@mastra/factory 0.2.2-alpha.0 → 0.2.2-alpha.1

package/dist/integrations/github/sandbox.d.ts

@@ -58,6 +58,8 @@ export declare function teardownProjectSandbox(options: {
  * terminated early.
  */
 export declare function shellQuote(value: string): string;
+/** Branch checkout only fetches one ref — a much tighter budget applies. */
+export declare const CHECKOUT_COMMAND_TIMEOUT_MS: number;
 /** Error raised when the sandbox cannot materialize the repo (actionable). */
 export declare class MaterializeError extends Error {
     readonly code: 'git-missing' | 'egress-blocked' | 'clone-failed' | 'pull-failed' | 'push-failed' | 'commit-failed' | 'gh-missing' | 'pr-failed';

package/dist/integrations/github/sandbox.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../../src/integrations/github/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,KAAK,EACV,sBAAsB,EACtB,UAAU,EAGV,YAAY,EACb,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EACV,wBAAwB,EACxB,0BAA0B,EAC3B,MAAM,8CAA8C,CAAC;AAEtD,KAAK,2BAA2B,GAAG,0BAA0B,CAAC,WAAW,CAAC,CAAC;AAC3E,KAAK,oBAAoB,GAAG,IAAI,CAAC,2BAA2B,EAAE,kBAAkB,CAAC,CAAC;AAElF,UAAU,0BAA0B;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,IAAI,GAAG,IAAI,CAAC;CAC7B;AAYD;;;GAGG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,EAAE;IAClD,KAAK,EAAE,YAAY,CAAC;IACpB,GAAG,EAAE,wBAAwB,CAAC;IAC9B,OAAO,EAAE,2BAA2B,CAAC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAGlC;AAED;;;;;;;GAOG;AACH,wBAAsB,sBAAsB,CAAC,OAAO,EAAE;IACpD,KAAK,EAAE,YAAY,CAAC;IACpB,GAAG,EAAE,wBAAwB,CAAC;IAC9B,OAAO,EAAE,2BAA2B,CAAC;IACrC,OAAO,CAAC,EAAE,sBAAsB,CAAC;CAClC,GAAG,OAAO,CAAC,IAAI,CAAC,CAGhB;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGhD;AAOD,8EAA8E;AAC9E,qBAAa,gBAAiB,SAAQ,KAAK;IAGvC,QAAQ,CAAC,IAAI,EACT,aAAa,GACb,gBAAgB,GAChB,cAAc,GACd,aAAa,GACb,aAAa,GACb,eAAe,GACf,YAAY,GACZ,WAAW;gBATf,OAAO,EAAE,MAAM,EACN,IAAI,EACT,aAAa,GACb,gBAAgB,GAChB,cAAc,GACd,aAAa,GACb,aAAa,GACb,eAAe,GACf,YAAY,GACZ,WAAW;CAKlB;AAcD,gFAAgF;AAChF,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE;IAC7C,uFAAuF;IACvF,GAAG,EAAE,0BAA0B,CAAC;IAChC,oDAAoD;IACpD,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,0CAA0C;IAC1C,OAAO,EAAE,sBAAsB,CAAC;IAChC,+DAA+D;IAC/D,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,oBAAoB,CAAC;IAC9B,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB,GAAG,OAAO,CAAC,IAAI,CAAC,CA0EhB;AAED,yEAAyE;AACzE,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,sBAAsB,EAC/B,OAAO,EAAE,MAAM,EACf,EACE,MAAM,EACN,UAAU,EACV,KAAK,EACL,YAAY,GACb,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAC7E,OAAO,CAAC,IAAI,CAAC,CA8Bf;AAuED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAU7D;AAED,0DAA0D;AAC1D,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,yFAAyF;IACzF,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,WAAW,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAOzF;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,sBAAsB,EAC/B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,WAAW,GACpB,OAAO,CAAC,IAAI,CAAC,CAUf;AAED;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CAAC,CAAC,EACtC,OAAO,EAAE,sBAAsB,EAC/B,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,CAAC,CAAC,CAuBZ;AAED;;;;;GAKG;AACH,wBAAsB,UAAU,CAC9B,OAAO,EAAE,sBAAsB,EAC/B,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAWf;AAED,MAAM,WAAW,YAAY;IAC3B,8EAA8E;IAC9E,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,SAAS,CAC7B,OAAO,EAAE,sBAAsB,EAC/B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,WAAW,GACpB,OAAO,CAAC,YAAY,CAAC,CAqBvB;AAUD,gFAAgF;AAChF,qBAAa,aAAc,SAAQ,KAAK;IAGpC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,GAAG,iBAAiB,GAAG,cAAc;gBADpE,OAAO,EAAE,MAAM,EACN,IAAI,EAAE,gBAAgB,GAAG,iBAAiB,GAAG,cAAc;CAKvE;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAUpD;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAG/E;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,6EAA6E;IAC7E,MAAM,EAAE,OAAO,CAAC;CACjB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,sBAAsB,EAC/B,WAAW,EAAE,MAAM,EACnB,EACE,MAAM,EACN,UAAU,EACV,KAAK,EACL,YAAY,GACb,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAC7E,OAAO,CAAC,oBAAoB,CAAC,CAgD/B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,sBAAsB,EAC/B,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CAMf;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,sBAAsB,EAC/B,WAAW,EAAE,MAAM,EACnB,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACjE,OAAO,CAAC,IAAI,CAAC,CA0Bf;AAYD,MAAM,WAAW,qBAAqB;IACpC,+EAA+E;IAC/E,KAAK,EAAE,MAAM,CAAC;IACd,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,0BAA0B;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,uBAAuB;IACtC,oDAAoD;IACpD,GAAG,EAAE,MAAM,CAAC;CACb;AAuBD;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,sBAAsB,EAC/B,OAAO,EAAE,MAAM,EACf,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,qBAAqB,GACxD,OAAO,CAAC,uBAAuB,CAAC,CAwClC"}
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../../src/integrations/github/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,KAAK,EACV,sBAAsB,EACtB,UAAU,EAGV,YAAY,EACb,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EACV,wBAAwB,EACxB,0BAA0B,EAC3B,MAAM,8CAA8C,CAAC;AAEtD,KAAK,2BAA2B,GAAG,0BAA0B,CAAC,WAAW,CAAC,CAAC;AAC3E,KAAK,oBAAoB,GAAG,IAAI,CAAC,2BAA2B,EAAE,kBAAkB,CAAC,CAAC;AAElF,UAAU,0BAA0B;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,IAAI,GAAG,IAAI,CAAC;CAC7B;AAYD;;;GAGG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,EAAE;IAClD,KAAK,EAAE,YAAY,CAAC;IACpB,GAAG,EAAE,wBAAwB,CAAC;IAC9B,OAAO,EAAE,2BAA2B,CAAC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAGlC;AAED;;;;;;;GAOG;AACH,wBAAsB,sBAAsB,CAAC,OAAO,EAAE;IACpD,KAAK,EAAE,YAAY,CAAC;IACpB,GAAG,EAAE,wBAAwB,CAAC;IAC9B,OAAO,EAAE,2BAA2B,CAAC;IACrC,OAAO,CAAC,EAAE,sBAAsB,CAAC;CAClC,GAAG,OAAO,CAAC,IAAI,CAAC,CAGhB;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGhD;AASD,4EAA4E;AAC5E,eAAO,MAAM,2BAA2B,QAAa,CAAC;AAiCtD,8EAA8E;AAC9E,qBAAa,gBAAiB,SAAQ,KAAK;IAGvC,QAAQ,CAAC,IAAI,EACT,aAAa,GACb,gBAAgB,GAChB,cAAc,GACd,aAAa,GACb,aAAa,GACb,eAAe,GACf,YAAY,GACZ,WAAW;gBATf,OAAO,EAAE,MAAM,EACN,IAAI,EACT,aAAa,GACb,gBAAgB,GAChB,cAAc,GACd,aAAa,GACb,aAAa,GACb,eAAe,GACf,YAAY,GACZ,WAAW;CAKlB;AAcD,gFAAgF;AAChF,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE;IAC7C,uFAAuF;IACvF,GAAG,EAAE,0BAA0B,CAAC;IAChC,oDAAoD;IACpD,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,0CAA0C;IAC1C,OAAO,EAAE,sBAAsB,CAAC;IAChC,+DAA+D;IAC/D,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,oBAAoB,CAAC;IAC9B,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkFhB;AAED,yEAAyE;AACzE,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,sBAAsB,EAC/B,OAAO,EAAE,MAAM,EACf,EACE,MAAM,EACN,UAAU,EACV,KAAK,EACL,YAAY,GACb,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAC7E,OAAO,CAAC,IAAI,CAAC,CA+Bf;AAwED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAU7D;AAED,0DAA0D;AAC1D,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,yFAAyF;IACzF,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,WAAW,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAOzF;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,sBAAsB,EAC/B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,WAAW,GACpB,OAAO,CAAC,IAAI,CAAC,CAUf;AAED;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CAAC,CAAC,EACtC,OAAO,EAAE,sBAAsB,EAC/B,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,CAAC,CAAC,CAuBZ;AAED;;;;;GAKG;AACH,wBAAsB,UAAU,CAC9B,OAAO,EAAE,sBAAsB,EAC/B,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAWf;AAED,MAAM,WAAW,YAAY;IAC3B,8EAA8E;IAC9E,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,SAAS,CAC7B,OAAO,EAAE,sBAAsB,EAC/B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,WAAW,GACpB,OAAO,CAAC,YAAY,CAAC,CAqBvB;AAUD,gFAAgF;AAChF,qBAAa,aAAc,SAAQ,KAAK;IAGpC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,GAAG,iBAAiB,GAAG,cAAc;gBADpE,OAAO,EAAE,MAAM,EACN,IAAI,EAAE,gBAAgB,GAAG,iBAAiB,GAAG,cAAc;CAKvE;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAUpD;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAG/E;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,6EAA6E;IAC7E,MAAM,EAAE,OAAO,CAAC;CACjB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,sBAAsB,EAC/B,WAAW,EAAE,MAAM,EACnB,EACE,MAAM,EACN,UAAU,EACV,KAAK,EACL,YAAY,GACb,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAC7E,OAAO,CAAC,oBAAoB,CAAC,CAgD/B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,sBAAsB,EAC/B,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CAMf;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,sBAAsB,EAC/B,WAAW,EAAE,MAAM,EACnB,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACjE,OAAO,CAAC,IAAI,CAAC,CA0Bf;AAYD,MAAM,WAAW,qBAAqB;IACpC,+EAA+E;IAC/E,KAAK,EAAE,MAAM,CAAC;IACd,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,0BAA0B;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,uBAAuB;IACtC,oDAAoD;IACpD,GAAG,EAAE,MAAM,CAAC;CACb;AAuBD;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,sBAAsB,EAC/B,OAAO,EAAE,MAAM,EACf,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,qBAAqB,GACxD,OAAO,CAAC,uBAAuB,CAAC,CAwClC"}

package/dist/integrations/github/sandbox.js

@@ -30,8 +30,23 @@ async function teardownProjectSandbox(options) {
 function shellQuote(value) {
   return `'` + value.split(`'`).join(`'\\''`) + `'`;
 }
-async function sh(sandbox, script) {
-  return sandbox.executeCommand("sh", ["-c", script]);
+var DEFAULT_COMMAND_TIMEOUT_MS = 15 * 6e4;
+var CHECKOUT_COMMAND_TIMEOUT_MS = 5 * 6e4;
+async function sh(sandbox, script, options = {}) {
+  const timeoutMs = options.timeoutMs ?? DEFAULT_COMMAND_TIMEOUT_MS;
+  let timer;
+  const hangGuard = new Promise((_, reject) => {
+    timer = setTimeout(() => {
+      const phase = options.phase ? ` during ${options.phase}` : "";
+      reject(new Error(`Sandbox command timed out after ${Math.round(timeoutMs / 1e3)}s${phase}.`));
+    }, timeoutMs);
+    timer.unref?.();
+  });
+  try {
+    return await Promise.race([sandbox.executeCommand("sh", ["-c", script], { timeout: timeoutMs }), hangGuard]);
+  } finally {
+    clearTimeout(timer);
+  }
 }
 var MaterializeError = class extends Error {
   constructor(message, code) {
@@ -68,7 +83,8 @@ async function materializeRepo(options) {
     );
   }
   const authUrl = tokenUrl(repo, token);
-  const alreadyMaterialized = Boolean(sandboxRow.materializedAt) || await hasExistingCheckout(sandbox, workdir, repo);
+  const alreadyMaterialized = await hasExistingCheckout(sandbox, workdir, repo);
+  let succeeded = false;
   try {
     if (!alreadyMaterialized) {
       reportProgress(onProgress, {
@@ -77,7 +93,8 @@ async function materializeRepo(options) {
       });
       const clone = await sh(
         sandbox,
-        `git clone --depth=1 --single-branch --branch ${shellQuote(repoInfo.defaultBranch)} ${shellQuote(authUrl)} ${shellQuote(workdir)}`
+        `git clone --depth=1 --single-branch --branch ${shellQuote(repoInfo.defaultBranch)} ${shellQuote(authUrl)} ${shellQuote(workdir)}`,
+        { phase: "repository clone" }
       );
       if (clone.exitCode !== 0) {
         throw classifyGitFailure(clone, "clone-failed");
@@ -88,13 +105,14 @@ async function materializeRepo(options) {
       if (setUrl.exitCode !== 0) {
         throw new MaterializeError(`Failed to set git remote: ${setUrl.stderr}`, "pull-failed");
       }
-      const pull = await sh(sandbox, `git -C ${shellQuote(workdir)} pull --ff-only`);
+      const pull = await sh(sandbox, `git -C ${shellQuote(workdir)} pull --ff-only`, { phase: "repository pull" });
       if (pull.exitCode !== 0) {
         throw classifyGitFailure(pull, "pull-failed");
       }
     }
+    succeeded = true;
   } finally {
-    await scrubRemote(sandbox, workdir, repo, alreadyMaterialized);
+    await scrubRemote(sandbox, workdir, repo, succeeded);
   }
   reportProgress(onProgress, { phase: "finalizing", message: "Finalizing workspace\u2026" });
   await storage.markMaterialized({ id: sandboxRow.id });
@@ -125,7 +143,8 @@ async function checkoutSessionBranch(sandbox, workdir, {
     if (setUrl.exitCode !== 0) throw classifyGitFailure(setUrl, "pull-failed");
     const fetch = await sh(
       sandbox,
-      `git -C ${shellQuote(workdir)} fetch origin ${shellQuote(baseBranch)} && git -C ${shellQuote(workdir)} checkout -b ${shellQuote(branch)} FETCH_HEAD`
+      `git -C ${shellQuote(workdir)} fetch origin ${shellQuote(baseBranch)} && git -C ${shellQuote(workdir)} checkout -b ${shellQuote(branch)} FETCH_HEAD`,
+      { timeoutMs: CHECKOUT_COMMAND_TIMEOUT_MS, phase: "branch checkout" }
     );
     if (fetch.exitCode !== 0) throw classifyGitFailure(fetch, "clone-failed");
   } finally {
@@ -285,7 +304,7 @@ async function ensureWorktree(sandbox, repoWorkdir, {
 }
 async function runWorktreeSetup(sandbox, worktreePath, command) {
   const result = await sh(sandbox, `cd ${shellQuote(worktreePath)} && { ${command}
-}`);
+}`, { phase: "worktree setup" });
   if (result.exitCode !== 0) {
     const detail = (result.stderr.trim() || result.stdout.trim()).slice(-2e3);
     throw new WorktreeError(`Setup command failed (exit ${result.exitCode}): ${detail}`, "setup-failed");
@@ -358,6 +377,7 @@ async function createPullRequest(sandbox, workdir, { token, base, head, title, b
   return { url };
 }
 export {
+  CHECKOUT_COMMAND_TIMEOUT_MS,
   MaterializeError,
   WorktreeError,
   checkoutSessionBranch,

package/dist/integrations/github/sandbox.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/integrations/github/sandbox.ts","../../../src/sandbox/fleet.ts"],"sourcesContent":["/**\n * Repo materialization for GitHub-backed repositories.\n *\n * A GitHub repo is never cloned onto the server host. Instead each project gets\n * its own isolated sandbox (provisioned by the fleet in `../sandbox/fleet`) and\n * the repo is cloned *inside* that sandbox. The agent's file tools and command\n * tools then operate entirely against the remote checkout.\n *\n * - `ensureProjectSandbox(row)` / `teardownProjectSandbox(row)` bind the fleet's\n *   provision/reattach/teardown lifecycle to the per-(project,user) sandbox row.\n * - `materializeRepo(row, token)` runs `git clone` (first open) or `git pull`\n *   (re-open) inside the sandbox, using a short-lived installation token that is\n *   scrubbed from the git remote afterwards so it never persists in the VM.\n *\n * This module owns everything git/GitHub: clone/pull, commit/push, worktrees,\n * and `gh pr create`. Sandbox provisioning, budgets, and workdir layout live in\n * the fleet module.\n */\n\nimport { createHash } from 'node:crypto';\nimport { reportProgress } from '../../sandbox/fleet.js';\nimport type {\n  MaterializationSandbox,\n  ProgressFn,\n  SandboxBindingStore,\n  SandboxCommandResult,\n  SandboxFleet,\n} from '../../sandbox/fleet.js';\nimport type {\n  ProjectRepositorySandbox,\n  SourceControlStorageHandle,\n} from '../../storage/domains/source-control/base.js';\n\ntype SourceControlSandboxStorage = SourceControlStorageHandle['sandboxes'];\ntype MaterializationStore = Pick<SourceControlSandboxStorage, 'markMaterialized'>;\n\ninterface RepoMaterializationBinding {\n  id: string;\n  sandboxWorkdir: string;\n  materializedAt: Date | null;\n}\n\n/** Adapt a per-(project,user) sandbox binding row to the fleet's persistence seam. */\nfunction bindingStore(row: ProjectRepositorySandbox, storage: SourceControlSandboxStorage): SandboxBindingStore {\n  return {\n    sandboxId: row.sandboxId,\n    setSandboxId: id =>\n      id === null ? storage.clearBinding({ id: row.id }) : storage.setSandboxId({ id: row.id, sandboxId: id }),\n    clear: () => storage.clearBinding({ id: row.id }),\n  };\n}\n\n/**\n * Provision a new sandbox (persisting its provider id on first open) or\n * reattach to the stored one. Returns a started, live sandbox.\n */\nexport async function ensureProjectSandbox(options: {\n  fleet: SandboxFleet;\n  row: ProjectRepositorySandbox;\n  storage: SourceControlSandboxStorage;\n  token: string;\n  onProgress?: ProgressFn;\n}): Promise<MaterializationSandbox> {\n  const { fleet, row, storage, token, onProgress } = options;\n  return fleet.ensureSandbox(bindingStore(row, storage), { GH_TOKEN: token }, onProgress);\n}\n\n/**\n * Tear down a user's sandbox for a project: stop the live VM (best-effort) and\n * clear the persisted `sandboxId`/`materializedAt` on the per-(project,user)\n * binding row so the next open re-provisions cleanly.\n *\n * @param row     the per-(project,user) sandbox binding to tear down\n * @param sandbox an already-reattached live sandbox to stop, when available\n */\nexport async function teardownProjectSandbox(options: {\n  fleet: SandboxFleet;\n  row: ProjectRepositorySandbox;\n  storage: SourceControlSandboxStorage;\n  sandbox?: MaterializationSandbox;\n}): Promise<void> {\n  const { fleet, row, storage, sandbox } = options;\n  return fleet.teardownSandbox(bindingStore(row, storage), sandbox);\n}\n\n/**\n * Single-quote a string for safe POSIX shell interpolation. Wraps the value in\n * single quotes and escapes any embedded single quote using the canonical\n * close-quote / escaped-quote / reopen-quote sequence (`'\\''`). This is the\n * standard POSIX-safe construction and prevents the quoted string from being\n * terminated early.\n */\nexport function shellQuote(value: string): string {\n  // Replace each ' with the four-character sequence: ' \\ ' '\n  return `'` + value.split(`'`).join(`'\\\\''`) + `'`;\n}\n\n/** Run a shell script in the sandbox via `sh -c`. */\nasync function sh(sandbox: MaterializationSandbox, script: string): Promise<SandboxCommandResult> {\n  return sandbox.executeCommand('sh', ['-c', script]);\n}\n\n/** Error raised when the sandbox cannot materialize the repo (actionable). */\nexport class MaterializeError extends Error {\n  constructor(\n    message: string,\n    readonly code:\n      | 'git-missing'\n      | 'egress-blocked'\n      | 'clone-failed'\n      | 'pull-failed'\n      | 'push-failed'\n      | 'commit-failed'\n      | 'gh-missing'\n      | 'pr-failed',\n  ) {\n    super(message);\n    this.name = 'MaterializeError';\n  }\n}\n\n/**\n * Build the token-auth clone/pull URL for a repo. The token lives only inside\n * this URL and is scrubbed from the remote after the operation.\n */\nfunction tokenUrl(repoFullName: string, token: string): string {\n  return `https://x-access-token:${token}@github.com/${repoFullName}.git`;\n}\n\nfunction cleanUrl(repoFullName: string): string {\n  return `https://github.com/${repoFullName}.git`;\n}\n\n/** Repo metadata needed to materialize, read from the org-owned project row. */\nexport interface RepoMaterializeInfo {\n  repoFullName: string;\n  defaultBranch: string;\n}\n\n/**\n * Materialize the repo inside the user's sandbox. Clones on first open, pulls on\n * re-open. Always scrubs the install token from the remote afterwards and sets\n * `materialized_at` on the per-user sandbox binding row.