkB;CAChD,OAAO;EACL,QAAQ,eAAe,OAAO,QAAQ,cAAc;EACpD,QAAQ,eAAe,OAAO,QAAQ,cAAc;EACpD,UAAU,OAAO;EACjB,UAAU,uBAAuB,OAAO,QAAQ;CAClD;AACF;AAEA,SAAS,8CACP,QAC6C;CAC7C,OAAO;EACL,GAAGC,gCAAAA;EACH,YAAY;GACV,GAAGA,gCAAAA,8BAA8B;GACjC,SAAS,oBAAoB,OAAO,SAAS;GAC7C,MAAM;IACJ,MAAM;IACN,MAAM;KAAC;KAAM;KAAU;KAAQ;IAAI;IACnC,SAAS;IACT,aACE;GACJ;EACF;CACF;AACF;AAEA,SAAS,kDACP,QACiD;CACjD,OAAO;EACL,GAAGC,oCAAAA;EACH,YAAY;GACV,GAAGA,oCAAAA,kCAAkC;GACrC,SAAS,oBAAoB,OAAO,SAAS;EAC/C;CACF;AACF;AAEA,SAAS,eAAe,QAA+C;CACrE,MAAM,MAAM,OAAO,QAAQ,OAAO,WAAW,OAAO,YAAY;CAChE,OAAO,QAAQ,QAAQ,QAAQ,WAAW,WAAW;AACvD;AAEA,SAAS,kBACP,UACA,MACA,SACY;CACZ,MAAM,aAAa,SAAS,QAAQ,QAAQ,kBAAkB,IAAI,IAAI,IAAI,CAAC;CAG3E,QADE,YAAY,SAASC,oCAAAA,yBAAyBC,gCAAAA,mBAAAA,CAClC,YAAY,IAAI;AAChC;AAEA,SAAS,OAAO,MAAc,SAAS,GAAW;CAChD,MAAM,SAAS,IAAI,OAAO,MAAM;CAChC,OAAO,KACJ,MAAM,IAAI,CAAC,CACX,KAAK,SAAU,SAAS,KAAK,OAAO,SAAS,IAAK,CAAC,CACnD,KAAK,IAAI;AACd;AAEA,SAAS,cAAc,OAA8C;CACnE,OAAO,UAAU,OAAO,SAAS;AACnC;AAEA,SAAS,6BACP,QACA,eACQ;CACR,OAAO;;;cAGK,KAAK,UAAU,aAAa,EAAE;UAClC,KAAK,UAAU,OAAO,SAAS,MAAM,EAAE;cACnC,cAAc,OAAO,QAAQ,EAAE;6BAChB,cAAc,OAAO,sBAAsB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiTxE,KAAK;AACP;AAEA,SAAS,2BACP,QACA,eACQ;CACR,OAAO;;;;;;oBAMW,KAAK,UAAU,aAAa,EAAE;gBAClC,KAAK,UAAU,OAAO,SAAS,MAAM,EAAE;oBACnC,KAAK,UAAU,OAAO,aAAa,IAAI,EAAE;mCAC1B,KAAK,UAAU,OAAO,2BAA2B,IAAI,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkaxF,KAAK;AACP;AAEA,SAAS,oBACP,UACA,UACA,QACA,eACQ;CACR,MAAM,UAAU,SACb,KAAK,QAAQ;EACZ,MAAM,aAAaC,gCAAAA,4BAA4B,IAAI,IAAI;EACvD,OAAO,kBAAkB,IAAI,IAAI,IAAI,KAAK,eAAe,IAAI,OACzD,GAAG,WAAW,eAAe,KAAK,UAAU,IAAI,IAAI,EAAE,KACtD;CACN,CAAC,CAAC,CACD,OAAO,OAAO,CAAC,CACf,KAAK,IAAI;CACZ,OAAO,GAAG,6BAA6B,QAAQ,aAAa,EAAE;EAC9D,QAAQ;;;EAGR,OAAO,QAAQ,EAAE;;;;AAInB;AAEA,SAAS,kBACP,UACA,UACA,QACA,eACQ;CAYR,OAAO;;;;;EAXQ,2BAA2B,QAAQ,aAgB7C,EAAE;;;EAfW,SACf,KAAK,QAAQ;EACZ,MAAM,WAAWC,oCAAAA,0BAA0B,IAAI,IAAI;EACnD,IAAI,CAAC,kBAAkB,IAAI,IAAI,IAAI,GACjC,OAAO;EAET,OAAO,GAAG,SAAS,gCAAgC,KAAK,UAAU,IAAI,IAAI,EAAE;CAC9E,CAAC,CAAC,CACD,OAAO,OAAO,CAAC,CACf,KAAK,IASA,EAAE;EACV,SAAS;EACT,KAAK;AACP;AAEA,eAAe,gBAAgB,MAKwB;CAIrD,MAAM,iBAAiB,mBAHL,KAAK,QAAQ,YAC7B,CAAC,EAAA,CACuB,YAAY,CAAC,GAGrC,KAAK,OAAO,MACZ,KAAK,OACP;CACA,MAAM,YAAY,sBAChB,KAAK,OAAO,SACZ,KAAK,iBAAiB,SACxB;CACA,MAAM,gBAAgBR,yCAAAA,2BAA2B,KAAK,gBAAgB;CACtE,IAAI;CAEJ,IAAI,KAAK,YAAY,QAAQ;EAC3B,MAAMS,yCAAAA,8BAA8B,KAAK,OAAO,MAAM,CAAC,GAAG;GACxD,GAAG,KAAK;GACR;EACF,CAAC;EACD,SAAS,MAAM,+BACb,kBACE,KAAK,OAAO,MACZ,gBACA,KAAK,kBACL,aACF,GACA;GAAE,GAAG,KAAK;GAAkB;EAAU,CACxC;CACF,OACE,SAAS,MAAMC,yCAAAA,sBACb;EACE,MAAM;EACN,MAAM,oBACJ,KAAK,OAAO,MACZ,gBACA,KAAK,kBACL,aACF;CACF,GACA;EAAE,GAAG,KAAK;EAAkB;CAAU,CACxC;CAGF,IAAI,OAAO,aAAa,KAAK,OAAO,UAClC,MAAM,IAAI,MACR,OAAO,WAAW,KACd,OAAO,SACP,cAAc,KAAK,QAAQ,2CAA2C,OAAO,YAAY,WAC/F;CAGF,OAAOC,gCAAAA,wBAAwB;EAC7B,QAAQ;EACR,YAAY;EACZ,QAAQ,OAAO;EACf,QAAQ,OAAO;EACf,OAAO,CAAC;CACV,CAAC;AACH;AAEA,SAAgB,4CACd,kBACuB;CACvB,QAAA,GAAA,sBAAA,KAAA,CACE,OAAO,WAAW,WAAW;EAC3B,MAAM,SAAS;EACf,OAAO,gBAAgB;GACrB;GACA;GACA;GACA,SAAS,eAAe,MAAM;EAChC,CAAC;CACH,GACA;EACE,MAAMC,gCAAAA;EACN,aAAa,GAAGC,gCAAAA,mCAAmC;EACnD,QAAQ,8CAA8C,gBAAgB;EACtE,gBAAA;CACF,CACF;AACF;AAEA,SAAgB,gDACd,kBACuB;CACvB,QAAA,GAAA,sBAAA,KAAA,CACE,OAAO,WAAW,WAAW;EAE3B,OAAO,gBAAgB;GACrB,QAAA;GACA;GACA;GACA,SAAS;EACX,CAAC;CACH,GACA;EACE,MAAA;EACA,aAAa,GAAGC,oCAAAA,uCAAuC;EACvD,QACE,kDAAkD,gBAAgB;EACpE,gBAAA;CACF,CACF;AACF"}
+{"version":3,"file":"CloudflareProgrammaticToolCalling.cjs","names":["resolveCloudflareSandbox","getCloudflareWorkspaceRoot","execWithClientTimeout","clientExecTimeoutMs","ProgrammaticToolCallingSchema","BashProgrammaticToolCallingSchema","filterBashToolsByUsage","filterToolsByUsage","normalizeToPythonIdentifier","normalizeToBashIdentifier","validateCloudflareBashCommand","executeCloudflareCode","formatCompletedResponse","ProgrammaticToolCallingName","ProgrammaticToolCallingDescription","BashProgrammaticToolCallingDescription"],"sources":["../../../../src/tools/cloudflare/CloudflareProgrammaticToolCalling.ts"],"mappings":";;;;;;;AAqCA,MAAM,kBAAkB;AACxB,MAAM,cAAc;AACpB,MAAM,cAAc;AACpB,MAAM,2BAA2B;AAgCjC,MAAM,oBAAoB,IAAI,IAAY;;;;;;;;;;AAU1C,CAAC;AAED,SAAS,iBAAiB,WAAuC;CAC/D,IAAI,aAAa,QAAQ,CAAC,OAAO,SAAS,SAAS,GACjD,OAAO;CAET,OAAO,KAAK,IAAI,aAAa,KAAK,MAAM,SAAS,CAAC;AACpD;AAEA,SAAS,cAAc,WAA2B;CAChD,OAAO,YAAY,QAAS,IACxB,GAAG,YAAY,IAAK,YACpB,GAAG,UAAU;AACnB;AAEA,SAAS,oBAAoB,WAAmC;CAC9D,MAAM,iBAAiB,iBAAiB,SAAS;CACjD,MAAM,aAAa,KAAK,IAAI,aAAa,cAAc;CACvD,OAAO;EACL,MAAM;EACN,SAAS;EACT,SAAS;EACT,SAAS;EACT,aACE,uEACY,cAAc,cAAc,EAAE,SAAS,cAAc,UAAU,EAAE;CACjF;AACF;AAEA,SAAS,sBACP,oBACA,qBACQ;CACR,MAAM,iBAAiB,iBAAiB,mBAAmB;CAC3D,MAAM,aAAa,KAAK,IAAI,aAAa,cAAc;CACvD,IAAI,sBAAsB,QAAQ,CAAC,OAAO,SAAS,kBAAkB,GACnE,OAAO;CAET,OAAO,KAAK,IACV,KAAK,IAAI,aAAa,KAAK,MAAM,kBAAkB,CAAC,GACpD,UACF;AACF;AAEA,SAAS,WAAW,OAAuB;CACzC,IAAI,2BAA2B,KAAK,KAAK,GACvC,OAAO;CAET,MAAM,eAAe,OAAO,GAAG;CAC/B,OAAO,IAAI,MAAM,QAAQ,MAAM,YAAY,EAAE;AAC/C;AAEA,SAAS,eACP,OACA,WAAW,0BACH;CACR,IAAI,MAAM,UAAU,UAClB,OAAO;CAET,MAAM,OAAO,KAAK,MAAM,WAAW,EAAG;CACtC,MAAM,OAAO,WAAW;CACxB,MAAM,UAAU,MAAM,SAAS;CAC/B,OAAO,GAAG,MAAM,MAAM,GAAG,IAAI,EAAE,WAAW,QAAQ,gCAAgC,MAAM,MACtF,MAAM,SAAS,IACjB;AACF;AAEA,SAAS,qBAAqB,SAAiB,WAA2B;CAExE,OAAO,iBADgB,KAAK,IAAI,GAAG,KAAK,KAAK,YAAY,GAAI,CACxB,EAAE,IAAI;AAC7C;AAEA,SAAS,eAAe,WAA2B;CACjD,OAAO,YAAY;AACrB;AAEA,SAAS,uBAAuB,UAAkC;CAChE,OAAO,aAAa,OAAO,aAAa;AAC1C;AAEA,eAAe,+BACb,SACA,QAC0C;CAC1C,MAAM,UAAU,MAAMA,yCAAAA,yBAAyB,MAAM;CACrD,MAAM,gBAAgBC,yCAAAA,2BAA2B,MAAM;CACvD,MAAM,QAAQ,OAAO,SAAS;CAC9B,MAAM,YAAY,OAAO,aAAa;CACtC,MAAM,SAAS,MAAMC,yCAAAA,sBACnB,SACA,qBAAqB,GAAG,MAAM,OAAO,WAAW,OAAO,KAAK,SAAS,GACrE;EACE,KAAK;EACL,KAAK,OAAO;EACZ,SAAS,eAAe,SAAS;CACnC,GACAC,yCAAAA,oBAAoB,SAAS,GAC7B,mCACF;CACA,MAAM,iBAAiB,OAAO,kBAAkB;CAChD,OAAO;EACL,QAAQ,eAAe,OAAO,QAAQ,cAAc;EACpD,QAAQ,eAAe,OAAO,QAAQ,cAAc;EACpD,UAAU,OAAO;EACjB,UAAU,uBAAuB,OAAO,QAAQ;CAClD;AACF;AAEA,SAAS,8CACP,QAC6C;CAC7C,OAAO;EACL,GAAGC,gCAAAA;EACH,YAAY;GACV,GAAGA,gCAAAA,8BAA8B;GACjC,SAAS,oBAAoB,OAAO,SAAS;GAC7C,MAAM;IACJ,MAAM;IACN,MAAM;KAAC;KAAM;KAAU;KAAQ;IAAI;IACnC,SAAS;IACT,aACE;GACJ;EACF;CACF;AACF;AAEA,SAAS,kDACP,QACiD;CACjD,OAAO;EACL,GAAGC,oCAAAA;EACH,YAAY;GACV,GAAGA,oCAAAA,kCAAkC;GACrC,SAAS,oBAAoB,OAAO,SAAS;EAC/C;CACF;AACF;AAEA,SAAS,eAAe,QAA+C;CACrE,MAAM,MAAM,OAAO,QAAQ,OAAO,WAAW,OAAO,YAAY;CAChE,OAAO,QAAQ,QAAQ,QAAQ,WAAW,WAAW;AACvD;AAEA,SAAS,kBACP,UACA,MACA,SACY;CACZ,MAAM,aAAa,SAAS,QAAQ,QAAQ,kBAAkB,IAAI,IAAI,IAAI,CAAC;CAG3E,QADE,YAAY,SAASC,oCAAAA,yBAAyBC,gCAAAA,mBAAAA,CAClC,YAAY,IAAI;AAChC;AAEA,SAAS,OAAO,MAAc,SAAS,GAAW;CAChD,MAAM,SAAS,IAAI,OAAO,MAAM;CAChC,OAAO,KACJ,MAAM,IAAI,CAAC,CACX,KAAK,SAAU,SAAS,KAAK,OAAO,SAAS,IAAK,CAAC,CACnD,KAAK,IAAI;AACd;AAEA,SAAS,cAAc,OAA8C;CACnE,OAAO,UAAU,OAAO,SAAS;AACnC;AAEA,SAAS,6BACP,QACA,eACQ;CACR,OAAO;;;cAGK,KAAK,UAAU,aAAa,EAAE;UAClC,KAAK,UAAU,OAAO,SAAS,MAAM,EAAE;cACnC,cAAc,OAAO,QAAQ,EAAE;6BAChB,cAAc,OAAO,sBAAsB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiTxE,KAAK;AACP;AAEA,SAAS,2BACP,QACA,eACQ;CACR,OAAO;;;;;;oBAMW,KAAK,UAAU,aAAa,EAAE;gBAClC,KAAK,UAAU,OAAO,SAAS,MAAM,EAAE;oBACnC,KAAK,UAAU,OAAO,aAAa,IAAI,EAAE;mCAC1B,KAAK,UAAU,OAAO,2BAA2B,IAAI,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkaxF,KAAK;AACP;AAEA,SAAS,oBACP,UACA,UACA,QACA,eACQ;CACR,MAAM,UAAU,SACb,KAAK,QAAQ;EACZ,MAAM,aAAaC,gCAAAA,4BAA4B,IAAI,IAAI;EACvD,OAAO,kBAAkB,IAAI,IAAI,IAAI,KAAK,eAAe,IAAI,OACzD,GAAG,WAAW,eAAe,KAAK,UAAU,IAAI,IAAI,EAAE,KACtD;CACN,CAAC,CAAC,CACD,OAAO,OAAO,CAAC,CACf,KAAK,IAAI;CACZ,OAAO,GAAG,6BAA6B,QAAQ,aAAa,EAAE;EAC9D,QAAQ;;;EAGR,OAAO,QAAQ,EAAE;;;;AAInB;AAEA,SAAS,kBACP,UACA,UACA,QACA,eACQ;CAYR,OAAO;;;;;EAXQ,2BAA2B,QAAQ,aAgB7C,EAAE;;;EAfW,SACf,KAAK,QAAQ;EACZ,MAAM,WAAWC,oCAAAA,0BAA0B,IAAI,IAAI;EACnD,IAAI,CAAC,kBAAkB,IAAI,IAAI,IAAI,GACjC,OAAO;EAET,OAAO,GAAG,SAAS,gCAAgC,KAAK,UAAU,IAAI,IAAI,EAAE;CAC9E,CAAC,CAAC,CACD,OAAO,OAAO,CAAC,CACf,KAAK,IASA,EAAE;EACV,SAAS;EACT,KAAK;AACP;AAEA,eAAe,gBAAgB,MAKwB;CAIrD,MAAM,iBAAiB,mBAHL,KAAK,QAAQ,YAC7B,CAAC,EAAA,CACuB,YAAY,CAAC,GAGrC,KAAK,OAAO,MACZ,KAAK,OACP;CACA,MAAM,YAAY,sBAChB,KAAK,OAAO,SACZ,KAAK,iBAAiB,SACxB;CACA,MAAM,gBAAgBR,yCAAAA,2BAA2B,KAAK,gBAAgB;CACtE,IAAI;CAEJ,IAAI,KAAK,YAAY,QAAQ;EAC3B,MAAMS,yCAAAA,8BAA8B,KAAK,OAAO,MAAM,CAAC,GAAG;GACxD,GAAG,KAAK;GACR;EACF,CAAC;EACD,SAAS,MAAM,+BACb,kBACE,KAAK,OAAO,MACZ,gBACA,KAAK,kBACL,aACF,GACA;GAAE,GAAG,KAAK;GAAkB;EAAU,CACxC;CACF,OACE,SAAS,MAAMC,yCAAAA,sBACb;EACE,MAAM;EACN,MAAM,oBACJ,KAAK,OAAO,MACZ,gBACA,KAAK,kBACL,aACF;CACF,GACA;EAAE,GAAG,KAAK;EAAkB;CAAU,CACxC;CAGF,IAAI,OAAO,aAAa,KAAK,OAAO,UAClC,MAAM,IAAI,MACR,OAAO,WAAW,KACd,OAAO,SACP,cAAc,KAAK,QAAQ,2CAA2C,OAAO,YAAY,WAC/F;CAGF,OAAOC,gCAAAA,wBAAwB;EAC7B,QAAQ;EACR,YAAY;EACZ,QAAQ,OAAO;EACf,QAAQ,OAAO;EACf,OAAO,CAAC;CACV,CAAC;AACH;AAEA,SAAgB,4CACd,kBACuB;CACvB,QAAA,GAAA,sBAAA,KAAA,CACE,OAAO,WAAW,WAAW;EAC3B,MAAM,SAAS;EACf,OAAO,gBAAgB;GACrB;GACA;GACA;GACA,SAAS,eAAe,MAAM;EAChC,CAAC;CACH,GACA;EACE,MAAMC,gCAAAA;EACN,aAAa,GAAGC,gCAAAA,mCAAmC;EACnD,QAAQ,8CAA8C,gBAAgB;EACtE,gBAAA;CACF,CACF;AACF;AAEA,SAAgB,gDACd,kBACuB;CACvB,QAAA,GAAA,sBAAA,KAAA,CACE,OAAO,WAAW,WAAW;EAE3B,OAAO,gBAAgB;GACrB,QAAA;GACA;GACA;GACA,SAAS;EACX,CAAC;CACH,GACA;EACE,MAAA;EACA,aAAa,GAAGC,oCAAAA,uCAAuC;EACvD,QACE,kDAAkD,gBAAgB;EACpE,gBAAA;CACF,CACF;AACF"}

package/dist/cjs/tools/cloudflare/CloudflareSandboxExecutionEngine.cjs

@@ -62,42 +62,12 @@ function outerTimeoutMs(timeoutMs) {
 function isInSandboxTimeoutExit(exitCode) {
 	return exitCode === 124 || exitCode === 137;
 }
-/**
-* Client-side backstop timeout for a `sandbox.exec()` await: a few seconds beyond
-* the exec's own `timeout` option, so a stalled exec that never honors `timeout`
-* still can't outlast this.
-*/
 function clientExecTimeoutMs(timeoutMs) {
 	return outerTimeoutMs(timeoutMs) + 5e3;
 }
-/**
-* Client-side backstop timeout for a native-DO sandbox FILE-IO RPC
-* (`readFile`/`writeFile`/`listFiles`/`mkdir`/`deleteFile`). Unlike `exec()`
-* there is no in-sandbox `timeout(1)` layer for these to honor, so this is just a
-* few seconds of headroom over the configured tool timeout — enough that a normal
-* (even large, byte-capped) read completes, while a stalled/cold container can't
-* outlast it. See `withClientTimeout` for why the native DO RPC needs this.
-*/
 function clientFsTimeoutMs(timeoutMs) {
 	return timeoutMs + 5e3;
 }
-/**
-* Bound a `sandbox.exec()` await with a CLIENT-SIDE timeout.
-*
-* The native Cloudflare Sandbox Durable Object `exec()` is effectively
-* uncancellable from the host: `ExecOptions` has no `signal` (so
-* `supportsExecSignal` is false for the native transport), and its `timeout`
-* option is not reliably enforced when the container/RPC itself stalls — while
-* the in-sandbox `timeout(1)` wrapper only bounds a command that is actually
-* running. So a stalled exec (an unresponsive/cold container) otherwise hangs
-* until the host's run-level abort, burning the whole run budget on one tool
-* call. This race guarantees the host await settles within `timeoutMs`
-* regardless of the transport.
-*
-* On timeout the underlying `exec` promise may keep running in the DO (a
-* native-DO exec cannot be truly cancelled), so its late settlement is swallowed
-* to avoid an unhandled rejection.
-*/
 async function withClientTimeout(exec, timeoutMs, label, options = {}) {
 	if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) return exec;
 	exec.catch(() => void 0);
@@ -114,13 +84,6 @@ async function withClientTimeout(exec, timeoutMs, label, options = {}) {
 		if (timer !== void 0) clearTimeout(timer);
 	}
 }
-/**
-* Run `sandbox.exec()` bounded by a client-side timeout, and — for signal-aware
-* transports (e.g. the HTTP bridge, `supportsExecSignal === true`) — abort the
-* underlying exec when the timeout fires instead of merely abandoning it. The
-* native DO transport ignores `signal`, so it only gets the timeout. Leaves the
-* backstop timer ref'd (this is an awaited direct-exec path).
