@mastra/code-sdk 1.7.2-alpha.0 → 1.7.2-alpha.3

package/dist/agents/sandbox-filesystem.js

@@ -1,5 +1,5 @@
 import { posix } from "path";
-import { FileExistsError, FileNotFoundError, IsDirectoryError } from "@mastra/core/workspace";
+import { DirectoryNotFoundError, FileExistsError, FileNotFoundError, IsDirectoryError, NotDirectoryError, UnsupportedGrepPatternError } from "@mastra/core/workspace";
 //#region src/agents/sandbox-filesystem.ts
 /**
 * SandboxFilesystem
@@ -22,6 +22,7 @@ import { FileExistsError, FileNotFoundError, IsDirectoryError } from "@mastra/co
 const EXIT_NOT_FOUND = 20;
 const EXIT_IS_DIRECTORY = 21;
 const EXIT_EXISTS = 22;
+const EXIT_NOT_DIRECTORY = 23;
 /** Default per-command deadline so a hung sandbox can't block file tools forever. */
 const COMMAND_TIMEOUT_MS = 3e4;
 /** Single-quote a string for safe POSIX shell interpolation. */
@@ -35,7 +36,7 @@ function toBuffer(content) {
 	if (isFileContentString(content)) return Buffer.from(content, "utf8");
 	return Buffer.from(content);
 }
-var SandboxFilesystem = class {
+var SandboxFilesystem = class SandboxFilesystem {
 	id;
 	name = "SandboxFilesystem";
 	provider = "sandbox";
@@ -304,6 +305,227 @@ var SandboxFilesystem = class {
 		if (!extension) return true;
 		return (Array.isArray(extension) ? extension : [extension]).some((ext) => name.endsWith(ext));
 	}
+	/**
+	* Walk the tree in a single sandbox command instead of one readdir round
+	* trip per directory. Uses `find` with a portable classification loop
+	* (`find -printf` is GNU-only and fails on macOS/BSD hosts). `find` does
+	* not follow symlinked directories by default, matching the host-side
+	* walker's no-recursion-into-symlinks behavior.
+	*/
+	async walk(path, options) {
+		const abs = await this.resolveAsync(path);
+		await this.assertContainedRealpath(abs, path);
+		const maxDepth = options?.maxDepth !== void 0 && Number.isFinite(options.maxDepth) ? `-maxdepth ${Math.max(0, Math.floor(options.maxDepth))} ` : "";
+		const hiddenPrune = options?.includeHidden ? "" : `-name '.*' -prune -o `;
+		const script = `root=${shellQuote(abs)}\n[ -e "$root" ] || [ -L "$root" ] || exit ${EXIT_NOT_FOUND}\n[ -d "$root" ] || exit ${EXIT_NOT_DIRECTORY}\nfind "$root" -mindepth 1 ${maxDepth}${hiddenPrune}-print 2>/dev/null | while IFS= read -r f; do if [ -L "$f" ]; then if [ -d "$f" ]; then t=D; else t=F; fi; printf '%s\\t%s\\t%s\\n' "$t" "$f" "$(readlink "$f")"; elif [ -d "$f" ]; then printf 'd\\t%s\\n' "$f"; else printf 'f\\t%s\\n' "$f"; fi; done`;
+		const result = await this.exec(script);
+		if (result.exitCode === EXIT_NOT_FOUND) throw new DirectoryNotFoundError(path);
+		if (result.exitCode === EXIT_NOT_DIRECTORY) throw new NotDirectoryError(path);
+		if (result.exitCode !== 0) throw new Error(`walk ${path} failed (exit ${result.exitCode}): ${result.stderr.trim()}`);
+		const entries = [];
+		for (const line of result.stdout.split("\n")) {
+			if (!line) continue;
+			const tab = line.indexOf("	");
+			if (tab < 0) continue;
+			const flag = line.slice(0, tab);
+			const isSymlink = flag === "D" || flag === "F";
+			let fullPath = line.slice(tab + 1);
+			let symlinkTarget;
+			if (isSymlink) {
+				const tab2 = fullPath.lastIndexOf("	");
+				if (tab2 >= 0) {
+					symlinkTarget = fullPath.slice(tab2 + 1) || void 0;
+					fullPath = fullPath.slice(0, tab2);
+				}
+			}
+			const rel = posix.relative(abs, fullPath);
+			if (!rel || rel.startsWith("..")) continue;
+			entries.push({
+				name: posix.basename(rel),
+				type: flag === "d" || flag === "D" ? "directory" : "file",
+				...isSymlink ? {
+					isSymlink: true,
+					...symlinkTarget ? { symlinkTarget } : {}
+				} : {},
+				path: rel
+			});
+		}
+		return entries;
+	}
+	/**
+	* Content search executed inside the sandbox in one command. Prefers
+	* ripgrep (`rg --json`) when installed; otherwise falls back to
+	* `grep -rnE`. Patterns the ERE fallback can't express (PCRE-style classes,
+	* word boundaries, lookarounds, non-greedy quantifiers) throw
+	* {@link UnsupportedGrepPatternError} so callers use their host-side walk.
+	*
+	* Callers are expected to apply their own gitignore/hidden/glob filtering
+	* to the returned paths; both engines run with ignore rules disabled so
+	* results are a superset of what any host-side filter would keep.
+	*/
+	async grep(options) {
+		const abs = await this.resolveAsync(options.path);
+		await this.assertContainedRealpath(abs, options.path);
+		if (await this.hasRipgrep()) return this.grepWithRipgrep(abs, options);
+		return this.grepWithPosixGrep(abs, options);
+	}
+	rgCheck;
+	hasRipgrep() {
+		this.rgCheck ??= this.exec("command -v rg >/dev/null 2>&1").then((r) => r.exitCode === 0, () => false);
+		return this.rgCheck;
+	}
+	async grepWithRipgrep(abs, options) {
+		const args = [
+			"rg --json --no-ignore --hidden",
+			`-g ${shellQuote("!.git/**")}`,
+			options.caseSensitive ? "" : "-i",
+			options.maxCountPerFile !== void 0 ? `-m ${Math.max(1, Math.floor(options.maxCountPerFile))}` : "",
+			options.contextLines ? `-C ${Math.max(0, Math.floor(options.contextLines))}` : "",
+			`-e ${shellQuote(options.pattern)}`,
+			shellQuote(abs)
+		].filter(Boolean).join(" ");
+		const result = await this.exec(args);
+		if (result.exitCode === 1) return [];
+		const results = this.parseRipgrepJson(result.stdout, abs, options);
+		if (result.exitCode !== 0 && results.length === 0) throw new UnsupportedGrepPatternError(options.pattern);
+		return results;
+	}
+	parseRipgrepJson(stdout, abs, options) {
+		const files = /* @__PURE__ */ new Map();
+		for (const line of stdout.split("\n")) {
+			if (!line) continue;
+			let event;
+			try {
+				event = JSON.parse(line);
+			} catch {
+				continue;
+			}
+			if (event.type !== "match" && event.type !== "context") continue;
+			const filePath = event.data?.path?.text;
+			const lineNumber = event.data?.line_number;
+			if (!filePath || !lineNumber) continue;
+			let state = files.get(filePath);
+			if (!state) {
+				state = {
+					matches: [],
+					linesByNumber: /* @__PURE__ */ new Map()
+				};
+				files.set(filePath, state);
+			}
+			const text = (event.data?.lines?.text ?? "").replace(/\r?\n$/, "");
+			state.linesByNumber.set(lineNumber, text);
+			if (event.type === "match") {
+				const byteStart = event.data?.submatches?.[0]?.start ?? 0;
+				const column = Buffer.from(text, "utf8").subarray(0, byteStart).toString("utf8").length;
+				state.matches.push({
+					line: lineNumber,
+					column,
+					text,
+					lineNumber
+				});
+			}
+		}
+		const contextLines = options.contextLines ?? 0;
+		const results = [];
+		for (const [filePath, state] of files) {
+			if (state.matches.length === 0) continue;
+			const rel = posix.relative(abs, filePath) || posix.basename(filePath);
+			const matches = state.matches.map(({ lineNumber, ...match }) => {
+				if (contextLines <= 0) return match;
+				const before = [];
+				for (let n = lineNumber - 1; n >= Math.max(1, lineNumber - contextLines); n--) {
+					const t = state.linesByNumber.get(n);
+					if (t === void 0) break;
+					before.unshift(t);
+				}
+				const after = [];
+				for (let n = lineNumber + 1; n <= lineNumber + contextLines; n++) {
+					const t = state.linesByNumber.get(n);
+					if (t === void 0) break;
+					after.push(t);
+				}
+				return {
+					...match,
+					before,
+					after
+				};
+			});
+			results.push({
+				path: rel,
+				matches
+			});
+		}
+		return this.applyTotalCap(results, options.maxTotalMatches);
+	}
+	/**
+	* Patterns whose meaning differs between POSIX ERE and JS RegExp. The grep
+	* runs with ERE but match columns are recomputed with JS, so anything that
+	* only one side understands (PCRE classes, lookarounds, lazy quantifiers,
+	* POSIX bracket classes, GNU word anchors) must fall back to the host walk.
+	*/
+	static ERE_UNSUPPORTED = /\\[dDwWsSbB<>]|\(\?|[*+?}]\?|\[:[a-z]+:\]/;
+	async grepWithPosixGrep(abs, options) {
+		if (SandboxFilesystem.ERE_UNSUPPORTED.test(options.pattern)) throw new UnsupportedGrepPatternError(options.pattern);
+		let jsRegex;
+		try {
+			jsRegex = new RegExp(options.pattern, options.caseSensitive ? "" : "i");
+		} catch {
+			throw new UnsupportedGrepPatternError(options.pattern);
+		}
+		if (options.contextLines) throw new UnsupportedGrepPatternError(options.pattern);
+		const args = [
+			"grep -rnIE",
+			options.caseSensitive ? "" : "-i",
+			options.maxCountPerFile !== void 0 ? `-m ${Math.max(1, Math.floor(options.maxCountPerFile))}` : "",
+			"--",
+			shellQuote(options.pattern),
+			shellQuote(abs)
+		].filter(Boolean).join(" ");
+		const result = await this.exec(args);
+		if (result.exitCode === 1) return [];
+		if (result.exitCode !== 0) throw new UnsupportedGrepPatternError(options.pattern);
+		const byFile = /* @__PURE__ */ new Map();
+		for (const line of result.stdout.split("\n")) {
+			if (!line) continue;
+			const parsed = /^(.*?):(\d+):(.*)$/.exec(line);
+			if (!parsed) continue;
+			const rel = posix.relative(abs, parsed[1]) || posix.basename(parsed[1]);
+			const text = parsed[3];
+			const column = jsRegex.exec(text)?.index;
+			if (column === void 0) throw new UnsupportedGrepPatternError(options.pattern);
+			let matches = byFile.get(rel);
+			if (!matches) {
+				matches = [];
+				byFile.set(rel, matches);
+			}
+			matches.push({
+				line: Number(parsed[2]),
+				column,
+				text
+			});
+		}
+		const results = [...byFile.entries()].map(([path, matches]) => ({
+			path,
+			matches
+		}));
+		return this.applyTotalCap(results, options.maxTotalMatches);
+	}
+	applyTotalCap(results, maxTotal) {
+		if (maxTotal === void 0) return results;
+		const capped = [];
+		let total = 0;
+		for (const file of results) {
+			if (total >= maxTotal) break;
+			const remaining = maxTotal - total;
+			const matches = file.matches.slice(0, remaining);
+			total += matches.length;
+			capped.push({
+				path: file.path,
+				matches
+			});
+		}
+		return capped;
+	}
 	async exists(path) {
 		const abs = await this.resolveAsync(path);
 		return (await this.exec(`test -e ${shellQuote(abs)}`)).exitCode === 0;

package/dist/agents/sandbox-filesystem.js.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-filesystem.js","names":["posixPath"],"sources":["../../src/agents/sandbox-filesystem.ts"],"sourcesContent":["/**\n * SandboxFilesystem\n *\n * A `WorkspaceFilesystem` that stores files inside a remote `MastraSandbox`\n * (e.g. a Railway VM) rather than on the server host. File operations are\n * implemented by shelling out through the sandbox's `executeCommand`, so the\n * agent's file tools and command tools share one VM and one view of the repo.\n *\n * Paths are workspace-relative (`/src/foo.ts`) and resolve under the sandbox\n * working directory (`basePath`). A traversal guard rejects any path that\n * escapes the workdir, mirroring `LocalFilesystem`'s contained mode.\n *\n * Reads/writes use base64 over the wire so binary content survives the shell.\n */\n\nimport { posix as posixPath } from 'node:path';\nimport type {\n  CopyOptions,\n  FileContent,\n  FileEntry,\n  FileStat,\n  FilesystemInfo,\n  ListOptions,\n  ProviderStatus,\n  ReadOptions,\n  RemoveOptions,\n  WorkspaceFilesystem,\n  WriteOptions,\n} from '@mastra/core/workspace';\nimport { FileExistsError, FileNotFoundError, IsDirectoryError } from '@mastra/core/workspace';\n\n/**\n * Sentinel exit codes used by guard clauses that run before the real command,\n * so shell failures can be mapped to typed filesystem errors.\n */\nconst EXIT_NOT_FOUND = 20;\nconst EXIT_IS_DIRECTORY = 21;\nconst EXIT_EXISTS = 22;\n\n/** Minimal command result shape we depend on. */\nexport interface SandboxCommandResult {\n  exitCode: number;\n  stdout: string;\n  stderr: string;\n}\n\n/** Minimal sandbox surface the filesystem needs. */\nexport interface SandboxExec {\n  readonly id: string;\n  executeCommand(command: string, args?: string[], options?: { timeout?: number }): Promise<SandboxCommandResult>;\n}\n\nexport interface SandboxFilesystemOptions {\n  /** Live sandbox to run commands in. */\n  sandbox: SandboxExec;\n  /**\n   * Absolute path inside the sandbox that is the workspace root — or a lazy\n   * resolver for it. The resolver form exists for sandboxes whose workspace\n   * root is only knowable once the VM is running (e.g. `$HOME/<repo>` under\n   * a provider-chosen home dir): it is awaited on the first file operation\n   * (which itself may lazily start the VM) and the result is memoized.\n   */\n  workdir: string | (() => Promise<string> | string);\n  /** Optional stable id; defaults to a sandbox-derived id. */\n  id?: string;\n}\n\n/** Default per-command deadline so a hung sandbox can't block file tools forever. */\nconst COMMAND_TIMEOUT_MS = 30_000;\n\n/** Single-quote a string for safe POSIX shell interpolation. */\nfunction shellQuote(value: string): string {\n  return `'${value.replace(/'/g, `'\\\\''`)}'`;\n}\n\nfunction isFileContentString(content: FileContent): content is string {\n  return typeof content === 'string';\n}\n\nfunction toBuffer(content: FileContent): Buffer {\n  if (isFileContentString(content)) return Buffer.from(content, 'utf8');\n  return Buffer.from(content);\n}\n\nexport class SandboxFilesystem implements WorkspaceFilesystem {\n  readonly id: string;\n  readonly name = 'SandboxFilesystem';\n  readonly provider = 'sandbox';\n  status: ProviderStatus = 'ready';\n\n  private readonly sandbox: SandboxExec;\n  private readonly workdirSource: string | (() => Promise<string> | string);\n  private resolvedBase?: string;\n  private resolvingBase?: Promise<string>;\n\n  constructor(options: SandboxFilesystemOptions) {\n    this.sandbox = options.sandbox;\n    this.workdirSource = options.workdir;\n    if (typeof options.workdir === 'string') this.resolvedBase = options.workdir;\n    // Include the workdir when known: one sandbox can back several\n    // filesystems rooted at different checkouts, and each needs a distinct\n    // id. Lazy-workdir callers pass an explicit id.