\n *\n */\nexport async function materializeRepo(options: {\n  /** The per-(project,user) sandbox binding (provisioned via `ensureProjectSandbox`). */\n  row: RepoMaterializationBinding;\n  /** Repo metadata from the org-owned project row. */\n  repoInfo: RepoMaterializeInfo;\n  /** The live sandbox to run git inside. */\n  sandbox: MaterializationSandbox;\n  /** A freshly minted, short-lived installation access token. */\n  token: string;\n  storage: MaterializationStore;\n  onProgress?: ProgressFn;\n}): Promise<void> {\n  const { row: sandboxRow, repoInfo, sandbox, token, storage, onProgress } = options;\n  const workdir = sandboxRow.sandboxWorkdir;\n  const repo = repoInfo.repoFullName;\n\n  // 0. Defense in depth: never build a git command from values that aren't\n  // strictly shaped, even if a malformed row reached the DB. Inputs are also\n  // validated at the route boundary before storage.\n  if (!/^[\\w.-]+\\/[\\w.-]+$/.test(repo)) {\n    throw new MaterializeError(`Refusing to materialize: invalid repo full name '${repo}'.`, 'clone-failed');\n  }\n  if (!/^[A-Za-z0-9_./-]+$/.test(repoInfo.defaultBranch)) {\n    throw new MaterializeError(\n      `Refusing to materialize: invalid default branch '${repoInfo.defaultBranch}'.`,\n      'clone-failed',\n    );\n  }\n\n  // 1. Preflight: git must be installed in the sandbox template.\n  const gitVersion = await sh(sandbox, 'git --version');\n  if (gitVersion.exitCode !== 0) {\n    throw new MaterializeError(\n      'git is not installed in the sandbox. The sandbox template must include git.',\n      'git-missing',\n    );\n  }\n\n  const authUrl = tokenUrl(repo, token);\n\n  // The DB's `materializedAt` can drift from disk — a fresh per-user binding\n  // row over an already-populated workdir (local dev DB resets, repaired\n  // rows, earlier flows) would make `git clone` fail on the non-empty\n  // directory. Re-detect an existing checkout of this repo and pull instead.\n  const alreadyMaterialized = Boolean(sandboxRow.materializedAt) || (await hasExistingCheckout(sandbox, workdir, repo));\n\n  try {\n    if (!alreadyMaterialized) {\n      // 2a. First open: shallow-clone the default branch into the workdir. A\n      // shallow single-branch clone is dramatically faster for large repos; the\n      // later re-open uses `git pull --ff-only`, which works on shallow clones.\n      reportProgress(onProgress, {\n        phase: 'cloning',\n        message: `Cloning ${repo} (first open can take a minute)…`,\n      });\n      const clone = await sh(\n        sandbox,\n        `git clone --depth=1 --single-branch --branch ${shellQuote(repoInfo.defaultBranch)} ${shellQuote(authUrl)} ${shellQuote(workdir)}`,\n      );\n      if (clone.exitCode !== 0) {\n        throw classifyGitFailure(clone, 'clone-failed');\n      }\n    } else {\n      // 2b. Re-open: refresh remote to the token URL and fast-forward pull.\n      reportProgress(onProgress, { phase: 'pulling', message: `Updating ${repo} to the latest changes…` });\n      const setUrl = await sh(sandbox, `git -C ${shellQuote(workdir)} remote set-url origin ${shellQuote(authUrl)}`);\n      if (setUrl.exitCode !== 0) {\n        throw new MaterializeError(`Failed to set git remote: ${setUrl.stderr}`, 'pull-failed');\n      }\n      const pull = await sh(sandbox, `git -C ${shellQuote(workdir)} pull --ff-only`);\n      if (pull.exitCode !== 0) {\n        throw classifyGitFailure(pull, 'pull-failed');\n      }\n    }\n  } finally {\n    // 3. Always scrub the token from the remote so it isn't left in the VM's\n    // git config, even when the clone/pull above failed partway through. This\n    // is best-effort on the failure path (the workdir may not exist yet after a\n    // failed clone); on the success path the scrub must succeed or we surface it.\n    await scrubRemote(sandbox, workdir, repo, alreadyMaterialized);\n  }\n\n  // 4. Mark materialized.\n  reportProgress(onProgress, { phase: 'finalizing', message: 'Finalizing workspace…' });\n  await storage.markMaterialized({ id: sandboxRow.id });\n}\n\n/** Check out a session's branch inside its isolated repository clone. */\nexport async function checkoutSessionBranch(\n  sandbox: MaterializationSandbox,\n  workdir: string,\n  {\n    branch,\n    baseBranch,\n    token,\n    repoFullName,\n  }: { branch: string; baseBranch: string; token: string; repoFullName: string },\n): Promise<void> {\n  if (!isValidGitRef(branch) || !isValidGitRef(baseBranch)) {\n    throw new MaterializeError('Refusing to create a session from an invalid branch name.', 'clone-failed');\n  }\n\n  const current = await sh(sandbox, `git -C ${shellQuote(workdir)} branch --show-current`);\n  if (current.exitCode === 0 && current.stdout.trim() === branch) return;\n\n  const local = await sh(\n    sandbox,\n    `git -C ${shellQuote(workdir)} show-ref --verify --quiet refs/heads/${shellQuote(branch)}`,\n  );\n  if (local.exitCode === 0) {\n    const checkout = await sh(sandbox, `git -C ${shellQuote(workdir)} checkout ${shellQuote(branch)}`);\n    if (checkout.exitCode !== 0) throw classifyGitFailure(checkout, 'clone-failed');\n    return;\n  }\n\n  const authUrl = tokenUrl(repoFullName, token);\n  try {\n    const setUrl = await sh(sandbox, `git -C ${shellQuote(workdir)} remote set-url origin ${shellQuote(authUrl)}`);\n    if (setUrl.exitCode !== 0) throw classifyGitFailure(setUrl, 'pull-failed');\n    const fetch = await sh(\n      sandbox,\n      `git -C ${shellQuote(workdir)} fetch origin ${shellQuote(baseBranch)} && git -C ${shellQuote(workdir)} checkout -b ${shellQuote(branch)} FETCH_HEAD`,\n    );\n    if (fetch.exitCode !== 0) throw classifyGitFailure(fetch, 'clone-failed');\n  } finally {\n    await sh(sandbox, `git -C ${shellQuote(workdir)} remote set-url origin ${shellQuote(cleanUrl(repoFullName))}`);\n  }\n}\n\n/**\n * True when the workdir already holds a git checkout whose `origin` points at\n * this exact repo. Matches both the clean and token-auth URL forms; any other\n * remote (or no git dir at all) falls back to the clone path.