-*/
 async function execWithClientTimeout(sandbox, command, options, timeoutMs, label, runOptions = {}) {
 	const controller = new AbortController();
 	const execOptions = { ...options };
@@ -331,8 +294,6 @@ function createCloudflareSpawn(config) {
 		const child = new events.EventEmitter();
 		const abortController = new AbortController();
 		const state = { closed: false };
-		/** Read through a function so concurrent `closeOnce` mutation (via
-		* `kill()`/abort during an `await`) isn't statically narrowed away. */
 		const isClosed = () => state.closed;
 		const closeOnce = (exitCode, signal) => {
 			if (state.closed) return;

package/dist/cjs/tools/cloudflare/CloudflareSandboxExecutionEngine.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"CloudflareSandboxExecutionEngine.cjs","names":["WorkspaceClientTimeoutError","stream","isWorkspaceClientTimeoutError","PassThrough","EventEmitter","LOCAL_SPAWN_TIMEOUT_MS","validateBashCommand"],"sources":["../../../../src/tools/cloudflare/CloudflareSandboxExecutionEngine.ts"],"sourcesContent":["import { PassThrough } from 'stream';\nimport { posix as path } from 'path';\nimport { EventEmitter } from 'events';\nimport type { WriteFileOptions, MakeDirectoryOptions, Stats } from 'fs';\nimport type { ChildProcessWithoutNullStreams } from 'child_process';\nimport type { FileHandle } from 'fs/promises';\nimport type { WorkspaceFS, ReaddirEntry } from '@/tools/local/workspaceFS';\nimport {\n  WorkspaceClientTimeoutError,\n  isWorkspaceClientTimeoutError,\n} from '@/tools/local/workspaceFS';\nimport type * as t from '@/types';\nimport {\n  LOCAL_SPAWN_TIMEOUT_MS,\n  validateBashCommand,\n} from '@/tools/local/LocalExecutionEngine';\n\nconst DEFAULT_WORKSPACE_ROOT = '/workspace';\nconst DEFAULT_TIMEOUT_MS = 60000;\nconst DEFAULT_MAX_OUTPUT_CHARS = 200000;\nconst PROTECTED_TARGET_ARG_RE = /^(?:\\/|~|\\$\\{?HOME\\}?|\\.)(?:\\/?\\.?\\*|\\/)?$/;\nconst DESTRUCTIVE_OP_IN_COMMAND_RE =\n  /\\b(?:rm\\s+-[^\\s]*[rf]|chmod\\s+-R|chown\\s+-R)\\b/;\n\ntype SpawnResult = {\n  stdout: string;\n  stderr: string;\n  exitCode: number | null;\n  timedOut: boolean;\n};\n\ntype RuntimeCommand = {\n  fileName: string;\n  source?: string;\n  command: string;\n};\n\ntype SandboxRuntimeContext = {\n  sandbox: t.CloudflareSandboxRuntime;\n  workspaceRoot: string;\n  env?: Record<string, string | undefined>;\n  timeoutMs: number;\n  maxOutputChars: number;\n  shell: string;\n};\n\nconst sandboxFactoryCache = new WeakMap<\n  t.CloudflareSandboxExecutionConfig,\n  Promise<t.CloudflareSandboxRuntime>\n>();\n\nfunction normalizeWorkspaceRoot(workspaceRoot: string): string {\n  const normalized = path.normalize(workspaceRoot);\n  return normalized === '/' ? normalized : normalized.replace(/\\/+$/, '');\n}\n\nexport function getCloudflareWorkspaceRoot(\n  config?: t.CloudflareSandboxExecutionConfig\n): string {\n  return normalizeWorkspaceRoot(\n    config?.workspaceRoot ?? DEFAULT_WORKSPACE_ROOT\n  );\n}\n\nexport async function resolveCloudflareSandbox(\n  config: t.CloudflareSandboxExecutionConfig\n): Promise<t.CloudflareSandboxRuntime> {\n  const sandbox = config.sandbox;\n  if (typeof sandbox !== 'function') {\n    return sandbox;\n  }\n  let cached = sandboxFactoryCache.get(config);\n  if (cached == null) {\n    cached = Promise.resolve()\n      .then(() => sandbox())\n      .catch((error: unknown) => {\n        sandboxFactoryCache.delete(config);\n        throw error;\n      });\n    sandboxFactoryCache.set(config, cached);\n  }\n  return cached;\n}\n\nasync function getRuntimeContext(\n  config: t.CloudflareSandboxExecutionConfig\n): Promise<SandboxRuntimeContext> {\n  return {\n    sandbox: await resolveCloudflareSandbox(config),\n    workspaceRoot: getCloudflareWorkspaceRoot(config),\n    env: config.env,\n    timeoutMs: config.timeoutMs ?? DEFAULT_TIMEOUT_MS,\n    maxOutputChars: config.maxOutputChars ?? DEFAULT_MAX_OUTPUT_CHARS,\n    shell: config.shell ?? 'bash',\n  };\n}\n\nfunction toSandboxPath(filePath: string, workspaceRoot: string): string {\n  const raw = filePath === '' ? '.' : filePath;\n  const root = normalizeWorkspaceRoot(workspaceRoot);\n  const resolved = raw.startsWith('/')\n    ? path.normalize(raw)\n    : path.resolve(root, raw);\n  if (root === '/') {\n    return resolved;\n  }\n  if (resolved === root || resolved.startsWith(`${root}/`)) {\n    return resolved;\n  }\n  throw new Error(\n    `Path is outside the Cloudflare sandbox workspace: ${filePath}`\n  );\n}\n\nfunction quote(value: string): string {\n  if (value === '') {\n    return '\\'\\'';\n  }\n  if (/^[A-Za-z0-9_/:=.,@%+-]+$/.test(value)) {\n    return value;\n  }\n  return `'${value.replace(/'/g, '\\'\\\\\\'\\'')}'`;\n}\n\nfunction withInSandboxTimeout(command: string, timeoutMs: number): string {\n  const timeoutSeconds = Math.max(1, Math.ceil(timeoutMs / 1000));\n  return `timeout -k 2s ${timeoutSeconds}s ${command}`;\n}\n\nfunction outerTimeoutMs(timeoutMs: number): number {\n  return timeoutMs + 5000;\n}\n\nfunction isInSandboxTimeoutExit(exitCode: number | null): boolean {\n  return exitCode === 124 || exitCode === 137;\n}\n\n/**\n * Client-side backstop timeout for a `sandbox.exec()` await: a few seconds beyond\n * the exec's own `timeout` option, so a stalled exec that never honors `timeout`\n * still can't outlast this.\n */\nexport function clientExecTimeoutMs(timeoutMs: number): number {\n  return outerTimeoutMs(timeoutMs) + 5000;\n}\n\n/**\n * Client-side backstop timeout for a native-DO sandbox FILE-IO RPC\n * (`readFile`/`writeFile`/`listFiles`/`mkdir`/`deleteFile`). Unlike `exec()`\n * there is no in-sandbox `timeout(1)` layer for these to honor, so this is just a\n * few seconds of headroom over the configured tool timeout — enough that a normal\n * (even large, byte-capped) read completes, while a stalled/cold container can't\n * outlast it. See `withClientTimeout` for why the native DO RPC needs this.\n */\nexport function clientFsTimeoutMs(timeoutMs: number): number {\n  return timeoutMs + 5000;\n}\n\n/**\n * Bound a `sandbox.exec()` await with a CLIENT-SIDE timeout.\n *\n * The native Cloudflare Sandbox Durable Object `exec()` is effectively\n * uncancellable from the host: `ExecOptions` has no `signal` (so\n * `supportsExecSignal` is false for the native transport), and its `timeout`\n * option is not reliably enforced when the container/RPC itself stalls — while\n * the in-sandbox `timeout(1)` wrapper only bounds a command that is actually\n * running. So a stalled exec (an unresponsive/cold container) otherwise hangs\n * until the host's run-level abort, burning the whole run budget on one tool\n * call. This race guarantees the host await settles within `timeoutMs`\n * regardless of the transport.\n *\n * On timeout the underlying `exec` promise may keep running in the DO (a\n * native-DO exec cannot be truly cancelled), so its late settlement is swallowed\n * to avoid an unhandled rejection.\n */\nexport async function withClientTimeout<T>(\n  exec: Promise<T>,\n  timeoutMs: number,\n  label: string,\n  options: {\n    /**\n     * Detach the backstop timer from the event loop. Use ONLY when something else\n     * already settles the caller (e.g. the spawn path, where spawnLocalProcess's\n     * own timer resolves the child). The awaited direct-exec paths must leave it\n     * REF'd so the timeout is guaranteed to fire even if nothing else is pending.\n     */\n    unref?: boolean;\n    /** Invoked when the client timeout fires — e.g. abort a signal-aware exec. */\n    onTimeout?: () => void;\n  } = {}\n): Promise<T> {\n  if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) {\n    return exec;\n  }\n  // Swallow a late rejection from the losing promise after the race settles.\n  exec.catch(() => undefined);\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  try {\n    return await Promise.race([\n      exec,\n      new Promise<never>((_resolve, reject) => {\n        timer = setTimeout(() => {\n          // Reject FIRST so this client-timeout message reliably wins the race;\n          // only then abort a signal-aware exec, whose resulting AbortError must\n          // not surface to the caller instead of the timeout.\n          reject(\n            new WorkspaceClientTimeoutError(\n              `${label} exceeded ${timeoutMs}ms client-side timeout (sandbox RPC did not return)`\n            )\n          );\n          options.onTimeout?.();\n        }, timeoutMs);\n        if (options.unref === true) {\n          (timer as { unref?: () => void } | undefined)?.unref?.();\n        }\n      }),\n    ]);\n  } finally {\n    if (timer !== undefined) {\n      clearTimeout(timer);\n    }\n  }\n}\n\n/**\n * Run `sandbox.exec()` bounded by a client-side timeout, and — for signal-aware\n * transports (e.g. the HTTP bridge, `supportsExecSignal === true`) — abort the\n * underlying exec when the timeout fires instead of merely abandoning it. The\n * native DO transport ignores `signal`, so it only gets the timeout. Leaves the\n * backstop timer ref'd (this is an awaited direct-exec path).\n */\nexport async function execWithClientTimeout(\n  sandbox: t.CloudflareSandboxRuntime,\n  command: string,\n  options: t.CloudflareSandboxExecOptions,\n  timeoutMs: number,\n  label: string,\n  runOptions: { unref?: boolean } = {}\n): Promise<t.CloudflareSandboxExecResult> {\n  const controller = new AbortController();\n  const execOptions: t.CloudflareSandboxExecOptions = { ...options };\n  const callerSignal = options.signal;\n  let onCallerAbort: (() => void) | undefined;\n  if (sandbox.supportsExecSignal === true) {\n    // Compose the caller's signal (e.g. run/user cancellation) with our timeout\n    // controller so EITHER source cancels the exec — don't clobber the caller's.\n    if (callerSignal != null) {\n      if (callerSignal.aborted) {\n        controller.abort();\n      } else {\n        onCallerAbort = (): void => controller.abort();\n        callerSignal.addEventListener('abort', onCallerAbort, { once: true });\n      }\n    }\n    execOptions.signal = controller.signal;\n  } else if ('signal' in execOptions) {\n    // Native DO RPC cannot consume an AbortSignal (and would fail to clone it).\n    // Strip any caller-provided one so the spread above can't reintroduce it.\n    delete execOptions.signal;\n  }\n  try {\n    return await withClientTimeout(\n      sandbox.exec(command, execOptions),\n      timeoutMs,\n      label,\n      {\n        unref: runOptions.unref,\n        onTimeout: () => controller.abort(),\n      }\n    );\n  } finally {\n    // Don't leave a listener attached to a long-lived/shared caller signal.\n    if (onCallerAbort != null && callerSignal != null) {\n      callerSignal.removeEventListener('abort', onCallerAbort);\n    }\n  }\n}\n\nfunction truncateOutput(value: string, maxChars: number): string {\n  if (maxChars <= 0 || value.length <= maxChars) {\n    return value;\n  }\n  const head = Math.max(Math.floor(maxChars / 2), 0);\n  const tail = Math.max(maxChars - head, 0);\n  return `${value.slice(0, head)}\\n...[truncated ${value.length - maxChars} chars]...\\n${value.slice(value.length - tail)}`;\n}\n\nasync function readStream(stream: ReadableStream<Uint8Array>): Promise<Buffer> {\n  const reader = stream.getReader();\n  const chunks: Uint8Array[] = [];\n  try {\n    for (;;) {\n      const { done, value } = await reader.read();\n      if (done) break;\n      chunks.push(value);\n    }\n  } finally {\n    reader.releaseLock();\n  }\n  return Buffer.concat(chunks.map((chunk) => Buffer.from(chunk)));\n}\n\nasync function normalizeReadFileContent(\n  result: t.CloudflareSandboxReadFileResult\n): Promise<Buffer> {\n  if (typeof result === 'string') {\n    return Buffer.from(result, 'utf8');\n  }\n  if (Buffer.isBuffer(result)) {\n    return result;\n  }\n  if (result instanceof Uint8Array) {\n    return Buffer.from(result);\n  }\n  const content = result.content;\n  if (typeof content === 'string') {\n    if (result.encoding === 'base64') {\n      return Buffer.from(content, 'base64');\n    }\n    return Buffer.from(content, 'utf8');\n  }\n  if (Buffer.isBuffer(content)) {\n    return content;\n  }\n  if (content instanceof Uint8Array) {\n    return Buffer.from(content);\n  }\n  return readStream(content);\n}\n\nfunction bytesToStream(bytes: Uint8Array): ReadableStream<Uint8Array> {\n  return new ReadableStream<Uint8Array>({\n    start(controller): void {\n      controller.enqueue(bytes);\n      controller.close();\n    },\n  });\n}\n\nfunction normalizeWriteFileContent(content: string | Buffer | Uint8Array): {\n  content: string | ReadableStream<Uint8Array>;\n  options?: { encoding?: string };\n} {\n  if (typeof content === 'string') {\n    return { content, options: { encoding: 'utf8' } };\n  }\n  return { content: bytesToStream(content) };\n}\n\nfunction createStats(info: {\n  size?: number;\n  type?: t.CloudflareSandboxFileInfo['type'];\n}): Stats {\n  const type = info.type ?? 'file';\n  const now = new Date();\n  return {\n    size: info.size ?? 0,\n    isFile: () => type === 'file',\n    isDirectory: () => type === 'directory',\n    isSymbolicLink: () => type === 'symlink',\n    isBlockDevice: () => false,\n    isCharacterDevice: () => false,\n    isFIFO: () => false,\n    isSocket: () => false,\n    dev: 0,\n    ino: 0,\n    mode: 0,\n    nlink: 1,\n    uid: 0,\n    gid: 0,\n    rdev: 0,\n    blksize: 0,\n    blocks: 0,\n    atimeMs: now.getTime(),\n    mtimeMs: now.getTime(),\n    ctimeMs: now.getTime(),\n    birthtimeMs: now.getTime(),\n    atime: now,\n    mtime: now,\n    ctime: now,\n    birthtime: now,\n  } as Stats;\n}\n\nfunction normalizeFileList(\n  result: t.CloudflareSandboxListFilesResult\n): t.CloudflareSandboxFileInfo[] {\n  return Array.isArray(result) ? result : result.files;\n}\n\nfunction entryNameFor(\n  info: t.CloudflareSandboxFileInfo,\n  parentPath: string\n): string {\n  if (info.name !== '') {\n    return info.name.includes('/') ? path.basename(info.name) : info.name;\n  }\n  if (info.absolutePath != null && info.absolutePath !== '') {\n    return path.basename(info.absolutePath);\n  }\n  if (info.relativePath != null && info.relativePath !== '') {\n    return path.basename(info.relativePath);\n  }\n  return path.basename(parentPath);\n}\n\nfunction entryAbsolutePath(\n  info: t.CloudflareSandboxFileInfo,\n  parentPath: string\n): string {\n  if (info.absolutePath != null && info.absolutePath !== '') {\n    return path.normalize(info.absolutePath);\n  }\n  if (info.relativePath != null && info.relativePath !== '') {\n    return path.resolve(parentPath, info.relativePath);\n  }\n  return path.resolve(parentPath, info.name);\n}\n\nfunction createDirent(info: t.CloudflareSandboxFileInfo): ReaddirEntry {\n  return {\n    name: entryNameFor(info, ''),\n    isFile: () => (info.type ?? 