\n    this.id =\n      options.id ??\n      (typeof options.workdir === 'string'\n        ? `sandbox-fs:${options.sandbox.id}:${options.workdir}`\n        : `sandbox-fs:${options.sandbox.id}`);\n  }\n\n  /** The resolved workspace root; empty until a lazy workdir first resolves. */\n  get basePath(): string {\n    return this.resolvedBase ?? '';\n  }\n\n  /** Await (and memoize) the workspace root, resolving a lazy workdir once. */\n  private async base(): Promise<string> {\n    if (this.resolvedBase) return this.resolvedBase;\n    const source = this.workdirSource;\n    if (typeof source === 'string') return (this.resolvedBase = source);\n    this.resolvingBase ??= Promise.resolve()\n      .then(source)\n      .then(resolved => {\n        if (!resolved) throw new Error('Sandbox workspace root resolution returned an empty path');\n        return (this.resolvedBase = resolved);\n      })\n      .finally(() => {\n        this.resolvingBase = undefined;\n      });\n    return this.resolvingBase;\n  }\n\n  // ── Path handling ──────────────────────────────────────────────────────\n\n  /**\n   * Resolve a workspace path to an absolute path inside the sandbox, enforcing\n   * that it stays within the workdir. Awaits the workspace root first, which\n   * for a lazy workdir may start the VM.\n   */\n  private async resolveAsync(inputPath: string): Promise<string> {\n    return this.resolveAgainst(await this.base(), inputPath);\n  }\n\n  /**\n   * Resolve a workspace path against a known base, enforcing that it stays\n   * within the workdir.\n   *\n   * Accepts both workspace-relative paths (`src/foo.ts`, `/src/foo.ts`) and\n   * absolute sandbox paths that already live under the workdir — the agent's\n   * prompt advertises the workdir as its working directory, so tools are\n   * routinely called with fully-qualified paths like `<workdir>/src/foo.ts`.\n   */\n  private resolveAgainst(basePath: string, inputPath: string): string {\n    const base = posixPath.normalize(basePath);\n    const normalizedInput = posixPath.normalize(inputPath);\n    const rel =\n      normalizedInput === base\n        ? ''\n        : normalizedInput.startsWith(`${base}/`)\n          ? normalizedInput.slice(base.length + 1)\n          : inputPath.startsWith('/')\n            ? inputPath.slice(1)\n            : inputPath;\n    const resolved = posixPath.normalize(posixPath.join(base, rel));\n    if (resolved !== base && !resolved.startsWith(`${base}/`)) {\n      throw new Error(`Path escapes workspace root: ${inputPath}`);\n    }\n    return resolved;\n  }\n\n  resolveAbsolutePath(inputPath: string): string | undefined {\n    // Sync interface: a lazy workdir that has not resolved yet has no\n    // absolute form to offer.\n    if (!this.resolvedBase) return undefined;\n    return this.resolveAgainst(this.resolvedBase, inputPath);\n  }\n\n  // ── Command helper ─────────────────────────────────────────────────────\n\n  private async exec(script: string): Promise<SandboxCommandResult> {\n    return this.sandbox.executeCommand('sh', ['-c', script], { timeout: COMMAND_TIMEOUT_MS });\n  }\n\n  /**\n   * Lexical guard catches `..` traversal, but a symlink inside the workdir can\n   * still point outside it. After resolving a path that refers to an existing\n   * entry, verify its realpath is still contained in the workdir.\n   *\n   * Canonicalization tries `realpath`, then `readlink -f` (GNU/busybox), then\n   * `cd && pwd -P` for directories — covering GNU hosts, macOS/BSD, and\n   * busybox. If the path exists but cannot be canonicalized we fail CLOSED:\n   * returning without a check would let a symlink bypass containment.\n   */\n  private async assertContainedRealpath(abs: string, inputPath: string): Promise<void> {\n    const result = await this.exec(\n      [\n        `p=${shellQuote(abs)}`,\n        `if [ ! -e \"$p\" ] && [ ! -L \"$p\" ]; then exit ${EXIT_NOT_FOUND}; fi`,\n        // The workdir itself may contain symlinked components (/tmp on macOS),\n        // so canonicalize it as the comparison root.\n        `root=$(cd ${shellQuote(this.basePath)} 2>/dev/null && pwd -P)`,\n        `[ -n \"$root\" ] || exit 1`,\n        `rp=$(realpath \"$p\" 2>/dev/null) || rp=$(readlink -f \"$p\" 2>/dev/null) || { [ -d \"$p\" ] && rp=$(cd \"$p\" 2>/dev/null && pwd -P); }`,\n        `[ -n \"$rp\" ] || exit 1`,\n        `printf '%s\\\\n%s' \"$root\" \"$rp\"`,\n      ].join('\\n'),\n    );\n    // Path doesn't exist yet: nothing to canonicalize (writes to a fresh leaf\n    // are covered by assertContainedDest checking the parent directory).\n    if (result.exitCode === EXIT_NOT_FOUND) return;\n    const [root, real] = result.stdout.split('\\n').map(s => s.trim());\n    if (result.exitCode !== 0 || !root || !real) {\n      throw new Error(`Unable to verify path stays within workspace root: ${inputPath}`);\n    }\n    if (real !== root && !real.startsWith(`${root}/`)) {\n      throw new Error(`Path escapes workspace root (symlink): ${inputPath}`);\n    }\n  }\n\n  /**\n   * Guard for write destinations. The lexical guard catches `..`, but a symlink\n   * inside the workdir can redirect a write outside it. For an existing target\n   * we check its realpath; for a not-yet-existing target we check the realpath\n   * of its nearest existing ancestor directory, since a symlinked parent is the\n   * escape vector (e.g. `link -> /etc` then writing `link/passwd`).\n   */\n  private async assertContainedDest(abs: string, inputPath: string): Promise<void> {\n    // First check the target itself (covers overwriting an existing symlink).\n    await this.assertContainedRealpath(abs, inputPath);\n    // Then check the parent directory's realpath; readlink -f resolves the\n    // nearest existing ancestor when the leaf doesn't exist yet.\n    const parent = posixPath.dirname(abs);\n    if (parent && parent !== abs) {\n      await this.assertContainedRealpath(parent, inputPath);\n    }\n  }\n\n  private async execOk(script: string, context: string): Promise<SandboxCommandResult> {\n    const result = await this.exec(script);\n    if (result.exitCode !== 0) {\n      throw new Error(`${context} failed (exit ${result.exitCode}): ${result.stderr.trim() || result.stdout.trim()}`);\n    }\n    return result;\n  }\n\n  // ── File operations ────────────────────────────────────────────────────\n\n  async readFile(path: string, options?: ReadOptions): Promise<string | Buffer> {\n    const abs = await this.resolveAsync(path);\n    await this.assertContainedRealpath(abs, path);\n    // Guard clauses first: redirecting from a directory \"succeeds\" with empty\n    // output on some shells, so classify before reading.\n    const result = await this.exec(\n      `if [ -d ${shellQuote(abs)} ]; then exit ${EXIT_IS_DIRECTORY}; elif [ ! -e ${shellQuote(abs)} ]; then exit ${EXIT_NOT_FOUND}; fi; base64 < ${shellQuote(abs)}`,\n    );\n    if (result.exitCode === EXIT_IS_DIRECTORY) throw new IsDirectoryError(path);\n    if (result.exitCode === EXIT_NOT_FOUND) throw new FileNotFoundError(path);\n    if (result.exitCode !== 0) {\n      throw new Error(`readFile ${path} failed (exit ${result.exitCode}): ${result.stderr.trim()}`);\n    }\n    const buffer = Buffer.from(result.stdout.replace(/\\s/g, ''), 'base64');\n    if (options?.encoding) {\n      return buffer.toString(options.encoding);\n    }\n    return buffer;\n  }\n\n  async writeFile(path: string, content: FileContent, options?: WriteOptions): Promise<void> {\n    const abs = await this.resolveAsync(path);\n    await this.assertContainedDest(abs, path);\n    const b64 = toBuffer(content).toString('base64');\n    const dir = posixPath.dirname(abs);\n    const mkdir = options?.recursive === false ? '' : `mkdir -p ${shellQuote(dir)} && `;\n    if (options?.overwrite === false) {\n      // `set -C` (noclobber) makes the redirect itself the exclusivity check —\n      // no exists() pre-check that could race with a concurrent writer.\n      const result = await this.exec(\n        `${mkdir}{ (set -C; printf %s ${shellQuote(b64)} | base64 -d > ${shellQuote(abs)}) 2>/dev/null || { [ -e ${shellQuote(abs)} ] && exit ${EXIT_EXISTS} || exit 1; }; }`,\n      );\n      if (result.exitCode === EXIT_EXISTS) throw new FileExistsError(path);\n      if (result.exitCode !== 0) {\n        throw new Error(`writeFile ${path} failed (exit ${result.exitCode}): ${result.stderr.trim()}`);\n      }\n      return;\n    }\n    await this.execOk(`${mkdir}printf %s ${shellQuote(b64)} | base64 -d > ${shellQuote(abs)}`, `writeFile ${path}`);\n  }\n\n  async appendFile(path: string, content: FileContent): Promise<void> {\n    const abs = await this.resolveAsync(path);\n    await this.assertContainedDest(abs, path);\n    const b64 = toBuffer(content).toString('base64');\n    await this.execOk(\n      `mkdir -p ${shellQuote(posixPath.dirname(abs))} && printf %s ${shellQuote(b64)} | base64 -d >> ${shellQuote(abs)}`,\n      `appendFile ${path}`,\n    );\n  }\n\n  async deleteFile(path: string, options?: RemoveOptions): Promise<void> {\n    const abs = await this.resolveAsync(path);\n    // Contain the parent's realpath: deleting `link/file` where `link` points\n    // outside the workdir must fail, while deleting a symlink entry itself\n    // (which lives inside the workdir) stays allowed.\n    await this.assertContainedRealpath(posixPath.dirname(abs), path);\n    if (options?.force) {\n      // `rm -f` already succeeds for a missing file, but still fails for\n      // directories and permission errors — surface those.\n      await this.execOk(`rm -f ${shellQuote(abs)}`, `deleteFile ${path}`);\n      return;\n    }\n    const result = await this.exec(\n      `if [ ! -e ${shellQuote(abs)} ]; then exit ${EXIT_NOT_FOUND}; fi; rm ${shellQuote(abs)}`,\n    );\n    if (result.exitCode === EXIT_NOT_FOUND) throw new FileNotFoundError(path);\n    if (result.exitCode !== 0) {\n      throw new Error(`deleteFile ${path} failed (exit ${result.exitCode}): ${result.stderr.trim()}`);\n    }\n  }\n\n  async copyFile(src: string, dest: string, options?: CopyOptions): Promise<void> {\n    const srcAbs = await this.resolveAsync(src);\n    const destAbs = await this.resolveAsync(dest);\n    await this.assertContainedRealpath(srcAbs, src);\n    await this.assertContainedDest(destAbs, dest);\n    const recursive = options?.recursive ? '-r ' : '';\n    if (options?.overwrite === false) {\n      // Atomic no-clobber: directories claim the destination with an exclusive\n      // mkdir; files copy to a temp name then hardlink into place (link(2)\n      // fails if the destination exists). No racy exists() pre-check.\n      const result = await this.exec(\n        [\n          `src=${shellQuote(srcAbs)}`,\n          `dest=${shellQuote(destAbs)}`,\n          `if [ ! -e \"$src\" ] && [ ! -L \"$src\" ]; then exit ${EXIT_NOT_FOUND}; fi`,\n          `mkdir -p ${shellQuote(posixPath.dirname(destAbs))} || exit 1`,\n          `if [ -d \"$src\" ]; then`,\n          `  mkdir \"$dest\" 2>/dev/null || exit ${EXIT_EXISTS}`,\n          `  cp -R \"$src\"/. \"$dest\"/`,\n          `else`,\n          `  tmp=\"$dest.__cptmp$$\"`,\n          `  cp \"$src\" \"$tmp\" || exit 1`,\n          `  ln \"$tmp\" \"$dest\" 2>/dev/null || { rm -f \"$tmp\"; [ -e \"$dest\" ] && exit ${EXIT_EXISTS} || exit 1; }`,\n          `  rm -f \"$tmp\"`,\n          `fi`,\n        ].join('\\n'),\n      );\n      if (result.exitCode === EXIT_NOT_FOUND) throw new FileNotFoundError(src);\n      if (result.exitCode === EXIT_EXISTS) throw new FileExistsError(dest);\n      if (result.exitCode !== 0) {\n        throw new Error(`copyFile ${src} -> ${dest} failed (exit ${result.exitCode}): ${result.stderr.trim()}`);\n      }\n      return;\n    }\n    const result = await this.exec(\n      `if [ ! -e ${shellQuote(srcAbs)} ]; then exit ${EXIT_NOT_FOUND}; fi; mkdir -p ${shellQuote(posixPath.dirname(destAbs))} && cp ${recursive}${shellQuote(srcAbs)} ${shellQuote(destAbs)}`,\n    );\n    if (result.exitCode === EXIT_NOT_FOUND) throw new FileNotFoundError(src);\n    if (result.exitCode !== 0) {\n      throw new Error(`copyFile ${src} -> ${dest} failed (exit ${result.exitCode}): ${result.stderr.trim()}`);\n    }\n  }\n\n  async moveFile(src: string, dest: string, options?: CopyOptions): Promise<void> {\n    const srcAbs = await this.resolveAsync(src);\n    const destAbs = await this.resolveAsync(dest);\n    await this.assertContainedRealpath(srcAbs, src);\n    await this.assertContainedDest(destAbs, dest);\n    if (options?.overwrite === false) {\n      // `mv -n` exits 0 even when it skips, so detect a skipped move by the\n      // source surviving. The no-clobber rename itself is atomic; no racy\n      // exists() pre-check.\n      const result = await this.exec(\n        [\n          `src=${shellQuote(srcAbs)}`,\n          `dest=${shellQuote(destAbs)}`,\n          `if [ ! -e \"$src\" ] && [ ! -L \"$src\" ]; then exit ${EXIT_NOT_FOUND}; fi`,\n          `mkdir -p ${shellQuote(posixPath.dirname(destAbs))} || exit 1`,\n          `mv -n \"$src\" \"$dest\" 2>/dev/null || exit 1`,\n          `if [ -e \"$src\" ] || [ -L \"$src\" ]; then exit ${EXIT_EXISTS}; fi`,\n        ].join('\\n'),\n      );\n      if (result.exitCode === EXIT_NOT_FOUND) throw new FileNotFoundError(src);\n      if (result.exitCode === EXIT_EXISTS) throw new FileExistsError(dest);\n      if (result.exitCode !