\n */\nasync function hasExistingCheckout(\n  sandbox: MaterializationSandbox,\n  workdir: string,\n  repoFullName: string,\n): Promise<boolean> {\n  const result = await sh(sandbox, `git -C ${shellQuote(workdir)} remote get-url origin`);\n  if (result.exitCode !== 0) return false;\n  const url = result.stdout.trim().toLowerCase();\n  const suffix = `github.com/${repoFullName.toLowerCase()}`;\n  return url.endsWith(`${suffix}.git`) || url.endsWith(suffix);\n}\n\n/**\n * Reset the git remote back to the tokenless URL. On a successful clone/pull the\n * workdir always has a `.git`, so a non-zero exit code here means the token may\n * still be persisted — surface it. On the failure path the workdir may not exist\n * (e.g. a failed clone), so a non-zero exit is tolerated.\n */\nasync function scrubRemote(\n  sandbox: MaterializationSandbox,\n  workdir: string,\n  repoFullName: string,\n  expectGitDir: boolean,\n): Promise<void> {\n  const result = await sh(\n    sandbox,\n    `git -C ${shellQuote(workdir)} remote set-url origin ${shellQuote(cleanUrl(repoFullName))}`,\n  );\n  if (result.exitCode !== 0 && expectGitDir) {\n    throw new MaterializeError(\n      `Failed to scrub installation token from git remote: ${result.stderr.trim() || result.stdout.trim()}`,\n      'pull-failed',\n    );\n  }\n}\n\n/**\n * Turn a failed git command into an actionable error, detecting the common\n * \"cannot reach github.com\" egress failure.\n */\nfunction classifyGitFailure(\n  result: SandboxCommandResult,\n  fallback: 'clone-failed' | 'pull-failed' | 'push-failed',\n): MaterializeError {\n  const stderr = result.stderr || '';\n  if (/could not resolve host|failed to connect|network is unreachable|Connection timed out/i.test(stderr)) {\n    return new MaterializeError(\n      'The sandbox could not reach github.com. The sandbox network must allow outbound egress to github.com.',\n      'egress-blocked',\n    );\n  }\n  const verb = fallback === 'clone-failed' ? 'clone' : fallback === 'pull-failed' ? 'pull' : 'push';\n  return new MaterializeError(`git ${verb} failed: ${stderr}`, fallback);\n}\n\n// ---------------------------------------------------------------------------\n// Phase 1 — git identity + token-scoped push primitive\n//\n// These helpers let the sandbox author and push commits safely. The install\n// token is short-lived, minted per-operation server-side, injected only into\n// the temporary remote URL inside the sandbox, and always scrubbed in a\n// `finally` so it never persists in `.git/config`.\n// ---------------------------------------------------------------------------\n\n/**\n * Validate a git ref (branch) name. Server-side defense-in-depth: only allow a\n * conservative character set so a branch can never be built into a shell\n * command in a way that escapes quoting. Mirrors the route-layer check.\n */\nexport function isValidGitRef(value: unknown): value is string {\n  return (\n    typeof value === 'string' &&\n    value.length > 0 &&\n    value.length <= 255 &&\n    // Reject leading-dash refs (e.g. `--mirror`) so the value can never be\n    // parsed as a git option when interpolated into a command.\n    !value.startsWith('-') &&\n    /^[A-Za-z0-9_./-]+$/.test(value)\n  );\n}\n\n/** Identity used to author commits inside the sandbox. */\nexport interface GitIdentity {\n  name?: string | null;\n  email?: string | null;\n  /** GitHub login, used to derive a stable noreply identity when name/email are absent. */\n  login?: string | null;\n}\n\n/**\n * Resolve a concrete `{ name, email }` for git authorship from a possibly-sparse\n * identity. Falls back to a GitHub-style noreply identity so commits are never\n * authored with an empty or host-derived identity.\n */\nexport function resolveGitIdentity(identity: GitIdentity): { name: string; email: string } {\n  const login = (identity.login || '').trim();\n  const name = (identity.name || '').trim() || login || 'Mastra Code';\n  const email =\n    (identity.email || '').trim() ||\n    (login ? `${login}@users.noreply.github.com` : 'mastra-code@users.noreply.github.com');\n  return { name, email };\n}\n\n/**\n * Configure `user.name` / `user.email` for the given repo working tree inside\n * the sandbox so commits are authored correctly. Values are shell-quoted.\n */\nexport async function configureGitIdentity(\n  sandbox: MaterializationSandbox,\n  workdir: string,\n  identity: GitIdentity,\n): Promise<void> {\n  const { name, email } = resolveGitIdentity(identity);\n  const setName = await sh(sandbox, `git -C ${shellQuote(workdir)} config user.name ${shellQuote(name)}`);\n  if (setName.exitCode !== 0) {\n    throw new MaterializeError(`Failed to set git user.name: ${setName.stderr.trim()}`, 'commit-failed');\n  }\n  const setEmail = await sh(sandbox, `git -C ${shellQuote(workdir)} config user.email ${shellQuote(email)}`);\n  if (setEmail.exitCode !== 0) {\n    throw new MaterializeError(`Failed to set git user.email: ${setEmail.stderr.trim()}`, 'commit-failed');\n  }\n}\n\n/**\n * Temporarily rewrite `origin` to a tokenized URL, run `fn` (e.g. a push), and\n * **always** scrub the remote back to the tokenless URL in a `finally`. The\n * token therefore only ever lives in the remote URL for the duration of the\n * operation and is never left in the VM's git config.\n *\n * On the success path the scrub must succeed (a leaked token is a hard error);\n * if it fails we surface it. On the failure path the scrub is best-effort but\n * still attempted, and the original operation error is rethrown.\n */\nexport async function withInstallToken<T>(\n  sandbox: MaterializationSandbox,\n  workdir: string,\n  repoFullName: string,\n  token: string,\n  fn: () => Promise<T>,\n): Promise<T> {\n  if (!/^[\\w.-]+\\/[\\w.-]+$/.test(repoFullName)) {\n    throw new MaterializeError(`Refusing to push: invalid repo full name '${repoFullName}'.`, 'push-failed');\n  }\n\n  const setUrl = await sh(\n    sandbox,\n    `git -C ${shellQuote(workdir)} remote set-url origin ${shellQuote(tokenUrl(repoFullName, token))}`,\n  );\n  if (setUrl.exitCode !