'file') === 'file',\n    isDirectory: () => info.type === 'directory',\n    isSymbolicLink: () => info.type === 'symlink',\n  };\n}\n\nasync function findChildInfo(\n  sandbox: t.CloudflareSandboxRuntime,\n  filePath: string,\n  timeoutMs: number\n): Promise<t.CloudflareSandboxFileInfo | undefined> {\n  const parent = path.dirname(filePath);\n  const basename = path.basename(filePath);\n  const entries = normalizeFileList(\n    await withClientTimeout(\n      sandbox.listFiles(parent, { includeHidden: true }),\n      timeoutMs,\n      'cloudflare sandbox listFiles'\n    )\n  );\n  return entries.find((entry) => {\n    const absolute = entryAbsolutePath(entry, parent);\n    return absolute === filePath || entryNameFor(entry, parent) === basename;\n  });\n}\n\nexport function createCloudflareWorkspaceFS(\n  config: t.CloudflareSandboxExecutionConfig\n): WorkspaceFS {\n  const workspaceRoot = getCloudflareWorkspaceRoot(config);\n  // Native-DO file-IO RPCs have the SAME stall hazard as exec() (PR #252): no\n  // `signal`, no reliably-enforced timeout, so a cold/unresponsive container\n  // hangs the host await until the run-level abort — burning the whole budget on\n  // one read (observed: a `read_file` that stalled ~552s before the wall-clock\n  // budget killed it). Bound every native FS RPC with the same client-side\n  // backstop the exec sites use.\n  const fsTimeoutMs = clientFsTimeoutMs(config.timeoutMs ?? DEFAULT_TIMEOUT_MS);\n  const bound = <T>(op: Promise<T>, label: string): Promise<T> =>\n    withClientTimeout(op, fsTimeoutMs, `cloudflare sandbox ${label}`);\n\n  const fs: WorkspaceFS = {\n    readFile: (async (filePath: string, encoding?: 'utf8') => {\n      const sandbox = await resolveCloudflareSandbox(config);\n      const resolved = toSandboxPath(filePath, workspaceRoot);\n      // Wrap the stream drain (normalizeReadFileContent) inside the backstop too:\n      // a sandbox.readFile that resolves to a { content: ReadableStream } can\n      // still stall mid-drain after the RPC promise settled.\n      const buffer = await bound(\n        (async (): Promise<Buffer> =>\n          normalizeReadFileContent(\n            await sandbox.readFile(resolved, encoding ? { encoding } : undefined)\n          ))(),\n        'readFile'\n      );\n      return encoding != null ? buffer.toString(encoding) : buffer;\n    }) as WorkspaceFS['readFile'],\n    writeFile: async (\n      filePath: string,\n      content: string | Buffer,\n      _options?: WriteFileOptions\n    ) => {\n      const sandbox = await resolveCloudflareSandbox(config);\n      const resolved = toSandboxPath(filePath, workspaceRoot);\n      const normalized = normalizeWriteFileContent(content);\n      await bound(\n        sandbox.writeFile(resolved, normalized.content, normalized.options),\n        'writeFile'\n      );\n    },\n    stat: async (filePath: string) => {\n      const sandbox = await resolveCloudflareSandbox(config);\n      const resolved = toSandboxPath(filePath, workspaceRoot);\n      if (resolved === workspaceRoot) {\n        const entries = normalizeFileList(\n          await bound(\n            sandbox.listFiles(resolved, { includeHidden: true }),\n            'listFiles'\n          )\n        );\n        return createStats({ size: entries.length, type: 'directory' });\n      }\n      const info = await findChildInfo(sandbox, resolved, fsTimeoutMs);\n      if (info != null) {\n        return createStats({ size: info.size, type: info.type });\n      }\n      try {\n        const entries = normalizeFileList(\n          await bound(\n            sandbox.listFiles(resolved, { includeHidden: true }),\n            'listFiles'\n          )\n        );\n        return createStats({ size: entries.length, type: 'directory' });\n      } catch (error) {\n        // A directory-probe timeout is a stalled container, not \"not a directory\".\n        // Don't fall through to the readFile branch — that would wait through a\n        // SECOND full backstop (~2x the timeout) before surfacing.\n        if (isWorkspaceClientTimeoutError(error)) {\n          throw error;\n        }\n        const buffer = await bound(\n          (async (): Promise<Buffer> =>\n            normalizeReadFileContent(await sandbox.readFile(resolved)))(),\n          'readFile'\n        );\n        return createStats({ size: buffer.length, type: 'file' });\n      }\n    },\n    readdir: (async (filePath: string, options?: { withFileTypes: true }) => {\n      const sandbox = await resolveCloudflareSandbox(config);\n      const resolved = toSandboxPath(filePath, workspaceRoot);\n      const entries = normalizeFileList(\n        await bound(\n          sandbox.listFiles(resolved, { includeHidden: true }),\n          'listFiles'\n        )\n      );\n      if (options?.withFileTypes === true) {\n        return entries.map(createDirent);\n      }\n      return entries.map((entry) => entryNameFor(entry, resolved));\n    }) as WorkspaceFS['readdir'],\n    mkdir: async (filePath: string, options?: MakeDirectoryOptions) => {\n      const sandbox = await resolveCloudflareSandbox(config);\n      await bound(\n        sandbox.mkdir(toSandboxPath(filePath, workspaceRoot), {\n          recursive: options?.recursive,\n        }),\n        'mkdir'\n      );\n    },\n    realpath: async (filePath: string) =>\n      toSandboxPath(filePath, workspaceRoot),\n    unlink: async (filePath: string) => {\n      const sandbox = await resolveCloudflareSandbox(config);\n      await bound(\n        sandbox.deleteFile(toSandboxPath(filePath, workspaceRoot)),\n        'deleteFile'\n      );\n    },\n    open: async (filePath: string, _flags: 'r') => {\n      const sandbox = await resolveCloudflareSandbox(config);\n      const resolved = toSandboxPath(filePath, workspaceRoot);\n      const buffer = await bound(\n        (async (): Promise<Buffer> =>\n          normalizeReadFileContent(await sandbox.readFile(resolved)))(),\n        'readFile'\n      );\n      return {\n        read: async (\n          target: Buffer,\n          offset: number,\n          length: number,\n          position: number\n        ) => {\n          const start = Math.max(position, 0);\n          const slice = buffer.subarray(start, start + length);\n          slice.copy(target, offset);\n          return { bytesRead: slice.length, buffer: target };\n        },\n        close: async () => undefined,\n      } as unknown as FileHandle;\n    },\n  };\n\n  return fs;\n}\n\nfunction createCloudflareSpawn(\n  config: t.CloudflareSandboxExecutionConfig\n): t.LocalSpawn {\n  return (command, args, options) => {\n    const stdout = new PassThrough();\n    const stderr = new PassThrough();\n    const child = new EventEmitter() as ChildProcessWithoutNullStreams;\n    const abortController = new AbortController();\n    const state = { closed: false };\n    /** Read through a function so concurrent `closeOnce` mutation (via\n     * `kill()`/abort during an `await`) isn't statically narrowed away. */\n    const isClosed = (): boolean => state.closed;\n    const closeOnce = (\n      exitCode: number | null,\n      signal: NodeJS.Signals | null\n    ): void => {\n      if (state.closed) {\n        return;\n      }\n      state.closed = true;\n      stdout.end();\n      stderr.end();\n      Object.assign(child, {\n        exitCode,\n        signalCode: signal,\n      });\n      child.emit('close', exitCode, signal);\n    };\n    Object.assign(child, {\n      stdout,\n      stderr,\n      stdin: new PassThrough(),\n      stdio: [null, stdout, stderr],\n      killed: false,\n      exitCode: null,\n      signalCode: null,\n      pid: undefined,\n      kill: (signal: NodeJS.Signals = 'SIGTERM') => {\n        Object.assign(child, { killed: true, signalCode: signal });\n        abortController.abort();\n        closeOnce(null, signal);\n        return true;\n      },\n    });\n\n    void (async (): Promise<void> => {\n      const ctx = await getRuntimeContext(config);\n      const rendered = [command, ...args].map(quote).join(' ');\n      const spawnTimeoutMs = (\n        options as {\n          [LOCAL_SPAWN_TIMEOUT_MS]?: number;\n        }\n      )[LOCAL_SPAWN_TIMEOUT_MS];\n      const timeoutMs =\n        typeof spawnTimeoutMs === 'number' && Number.isFinite(spawnTimeoutMs)\n          ? spawnTimeoutMs\n          : ctx.timeoutMs;\n      const timedCommand = withInSandboxTimeout(rendered, timeoutMs);\n      const cwd =\n        options.cwd == null ? ctx.workspaceRoot : options.cwd.toString();\n      if (isClosed()) {\n        return;\n      }\n      const execOptions: t.CloudflareSandboxExecOptions = {\n        cwd,\n        env: ctx.env,\n        timeout: outerTimeoutMs(timeoutMs),\n      };\n      if (ctx.sandbox.supportsExecSignal === true) {\n        execOptions.signal = abortController.signal;\n      }\n      try {\n        const result = await withClientTimeout(\n          ctx.sandbox.exec(timedCommand, execOptions),\n          clientExecTimeoutMs(timeoutMs),\n          'cloudflare sandbox exec',\n          // spawnLocalProcess's own timer already resolves the child, so this\n          // backstop may safely detach; abort the (signal-aware) exec on timeout.\n          { unref: true, onTimeout: () => abortController.abort() }\n        );\n        if (isClosed()) {\n          return;\n        }\n        if (result.stdout) stdout.write(result.stdout);\n        if (result.stderr) stderr.write(result.stderr);\n        closeOnce(result.exitCode, null);\n      } catch (error) {\n        if (isClosed()) {\n          return;\n        }\n        stderr.write((error as Error).message);\n        closeOnce(1, null);\n      }\n    })();\n\n    return child;\n  };\n}\n\nexport function createCloudflareLocalExecutionConfig(\n  config: t.CloudflareSandboxExecutionConfig\n): t.LocalExecutionConfig {\n  const workspaceRoot = getCloudflareWorkspaceRoot(config);\n  return {\n    cwd: workspaceRoot,\n    workspace: { root: workspaceRoot },\n    exec: {\n      spawn: createCloudflareSpawn(config),\n      fs: createCloudflareWorkspaceFS(config),\n      sandboxed: true,\n    },\n    shell: config.shell ?? 'bash',\n    timeoutMs: config.timeoutMs,\n    maxOutputChars: config.maxOutputChars,\n    env: config.env,\n    includeCodingTools: config.includeCodingTools,\n    compileCheck: config.compileCheck,\n    readOnly: config.readOnly,\n    allowDangerousCommands: config.allowDangerousCommands,\n    bashAst: config.bashAst,\n    fileCheckpointing: config.fileCheckpointing,\n    maxReadBytes: config.maxReadBytes,\n    attachReadAttachments: config.attachReadAttachments,\n    maxAttachmentBytes: config.maxAttachmentBytes,\n    postEditSyntaxCheck: config.postEditSyntaxCheck,\n  };\n}\n\nexport async function validateCloudflareBashCommand(\n  command: string,\n  args: readonly string[],\n  config: t.CloudflareSandboxExecutionConfig\n): Promise<void> {\n  const localConfig = createCloudflareLocalExecutionConfig(config);\n  const validation = await validateBashCommand(command, localConfig);\n  if (!validation.valid) {\n    throw new Error(validation.errors.join('\\n'));\n  }\n\n  if (\n    args.length > 0 &&\n    config.allowDangerousCommands !== true &&\n    DESTRUCTIVE_OP_IN_COMMAND_RE.test(command)\n  ) {\n    const offending = args.find((arg) => PROTECTED_TARGET_ARG_RE.test(arg));\n    if (offending !== undefined) {\n      throw new Error(\n        `Command matches a destructive command pattern (protected target \"${offending}\" passed via positional arg).`\n      );\n    }\n  }\n}\n\nexport async function executeCloudflareBash(\n  command: string,\n  config: t.CloudflareSandboxExecutionConfig,\n  args: readonly string[] = []\n): Promise<SpawnResult> {\n  await validateCloudflareBashCommand(command, args, config);\n  const ctx = await getRuntimeContext(config);\n  const shellCommand =\n    args.length > 0\n      ? `${ctx.shell} -lc ${quote(command)} -- ${args.map(quote).join(' ')}`\n      : `${ctx.shell} -lc ${quote(command)}`;\n  const result = await execWithClientTimeout(\n    ctx.sandbox,\n    withInSandboxTimeout(shellCommand, ctx.timeoutMs),\n    {\n      cwd: ctx.workspaceRoot,\n      env: ctx.env,\n      timeout: outerTimeoutMs(ctx.timeoutMs),\n    },\n    clientExecTimeoutMs(ctx.timeoutMs),\n    'cloudflare sandbox bash exec'\n  );\n  return {\n    stdout: truncateOutput(result.stdout, ctx.maxOutputChars),\n    stderr: truncateOutput(result.stderr, ctx.maxOutputChars),\n    exitCode: result.exitCode,\n    timedOut: isInSandboxTimeoutExit(result.exitCode),\n  };\n}\n\nfunction runtimeForCode(\n  lang: string,\n  tempDir: string,\n  code: string,\n  args: string[] = [],\n  shell = 'bash'\n): RuntimeCommand {\n  const fileFor = (name: string): string => path.join(tempDir, name);\n  const argText = args.map(quote).join(' ');\n  switch (lang) {\n  case 'py':\n  case 'python':\n    return {\n      fileName: 'main.py',\n      source: code,\n      command: `python3 ${quote(fileFor('main.py'))} ${argText}`,\n    };\n  case 'js':\n  case 'javascript':\n    return {\n      fileName: 'main.js',\n      source: code,\n      command: `node ${quote(fileFor('main.js'))} ${argText}`,\n    };\n  case 'ts':\n  case 'typescript':\n    return {\n      fileName: 'main.ts',\n      source: code,\n      command: `npx --no-install tsx ${quote(fileFor('main.ts'))} ${argText}`,\n    };\n  case 'php':\n    return {\n      fileName: 'main.php',\n      source: code,\n      command: `php ${quote(fileFor('main.php'))} ${argText}`,\n    };\n  case 'go':\n    return {\n      fileName: 'main.go',\n      source: code,\n      command: `go run ${quote(fileFor('main.go'))} ${argText}`,\n    };\n  case 'rs':\n    return {\n      fileName: 'main.rs',\n      source: code,\n      command: `${shell} -lc ${quote(\n        `rustc ${quote(fileFor('main.rs'))} -o ${quote(fileFor('main-rs'))} && ${quote(fileFor('main-rs'))} ${argText}`\n      )}`,\n    };\n  case 'c':\n    return {\n      fileName: 'main.c',\n      source: code,\n      command: `${shell} -lc ${quote(\n        `cc ${quote(fileFor('main.c'))} -o ${quote(fileFor('main-c'))} && ${quote(fileFor('main-c'))} ${argText}`\n      )}`,\n    };\n  case 'cpp':\n    return {\n      fileName: 'main.cpp',\n      source: code,\n      command: `${shell} -lc ${quote(\n        `c++ ${quote(fileFor('main.cpp'))} -o ${quote(fileFor('main-cpp'))} && ${quote(fileFor('main-cpp'))} ${argText}`\n      )}`,\n    };\n  case 'java':\n    return {\n      fileName: 'Main.java',\n      source: code,\n      command: `${shell} -lc ${quote(\n        `javac ${quote(fileFor('Main.java'))} && java -cp ${quote(tempDir)} Main ${argText}`\n      )}`,\n    };\n  case 'r':\n    return {\n      fileName: 'main.R',\n      source: code,\n      command: `Rscript ${quote(fileFor('main.R'))} ${argText}`,\n    };\n  case 'd':\n    return {\n      fileName: 'main.d',\n      source: code,\n      command: `${shell} -lc ${quote(\n        `dmd ${quote(fileFor('main.d'))} -of=${quote(fileFor('main-d'))} && ${quote(fileFor('main-d'))} ${argText}`\n      )}`,\n    };\n  case 'f90':\n    return {\n      fileName: 'main.f90',\n      source: code,\n      command: `${shell} -lc ${quote(\n        `gfortran ${quote(fileFor('main.f90'))} -o ${quote(fileFor('main-f90'))} && ${quote(fileFor('main-f90'))} ${argText}`\n      )}`,\n    };\n  case 'bash':\n  case 'sh':\n    return {\n      fileName: 'main.sh',\n      source: code,\n      command: `${shell} -lc ${quote(code)} -- ${argText}`,\n    };\n  default:\n    throw new Error(`Unsupported Cloudflare sandbox runtime: ${lang}`);\n  }\n}\n\nexport async function executeCloudflareCode(\n  input: { lang: string; code: string; args?: string[] },\n  config: t.CloudflareSandboxExecutionConfig\n): Promise<SpawnResult> {\n  if (input.lang === 'bash' || input.lang === 'sh') {\n    return executeCloudflareBash(input.code, config, input.args ?? []);\n  }\n  const ctx = await getRuntimeContext(config);\n  const id = globalThis.crypto.randomUUID();\n  const tempDir = path.join(ctx.workspaceRoot, '.lc-exec', id);\n  const runtime = runtimeForCode(\n    input.lang,\n    tempDir,\n    input.code,\n    input.args,\n    ctx.shell\n  );\n  let execSucceeded = false;\n  try {\n    // Bound the temp-dir setup RPCs (they run BEFORE the bounded exec): a\n    // native-DO stall here would hang the host on a single mkdir/writeFile and\n    // burn the run budget. Keep them INSIDE the try so the finally cleanup still\n    // removes .lc-exec/<uuid> if setup throws — the uncancellable write can land\n    // late on a cold container, so an orphaned dir would otherwise accumulate.