== 0) {\n        throw new Error(`moveFile ${src} -> ${dest} failed (exit ${result.exitCode}): ${result.stderr.trim()}`);\n      }\n      return;\n    }\n    const result = await this.exec(\n      `if [ ! -e ${shellQuote(srcAbs)} ]; then exit ${EXIT_NOT_FOUND}; fi; mkdir -p ${shellQuote(posixPath.dirname(destAbs))} && mv ${shellQuote(srcAbs)} ${shellQuote(destAbs)}`,\n    );\n    if (result.exitCode === EXIT_NOT_FOUND) throw new FileNotFoundError(src);\n    if (result.exitCode !== 0) {\n      throw new Error(`moveFile ${src} -> ${dest} failed (exit ${result.exitCode}): ${result.stderr.trim()}`);\n    }\n  }\n\n  // ── Directory operations ───────────────────────────────────────────────\n\n  async mkdir(path: string, options?: { recursive?: boolean }): Promise<void> {\n    const abs = await this.resolveAsync(path);\n    await this.assertContainedDest(abs, path);\n    const flag = options?.recursive === false ? '' : '-p ';\n    await this.execOk(`mkdir ${flag}${shellQuote(abs)}`, `mkdir ${path}`);\n  }\n\n  async rmdir(path: string, options?: RemoveOptions): Promise<void> {\n    const abs = await this.resolveAsync(path);\n    // Same parent containment as deleteFile — `rm -r` through a symlinked\n    // parent would otherwise delete outside the workspace.\n    await this.assertContainedRealpath(posixPath.dirname(abs), path);\n    if (options?.recursive) {\n      const force = options?.force ? '-f ' : '';\n      await this.execOk(`rm -r ${force}${shellQuote(abs)}`, `rmdir ${path}`);\n      return;\n    }\n    const result = await this.exec(`rmdir ${shellQuote(abs)}`);\n    if (result.exitCode !== 0 && !options?.force) {\n      throw new Error(`Directory not empty or not found: ${path}`);\n    }\n  }\n\n  async readdir(path: string, options?: ListOptions): Promise<FileEntry[]> {\n    const abs = await this.resolveAsync(path);\n    await this.assertContainedRealpath(abs, path);\n    if (options?.recursive) {\n      // Recursive listing emitting \"type\\tpath\". `find -printf` is GNU-only\n      // (fails on macOS/BSD hosts backing a local sandbox), so classify each\n      // entry with a portable shell loop instead.\n      const result = await this.exec(\n        `test -d ${shellQuote(abs)} && find ${shellQuote(abs)} -mindepth 1 ${options.maxDepth ? `-maxdepth ${Number(options.maxDepth)} ` : ''}2>/dev/null | while IFS= read -r f; do if [ -d \"$f\" ]; then printf 'd\\\\t%s\\\\n' \"$f\"; else printf 'f\\\\t%s\\\\n' \"$f\"; fi; done`,\n      );\n      if (result.exitCode !== 0) throw new Error(`Directory not found: ${path}`);\n      return this.parseFindOutput(result.stdout, abs, options);\n    }\n    // Non-recursive: list with name + type via a portable loop. Use printf,\n    // not echo — bash-as-/bin/sh (macOS local sandboxes) does not expand \\t\n    // in echo arguments.\n    const result = await this.exec(\n      `cd ${shellQuote(abs)} 2>/dev/null && for f in * .[!.]*; do [ -e \"$f\" ] || continue; if [ -d \"$f\" ]; then printf 'd\\\\t%s\\\\n' \"$f\"; else printf 'f\\\\t%s\\\\n' \"$f\"; fi; done`,\n    );\n    if (result.exitCode !== 0) throw new Error(`Directory not found: ${path}`);\n    return this.parseListOutput(result.stdout, options);\n  }\n\n  private parseListOutput(stdout: string, options?: ListOptions): FileEntry[] {\n    const entries: FileEntry[] = [];\n    for (const line of stdout.split('\\n')) {\n      if (!line) continue;\n      const tab = line.indexOf('\\t');\n      if (tab < 0) continue;\n      const type = line.slice(0, tab) === 'd' ? 'directory' : 'file';\n      const name = line.slice(tab + 1);\n      if (!name || name === '.' || name === '..') continue;\n      if (type === 'file' && !this.matchesExtension(name, options?.extension)) continue;\n      entries.push({ name, type });\n    }\n    return entries;\n  }\n\n  private parseFindOutput(stdout: string, base: string, options?: ListOptions): FileEntry[] {\n    const entries: FileEntry[] = [];\n    for (const line of stdout.split('\\n')) {\n      if (!line) continue;\n      const tab = line.indexOf('\\t');\n      if (tab < 0) continue;\n      const type = line.slice(0, tab) === 'd' ? 'directory' : 'file';\n      const fullPath = line.slice(tab + 1);\n      const name = posixPath.relative(base, fullPath);\n      if (!name) continue;\n      if (type === 'file' && !this.matchesExtension(name, options?.extension)) continue;\n      entries.push({ name, type });\n    }\n    return entries;\n  }\n\n  private matchesExtension(name: string, extension?: string | string[]): boolean {\n    if (!extension) return true;\n    const exts = Array.isArray(extension) ? extension : [extension];\n    return exts.some(ext => name.endsWith(ext));\n  }\n\n  // ── Path / metadata ────────────────────────────────────────────────────\n\n  async exists(path: string): Promise<boolean> {\n    const abs = await this.resolveAsync(path);\n    const result = await this.exec(`test -e ${shellQuote(abs)}`);\n    return result.exitCode === 0;\n  }\n\n  async stat(path: string): Promise<FileStat> {\n    const abs = await this.resolveAsync(path);\n    await this.assertContainedRealpath(abs, path);\n    // GNU stat: %F=type, %s=size, %Y=mtime (epoch seconds), %W=birth (or -1).\n    // BSD/macOS stat (local sandbox hosts) rejects `-c`; fall back to its\n    // `-f` format with the same field order (%HT=type, %z=size, %m=mtime,\n    // %B=birth). Delimit with `|` — neither stat interprets `\\t` escapes in\n    // its format string.\n    const result = await this.exec(\n      `stat -c '%F|%s|%Y|%W' ${shellQuote(abs)} 2>/dev/null || stat -f '%HT|%z|%m|%B' ${shellQuote(abs)}`,\n    );\n    if (result.exitCode !== 0) {\n      throw new FileNotFoundError(path);\n    }\n    const [kind, sizeStr, mtimeStr, ctimeStr] = result.stdout.trim().split('|');\n    const type = kind && kind.toLowerCase().includes('directory') ? 'directory' : 'file';\n    const size = Number(sizeStr) || 0;\n    const mtime = Number(mtimeStr) || 0;\n    const ctime = Number(ctimeStr);\n    return {\n      name: posixPath.basename(abs),\n      path: `/${posixPath.relative(this.basePath, abs)}`,\n      type,\n      size: type === 'directory' ? 0 : size,\n      modifiedAt: new Date(mtime * 1000),\n      createdAt: new Date((ctime > 0 ? ctime : mtime) * 1000),\n    };\n  }\n\n  // ── Lifecycle ──────────────────────────────────────────────────────────\n\n  async init(): Promise<void> {\n    await this.execOk(`mkdir -p ${shellQuote(await this.base())}`, 'init workdir');\n  }\n\n  async destroy(): Promise<void> {\n    // The sandbox lifecycle is owned by the caller; nothing to tear down here.\n  }\n\n  async isReady(): Promise<boolean> {\n    const result = await this.exec(`test -d ${shellQuote(await this.base())}`);\n    return result.exitCode === 0;\n  }\n\n  getInfo(): FilesystemInfo {\n    return {\n      id: this.id,\n      name: this.name,\n      provider: this.provider,\n      status: this.status,\n      metadata: { basePath: this.basePath, sandboxId: this.sandbox.id },\n    };\n  }\n\n  getInstructions(): string {\n    return `Files are stored in a remote sandbox at ${this.basePath}. Use absolute workspace paths like /src/index.ts. All reads, writes and commands run inside the same sandbox.`;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAmCA,MAAM,iBAAiB;AACvB,MAAM,oBAAoB;AAC1B,MAAM,cAAc;;AA+BpB,MAAM,qBAAqB;;AAG3B,SAAS,WAAW,OAAuB;CACzC,OAAO,IAAI,MAAM,QAAQ,MAAM,OAAO,EAAE;AAC1C;AAEA,SAAS,oBAAoB,SAAyC;CACpE,OAAO,OAAO,YAAY;AAC5B;AAEA,SAAS,SAAS,SAA8B;CAC9C,IAAI,oBAAoB,OAAO,GAAG,OAAO,OAAO,KAAK,SAAS,MAAM;CACpE,OAAO,OAAO,KAAK,OAAO;AAC5B;AAEA,IAAa,oBAAb,MAA8D;CAC5D;CACA,OAAgB;CAChB,WAAoB;CACpB,SAAyB;CAEzB;CACA;CACA;CACA;CAEA,YAAY,SAAmC;EAC7C,KAAK,UAAU,QAAQ;EACvB,KAAK,gBAAgB,QAAQ;EAC7B,IAAI,OAAO,QAAQ,YAAY,UAAU,KAAK,eAAe,QAAQ;EAIrE,KAAK,KACH,QAAQ,OACP,OAAO,QAAQ,YAAY,WACxB,cAAc,QAAQ,QAAQ,GAAG,GAAG,QAAQ,YAC5C,cAAc,QAAQ,QAAQ;CACtC;;CAGA,IAAI,WAAmB;EACrB,OAAO,KAAK,gBAAgB;CAC9B;;CAGA,MAAc,OAAwB;EACpC,IAAI,KAAK,cAAc,OAAO,KAAK;EACnC,MAAM,SAAS,KAAK;EACpB,IAAI,OAAO,WAAW,UAAU,OAAQ,KAAK,eAAe;EAC5D,KAAK,kBAAkB,QAAQ,QAAQ,CAAC,CACrC,KAAK,MAAM,CAAC,CACZ,MAAK,aAAY;GAChB,IAAI,CAAC,UAAU,MAAM,IAAI,MAAM,0DAA0D;GACzF,OAAQ,KAAK,eAAe;EAC9B,CAAC,CAAC,CACD,cAAc;GACb,KAAK,gBAAgB,KAAA;EACvB,CAAC;EACH,OAAO,KAAK;CACd;;;;;;CASA,MAAc,aAAa,WAAoC;EAC7D,OAAO,KAAK,eAAe,MAAM,KAAK,KAAK,GAAG,SAAS;CACzD;;;;;;;;;;CAWA,eAAuB,UAAkB,WAA2B;EAClE,MAAM,OAAOA,MAAU,UAAU,QAAQ;EACzC,MAAM,kBAAkBA,MAAU,UAAU,SAAS;EACrD,MAAM,MACJ,oBAAoB,OAChB,KACA,gBAAgB,WAAW,GAAG,KAAK,EAAE,IACnC,gBAAgB,MAAM,KAAK,SAAS,CAAC,IACrC,UAAU,WAAW,GAAG,IACtB,UAAU,MAAM,CAAC,IACjB;EACV,MAAM,WAAWA,MAAU,UAAUA,MAAU,KAAK,MAAM,GAAG,CAAC;EAC9D,IAAI,aAAa,QAAQ,CAAC,SAAS,WAAW,GAAG,KAAK,EAAE,GACtD,MAAM,IAAI,MAAM,gCAAgC,WAAW;EAE7D,OAAO;CACT;CAEA,oBAAoB,WAAuC;EAGzD,IAAI,CAAC,KAAK,cAAc,OAAO,KAAA;EAC/B,OAAO,KAAK,eAAe,KAAK,cAAc,SAAS;CACzD;CAIA,MAAc,KAAK,QAA+C;EAChE,OAAO,KAAK,QAAQ,eAAe,MAAM,CAAC,MAAM,MAAM,GAAG,EAAE,SAAS,mBAAmB,CAAC;CAC1F;;;;;;;;;;;CAYA,MAAc,wBAAwB,KAAa,WAAkC;EACnF,MAAM,SAAS,MAAM,KAAK,KACxB;GACE,KAAK,WAAW,GAAG;GACnB,gDAAgD,eAAe;GAG/D,aAAa,WAAW,KAAK,QAAQ,EAAE;GACvC;GACA;GACA;GACA;EACF,CAAC,CAAC,KAAK,IAAI,CACb;EAGA,IAAI,OAAO,aAAa,gBAAgB;EACxC,MAAM,CAAC,MAAM,QAAQ,OAAO,OAAO,MAAM,IAAI,CAAC,CAAC,KAAI,MAAK,EAAE,KAAK,CAAC;EAChE,IAAI,OAAO,aAAa,KAAK,CAAC,QAAQ,CAAC,MACrC,MAAM,IAAI,MAAM,sDAAsD,WAAW;EAEnF,IAAI,SAAS,QAAQ,CAAC,KAAK,WAAW,GAAG,KAAK,EAAE,GAC9C,MAAM,IAAI,MAAM,0CAA0C,WAAW;CAEzE;;;;;;;;CASA,MAAc,oBAAoB,KAAa,WAAkC;EAE/E,MAAM,KAAK,wBAAwB,KAAK,SAAS;EAGjD,MAAM,SAASA,MAAU,QAAQ,GAAG;EACpC,IAAI,UAAU,WAAW,KACvB,MAAM,KAAK,wBAAwB,QAAQ,SAAS;CAExD;CAEA,MAAc,OAAO,QAAgB,SAAgD;EACnF,MAAM,SAAS,MAAM,KAAK,KAAK,MAAM;EACrC,IAAI,OAAO,aAAa,GACtB,MAAM,IAAI,MAAM,GAAG,QAAQ,gBAAgB,OAAO,SAAS,KAAK,OAAO,OAAO,KAAK,KAAK,OAAO,OAAO,KAAK,GAAG;EAEhH,OAAO;CACT;CAIA,MAAM,SAAS,MAAc,SAAiD;EAC5E,MAAM,MAAM,MAAM,KAAK,aAAa,IAAI;EACxC,MAAM,KAAK,wBAAwB,KAAK,IAAI;EAG5C,MAAM,SAAS,MAAM,KAAK,KACxB,WAAW,WAAW,GAAG,EAAE,gBAAgB,kBAAkB,gBAAgB,WAAW,GAAG,EAAE,gBAAgB,eAAe,iBAAiB,WAAW,GAAG,GAC7J;EACA,IAAI,OAAO,aAAa,mBAAmB,MAAM,IAAI,iBAAiB,IAAI;EAC1E,IAAI,OAAO,aAAa,gBAAgB,MAAM,IAAI,kBAAkB,IAAI;EACxE,IAAI,OAAO,aAAa,GACtB,MAAM,IAAI,MAAM,YAAY,KAAK,gBAAgB,OAAO,SAAS,KAAK,OAAO,OAAO,KAAK,GAAG;EAE9F,MAAM,SAAS,OAAO,KAAK,OAAO,OAAO,QAAQ,OAAO,EAAE,GAAG,QAAQ;EACrE,IAAI,SAAS,UACX,OAAO,OAAO,SAAS,QAAQ,QAAQ;EAEzC,OAAO;CACT;CAEA,MAAM,UAAU,MAAc,SAAsB,SAAuC;EACzF,MAAM,MAAM,MAAM,KAAK,aAAa,IAAI;EACxC,MAAM,KAAK,oBAAoB,KAAK,IAAI;EACxC,MAAM,MAAM,SAAS,OAAO,CAAC,CAAC,SAAS,QAAQ;EAC/C,MAAM,MAAMA,MAAU,QAAQ,GAAG;EACjC,MAAM,QAAQ,SAAS,cAAc,QAAQ,KAAK,YAAY,WAAW,GAAG,EAAE;EAC9E,IAAI,SAAS,cAAc,OAAO;GAGhC,MAAM,SAAS,MAAM,KAAK,KACxB,GAAG,MAAM,uBAAuB,WAAW,GAAG,EAAE,iBAAiB,WAAW,GAAG,EAAE,0BAA0B,WAAW,GAAG,EAAE,aAAa,YAAY,iBACtJ;GACA,IAAI,OAAO,aAAa,aAAa,MAAM,IAAI,gBAAgB,IAAI;GACnE,IAAI,OAAO,aAAa,GACtB,MAAM,IAAI,MAAM,aAAa,KAAK,gBAAgB,OAAO,SAAS,KAAK,OAAO,OAAO,KAAK,GAAG;GAE/F;EACF;EACA,MAAM,KAAK,OAAO,GAAG,MAAM,YAAY,WAAW,GAAG,EAAE,iBAAiB,WAAW,GAAG,KAAK,aAAa,MAAM;CAChH;CAEA,MAAM,WAAW,MAAc,SAAqC;EAClE,MAAM,MAAM,MAAM,KAAK,aAAa,IAAI;EACxC,MAAM,KAAK,oBAAoB,KAAK,IAAI;EACxC,MAAM,MAAM,SAAS,OAAO,CAAC,CAAC,SAAS,QAAQ;EAC/C,MAAM,KAAK,OACT,YAAY,WAAWA,MAAU,QAAQ,GAAG,CAAC,EAAE,gBAAgB,WAAW,GAAG,EAAE,kBAAkB,WAAW,GAAG,KAC/G,cAAc,MAChB;CACF;CAEA,MAAM,WAAW,MAAc,SAAwC;EACrE,MAAM,MAAM,MAAM,KAAK,aAAa,IAAI;EAIxC,MAAM,KAAK,wBAAwBA,MAAU,QAAQ,GAAG,GAAG,IAAI;EAC/D,IAAI,SAAS,OAAO;GAGlB,MAAM,KAAK,OAAO,SAAS,WAAW,GAAG,KAAK,cAAc,MAAM;GAClE;EACF;EACA,MAAM,SAAS,MAAM,KAAK,KACxB,aAAa,WAAW,GAAG,EAAE,gBAAgB,eAAe,WAAW,WAAW,GAAG,GACvF;EACA,IAAI,OAAO,aAAa,gBAAgB,MAAM,IAAI,kBAAkB,IAAI;EACxE,IAAI,OAAO,aAAa,GACtB,MAAM,IAAI,MAAM,cAAc,KAAK,gBAAgB,OAAO,SAAS,KAAK,OAAO,OAAO,KAAK,GAAG;CAElG;CAEA,MAAM,SAAS,KAAa,MAAc,SAAsC;EAC9E,MAAM,SAAS,MAAM,KAAK,aAAa,GAAG;EAC1C,MAAM,UAAU,MAAM,KAAK,aAAa,IAAI;EAC5C,MAAM,KAAK,wBAAwB,QAAQ,GAAG;EAC9C,MAAM,KAAK,oBAAoB,SAAS,IAAI;EAC5C,MAAM,YAAY,SAAS,YAAY,QAAQ;EAC/C,IAAI,SAAS,cAAc,OAAO;GAIhC,MAAM,SAAS,MAAM,KAAK,KACxB;IACE,OAAO,WAAW,MAAM;IACxB,QAAQ,WAAW,OAAO;IAC1B,oDAAoD,eAAe;IACnE,YAAY,WAAWA,MAAU,QAAQ,OAAO,CAAC,EAAE;IACnD;IACA,uCAAuC;IACvC;IACA;IACA;IACA;IACA,6EAA6E,YAAY;IACzF;IACA;GACF,CAAC,CAAC,KAAK,IAAI,CACb;GACA,IAAI,OAAO,aAAa,gBAAgB,MAAM,IAAI,kBAAkB,GAAG;GACvE,IAAI,OAAO,aAAa,aAAa,MAAM,IAAI,gBAAgB,IAAI;GACnE,IAAI,OAAO,aAAa,GACtB,MAAM,IAAI,MAAM,YAAY,IAAI,MAAM,KAAK,gBAAgB,OAAO,SAAS,KAAK,OAAO,OAAO,KAAK,GAAG;GAExG;EACF;EACA,MAAM,SAAS,MAAM,KAAK,KACxB,aAAa,WAAW,MAAM,EAAE,gBAAgB,eAAe,iBAAiB,WAAWA,MAAU,QAAQ,OAAO,CAAC,EAAE,SAAS,YAAY,WAAW,MAAM,EAAE,GAAG,WAAW,OAAO,GACtL;EACA,IAAI,OAAO,aAAa,gBAAgB,MAAM,IAAI,kBAAkB,GAAG;EACvE,IAAI,OAAO,aAAa,GACtB,MAAM,IAAI,MAAM,YAAY,IAAI,MAAM,KAAK,gBAAgB,OAAO,SAAS,KAAK,OAAO,OAAO,KAAK,GAAG;CAE1G;CAEA,MAAM,SAAS,KAAa,MAAc,SAAsC;EAC9E,MAAM,SAAS,MAAM,KAAK,aAAa,GAAG;EAC1C,MAAM,UAAU,MAAM,KAAK,aAAa,IAAI;EAC5C,MAAM,KAAK,wBAAwB,QAAQ,GAAG;EAC9C,MAAM,KAAK,oBAAoB,SAAS,IAAI;EAC5C,IAAI,SAAS,cAAc,OAAO;GAIhC,MAAM,SAAS,MAAM,KAAK,KACxB;IACE,OAAO,WAAW,MAAM;IACxB,QAAQ,WAAW,OAAO;IAC1B,oDAAoD,eAAe;IACnE,YAAY,WAAWA,MAAU,QAAQ,OAAO,CAAC,EAAE;IACnD;IACA,gDAAgD,YAAY;GAC9D,CAAC,CAAC,KAAK,IAAI,CACb;GACA,IAAI,OAAO,aAAa,gBAAgB,MAAM,IAAI,kBAAkB,GAAG;GACvE,IAAI,OAAO,aAAa,aAAa,MAAM,IAAI,gBAAgB,IAAI;GACnE,IAAI,OAAO,aAAa,GACtB,MAAM,IAAI,MAAM,YAAY,IAAI,MAAM,KAAK,gBAAgB,OAAO,SAAS,KAAK,OAAO,OAAO,KAAK,GAAG;GAExG;EACF;EACA,MAAM,SAAS,MAAM,KAAK,KACxB,aAAa,WAAW,MAAM,EAAE,gBAAgB,eAAe,iBAAiB,WAAWA,MAAU,QAAQ,OAAO,CAAC,EAAE,SAAS,WAAW,MAAM,EAAE,GAAG,WAAW,OAAO,GAC1K;EACA,IAAI,OAAO,aAAa,gBAAgB,MAAM,IAAI,kBAAkB,GAAG;EACvE,IAAI,OAAO,aAAa,GACtB,MAAM,IAAI,MAAM,YAAY,IAAI,MAAM,KAAK,gBAAgB,OAAO,SAAS,KAAK,OAAO,OAAO,KAAK,GAAG;CAE1G;CAIA,MAAM,MAAM,MAAc,SAAkD;EAC1E,MAAM,MAAM,MAAM,KAAK,aAAa,IAAI;EACxC,MAAM,KAAK,oBAAoB,KAAK,IAAI;EACxC,MAAM,OAAO,SAAS,cAAc,QAAQ,KAAK;EACjD,MAAM,KAAK,OAAO,SAAS,OAAO,WAAW,GAAG,KAAK,SAAS,MAAM;CACtE;CAEA,MAAM,MAAM,MAAc,SAAwC;EAChE,MAAM,MAAM,MAAM,KAAK,aAAa,IAAI;EAGxC,MAAM,KAAK,wBAAwBA,MAAU,QAAQ,GAAG,GAAG,IAAI;EAC/D,IAAI,SAAS,WAAW;GACtB,MAAM,QAAQ,SAAS,QAAQ,QAAQ;GACvC,MAAM,KAAK,OAAO,SAAS,QAAQ,WAAW,GAAG,KAAK,SAAS,MAAM;GACrE;EACF;EAEA,KAAI,MADiB,KAAK,KAAK,SAAS,WAAW,GAAG,GAAG,EAAA,CAC9C,aAAa,KAAK,CAAC,SAAS,OACrC,MAAM,IAAI,MAAM,qCAAqC,MAAM;CAE/D;CAEA,MAAM,QAAQ,MAAc,SAA6C;EACvE,MAAM,MAAM,MAAM,KAAK,aAAa,IAAI;EACxC,MAAM,KAAK,wBAAwB,KAAK,IAAI;EAC5C,IAAI,SAAS,WAAW;GAItB,MAAM,SAAS,MAAM,KAAK,KACxB,WAAW,WAAW,GAAG,EAAE,WAAW,WAAW,GAAG,EAAE,eAAe,QAAQ,WAAW,aAAa,OAAO,QAAQ,QAAQ,EAAE,KAAK,GAAG,4HACxI;GACA,IAAI,OAAO,aAAa,GAAG,MAAM,IAAI,MAAM,wBAAwB,MAAM;GACzE,OAAO,KAAK,gBAAgB,OAAO,QAAQ,KAAK,OAAO;EACzD;EAIA,MAAM,SAAS,MAAM,KAAK,KACxB,MAAM,WAAW,GAAG,EAAE,oJACxB;EACA,IAAI,OAAO,aAAa,GAAG,MAAM,IAAI,MAAM,wBAAwB,MAAM;EACzE,OAAO,KAAK,gBAAgB,OAAO,QAAQ,OAAO;CACpD;CAEA,gBAAwB,QAAgB,SAAoC;EAC1E,MAAM,UAAuB,CAAC;EAC9B,KAAK,MAAM,QAAQ,OAAO,MAAM,IAAI,GAAG;GACrC,IAAI,CAAC,MAAM;GACX,MAAM,MAAM,KAAK,QAAQ,GAAI;GAC7B,IAAI,MAAM,GAAG;GACb,MAAM,OAAO,KAAK,MAAM,GAAG,GAAG,MAAM,MAAM,cAAc;GACxD,MAAM,OAAO,KAAK,MAAM,MAAM,CAAC;GAC/B,IAAI,CAAC,QAAQ,SAAS,OAAO,SAAS,MAAM;GAC5C,IAAI,SAAS,UAAU,CAAC,KAAK,iBAAiB,MAAM,SAAS,SAAS,GAAG;GACzE,QAAQ,KAAK;IAAE;IAAM;GAAK,CAAC;EAC7B;EACA,OAAO;CACT;CAEA,gBAAwB,QAAgB,MAAc,SAAoC;EACxF,MAAM,UAAuB,CAAC;EAC9B,KAAK,MAAM,QAAQ,OAAO,MAAM,IAAI,GAAG;GACrC,IAAI,CAAC,MAAM;GACX,MAAM,MAAM,KAAK,QAAQ,GAAI;GAC7B,IAAI,MAAM,GAAG;GACb,MAAM,OAAO,KAAK,MAAM,GAAG,GAAG,MAAM,MAAM,cAAc;GACxD,MAAM,WAAW,KAAK,MAAM,MAAM,CAAC;GACnC,MAAM,OAAOA,MAAU,SAAS,MAAM,QAAQ;GAC9C,IAAI,CAAC,MAAM;GACX,IAAI,SAAS,UAAU,CAAC,KAAK,iBAAiB,MAAM,SAAS,SAAS,GAAG;GACzE,QAAQ,KAAK;IAAE;IAAM;GAAK,CAAC;EAC7B;EACA,OAAO;CACT;CAEA,iBAAyB,MAAc,WAAwC;EAC7E,IAAI,CAAC,WAAW,OAAO;EAEvB,QADa,MAAM,QAAQ,SAAS,IAAI,YAAY,CAAC,SAAS,EAAA,CAClD,MAAK,QAAO,KAAK,SAAS,GAAG,CAAC;CAC5C;CAIA,MAAM,OAAO,MAAgC;EAC3C,MAAM,MAAM,MAAM,KAAK,aAAa,IAAI;EAExC,QAAO,MADc,KAAK,KAAK,WAAW,WAAW,GAAG,GAAG,EAAA,CAC7C,aAAa;CAC7B;CAEA,MAAM,KAAK,MAAiC;EAC1C,MAAM,MAAM,MAAM,KAAK,aAAa,IAAI;EACxC,MAAM,KAAK,wBAAwB,KAAK,IAAI;EAM5C,MAAM,SAAS,MAAM,KAAK,KACxB,yBAAyB,WAAW,GAAG,EAAE,yCAAyC,WAAW,GAAG,GAClG;EACA,IAAI,OAAO,aAAa,GACtB,MAAM,IAAI,kBAAkB,IAAI;EAElC,MAAM,CAAC,MAAM,SAAS,UAAU,YAAY,OAAO,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG;EAC1E,MAAM,OAAO,QAAQ,KAAK,YAAY,CAAC,CAAC,SAAS,WAAW,IAAI,cAAc;EAC9E,MAAM,OAAO,OAAO,OAAO,KAAK;EAChC,MAAM,QAAQ,OAAO,QAAQ,KAAK;EAClC,MAAM,QAAQ,OAAO,QAAQ;EAC7B,OAAO;GACL,MAAMA,MAAU,SAAS,GAAG;GAC5B,MAAM,IAAIA,MAAU,SAAS,KAAK,UAAU,GAAG;GAC/C;GACA,MAAM,SAAS,cAAc,IAAI;GACjC,4BAAY,IAAI,KAAK,QAAQ,GAAI;GACjC,2BAAW,IAAI,MAAM,QAAQ,IAAI,QAAQ,SAAS,GAAI;EACxD;CACF;CAIA,MAAM,OAAsB;EAC1B,MAAM,KAAK,OAAO,YAAY,WAAW,MAAM,KAAK,KAAK,CAAC,KAAK,cAAc;CAC/E;CAEA,MAAM,UAAyB,CAE/B;CAEA,MAAM,UAA4B;EAEhC,QAAO,MADc,KAAK,KAAK,WAAW,WAAW,MAAM,KAAK,KAAK,CAAC,GAAG,EAAA,CAC3D,aAAa;CAC7B;CAEA,UAA0B;EACxB,OAAO;GACL,IAAI,KAAK;GACT,MAAM,KAAK;GACX,UAAU,KAAK;GACf,QAAQ,KAAK;GACb,UAAU;IAAE,UAAU,KAAK;IAAU,WAAW,KAAK,QAAQ;GAAG;EAClE;CACF;CAEA,kBAA0B;EACxB,OAAO,2CAA2C,KAAK,SAAS;CAClE;AACF"}
+{"version":3,"file":"sandbox-filesystem.js","names":["posixPath"],"sources":["../../src/agents/sandbox-filesystem.ts"],"sourcesContent":["/**\n * SandboxFilesystem\n *\n * A `WorkspaceFilesystem` that stores files inside a remote `MastraSandbox`\n * (e.g. a Railway VM) rather than on the server host. File operations are\n * implemented by shelling out through the sandbox's `executeCommand`, so the\n * agent's file tools and command tools share one VM and one view of the repo.\n *\n * Paths are workspace-relative (`/src/foo.ts`) and resolve under the sandbox\n * working directory (`basePath`). A traversal guard rejects any path that\n * escapes the workdir, mirroring `LocalFilesystem`'s contained mode.\n *\n * Reads/writes use base64 over the wire so binary content survives the shell.\n */\n\nimport { posix as posixPath } from 'node:path';\nimport type {\n  CopyOptions,\n  FileContent,\n  FileEntry,\n  FileStat,\n  FilesystemGrepMatch,\n  FilesystemGrepOptions,\n  FilesystemGrepResult,\n  FilesystemInfo,\n  ListOptions,\n  ProviderStatus,\n  ReadOptions,\n  RemoveOptions,\n  WalkEntry,\n  WalkOptions,\n  WorkspaceFilesystem,\n  WriteOptions,\n} from '@mastra/core/workspace';\nimport {\n  DirectoryNotFoundError,\n  FileExistsError,\n  FileNotFoundError,\n  IsDirectoryError,\n  NotDirectoryError,\n  UnsupportedGrepPatternError,\n} from '@mastra/core/workspace';\n\n/**\n * Sentinel exit codes used by guard clauses that run before the real command,\n * so shell failures can be mapped to typed filesystem errors.\n */\nconst EXIT_NOT_FOUND = 20;\nconst EXIT_IS_DIRECTORY = 21;\nconst EXIT_EXISTS = 22;\nconst EXIT_NOT_DIRECTORY = 23;\n\n/** Minimal command result shape we depend on. */\nexport interface SandboxCommandResult {\n  exitCode: number;\n  stdout: string;\n  stderr: string;\n}\n\n/** Minimal sandbox surface the filesystem needs. */\nexport interface SandboxExec {\n  readonly id: string;\n  executeCommand(command: string, args?: string[], options?: { timeout?: number }): Promise<SandboxCommandResult>;\n}\n\nexport interface SandboxFilesystemOptions {\n  /** Live sandbox to run commands in. */\n  sandbox: SandboxExec;\n  /**\n   * Absolute path inside the sandbox that is the workspace root — or a lazy\n   * resolver for it. The resolver form exists for sandboxes whose workspace\n   * root is only knowable once the VM is running (e.g. `$HOME/<repo>` under\n   * a provider-chosen home dir): it is awaited on the first file operation\n   * (which itself may lazily start the VM) and the result is memoized.\n   */\n  workdir: string | (() => Promise<string> | string);\n  /** Optional stable id; defaults to a sandbox-derived id. */\n  id?: string;\n}\n\n/** Default per-command deadline so a hung sandbox can't block file tools forever. */\nconst COMMAND_TIMEOUT_MS = 30_000;\n\n/** Single-quote a string for safe POSIX shell interpolation. */\nfunction shellQuote(value: string): string {\n  return `'${value.replace(/'/g, `'\\\\''`)}'`;\n}\n\nfunction isFileContentString(content: FileContent): content is string {\n  return typeof content === 'string';\n}\n\nfunction toBuffer(content: FileContent): Buffer {\n  if (isFileContentString(content)) return Buffer.from(content, 'utf8');\n  return Buffer.from(content);\n}\n\nexport class SandboxFilesystem implements WorkspaceFilesystem {\n  readonly id: string;\n  readonly name = 'SandboxFilesystem';\n  readonly provider = 'sandbox';\n  status: ProviderStatus = 'ready';\n\n  private readonly sandbox: SandboxExec;\n  private readonly workdirSource: string | (() => Promise<string> | string);\n  private resolvedBase?: string;\n  private resolvingBase?: Promise<string>;\n\n  constructor(options: SandboxFilesystemOptions) {\n    this.sandbox = options.sandbox;\n    this.workdirSource = options.workdir;\n    if (typeof options.workdir === 'string') this.resolvedBase = options.workdir;\n    // Include the workdir when known: one sandbox can back several\n    // filesystems rooted at different checkouts, and each needs a distinct\n    // id. Lazy-workdir callers pass an explicit id.\n    this.id =\n      options.id ??\n      (typeof options.workdir === 'string'\n        ? `sandbox-fs:${options.sandbox.id}:${options.workdir}`\n        : `sandbox-fs:${options.sandbox.id}`);\n  }\n\n  /** The resolved workspace root; empty until a lazy workdir first resolves. */\n  get basePath(): string {\n    return this.resolvedBase ?? '';\n  }\n\n  /** Await (and memoize) the workspace root, resolving a lazy workdir once. */\n  private async base(): Promise<string> {\n    if (this.resolvedBase) return this.resolvedBase;\n    const source = this.workdirSource;\n    if (typeof source === 'string') return (this.resolvedBase = source);\n    this.resolvingBase ??= Promise.resolve()\n      .then(source)\n      .then(resolved => {\n        if (!resolved) throw new Error('Sandbox workspace root resolution returned an empty path');\n        return (this.resolvedBase = resolved);\n      })\n      .finally(() => {\n        this.resolvingBase = undefined;\n      });\n    return this.resolvingBase;\n  }\n\n  // ── Path handling ──────────────────────────────────────────────────────\n\n  /**\n   * Resolve a workspace path to an absolute path inside the sandbox, enforcing\n   * that it stays within the workdir. Awaits the workspace root first, which\n   * for a lazy workdir may start the VM.\n   */\n  private async resolveAsync(inputPath: string): Promise<string> {\n    return this.resolveAgainst(await this.base(), inputPath);\n  }\n\n  /**\n   * Resolve a workspace path against a known base, enforcing that it stays\n   * within the workdir.\n   *\n   * Accepts both workspace-relative paths (`src/foo.ts`, `/src/foo.ts`) and\n   * absolute sandbox paths that already live under the workdir — the agent's\n   * prompt advertises the workdir as its working directory, so tools are\n   * routinely called with fully-qualified paths like `<workdir>/src/foo.ts`.\n   */\n  private resolveAgainst(basePath: string, inputPath: string): string {\n    const base = posixPath.normalize(basePath);\n    const normalizedInput = posixPath.normalize(inputPath);\n    const rel =\n      normalizedInput === base\n        ? ''\n        : normalizedInput.startsWith(`${base}/`)\n          ? normalizedInput.slice(base.length + 1)\n          : inputPath.startsWith('/')\n            ? inputPath.slice(1)\n            : inputPath;\n    const resolved = posixPath.normalize(posixPath.join(base, rel));\n    if (resolved !== base && !resolved.startsWith(`${base}/`)) {\n      throw new Error(`Path escapes workspace root: ${inputPath}`);\n    }\n    return resolved;\n  }\n\n  resolveAbsolutePath(inputPath: string): string | undefined {\n    // Sync interface: a lazy workdir that has not resolved yet has no\n    // absolute form to offer.\n    if (!this.resolvedBase) return undefined;\n    return this.resolveAgainst(this.resolvedBase, inputPath);\n  }\n\n  // ── Command helper ─────────────────────────────────────────────────────\n\n  private async exec(script: string): Promise<SandboxCommandResult> {\n    return this.sandbox.executeCommand('sh', ['-c', script], { timeout: COMMAND_TIMEOUT_MS });\n  }\n\n  /**\n   * Lexical guard catches `..` traversal, but a symlink inside the workdir can\n   * still point outside it. After resolving a path that refers to an existing\n   * entry, verify its realpath is still contained in the workdir.\n   *\n   * Canonicalization tries `realpath`, then `readlink -f` (GNU/busybox), then\n   * `cd && pwd -P` for directories — covering GNU hosts, macOS/BSD, and\n   * busybox. If the path exists but cannot be canonicalized we fail CLOSED:\n   * returning without a check would let a symlink bypass containment.\n   */\n  private async assertContainedRealpath(abs: string, inputPath: string): Promise<void> {\n    const result = await this.exec(\n      [\n        `p=${shellQuote(abs)}`,\n        `if [ ! -e \"$p\" ] && [ ! -L \"$p\" ]; then exit ${EXIT_NOT_FOUND}; fi`,\n        // The workdir itself may contain symlinked components (/tmp on macOS),\n        // so canonicalize it as the comparison root.\n        `root=$(cd ${shellQuote(this.basePath)} 2>/dev/null && pwd -P)`,\n        `[ -n \"$root\" ] || exit 1`,\n        `rp=$(realpath \"$p\" 2>/dev/null) || rp=$(readlink -f \"$p\" 2>/dev/null) || { [ -d \"$p\" ] && rp=$(cd \"$p\" 2>/dev/null && pwd -P); }`,\n        `[ -n \"$rp\" ] || exit 1`,\n        `printf '%s\\\\n%s' \"$root\" \"$rp\"`,\n      ].join('\\n'),\n    );\n    // Path doesn't exist yet: nothing to canonicalize (writes to a fresh leaf\n    // are covered by assertContainedDest checking the parent directory).\n    if (result.exitCode === EXIT_NOT_FOUND) return;\n    const [root, real] = result.stdout.split('\\n').map(s => s.trim());\n    if (result.exitCode !== 0 || !root || !real) {\n      throw new Error(`Unable to verify path stays within workspace root: ${inputPath}`);\n    }\n    if (real !== root && !real.startsWith(`${root}/`)) {\n      throw new Error(`Path escapes workspace root (symlink): ${inputPath}`);\n    }\n  }\n\n  /**\n   * Guard for write destinations. The lexical guard catches `..`, but a symlink\n   * inside the workdir can redirect a write outside it. For an existing target\n   * we check its realpath; for a not-yet-existing target we check the realpath\n   * of its nearest existing ancestor directory, since a symlinked parent is the\n   * escape vector (e.g. `link -> /etc` then writing `link/passwd`).\n   */\n  private async assertContainedDest(abs: string, inputPath: string): Promise<void> {\n    // First check the target itself (covers overwriting an existing symlink).\n    await this.assertContainedRealpath(abs, inputPath);\n    // Then check the parent directory's realpath; readlink -f resolves the\n    // nearest existing ancestor when the leaf doesn't exist yet.\n    const parent = posixPath.dirname(abs);\n    if (parent && parent !== abs) {\n      await this.assertContainedRealpath(parent, inputPath);\n    }\n  }\n\n  private async execOk(script: string, context: string): Promise<SandboxCommandResult> {\n    const result = await this.exec(script);\n    if (result.exitCode !== 0) {\n      throw new Error(`${context} failed (exit ${result.exitCode}): ${result.stderr.trim() || result.stdout.trim()}`);\n    }\n    return result;\n  }\n\n  // ── File operations ────────────────────────────────────────────────────\n\n  async readFile(path: string, options?: ReadOptions): Promise<string | Buffer> {\n    const abs = await this.resolveAsync(path);\n    await this.assertContainedRealpath(abs, path);\n    // Guard clauses first: redirecting from a directory \"succeeds\" with empty\n    // output on some shells, so classify before reading.