== 0) {\n    // Best-effort scrub even though set-url failed, then surface the failure.\n    await scrubRemote(sandbox, workdir, repoFullName, false);\n    throw new MaterializeError(`Failed to set git remote: ${setUrl.stderr.trim()}`, 'push-failed');\n  }\n\n  try {\n    return await fn();\n  } finally {\n    // Always restore the tokenless remote. The workdir has a `.git` (we just\n    // rewrote its remote) so a scrub failure means the token may still persist\n    // — surface it.\n    await scrubRemote(sandbox, workdir, repoFullName, true);\n  }\n}\n\n/**\n * Push a branch back to GitHub from inside the sandbox using a short-lived\n * installation token. The branch is ref-validated, the token is injected only\n * into the remote URL via `withInstallToken`, and egress failures are\n * classified into actionable errors.\n */\nexport async function pushBranch(\n  sandbox: MaterializationSandbox,\n  workdir: string,\n  branch: string,\n  token: string,\n  repoFullName: string,\n): Promise<void> {\n  if (!isValidGitRef(branch)) {\n    throw new MaterializeError(`Refusing to push: invalid branch name '${branch}'.`, 'push-failed');\n  }\n\n  await withInstallToken(sandbox, workdir, repoFullName, token, async () => {\n    const push = await sh(sandbox, `git -C ${shellQuote(workdir)} push -u origin ${shellQuote(branch)}`);\n    if (push.exitCode !== 0) {\n      throw classifyGitFailure(push, 'push-failed');\n    }\n  });\n}\n\nexport interface CommitResult {\n  /** True when a commit was created; false when there was nothing to commit. */\n  committed: boolean;\n}\n\n/**\n * Stage every change in the working tree and create a commit inside the\n * sandbox. The git identity is configured first so authorship is correct. When\n * there is nothing to commit this is a no-op (`committed: false`) rather than an\n * error, so callers can safely commit-then-push without first diffing.\n *\n * @param sandbox  the live sandbox containing the checkout\n * @param workdir  the worktree (or repo) path to commit in\n * @param message  the commit message (quoted; arbitrary text is safe)\n * @param identity authorship identity for the commit\n */\nexport async function commitAll(\n  sandbox: MaterializationSandbox,\n  workdir: string,\n  message: string,\n  identity: GitIdentity,\n): Promise<CommitResult> {\n  await configureGitIdentity(sandbox, workdir, identity);\n\n  const add = await sh(sandbox, `git -C ${shellQuote(workdir)} add -A`);\n  if (add.exitCode !== 0) {\n    throw new MaterializeError(`git add failed: ${add.stderr.trim() || add.stdout.trim()}`, 'commit-failed');\n  }\n\n  // Nothing staged → nothing to commit. `git diff --cached --quiet` exits 1 when\n  // there are staged changes, 0 when the index is clean.\n  const staged = await sh(sandbox, `git -C ${shellQuote(workdir)} diff --cached --quiet`);\n  if (staged.exitCode === 0) {\n    return { committed: false };\n  }\n\n  const commit = await sh(sandbox, `git -C ${shellQuote(workdir)} commit -m ${shellQuote(message)}`);\n  if (commit.exitCode !== 0) {\n    throw new MaterializeError(`git commit failed: ${commit.stderr.trim() || commit.stdout.trim()}`, 'commit-failed');\n  }\n\n  return { committed: true };\n}\n\n// ---------------------------------------------------------------------------\n// Phase 2 — worktree / branch lifecycle\n//\n// Each unit of work gets its own branch + working tree inside the same sandbox\n// as the base checkout. The worktree path is always computed server-side from a\n// sanitized branch name; client input never reaches a filesystem path.\n// ---------------------------------------------------------------------------\n\n/** Error raised when a worktree cannot be created/reused inside the sandbox. */\nexport class WorktreeError extends Error {\n  constructor(\n    message: string,\n    readonly code: 'invalid-branch' | 'worktree-failed' | 'setup-failed',\n  ) {\n    super(message);\n    this.name = 'WorktreeError';\n  }\n}\n\n/**\n * Reduce a (already ref-validated) branch name to a filesystem-safe directory\n * segment for the worktree path: slashes/dots/unsafe chars collapsed to `-`.\n * This only affects the *directory name*, never the git branch itself.\n *\n * Sanitization is lossy (e.g. `feat/a` and `feat-a` both reduce to `feat-a`),\n * so an 8-char hash of the original branch is appended whenever the sanitized\n * form differs from the input. That keeps clean names (`main`) readable while\n * guaranteeing distinct branches never share a worktree directory.\n */\nexport function safeBranchDir(branch: string): string {\n  const sanitized =\n    branch\n      .replace(/[^A-Za-z0-9._-]+/g, '-')\n      .replace(/\\/+/g, '-')\n      .replace(/^[-.]+|[-.]+$/g, '')\n      .slice(0, 100) || 'work';\n  if (sanitized === branch) return sanitized;\n  const hash = createHash('sha256').update(branch).digest('hex').slice(0, 8);\n  return `${sanitized}-${hash}`;\n}\n\n/**\n * Compute the absolute worktree path for a branch, server-side only. Worktrees\n * live alongside the repo checkout under a sibling `worktrees/` directory so the\n * repo's `.git` is shared. Never derived from client-supplied paths.\n */\nexport function computeWorktreePath(repoWorkdir: string, branch: string): string {\n  const parent = repoWorkdir.replace(/\\/+$/, '').split('/').slice(0, -1).join('/') || '';\n  return `${parent}/worktrees/${safeBranchDir(branch)}`;\n}\n\nexport interface EnsureWorktreeResult {\n  worktreePath: string;\n  branch: string;\n  baseBranch: string;\n  /** True when an existing worktree was reused rather than freshly created. */\n  reused: boolean;\n}\n\n/**\n * Create (or reuse) a git worktree + branch inside the sandbox for a unit of\n * work. Idempotent: if a worktree already exists at the computed path it is\n * reused. The branch is created from the freshly fetched `origin/<baseBranch>`\n * — never the sandbox's possibly stale local ref — so new worktrees always\n * start from the latest remote state.