\n    await withClientTimeout(\n      ctx.sandbox.mkdir(tempDir, { recursive: true }),\n      clientFsTimeoutMs(ctx.timeoutMs),\n      'cloudflare sandbox mkdir'\n    );\n    if (runtime.source != null) {\n      await withClientTimeout(\n        ctx.sandbox.writeFile(\n          path.join(tempDir, runtime.fileName),\n          runtime.source,\n          { encoding: 'utf8' }\n        ),\n        clientFsTimeoutMs(ctx.timeoutMs),\n        'cloudflare sandbox writeFile'\n      );\n    }\n    const result = await execWithClientTimeout(\n      ctx.sandbox,\n      withInSandboxTimeout(runtime.command, ctx.timeoutMs),\n      {\n        cwd: ctx.workspaceRoot,\n        env: ctx.env,\n        timeout: outerTimeoutMs(ctx.timeoutMs),\n      },\n      clientExecTimeoutMs(ctx.timeoutMs),\n      'cloudflare sandbox code-exec'\n    );\n    execSucceeded = true;\n    return {\n      stdout: truncateOutput(result.stdout, ctx.maxOutputChars),\n      stderr: truncateOutput(result.stderr, ctx.maxOutputChars),\n      exitCode: result.exitCode,\n      timedOut: isInSandboxTimeoutExit(result.exitCode),\n    };\n  } finally {\n    // After a normal run, AWAIT cleanup so the temp dir is gone before returning.\n    // After a stalled/failed run, detach it (unref'd) so we don't pile a second\n    // client timeout onto the caller's latency; cleanup still runs best-effort.\n    const detach = !execSucceeded;\n    const cleanup = execWithClientTimeout(\n      ctx.sandbox,\n      `rm -rf ${quote(tempDir)}`,\n      {\n        cwd: ctx.workspaceRoot,\n        env: ctx.env,\n        timeout: 10000,\n      },\n      clientExecTimeoutMs(10000),\n      'cloudflare sandbox cleanup',\n      { unref: detach }\n    ).catch(() => undefined);\n    if (!detach) {\n      await cleanup;\n    }\n  }\n}\n\nexport function formatCloudflareOutput(\n  result: SpawnResult,\n  cwd: string\n): string {\n  let formatted = '';\n  if (result.stdout !== '') {\n    formatted += `stdout:\\n${result.stdout}\\n`;\n  } else {\n    formatted += 'stdout: Empty. Ensure you\\'re writing output explicitly.\\n';\n  }\n  if (result.stderr !== '') {\n    formatted += `stderr:\\n${result.stderr}\\n`;\n  }\n  if (result.exitCode != null && result.exitCode !== 0) {\n    formatted += `exit_code: ${result.exitCode}\\n`;\n  }\n  if (result.timedOut) {\n    formatted += 'timed_out: true\\n';\n  }\n  formatted += `working_directory: ${cwd}`;\n  return formatted.trim();\n}\n"],"mappings":";;;;;;AAiBA,MAAM,yBAAyB;AAC/B,MAAM,qBAAqB;AAC3B,MAAM,2BAA2B;AACjC,MAAM,0BAA0B;AAChC,MAAM,+BACJ;AAwBF,MAAM,sCAAsB,IAAI,QAG9B;AAEF,SAAS,uBAAuB,eAA+B;CAC7D,MAAM,aAAa,KAAA,MAAK,UAAU,aAAa;CAC/C,OAAO,eAAe,MAAM,aAAa,WAAW,QAAQ,QAAQ,EAAE;AACxE;AAEA,SAAgB,2BACd,QACQ;CACR,OAAO,uBACL,QAAQ,iBAAiB,sBAC3B;AACF;AAEA,eAAsB,yBACpB,QACqC;CACrC,MAAM,UAAU,OAAO;CACvB,IAAI,OAAO,YAAY,YACrB,OAAO;CAET,IAAI,SAAS,oBAAoB,IAAI,MAAM;CAC3C,IAAI,UAAU,MAAM;EAClB,SAAS,QAAQ,QAAQ,CAAC,CACvB,WAAW,QAAQ,CAAC,CAAC,CACrB,OAAO,UAAmB;GACzB,oBAAoB,OAAO,MAAM;GACjC,MAAM;EACR,CAAC;EACH,oBAAoB,IAAI,QAAQ,MAAM;CACxC;CACA,OAAO;AACT;AAEA,eAAe,kBACb,QACgC;CAChC,OAAO;EACL,SAAS,MAAM,yBAAyB,MAAM;EAC9C,eAAe,2BAA2B,MAAM;EAChD,KAAK,OAAO;EACZ,WAAW,OAAO,aAAa;EAC/B,gBAAgB,OAAO,kBAAkB;EACzC,OAAO,OAAO,SAAS;CACzB;AACF;AAEA,SAAS,cAAc,UAAkB,eAA+B;CACtE,MAAM,MAAM,aAAa,KAAK,MAAM;CACpC,MAAM,OAAO,uBAAuB,aAAa;CACjD,MAAM,WAAW,IAAI,WAAW,GAAG,IAC/B,KAAA,MAAK,UAAU,GAAG,IAClB,KAAA,MAAK,QAAQ,MAAM,GAAG;CAC1B,IAAI,SAAS,KACX,OAAO;CAET,IAAI,aAAa,QAAQ,SAAS,WAAW,GAAG,KAAK,EAAE,GACrD,OAAO;CAET,MAAM,IAAI,MACR,qDAAqD,UACvD;AACF;AAEA,SAAS,MAAM,OAAuB;CACpC,IAAI,UAAU,IACZ,OAAO;CAET,IAAI,2BAA2B,KAAK,KAAK,GACvC,OAAO;CAET,OAAO,IAAI,MAAM,QAAQ,MAAM,OAAU,EAAE;AAC7C;AAEA,SAAS,qBAAqB,SAAiB,WAA2B;CAExE,OAAO,iBADgB,KAAK,IAAI,GAAG,KAAK,KAAK,YAAY,GAAI,CACxB,EAAE,IAAI;AAC7C;AAEA,SAAS,eAAe,WAA2B;CACjD,OAAO,YAAY;AACrB;AAEA,SAAS,uBAAuB,UAAkC;CAChE,OAAO,aAAa,OAAO,aAAa;AAC1C;;;;;;AAOA,SAAgB,oBAAoB,WAA2B;CAC7D,OAAO,eAAe,SAAS,IAAI;AACrC;;;;;;;;;AAUA,SAAgB,kBAAkB,WAA2B;CAC3D,OAAO,YAAY;AACrB;;;;;;;;;;;;;;;;;;AAmBA,eAAsB,kBACpB,MACA,WACA,OACA,UAUI,CAAC,GACO;CACZ,IAAI,CAAC,OAAO,SAAS,SAAS,KAAK,aAAa,GAC9C,OAAO;CAGT,KAAK,YAAY,KAAA,CAAS;CAC1B,IAAI;CACJ,IAAI;EACF,OAAO,MAAM,QAAQ,KAAK,CACxB,MACA,IAAI,SAAgB,UAAU,WAAW;GACvC,QAAQ,iBAAiB;IAIvB,OACE,IAAIA,oBAAAA,4BACF,GAAG,MAAM,YAAY,UAAU,oDACjC,CACF;IACA,QAAQ,YAAY;GACtB,GAAG,SAAS;GACZ,IAAI,QAAQ,UAAU,MACpB,OAA+C,QAAQ;EAE3D,CAAC,CACH,CAAC;CACH,UAAU;EACR,IAAI,UAAU,KAAA,GACZ,aAAa,KAAK;CAEtB;AACF;;;;;;;;AASA,eAAsB,sBACpB,SACA,SACA,SACA,WACA,OACA,aAAkC,CAAC,GACK;CACxC,MAAM,aAAa,IAAI,gBAAgB;CACvC,MAAM,cAA8C,EAAE,GAAG,QAAQ;CACjE,MAAM,eAAe,QAAQ;CAC7B,IAAI;CACJ,IAAI,QAAQ,uBAAuB,MAAM;EAGvC,IAAI,gBAAgB,MAClB,IAAI,aAAa,SACf,WAAW,MAAM;OACZ;GACL,sBAA4B,WAAW,MAAM;GAC7C,aAAa,iBAAiB,SAAS,eAAe,EAAE,MAAM,KAAK,CAAC;EACtE;EAEF,YAAY,SAAS,WAAW;CAClC,OAAO,IAAI,YAAY,aAGrB,OAAO,YAAY;CAErB,IAAI;EACF,OAAO,MAAM,kBACX,QAAQ,KAAK,SAAS,WAAW,GACjC,WACA,OACA;GACE,OAAO,WAAW;GAClB,iBAAiB,WAAW,MAAM;EACpC,CACF;CACF,UAAU;EAER,IAAI,iBAAiB,QAAQ,gBAAgB,MAC3C,aAAa,oBAAoB,SAAS,aAAa;CAE3D;AACF;AAEA,SAAS,eAAe,OAAe,UAA0B;CAC/D,IAAI,YAAY,KAAK,MAAM,UAAU,UACnC,OAAO;CAET,MAAM,OAAO,KAAK,IAAI,KAAK,MAAM,WAAW,CAAC,GAAG,CAAC;CACjD,MAAM,OAAO,KAAK,IAAI,WAAW,MAAM,CAAC;CACxC,OAAO,GAAG,MAAM,MAAM,GAAG,IAAI,EAAE,kBAAkB,MAAM,SAAS,SAAS,cAAc,MAAM,MAAM,MAAM,SAAS,IAAI;AACxH;AAEA,eAAe,WAAW,UAAqD;CAC7E,MAAM,SAASC,SAAO,UAAU;CAChC,MAAM,SAAuB,CAAC;CAC9B,IAAI;EACF,SAAS;GACP,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;GAC1C,IAAI,MAAM;GACV,OAAO,KAAK,KAAK;EACnB;CACF,UAAU;EACR,OAAO,YAAY;CACrB;CACA,OAAO,OAAO,OAAO,OAAO,KAAK,UAAU,OAAO,KAAK,KAAK,CAAC,CAAC;AAChE;AAEA,eAAe,yBACb,QACiB;CACjB,IAAI,OAAO,WAAW,UACpB,OAAO,OAAO,KAAK,QAAQ,MAAM;CAEnC,IAAI,OAAO,SAAS,MAAM,GACxB,OAAO;CAET,IAAI,kBAAkB,YACpB,OAAO,OAAO,KAAK,MAAM;CAE3B,MAAM,UAAU,OAAO;CACvB,IAAI,OAAO,YAAY,UAAU;EAC/B,IAAI,OAAO,aAAa,UACtB,OAAO,OAAO,KAAK,SAAS,QAAQ;EAEtC,OAAO,OAAO,KAAK,SAAS,MAAM;CACpC;CACA,IAAI,OAAO,SAAS,OAAO,GACzB,OAAO;CAET,IAAI,mBAAmB,YACrB,OAAO,OAAO,KAAK,OAAO;CAE5B,OAAO,WAAW,OAAO;AAC3B;AAEA,SAAS,cAAc,OAA+C;CACpE,OAAO,IAAI,eAA2B,EACpC,MAAM,YAAkB;EACtB,WAAW,QAAQ,KAAK;EACxB,WAAW,MAAM;CACnB,EACF,CAAC;AACH;AAEA,SAAS,0BAA0B,SAGjC;CACA,IAAI,OAAO,YAAY,UACrB,OAAO;EAAE;EAAS,SAAS,EAAE,UAAU,OAAO;CAAE;CAElD,OAAO,EAAE,SAAS,cAAc,OAAO,EAAE;AAC3C;AAEA,SAAS,YAAY,MAGX;CACR,MAAM,OAAO,KAAK,QAAQ;CAC1B,MAAM,sBAAM,IAAI,KAAK;CACrB,OAAO;EACL,MAAM,KAAK,QAAQ;EACnB,cAAc,SAAS;EACvB,mBAAmB,SAAS;EAC5B,sBAAsB,SAAS;EAC/B,qBAAqB;EACrB,yBAAyB;EACzB,cAAc;EACd,gBAAgB;EAChB,KAAK;EACL,KAAK;EACL,MAAM;EACN,OAAO;EACP,KAAK;EACL,KAAK;EACL,MAAM;EACN,SAAS;EACT,QAAQ;EACR,SAAS,IAAI,QAAQ;EACrB,SAAS,IAAI,QAAQ;EACrB,SAAS,IAAI,QAAQ;EACrB,aAAa,IAAI,QAAQ;EACzB,OAAO;EACP,OAAO;EACP,OAAO;EACP,WAAW;CACb;AACF;AAEA,SAAS,kBACP,QAC+B;CAC/B,OAAO,MAAM,QAAQ,MAAM,IAAI,SAAS,OAAO;AACjD;AAEA,SAAS,aACP,MACA,YACQ;CACR,IAAI,KAAK,SAAS,IAChB,OAAO,KAAK,KAAK,SAAS,GAAG,IAAI,KAAA,MAAK,SAAS,KAAK,IAAI,IAAI,KAAK;CAEnE,IAAI,KAAK,gBAAgB,QAAQ,KAAK,iBAAiB,IACrD,OAAO,KAAA,MAAK,SAAS,KAAK,YAAY;CAExC,IAAI,KAAK,gBAAgB,QAAQ,KAAK,iBAAiB,IACrD,OAAO,KAAA,MAAK,SAAS,KAAK,YAAY;CAExC,OAAO,KAAA,MAAK,SAAS,UAAU;AACjC;AAEA,SAAS,kBACP,MACA,YACQ;CACR,IAAI,KAAK,gBAAgB,QAAQ,KAAK,iBAAiB,IACrD,OAAO,KAAA,MAAK,UAAU,KAAK,YAAY;CAEzC,IAAI,KAAK,gBAAgB,QAAQ,KAAK,iBAAiB,IACrD,OAAO,KAAA,MAAK,QAAQ,YAAY,KAAK,YAAY;CAEnD,OAAO,KAAA,MAAK,QAAQ,YAAY,KAAK,IAAI;AAC3C;AAEA,SAAS,aAAa,MAAiD;CACrE,OAAO;EACL,MAAM,aAAa,MAAM,EAAE;EAC3B,eAAe,KAAK,QAAQ,YAAY;EACxC,mBAAmB,KAAK,SAAS;EACjC,sBAAsB,KAAK,SAAS;CACtC;AACF;AAEA,eAAe,cACb,SACA,UACA,WACkD;CAClD,MAAM,SAAS,KAAA,MAAK,QAAQ,QAAQ;CACpC,MAAM,WAAW,KAAA,MAAK,SAAS,QAAQ;CAQvC,OAPgB,kBACd,MAAM,kBACJ,QAAQ,UAAU,QAAQ,EAAE,eAAe,KAAK,CAAC,GACjD,WACA,8BACF,CAEW,CAAC,CAAC,MAAM,UAAU;EAE7B,OADiB,kBAAkB,OAAO,MAC5B,MAAM,YAAY,aAAa,OAAO,MAAM,MAAM;CAClE,CAAC;AACH;AAEA,SAAgB,4BACd,QACa;CACb,MAAM,gBAAgB,2BAA2B,MAAM;CAOvD,MAAM,cAAc,kBAAkB,OAAO,aAAa,kBAAkB;CAC5E,MAAM,SAAY,IAAgB,UAChC,kBAAkB,IAAI,aAAa,sBAAsB,OAAO;CA+HlE,OAAO;EA5HL,WAAW,OAAO,UAAkB,aAAsB;GACxD,MAAM,UAAU,MAAM,yBAAyB,MAAM;GACrD,MAAM,WAAW,cAAc,UAAU,aAAa;GAItD,MAAM,SAAS,MAAM,OAClB,YACC,yBACE,MAAM,QAAQ,SAAS,UAAU,WAAW,EAAE,SAAS,IAAI,KAAA,CAAS,CACtE,EAAA,CAAG,GACL,UACF;GACA,OAAO,YAAY,OAAO,OAAO,SAAS,QAAQ,IAAI;EACxD;EACA,WAAW,OACT,UACA,SACA,aACG;GACH,MAAM,UAAU,MAAM,yBAAyB,MAAM;GACrD,MAAM,WAAW,cAAc,UAAU,aAAa;GACtD,MAAM,aAAa,0BAA0B,OAAO;GACpD,MAAM,MACJ,QAAQ,UAAU,UAAU,WAAW,SAAS,WAAW,OAAO,GAClE,WACF;EACF;EACA,MAAM,OAAO,aAAqB;GAChC,MAAM,UAAU,MAAM,yBAAyB,MAAM;GACrD,MAAM,WAAW,cAAc,UAAU,aAAa;GACtD,IAAI,aAAa,eAOf,OAAO,YAAY;IAAE,MANL,kBACd,MAAM,MACJ,QAAQ,UAAU,UAAU,EAAE,eAAe,KAAK,CAAC,GACnD,WACF,CAE+B,CAAC,CAAC;IAAQ,MAAM;GAAY,CAAC;GAEhE,MAAM,OAAO,MAAM,cAAc,SAAS,UAAU,WAAW;GAC/D,IAAI,QAAQ,MACV,OAAO,YAAY;IAAE,MAAM,KAAK;IAAM,MAAM,KAAK;GAAK,CAAC;GAEzD,IAAI;IAOF,OAAO,YAAY;KAAE,MANL,kBACd,MAAM,MACJ,QAAQ,UAAU,UAAU,EAAE,eAAe,KAAK,CAAC,GACnD,WACF,CAE+B,CAAC,CAAC;KAAQ,MAAM;IAAY,CAAC;GAChE,SAAS,OAAO;IAId,IAAIC,oBAAAA,8BAA8B,KAAK,GACrC,MAAM;IAOR,OAAO,YAAY;KAAE,OAAM,MALN,OAClB,YACC,yBAAyB,MAAM,QAAQ,SAAS,QAAQ,CAAC,EAAA,CAAG,GAC9D,UACF,EAAA,CACkC;KAAQ,MAAM;IAAO,CAAC;GAC1D;EACF;EACA,UAAU,OAAO,UAAkB,YAAsC;GACvE,MAAM,UAAU,MAAM,yBAAyB,MAAM;GACrD,MAAM,WAAW,cAAc,UAAU,aAAa;GACtD,MAAM,UAAU,kBACd,MAAM,MACJ,QAAQ,UAAU,UAAU,EAAE,eAAe,KAAK,CAAC,GACnD,WACF,CACF;GACA,IAAI,SAAS,kBAAkB,MAC7B,OAAO,QAAQ,IAAI,YAAY;GAEjC,OAAO,QAAQ,KAAK,UAAU,aAAa,OAAO,QAAQ,CAAC;EAC7D;EACA,OAAO,OAAO,UAAkB,YAAmC;GAEjE,MAAM,OACJ,MAFoB,yBAAyB,MAAM,EAAA,CAE3C,MAAM,cAAc,UAAU,aAAa,GAAG,EACpD,WAAW,SAAS,UACtB,CAAC,GACD,OACF;EACF;EACA,UAAU,OAAO,aACf,cAAc,UAAU,aAAa;EACvC,QAAQ,OAAO,aAAqB;GAElC,MAAM,OACJ,MAFoB,yBAAyB,MAAM,EAAA,CAE3C,WAAW,cAAc,UAAU,aAAa,CAAC,GACzD,YACF;EACF;EACA,MAAM,OAAO,UAAkB,WAAgB;GAC7C,MAAM,UAAU,MAAM,yBAAyB,MAAM;GACrD,MAAM,WAAW,cAAc,UAAU,aAAa;GACtD,MAAM,SAAS,MAAM,OAClB,YACC,yBAAyB,MAAM,QAAQ,SAAS,QAAQ,CAAC,EAAA,CAAG,GAC9D,UACF;GACA,OAAO;IACL,MAAM,OACJ,QACA,QACA,QACA,aACG;KACH,MAAM,QAAQ,KAAK,IAAI,UAAU,CAAC;KAClC,MAAM,QAAQ,OAAO,SAAS,OAAO,QAAQ,MAAM;KACnD,MAAM,KAAK,QAAQ,MAAM;KACzB,OAAO;MAAE,WAAW,MAAM;MAAQ,QAAQ;KAAO;IACnD;IACA,OAAO,YAAY,KAAA;GACrB;EACF;CAGM;AACV;AAEA,SAAS,sBACP,QACc;CACd,QAAQ,SAAS,MAAM,YAAY;EACjC,MAAM,SAAS,IAAIC,OAAAA,YAAY;EAC/B,MAAM,SAAS,IAAIA,OAAAA,YAAY;EAC/B,MAAM,QAAQ,IAAIC,OAAAA,aAAa;EAC/B,MAAM,kBAAkB,IAAI,gBAAgB;EAC5C,MAAM,QAAQ,EAAE,QAAQ,MAAM;;;EAG9B,MAAM,iBAA0B,MAAM;EACtC,MAAM,aACJ,UACA,WACS;GACT,IAAI,MAAM,QACR;GAEF,MAAM,SAAS;GACf,OAAO,IAAI;GACX,OAAO,IAAI;GACX,OAAO,OAAO,OAAO;IACnB;IACA,YAAY;GACd,CAAC;GACD,MAAM,KAAK,SAAS,UAAU,MAAM;EACtC;EACA,OAAO,OAAO,OAAO;GACnB;GACA;GACA,OAAO,IAAID,OAAAA,YAAY;GACvB,OAAO;IAAC;IAAM;IAAQ;GAAM;GAC5B,QAAQ;GACR,UAAU;GACV,YAAY;GACZ,KAAK,KAAA;GACL,OAAO,SAAyB,cAAc;IAC5C,OAAO,OAAO,OAAO;KAAE,QAAQ;KAAM,YAAY;IAAO,CAAC;IACzD,gBAAgB,MAAM;IACtB,UAAU,MAAM,MAAM;IACtB,OAAO;GACT;EACF,CAAC;EAED,CAAM,YAA2B;GAC/B,MAAM,MAAM,MAAM,kBAAkB,MAAM;GAC1C,MAAM,WAAW,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,GAAG;GACvD,MAAM,iBACJ,QAGAE,6BAAAA;GACF,MAAM,YACJ,OAAO,mBAAmB,YAAY,OAAO,SAAS,cAAc,IAChE,iBACA,IAAI;GACV,MAAM,eAAe,qBAAqB,UAAU,SAAS;GAC7D,MAAM,MACJ,QAAQ,OAAO,OAAO,IAAI,gBAAgB,QAAQ,IAAI,SAAS;GACjE,IAAI,SAAS,GACX;GAEF,MAAM,cAA8C;IAClD;IACA,KAAK,IAAI;IACT,SAAS,eAAe,SAAS;GACnC;GACA,IAAI,IAAI,QAAQ,uBAAuB,MACrC,YAAY,SAAS,gBAAgB;GAEvC,IAAI;IACF,MAAM,SAAS,MAAM,kBACnB,IAAI,QAAQ,KAAK,cAAc,WAAW,GAC1C,oBAAoB,SAAS,GAC7B,2BAGA;KAAE,OAAO;KAAM,iBAAiB,gBAAgB,MAAM;IAAE,CAC1D;IACA,IAAI,SAAS,GACX;IAEF,IAAI,OAAO,QAAQ,OAAO,MAAM,OAAO,MAAM;IAC7C,IAAI,OAAO,QAAQ,OAAO,MAAM,OAAO,MAAM;IAC7C,UAAU,OAAO,UAAU,IAAI;GACjC,SAAS,OAAO;IACd,IAAI,SAAS,GACX;IAEF,OAAO,MAAO,MAAgB,OAAO;IACrC,UAAU,GAAG,IAAI;GACnB;EACF,EAAA,CAAG;EAEH,OAAO;CACT;AACF;AAEA,SAAgB,qCACd,QACwB;CACxB,MAAM,gBAAgB,2BAA2B,MAAM;CACvD,OAAO;EACL,KAAK;EACL,WAAW,EAAE,MAAM,cAAc;EACjC,MAAM;GACJ,OAAO,sBAAsB,MAAM;GACnC,IAAI,4BAA4B,MAAM;GACtC,WAAW;EACb;EACA,OAAO,OAAO,SAAS;EACvB,WAAW,OAAO;EAClB,gBAAgB,OAAO;EACvB,KAAK,OAAO;EACZ,oBAAoB,OAAO;EAC3B,cAAc,OAAO;EACrB,UAAU,OAAO;EACjB,wBAAwB,OAAO;EAC/B,SAAS,OAAO;EAChB,mBAAmB,OAAO;EAC1B,cAAc,OAAO;EACrB,uBAAuB,OAAO;EAC9B,oBAAoB,OAAO;EAC3B,qBAAqB,OAAO;CAC9B;AACF;AAEA,eAAsB,8BACpB,SACA,MACA,QACe;CAEf,MAAM,aAAa,MAAMC,6BAAAA,oBAAoB,SADzB,qCAAqC,MACO,CAAC;CACjE,IAAI,CAAC,WAAW,OACd,MAAM,IAAI,MAAM,WAAW,OAAO,KAAK,IAAI,CAAC;CAG9C,IACE,KAAK,SAAS,KACd,OAAO,2BAA2B,QAClC,6BAA6B,KAAK,OAAO,GACzC;EACA,MAAM,YAAY,KAAK,MAAM,QAAQ,wBAAwB,KAAK,GAAG,CAAC;EACtE,IAAI,cAAc,KAAA,GAChB,MAAM,IAAI,MACR,oEAAoE,UAAU,8BAChF;CAEJ;AACF;AAEA,eAAsB,sBACpB,SACA,QACA,OAA0B,CAAC,GACL;CACtB,MAAM,8BAA8B,SAAS,MAAM,MAAM;CACzD,MAAM,MAAM,MAAM,kBAAkB,MAAM;CAC1C,MAAM,eACJ,KAAK,SAAS,IACV,GAAG,IAAI,MAAM,OAAO,MAAM,OAAO,EAAE,MAAM,KAAK,IAAI,KAAK,CAAC,CAAC,KAAK,GAAG,MACjE,GAAG,IAAI,MAAM,OAAO,MAAM,OAAO;CACvC,MAAM,SAAS,MAAM,sBACnB,IAAI,SACJ,qBAAqB,cAAc,IAAI,SAAS,GAChD;EACE,KAAK,IAAI;EACT,KAAK,IAAI;EACT,SAAS,eAAe,IAAI,SAAS;CACvC,GACA,oBAAoB,IAAI,SAAS,GACjC,8BACF;CACA,OAAO;EACL,QAAQ,eAAe,OAAO,QAAQ,IAAI,cAAc;EACxD,QAAQ,eAAe,OAAO,QAAQ,IAAI,cAAc;EACxD,UAAU,OAAO;EACjB,UAAU,uBAAuB,OAAO,QAAQ;CAClD;AACF;AAEA,SAAS,eACP,MACA,SACA,MACA,OAAiB,CAAC,GAClB,QAAQ,QACQ;CAChB,MAAM,WAAW,SAAyB,KAAA,MAAK,KAAK,SAAS,IAAI;CACjE,MAAM,UAAU,KAAK,IAAI,KAAK,CAAC,CAAC,KAAK,GAAG;CACxC,QAAQ,MAAR;EACA,KAAK;EACL,KAAK,UACH,OAAO;GACL,UAAU;GACV,QAAQ;GACR,SAAS,WAAW,MAAM,QAAQ,SAAS,CAAC,EAAE,GAAG;EACnD;EACF,KAAK;EACL,KAAK,cACH,OAAO;GACL,UAAU;GACV,QAAQ;GACR,SAAS,QAAQ,MAAM,QAAQ,SAAS,CAAC,EAAE,GAAG;EAChD;EACF,KAAK;EACL,KAAK,cACH,OAAO;GACL,UAAU;GACV,QAAQ;GACR,SAAS,wBAAwB,MAAM,QAAQ,SAAS,CAAC,EAAE,GAAG;EAChE;EACF,KAAK,OACH,OAAO;GACL,UAAU;GACV,QAAQ;GACR,SAAS,OAAO,MAAM,QAAQ,UAAU,CAAC,EAAE,GAAG;EAChD;EACF,KAAK,MACH,OAAO;GACL,UAAU;GACV,QAAQ;GACR,SAAS,UAAU,MAAM,QAAQ,SAAS,CAAC,EAAE,GAAG;EAClD;EACF,KAAK,MACH,OAAO;GACL,UAAU;GACV,QAAQ;GACR,SAAS,GAAG,MAAM,OAAO,MACvB,SAAS,MAAM,QAAQ,SAAS,CAAC,EAAE,MAAM,MAAM,QAAQ,SAAS,CAAC,EAAE,MAAM,MAAM,QAAQ,SAAS,CAAC,EAAE,GAAG,SACxG;EACF;EACF,KAAK,KACH,OAAO;GACL,UAAU;GACV,QAAQ;GACR,SAAS,GAAG,MAAM,OAAO,MACvB,MAAM,MAAM,QAAQ,QAAQ,CAAC,EAAE,MAAM,MAAM,QAAQ,QAAQ,CAAC,EAAE,MAAM,MAAM,QAAQ,QAAQ,CAAC,EAAE,GAAG,SAClG;EACF;EACF,KAAK,OACH,OAAO;GACL,UAAU;GACV,QAAQ;GACR,SAAS,GAAG,MAAM,OAAO,MACvB,OAAO,MAAM,QAAQ,UAAU,CAAC,EAAE,MAAM,MAAM,QAAQ,UAAU,CAAC,EAAE,MAAM,MAAM,QAAQ,UAAU,CAAC,EAAE,GAAG,SACzG;EACF;EACF,KAAK,QACH,OAAO;GACL,UAAU;GACV,QAAQ;GACR,SAAS,GAAG,MAAM,OAAO,MACvB,SAAS,MAAM,QAAQ,WAAW,CAAC,EAAE,eAAe,MAAM,OAAO,EAAE,QAAQ,SAC7E;EACF;EACF,KAAK,KACH,OAAO;GACL,UAAU;GACV,QAAQ;GACR,SAAS,WAAW,MAAM,QAAQ,QAAQ,CAAC,EAAE,GAAG;EAClD;EACF,KAAK,KACH,OAAO;GACL,UAAU;GACV,QAAQ;GACR,SAAS,GAAG,MAAM,OAAO,MACvB,OAAO,MAAM,QAAQ,QAAQ,CAAC,EAAE,OAAO,MAAM,QAAQ,QAAQ,CAAC,EAAE,MAAM,MAAM,QAAQ,QAAQ,CAAC,EAAE,GAAG,SACpG;EACF;EACF,KAAK,OACH,OAAO;GACL,UAAU;GACV,QAAQ;GACR,SAAS,GAAG,MAAM,OAAO,MACvB,YAAY,MAAM,QAAQ,UAAU,CAAC,EAAE,MAAM,MAAM,QAAQ,UAAU,CAAC,EAAE,MAAM,MAAM,QAAQ,UAAU,CAAC,EAAE,GAAG,SAC9G;EACF;EACF,KAAK;EACL,KAAK,MACH,OAAO;GACL,UAAU;GACV,QAAQ;GACR,SAAS,GAAG,MAAM,OAAO,MAAM,IAAI,EAAE,MAAM;EAC7C;EACF,SACE,MAAM,IAAI,MAAM,2CAA2C,MAAM;CACnE;AACF;AAEA,eAAsB,sBACpB,OACA,QACsB;CACtB,IAAI,MAAM,SAAS,UAAU,MAAM,SAAS,MAC1C,OAAO,sBAAsB,MAAM,MAAM,QAAQ,MAAM,QAAQ,CAAC,CAAC;CAEnE,MAAM,MAAM,MAAM,kBAAkB,MAAM;CAC1C,MAAM,KAAK,WAAW,OAAO,WAAW;CACxC,MAAM,UAAU,KAAA,MAAK,KAAK,IAAI,eAAe,YAAY,EAAE;CAC3D,MAAM,UAAU,eACd,MAAM,MACN,SACA,MAAM,MACN,MAAM,MACN,IAAI,KACN;CACA,IAAI,gBAAgB;CACpB,IAAI;EAMF,MAAM,kBACJ,IAAI,QAAQ,MAAM,SAAS,EAAE,WAAW,KAAK,CAAC,GAC9C,kBAAkB,IAAI,SAAS,GAC/B,0BACF;EACA,IAAI,QAAQ,UAAU,MACpB,MAAM,kBACJ,IAAI,QAAQ,UACV,KAAA,MAAK,KAAK,SAAS,QAAQ,QAAQ,GACnC,QAAQ,QACR,EAAE,UAAU,OAAO,CACrB,GACA,kBAAkB,IAAI,SAAS,GAC/B,8BACF;EAEF,MAAM,SAAS,MAAM,sBACnB,IAAI,SACJ,qBAAqB,QAAQ,SAAS,IAAI,SAAS,GACnD;GACE,KAAK,IAAI;GACT,KAAK,IAAI;GACT,SAAS,eAAe,IAAI,SAAS;EACvC,GACA,oBAAoB,IAAI,SAAS,GACjC,8BACF;EACA,gBAAgB;EAChB,OAAO;GACL,QAAQ,eAAe,OAAO,QAAQ,IAAI,cAAc;GACxD,QAAQ,eAAe,OAAO,QAAQ,IAAI,cAAc;GACxD,UAAU,OAAO;GACjB,UAAU,uBAAuB,OAAO,QAAQ;EAClD;CACF,UAAU;EAIR,MAAM,SAAS,CAAC;EAChB,MAAM,UAAU,sBACd,IAAI,SACJ,UAAU,MAAM,OAAO,KACvB;GACE,KAAK,IAAI;GACT,KAAK,IAAI;GACT,SAAS;EACX,GACA,oBAAoB,GAAK,GACzB,8BACA,EAAE,OAAO,OAAO,CAClB,CAAC,CAAC,YAAY,KAAA,CAAS;EACvB,IAAI,CAAC,QACH,MAAM;CAEV;AACF;AAEA,SAAgB,uBACd,QACA,KACQ;CACR,IAAI,YAAY;CAChB,IAAI,OAAO,WAAW,IACpB,aAAa,YAAY,OAAO,OAAO;MAEvC,aAAa;CAEf,IAAI,OAAO,WAAW,IACpB,aAAa,YAAY,OAAO,OAAO;CAEzC,IAAI,OAAO,YAAY,QAAQ,OAAO,aAAa,GACjD,aAAa,cAAc,OAAO,SAAS;CAE7C,IAAI,OAAO,UACT,aAAa;CAEf,aAAa,sBAAsB;CACnC,OAAO,UAAU,KAAK;AACxB"}