\n    const result = await this.exec(\n      `if [ -d ${shellQuote(abs)} ]; then exit ${EXIT_IS_DIRECTORY}; elif [ ! -e ${shellQuote(abs)} ]; then exit ${EXIT_NOT_FOUND}; fi; base64 < ${shellQuote(abs)}`,\n    );\n    if (result.exitCode === EXIT_IS_DIRECTORY) throw new IsDirectoryError(path);\n    if (result.exitCode === EXIT_NOT_FOUND) throw new FileNotFoundError(path);\n    if (result.exitCode !== 0) {\n      throw new Error(`readFile ${path} failed (exit ${result.exitCode}): ${result.stderr.trim()}`);\n    }\n    const buffer = Buffer.from(result.stdout.replace(/\\s/g, ''), 'base64');\n    if (options?.encoding) {\n      return buffer.toString(options.encoding);\n    }\n    return buffer;\n  }\n\n  async writeFile(path: string, content: FileContent, options?: WriteOptions): Promise<void> {\n    const abs = await this.resolveAsync(path);\n    await this.assertContainedDest(abs, path);\n    const b64 = toBuffer(content).toString('base64');\n    const dir = posixPath.dirname(abs);\n    const mkdir = options?.recursive === false ? '' : `mkdir -p ${shellQuote(dir)} && `;\n    if (options?.overwrite === false) {\n      // `set -C` (noclobber) makes the redirect itself the exclusivity check —\n      // no exists() pre-check that could race with a concurrent writer.\n      const result = await this.exec(\n        `${mkdir}{ (set -C; printf %s ${shellQuote(b64)} | base64 -d > ${shellQuote(abs)}) 2>/dev/null || { [ -e ${shellQuote(abs)} ] && exit ${EXIT_EXISTS} || exit 1; }; }`,\n      );\n      if (result.exitCode === EXIT_EXISTS) throw new FileExistsError(path);\n      if (result.exitCode !== 0) {\n        throw new Error(`writeFile ${path} failed (exit ${result.exitCode}): ${result.stderr.trim()}`);\n      }\n      return;\n    }\n    await this.execOk(`${mkdir}printf %s ${shellQuote(b64)} | base64 -d > ${shellQuote(abs)}`, `writeFile ${path}`);\n  }\n\n  async appendFile(path: string, content: FileContent): Promise<void> {\n    const abs = await this.resolveAsync(path);\n    await this.assertContainedDest(abs, path);\n    const b64 = toBuffer(content).toString('base64');\n    await this.execOk(\n      `mkdir -p ${shellQuote(posixPath.dirname(abs))} && printf %s ${shellQuote(b64)} | base64 -d >> ${shellQuote(abs)}`,\n      `appendFile ${path}`,\n    );\n  }\n\n  async deleteFile(path: string, options?: RemoveOptions): Promise<void> {\n    const abs = await this.resolveAsync(path);\n    // Contain the parent's realpath: deleting `link/file` where `link` points\n    // outside the workdir must fail, while deleting a symlink entry itself\n    // (which lives inside the workdir) stays allowed.\n    await this.assertContainedRealpath(posixPath.dirname(abs), path);\n    if (options?.force) {\n      // `rm -f` already succeeds for a missing file, but still fails for\n      // directories and permission errors — surface those.\n      await this.execOk(`rm -f ${shellQuote(abs)}`, `deleteFile ${path}`);\n      return;\n    }\n    const result = await this.exec(\n      `if [ ! -e ${shellQuote(abs)} ]; then exit ${EXIT_NOT_FOUND}; fi; rm ${shellQuote(abs)}`,\n    );\n    if (result.exitCode === EXIT_NOT_FOUND) throw new FileNotFoundError(path);\n    if (result.exitCode !== 0) {\n      throw new Error(`deleteFile ${path} failed (exit ${result.exitCode}): ${result.stderr.trim()}`);\n    }\n  }\n\n  async copyFile(src: string, dest: string, options?: CopyOptions): Promise<void> {\n    const srcAbs = await this.resolveAsync(src);\n    const destAbs = await this.resolveAsync(dest);\n    await this.assertContainedRealpath(srcAbs, src);\n    await this.assertContainedDest(destAbs, dest);\n    const recursive = options?.recursive ? '-r ' : '';\n    if (options?.overwrite === false) {\n      // Atomic no-clobber: directories claim the destination with an exclusive\n      // mkdir; files copy to a temp name then hardlink into place (link(2)\n      // fails if the destination exists). No racy exists() pre-check.\n      const result = await this.exec(\n        [\n          `src=${shellQuote(srcAbs)}`,\n          `dest=${shellQuote(destAbs)}`,\n          `if [ ! -e \"$src\" ] && [ ! -L \"$src\" ]; then exit ${EXIT_NOT_FOUND}; fi`,\n          `mkdir -p ${shellQuote(posixPath.dirname(destAbs))} || exit 1`,\n          `if [ -d \"$src\" ]; then`,\n          `  mkdir \"$dest\" 2>/dev/null || exit ${EXIT_EXISTS}`,\n          `  cp -R \"$src\"/. \"$dest\"/`,\n          `else`,\n          `  tmp=\"$dest.__cptmp$$\"`,\n          `  cp \"$src\" \"$tmp\" || exit 1`,\n          `  ln \"$tmp\" \"$dest\" 2>/dev/null || { rm -f \"$tmp\"; [ -e \"$dest\" ] && exit ${EXIT_EXISTS} || exit 1; }`,\n          `  rm -f \"$tmp\"`,\n          `fi`,\n        ].join('\\n'),\n      );\n      if (result.exitCode === EXIT_NOT_FOUND) throw new FileNotFoundError(src);\n      if (result.exitCode === EXIT_EXISTS) throw new FileExistsError(dest);\n      if (result.exitCode !== 0) {\n        throw new Error(`copyFile ${src} -> ${dest} failed (exit ${result.exitCode}): ${result.stderr.trim()}`);\n      }\n      return;\n    }\n    const result = await this.exec(\n      `if [ ! -e ${shellQuote(srcAbs)} ]; then exit ${EXIT_NOT_FOUND}; fi; mkdir -p ${shellQuote(posixPath.dirname(destAbs))} && cp ${recursive}${shellQuote(srcAbs)} ${shellQuote(destAbs)}`,\n    );\n    if (result.exitCode === EXIT_NOT_FOUND) throw new FileNotFoundError(src);\n    if (result.exitCode !== 0) {\n      throw new Error(`copyFile ${src} -> ${dest} failed (exit ${result.exitCode}): ${result.stderr.trim()}`);\n    }\n  }\n\n  async moveFile(src: string, dest: string, options?: CopyOptions): Promise<void> {\n    const srcAbs = await this.resolveAsync(src);\n    const destAbs = await this.resolveAsync(dest);\n    await this.assertContainedRealpath(srcAbs, src);\n    await this.assertContainedDest(destAbs, dest);\n    if (options?.overwrite === false) {\n      // `mv -n` exits 0 even when it skips, so detect a skipped move by the\n      // source surviving. The no-clobber rename itself is atomic; no racy\n      // exists() pre-check.\n      const result = await this.exec(\n        [\n          `src=${shellQuote(srcAbs)}`,\n          `dest=${shellQuote(destAbs)}`,\n          `if [ ! -e \"$src\" ] && [ ! -L \"$src\" ]; then exit ${EXIT_NOT_FOUND}; fi`,\n          `mkdir -p ${shellQuote(posixPath.dirname(destAbs))} || exit 1`,\n          `mv -n \"$src\" \"$dest\" 2>/dev/null || exit 1`,\n          `if [ -e \"$src\" ] || [ -L \"$src\" ]; then exit ${EXIT_EXISTS}; fi`,\n        ].join('\\n'),\n      );\n      if (result.exitCode === EXIT_NOT_FOUND) throw new FileNotFoundError(src);\n      if (result.exitCode === EXIT_EXISTS) throw new FileExistsError(dest);\n      if (result.exitCode !== 0) {\n        throw new Error(`moveFile ${src} -> ${dest} failed (exit ${result.exitCode}): ${result.stderr.trim()}`);\n      }\n      return;\n    }\n    const result = await this.exec(\n      `if [ ! -e ${shellQuote(srcAbs)} ]; then exit ${EXIT_NOT_FOUND}; fi; mkdir -p ${shellQuote(posixPath.dirname(destAbs))} && mv ${shellQuote(srcAbs)} ${shellQuote(destAbs)}`,\n    );\n    if (result.exitCode === EXIT_NOT_FOUND) throw new FileNotFoundError(src);\n    if (result.exitCode !== 0) {\n      throw new Error(`moveFile ${src} -> ${dest} failed (exit ${result.exitCode}): ${result.stderr.trim()}`);\n    }\n  }\n\n  // ── Directory operations ───────────────────────────────────────────────\n\n  async mkdir(path: string, options?: { recursive?: boolean }): Promise<void> {\n    const abs = await this.resolveAsync(path);\n    await this.assertContainedDest(abs, path);\n    const flag = options?.recursive === false ? '' : '-p ';\n    await this.execOk(`mkdir ${flag}${shellQuote(abs)}`, `mkdir ${path}`);\n  }\n\n  async rmdir(path: string, options?: RemoveOptions): Promise<void> {\n    const abs = await this.resolveAsync(path);\n    // Same parent containment as deleteFile — `rm -r` through a symlinked\n    // parent would otherwise delete outside the workspace.\n    await this.assertContainedRealpath(posixPath.dirname(abs), path);\n    if (options?.recursive) {\n      const force = options?.force ? '-f ' : '';\n      await this.execOk(`rm -r ${force}${shellQuote(abs)}`, `rmdir ${path}`);\n      return;\n    }\n    const result = await this.exec(`rmdir ${shellQuote(abs)}`);\n    if (result.exitCode !== 0 && !options?.force) {\n      throw new Error(`Directory not empty or not found: ${path}`);\n    }\n  }\n\n  async readdir(path: string, options?: ListOptions): Promise<FileEntry[]> {\n    const abs = await this.resolveAsync(path);\n    await this.assertContainedRealpath(abs, path);\n    if (options?.recursive) {\n      // Recursive listing emitting \"type\\tpath\". `find -printf` is GNU-only\n      // (fails on macOS/BSD hosts backing a local sandbox), so classify each\n      // entry with a portable shell loop instead.\n      const result = await this.exec(\n        `test -d ${shellQuote(abs)} && find ${shellQuote(abs)} -mindepth 1 ${options.maxDepth ? `-maxdepth ${Number(options.maxDepth)} ` : ''}2>/dev/null | while IFS= read -r f; do if [ -d \"$f\" ]; then printf 'd\\\\t%s\\\\n' \"$f\"; else printf 'f\\\\t%s\\\\n' \"$f\"; fi; done`,\n      );\n      if (result.exitCode !== 0) throw new Error(`Directory not found: ${path}`);\n      return this.parseFindOutput(result.stdout, abs, options);\n    }\n    // Non-recursive: list with name + type via a portable loop. Use printf,\n    // not echo — bash-as-/bin/sh (macOS local sandboxes) does not expand \\t\n    // in echo arguments.\n    const result = await this.exec(\n      `cd ${shellQuote(abs)} 2>/dev/null && for f in * .[!.]*; do [ -e \"$f\" ] || continue; if [ -d \"$f\" ]; then printf 'd\\\\t%s\\\\n' \"$f\"; else printf 'f\\\\t%s\\\\n' \"$f\"; fi; done`,\n    );\n    if (result.exitCode !== 0) throw new Error(`Directory not found: ${path}`);\n    return this.parseListOutput(result.stdout, options);\n  }\n\n  private parseListOutput(stdout: string, options?: ListOptions): FileEntry[] {\n    const entries: FileEntry[] = [];\n    for (const line of stdout.split('\\n')) {\n      if (!line) continue;\n      const tab = line.indexOf('\\t');\n      if (tab < 0) continue;\n      const type = line.slice(0, tab) === 'd' ? 'directory' : 'file';\n      const name = line.slice(tab + 1);\n      if (!name || name === '.' || name === '..') continue;\n      if (type === 'file' && !this.matchesExtension(name, options?.extension)) continue;\n      entries.push({ name, type });\n    }\n    return entries;\n  }\n\n  private parseFindOutput(stdout: string, base: string, options?: ListOptions): FileEntry[] {\n    const entries: FileEntry[] = [];\n    for (const line of stdout.split('\\n')) {\n      if (!line) continue;\n      const tab = line.indexOf('\\t');\n      if (tab < 0) continue;\n      const type = line.slice(0, tab) === 'd' ? 'directory' : 'file';\n      const fullPath = line.slice(tab + 1);\n      const name = posixPath.relative(base, fullPath);\n      if (!name) continue;\n      if (type === 'file' && !this.matchesExtension(name, options?.extension)) continue;\n      entries.push({ name, type });\n    }\n    return entries;\n  }\n\n  private matchesExtension(name: string, extension?: string | string[]): boolean {\n    if (!extension) return true;\n    const exts = Array.isArray(extension) ? extension : [extension];\n    return exts.some(ext => name.endsWith(ext));\n  }\n\n  // ── Native walk / grep capabilities ────────────────────────────────────\n\n  /**\n   * Walk the tree in a single sandbox command instead of one readdir round\n   * trip per directory. Uses `find` with a portable classification loop\n   * (`find -printf` is GNU-only and fails on macOS/BSD hosts). `find` does\n   * not follow symlinked directories by default, matching the host-side\n   * walker's no-recursion-into-symlinks behavior.\n   */\n  async walk(path: string, options?: WalkOptions): Promise<WalkEntry[]> {\n    const abs = await this.resolveAsync(path);\n    await this.assertContainedRealpath(abs, path);\n    const maxDepth =\n      options?.maxDepth !== undefined && Number.isFinite(options.maxDepth)\n        ? `-maxdepth ${Math.max(0, Math.floor(options.maxDepth))} `\n        : '';\n    // Prune hidden entries in-sandbox when not requested, so a huge hidden\n    // tree (e.g. `.git`) doesn't inflate the response.\n    const hiddenPrune = options?.includeHidden ? '' : `-name '.*' -prune -o `;\n    // Emit \"flag\\tpath[\\ttarget]\" — flag is d/f for regular entries, D/F for\n    // symlinks (with the link target as a third field).\n    const script =\n      `root=${shellQuote(abs)}\\n` +\n      `[ -e \"$root\" ] || [ -L \"$root\" ] || exit ${EXIT_NOT_FOUND}\\n` +\n      `[ -d \"$root\" ] || exit ${EXIT_NOT_DIRECTORY}\\n` +\n      `find \"$root\" -mindepth 1 ${maxDepth}${hiddenPrune}-print 2>/dev/null | while IFS= read -r f; do ` +\n      `if [ -L \"$f\" ]; then if [ -d \"$f\" ]; then t=D; else t=F; fi; printf '%s\\\\t%s\\\\t%s\\\\n' \"$t\" \"$f\" \"$(readlink \"$f\")\"; ` +\n      `elif [ -d \"$f\" ]; then printf 'd\\\\t%s\\\\n' \"$f\"; else printf 'f\\\\t%s\\\\n' \"$f\"; fi; done`;\n    const result = await this.exec(script);\n    if (result.exitCode === EXIT_NOT_FOUND) throw new DirectoryNotFoundError(path);\n    if (result.exitCode === EXIT_NOT_DIRECTORY) throw new NotDirectoryError(path);\n    if (result.exitCode !== 0) {\n      throw new Error(`walk ${path} failed (exit ${result.exitCode}): ${result.stderr.trim()}`);\n    }\n    const entries: WalkEntry[] = [];\n    for (const line of result.stdout.split('\\n')) {\n      if (!line) continue;\n      const tab = line.indexOf('\\t');\n      if (tab < 0) continue;\n      const flag = line.slice(0, tab);\n      const isSymlink = flag === 'D' || flag === 'F';\n      let fullPath = line.slice(tab + 1);\n      let symlinkTarget: string | undefined;\n      if (isSymlink) {\n        const tab2 = fullPath.lastIndexOf('\\t');\n        if (tab2 >= 0) {\n          symlinkTarget = fullPath.slice(tab2 + 1) || undefined;\n          fullPath = fullPath.slice(0, tab2);\n        }\n      }\n      const rel = posixPath.relative(abs, fullPath);\n      if (!rel || rel.startsWith('..')) continue;\n      entries.push({\n        name: posixPath.basename(rel),\n        type: flag === 'd' || flag === 'D' ? 