\n *\n * @param sandbox       live sandbox containing the base checkout\n * @param repoWorkdir   the base repo checkout path inside the sandbox\n * @param branch        the feature branch (ref-validated server-side)\n * @param baseBranch    the branch to fork from (ref-validated; defaults to the repo's default branch)\n * @param token         short-lived installation token used only for the base-branch fetch\n * @param repoFullName  `owner/repo` used to build the tokenized remote URL\n */\nexport async function ensureWorktree(\n  sandbox: MaterializationSandbox,\n  repoWorkdir: string,\n  {\n    branch,\n    baseBranch,\n    token,\n    repoFullName,\n  }: { branch: string; baseBranch: string; token: string; repoFullName: string },\n): Promise<EnsureWorktreeResult> {\n  if (!isValidGitRef(branch)) {\n    throw new WorktreeError(`Invalid branch name '${branch}'.`, 'invalid-branch');\n  }\n  if (!isValidGitRef(baseBranch)) {\n    throw new WorktreeError(`Invalid base branch name '${baseBranch}'.`, 'invalid-branch');\n  }\n\n  const worktreePath = computeWorktreePath(repoWorkdir, branch);\n\n  // Idempotent reuse: a worktree already checked out at this path has a `.git`\n  // file (worktrees use a gitfile, not a directory). Reuse it as-is.\n  const exists = await sh(sandbox, `test -e ${shellQuote(`${worktreePath}/.git`)}`);\n  if (exists.exitCode === 0) {\n    return { worktreePath, branch, baseBranch, reused: true };\n  }\n\n  // Fetch the latest base ref from origin before forking. The explicit refspec\n  // updates `refs/remotes/origin/<base>` even when the checkout was created as\n  // a single-branch clone. The fetch needs the install token (the resting\n  // remote is tokenless), and a failure is a hard error — silently forking a\n  // stale local ref is worse than failing the request.\n  const baseRef = `origin/${baseBranch}`;\n  await withInstallToken(sandbox, repoWorkdir, repoFullName, token, async () => {\n    const fetch = await sh(\n      sandbox,\n      `git -C ${shellQuote(repoWorkdir)} fetch origin ${shellQuote(`+refs/heads/${baseBranch}:refs/remotes/${baseRef}`)}`,\n    );\n    if (fetch.exitCode !== 0) {\n      throw classifyGitFailure(fetch, 'pull-failed');\n    }\n  });\n\n  // Create the worktree. If the branch already exists, check it out into the\n  // worktree; otherwise create it from the fetched base. `git worktree add -B`\n  // creates-or-resets the branch to the base, which keeps this idempotent for a\n  // fresh worktree while still working when the branch already exists remotely.\n  // `--no-track` keeps the feature branch from tracking origin/<base>; pushes\n  // set their own upstream via `push -u`.\n  const add = await sh(\n    sandbox,\n    `git -C ${shellQuote(repoWorkdir)} worktree add --no-track -B ${shellQuote(branch)} ${shellQuote(worktreePath)} ${shellQuote(baseRef)}`,\n  );\n  if (add.exitCode !== 0) {\n    throw new WorktreeError(`git worktree add failed: ${add.stderr.trim() || add.stdout.trim()}`, 'worktree-failed');\n  }\n\n  return { worktreePath, branch, baseBranch, reused: false };\n}\n\n/**\n * Run the project's setup command (e.g. `pnpm i && pnpm build`) inside a\n * freshly created worktree. Called before the worktree is handed to any agent\n * run so the checkout is ready to build/test. A non-zero exit is a hard error —\n * starting agent work in a half-set-up tree is worse than failing the request.\n *\n * Security model: the command is intentionally arbitrary shell — that is the\n * feature (install deps, build, seed fixtures). It is only configurable by\n * authenticated org members (the settings route is gated by\n * `resolveOrgTenant` + org-scoped project lookup, with length and\n * control-character validation), and it executes exclusively inside the\n * project's isolated sandbox — the same environment where org members already\n * run arbitrary shell via the agent's command tool. It never runs on the web\n * server host, so it grants no privilege beyond what sandbox access already\n * provides.\n *\n * @param sandbox       live sandbox containing the worktree\n * @param worktreePath  the server-computed worktree path the command runs in\n * @param command       the org-configured setup shell command\n */\nexport async function runWorktreeSetup(\n  sandbox: MaterializationSandbox,\n  worktreePath: string,\n  command: string,\n): Promise<void> {\n  const result = await sh(sandbox, `cd ${shellQuote(worktreePath)} && { ${command}\\n}`);\n  if (result.exitCode !== 0) {\n    const detail = (result.stderr.trim() || result.stdout.trim()).slice(-2000);\n    throw new WorktreeError(`Setup command failed (exit ${result.exitCode}): ${detail}`, 'setup-failed');\n  }\n}\n\n/**\n * Remove a worktree (and its local feature branch) from the sandbox. The\n * checkout is removed with `--force` — the caller owns confirming that any\n * uncommitted work in it can be discarded. Idempotent: a worktree whose\n * directory is already gone only has its metadata pruned.\n *\n * @param sandbox       live sandbox containing the base checkout\n * @param repoWorkdir   the base repo checkout path inside the sandbox\n * @param branch        the worktree's feature branch (ref-validated)\n * @param worktreePath  the persisted, server-computed worktree path\n */\nexport async function removeWorktree(\n  sandbox: MaterializationSandbox,\n  repoWorkdir: string,\n  { branch, worktreePath }: { branch: string; worktreePath: string },\n): Promise<void> {\n  if (!isValidGitRef(branch)) {\n    throw new WorktreeError(`Invalid branch name '${branch}'.`, 'invalid-branch');\n  }\n\n  const remove = await sh(\n    sandbox,\n    `git -C ${shellQuote(repoWorkdir)} worktree remove --force ${shellQuote(worktreePath)}`,\n  );\n  if (remove.exitCode !== 0) {\n    // Tolerate a checkout that's already gone (e.g. a fresh sandbox after\n    // re-provisioning): prune stale metadata and only fail when the directory\n    // still exists, meaning git genuinely refused to remove it.\n    await sh(sandbox, `git -C ${shellQuote(repoWorkdir)} worktree prune`);\n    const exists = await sh(sandbox, `test -e ${shellQuote(worktreePath)}`);\n    if (exists.exitCode === 0) {\n      throw new WorktreeError(\n        `git worktree remove failed: ${remove.stderr.trim() || remove.stdout.trim()}`,\n        'worktree-failed',\n      );\n    }\n  }\n\n  // Best-effort local branch cleanup; the branch may not exist locally anymore\n  // or may still be pushed remotely — neither should fail the removal.