+{"version":3,"file":"CloudflareSandboxExecutionEngine.cjs","names":["WorkspaceClientTimeoutError","stream","isWorkspaceClientTimeoutError","PassThrough","EventEmitter","LOCAL_SPAWN_TIMEOUT_MS","validateBashCommand"],"sources":["../../../../src/tools/cloudflare/CloudflareSandboxExecutionEngine.ts"],"mappings":";;;;;;AAiBA,MAAM,yBAAyB;AAC/B,MAAM,qBAAqB;AAC3B,MAAM,2BAA2B;AACjC,MAAM,0BAA0B;AAChC,MAAM,+BACJ;AAwBF,MAAM,sCAAsB,IAAI,QAG9B;AAEF,SAAS,uBAAuB,eAA+B;CAC7D,MAAM,aAAa,KAAA,MAAK,UAAU,aAAa;CAC/C,OAAO,eAAe,MAAM,aAAa,WAAW,QAAQ,QAAQ,EAAE;AACxE;AAEA,SAAgB,2BACd,QACQ;CACR,OAAO,uBACL,QAAQ,iBAAiB,sBAC3B;AACF;AAEA,eAAsB,yBACpB,QACqC;CACrC,MAAM,UAAU,OAAO;CACvB,IAAI,OAAO,YAAY,YACrB,OAAO;CAET,IAAI,SAAS,oBAAoB,IAAI,MAAM;CAC3C,IAAI,UAAU,MAAM;EAClB,SAAS,QAAQ,QAAQ,CAAC,CACvB,WAAW,QAAQ,CAAC,CAAC,CACrB,OAAO,UAAmB;GACzB,oBAAoB,OAAO,MAAM;GACjC,MAAM;EACR,CAAC;EACH,oBAAoB,IAAI,QAAQ,MAAM;CACxC;CACA,OAAO;AACT;AAEA,eAAe,kBACb,QACgC;CAChC,OAAO;EACL,SAAS,MAAM,yBAAyB,MAAM;EAC9C,eAAe,2BAA2B,MAAM;EAChD,KAAK,OAAO;EACZ,WAAW,OAAO,aAAa;EAC/B,gBAAgB,OAAO,kBAAkB;EACzC,OAAO,OAAO,SAAS;CACzB;AACF;AAEA,SAAS,cAAc,UAAkB,eAA+B;CACtE,MAAM,MAAM,aAAa,KAAK,MAAM;CACpC,MAAM,OAAO,uBAAuB,aAAa;CACjD,MAAM,WAAW,IAAI,WAAW,GAAG,IAC/B,KAAA,MAAK,UAAU,GAAG,IAClB,KAAA,MAAK,QAAQ,MAAM,GAAG;CAC1B,IAAI,SAAS,KACX,OAAO;CAET,IAAI,aAAa,QAAQ,SAAS,WAAW,GAAG,KAAK,EAAE,GACrD,OAAO;CAET,MAAM,IAAI,MACR,qDAAqD,UACvD;AACF;AAEA,SAAS,MAAM,OAAuB;CACpC,IAAI,UAAU,IACZ,OAAO;CAET,IAAI,2BAA2B,KAAK,KAAK,GACvC,OAAO;CAET,OAAO,IAAI,MAAM,QAAQ,MAAM,OAAU,EAAE;AAC7C;AAEA,SAAS,qBAAqB,SAAiB,WAA2B;CAExE,OAAO,iBADgB,KAAK,IAAI,GAAG,KAAK,KAAK,YAAY,GAAI,CACxB,EAAE,IAAI;AAC7C;AAEA,SAAS,eAAe,WAA2B;CACjD,OAAO,YAAY;AACrB;AAEA,SAAS,uBAAuB,UAAkC;CAChE,OAAO,aAAa,OAAO,aAAa;AAC1C;AAOA,SAAgB,oBAAoB,WAA2B;CAC7D,OAAO,eAAe,SAAS,IAAI;AACrC;AAUA,SAAgB,kBAAkB,WAA2B;CAC3D,OAAO,YAAY;AACrB;AAmBA,eAAsB,kBACpB,MACA,WACA,OACA,UAUI,CAAC,GACO;CACZ,IAAI,CAAC,OAAO,SAAS,SAAS,KAAK,aAAa,GAC9C,OAAO;CAGT,KAAK,YAAY,KAAA,CAAS;CAC1B,IAAI;CACJ,IAAI;EACF,OAAO,MAAM,QAAQ,KAAK,CACxB,MACA,IAAI,SAAgB,UAAU,WAAW;GACvC,QAAQ,iBAAiB;IAIvB,OACE,IAAIA,oBAAAA,4BACF,GAAG,MAAM,YAAY,UAAU,oDACjC,CACF;IACA,QAAQ,YAAY;GACtB,GAAG,SAAS;GACZ,IAAI,QAAQ,UAAU,MACpB,OAA+C,QAAQ;EAE3D,CAAC,CACH,CAAC;CACH,UAAU;EACR,IAAI,UAAU,KAAA,GACZ,aAAa,KAAK;CAEtB;AACF;AASA,eAAsB,sBACpB,SACA,SACA,SACA,WACA,OACA,aAAkC,CAAC,GACK;CACxC,MAAM,aAAa,IAAI,gBAAgB;CACvC,MAAM,cAA8C,EAAE,GAAG,QAAQ;CACjE,MAAM,eAAe,QAAQ;CAC7B,IAAI;CACJ,IAAI,QAAQ,uBAAuB,MAAM;EAGvC,IAAI,gBAAgB,MAClB,IAAI,aAAa,SACf,WAAW,MAAM;OACZ;GACL,sBAA4B,WAAW,MAAM;GAC7C,aAAa,iBAAiB,SAAS,eAAe,EAAE,MAAM,KAAK,CAAC;EACtE;EAEF,YAAY,SAAS,WAAW;CAClC,OAAO,IAAI,YAAY,aAGrB,OAAO,YAAY;CAErB,IAAI;EACF,OAAO,MAAM,kBACX,QAAQ,KAAK,SAAS,WAAW,GACjC,WACA,OACA;GACE,OAAO,WAAW;GAClB,iBAAiB,WAAW,MAAM;EACpC,CACF;CACF,UAAU;EAER,IAAI,iBAAiB,QAAQ,gBAAgB,MAC3C,aAAa,oBAAoB,SAAS,aAAa;CAE3D;AACF;AAEA,SAAS,eAAe,OAAe,UAA0B;CAC/D,IAAI,YAAY,KAAK,MAAM,UAAU,UACnC,OAAO;CAET,MAAM,OAAO,KAAK,IAAI,KAAK,MAAM,WAAW,CAAC,GAAG,CAAC;CACjD,MAAM,OAAO,KAAK,IAAI,WAAW,MAAM,CAAC;CACxC,OAAO,GAAG,MAAM,MAAM,GAAG,IAAI,EAAE,kBAAkB,MAAM,SAAS,SAAS,cAAc,MAAM,MAAM,MAAM,SAAS,IAAI;AACxH;AAEA,eAAe,WAAW,UAAqD;CAC7E,MAAM,SAASC,SAAO,UAAU;CAChC,MAAM,SAAuB,CAAC;CAC9B,IAAI;EACF,SAAS;GACP,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;GAC1C,IAAI,MAAM;GACV,OAAO,KAAK,KAAK;EACnB;CACF,UAAU;EACR,OAAO,YAAY;CACrB;CACA,OAAO,OAAO,OAAO,OAAO,KAAK,UAAU,OAAO,KAAK,KAAK,CAAC,CAAC;AAChE;AAEA,eAAe,yBACb,QACiB;CACjB,IAAI,OAAO,WAAW,UACpB,OAAO,OAAO,KAAK,QAAQ,MAAM;CAEnC,IAAI,OAAO,SAAS,MAAM,GACxB,OAAO;CAET,IAAI,kBAAkB,YACpB,OAAO,OAAO,KAAK,MAAM;CAE3B,MAAM,UAAU,OAAO;CACvB,IAAI,OAAO,YAAY,UAAU;EAC/B,IAAI,OAAO,aAAa,UACtB,OAAO,OAAO,KAAK,SAAS,QAAQ;EAEtC,OAAO,OAAO,KAAK,SAAS,MAAM;CACpC;CACA,IAAI,OAAO,SAAS,OAAO,GACzB,OAAO;CAET,IAAI,mBAAmB,YACrB,OAAO,OAAO,KAAK,OAAO;CAE5B,OAAO,WAAW,OAAO;AAC3B;AAEA,SAAS,cAAc,OAA+C;CACpE,OAAO,IAAI,eAA2B,EACpC,MAAM,YAAkB;EACtB,WAAW,QAAQ,KAAK;EACxB,WAAW,MAAM;CACnB,EACF,CAAC;AACH;AAEA,SAAS,0BAA0B,SAGjC;CACA,IAAI,OAAO,YAAY,UACrB,OAAO;EAAE;EAAS,SAAS,EAAE,UAAU,OAAO;CAAE;CAElD,OAAO,EAAE,SAAS,cAAc,OAAO,EAAE;AAC3C;AAEA,SAAS,YAAY,MAGX;CACR,MAAM,OAAO,KAAK,QAAQ;CAC1B,MAAM,sBAAM,IAAI,KAAK;CACrB,OAAO;EACL,MAAM,KAAK,QAAQ;EACnB,cAAc,SAAS;EACvB,mBAAmB,SAAS;EAC5B,sBAAsB,SAAS;EAC/B,qBAAqB;EACrB,yBAAyB;EACzB,cAAc;EACd,gBAAgB;EAChB,KAAK;EACL,KAAK;EACL,MAAM;EACN,OAAO;EACP,KAAK;EACL,KAAK;EACL,MAAM;EACN,SAAS;EACT,QAAQ;EACR,SAAS,IAAI,QAAQ;EACrB,SAAS,IAAI,QAAQ;EACrB,SAAS,IAAI,QAAQ;EACrB,aAAa,IAAI,QAAQ;EACzB,OAAO;EACP,OAAO;EACP,OAAO;EACP,WAAW;CACb;AACF;AAEA,SAAS,kBACP,QAC+B;CAC/B,OAAO,MAAM,QAAQ,MAAM,IAAI,SAAS,OAAO;AACjD;AAEA,SAAS,aACP,MACA,YACQ;CACR,IAAI,KAAK,SAAS,IAChB,OAAO,KAAK,KAAK,SAAS,GAAG,IAAI,KAAA,MAAK,SAAS,KAAK,IAAI,IAAI,KAAK;CAEnE,IAAI,KAAK,gBAAgB,QAAQ,KAAK,iBAAiB,IACrD,OAAO,KAAA,MAAK,SAAS,KAAK,YAAY;CAExC,IAAI,KAAK,gBAAgB,QAAQ,KAAK,iBAAiB,IACrD,OAAO,KAAA,MAAK,SAAS,KAAK,YAAY;CAExC,OAAO,KAAA,MAAK,SAAS,UAAU;AACjC;AAEA,SAAS,kBACP,MACA,YACQ;CACR,IAAI,KAAK,gBAAgB,QAAQ,KAAK,iBAAiB,IACrD,OAAO,KAAA,MAAK,UAAU,KAAK,YAAY;CAEzC,IAAI,KAAK,gBAAgB,QAAQ,KAAK,iBAAiB,IACrD,OAAO,KAAA,MAAK,QAAQ,YAAY,KAAK,YAAY;CAEnD,OAAO,KAAA,MAAK,QAAQ,YAAY,KAAK,IAAI;AAC3C;AAEA,SAAS,aAAa,MAAiD;CACrE,OAAO;EACL,MAAM,aAAa,MAAM,EAAE;EAC3B,eAAe,KAAK,QAAQ,YAAY;EACxC,mBAAmB,KAAK,SAAS;EACjC,sBAAsB,KAAK,SAAS;CACtC;AACF;AAEA,eAAe,cACb,SACA,UACA,WACkD;CAClD,MAAM,SAAS,KAAA,MAAK,QAAQ,QAAQ;CACpC,MAAM,WAAW,KAAA,MAAK,SAAS,QAAQ;CAQvC,OAPgB,kBACd,MAAM,kBACJ,QAAQ,UAAU,QAAQ,EAAE,eAAe,KAAK,CAAC,GACjD,WACA,8BACF,CAEW,CAAC,CAAC,MAAM,UAAU;EAE7B,OADiB,kBAAkB,OAAO,MAC5B,MAAM,YAAY,aAAa,OAAO,MAAM,MAAM;CAClE,CAAC;AACH;AAEA,SAAgB,4BACd,QACa;CACb,MAAM,gBAAgB,2BAA2B,MAAM;CAOvD,MAAM,cAAc,kBAAkB,OAAO,aAAa,kBAAkB;CAC5E,MAAM,SAAY,IAAgB,UAChC,kBAAkB,IAAI,aAAa,sBAAsB,OAAO;CA+HlE,OAAO;EA5HL,WAAW,OAAO,UAAkB,aAAsB;GACxD,MAAM,UAAU,MAAM,yBAAyB,MAAM;GACrD,MAAM,WAAW,cAAc,UAAU,aAAa;GAItD,MAAM,SAAS,MAAM,OAClB,YACC,yBACE,MAAM,QAAQ,SAAS,UAAU,WAAW,EAAE,SAAS,IAAI,KAAA,CAAS,CACtE,EAAA,CAAG,GACL,UACF;GACA,OAAO,YAAY,OAAO,OAAO,SAAS,QAAQ,IAAI;EACxD;EACA,WAAW,OACT,UACA,SACA,aACG;GACH,MAAM,UAAU,MAAM,yBAAyB,MAAM;GACrD,MAAM,WAAW,cAAc,UAAU,aAAa;GACtD,MAAM,aAAa,0BAA0B,OAAO;GACpD,MAAM,MACJ,QAAQ,UAAU,UAAU,WAAW,SAAS,WAAW,OAAO,GAClE,WACF;EACF;EACA,MAAM,OAAO,aAAqB;GAChC,MAAM,UAAU,MAAM,yBAAyB,MAAM;GACrD,MAAM,WAAW,cAAc,UAAU,aAAa;GACtD,IAAI,aAAa,eAOf,OAAO,YAAY;IAAE,MANL,kBACd,MAAM,MACJ,QAAQ,UAAU,UAAU,EAAE,eAAe,KAAK,CAAC,GACnD,WACF,CAE+B,CAAC,CAAC;IAAQ,MAAM;GAAY,CAAC;GAEhE,MAAM,OAAO,MAAM,cAAc,SAAS,UAAU,WAAW;GAC/D,IAAI,QAAQ,MACV,OAAO,YAAY;IAAE,MAAM,KAAK;IAAM,MAAM,KAAK;GAAK,CAAC;GAEzD,IAAI;IAOF,OAAO,YAAY;KAAE,MANL,kBACd,MAAM,MACJ,QAAQ,UAAU,UAAU,EAAE,eAAe,KAAK,CAAC,GACnD,WACF,CAE+B,CAAC,CAAC;KAAQ,MAAM;IAAY,CAAC;GAChE,SAAS,OAAO;IAId,IAAIC,oBAAAA,8BAA8B,KAAK,GACrC,MAAM;IAOR,OAAO,YAAY;KAAE,OAAM,MALN,OAClB,YACC,yBAAyB,MAAM,QAAQ,SAAS,QAAQ,CAAC,EAAA,CAAG,GAC9D,UACF,EAAA,CACkC;KAAQ,MAAM;IAAO,CAAC;GAC1D;EACF;EACA,UAAU,OAAO,UAAkB,YAAsC;GACvE,MAAM,UAAU,MAAM,yBAAyB,MAAM;GACrD,MAAM,WAAW,cAAc,UAAU,aAAa;GACtD,MAAM,UAAU,kBACd,MAAM,MACJ,QAAQ,UAAU,UAAU,EAAE,eAAe,KAAK,CAAC,GACnD,WACF,CACF;GACA,IAAI,SAAS,kBAAkB,MAC7B,OAAO,QAAQ,IAAI,YAAY;GAEjC,OAAO,QAAQ,KAAK,UAAU,aAAa,OAAO,QAAQ,CAAC;EAC7D;EACA,OAAO,OAAO,UAAkB,YAAmC;GAEjE,MAAM,OACJ,MAFoB,yBAAyB,MAAM,EAAA,CAE3C,MAAM,cAAc,UAAU,aAAa,GAAG,EACpD,WAAW,SAAS,UACtB,CAAC,GACD,OACF;EACF;EACA,UAAU,OAAO,aACf,cAAc,UAAU,aAAa;EACvC,QAAQ,OAAO,aAAqB;GAElC,MAAM,OACJ,MAFoB,yBAAyB,MAAM,EAAA,CAE3C,WAAW,cAAc,UAAU,aAAa,CAAC,GACzD,YACF;EACF;EACA,MAAM,OAAO,UAAkB,WAAgB;GAC7C,MAAM,UAAU,MAAM,yBAAyB,MAAM;GACrD,MAAM,WAAW,cAAc,UAAU,aAAa;GACtD,MAAM,SAAS,MAAM,OAClB,YACC,yBAAyB,MAAM,QAAQ,SAAS,QAAQ,CAAC,EAAA,CAAG,GAC9D,UACF;GACA,OAAO;IACL,MAAM,OACJ,QACA,QACA,QACA,aACG;KACH,MAAM,QAAQ,KAAK,IAAI,UAAU,CAAC;KAClC,MAAM,QAAQ,OAAO,SAAS,OAAO,QAAQ,MAAM;KACnD,MAAM,KAAK,QAAQ,MAAM;KACzB,OAAO;MAAE,WAAW,MAAM;MAAQ,QAAQ;KAAO;IACnD;IACA,OAAO,YAAY,KAAA;GACrB;EACF;CAGM;AACV;AAEA,SAAS,sBACP,QACc;CACd,QAAQ,SAAS,MAAM,YAAY;EACjC,MAAM,SAAS,IAAIC,OAAAA,YAAY;EAC/B,MAAM,SAAS,IAAIA,OAAAA,YAAY;EAC/B,MAAM,QAAQ,IAAIC,OAAAA,aAAa;EAC/B,MAAM,kBAAkB,IAAI,gBAAgB;EAC5C,MAAM,QAAQ,EAAE,QAAQ,MAAM;EAG9B,MAAM,iBAA0B,MAAM;EACtC,MAAM,aACJ,UACA,WACS;GACT,IAAI,MAAM,QACR;GAEF,MAAM,SAAS;GACf,OAAO,IAAI;GACX,OAAO,IAAI;GACX,OAAO,OAAO,OAAO;IACnB;IACA,YAAY;GACd,CAAC;GACD,MAAM,KAAK,SAAS,UAAU,MAAM;EACtC;EACA,OAAO,OAAO,OAAO;GACnB;GACA;GACA,OAAO,IAAID,OAAAA,YAAY;GACvB,OAAO;IAAC;IAAM;IAAQ;GAAM;GAC5B,QAAQ;GACR,UAAU;GACV,YAAY;GACZ,KAAK,KAAA;GACL,OAAO,SAAyB,cAAc;IAC5C,OAAO,OAAO,OAAO;KAAE,QAAQ;KAAM,YAAY;IAAO,CAAC;IACzD,gBAAgB,MAAM;IACtB,UAAU,MAAM,MAAM;IACtB,OAAO;GACT;EACF,CAAC;EAED,CAAM,YAA2B;GAC/B,MAAM,MAAM,MAAM,kBAAkB,MAAM;GAC1C,MAAM,WAAW,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,GAAG;GACvD,MAAM,iBACJ,QAGAE,6BAAAA;GACF,MAAM,YACJ,OAAO,mBAAmB,YAAY,OAAO,SAAS,cAAc,IAChE,iBACA,IAAI;GACV,MAAM,eAAe,qBAAqB,UAAU,SAAS;GAC7D,MAAM,MACJ,QAAQ,OAAO,OAAO,IAAI,gBAAgB,QAAQ,IAAI,SAAS;GACjE,IAAI,SAAS,GACX;GAEF,MAAM,cAA8C;IAClD;IACA,KAAK,IAAI;IACT,SAAS,eAAe,SAAS;GACnC;GACA,IAAI,IAAI,QAAQ,uBAAuB,MACrC,YAAY,SAAS,gBAAgB;GAEvC,IAAI;IACF,MAAM,SAAS,MAAM,kBACnB,IAAI,QAAQ,KAAK,cAAc,WAAW,GAC1C,oBAAoB,SAAS,GAC7B,2BAGA;KAAE,OAAO;KAAM,iBAAiB,gBAAgB,MAAM;IAAE,CAC1D;IACA,IAAI,SAAS,GACX;IAEF,IAAI,OAAO,QAAQ,OAAO,MAAM,OAAO,MAAM;IAC7C,IAAI,OAAO,QAAQ,OAAO,MAAM,OAAO,MAAM;IAC7C,UAAU,OAAO,UAAU,IAAI;GACjC,SAAS,OAAO;IACd,IAAI,SAAS,GACX;IAEF,OAAO,MAAO,MAAgB,OAAO;IACrC,UAAU,GAAG,IAAI;GACnB;EACF,EAAA,CAAG;EAEH,OAAO;CACT;AACF;AAEA,SAAgB,qCACd,QACwB;CACxB,MAAM,gBAAgB,2BAA2B,MAAM;CACvD,OAAO;EACL,KAAK;EACL,WAAW,EAAE,MAAM,cAAc;EACjC,MAAM;GACJ,OAAO,sBAAsB,MAAM;GACnC,IAAI,4BAA4B,MAAM;GACtC,WAAW;EACb;EACA,OAAO,OAAO,SAAS;EACvB,WAAW,OAAO;EAClB,gBAAgB,OAAO;EACvB,KAAK,OAAO;EACZ,oBAAoB,OAAO;EAC3B,cAAc,OAAO;EACrB,UAAU,OAAO;EACjB,wBAAwB,OAAO;EAC/B,SAAS,OAAO;EAChB,mBAAmB,OAAO;EAC1B,cAAc,OAAO;EACrB,uBAAuB,OAAO;EAC9B,oBAAoB,OAAO;EAC3B,qBAAqB,OAAO;CAC9B;AACF;AAEA,eAAsB,8BACpB,SACA,MACA,QACe;CAEf,MAAM,aAAa,MAAMC,6BAAAA,oBAAoB,SADzB,qCAAqC,MACO,CAAC;CACjE,IAAI,CAAC,WAAW,OACd,MAAM,IAAI,MAAM,WAAW,OAAO,KAAK,IAAI,CAAC;CAG9C,IACE,KAAK,SAAS,KACd,OAAO,2BAA2B,QAClC,6BAA6B,KAAK,OAAO,GACzC;EACA,MAAM,YAAY,KAAK,MAAM,QAAQ,wBAAwB,KAAK,GAAG,CAAC;EACtE,IAAI,cAAc,KAAA,GAChB,MAAM,IAAI,MACR,oEAAoE,UAAU,8BAChF;CAEJ;AACF;AAEA,eAAsB,sBACpB,SACA,QACA,OAA0B,CAAC,GACL;CACtB,MAAM,8BAA8B,SAAS,MAAM,MAAM;CACzD,MAAM,MAAM,MAAM,kBAAkB,MAAM;CAC1C,MAAM,eACJ,KAAK,SAAS,IACV,GAAG,IAAI,MAAM,OAAO,MAAM,OAAO,EAAE,MAAM,KAAK,IAAI,KAAK,CAAC,CAAC,KAAK,GAAG,MACjE,GAAG,IAAI,MAAM,OAAO,MAAM,OAAO;CACvC,MAAM,SAAS,MAAM,sBACnB,IAAI,SACJ,qBAAqB,cAAc,IAAI,SAAS,GAChD;EACE,KAAK,IAAI;EACT,KAAK,IAAI;EACT,SAAS,eAAe,IAAI,SAAS;CACvC,GACA,oBAAoB,IAAI,SAAS,GACjC,8BACF;CACA,OAAO;EACL,QAAQ,eAAe,OAAO,QAAQ,IAAI,cAAc;EACxD,QAAQ,eAAe,OAAO,QAAQ,IAAI,cAAc;EACxD,UAAU,OAAO;EACjB,UAAU,uBAAuB,OAAO,QAAQ;CAClD;AACF;AAEA,SAAS,eACP,MACA,SACA,MACA,OAAiB,CAAC,GAClB,QAAQ,QACQ;CAChB,MAAM,WAAW,SAAyB,KAAA,MAAK,KAAK,SAAS,IAAI;CACjE,MAAM,UAAU,KAAK,IAAI,KAAK,CAAC,CAAC,KAAK,GAAG;CACxC,QAAQ,MAAR;EACA,KAAK;EACL,KAAK,UACH,OAAO;GACL,UAAU;GACV,QAAQ;GACR,SAAS,WAAW,MAAM,QAAQ,SAAS,CAAC,EAAE,GAAG;EACnD;EACF,KAAK;EACL,KAAK,cACH,OAAO;GACL,UAAU;GACV,QAAQ;GACR,SAAS,QAAQ,MAAM,QAAQ,SAAS,CAAC,EAAE,GAAG;EAChD;EACF,KAAK;EACL,KAAK,cACH,OAAO;GACL,UAAU;GACV,QAAQ;GACR,SAAS,wBAAwB,MAAM,QAAQ,SAAS,CAAC,EAAE,GAAG;EAChE;EACF,KAAK,OACH,OAAO;GACL,UAAU;GACV,QAAQ;GACR,SAAS,OAAO,MAAM,QAAQ,UAAU,CAAC,EAAE,GAAG;EAChD;EACF,KAAK,MACH,OAAO;GACL,UAAU;GACV,QAAQ;GACR,SAAS,UAAU,MAAM,QAAQ,SAAS,CAAC,EAAE,GAAG;EAClD;EACF,KAAK,MACH,OAAO;GACL,UAAU;GACV,QAAQ;GACR,SAAS,GAAG,MAAM,OAAO,MACvB,SAAS,MAAM,QAAQ,SAAS,CAAC,EAAE,MAAM,MAAM,QAAQ,SAAS,CAAC,EAAE,MAAM,MAAM,QAAQ,SAAS,CAAC,EAAE,GAAG,SACxG;EACF;EACF,KAAK,KACH,OAAO;GACL,UAAU;GACV,QAAQ;GACR,SAAS,GAAG,MAAM,OAAO,MACvB,MAAM,MAAM,QAAQ,QAAQ,CAAC,EAAE,MAAM,MAAM,QAAQ,QAAQ,CAAC,EAAE,MAAM,MAAM,QAAQ,QAAQ,CAAC,EAAE,GAAG,SAClG;EACF;EACF,KAAK,OACH,OAAO;GACL,UAAU;GACV,QAAQ;GACR,SAAS,GAAG,MAAM,OAAO,MACvB,OAAO,MAAM,QAAQ,UAAU,CAAC,EAAE,MAAM,MAAM,QAAQ,UAAU,CAAC,EAAE,MAAM,MAAM,QAAQ,UAAU,CAAC,EAAE,GAAG,SACzG;EACF;EACF,KAAK,QACH,OAAO;GACL,UAAU;GACV,QAAQ;GACR,SAAS,GAAG,MAAM,OAAO,MACvB,SAAS,MAAM,QAAQ,WAAW,CAAC,EAAE,eAAe,MAAM,OAAO,EAAE,QAAQ,SAC7E;EACF;EACF,KAAK,KACH,OAAO;GACL,UAAU;GACV,QAAQ;GACR,SAAS,WAAW,MAAM,QAAQ,QAAQ,CAAC,EAAE,GAAG;EAClD;EACF,KAAK,KACH,OAAO;GACL,UAAU;GACV,QAAQ;GACR,SAAS,GAAG,MAAM,OAAO,MACvB,OAAO,MAAM,QAAQ,QAAQ,CAAC,EAAE,OAAO,MAAM,QAAQ,QAAQ,CAAC,EAAE,MAAM,MAAM,QAAQ,QAAQ,CAAC,EAAE,GAAG,SACpG;EACF;EACF,KAAK,OACH,OAAO;GACL,UAAU;GACV,QAAQ;GACR,SAAS,GAAG,MAAM,OAAO,MACvB,YAAY,MAAM,QAAQ,UAAU,CAAC,EAAE,MAAM,MAAM,QAAQ,UAAU,CAAC,EAAE,MAAM,MAAM,QAAQ,UAAU,CAAC,EAAE,GAAG,SAC9G;EACF;EACF,KAAK;EACL,KAAK,MACH,OAAO;GACL,UAAU;GACV,QAAQ;GACR,SAAS,GAAG,MAAM,OAAO,MAAM,IAAI,EAAE,MAAM;EAC7C;EACF,SACE,MAAM,IAAI,MAAM,2CAA2C,MAAM;CACnE;AACF;AAEA,eAAsB,sBACpB,OACA,QACsB;CACtB,IAAI,MAAM,SAAS,UAAU,MAAM,SAAS,MAC1C,OAAO,sBAAsB,MAAM,MAAM,QAAQ,MAAM,QAAQ,CAAC,CAAC;CAEnE,MAAM,MAAM,MAAM,kBAAkB,MAAM;CAC1C,MAAM,KAAK,WAAW,OAAO,WAAW;CACxC,MAAM,UAAU,KAAA,MAAK,KAAK,IAAI,eAAe,YAAY,EAAE;CAC3D,MAAM,UAAU,eACd,MAAM,MACN,SACA,MAAM,MACN,MAAM,MACN,IAAI,KACN;CACA,IAAI,gBAAgB;CACpB,IAAI;EAMF,MAAM,kBACJ,IAAI,QAAQ,MAAM,SAAS,EAAE,WAAW,KAAK,CAAC,GAC9C,kBAAkB,IAAI,SAAS,GAC/B,0BACF;EACA,IAAI,QAAQ,UAAU,MACpB,MAAM,kBACJ,IAAI,QAAQ,UACV,KAAA,MAAK,KAAK,SAAS,QAAQ,QAAQ,GACnC,QAAQ,QACR,EAAE,UAAU,OAAO,CACrB,GACA,kBAAkB,IAAI,SAAS,GAC/B,8BACF;EAEF,MAAM,SAAS,MAAM,sBACnB,IAAI,SACJ,qBAAqB,QAAQ,SAAS,IAAI,SAAS,GACnD;GACE,KAAK,IAAI;GACT,KAAK,IAAI;GACT,SAAS,eAAe,IAAI,SAAS;EACvC,GACA,oBAAoB,IAAI,SAAS,GACjC,8BACF;EACA,gBAAgB;EAChB,OAAO;GACL,QAAQ,eAAe,OAAO,QAAQ,IAAI,cAAc;GACxD,QAAQ,eAAe,OAAO,QAAQ,IAAI,cAAc;GACxD,UAAU,OAAO;GACjB,UAAU,uBAAuB,OAAO,QAAQ;EAClD;CACF,UAAU;EAIR,MAAM,SAAS,CAAC;EAChB,MAAM,UAAU,sBACd,IAAI,SACJ,UAAU,MAAM,OAAO,KACvB;GACE,KAAK,IAAI;GACT,KAAK,IAAI;GACT,SAAS;EACX,GACA,oBAAoB,GAAK,GACzB,8BACA,EAAE,OAAO,OAAO,CAClB,CAAC,CAAC,YAAY,KAAA,CAAS;EACvB,IAAI,CAAC,QACH,MAAM;CAEV;AACF;AAEA,SAAgB,uBACd,QACA,KACQ;CACR,IAAI,YAAY;CAChB,IAAI,OAAO,WAAW,IACpB,aAAa,YAAY,OAAO,OAAO;MAEvC,aAAa;CAEf,IAAI,OAAO,WAAW,IACpB,aAAa,YAAY,OAAO,OAAO;CAEzC,IAAI,OAAO,YAAY,QAAQ,OAAO,aAAa,GACjD,aAAa,cAAc,OAAO,SAAS;CAE7C,IAAI,OAAO,UACT,aAAa;CAEf,aAAa,sBAAsB;CACnC,OAAO,UAAU,KAAK;AACxB"}