'directory' : 'file',\n        ...(isSymlink ? { isSymlink: true, ...(symlinkTarget ? { symlinkTarget } : {}) } : {}),\n        path: rel,\n      });\n    }\n    return entries;\n  }\n\n  /**\n   * Content search executed inside the sandbox in one command. Prefers\n   * ripgrep (`rg --json`) when installed; otherwise falls back to\n   * `grep -rnE`. Patterns the ERE fallback can't express (PCRE-style classes,\n   * word boundaries, lookarounds, non-greedy quantifiers) throw\n   * {@link UnsupportedGrepPatternError} so callers use their host-side walk.\n   *\n   * Callers are expected to apply their own gitignore/hidden/glob filtering\n   * to the returned paths; both engines run with ignore rules disabled so\n   * results are a superset of what any host-side filter would keep.\n   */\n  async grep(options: FilesystemGrepOptions): Promise<FilesystemGrepResult[]> {\n    const abs = await this.resolveAsync(options.path);\n    await this.assertContainedRealpath(abs, options.path);\n    if (await this.hasRipgrep()) {\n      return this.grepWithRipgrep(abs, options);\n    }\n    return this.grepWithPosixGrep(abs, options);\n  }\n\n  private rgCheck: Promise<boolean> | undefined;\n\n  private hasRipgrep(): Promise<boolean> {\n    this.rgCheck ??= this.exec('command -v rg >/dev/null 2>&1').then(\n      r => r.exitCode === 0,\n      () => false,\n    );\n    return this.rgCheck;\n  }\n\n  private async grepWithRipgrep(abs: string, options: FilesystemGrepOptions): Promise<FilesystemGrepResult[]> {\n    const args = [\n      'rg --json --no-ignore --hidden',\n      // .git is filtered host-side too; exclude it here so its object files\n      // don't inflate the response.\n      `-g ${shellQuote('!.git/**')}`,\n      options.caseSensitive ? '' : '-i',\n      options.maxCountPerFile !== undefined ? `-m ${Math.max(1, Math.floor(options.maxCountPerFile))}` : '',\n      options.contextLines ? `-C ${Math.max(0, Math.floor(options.contextLines))}` : '',\n      `-e ${shellQuote(options.pattern)}`,\n      shellQuote(abs),\n    ]\n      .filter(Boolean)\n      .join(' ');\n    const result = await this.exec(args);\n    // rg exits 1 when there are no matches, 2 on any error. A bad pattern\n    // produces no output at all, but a per-file error (e.g. an unreadable\n    // file) also yields exit 2 while still emitting matches for every other\n    // file. Keep those partial results; only treat \"error with no matches\"\n    // as an unsupported pattern so the caller falls back to the host walk.\n    if (result.exitCode === 1) return [];\n    const results = this.parseRipgrepJson(result.stdout, abs, options);\n    if (result.exitCode !== 0 && results.length === 0) {\n      throw new UnsupportedGrepPatternError(options.pattern);\n    }\n    return results;\n  }\n\n  private parseRipgrepJson(stdout: string, abs: string, options: FilesystemGrepOptions): FilesystemGrepResult[] {\n    interface FileState {\n      matches: Array<FilesystemGrepMatch & { lineNumber: number }>;\n      linesByNumber: Map<number, string>;\n    }\n    const files = new Map<string, FileState>();\n    for (const line of stdout.split('\\n')) {\n      if (!line) continue;\n      let event: any;\n      try {\n        event = JSON.parse(line);\n      } catch {\n        continue;\n      }\n      if (event.type !== 'match' && event.type !== 'context') continue;\n      const filePath: string | undefined = event.data?.path?.text;\n      const lineNumber: number | undefined = event.data?.line_number;\n      if (!filePath || !lineNumber) continue;\n      let state = files.get(filePath);\n      if (!state) {\n        state = { matches: [], linesByNumber: new Map() };\n        files.set(filePath, state);\n      }\n      const text: string = (event.data?.lines?.text ?? '').replace(/\\r?\\n$/, '');\n      state.linesByNumber.set(lineNumber, text);\n      if (event.type === 'match') {\n        // rg submatch offsets are byte offsets into the line; convert to a\n        // UTF-16 (JS string) index for the capability contract.\n        const byteStart: number = event.data?.submatches?.[0]?.start ?? 0;\n        const column = Buffer.from(text, 'utf8').subarray(0, byteStart).toString('utf8').length;\n        state.matches.push({ line: lineNumber, column, text, lineNumber });\n      }\n    }\n    const contextLines = options.contextLines ?? 0;\n    const results: FilesystemGrepResult[] = [];\n    for (const [filePath, state] of files) {\n      if (state.matches.length === 0) continue;\n      const rel = posixPath.relative(abs, filePath) || posixPath.basename(filePath);\n      const matches: FilesystemGrepMatch[] = state.matches.map(({ lineNumber, ...match }) => {\n        if (contextLines <= 0) return match;\n        const before: string[] = [];\n        for (let n = lineNumber - 1; n >= Math.max(1, lineNumber - contextLines); n--) {\n          const t = state.linesByNumber.get(n);\n          if (t === undefined) break;\n          before.unshift(t);\n        }\n        const after: string[] = [];\n        for (let n = lineNumber + 1; n <= lineNumber + contextLines; n++) {\n          const t = state.linesByNumber.get(n);\n          if (t === undefined) break;\n          after.push(t);\n        }\n        return { ...match, before, after };\n      });\n      results.push({ path: rel, matches });\n    }\n    return this.applyTotalCap(results, options.maxTotalMatches);\n  }\n\n  /**\n   * Patterns whose meaning differs between POSIX ERE and JS RegExp. The grep\n   * runs with ERE but match columns are recomputed with JS, so anything that\n   * only one side understands (PCRE classes, lookarounds, lazy quantifiers,\n   * POSIX bracket classes, GNU word anchors) must fall back to the host walk.\n   */\n  private static readonly ERE_UNSUPPORTED = /\\\\[dDwWsSbB<>]|\\(\\?|[*+?}]\\?|\\[:[a-z]+:\\]/;\n\n  private async grepWithPosixGrep(abs: string, options: FilesystemGrepOptions): Promise<FilesystemGrepResult[]> {\n    if (SandboxFilesystem.ERE_UNSUPPORTED.test(options.pattern)) {\n      throw new UnsupportedGrepPatternError(options.pattern);\n    }\n    let jsRegex: RegExp;\n    try {\n      jsRegex = new RegExp(options.pattern, options.caseSensitive ? '' : 'i');\n    } catch {\n      throw new UnsupportedGrepPatternError(options.pattern);\n    }\n    // Reconstructing per-match context from `grep -C` text output is not\n    // reliable (separator lines are ambiguous); let the host walk handle it.\n    if (options.contextLines) {\n      throw new UnsupportedGrepPatternError(options.pattern);\n    }\n    const args = [\n      'grep -rnIE',\n      options.caseSensitive ? '' : '-i',\n      options.maxCountPerFile !== undefined ? `-m ${Math.max(1, Math.floor(options.maxCountPerFile))}` : '',\n      '--',\n      shellQuote(options.pattern),\n      shellQuote(abs),\n    ]\n      .filter(Boolean)\n      .join(' ');\n    const result = await this.exec(args);\n    if (result.exitCode === 1) return [];\n    if (result.exitCode !== 0) {\n      throw new UnsupportedGrepPatternError(options.pattern);\n    }\n    // grep -n has no column output; recompute with the JS regex host-side so\n    // columns are UTF-16 indices, consistent with the fallback implementation.\n    const byFile = new Map<string, FilesystemGrepMatch[]>();\n    for (const line of result.stdout.split('\\n')) {\n      if (!line) continue;\n      const parsed = /^(.*?):(\\d+):(.*)$/.exec(line);\n      if (!parsed) continue;\n      const rel = posixPath.relative(abs, parsed[1]!) || posixPath.basename(parsed[1]!);\n      const text = parsed[3]!;\n      const column = jsRegex.exec(text)?.index;\n      // grep matched this line but the JS regex did not: the two dialects\n      // disagree on this pattern, so the columns would be wrong. Fall back.\n      if (column === undefined) throw new UnsupportedGrepPatternError(options.pattern);\n      let matches = byFile.get(rel);\n      if (!matches) {\n        matches = [];\n        byFile.set(rel, matches);\n      }\n      matches.push({ line: Number(parsed[2]), column, text });\n    }\n    const results = [...byFile.entries()].map(([path, matches]) => ({ path, matches }));\n    return this.applyTotalCap(results, options.maxTotalMatches);\n  }\n\n  private applyTotalCap(results: FilesystemGrepResult[], maxTotal?: number): FilesystemGrepResult[] {\n    if (maxTotal === undefined) return results;\n    const capped: FilesystemGrepResult[] = [];\n    let total = 0;\n    for (const file of results) {\n      if (total >= maxTotal) break;\n      const remaining = maxTotal - total;\n      const matches = file.matches.slice(0, remaining);\n      total += matches.length;\n      capped.push({ path: file.path, matches });\n    }\n    return capped;\n  }\n\n  // ── Path / metadata ────────────────────────────────────────────────────\n\n  async exists(path: string): Promise<boolean> {\n    const abs = await this.resolveAsync(path);\n    const result = await this.exec(`test -e ${shellQuote(abs)}`);\n    return result.exitCode === 0;\n  }\n\n  async stat(path: string): Promise<FileStat> {\n    const abs = await this.resolveAsync(path);\n    await this.assertContainedRealpath(abs, path);\n    // GNU stat: %F=type, %s=size, %Y=mtime (epoch seconds), %W=birth (or -1).\n    // BSD/macOS stat (local sandbox hosts) rejects `-c`; fall back to its\n    // `-f` format with the same field order (%HT=type, %z=size, %m=mtime,\n    // %B=birth). Delimit with `|` — neither stat interprets `\\t` escapes in\n    // its format string.\n    const result = await this.exec(\n      `stat -c '%F|%s|%Y|%W' ${shellQuote(abs)} 2>/dev/null || stat -f '%HT|%z|%m|%B' ${shellQuote(abs)}`,\n    );\n    if (result.exitCode !== 0) {\n      throw new FileNotFoundError(path);\n    }\n    const [kind, sizeStr, mtimeStr, ctimeStr] = result.stdout.trim().split('|');\n    const type = kind && kind.toLowerCase().includes('directory') ? 'directory' : 'file';\n    const size = Number(sizeStr) || 0;\n    const mtime = Number(mtimeStr) || 0;\n    const ctime = Number(ctimeStr);\n    return {\n      name: posixPath.basename(abs),\n      path: `/${posixPath.relative(this.basePath, abs)}`,\n      type,\n      size: type === 'directory' ? 0 : size,\n      modifiedAt: new Date(mtime * 1000),\n      createdAt: new Date((ctime > 0 ? ctime : mtime) * 1000),\n    };\n  }\n\n  // ── Lifecycle ──────────────────────────────────────────────────────────\n\n  async init(): Promise<void> {\n    await this.execOk(`mkdir -p ${shellQuote(await this.base())}`, 'init workdir');\n  }\n\n  async destroy(): Promise<void> {\n    // The sandbox lifecycle is owned by the caller; nothing to tear down here.\n  }\n\n  async isReady(): Promise<boolean> {\n    const result = await this.exec(`test -d ${shellQuote(await this.base())}`);\n    return result.exitCode === 0;\n  }\n\n  getInfo(): FilesystemInfo {\n    return {\n      id: this.id,\n      name: this.name,\n      provider: this.provider,\n      status: this.status,\n      metadata: { basePath: this.basePath, sandboxId: this.sandbox.id },\n    };\n  }\n\n  getInstructions(): string {\n    return `Files are stored in a remote sandbox at ${this.basePath}. Use absolute workspace paths like /src/index.ts. All reads, writes and commands run inside the same sandbox.`;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AA+CA,MAAM,iBAAiB;AACvB,MAAM,oBAAoB;AAC1B,MAAM,cAAc;AACpB,MAAM,qBAAqB;;AA+B3B,MAAM,qBAAqB;;AAG3B,SAAS,WAAW,OAAuB;CACzC,OAAO,IAAI,MAAM,QAAQ,MAAM,OAAO,EAAE;AAC1C;AAEA,SAAS,oBAAoB,SAAyC;CACpE,OAAO,OAAO,YAAY;AAC5B;AAEA,SAAS,SAAS,SAA8B;CAC9C,IAAI,oBAAoB,OAAO,GAAG,OAAO,OAAO,KAAK,SAAS,MAAM;CACpE,OAAO,OAAO,KAAK,OAAO;AAC5B;AAEA,IAAa,oBAAb,MAAa,kBAAiD;CAC5D;CACA,OAAgB;CAChB,WAAoB;CACpB,SAAyB;CAEzB;CACA;CACA;CACA;CAEA,YAAY,SAAmC;EAC7C,KAAK,UAAU,QAAQ;EACvB,KAAK,gBAAgB,QAAQ;EAC7B,IAAI,OAAO,QAAQ,YAAY,UAAU,KAAK,eAAe,QAAQ;EAIrE,KAAK,KACH,QAAQ,OACP,OAAO,QAAQ,YAAY,WACxB,cAAc,QAAQ,QAAQ,GAAG,GAAG,QAAQ,YAC5C,cAAc,QAAQ,QAAQ;CACtC;;CAGA,IAAI,WAAmB;EACrB,OAAO,KAAK,gBAAgB;CAC9B;;CAGA,MAAc,OAAwB;EACpC,IAAI,KAAK,cAAc,OAAO,KAAK;EACnC,MAAM,SAAS,KAAK;EACpB,IAAI,OAAO,WAAW,UAAU,OAAQ,KAAK,eAAe;EAC5D,KAAK,kBAAkB,QAAQ,QAAQ,CAAC,CACrC,KAAK,MAAM,CAAC,CACZ,MAAK,aAAY;GAChB,IAAI,CAAC,UAAU,MAAM,IAAI,MAAM,0DAA0D;GACzF,OAAQ,KAAK,eAAe;EAC9B,CAAC,CAAC,CACD,cAAc;GACb,KAAK,gBAAgB,KAAA;EACvB,CAAC;EACH,OAAO,KAAK;CACd;;;;;;CASA,MAAc,aAAa,WAAoC;EAC7D,OAAO,KAAK,eAAe,MAAM,KAAK,KAAK,GAAG,SAAS;CACzD;;;;;;;;;;CAWA,eAAuB,UAAkB,WAA2B;EAClE,MAAM,OAAOA,MAAU,UAAU,QAAQ;EACzC,MAAM,kBAAkBA,MAAU,UAAU,SAAS;EACrD,MAAM,MACJ,oBAAoB,OAChB,KACA,gBAAgB,WAAW,GAAG,KAAK,EAAE,IACnC,gBAAgB,MAAM,KAAK,SAAS,CAAC,IACrC,UAAU,WAAW,GAAG,IACtB,UAAU,MAAM,CAAC,IACjB;EACV,MAAM,WAAWA,MAAU,UAAUA,MAAU,KAAK,MAAM,GAAG,CAAC;EAC9D,IAAI,aAAa,QAAQ,CAAC,SAAS,WAAW,GAAG,KAAK,EAAE,GACtD,MAAM,IAAI,MAAM,gCAAgC,WAAW;EAE7D,OAAO;CACT;CAEA,oBAAoB,WAAuC;EAGzD,IAAI,CAAC,KAAK,cAAc,OAAO,KAAA;EAC/B,OAAO,KAAK,eAAe,KAAK,cAAc,SAAS;CACzD;CAIA,MAAc,KAAK,QAA+C;EAChE,OAAO,KAAK,QAAQ,eAAe,MAAM,CAAC,MAAM,MAAM,GAAG,EAAE,SAAS,mBAAmB,CAAC;CAC1F;;;;;;;;;;;CAYA,MAAc,wBAAwB,KAAa,WAAkC;EACnF,MAAM,SAAS,MAAM,KAAK,KACxB;GACE,KAAK,WAAW,GAAG;GACnB,gDAAgD,eAAe;GAG/D,aAAa,WAAW,KAAK,QAAQ,EAAE;GACvC;GACA;GACA;GACA;EACF,CAAC,CAAC,KAAK,IAAI,CACb;EAGA,IAAI,OAAO,aAAa,gBAAgB;EACxC,MAAM,CAAC,MAAM,QAAQ,OAAO,OAAO,MAAM,IAAI,CAAC,CAAC,KAAI,MAAK,EAAE,KAAK,CAAC;EAChE,IAAI,OAAO,aAAa,KAAK,CAAC,QAAQ,CAAC,MACrC,MAAM,IAAI,MAAM,sDAAsD,WAAW;EAEnF,IAAI,SAAS,QAAQ,CAAC,KAAK,WAAW,GAAG,KAAK,EAAE,GAC9C,MAAM,IAAI,MAAM,0CAA0C,WAAW;CAEzE;;;;;;;;CASA,MAAc,oBAAoB,KAAa,WAAkC;EAE/E,MAAM,KAAK,wBAAwB,KAAK,SAAS;EAGjD,MAAM,SAASA,MAAU,QAAQ,GAAG;EACpC,IAAI,UAAU,WAAW,KACvB,MAAM,KAAK,wBAAwB,QAAQ,SAAS;CAExD;CAEA,MAAc,OAAO,QAAgB,SAAgD;EACnF,MAAM,SAAS,MAAM,KAAK,KAAK,MAAM;EACrC,IAAI,OAAO,aAAa,GACtB,MAAM,IAAI,MAAM,GAAG,QAAQ,gBAAgB,OAAO,SAAS,KAAK,OAAO,OAAO,KAAK,KAAK,OAAO,OAAO,KAAK,GAAG;EAEhH,OAAO;CACT;CAIA,MAAM,SAAS,MAAc,SAAiD;EAC5E,MAAM,MAAM,MAAM,KAAK,aAAa,IAAI;EACxC,MAAM,KAAK,wBAAwB,KAAK,IAAI;EAG5C,MAAM,SAAS,MAAM,KAAK,KACxB,WAAW,WAAW,GAAG,EAAE,gBAAgB,kBAAkB,gBAAgB,WAAW,GAAG,EAAE,gBAAgB,eAAe,iBAAiB,WAAW,GAAG,GAC7J;EACA,IAAI,OAAO,aAAa,mBAAmB,MAAM,IAAI,iBAAiB,IAAI;EAC1E,IAAI,OAAO,aAAa,gBAAgB,MAAM,IAAI,kBAAkB,IAAI;EACxE,IAAI,OAAO,aAAa,GACtB,MAAM,IAAI,MAAM,YAAY,KAAK,gBAAgB,OAAO,SAAS,KAAK,OAAO,OAAO,KAAK,GAAG;EAE9F,MAAM,SAAS,OAAO,KAAK,OAAO,OAAO,QAAQ,OAAO,EAAE,GAAG,QAAQ;EACrE,IAAI,SAAS,UACX,OAAO,OAAO,SAAS,QAAQ,QAAQ;EAEzC,OAAO;CACT;CAEA,MAAM,UAAU,MAAc,SAAsB,SAAuC;EACzF,MAAM,MAAM,MAAM,KAAK,aAAa,IAAI;EACxC,MAAM,KAAK,oBAAoB,KAAK,IAAI;EACxC,MAAM,MAAM,SAAS,OAAO,CAAC,CAAC,SAAS,QAAQ;EAC/C,MAAM,MAAMA,MAAU,QAAQ,GAAG;EACjC,MAAM,QAAQ,SAAS,cAAc,QAAQ,KAAK,YAAY,WAAW,GAAG,EAAE;EAC9E,IAAI,SAAS,cAAc,OAAO;GAGhC,MAAM,SAAS,MAAM,KAAK,KACxB,GAAG,MAAM,uBAAuB,WAAW,GAAG,EAAE,iBAAiB,WAAW,GAAG,EAAE,0BAA0B,WAAW,GAAG,EAAE,aAAa,YAAY,iBACtJ;GACA,IAAI,OAAO,aAAa,aAAa,MAAM,IAAI,gBAAgB,IAAI;GACnE,IAAI,OAAO,aAAa,GACtB,MAAM,IAAI,MAAM,aAAa,KAAK,gBAAgB,OAAO,SAAS,KAAK,OAAO,OAAO,KAAK,GAAG;GAE/F;EACF;EACA,MAAM,KAAK,OAAO,GAAG,MAAM,YAAY,WAAW,GAAG,EAAE,iBAAiB,WAAW,GAAG,KAAK,aAAa,MAAM;CAChH;CAEA,MAAM,WAAW,MAAc,SAAqC;EAClE,MAAM,MAAM,MAAM,KAAK,aAAa,IAAI;EACxC,MAAM,KAAK,oBAAoB,KAAK,IAAI;EACxC,MAAM,MAAM,SAAS,OAAO,CAAC,CAAC,SAAS,QAAQ;EAC/C,MAAM,KAAK,OACT,YAAY,WAAWA,MAAU,QAAQ,GAAG,CAAC,EAAE,gBAAgB,WAAW,GAAG,EAAE,kBAAkB,WAAW,GAAG,KAC/G,cAAc,MAChB;CACF;CAEA,MAAM,WAAW,MAAc,SAAwC;EACrE,MAAM,MAAM,MAAM,KAAK,aAAa,IAAI;EAIxC,MAAM,KAAK,wBAAwBA,MAAU,QAAQ,GAAG,GAAG,IAAI;EAC/D,IAAI,SAAS,OAAO;GAGlB,MAAM,KAAK,OAAO,SAAS,WAAW,GAAG,KAAK,cAAc,MAAM;GAClE;EACF;EACA,MAAM,SAAS,MAAM,KAAK,KACxB,aAAa,WAAW,GAAG,EAAE,gBAAgB,eAAe,WAAW,WAAW,GAAG,GACvF;EACA,IAAI,OAAO,aAAa,gBAAgB,MAAM,IAAI,kBAAkB,IAAI;EACxE,IAAI,OAAO,aAAa,GACtB,MAAM,IAAI,MAAM,cAAc,KAAK,gBAAgB,OAAO,SAAS,KAAK,OAAO,OAAO,KAAK,GAAG;CAElG;CAEA,MAAM,SAAS,KAAa,MAAc,SAAsC;EAC9E,MAAM,SAAS,MAAM,KAAK,aAAa,GAAG;EAC1C,MAAM,UAAU,MAAM,KAAK,aAAa,IAAI;EAC5C,MAAM,KAAK,wBAAwB,QAAQ,GAAG;EAC9C,MAAM,KAAK,oBAAoB,SAAS,IAAI;EAC5C,MAAM,YAAY,SAAS,YAAY,QAAQ;EAC/C,IAAI,SAAS,cAAc,OAAO;GAIhC,MAAM,SAAS,MAAM,KAAK,KACxB;IACE,OAAO,WAAW,MAAM;IACxB,QAAQ,WAAW,OAAO;IAC1B,oDAAoD,eAAe;IACnE,YAAY,WAAWA,MAAU,QAAQ,OAAO,CAAC,EAAE;IACnD;IACA,uCAAuC;IACvC;IACA;IACA;IACA;IACA,6EAA6E,YAAY;IACzF;IACA;GACF,CAAC,CAAC,KAAK,IAAI,CACb;GACA,IAAI,OAAO,aAAa,gBAAgB,MAAM,IAAI,kBAAkB,GAAG;GACvE,IAAI,OAAO,aAAa,aAAa,MAAM,IAAI,gBAAgB,IAAI;GACnE,IAAI,OAAO,aAAa,GACtB,MAAM,IAAI,MAAM,YAAY,IAAI,MAAM,KAAK,gBAAgB,OAAO,SAAS,KAAK,OAAO,OAAO,KAAK,GAAG;GAExG;EACF;EACA,MAAM,SAAS,MAAM,KAAK,KACxB,aAAa,WAAW,MAAM,EAAE,gBAAgB,eAAe,iBAAiB,WAAWA,MAAU,QAAQ,OAAO,CAAC,EAAE,SAAS,YAAY,WAAW,MAAM,EAAE,GAAG,WAAW,OAAO,GACtL;EACA,IAAI,OAAO,aAAa,gBAAgB,MAAM,IAAI,kBAAkB,GAAG;EACvE,IAAI,OAAO,aAAa,GACtB,MAAM,IAAI,MAAM,YAAY,IAAI,MAAM,KAAK,gBAAgB,OAAO,SAAS,KAAK,OAAO,OAAO,KAAK,GAAG;CAE1G;CAEA,MAAM,SAAS,KAAa,MAAc,SAAsC;EAC9E,MAAM,SAAS,MAAM,KAAK,aAAa,GAAG;EAC1C,MAAM,UAAU,MAAM,KAAK,aAAa,IAAI;EAC5C,MAAM,KAAK,wBAAwB,QAAQ,GAAG;EAC9C,MAAM,KAAK,oBAAoB,SAAS,IAAI;EAC5C,IAAI,SAAS,cAAc,OAAO;GAIhC,MAAM,SAAS,MAAM,KAAK,KACxB;IACE,OAAO,WAAW,MAAM;IACxB,QAAQ,WAAW,OAAO;IAC1B,oDAAoD,eAAe;IACnE,YAAY,WAAWA,MAAU,QAAQ,OAAO,CAAC,EAAE;IACnD;IACA,gDAAgD,YAAY;GAC9D,CAAC,CAAC,KAAK,IAAI,CACb;GACA,IAAI,OAAO,aAAa,gBAAgB,MAAM,IAAI,kBAAkB,GAAG;GACvE,IAAI,OAAO,aAAa,aAAa,MAAM,IAAI,gBAAgB,IAAI;GACnE,IAAI,OAAO,aAAa,GACtB,MAAM,IAAI,MAAM,YAAY,IAAI,MAAM,KAAK,gBAAgB,OAAO,SAAS,KAAK,OAAO,OAAO,KAAK,GAAG;GAExG;EACF;EACA,MAAM,SAAS,MAAM,KAAK,KACxB,aAAa,WAAW,MAAM,EAAE,gBAAgB,eAAe,iBAAiB,WAAWA,MAAU,QAAQ,OAAO,CAAC,EAAE,SAAS,WAAW,MAAM,EAAE,GAAG,WAAW,OAAO,GAC1K;EACA,IAAI,OAAO,aAAa,gBAAgB,MAAM,IAAI,kBAAkB,GAAG;EACvE,IAAI,OAAO,aAAa,GACtB,MAAM,IAAI,MAAM,YAAY,IAAI,MAAM,KAAK,gBAAgB,OAAO,SAAS,KAAK,OAAO,OAAO,KAAK,GAAG;CAE1G;CAIA,MAAM,MAAM,MAAc,SAAkD;EAC1E,MAAM,MAAM,MAAM,KAAK,aAAa,IAAI;EACxC,MAAM,KAAK,oBAAoB,KAAK,IAAI;EACxC,MAAM,OAAO,SAAS,cAAc,QAAQ,KAAK;EACjD,MAAM,KAAK,OAAO,SAAS,OAAO,WAAW,GAAG,KAAK,SAAS,MAAM;CACtE;CAEA,MAAM,MAAM,MAAc,SAAwC;EAChE,MAAM,MAAM,MAAM,KAAK,aAAa,IAAI;EAGxC,MAAM,KAAK,wBAAwBA,MAAU,QAAQ,GAAG,GAAG,IAAI;EAC/D,IAAI,SAAS,WAAW;GACtB,MAAM,QAAQ,SAAS,QAAQ,QAAQ;GACvC,MAAM,KAAK,OAAO,SAAS,QAAQ,WAAW,GAAG,KAAK,SAAS,MAAM;GACrE;EACF;EAEA,KAAI,MADiB,KAAK,KAAK,SAAS,WAAW,GAAG,GAAG,EAAA,CAC9C,aAAa,KAAK,CAAC,SAAS,OACrC,MAAM,IAAI,MAAM,qCAAqC,MAAM;CAE/D;CAEA,MAAM,QAAQ,MAAc,SAA6C;EACvE,MAAM,MAAM,MAAM,KAAK,aAAa,IAAI;EACxC,MAAM,KAAK,wBAAwB,KAAK,IAAI;EAC5C,IAAI,SAAS,WAAW;GAItB,MAAM,SAAS,MAAM,KAAK,KACxB,WAAW,WAAW,GAAG,EAAE,WAAW,WAAW,GAAG,EAAE,eAAe,QAAQ,WAAW,aAAa,OAAO,QAAQ,QAAQ,EAAE,KAAK,GAAG,4HACxI;GACA,IAAI,OAAO,aAAa,GAAG,MAAM,IAAI,MAAM,wBAAwB,MAAM;GACzE,OAAO,KAAK,gBAAgB,OAAO,QAAQ,KAAK,OAAO;EACzD;EAIA,MAAM,SAAS,MAAM,KAAK,KACxB,MAAM,WAAW,GAAG,EAAE,oJACxB;EACA,IAAI,OAAO,aAAa,GAAG,MAAM,IAAI,MAAM,wBAAwB,MAAM;EACzE,OAAO,KAAK,gBAAgB,OAAO,QAAQ,OAAO;CACpD;CAEA,gBAAwB,QAAgB,SAAoC;EAC1E,MAAM,UAAuB,CAAC;EAC9B,KAAK,MAAM,QAAQ,OAAO,MAAM,IAAI,GAAG;GACrC,IAAI,CAAC,MAAM;GACX,MAAM,MAAM,KAAK,QAAQ,GAAI;GAC7B,IAAI,MAAM,GAAG;GACb,MAAM,OAAO,KAAK,MAAM,GAAG,GAAG,MAAM,MAAM,cAAc;GACxD,MAAM,OAAO,KAAK,MAAM,MAAM,CAAC;GAC/B,IAAI,CAAC,QAAQ,SAAS,OAAO,SAAS,MAAM;GAC5C,IAAI,SAAS,UAAU,CAAC,KAAK,iBAAiB,MAAM,SAAS,SAAS,GAAG;GACzE,QAAQ,KAAK;IAAE;IAAM;GAAK,CAAC;EAC7B;EACA,OAAO;CACT;CAEA,gBAAwB,QAAgB,MAAc,SAAoC;EACxF,MAAM,UAAuB,CAAC;EAC9B,KAAK,MAAM,QAAQ,OAAO,MAAM,IAAI,GAAG;GACrC,IAAI,CAAC,MAAM;GACX,MAAM,MAAM,KAAK,QAAQ,GAAI;GAC7B,IAAI,MAAM,GAAG;GACb,MAAM,OAAO,KAAK,MAAM,GAAG,GAAG,MAAM,MAAM,cAAc;GACxD,MAAM,WAAW,KAAK,MAAM,MAAM,CAAC;GACnC,MAAM,OAAOA,MAAU,SAAS,MAAM,QAAQ;GAC9C,IAAI,CAAC,MAAM;GACX,IAAI,SAAS,UAAU,CAAC,KAAK,iBAAiB,MAAM,SAAS,SAAS,GAAG;GACzE,QAAQ,KAAK;IAAE;IAAM;GAAK,CAAC;EAC7B;EACA,OAAO;CACT;CAEA,iBAAyB,MAAc,WAAwC;EAC7E,IAAI,CAAC,WAAW,OAAO;EAEvB,QADa,MAAM,QAAQ,SAAS,IAAI,YAAY,CAAC,SAAS,EAAA,CAClD,MAAK,QAAO,KAAK,SAAS,GAAG,CAAC;CAC5C;;;;;;;;CAWA,MAAM,KAAK,MAAc,SAA6C;EACpE,MAAM,MAAM,MAAM,KAAK,aAAa,IAAI;EACxC,MAAM,KAAK,wBAAwB,KAAK,IAAI;EAC5C,MAAM,WACJ,SAAS,aAAa,KAAA,KAAa,OAAO,SAAS,QAAQ,QAAQ,IAC/D,aAAa,KAAK,IAAI,GAAG,KAAK,MAAM,QAAQ,QAAQ,CAAC,EAAE,KACvD;EAGN,MAAM,cAAc,SAAS,gBAAgB,KAAK;EAGlD,MAAM,SACJ,QAAQ,WAAW,GAAG,EAAE,6CACoB,eAAe,2BACjC,mBAAmB,6BACjB,WAAW,YAAY;EAGrD,MAAM,SAAS,MAAM,KAAK,KAAK,MAAM;EACrC,IAAI,OAAO,aAAa,gBAAgB,MAAM,IAAI,uBAAuB,IAAI;EAC7E,IAAI,OAAO,aAAa,oBAAoB,MAAM,IAAI,kBAAkB,IAAI;EAC5E,IAAI,OAAO,aAAa,GACtB,MAAM,IAAI,MAAM,QAAQ,KAAK,gBAAgB,OAAO,SAAS,KAAK,OAAO,OAAO,KAAK,GAAG;EAE1F,MAAM,UAAuB,CAAC;EAC9B,KAAK,MAAM,QAAQ,OAAO,OAAO,MAAM,IAAI,GAAG;GAC5C,IAAI,CAAC,MAAM;GACX,MAAM,MAAM,KAAK,QAAQ,GAAI;GAC7B,IAAI,MAAM,GAAG;GACb,MAAM,OAAO,KAAK,MAAM,GAAG,GAAG;GAC9B,MAAM,YAAY,SAAS,OAAO,SAAS;GAC3C,IAAI,WAAW,KAAK,MAAM,MAAM,CAAC;GACjC,IAAI;GACJ,IAAI,WAAW;IACb,MAAM,OAAO,SAAS,YAAY,GAAI;IACtC,IAAI,QAAQ,GAAG;KACb,gBAAgB,SAAS,MAAM,OAAO,CAAC,KAAK,KAAA;KAC5C,WAAW,SAAS,MAAM,GAAG,IAAI;IACnC;GACF;GACA,MAAM,MAAMA,MAAU,SAAS,KAAK,QAAQ;GAC5C,IAAI,CAAC,OAAO,IAAI,WAAW,IAAI,GAAG;GAClC,QAAQ,KAAK;IACX,MAAMA,MAAU,SAAS,GAAG;IAC5B,MAAM,SAAS,OAAO,SAAS,MAAM,cAAc;IACnD,GAAI,YAAY;KAAE,WAAW;KAAM,GAAI,gBAAgB,EAAE,cAAc,IAAI,CAAC;IAAG,IAAI,CAAC;IACpF,MAAM;GACR,CAAC;EACH;EACA,OAAO;CACT;;;;;;;;;;;;CAaA,MAAM,KAAK,SAAiE;EAC1E,MAAM,MAAM,MAAM,KAAK,aAAa,QAAQ,IAAI;EAChD,MAAM,KAAK,wBAAwB,KAAK,QAAQ,IAAI;EACpD,IAAI,MAAM,KAAK,WAAW,GACxB,OAAO,KAAK,gBAAgB,KAAK,OAAO;EAE1C,OAAO,KAAK,kBAAkB,KAAK,OAAO;CAC5C;CAEA;CAEA,aAAuC;EACrC,KAAK,YAAY,KAAK,KAAK,+BAA+B,CAAC,CAAC,MAC1D,MAAK,EAAE,aAAa,SACd,KACR;EACA,OAAO,KAAK;CACd;CAEA,MAAc,gBAAgB,KAAa,SAAiE;EAC1G,MAAM,OAAO;GACX;GAGA,MAAM,WAAW,UAAU;GAC3B,QAAQ,gBAAgB,KAAK;GAC7B,QAAQ,oBAAoB,KAAA,IAAY,MAAM,KAAK,IAAI,GAAG,KAAK,MAAM,QAAQ,eAAe,CAAC,MAAM;GACnG,QAAQ,eAAe,MAAM,KAAK,IAAI,GAAG,KAAK,MAAM,QAAQ,YAAY,CAAC,MAAM;GAC/E,MAAM,WAAW,QAAQ,OAAO;GAChC,WAAW,GAAG;EAChB,CAAC,CACE,OAAO,OAAO,CAAC,CACf,KAAK,GAAG;EACX,MAAM,SAAS,MAAM,KAAK,KAAK,IAAI;EAMnC,IAAI,OAAO,aAAa,GAAG,OAAO,CAAC;EACnC,MAAM,UAAU,KAAK,iBAAiB,OAAO,QAAQ,KAAK,OAAO;EACjE,IAAI,OAAO,aAAa,KAAK,QAAQ,WAAW,GAC9C,MAAM,IAAI,4BAA4B,QAAQ,OAAO;EAEvD,OAAO;CACT;CAEA,iBAAyB,QAAgB,KAAa,SAAwD;EAK5G,MAAM,wBAAQ,IAAI,IAAuB;EACzC,KAAK,MAAM,QAAQ,OAAO,MAAM,IAAI,GAAG;GACrC,IAAI,CAAC,MAAM;GACX,IAAI;GACJ,IAAI;IACF,QAAQ,KAAK,MAAM,IAAI;GACzB,QAAQ;IACN;GACF;GACA,IAAI,MAAM,SAAS,WAAW,MAAM,SAAS,WAAW;GACxD,MAAM,WAA+B,MAAM,MAAM,MAAM;GACvD,MAAM,aAAiC,MAAM,MAAM;GACnD,IAAI,CAAC,YAAY,CAAC,YAAY;GAC9B,IAAI,QAAQ,MAAM,IAAI,QAAQ;GAC9B,IAAI,CAAC,OAAO;IACV,QAAQ;KAAE,SAAS,CAAC;KAAG,+BAAe,IAAI,IAAI;IAAE;IAChD,MAAM,IAAI,UAAU,KAAK;GAC3B;GACA,MAAM,QAAgB,MAAM,MAAM,OAAO,QAAQ,GAAA,CAAI,QAAQ,UAAU,EAAE;GACzE,MAAM,cAAc,IAAI,YAAY,IAAI;GACxC,IAAI,MAAM,SAAS,SAAS;IAG1B,MAAM,YAAoB,MAAM,MAAM,aAAa,EAAE,EAAE,SAAS;IAChE,MAAM,SAAS,OAAO,KAAK,MAAM,MAAM,CAAC,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC,SAAS,MAAM,CAAC,CAAC;IACjF,MAAM,QAAQ,KAAK;KAAE,MAAM;KAAY;KAAQ;KAAM;IAAW,CAAC;GACnE;EACF;EACA,MAAM,eAAe,QAAQ,gBAAgB;EAC7C,MAAM,UAAkC,CAAC;EACzC,KAAK,MAAM,CAAC,UAAU,UAAU,OAAO;GACrC,IAAI,MAAM,QAAQ,WAAW,GAAG;GAChC,MAAM,MAAMA,MAAU,SAAS,KAAK,QAAQ,KAAKA,MAAU,SAAS,QAAQ;GAC5E,MAAM,UAAiC,MAAM,QAAQ,KAAK,EAAE,YAAY,GAAG,YAAY;IACrF,IAAI,gBAAgB,GAAG,OAAO;IAC9B,MAAM,SAAmB,CAAC;IAC1B,KAAK,IAAI,IAAI,aAAa,GAAG,KAAK,KAAK,IAAI,GAAG,aAAa,YAAY,GAAG,KAAK;KAC7E,MAAM,IAAI,MAAM,cAAc,IAAI,CAAC;KACnC,IAAI,MAAM,KAAA,GAAW;KACrB,OAAO,QAAQ,CAAC;IAClB;IACA,MAAM,QAAkB,CAAC;IACzB,KAAK,IAAI,IAAI,aAAa,GAAG,KAAK,aAAa,cAAc,KAAK;KAChE,MAAM,IAAI,MAAM,cAAc,IAAI,CAAC;KACnC,IAAI,MAAM,KAAA,GAAW;KACrB,MAAM,KAAK,CAAC;IACd;IACA,OAAO;KAAE,GAAG;KAAO;KAAQ;IAAM;GACnC,CAAC;GACD,QAAQ,KAAK;IAAE,MAAM;IAAK;GAAQ,CAAC;EACrC;EACA,OAAO,KAAK,cAAc,SAAS,QAAQ,eAAe;CAC5D;;;;;;;CAQA,OAAwB,kBAAkB;CAE1C,MAAc,kBAAkB,KAAa,SAAiE;EAC5G,IAAI,kBAAkB,gBAAgB,KAAK,QAAQ,OAAO,GACxD,MAAM,IAAI,4BAA4B,QAAQ,OAAO;EAEvD,IAAI;EACJ,IAAI;GACF,UAAU,IAAI,OAAO,QAAQ,SAAS,QAAQ,gBAAgB,KAAK,GAAG;EACxE,QAAQ;GACN,MAAM,IAAI,4BAA4B,QAAQ,OAAO;EACvD;EAGA,IAAI,QAAQ,cACV,MAAM,IAAI,4BAA4B,QAAQ,OAAO;EAEvD,MAAM,OAAO;GACX;GACA,QAAQ,gBAAgB,KAAK;GAC7B,QAAQ,oBAAoB,KAAA,IAAY,MAAM,KAAK,IAAI,GAAG,KAAK,MAAM,QAAQ,eAAe,CAAC,MAAM;GACnG;GACA,WAAW,QAAQ,OAAO;GAC1B,WAAW,GAAG;EAChB,CAAC,CACE,OAAO,OAAO,CAAC,CACf,KAAK,GAAG;EACX,MAAM,SAAS,MAAM,KAAK,KAAK,IAAI;EACnC,IAAI,OAAO,aAAa,GAAG,OAAO,CAAC;EACnC,IAAI,OAAO,aAAa,GACtB,MAAM,IAAI,4BAA4B,QAAQ,OAAO;EAIvD,MAAM,yBAAS,IAAI,IAAmC;EACtD,KAAK,MAAM,QAAQ,OAAO,OAAO,MAAM,IAAI,GAAG;GAC5C,IAAI,CAAC,MAAM;GACX,MAAM,SAAS,qBAAqB,KAAK,IAAI;GAC7C,IAAI,CAAC,QAAQ;GACb,MAAM,MAAMA,MAAU,SAAS,KAAK,OAAO,EAAG,KAAKA,MAAU,SAAS,OAAO,EAAG;GAChF,MAAM,OAAO,OAAO;GACpB,MAAM,SAAS,QAAQ,KAAK,IAAI,CAAC,EAAE;GAGnC,IAAI,WAAW,KAAA,GAAW,MAAM,IAAI,4BAA4B,QAAQ,OAAO;GAC/E,IAAI,UAAU,OAAO,IAAI,GAAG;GAC5B,IAAI,CAAC,SAAS;IACZ,UAAU,CAAC;IACX,OAAO,IAAI,KAAK,OAAO;GACzB;GACA,QAAQ,KAAK;IAAE,MAAM,OAAO,OAAO,EAAE;IAAG;IAAQ;GAAK,CAAC;EACxD;EACA,MAAM,UAAU,CAAC,GAAG,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,cAAc;GAAE;GAAM;EAAQ,EAAE;EAClF,OAAO,KAAK,cAAc,SAAS,QAAQ,eAAe;CAC5D;CAEA,cAAsB,SAAiC,UAA2C;EAChG,IAAI,aAAa,KAAA,GAAW,OAAO;EACnC,MAAM,SAAiC,CAAC;EACxC,IAAI,QAAQ;EACZ,KAAK,MAAM,QAAQ,SAAS;GAC1B,IAAI,SAAS,UAAU;GACvB,MAAM,YAAY,WAAW;GAC7B,MAAM,UAAU,KAAK,QAAQ,MAAM,GAAG,SAAS;GAC/C,SAAS,QAAQ;GACjB,OAAO,KAAK;IAAE,MAAM,KAAK;IAAM;GAAQ,CAAC;EAC1C;EACA,OAAO;CACT;CAIA,MAAM,OAAO,MAAgC;EAC3C,MAAM,MAAM,MAAM,KAAK,aAAa,IAAI;EAExC,QAAO,MADc,KAAK,KAAK,WAAW,WAAW,GAAG,GAAG,EAAA,CAC7C,aAAa;CAC7B;CAEA,MAAM,KAAK,MAAiC;EAC1C,MAAM,MAAM,MAAM,KAAK,aAAa,IAAI;EACxC,MAAM,KAAK,wBAAwB,KAAK,IAAI;EAM5C,MAAM,SAAS,MAAM,KAAK,KACxB,yBAAyB,WAAW,GAAG,EAAE,yCAAyC,WAAW,GAAG,GAClG;EACA,IAAI,OAAO,aAAa,GACtB,MAAM,IAAI,kBAAkB,IAAI;EAElC,MAAM,CAAC,MAAM,SAAS,UAAU,YAAY,OAAO,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG;EAC1E,MAAM,OAAO,QAAQ,KAAK,YAAY,CAAC,CAAC,SAAS,WAAW,IAAI,cAAc;EAC9E,MAAM,OAAO,OAAO,OAAO,KAAK;EAChC,MAAM,QAAQ,OAAO,QAAQ,KAAK;EAClC,MAAM,QAAQ,OAAO,QAAQ;EAC7B,OAAO;GACL,MAAMA,MAAU,SAAS,GAAG;GAC5B,MAAM,IAAIA,MAAU,SAAS,KAAK,UAAU,GAAG;GAC/C;GACA,MAAM,SAAS,cAAc,IAAI;GACjC,4BAAY,IAAI,KAAK,QAAQ,GAAI;GACjC,2BAAW,IAAI,MAAM,QAAQ,IAAI,QAAQ,SAAS,GAAI;EACxD;CACF;CAIA,MAAM,OAAsB;EAC1B,MAAM,KAAK,OAAO,YAAY,WAAW,MAAM,KAAK,KAAK,CAAC,KAAK,cAAc;CAC/E;CAEA,MAAM,UAAyB,CAE/B;CAEA,MAAM,UAA4B;EAEhC,QAAO,MADc,KAAK,KAAK,WAAW,WAAW,MAAM,KAAK,KAAK,CAAC,GAAG,EAAA,CAC3D,aAAa;CAC7B;CAEA,UAA0B;EACxB,OAAO;GACL,IAAI,KAAK;GACT,MAAM,KAAK;GACX,UAAU,KAAK;GACf,QAAQ,KAAK;GACb,UAAU;IAAE,UAAU,KAAK;IAAU,WAAW,KAAK,QAAQ;GAAG;EAClE;CACF;CAEA,kBAA0B;EACxB,OAAO,2CAA2C,KAAK,SAAS;CAClE;AACF"}

package/dist/index.d.ts

@@ -10,6 +10,7 @@ import { MastraCompositeStore } from '@mastra/core/storage';
 import type { MastraVector } from '@mastra/core/vector';
 import { GithubSignals } from '@mastra/github-signals';
 import { Observability } from '@mastra/observability';
+import type { AgentConnectionsSignalProviderOptions } from './agent-connections/signal-provider.js';
 import { resolveModel } from './agents/model.js';
 import type { PostToolObserver, ToolLike } from './agents/tools.js';
 import { AuthStorage } from './auth/storage.js';
@@ -111,6 +112,16 @@ export interface MastraCodeConfig {
     unixSocketPubSub?: boolean;
     /** Marks the configured PubSub as cross-process-safe, allowing Mastra Code to skip file thread locks. */
     crossProcessPubSub?: boolean;
+    /** Agent connection state and discovery options. */
+    agentConnections?: AgentConnectionsSignalProviderOptions;
+    /**
+     * Enable experimental cross-agent communication: thread ownership
+     * advertisement, peer discovery, and the agent connection tools. Defaults to
+     * the `signals.experimentalCrossAgentSignals` global setting (off). This does
+     * not gate the PubSub transport itself — cross-agent communication simply
+     * uses the configured PubSub when enabled.