package/dist/cjs/tools/cloudflare/CloudflareSandboxTools.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"CloudflareSandboxTools.cjs","names":["getCloudflareWorkspaceRoot","formatCloudflareOutput","executeCloudflareCode","CodeExecutionToolName","CodeExecutionToolSchema","executeCloudflareBash","BashExecutionToolName","BashToolOutputReferencesGuide","BashExecutionToolSchema","createCloudflareLocalExecutionConfig","createLocalFileCheckpointer","createCloudflareWorkspaceFS","createLocalReadFileTool","createLocalWriteFileTool","createLocalEditFileTool","createLocalGrepSearchTool","createLocalGlobSearchTool","createLocalListDirectoryTool","createCompileCheckTool","createCloudflareProgrammaticToolCallingTool","createCloudflareBashProgrammaticToolCallingTool"],"sources":["../../../../src/tools/cloudflare/CloudflareSandboxTools.ts"],"sourcesContent":["import { tool } from '@langchain/core/tools';\nimport type { DynamicStructuredTool } from '@langchain/core/tools';\nimport type * as t from '@/types';\nimport {\n  createCloudflareLocalExecutionConfig,\n  createCloudflareWorkspaceFS,\n  executeCloudflareBash,\n  executeCloudflareCode,\n  formatCloudflareOutput,\n  getCloudflareWorkspaceRoot,\n} from './CloudflareSandboxExecutionEngine';\nimport {\n  createLocalReadFileTool,\n  createLocalWriteFileTool,\n  createLocalEditFileTool,\n  createLocalGrepSearchTool,\n  createLocalGlobSearchTool,\n  createLocalListDirectoryTool,\n} from '@/tools/local/LocalCodingTools';\nimport {\n  createCloudflareBashProgrammaticToolCallingTool,\n  createCloudflareProgrammaticToolCallingTool,\n} from './CloudflareProgrammaticToolCalling';\nimport {\n  BashExecutionToolName,\n  BashExecutionToolSchema,\n  BashToolOutputReferencesGuide,\n} from '@/tools/BashExecutor';\nimport {\n  CodeExecutionToolName,\n  CodeExecutionToolSchema,\n} from '@/tools/CodeExecutor';\nimport { createLocalFileCheckpointer } from '@/tools/local/FileCheckpointer';\nimport { createCompileCheckTool } from '@/tools/local/CompileCheckTool';\nimport { Constants } from '@/common';\n\nexport const CLOUDFLARE_CODING_TOOL_NAMES: readonly string[] = [\n  Constants.READ_FILE,\n  Constants.WRITE_FILE,\n  Constants.EDIT_FILE,\n  Constants.GREP_SEARCH,\n  Constants.GLOB_SEARCH,\n  Constants.LIST_DIRECTORY,\n  Constants.COMPILE_CHECK,\n  Constants.BASH_TOOL,\n  Constants.EXECUTE_CODE,\n  Constants.PROGRAMMATIC_TOOL_CALLING,\n  Constants.BASH_PROGRAMMATIC_TOOL_CALLING,\n];\n\nexport const CLOUDFLARE_BASH_CODING_TOOL_NAMES: readonly string[] = [\n  Constants.READ_FILE,\n  Constants.WRITE_FILE,\n  Constants.EDIT_FILE,\n  Constants.GREP_SEARCH,\n  Constants.GLOB_SEARCH,\n  Constants.LIST_DIRECTORY,\n  Constants.COMPILE_CHECK,\n  Constants.BASH_TOOL,\n  Constants.BASH_PROGRAMMATIC_TOOL_CALLING,\n];\n\nexport const CloudflareCodeExecutionToolDescription = `\nRuns code inside the configured Cloudflare Sandbox workspace. The sandbox can see files and installed runtimes available inside the Cloudflare Sandbox container.\n\nUsage:\n- Commands execute in the Cloudflare Sandbox workspace and may modify sandbox files.\n- Input code is already displayed to the user, so do not repeat it unless asked.\n- Output is not displayed unless you print it explicitly.\n`.trim();\n\nexport const CloudflareBashExecutionToolDescription = `\nRuns bash commands inside the configured Cloudflare Sandbox workspace.\n\nUsage:\n- Commands execute in the Cloudflare Sandbox workspace and may modify sandbox files.\n- Output is not displayed unless you print it explicitly.\n- Prefer project-native commands and inspect files before changing them.\n`.trim();\n\nexport function createCloudflareCodeExecutionTool(\n  config: t.CloudflareSandboxExecutionConfig\n): DynamicStructuredTool {\n  return tool(\n    async (rawInput) => {\n      const input = rawInput as {\n        lang: string;\n        code: string;\n        args?: string[];\n      };\n      const cwd = getCloudflareWorkspaceRoot(config);\n      const result = await executeCloudflareCode(input, config);\n      return [\n        formatCloudflareOutput(result, cwd),\n        {\n          session_id: 'cloudflare-sandbox',\n          files: [],\n        } satisfies t.CodeExecutionArtifact,\n      ];\n    },\n    {\n      name: CodeExecutionToolName,\n      description: CloudflareCodeExecutionToolDescription,\n      schema: CodeExecutionToolSchema,\n      responseFormat: Constants.CONTENT_AND_ARTIFACT,\n    }\n  );\n}\n\nexport function createCloudflareBashExecutionTool(options: {\n  config: t.CloudflareSandboxExecutionConfig;\n  enableToolOutputReferences?: boolean;\n}): DynamicStructuredTool {\n  const { config } = options;\n  return tool(\n    async (rawInput) => {\n      const input = rawInput as { command: string; args?: string[] };\n      const cwd = getCloudflareWorkspaceRoot(config);\n      const result = await executeCloudflareBash(\n        input.command,\n        config,\n        input.args ?? []\n      );\n      return [\n        formatCloudflareOutput(result, cwd),\n        {\n          session_id: 'cloudflare-sandbox',\n          files: [],\n        } satisfies t.CodeExecutionArtifact,\n      ];\n    },\n    {\n      name: BashExecutionToolName,\n      description:\n        options.enableToolOutputReferences === true\n          ? `${CloudflareBashExecutionToolDescription}\\n\\n${BashToolOutputReferencesGuide}`\n          : CloudflareBashExecutionToolDescription,\n      schema: BashExecutionToolSchema,\n      responseFormat: Constants.CONTENT_AND_ARTIFACT,\n    }\n  );\n}\n\nexport type CloudflareCodingToolBundle = {\n  tools: DynamicStructuredTool[];\n  checkpointer?: t.LocalFileCheckpointer;\n};\n\nfunction getSelectedCodingToolNames(\n  config: t.CloudflareSandboxExecutionConfig\n): Set<string> {\n  return new Set(config.codingToolNames ?? CLOUDFLARE_CODING_TOOL_NAMES);\n}\n\nexport function createCloudflareCodingTools(\n  config: t.CloudflareSandboxExecutionConfig,\n  options: { checkpointer?: t.LocalFileCheckpointer } = {}\n): DynamicStructuredTool[] {\n  const localConfig = createCloudflareLocalExecutionConfig(config);\n  const checkpointer =\n    options.checkpointer ??\n    (config.fileCheckpointing === true\n      ? createLocalFileCheckpointer({\n        fs: createCloudflareWorkspaceFS(config),\n      })\n      : undefined);\n  const tools = [\n    [Constants.READ_FILE, createLocalReadFileTool(localConfig)],\n    [Constants.WRITE_FILE, createLocalWriteFileTool(localConfig, checkpointer)],\n    [Constants.EDIT_FILE, createLocalEditFileTool(localConfig, checkpointer)],\n    [Constants.GREP_SEARCH, createLocalGrepSearchTool(localConfig)],\n    [Constants.GLOB_SEARCH, createLocalGlobSearchTool(localConfig)],\n    [Constants.LIST_DIRECTORY, createLocalListDirectoryTool(localConfig)],\n    [Constants.COMPILE_CHECK, createCompileCheckTool(localConfig)],\n    [Constants.BASH_TOOL, createCloudflareBashExecutionTool({ config })],\n    [Constants.EXECUTE_CODE, createCloudflareCodeExecutionTool(config)],\n    [\n      Constants.PROGRAMMATIC_TOOL_CALLING,\n      createCloudflareProgrammaticToolCallingTool(config),\n    ],\n    [\n      Constants.BASH_PROGRAMMATIC_TOOL_CALLING,\n      createCloudflareBashProgrammaticToolCallingTool(config),\n    ],\n  ] satisfies Array<[string, DynamicStructuredTool]>;\n  const selectedNames = getSelectedCodingToolNames(config);\n  return tools\n    .filter(([name]) => selectedNames.has(name))\n    .map(([, selectedTool]) => selectedTool);\n}\n\nexport function createCloudflareCodingToolBundle(\n  config: t.CloudflareSandboxExecutionConfig,\n  options: { checkpointer?: t.LocalFileCheckpointer } = {}\n): CloudflareCodingToolBundle {\n  const checkpointer =\n    options.checkpointer ??\n    (config.fileCheckpointing === true\n      ? createLocalFileCheckpointer({\n        fs: createCloudflareWorkspaceFS(config),\n      })\n      : undefined);\n  return {\n    tools: createCloudflareCodingTools(config, { checkpointer }),\n    checkpointer,\n  };\n}\n\nexport function createCloudflareExecutionTool(\n  name: string,\n  config: t.CloudflareSandboxExecutionConfig\n): t.GenericTool | undefined {\n  switch (name) {\n  case Constants.EXECUTE_CODE:\n    return createCloudflareCodeExecutionTool(config);\n  case Constants.BASH_TOOL:\n    return createCloudflareBashExecutionTool({ config });\n  case Constants.PROGRAMMATIC_TOOL_CALLING:\n    return createCloudflareProgrammaticToolCallingTool(config);\n  case Constants.BASH_PROGRAMMATIC_TOOL_CALLING:\n    return createCloudflareBashProgrammaticToolCallingTool(config);\n  default:\n    return undefined;\n  }\n}\n"],"mappings":";;;;;;;;;;;AAoCA,MAAa,+BAAkD;;;;;;;;;;;;AAY/D;AAEA,MAAa,oCAAuD;;;;;;;;;;AAUpE;AAEA,MAAa,yCAAyC;;;;;;;EAOpD,KAAK;AAEP,MAAa,yCAAyC;;;;;;;EAOpD,KAAK;AAEP,SAAgB,kCACd,QACuB;CACvB,QAAA,GAAA,sBAAA,KAAA,CACE,OAAO,aAAa;EAClB,MAAM,QAAQ;EAKd,MAAM,MAAMA,yCAAAA,2BAA2B,MAAM;EAE7C,OAAO,CACLC,yCAAAA,uBAAuB,MAFJC,yCAAAA,sBAAsB,OAAO,MAAM,GAEvB,GAAG,GAClC;GACE,YAAY;GACZ,OAAO,CAAC;EACV,CACF;CACF,GACA;EACE,MAAMC,qBAAAA;EACN,aAAa;EACb,QAAQC,qBAAAA;EACR,gBAAA;CACF,CACF;AACF;AAEA,SAAgB,kCAAkC,SAGxB;CACxB,MAAM,EAAE,WAAW;CACnB,QAAA,GAAA,sBAAA,KAAA,CACE,OAAO,aAAa;EAClB,MAAM,QAAQ;EACd,MAAM,MAAMJ,yCAAAA,2BAA2B,MAAM;EAM7C,OAAO,CACLC,yCAAAA,uBAAuB,MANJI,yCAAAA,sBACnB,MAAM,SACN,QACA,MAAM,QAAQ,CAAC,CACjB,GAEiC,GAAG,GAClC;GACE,YAAY;GACZ,OAAO,CAAC;EACV,CACF;CACF,GACA;EACE,MAAMC,qBAAAA;EACN,aACE,QAAQ,+BAA+B,OACnC,GAAG,uCAAuC,MAAMC,qBAAAA,kCAChD;EACN,QAAQC,qBAAAA;EACR,gBAAA;CACF,CACF;AACF;AAOA,SAAS,2BACP,QACa;CACb,OAAO,IAAI,IAAI,OAAO,mBAAmB,4BAA4B;AACvE;AAEA,SAAgB,4BACd,QACA,UAAsD,CAAC,GAC9B;CACzB,MAAM,cAAcC,yCAAAA,qCAAqC,MAAM;CAC/D,MAAM,eACJ,QAAQ,iBACP,OAAO,sBAAsB,OAC1BC,yBAAAA,4BAA4B,EAC5B,IAAIC,yCAAAA,4BAA4B,MAAM,EACxC,CAAC,IACC,KAAA;CACN,MAAM,QAAQ;EACZ,CAAA,aAAsBC,yBAAAA,wBAAwB,WAAW,CAAC;EAC1D,CAAA,cAAuBC,yBAAAA,yBAAyB,aAAa,YAAY,CAAC;EAC1E,CAAA,aAAsBC,yBAAAA,wBAAwB,aAAa,YAAY,CAAC;EACxE,CAAA,eAAwBC,yBAAAA,0BAA0B,WAAW,CAAC;EAC9D,CAAA,eAAwBC,yBAAAA,0BAA0B,WAAW,CAAC;EAC9D,CAAA,kBAA2BC,yBAAAA,6BAA6B,WAAW,CAAC;EACpE,CAAA,iBAA0BC,yBAAAA,uBAAuB,WAAW,CAAC;EAC7D,CAAA,aAAsB,kCAAkC,EAAE,OAAO,CAAC,CAAC;EACnE,CAAA,gBAAyB,kCAAkC,MAAM,CAAC;EAClE,CAAA,uBAEEC,0CAAAA,4CAA4C,MAAM,CACpD;EACA,CAAA,uBAEEC,0CAAAA,gDAAgD,MAAM,CACxD;CACF;CACA,MAAM,gBAAgB,2BAA2B,MAAM;CACvD,OAAO,MACJ,QAAQ,CAAC,UAAU,cAAc,IAAI,IAAI,CAAC,CAAC,CAC3C,KAAK,GAAG,kBAAkB,YAAY;AAC3C;AAEA,SAAgB,iCACd,QACA,UAAsD,CAAC,GAC3B;CAC5B,MAAM,eACJ,QAAQ,iBACP,OAAO,sBAAsB,OAC1BV,yBAAAA,4BAA4B,EAC5B,IAAIC,yCAAAA,4BAA4B,MAAM,EACxC,CAAC,IACC,KAAA;CACN,OAAO;EACL,OAAO,4BAA4B,QAAQ,EAAE,aAAa,CAAC;EAC3D;CACF;AACF;AAEA,SAAgB,8BACd,MACA,QAC2B;CAC3B,QAAQ,MAAR;EACA,KAAA,gBACE,OAAO,kCAAkC,MAAM;EACjD,KAAA,aACE,OAAO,kCAAkC,EAAE,OAAO,CAAC;EACrD,KAAA,uBACE,OAAOQ,0CAAAA,4CAA4C,MAAM;EAC3D,KAAA,uBACE,OAAOC,0CAAAA,gDAAgD,MAAM;EAC/D,SACE;CACF;AACF"}
+{"version":3,"file":"CloudflareSandboxTools.cjs","names":["getCloudflareWorkspaceRoot","formatCloudflareOutput","executeCloudflareCode","CodeExecutionToolName","CodeExecutionToolSchema","executeCloudflareBash","BashExecutionToolName","BashToolOutputReferencesGuide","BashExecutionToolSchema","createCloudflareLocalExecutionConfig","createLocalFileCheckpointer","createCloudflareWorkspaceFS","createLocalReadFileTool","createLocalWriteFileTool","createLocalEditFileTool","createLocalGrepSearchTool","createLocalGlobSearchTool","createLocalListDirectoryTool","createCompileCheckTool","createCloudflareProgrammaticToolCallingTool","createCloudflareBashProgrammaticToolCallingTool"],"sources":["../../../../src/tools/cloudflare/CloudflareSandboxTools.ts"],"mappings":";;;;;;;;;;;AAoCA,MAAa,+BAAkD;;;;;;;;;;;;AAY/D;AAEA,MAAa,oCAAuD;;;;;;;;;;AAUpE;AAEA,MAAa,yCAAyC;;;;;;;EAOpD,KAAK;AAEP,MAAa,yCAAyC;;;;;;;EAOpD,KAAK;AAEP,SAAgB,kCACd,QACuB;CACvB,QAAA,GAAA,sBAAA,KAAA,CACE,OAAO,aAAa;EAClB,MAAM,QAAQ;EAKd,MAAM,MAAMA,yCAAAA,2BAA2B,MAAM;EAE7C,OAAO,CACLC,yCAAAA,uBAAuB,MAFJC,yCAAAA,sBAAsB,OAAO,MAAM,GAEvB,GAAG,GAClC;GACE,YAAY;GACZ,OAAO,CAAC;EACV,CACF;CACF,GACA;EACE,MAAMC,qBAAAA;EACN,aAAa;EACb,QAAQC,qBAAAA;EACR,gBAAA;CACF,CACF;AACF;AAEA,SAAgB,kCAAkC,SAGxB;CACxB,MAAM,EAAE,WAAW;CACnB,QAAA,GAAA,sBAAA,KAAA,CACE,OAAO,aAAa;EAClB,MAAM,QAAQ;EACd,MAAM,MAAMJ,yCAAAA,2BAA2B,MAAM;EAM7C,OAAO,CACLC,yCAAAA,uBAAuB,MANJI,yCAAAA,sBACnB,MAAM,SACN,QACA,MAAM,QAAQ,CAAC,CACjB,GAEiC,GAAG,GAClC;GACE,YAAY;GACZ,OAAO,CAAC;EACV,CACF;CACF,GACA;EACE,MAAMC,qBAAAA;EACN,aACE,QAAQ,+BAA+B,OACnC,GAAG,uCAAuC,MAAMC,qBAAAA,kCAChD;EACN,QAAQC,qBAAAA;EACR,gBAAA;CACF,CACF;AACF;AAOA,SAAS,2BACP,QACa;CACb,OAAO,IAAI,IAAI,OAAO,mBAAmB,4BAA4B;AACvE;AAEA,SAAgB,4BACd,QACA,UAAsD,CAAC,GAC9B;CACzB,MAAM,cAAcC,yCAAAA,qCAAqC,MAAM;CAC/D,MAAM,eACJ,QAAQ,iBACP,OAAO,sBAAsB,OAC1BC,yBAAAA,4BAA4B,EAC5B,IAAIC,yCAAAA,4BAA4B,MAAM,EACxC,CAAC,IACC,KAAA;CACN,MAAM,QAAQ;EACZ,CAAA,aAAsBC,yBAAAA,wBAAwB,WAAW,CAAC;EAC1D,CAAA,cAAuBC,yBAAAA,yBAAyB,aAAa,YAAY,CAAC;EAC1E,CAAA,aAAsBC,yBAAAA,wBAAwB,aAAa,YAAY,CAAC;EACxE,CAAA,eAAwBC,yBAAAA,0BAA0B,WAAW,CAAC;EAC9D,CAAA,eAAwBC,yBAAAA,0BAA0B,WAAW,CAAC;EAC9D,CAAA,kBAA2BC,yBAAAA,6BAA6B,WAAW,CAAC;EACpE,CAAA,iBAA0BC,yBAAAA,uBAAuB,WAAW,CAAC;EAC7D,CAAA,aAAsB,kCAAkC,EAAE,OAAO,CAAC,CAAC;EACnE,CAAA,gBAAyB,kCAAkC,MAAM,CAAC;EAClE,CAAA,uBAEEC,0CAAAA,4CAA4C,MAAM,CACpD;EACA,CAAA,uBAEEC,0CAAAA,gDAAgD,MAAM,CACxD;CACF;CACA,MAAM,gBAAgB,2BAA2B,MAAM;CACvD,OAAO,MACJ,QAAQ,CAAC,UAAU,cAAc,IAAI,IAAI,CAAC,CAAC,CAC3C,KAAK,GAAG,kBAAkB,YAAY;AAC3C;AAEA,SAAgB,iCACd,QACA,UAAsD,CAAC,GAC3B;CAC5B,MAAM,eACJ,QAAQ,iBACP,OAAO,sBAAsB,OAC1BV,yBAAAA,4BAA4B,EAC5B,IAAIC,yCAAAA,4BAA4B,MAAM,EACxC,CAAC,IACC,KAAA;CACN,OAAO;EACL,OAAO,4BAA4B,QAAQ,EAAE,aAAa,CAAC;EAC3D;CACF;AACF;AAEA,SAAgB,8BACd,MACA,QAC2B;CAC3B,QAAQ,MAAR;EACA,KAAA,gBACE,OAAO,kCAAkC,MAAM;EACjD,KAAA,aACE,OAAO,kCAAkC,EAAE,OAAO,CAAC;EACrD,KAAA,uBACE,OAAOQ,0CAAAA,4CAA4C,MAAM;EAC3D,KAAA,uBACE,OAAOC,0CAAAA,gDAAgD,MAAM;EAC/D,SACE;CACF;AACF"}

package/dist/cjs/tools/eagerEventExecution.cjs

@@ -22,12 +22,6 @@ function recordArgsEqual(left, right) {
 function normalizeError(error) {
 	return error instanceof Error ? error : new Error(String(error));
 }
-/**
-* Stateful runtime session hint for the remote sandbox: only when
-* `toolExecution.sandbox.statefulSessions` is on; explicit host hint else the
-* conversation `thread_id`. Undefined disables the wire field. Shared by the
-* direct ToolNode path and both event-driven planners so they stay in lockstep.
-*/
 function resolveRuntimeSessionHint(toolExecution, threadId) {
 	const sandbox = toolExecution?.sandbox;
 	if (sandbox?.statefulSessions !== true) return;

package/dist/cjs/tools/eagerEventExecution.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"eagerEventExecution.cjs","names":[],"sources":["../../../src/tools/eagerEventExecution.ts"],"sourcesContent":["import type * as t from '@/types';\n\nexport function coerceRecordArgs(\n  args: unknown\n): Record<string, unknown> | undefined {\n  if (typeof args === 'string') {\n    try {\n      const parsed = JSON.parse(args) as unknown;\n      return coerceRecordArgs(parsed);\n    } catch {\n      return undefined;\n    }\n  }\n\n  if (args === null || typeof args !== 'object' || Array.isArray(args)) {\n    return undefined;\n  }\n\n  return args as Record<string, unknown>;\n}\n\nexport function stableStringify(value: unknown): string {\n  if (Array.isArray(value)) {\n    return `[${value.map((item) => stableStringify(item)).join(',')}]`;\n  }\n\n  if (value !== null && typeof value === 'object') {\n    const record = value as Record<string, unknown>;\n    const keys = Object.keys(record).sort();\n    return `{${keys\n      .map((key) => `${JSON.stringify(key)}:${stableStringify(record[key])}`)\n      .join(',')}}`;\n  }\n\n  return JSON.stringify(value);\n}\n\nexport function recordArgsEqual(\n  left: Record<string, unknown>,\n  right: Record<string, unknown>\n): boolean {\n  return stableStringify(left) === stableStringify(right);\n}\n\nexport function normalizeError(error: unknown): Error {\n  return error instanceof Error ? error : new Error(String(error));\n}\n\nexport type ToolExecutionPlanCall = {\n  id?: string;\n  name: string;\n  args: unknown;\n  stepId?: string;\n  codeSessionContext?: t.ToolCallRequest['codeSessionContext'];\n  runtimeSessionHint?: string;\n};\n\n/**\n * Stateful runtime session hint for the remote sandbox: only when\n * `toolExecution.sandbox.statefulSessions` is on; explicit host hint else the\n * conversation `thread_id`. Undefined disables the wire field. Shared by the\n * direct ToolNode path and both event-driven planners so they stay in lockstep.\n */\nexport function resolveRuntimeSessionHint(\n  toolExecution: t.ToolExecutionConfig | undefined,\n  threadId: string | undefined\n): string | undefined {\n  const sandbox = toolExecution?.sandbox;\n  if (sandbox?.statefulSessions !== true) {\n    return undefined;\n  }\n  const explicit = sandbox.runtimeSessionHint;\n  if (explicit != null && explicit !== '') {\n    return explicit;\n  }\n  return threadId != null && threadId !== '' ? threadId : undefined;\n}\n\nexport type ToolExecutionRequestPlan = {\n  allRequests: t.ToolCallRequest[];\n  requests: t.ToolCallRequest[];\n  rejectedResults: t.ToolExecuteResult[];\n};\n\nexport function buildToolExecutionRequestPlan(args: {\n  toolCalls: ToolExecutionPlanCall[];\n  usageCount: Map<string, number>;\n  invalidArgsBehavior?: 'abort' | 'error-result';\n  recordTurn?: (toolName: string, turn: number, callId: string) => void;\n}): ToolExecutionRequestPlan | undefined {\n  const invalidArgsBehavior = args.invalidArgsBehavior ?? 'abort';\n  const prepared: Array<{\n    id: string;\n    name: string;\n    args: Record<string, unknown>;\n    stepId?: string;\n    codeSessionContext?: t.ToolCallRequest['codeSessionContext'];\n    runtimeSessionHint?: string;\n    rejectedErrorMessage?: string;\n  }> = [];\n\n  for (const toolCall of args.toolCalls) {\n    if (toolCall.id == null || toolCall.id === '' || toolCall.name === '') {\n      return undefined;\n    }\n    const coercedArgs = coerceRecordArgs(toolCall.args);\n    if (coercedArgs == null) {\n      if (invalidArgsBehavior === 'abort') {\n        return undefined;\n      }\n      prepared.push({\n        id: toolCall.id,\n        name: toolCall.name,\n        args: {},\n        stepId: toolCall.stepId,\n        codeSessionContext: toolCall.codeSessionContext,\n        runtimeSessionHint: toolCall.runtimeSessionHint,\n        rejectedErrorMessage:\n          'Invalid tool call arguments: expected a JSON object.',\n      });\n      continue;\n    }\n    prepared.push({\n      id: toolCall.id,\n      name: toolCall.name,\n      args: coercedArgs,\n      stepId: toolCall.stepId,\n      codeSessionContext: toolCall.codeSessionContext,\n      runtimeSessionHint: toolCall.runtimeSessionHint,\n    });\n  }\n\n  const nextUsageCount = new Map(args.usageCount);\n  const allRequests = prepared.map((toolCall): t.ToolCallRequest => {\n    const turn = nextUsageCount.get(toolCall.name) ?? 0;\n    nextUsageCount.set(toolCall.name, turn + 1);\n    const request: t.ToolCallRequest = {\n      id: toolCall.id,\n      name: toolCall.name,\n      args: toolCall.args,\n      stepId: toolCall.stepId,\n      turn,\n    };\n    if (toolCall.codeSessionContext != null) {\n      request.codeSessionContext = toolCall.codeSessionContext;\n    }\n    if (\n      toolCall.runtimeSessionHint != null &&\n      toolCall.runtimeSessionHint !== ''\n    ) {\n      request.runtimeSessionHint = toolCall.runtimeSessionHint;\n    }\n    return request;\n  });\n  const requests = allRequests.filter(\n    (_, index) => prepared[index].rejectedErrorMessage == null\n  );\n  const rejectedResults = prepared.flatMap((toolCall) => {\n    if (toolCall.rejectedErrorMessage == null) {\n      return [];\n    }\n    return [\n      {\n        toolCallId: toolCall.id,\n        status: 'error' as const,\n        content: '',\n        errorMessage: toolCall.rejectedErrorMessage,\n      },\n    ];\n  });\n\n  for (const [toolName, count] of nextUsageCount) {\n    args.usageCount.set(toolName, count);\n  }\n  for (const request of allRequests) {\n    args.recordTurn?.(request.name, request.turn ?? 0, request.id);\n  }\n\n  return { allRequests, requests, rejectedResults };\n}\n"],"mappings":";AAEA,SAAgB,iBACd,MACqC;CACrC,IAAI,OAAO,SAAS,UAClB,IAAI;EAEF,OAAO,iBADQ,KAAK,MAAM,IACG,CAAC;CAChC,QAAQ;EACN;CACF;CAGF,IAAI,SAAS,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,GACjE;CAGF,OAAO;AACT;AAEA,SAAgB,gBAAgB,OAAwB;CACtD,IAAI,MAAM,QAAQ,KAAK,GACrB,OAAO,IAAI,MAAM,KAAK,SAAS,gBAAgB,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE;CAGlE,IAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;EAC/C,MAAM,SAAS;EAEf,OAAO,IADM,OAAO,KAAK,MAAM,CAAC,CAAC,KACnB,CAAC,CACZ,KAAK,QAAQ,GAAG,KAAK,UAAU,GAAG,EAAE,GAAG,gBAAgB,OAAO,IAAI,GAAG,CAAC,CACtE,KAAK,GAAG,EAAE;CACf;CAEA,OAAO,KAAK,UAAU,KAAK;AAC7B;AAEA,SAAgB,gBACd,MACA,OACS;CACT,OAAO,gBAAgB,IAAI,MAAM,gBAAgB,KAAK;AACxD;AAEA,SAAgB,eAAe,OAAuB;CACpD,OAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AACjE;;;;;;;AAiBA,SAAgB,0BACd,eACA,UACoB;CACpB,MAAM,UAAU,eAAe;CAC/B,IAAI,SAAS,qBAAqB,MAChC;CAEF,MAAM,WAAW,QAAQ;CACzB,IAAI,YAAY,QAAQ,aAAa,IACnC,OAAO;CAET,OAAO,YAAY,QAAQ,aAAa,KAAK,WAAW,KAAA;AAC1D;AAQA,SAAgB,8BAA8B,MAKL;CACvC,MAAM,sBAAsB,KAAK,uBAAuB;CACxD,MAAM,WAQD,CAAC;CAEN,KAAK,MAAM,YAAY,KAAK,WAAW;EACrC,IAAI,SAAS,MAAM,QAAQ,SAAS,OAAO,MAAM,SAAS,SAAS,IACjE;EAEF,MAAM,cAAc,iBAAiB,SAAS,IAAI;EAClD,IAAI,eAAe,MAAM;GACvB,IAAI,wBAAwB,SAC1B;GAEF,SAAS,KAAK;IACZ,IAAI,SAAS;IACb,MAAM,SAAS;IACf,MAAM,CAAC;IACP,QAAQ,SAAS;IACjB,oBAAoB,SAAS;IAC7B,oBAAoB,SAAS;IAC7B,sBACE;GACJ,CAAC;GACD;EACF;EACA,SAAS,KAAK;GACZ,IAAI,SAAS;GACb,MAAM,SAAS;GACf,MAAM;GACN,QAAQ,SAAS;GACjB,oBAAoB,SAAS;GAC7B,oBAAoB,SAAS;EAC/B,CAAC;CACH;CAEA,MAAM,iBAAiB,IAAI,IAAI,KAAK,UAAU;CAC9C,MAAM,cAAc,SAAS,KAAK,aAAgC;EAChE,MAAM,OAAO,eAAe,IAAI,SAAS,IAAI,KAAK;EAClD,eAAe,IAAI,SAAS,MAAM,OAAO,CAAC;EAC1C,MAAM,UAA6B;GACjC,IAAI,SAAS;GACb,MAAM,SAAS;GACf,MAAM,SAAS;GACf,QAAQ,SAAS;GACjB;EACF;EACA,IAAI,SAAS,sBAAsB,MACjC,QAAQ,qBAAqB,SAAS;EAExC,IACE,SAAS,sBAAsB,QAC/B,SAAS,uBAAuB,IAEhC,QAAQ,qBAAqB,SAAS;EAExC,OAAO;CACT,CAAC;CACD,MAAM,WAAW,YAAY,QAC1B,GAAG,UAAU,SAAS,MAAM,CAAC,wBAAwB,IACxD;CACA,MAAM,kBAAkB,SAAS,SAAS,aAAa;EACrD,IAAI,SAAS,wBAAwB,MACnC,OAAO,CAAC;EAEV,OAAO,CACL;GACE,YAAY,SAAS;GACrB,QAAQ;GACR,SAAS;GACT,cAAc,SAAS;EACzB,CACF;CACF,CAAC;CAED,KAAK,MAAM,CAAC,UAAU,UAAU,gBAC9B,KAAK,WAAW,IAAI,UAAU,KAAK;CAErC,KAAK,MAAM,WAAW,aACpB,KAAK,aAAa,QAAQ,MAAM,QAAQ,QAAQ,GAAG,QAAQ,EAAE;CAG/D,OAAO;EAAE;EAAa;EAAU;CAAgB;AAClD"}
+{"version":3,"file":"eagerEventExecution.cjs","names":[],"sources":["../../../src/tools/eagerEventExecution.ts"],"mappings":";AAEA,SAAgB,iBACd,MACqC;CACrC,IAAI,OAAO,SAAS,UAClB,IAAI;EAEF,OAAO,iBADQ,KAAK,MAAM,IACG,CAAC;CAChC,QAAQ;EACN;CACF;CAGF,IAAI,SAAS,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,GACjE;CAGF,OAAO;AACT;AAEA,SAAgB,gBAAgB,OAAwB;CACtD,IAAI,MAAM,QAAQ,KAAK,GACrB,OAAO,IAAI,MAAM,KAAK,SAAS,gBAAgB,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE;CAGlE,IAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;EAC/C,MAAM,SAAS;EAEf,OAAO,IADM,OAAO,KAAK,MAAM,CAAC,CAAC,KACnB,CAAC,CACZ,KAAK,QAAQ,GAAG,KAAK,UAAU,GAAG,EAAE,GAAG,gBAAgB,OAAO,IAAI,GAAG,CAAC,CACtE,KAAK,GAAG,EAAE;CACf;CAEA,OAAO,KAAK,UAAU,KAAK;AAC7B;AAEA,SAAgB,gBACd,MACA,OACS;CACT,OAAO,gBAAgB,IAAI,MAAM,gBAAgB,KAAK;AACxD;AAEA,SAAgB,eAAe,OAAuB;CACpD,OAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AACjE;AAiBA,SAAgB,0BACd,eACA,UACoB;CACpB,MAAM,UAAU,eAAe;CAC/B,IAAI,SAAS,qBAAqB,MAChC;CAEF,MAAM,WAAW,QAAQ;CACzB,IAAI,YAAY,QAAQ,aAAa,IACnC,OAAO;CAET,OAAO,YAAY,QAAQ,aAAa,KAAK,WAAW,KAAA;AAC1D;AAQA,SAAgB,8BAA8B,MAKL;CACvC,MAAM,sBAAsB,KAAK,uBAAuB;CACxD,MAAM,WAQD,CAAC;CAEN,KAAK,MAAM,YAAY,KAAK,WAAW;EACrC,IAAI,SAAS,MAAM,QAAQ,SAAS,OAAO,MAAM,SAAS,SAAS,IACjE;EAEF,MAAM,cAAc,iBAAiB,SAAS,IAAI;EAClD,IAAI,eAAe,MAAM;GACvB,IAAI,wBAAwB,SAC1B;GAEF,SAAS,KAAK;IACZ,IAAI,SAAS;IACb,MAAM,SAAS;IACf,MAAM,CAAC;IACP,QAAQ,SAAS;IACjB,oBAAoB,SAAS;IAC7B,oBAAoB,SAAS;IAC7B,sBACE;GACJ,CAAC;GACD;EACF;EACA,SAAS,KAAK;GACZ,IAAI,SAAS;GACb,MAAM,SAAS;GACf,MAAM;GACN,QAAQ,SAAS;GACjB,oBAAoB,SAAS;GAC7B,oBAAoB,SAAS;EAC/B,CAAC;CACH;CAEA,MAAM,iBAAiB,IAAI,IAAI,KAAK,UAAU;CAC9C,MAAM,cAAc,SAAS,KAAK,aAAgC;EAChE,MAAM,OAAO,eAAe,IAAI,SAAS,IAAI,KAAK;EAClD,eAAe,IAAI,SAAS,MAAM,OAAO,CAAC;EAC1C,MAAM,UAA6B;GACjC,IAAI,SAAS;GACb,MAAM,SAAS;GACf,MAAM,SAAS;GACf,QAAQ,SAAS;GACjB;EACF;EACA,IAAI,SAAS,sBAAsB,MACjC,QAAQ,qBAAqB,SAAS;EAExC,IACE,SAAS,sBAAsB,QAC/B,SAAS,uBAAuB,IAEhC,QAAQ,qBAAqB,SAAS;EAExC,OAAO;CACT,CAAC;CACD,MAAM,WAAW,YAAY,QAC1B,GAAG,UAAU,SAAS,MAAM,CAAC,wBAAwB,IACxD;CACA,MAAM,kBAAkB,SAAS,SAAS,aAAa;EACrD,IAAI,SAAS,wBAAwB,MACnC,OAAO,CAAC;EAEV,OAAO,CACL;GACE,YAAY,SAAS;GACrB,QAAQ;GACR,SAAS;GACT,cAAc,SAAS;EACzB,CACF;CACF,CAAC;CAED,KAAK,MAAM,CAAC,UAAU,UAAU,gBAC9B,KAAK,WAAW,IAAI,UAAU,KAAK;CAErC,KAAK,MAAM,WAAW,aACpB,KAAK,aAAa,QAAQ,MAAM,QAAQ,QAAQ,GAAG,QAAQ,EAAE;CAG/D,OAAO;EAAE;EAAa;EAAU;CAAgB;AAClD"}

package/dist/cjs/tools/handlers.cjs

@@ -14,7 +14,6 @@ async function handleToolCallChunks({ graph, stepKey, toolCallChunks, metadata }
 		prevStepId = graph.getStepIdByKey(stepKey);
 		prevRunStep = graph.getRunStep(prevStepId);
 	} catch {
-		/** Edge Case: If no previous step exists, create a new message creation step */
 		const message_id = require_ids.getMessageId(stepKey, graph, true) ?? "";
 		prevStepId = await graph.dispatchRunStep(stepKey, {
 			type: "message_creation",
@@ -23,9 +22,7 @@ async function handleToolCallChunks({ graph, stepKey, toolCallChunks, metadata }
 		prevRunStep = graph.getRunStep(prevStepId);
 	}
 	const _stepId = graph.getStepIdByKey(stepKey);
-	/** Edge Case: Tool Call Run Step or `tool_call_ids` never dispatched */
 	const tool_calls = prevStepId && prevRunStep && prevRunStep.type === "message_creation" ? [] : void 0;
-	/** Edge Case: `id` and `name` fields cannot be empty strings */
 	for (const toolCallChunk of toolCallChunks) {
 		if (toolCallChunk.name === "") toolCallChunk.name = void 0;
 		if (toolCallChunk.id === "") toolCallChunk.id = void 0;
@@ -38,23 +35,8 @@ async function handleToolCallChunks({ graph, stepKey, toolCallChunks, metadata }
 	}
 	let stepId = _stepId;
 	const alreadyDispatched = prevRunStep?.type === "message_creation" && graph.messageStepHasToolCalls.has(prevStepId);
-	if (prevRunStep?.type === "tool_calls")
- /**
-	* If previous step is already a tool_calls step, use that step ID
-	* This ensures tool call deltas are dispatched to the correct step
-	*/
-	stepId = prevStepId;
+	if (prevRunStep?.type === "tool_calls") stepId = prevStepId;
 	else if (!alreadyDispatched && prevRunStep?.type === "message_creation") {
-		/**
-		* Create tool_calls step as soon as we receive the first tool call chunk
-		* This ensures deltas are always associated with the correct step
-		*
-		* NOTE: We do NOT dispatch an empty text block here because:
-		* - Empty text blocks cause providers (Anthropic, Bedrock) to reject messages
-		* - The tool_calls themselves are sufficient for the step
-		* - Empty content with tool_call_ids gets stored in conversation history
-		*   and causes "messages must have non-empty content" errors on replay
-		*/
 		graph.messageStepHasToolCalls.set(prevStepId, true);
 		stepId = await graph.dispatchRunStep(stepKey, {
 			type: "tool_calls",
@@ -74,11 +56,6 @@ const handleToolCalls = async (toolCalls, metadata, graph) => {
 	if (!toolCalls) return;
 	if (toolCalls.length === 0) return;
 	const stepKey = graph.getStepKey(metadata);
-	/**
-	* Track whether we've already reused an empty TOOL_CALLS step created by
-	* handleToolCallChunks during streaming. Only reuse it once (for the first
-	* tool call); subsequent parallel tool calls must create their own steps.
-	*/
 	let reusedChunkStepId;
 	for (const tool_call of toolCalls) {
 		const toolCallId = tool_call.id ?? `toolu_${(0, nanoid.nanoid)()}`;
@@ -90,11 +67,6 @@ const handleToolCalls = async (toolCalls, metadata, graph) => {
 			prevStepId = graph.getStepIdByKey(stepKey);
 			prevRunStep = graph.getRunStep(prevStepId);
 		} catch {}
-		/**
-		* If the previous step is TOOL_CALLS (from handleToolCallChunks or a prior
-		* iteration), either reuse it (if empty) or dispatch a new TOOL_CALLS step
-		* directly — skip the intermediate MESSAGE_CREATION to avoid orphaned gaps.
-		*/
 		if (prevRunStep?.type === "tool_calls") {
 			const details = prevRunStep.stepDetails;
 			if ((!details.tool_calls || details.tool_calls.length === 0) && prevStepId !== reusedChunkStepId) {
@@ -109,14 +81,6 @@ const handleToolCalls = async (toolCalls, metadata, graph) => {
 			}, metadata);
 			continue;
 		}
-		/**
-		* NOTE: We do NOT dispatch empty text blocks with tool_call_ids because:
-		* - Empty text blocks cause providers (Anthropic, Bedrock) to reject messages
-		* - They get stored in conversation history and cause errors on replay:
-		*   "messages must have non-empty content" (Anthropic)
-		*   "The content field in the Message object is empty" (Bedrock)
-		* - The tool_calls themselves are sufficient
-		*/
 		if (prevStepId && prevRunStep) graph.messageStepHasToolCalls.set(prevStepId, true);
 		else if (!prevRunStep) {
 			const messageId = require_ids.getMessageId(stepKey, graph, true) ?? "";
@@ -137,10 +101,6 @@ const toolResultTypes = new Set([
 	"web_search_result",
 	"web_search_tool_result"
 ]);
-/**
-* Handles the result of a server tool call; in other words, a provider's built-in tool.
-* As of 2025-07-06, only Anthropic handles server tool calls with this pattern.