+     */
+    crossAgentSignals?: boolean;
 }
 export declare function createAuthStorage(): AuthStorage;
 export declare function createMastraCodeAgentController(config?: MastraCodeConfig): Promise<{

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,KAAK,EACV,eAAe,EACf,qBAAqB,EAErB,mBAAmB,EACnB,uBAAuB,EAEvB,OAAO,EACR,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAGlD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAS7C,OAAO,KAAK,EAAE,cAAc,EAAa,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAE9D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,EAAmB,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE7E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGxD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,OAAO,EACL,aAAa,EAId,MAAM,uBAAuB,CAAC;AAM/B,OAAO,EAA+D,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAc9G,OAAO,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAIpE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAG/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAatD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAYrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAUnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAKxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AA2HzE,MAAM,WAAW,gBAAgB;IAC/B,sEAAsE;IACtE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,wEAAwE;IACxE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sFAAsF;IACtF,KAAK,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAC9B,sGAAsG;IACtG,SAAS,CAAC,EAAE,uBAAuB,EAAE,CAAC;IACtC,uIAAuI;IACvI,UAAU,CAAC,EACP,MAAM,CAAC,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAC,GACpC,CAAC,CAAC,GAAG,EAAE;QACL,cAAc,EAAE,cAAc,CAAC;KAChC,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IAChG,oGAAoG;IACpG,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC;;;OAGG;IACH,eAAe,CAAC,EAAE,cAAc,EAAE,CAAC;IACnC,2EAA2E;IAC3E,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB;;;;OAIG;IACH,OAAO,CAAC,EAAE,aAAa,GAAG,oBAAoB,CAAC;IAC/C,mGAAmG;IACnG,cAAc,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC;IACjC,kGAAkG;IAClG,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,uGAAuG;IACvG,OAAO,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAC;IAChC,oEAAoE;IACpE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,0DAA0D;IAC1D,YAAY,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IACxC,wEAAwE;IACxE,gBAAgB,CAAC,EACb,MAAM,GACN,CAAC,CAAC,GAAG,EAAE;QAAE,cAAc,EAAE,cAAc,CAAA;KAAE,KAAK,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IACpG,gHAAgH;IAChH,QAAQ,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C,6FAA6F;IAC7F,WAAW,CAAC,EAAE,qBAAqB,CAAC,eAAe,CAAC,CAAC,aAAa,CAAC,CAAC;IACpE,wDAAwD;IACxD,gBAAgB,CAAC,EAAE,eAAe,EAAE,CAAC;IACrC,kGAAkG;IAClG,SAAS,CAAC,EAAE,qBAAqB,CAAC,eAAe,CAAC,CAAC,WAAW,CAAC,CAAC;IAChE,oMAAoM;IACpM,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+FAA+F;IAC/F,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC7C,mDAAmD;IACnD,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,oCAAoC;IACpC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,uDAAuD;IACvD,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,4GAA4G;IAC5G,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;;;;OAMG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,4EAA4E;IAC5E,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,qBAAqB,CAAC,eAAe,CAAC,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC;IAClE,wGAAwG;IACxG,OAAO,CAAC,EAAE,qBAAqB,CAAC,eAAe,CAAC,CAAC,SAAS,CAAC,CAAC;IAC5D,6FAA6F;IAC7F,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4FAA4F;IAC5F,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,yGAAyG;IACzG,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,wBAAgB,iBAAiB,gBAQhC;AAsED,wBAAsB,+BAA+B,CAAC,MAAM,CAAC,EAAE,gBAAgB;;;;wCAizBvC,OAAO,CAAC,eAAe,CAAC;;;;;;;;;;;;;;;;;;;;;;;gCAiChC,OAAO,CAAC,eAAe,CAAC;IAGpD;;;;;;OAMG;;IAMH;;;;;;;OAOG;;IAMH;;;;;;;;;;;;;;;OAeG;;GAUN;AAED;;;;GAIG;AACH,MAAM,MAAM,yBAAyB,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,+BAA+B,CAAC,CAAC,CAAC;AAEpG;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,IAAI,CAAC,yBAAyB,EAAE,aAAa,GAAG,eAAe,GAAG,kBAAkB,CAAC,EAC3F,OAAO,EAAE,OAAO,CAAC,eAAe,CAAC,GAChC,OAAO,CAAC,IAAI,CAAC,CAgDf;AAED;;;;GAIG;AACH,wBAAsB,wBAAwB,CAAC,MAAM,CAAC,EAAE,gBAAgB;;;;;;;wCAjKhC,OAAO,CAAC,eAAe,CAAC;;;;;;;;;;;;;;;;;;;;;;;gCAiChC,OAAO,CAAC,eAAe,CAAC;IAGpD;;;;;;OAMG;;IAMH;;;;;;;OAOG;;IAMH;;;;;;;;;;;;;;;OAeG;;GA+GN;AAED,6FAA6F;AAC7F,MAAM,MAAM,iBAAiB,GAAG,yBAAyB,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/E;;;;;;;;;;;;;GAaG;AACH,wBAAsB,4BAA4B,CAChD,MAAM,CAAC,EAAE,gBAAgB,GAAG;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,UAAU,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAC;QAAC,WAAW,EAAE,WAAW,CAAA;KAAE,KAAK,QAAQ,EAAE,CAAC;IACjH;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE;QACzB,UAAU,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAC;QAC5C,WAAW,EAAE,WAAW,CAAC;KAC1B,KAAK,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,CAAC;CACzF,GACA,OAAO,CAAC,iBAAiB,CAAC,CAY5B;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,2BAA2B,CAC/C,MAAM,CAAC,EAAE,gBAAgB,GAAG;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,UAAU,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAC;QAAC,WAAW,EAAE,WAAW,CAAA;KAAE,KAAK,QAAQ,EAAE,CAAC;IACjH,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE;QACzB,UAAU,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAC;QAC5C,WAAW,EAAE,WAAW,CAAC;KAC1B,KAAK,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,CAAC;CACzF,GACA,OAAO,CAAC;IACT,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,+BAA+B,CAAC,CAAC,CAAC;IAClE,UAAU,EAAE,WAAW,CAAC,qBAAqB,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/B,CAAC,CA0CD;AAED;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,iCAA2B,CAAC;AACzD,cAAc,0BAA0B,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAE9D;;;;GAIG;AACH,OAAO,EACL,KAAK,EACL,QAAQ,EACR,eAAe,EACf,iBAAiB,EACjB,UAAU,EACV,sBAAsB,EACtB,WAAW,EACX,WAAW,EACX,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,YAAY,EACZ,WAAW,EACX,WAAW,EACX,UAAU,EACV,aAAa,EACb,eAAe,EACf,UAAU,EACV,kBAAkB,EAClB,KAAK,EACL,gBAAgB,EAChB,cAAc,GACf,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,KAAK,EACV,eAAe,EACf,qBAAqB,EAErB,mBAAmB,EACnB,uBAAuB,EAEvB,OAAO,EACR,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAGlD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAS7C,OAAO,KAAK,EAAE,cAAc,EAAa,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAE9D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,EAAmB,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE7E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGxD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,OAAO,EACL,aAAa,EAId,MAAM,uBAAuB,CAAC;AAK/B,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,wCAAwC,CAAC;AAIpG,OAAO,EAA+D,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAc9G,OAAO,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAIpE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAG/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAatD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAYrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAUnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAKxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AA2HzE,MAAM,WAAW,gBAAgB;IAC/B,sEAAsE;IACtE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,wEAAwE;IACxE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sFAAsF;IACtF,KAAK,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAC9B,sGAAsG;IACtG,SAAS,CAAC,EAAE,uBAAuB,EAAE,CAAC;IACtC,uIAAuI;IACvI,UAAU,CAAC,EACP,MAAM,CAAC,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAC,GACpC,CAAC,CAAC,GAAG,EAAE;QACL,cAAc,EAAE,cAAc,CAAC;KAChC,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IAChG,oGAAoG;IACpG,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC;;;OAGG;IACH,eAAe,CAAC,EAAE,cAAc,EAAE,CAAC;IACnC,2EAA2E;IAC3E,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB;;;;OAIG;IACH,OAAO,CAAC,EAAE,aAAa,GAAG,oBAAoB,CAAC;IAC/C,mGAAmG;IACnG,cAAc,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC;IACjC,kGAAkG;IAClG,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,uGAAuG;IACvG,OAAO,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAC;IAChC,oEAAoE;IACpE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,0DAA0D;IAC1D,YAAY,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IACxC,wEAAwE;IACxE,gBAAgB,CAAC,EACb,MAAM,GACN,CAAC,CAAC,GAAG,EAAE;QAAE,cAAc,EAAE,cAAc,CAAA;KAAE,KAAK,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IACpG,gHAAgH;IAChH,QAAQ,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C,6FAA6F;IAC7F,WAAW,CAAC,EAAE,qBAAqB,CAAC,eAAe,CAAC,CAAC,aAAa,CAAC,CAAC;IACpE,wDAAwD;IACxD,gBAAgB,CAAC,EAAE,eAAe,EAAE,CAAC;IACrC,kGAAkG;IAClG,SAAS,CAAC,EAAE,qBAAqB,CAAC,eAAe,CAAC,CAAC,WAAW,CAAC,CAAC;IAChE,oMAAoM;IACpM,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+FAA+F;IAC/F,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC7C,mDAAmD;IACnD,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,oCAAoC;IACpC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,uDAAuD;IACvD,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,4GAA4G;IAC5G,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;;;;OAMG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,4EAA4E;IAC5E,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,qBAAqB,CAAC,eAAe,CAAC,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC;IAClE,wGAAwG;IACxG,OAAO,CAAC,EAAE,qBAAqB,CAAC,eAAe,CAAC,CAAC,SAAS,CAAC,CAAC;IAC5D,6FAA6F;IAC7F,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4FAA4F;IAC5F,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,yGAAyG;IACzG,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,oDAAoD;IACpD,gBAAgB,CAAC,EAAE,qCAAqC,CAAC;IACzD;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,wBAAgB,iBAAiB,gBAQhC;AAsED,wBAAsB,+BAA+B,CAAC,MAAM,CAAC,EAAE,gBAAgB;;;;wCAy3BvC,OAAO,CAAC,eAAe,CAAC;;;;;;;;;;;;;;;;;;;;;;;gCAiChC,OAAO,CAAC,eAAe,CAAC;IAGpD;;;;;;OAMG;;IAMH;;;;;;;OAOG;;IAMH;;;;;;;;;;;;;;;OAeG;;GAUN;AAED;;;;GAIG;AACH,MAAM,MAAM,yBAAyB,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,+BAA+B,CAAC,CAAC,CAAC;AAEpG;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,IAAI,CAAC,yBAAyB,EAAE,aAAa,GAAG,eAAe,GAAG,kBAAkB,CAAC,EAC3F,OAAO,EAAE,OAAO,CAAC,eAAe,CAAC,GAChC,OAAO,CAAC,IAAI,CAAC,CAgDf;AAED;;;;GAIG;AACH,wBAAsB,wBAAwB,CAAC,MAAM,CAAC,EAAE,gBAAgB;;;;;;;wCAjKhC,OAAO,CAAC,eAAe,CAAC;;;;;;;;;;;;;;;;;;;;;;;gCAiChC,OAAO,CAAC,eAAe,CAAC;IAGpD;;;;;;OAMG;;IAMH;;;;;;;OAOG;;IAMH;;;;;;;;;;;;;;;OAeG;;GA+GN;AAED,6FAA6F;AAC7F,MAAM,MAAM,iBAAiB,GAAG,yBAAyB,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/E;;;;;;;;;;;;;GAaG;AACH,wBAAsB,4BAA4B,CAChD,MAAM,CAAC,EAAE,gBAAgB,GAAG;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,UAAU,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAC;QAAC,WAAW,EAAE,WAAW,CAAA;KAAE,KAAK,QAAQ,EAAE,CAAC;IACjH;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE;QACzB,UAAU,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAC;QAC5C,WAAW,EAAE,WAAW,CAAC;KAC1B,KAAK,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,CAAC;CACzF,GACA,OAAO,CAAC,iBAAiB,CAAC,CAY5B;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,2BAA2B,CAC/C,MAAM,CAAC,EAAE,gBAAgB,GAAG;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,UAAU,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAC;QAAC,WAAW,EAAE,WAAW,CAAA;KAAE,KAAK,QAAQ,EAAE,CAAC;IACjH,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE;QACzB,UAAU,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAC;QAC5C,WAAW,EAAE,WAAW,CAAC;KAC1B,KAAK,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,CAAC;CACzF,GACA,OAAO,CAAC;IACT,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,+BAA+B,CAAC,CAAC,CAAC;IAClE,UAAU,EAAE,WAAW,CAAC,qBAAqB,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/B,CAAC,CA0CD;AAED;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,iCAA2B,CAAC;AACzD,cAAc,0BAA0B,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAE9D;;;;GAIG;AACH,OAAO,EACL,KAAK,EACL,QAAQ,EACR,eAAe,EACf,iBAAiB,EACjB,UAAU,EACV,sBAAsB,EACtB,WAAW,EACX,WAAW,EACX,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,YAAY,EACZ,WAAW,EACX,WAAW,EACX,UAAU,EACV,aAAa,EACb,eAAe,EACf,UAAU,EACV,kBAAkB,EAClB,KAAK,EACL,gBAAgB,EAChB,cAAc,GACf,MAAM,qBAAqB,CAAC"}

package/dist/index.js

@@ -4,6 +4,8 @@ import { isKimiCodingDeviceId } from "./auth/providers/kimi-coding.js";
 import { AuthStorage } from "./auth/storage.js";
 import { setAuthStorage } from "./providers/openai-codex.js";
 import { MASTRA_GATEWAY_PROVIDER, OBSERVABILITY_AUTH_PREFIX, loadSettings, resolveModelDefaults, resolveOmRoleModel, saveSettings } from "./onboarding/settings.js";
+import { createThreadOwnershipManager } from "./agent-connections/ownership.js";
+import { AgentConnectionsSignalProvider } from "./agent-connections/signal-provider.js";
 import { hasCredentialStoreProvider } from "./agents/credential-resolver.js";
 import { getDynamicWorkspace, getGoalJudgeTools } from "./agents/workspace.js";
 import { createGitRefInstructionReader, createGitRefReminderReader, getStaticallyLoadedInstructionPaths } from "./agents/prompts/agent-instructions.js";
@@ -263,6 +265,7 @@ async function createMastraCodeAgentController(config) {
 	const signalsPubSub = configuredPubSub ?? (useUnixSocketPubSub ? createSignalsPubSub(project.resourceId) : void 0);
 	const crossProcessPubSub = config?.crossProcessPubSub ?? (!configuredPubSub && useUnixSocketPubSub);
 	if (crossProcessPubSub && !signalsPubSub) throw new Error("crossProcessPubSub requires a pubsub instance");
+	const useCrossAgentSignals = config?.crossAgentSignals ?? globalSettings.signals?.experimentalCrossAgentSignals ?? false;
 	const injectedStorage = isInjectedStorageInstance(config?.storage) ? config.storage : void 0;
 	const storageConfig = injectedStorage ? void 0 : config?.storage ?? getStorageConfig(project.rootPath, globalSettings.storage, configDir);
 	const storageResult = injectedStorage ? {
@@ -414,12 +417,17 @@ async function createMastraCodeAgentController(config) {
 		new ProviderHistoryCompat()
 	];
 	const taskSignalProvider = new TaskSignalProvider();
+	const agentConnectionsSignalProvider = useCrossAgentSignals ? new AgentConnectionsSignalProvider(config?.agentConnections) : void 0;
 	const NO_PLUGIN_PROCESSORS = {
 		input: [],
 		output: []
 	};
 	let pluginProcessorReadWarned = false;
-	const pluginSignalLane = pluginManager ? new PluginSignalLane({ reservedProviderIds: [taskSignalProvider.id, ...githubSignals ? [githubSignals.id] : []] }) : void 0;
+	const pluginSignalLane = pluginManager ? new PluginSignalLane({ reservedProviderIds: [
+		taskSignalProvider.id,
+		...agentConnectionsSignalProvider ? [agentConnectionsSignalProvider.id] : [],
+		...githubSignals ? [githubSignals.id] : []
+	] }) : void 0;
 	let unsubscribePluginReload;
 	/**
 	* Plugin processors are read through a function so that enabling, disabling or
@@ -454,6 +462,7 @@ async function createMastraCodeAgentController(config) {
 				hasSubagents: subagents.length > 0
 			});
 		},
+		maxProcessorRetries: MASTRACODE_TRANSIENT_CONNECTION_MAX_RETRIES,
 		model: (ctx) => getDynamicModel(ctx, config?.settingsPath),
 		notifications: { deliveryPolicy: { decide: async (input) => {
 			const decision = defaultNotificationDeliveryDecision(input);
@@ -482,7 +491,11 @@ async function createMastraCodeAgentController(config) {
 				}
 			}
 		},
-		signals: [taskSignalProvider, ...githubSignals ? [githubSignals] : []],
+		signals: [
+			taskSignalProvider,
+			...agentConnectionsSignalProvider ? [agentConnectionsSignalProvider] : [],
+			...githubSignals ? [githubSignals] : []
+		],
 		goal: {
 			judge: (ctx) => getGoalJudgeModel(ctx, config?.settingsPath),
 			maxRuns: globalSettings.models.goalMaxTurns ?? 50,
@@ -664,6 +677,43 @@ async function createMastraCodeAgentController(config) {
 			release: releaseThreadLock
 		}
 	});
+	const sessionPeerCleanup = /* @__PURE__ */ new WeakMap();
+	if (useCrossAgentSignals) {
+		controller.onSessionCreated(async (session) => {
+			const threadOwnership = createThreadOwnershipManager((threadId) => controller.getCurrentAgent(session).claimThreadOwnership({
+				threadId,
+				resourceId: session.identity.getResourceId(),
+				streamOptions: () => session.machinery.buildStreamOptions({}),
+				peer: {
+					label: `${project.name} (${threadId})`,
+					title: project.name
+				}
+			}));
+			const claimThreadOwnership = async (threadId) => {
+				try {
+					await threadOwnership.claim(threadId);
+				} catch (error) {
+					console.error(`Failed to claim cross-agent thread ownership for ${threadId}`, error);
+				}
+			};
+			const unsubscribeSession = session.subscribe((event) => {
+				if (event.type === "thread_changed") claimThreadOwnership(event.threadId);
+				else if (event.type === "thread_created") claimThreadOwnership(event.thread.id);
+			});
+			sessionPeerCleanup.set(session, () => {
+				unsubscribeSession();
+				threadOwnership.close();
+			});
+			const initialThreadId = session.thread.getId();
+			if (initialThreadId) await Promise.race([claimThreadOwnership(initialThreadId), new Promise((resolve) => {
+				setTimeout(resolve, 5e3).unref?.();
+			})]);
+		}, { blocking: true });
+		controller.onSessionDeleted((session) => {
+			sessionPeerCleanup.get(session)?.();
+			sessionPeerCleanup.delete(session);
+		});
+	}
 	pluginRuntimeController = controller;
 	if (pluginSignalLane && pluginManager) {
 		pluginSignalLane.sync(pluginManager.getPluginSignalProviders());