-*/
 async function handleServerToolResult({ graph, content, metadata, agentContext }) {
 	let skipHandling = false;
 	if (agentContext?.provider !== "anthropic") return skipHandling;

package/dist/cjs/tools/handlers.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"handlers.cjs","names":["getMessageId","isAnthropicWebSearchResult","coerceAnthropicSearchResults","formatResultsForLLM","ToolMessage"],"sources":["../../../src/tools/handlers.ts"],"sourcesContent":["/* eslint-disable no-console */\n// src/tools/handlers.ts\nimport { nanoid } from 'nanoid';\nimport { ToolMessage } from '@langchain/core/messages';\nimport type { ToolCall, ToolCallChunk } from '@langchain/core/messages/tool';\nimport type { AnthropicWebSearchResultBlockParam } from '@/llm/anthropic/types';\nimport type { Graph, MultiAgentGraph, StandardGraph } from '@/graphs';\nimport type { AgentContext } from '@/agents/AgentContext';\nimport type * as t from '@/types';\nimport {\n  coerceAnthropicSearchResults,\n  isAnthropicWebSearchResult,\n} from '@/tools/search/anthropic';\nimport {\n  ToolCallTypes,\n  GraphEvents,\n  StepTypes,\n  Providers,\n  Constants,\n} from '@/common';\nimport { formatResultsForLLM } from '@/tools/search/format';\nimport { getMessageId } from '@/messages';\n\nexport async function handleToolCallChunks({\n  graph,\n  stepKey,\n  toolCallChunks,\n  metadata,\n}: {\n  graph: StandardGraph | MultiAgentGraph;\n  stepKey: string;\n  toolCallChunks: ToolCallChunk[];\n  metadata?: Record<string, unknown>;\n}): Promise<void> {\n  let prevStepId: string;\n  let prevRunStep: t.RunStep | undefined;\n  try {\n    prevStepId = graph.getStepIdByKey(stepKey);\n    prevRunStep = graph.getRunStep(prevStepId);\n  } catch {\n    /** Edge Case: If no previous step exists, create a new message creation step */\n    const message_id = getMessageId(stepKey, graph, true) ?? '';\n    prevStepId = await graph.dispatchRunStep(\n      stepKey,\n      {\n        type: StepTypes.MESSAGE_CREATION,\n        message_creation: {\n          message_id,\n        },\n      },\n      metadata\n    );\n    prevRunStep = graph.getRunStep(prevStepId);\n  }\n\n  const _stepId = graph.getStepIdByKey(stepKey);\n\n  /** Edge Case: Tool Call Run Step or `tool_call_ids` never dispatched */\n  const tool_calls: ToolCall[] | undefined =\n    prevStepId && prevRunStep && prevRunStep.type === StepTypes.MESSAGE_CREATION\n      ? []\n      : undefined;\n\n  /** Edge Case: `id` and `name` fields cannot be empty strings */\n  for (const toolCallChunk of toolCallChunks) {\n    if (toolCallChunk.name === '') {\n      toolCallChunk.name = undefined;\n    }\n    if (toolCallChunk.id === '') {\n      toolCallChunk.id = undefined;\n    } else if (\n      tool_calls != null &&\n      toolCallChunk.id != null &&\n      toolCallChunk.name != null\n    ) {\n      tool_calls.push({\n        args: {},\n        id: toolCallChunk.id,\n        name: toolCallChunk.name,\n        type: ToolCallTypes.TOOL_CALL,\n      });\n    }\n  }\n\n  let stepId: string = _stepId;\n  const alreadyDispatched =\n    prevRunStep?.type === StepTypes.MESSAGE_CREATION &&\n    graph.messageStepHasToolCalls.has(prevStepId);\n\n  if (prevRunStep?.type === StepTypes.TOOL_CALLS) {\n    /**\n     * If previous step is already a tool_calls step, use that step ID\n     * This ensures tool call deltas are dispatched to the correct step\n     */\n    stepId = prevStepId;\n  } else if (\n    !alreadyDispatched &&\n    prevRunStep?.type === StepTypes.MESSAGE_CREATION\n  ) {\n    /**\n     * Create tool_calls step as soon as we receive the first tool call chunk\n     * This ensures deltas are always associated with the correct step\n     *\n     * NOTE: We do NOT dispatch an empty text block here because:\n     * - Empty text blocks cause providers (Anthropic, Bedrock) to reject messages\n     * - The tool_calls themselves are sufficient for the step\n     * - Empty content with tool_call_ids gets stored in conversation history\n     *   and causes \"messages must have non-empty content\" errors on replay\n     */\n    graph.messageStepHasToolCalls.set(prevStepId, true);\n    stepId = await graph.dispatchRunStep(\n      stepKey,\n      {\n        type: StepTypes.TOOL_CALLS,\n        tool_calls: tool_calls ?? [],\n      },\n      metadata\n    );\n  }\n\n  await graph.dispatchRunStepDelta(\n    stepId,\n    {\n      type: StepTypes.TOOL_CALLS,\n      tool_calls: toolCallChunks,\n    },\n    metadata\n  );\n}\n\nexport const handleToolCalls = async (\n  toolCalls?: ToolCall[],\n  metadata?: Record<string, unknown>,\n  graph?: Graph | StandardGraph | MultiAgentGraph\n): Promise<void> => {\n  if (!graph || !metadata) {\n    console.warn('Graph or metadata not found in `handleToolCalls`');\n    return;\n  }\n\n  if (!toolCalls) {\n    return;\n  }\n\n  if (toolCalls.length === 0) {\n    return;\n  }\n\n  const stepKey = graph.getStepKey(metadata);\n\n  /**\n   * Track whether we've already reused an empty TOOL_CALLS step created by\n   * handleToolCallChunks during streaming. Only reuse it once (for the first\n   * tool call); subsequent parallel tool calls must create their own steps.\n   */\n  let reusedChunkStepId: string | undefined;\n\n  for (const tool_call of toolCalls) {\n    const toolCallId = tool_call.id ?? `toolu_${nanoid()}`;\n    tool_call.id = toolCallId;\n    if (!toolCallId || graph.toolCallStepIds.has(toolCallId)) {\n      continue;\n    }\n\n    let prevStepId = '';\n    let prevRunStep: t.RunStep | undefined;\n    try {\n      prevStepId = graph.getStepIdByKey(stepKey);\n      prevRunStep = graph.getRunStep(prevStepId);\n    } catch {\n      // no previous step\n    }\n\n    /**\n     * If the previous step is TOOL_CALLS (from handleToolCallChunks or a prior\n     * iteration), either reuse it (if empty) or dispatch a new TOOL_CALLS step\n     * directly — skip the intermediate MESSAGE_CREATION to avoid orphaned gaps.\n     */\n    if (prevRunStep?.type === StepTypes.TOOL_CALLS) {\n      const details = prevRunStep.stepDetails as t.ToolCallsDetails;\n      const isEmpty = !details.tool_calls || details.tool_calls.length === 0;\n      if (isEmpty && prevStepId !== reusedChunkStepId) {\n        graph.toolCallStepIds.set(toolCallId, prevStepId);\n        graph.registerPendingToolCall(toolCallId, prevStepId);\n        reusedChunkStepId = prevStepId;\n        continue;\n      }\n      await graph.dispatchRunStep(\n        stepKey,\n        { type: StepTypes.TOOL_CALLS, tool_calls: [tool_call] },\n        metadata\n      );\n      continue;\n    }\n\n    /**\n     * NOTE: We do NOT dispatch empty text blocks with tool_call_ids because:\n     * - Empty text blocks cause providers (Anthropic, Bedrock) to reject messages\n     * - They get stored in conversation history and cause errors on replay:\n     *   \"messages must have non-empty content\" (Anthropic)\n     *   \"The content field in the Message object is empty\" (Bedrock)\n     * - The tool_calls themselves are sufficient\n     */\n    if (prevStepId && prevRunStep) {\n      graph.messageStepHasToolCalls.set(prevStepId, true);\n    } else if (!prevRunStep) {\n      const messageId = getMessageId(stepKey, graph, true) ?? '';\n      const stepId = await graph.dispatchRunStep(\n        stepKey,\n        {\n          type: StepTypes.MESSAGE_CREATION,\n          message_creation: {\n            message_id: messageId,\n          },\n        },\n        metadata\n      );\n      graph.messageStepHasToolCalls.set(stepId, true);\n    }\n\n    await graph.dispatchRunStep(\n      stepKey,\n      {\n        type: StepTypes.TOOL_CALLS,\n        tool_calls: [tool_call],\n      },\n      metadata\n    );\n  }\n};\n\nexport const toolResultTypes = new Set([\n  // 'tool_use',\n  // 'server_tool_use',\n  // 'input_json_delta',\n  'tool_result',\n  'web_search_result',\n  'web_search_tool_result',\n]);\n\n/**\n * Handles the result of a server tool call; in other words, a provider's built-in tool.\n * As of 2025-07-06, only Anthropic handles server tool calls with this pattern.\n */\nexport async function handleServerToolResult({\n  graph,\n  content,\n  metadata,\n  agentContext,\n}: {\n  graph: StandardGraph | MultiAgentGraph;\n  content?: string | t.MessageContentComplex[];\n  metadata?: Record<string, unknown>;\n  agentContext?: AgentContext;\n}): Promise<boolean> {\n  let skipHandling = false;\n  if (agentContext?.provider !== Providers.ANTHROPIC) {\n    return skipHandling;\n  }\n  if (\n    typeof content === 'string' ||\n    content == null ||\n    content.length === 0 ||\n    (content.length === 1 &&\n      (content[0] as t.ToolResultContent).tool_use_id == null)\n  ) {\n    return skipHandling;\n  }\n\n  for (const contentPart of content) {\n    const toolUseId = (contentPart as t.ToolResultContent).tool_use_id;\n    if (toolUseId == null || toolUseId === '') {\n      continue;\n    }\n    const stepId = graph.toolCallStepIds.get(toolUseId);\n    if (stepId == null || stepId === '') {\n      console.warn(\n        `Tool use ID ${toolUseId} not found in graph, cannot dispatch tool result.`\n      );\n      continue;\n    }\n    const runStep = graph.getRunStep(stepId);\n    if (!runStep) {\n      console.warn(\n        `Run step for ${stepId} does not exist, cannot dispatch tool result.`\n      );\n      continue;\n    } else if (runStep.type !== StepTypes.TOOL_CALLS) {\n      console.warn(\n        `Run step for ${stepId} is not a tool call step, cannot dispatch tool result.`\n      );\n      continue;\n    }\n\n    const toolCall =\n      runStep.stepDetails.type === StepTypes.TOOL_CALLS\n        ? (runStep.stepDetails.tool_calls?.find(\n          (toolCall) => toolCall.id === toolUseId\n        ) as ToolCall)\n        : undefined;\n\n    if (!toolCall) {\n      continue;\n    }\n\n    if (\n      contentPart.type === 'web_search_result' ||\n      contentPart.type === 'web_search_tool_result'\n    ) {\n      await handleAnthropicSearchResults({\n        contentPart: contentPart as t.ToolResultContent,\n        toolCall,\n        metadata,\n        graph,\n      });\n    }\n\n    if (!skipHandling) {\n      skipHandling = true;\n    }\n  }\n\n  return skipHandling;\n}\n\nasync function handleAnthropicSearchResults({\n  contentPart,\n  toolCall,\n  metadata,\n  graph,\n}: {\n  contentPart: t.ToolResultContent;\n  toolCall: Partial<ToolCall>;\n  metadata?: Record<string, unknown>;\n  graph: StandardGraph | MultiAgentGraph;\n}): Promise<void> {\n  if (!Array.isArray(contentPart.content)) {\n    console.warn(\n      `Expected content to be an array, got ${typeof contentPart.content}`\n    );\n    return;\n  }\n\n  if (!isAnthropicWebSearchResult(contentPart.content[0])) {\n    console.warn(\n      `Expected content to be an Anthropic web search result, got ${JSON.stringify(\n        contentPart.content\n      )}`\n    );\n    return;\n  }\n\n  const turn = graph.invokedToolIds?.size ?? 0;\n  const searchResultData = coerceAnthropicSearchResults({\n    turn,\n    results: contentPart.content as AnthropicWebSearchResultBlockParam[],\n  });\n\n  const name = toolCall.name;\n  const input = toolCall.args ?? {};\n  const artifact = {\n    [Constants.WEB_SEARCH]: searchResultData,\n  };\n  const { output: formattedOutput } = formatResultsForLLM(\n    turn,\n    searchResultData\n  );\n  const output = new ToolMessage({\n    name,\n    artifact,\n    content: formattedOutput,\n    tool_call_id: toolCall.id!,\n  });\n  const toolEndData: t.ToolEndData = {\n    input,\n    output,\n  };\n  await graph.handlerRegistry\n    ?.getHandler(GraphEvents.TOOL_END)\n    ?.handle(GraphEvents.TOOL_END, toolEndData, metadata, graph);\n\n  if (graph.invokedToolIds == null) {\n    graph.invokedToolIds = new Set<string>();\n  }\n\n  graph.invokedToolIds.add(toolCall.id!);\n}\n"],"mappings":";;;;;;;;;AAuBA,eAAsB,qBAAqB,EACzC,OACA,SACA,gBACA,YAMgB;CAChB,IAAI;CACJ,IAAI;CACJ,IAAI;EACF,aAAa,MAAM,eAAe,OAAO;EACzC,cAAc,MAAM,WAAW,UAAU;CAC3C,QAAQ;;EAEN,MAAM,aAAaA,YAAAA,aAAa,SAAS,OAAO,IAAI,KAAK;EACzD,aAAa,MAAM,MAAM,gBACvB,SACA;GACE,MAAA;GACA,kBAAkB,EAChB,WACF;EACF,GACA,QACF;EACA,cAAc,MAAM,WAAW,UAAU;CAC3C;CAEA,MAAM,UAAU,MAAM,eAAe,OAAO;;CAG5C,MAAM,aACJ,cAAc,eAAe,YAAY,SAAA,qBACrC,CAAC,IACD,KAAA;;CAGN,KAAK,MAAM,iBAAiB,gBAAgB;EAC1C,IAAI,cAAc,SAAS,IACzB,cAAc,OAAO,KAAA;EAEvB,IAAI,cAAc,OAAO,IACvB,cAAc,KAAK,KAAA;OACd,IACL,cAAc,QACd,cAAc,MAAM,QACpB,cAAc,QAAQ,MAEtB,WAAW,KAAK;GACd,MAAM,CAAC;GACP,IAAI,cAAc;GAClB,MAAM,cAAc;GACpB,MAAA;EACF,CAAC;CAEL;CAEA,IAAI,SAAiB;CACrB,MAAM,oBACJ,aAAa,SAAA,sBACb,MAAM,wBAAwB,IAAI,UAAU;CAE9C,IAAI,aAAa,SAAA;;;;;CAKf,SAAS;MACJ,IACL,CAAC,qBACD,aAAa,SAAA,oBACb;;;;;;;;;;;EAWA,MAAM,wBAAwB,IAAI,YAAY,IAAI;EAClD,SAAS,MAAM,MAAM,gBACnB,SACA;GACE,MAAA;GACA,YAAY,cAAc,CAAC;EAC7B,GACA,QACF;CACF;CAEA,MAAM,MAAM,qBACV,QACA;EACE,MAAA;EACA,YAAY;CACd,GACA,QACF;AACF;AAEA,MAAa,kBAAkB,OAC7B,WACA,UACA,UACkB;CAClB,IAAI,CAAC,SAAS,CAAC,UAAU;EACvB,QAAQ,KAAK,kDAAkD;EAC/D;CACF;CAEA,IAAI,CAAC,WACH;CAGF,IAAI,UAAU,WAAW,GACvB;CAGF,MAAM,UAAU,MAAM,WAAW,QAAQ;;;;;;CAOzC,IAAI;CAEJ,KAAK,MAAM,aAAa,WAAW;EACjC,MAAM,aAAa,UAAU,MAAM,UAAA,GAAA,OAAA,OAAA,CAAgB;EACnD,UAAU,KAAK;EACf,IAAI,CAAC,cAAc,MAAM,gBAAgB,IAAI,UAAU,GACrD;EAGF,IAAI,aAAa;EACjB,IAAI;EACJ,IAAI;GACF,aAAa,MAAM,eAAe,OAAO;GACzC,cAAc,MAAM,WAAW,UAAU;EAC3C,QAAQ,CAER;;;;;;EAOA,IAAI,aAAa,SAAA,cAA+B;GAC9C,MAAM,UAAU,YAAY;GAE5B,KADgB,CAAC,QAAQ,cAAc,QAAQ,WAAW,WAAW,MACtD,eAAe,mBAAmB;IAC/C,MAAM,gBAAgB,IAAI,YAAY,UAAU;IAChD,MAAM,wBAAwB,YAAY,UAAU;IACpD,oBAAoB;IACpB;GACF;GACA,MAAM,MAAM,gBACV,SACA;IAAE,MAAA;IAA4B,YAAY,CAAC,SAAS;GAAE,GACtD,QACF;GACA;EACF;;;;;;;;;EAUA,IAAI,cAAc,aAChB,MAAM,wBAAwB,IAAI,YAAY,IAAI;OAC7C,IAAI,CAAC,aAAa;GACvB,MAAM,YAAYA,YAAAA,aAAa,SAAS,OAAO,IAAI,KAAK;GACxD,MAAM,SAAS,MAAM,MAAM,gBACzB,SACA;IACE,MAAA;IACA,kBAAkB,EAChB,YAAY,UACd;GACF,GACA,QACF;GACA,MAAM,wBAAwB,IAAI,QAAQ,IAAI;EAChD;EAEA,MAAM,MAAM,gBACV,SACA;GACE,MAAA;GACA,YAAY,CAAC,SAAS;EACxB,GACA,QACF;CACF;AACF;AAEA,MAAa,kBAAkB,IAAI,IAAI;CAIrC;CACA;CACA;AACF,CAAC;;;;;AAMD,eAAsB,uBAAuB,EAC3C,OACA,SACA,UACA,gBAMmB;CACnB,IAAI,eAAe;CACnB,IAAI,cAAc,aAAA,aAChB,OAAO;CAET,IACE,OAAO,YAAY,YACnB,WAAW,QACX,QAAQ,WAAW,KAClB,QAAQ,WAAW,KACjB,QAAQ,EAAE,CAAyB,eAAe,MAErD,OAAO;CAGT,KAAK,MAAM,eAAe,SAAS;EACjC,MAAM,YAAa,YAAoC;EACvD,IAAI,aAAa,QAAQ,cAAc,IACrC;EAEF,MAAM,SAAS,MAAM,gBAAgB,IAAI,SAAS;EAClD,IAAI,UAAU,QAAQ,WAAW,IAAI;GACnC,QAAQ,KACN,eAAe,UAAU,kDAC3B;GACA;EACF;EACA,MAAM,UAAU,MAAM,WAAW,MAAM;EACvC,IAAI,CAAC,SAAS;GACZ,QAAQ,KACN,gBAAgB,OAAO,8CACzB;GACA;EACF,OAAO,IAAI,QAAQ,SAAA,cAA+B;GAChD,QAAQ,KACN,gBAAgB,OAAO,uDACzB;GACA;EACF;EAEA,MAAM,WACJ,QAAQ,YAAY,SAAA,eACf,QAAQ,YAAY,YAAY,MAChC,aAAa,SAAS,OAAO,SAChC,IACE,KAAA;EAEN,IAAI,CAAC,UACH;EAGF,IACE,YAAY,SAAS,uBACrB,YAAY,SAAS,0BAErB,MAAM,6BAA6B;GACpB;GACb;GACA;GACA;EACF,CAAC;EAGH,IAAI,CAAC,cACH,eAAe;CAEnB;CAEA,OAAO;AACT;AAEA,eAAe,6BAA6B,EAC1C,aACA,UACA,UACA,SAMgB;CAChB,IAAI,CAAC,MAAM,QAAQ,YAAY,OAAO,GAAG;EACvC,QAAQ,KACN,wCAAwC,OAAO,YAAY,SAC7D;EACA;CACF;CAEA,IAAI,CAACC,kBAAAA,2BAA2B,YAAY,QAAQ,EAAE,GAAG;EACvD,QAAQ,KACN,8DAA8D,KAAK,UACjE,YAAY,OACd,GACF;EACA;CACF;CAEA,MAAM,OAAO,MAAM,gBAAgB,QAAQ;CAC3C,MAAM,mBAAmBC,kBAAAA,6BAA6B;EACpD;EACA,SAAS,YAAY;CACvB,CAAC;CAED,MAAM,OAAO,SAAS;CACtB,MAAM,QAAQ,SAAS,QAAQ,CAAC;CAChC,MAAM,WAAW,GAAA,eACS,iBAC1B;CACA,MAAM,EAAE,QAAQ,oBAAoBC,eAAAA,oBAClC,MACA,gBACF;CAOA,MAAM,cAA6B;EACjC;EACA,QAAA,IARiBC,yBAAAA,YAAY;GAC7B;GACA;GACA,SAAS;GACT,cAAc,SAAS;EACzB,CAGO;CACP;CACA,MAAM,MAAM,iBACR,WAAA,aAA+B,CAAC,EAChC,OAAA,eAA6B,aAAa,UAAU,KAAK;CAE7D,IAAI,MAAM,kBAAkB,MAC1B,MAAM,iCAAiB,IAAI,IAAY;CAGzC,MAAM,eAAe,IAAI,SAAS,EAAG;AACvC"}
+{"version":3,"file":"handlers.cjs","names":["getMessageId","isAnthropicWebSearchResult","coerceAnthropicSearchResults","formatResultsForLLM","ToolMessage"],"sources":["../../../src/tools/handlers.ts"],"mappings":";;;;;;;;;AAuBA,eAAsB,qBAAqB,EACzC,OACA,SACA,gBACA,YAMgB;CAChB,IAAI;CACJ,IAAI;CACJ,IAAI;EACF,aAAa,MAAM,eAAe,OAAO;EACzC,cAAc,MAAM,WAAW,UAAU;CAC3C,QAAQ;EAEN,MAAM,aAAaA,YAAAA,aAAa,SAAS,OAAO,IAAI,KAAK;EACzD,aAAa,MAAM,MAAM,gBACvB,SACA;GACE,MAAA;GACA,kBAAkB,EAChB,WACF;EACF,GACA,QACF;EACA,cAAc,MAAM,WAAW,UAAU;CAC3C;CAEA,MAAM,UAAU,MAAM,eAAe,OAAO;CAG5C,MAAM,aACJ,cAAc,eAAe,YAAY,SAAA,qBACrC,CAAC,IACD,KAAA;CAGN,KAAK,MAAM,iBAAiB,gBAAgB;EAC1C,IAAI,cAAc,SAAS,IACzB,cAAc,OAAO,KAAA;EAEvB,IAAI,cAAc,OAAO,IACvB,cAAc,KAAK,KAAA;OACd,IACL,cAAc,QACd,cAAc,MAAM,QACpB,cAAc,QAAQ,MAEtB,WAAW,KAAK;GACd,MAAM,CAAC;GACP,IAAI,cAAc;GAClB,MAAM,cAAc;GACpB,MAAA;EACF,CAAC;CAEL;CAEA,IAAI,SAAiB;CACrB,MAAM,oBACJ,aAAa,SAAA,sBACb,MAAM,wBAAwB,IAAI,UAAU;CAE9C,IAAI,aAAa,SAAA,cAKf,SAAS;MACJ,IACL,CAAC,qBACD,aAAa,SAAA,oBACb;EAWA,MAAM,wBAAwB,IAAI,YAAY,IAAI;EAClD,SAAS,MAAM,MAAM,gBACnB,SACA;GACE,MAAA;GACA,YAAY,cAAc,CAAC;EAC7B,GACA,QACF;CACF;CAEA,MAAM,MAAM,qBACV,QACA;EACE,MAAA;EACA,YAAY;CACd,GACA,QACF;AACF;AAEA,MAAa,kBAAkB,OAC7B,WACA,UACA,UACkB;CAClB,IAAI,CAAC,SAAS,CAAC,UAAU;EACvB,QAAQ,KAAK,kDAAkD;EAC/D;CACF;CAEA,IAAI,CAAC,WACH;CAGF,IAAI,UAAU,WAAW,GACvB;CAGF,MAAM,UAAU,MAAM,WAAW,QAAQ;CAOzC,IAAI;CAEJ,KAAK,MAAM,aAAa,WAAW;EACjC,MAAM,aAAa,UAAU,MAAM,UAAA,GAAA,OAAA,OAAA,CAAgB;EACnD,UAAU,KAAK;EACf,IAAI,CAAC,cAAc,MAAM,gBAAgB,IAAI,UAAU,GACrD;EAGF,IAAI,aAAa;EACjB,IAAI;EACJ,IAAI;GACF,aAAa,MAAM,eAAe,OAAO;GACzC,cAAc,MAAM,WAAW,UAAU;EAC3C,QAAQ,CAER;EAOA,IAAI,aAAa,SAAA,cAA+B;GAC9C,MAAM,UAAU,YAAY;GAE5B,KADgB,CAAC,QAAQ,cAAc,QAAQ,WAAW,WAAW,MACtD,eAAe,mBAAmB;IAC/C,MAAM,gBAAgB,IAAI,YAAY,UAAU;IAChD,MAAM,wBAAwB,YAAY,UAAU;IACpD,oBAAoB;IACpB;GACF;GACA,MAAM,MAAM,gBACV,SACA;IAAE,MAAA;IAA4B,YAAY,CAAC,SAAS;GAAE,GACtD,QACF;GACA;EACF;EAUA,IAAI,cAAc,aAChB,MAAM,wBAAwB,IAAI,YAAY,IAAI;OAC7C,IAAI,CAAC,aAAa;GACvB,MAAM,YAAYA,YAAAA,aAAa,SAAS,OAAO,IAAI,KAAK;GACxD,MAAM,SAAS,MAAM,MAAM,gBACzB,SACA;IACE,MAAA;IACA,kBAAkB,EAChB,YAAY,UACd;GACF,GACA,QACF;GACA,MAAM,wBAAwB,IAAI,QAAQ,IAAI;EAChD;EAEA,MAAM,MAAM,gBACV,SACA;GACE,MAAA;GACA,YAAY,CAAC,SAAS;EACxB,GACA,QACF;CACF;AACF;AAEA,MAAa,kBAAkB,IAAI,IAAI;CAIrC;CACA;CACA;AACF,CAAC;AAMD,eAAsB,uBAAuB,EAC3C,OACA,SACA,UACA,gBAMmB;CACnB,IAAI,eAAe;CACnB,IAAI,cAAc,aAAA,aAChB,OAAO;CAET,IACE,OAAO,YAAY,YACnB,WAAW,QACX,QAAQ,WAAW,KAClB,QAAQ,WAAW,KACjB,QAAQ,EAAE,CAAyB,eAAe,MAErD,OAAO;CAGT,KAAK,MAAM,eAAe,SAAS;EACjC,MAAM,YAAa,YAAoC;EACvD,IAAI,aAAa,QAAQ,cAAc,IACrC;EAEF,MAAM,SAAS,MAAM,gBAAgB,IAAI,SAAS;EAClD,IAAI,UAAU,QAAQ,WAAW,IAAI;GACnC,QAAQ,KACN,eAAe,UAAU,kDAC3B;GACA;EACF;EACA,MAAM,UAAU,MAAM,WAAW,MAAM;EACvC,IAAI,CAAC,SAAS;GACZ,QAAQ,KACN,gBAAgB,OAAO,8CACzB;GACA;EACF,OAAO,IAAI,QAAQ,SAAA,cAA+B;GAChD,QAAQ,KACN,gBAAgB,OAAO,uDACzB;GACA;EACF;EAEA,MAAM,WACJ,QAAQ,YAAY,SAAA,eACf,QAAQ,YAAY,YAAY,MAChC,aAAa,SAAS,OAAO,SAChC,IACE,KAAA;EAEN,IAAI,CAAC,UACH;EAGF,IACE,YAAY,SAAS,uBACrB,YAAY,SAAS,0BAErB,MAAM,6BAA6B;GACpB;GACb;GACA;GACA;EACF,CAAC;EAGH,IAAI,CAAC,cACH,eAAe;CAEnB;CAEA,OAAO;AACT;AAEA,eAAe,6BAA6B,EAC1C,aACA,UACA,UACA,SAMgB;CAChB,IAAI,CAAC,MAAM,QAAQ,YAAY,OAAO,GAAG;EACvC,QAAQ,KACN,wCAAwC,OAAO,YAAY,SAC7D;EACA;CACF;CAEA,IAAI,CAACC,kBAAAA,2BAA2B,YAAY,QAAQ,EAAE,GAAG;EACvD,QAAQ,KACN,8DAA8D,KAAK,UACjE,YAAY,OACd,GACF;EACA;CACF;CAEA,MAAM,OAAO,MAAM,gBAAgB,QAAQ;CAC3C,MAAM,mBAAmBC,kBAAAA,6BAA6B;EACpD;EACA,SAAS,YAAY;CACvB,CAAC;CAED,MAAM,OAAO,SAAS;CACtB,MAAM,QAAQ,SAAS,QAAQ,CAAC;CAChC,MAAM,WAAW,GAAA,eACS,iBAC1B;CACA,MAAM,EAAE,QAAQ,oBAAoBC,eAAAA,oBAClC,MACA,gBACF;CAOA,MAAM,cAA6B;EACjC;EACA,QAAA,IARiBC,yBAAAA,YAAY;GAC7B;GACA;GACA,SAAS;GACT,cAAc,SAAS;EACzB,CAGO;CACP;CACA,MAAM,MAAM,iBACR,WAAA,aAA+B,CAAC,EAChC,OAAA,eAA6B,aAAa,UAAU,KAAK;CAE7D,IAAI,MAAM,kBAAkB,MAC1B,MAAM,iCAAiB,IAAI,IAAY;CAGzC,MAAM,eAAe,IAAI,SAAS,EAAG;AACvC"}