\n  await sh(sandbox, `git -C ${shellQuote(repoWorkdir)} branch -D ${shellQuote(branch)}`);\n}\n\n// ---------------------------------------------------------------------------\n// Phase 3 — `gh` CLI pull-request creation primitive\n//\n// PRs are opened from inside the sandbox with the GitHub CLI. `gh` must be\n// present in the sandbox template (preflighted only on the PR path so clone /\n// open still work when it is absent). The token is passed to `gh` via a\n// per-invocation `GH_TOKEN` env that is scoped to the single `gh` process and\n// never written to git config, a shell rc, or the VM's environment.\n// ---------------------------------------------------------------------------\n\nexport interface CreatePullRequestArgs {\n  /** Short-lived installation token, injected only into the `gh` process env. */\n  token: string;\n  /** Base branch the PR merges into. Ref-validated. */\n  base: string;\n  /** Head branch the PR is opened from. Ref-validated. */\n  head: string;\n  /** PR title. */\n  title: string;\n  /** PR body (optional). */\n  body?: string;\n}\n\nexport interface CreatePullRequestResult {\n  /** The PR URL parsed from `gh pr create` stdout. */\n  url: string;\n}\n\n/**\n * Preflight that `gh` is installed in the sandbox. Only called on the PR path so\n * a missing `gh` never blocks clone/open. Surfaces an actionable error naming\n * the sandbox template requirement.\n */\nasync function assertGhAvailable(sandbox: MaterializationSandbox): Promise<void> {\n  const version = await sh(sandbox, 'gh --version');\n  if (version.exitCode !== 0) {\n    throw new MaterializeError(\n      'The GitHub CLI (gh) is not installed in the sandbox. The sandbox template must include gh to open pull requests.',\n      'gh-missing',\n    );\n  }\n}\n\n/** Match the first GitHub PR URL in `gh pr create` output. */\nfunction parsePullRequestUrl(stdout: string): string | undefined {\n  const match = stdout.match(/https:\\/\\/github\\.com\\/[^\\s]+\\/pull\\/\\d+/);\n  return match?.[0];\n}\n\n/**\n * Open a pull request from inside the sandbox via `gh pr create`. The token is\n * passed only through a per-invocation `GH_TOKEN` env scoped to the single `gh`\n * process (never persisted), all arguments are shell-quoted, and the resulting\n * PR URL is parsed from stdout.\n *\n * @param sandbox live sandbox containing the checkout\n * @param workdir the worktree (or repo) path the PR head branch is checked out in\n */\nexport async function createPullRequest(\n  sandbox: MaterializationSandbox,\n  workdir: string,\n  { token, base, head, title, body }: CreatePullRequestArgs,\n): Promise<CreatePullRequestResult> {\n  if (!isValidGitRef(base)) {\n    throw new MaterializeError(`Refusing to open PR: invalid base branch '${base}'.`, 'pr-failed');\n  }\n  if (!isValidGitRef(head)) {\n    throw new MaterializeError(`Refusing to open PR: invalid head branch '${head}'.`, 'pr-failed');\n  }\n\n  await assertGhAvailable(sandbox);\n\n  // GH_TOKEN is prefixed inline so it is exported only to the single `gh`\n  // process and never to the wider shell session, git config, or VM env. `gh`\n  // is run from inside the checkout so it targets the correct repo/head branch.\n  const ghCommand = [\n    `GH_TOKEN=${shellQuote(token)} gh pr create`,\n    `--base ${shellQuote(base)}`,\n    `--head ${shellQuote(head)}`,\n    `--title ${shellQuote(title)}`,\n    `--body ${shellQuote(body ?? '')}`,\n  ].join(' ');\n  const script = `cd ${shellQuote(workdir)} && ${ghCommand}`;\n\n  const result = await sh(sandbox, script);\n  if (result.exitCode !== 0) {\n    const classified = classifyGitFailure(result, 'push-failed');\n    if (classified.code === 'egress-blocked') {\n      throw classified;\n    }\n    throw new MaterializeError(`gh pr create failed: ${result.stderr.trim() || result.stdout.trim()}`, 'pr-failed');\n  }\n\n  const url = parsePullRequestUrl(result.stdout);\n  if (!url) {\n    throw new MaterializeError(\n      `gh pr create succeeded but no PR URL was found in its output: ${result.stdout.trim()}`,\n      'pr-failed',\n    );\n  }\n\n  return { url };\n}\n","/**\n * Project sandbox fleet: provisioning, reattach, teardown, and budgeting.\n *\n * Server-hosted projects never run on the web host itself. Each project gets\n * its own isolated sandbox (a `WorkspaceSandbox`, e.g. a Railway VM) `clone()`d\n * from the machine the factory was configured with. This module owns everything\n * about that fleet — which provider is active, where checkouts live inside a\n * sandbox, the idle window, the per-replica budget, and the\n * provision/reattach/teardown lifecycle — but knows nothing about what runs\n * inside a sandbox (git materialization lives with its feature, e.g. the\n * GitHub integration's `sandbox.ts`).\n *\n * The fleet is constructed once at boot with the machine config (or none, when\n * sandboxes are disabled) and handed to consumers — no global registry.\n * Persistence of the provider's reattach id is delegated to the caller via\n * {@link SandboxBindingStore}, so the fleet stays storage-agnostic. Tests can\n * swap the low-level construction via {@link SandboxFleet.setFactory}.\n */\n\nimport path from 'node:path';\n\nimport type { WorkspaceSandbox } from '@mastra/core/workspace';\n\n/** Minimal command result shape sandbox consumers depend on. */\nexport interface SandboxCommandResult {\n  exitCode: number;\n  stdout: string;\n  stderr: string;\n}\n\n/**\n * Minimal live-sandbox surface fleet consumers need: an id, a way to start it,\n * a way to learn the provider's reattach id, and command execution.\n */\nexport interface MaterializationSandbox {\n  readonly id: string;\n  start(): Promise<void>;\n  getInfo(): Promise<{ metadata?: Record<string, unknown> }>;\n  executeCommand(\n    command: string,\n    args?: string[],\n    options?: { timeout?: number; env?: Record<string, string | undefined> },\n  ): Promise<SandboxCommandResult>;\n  /** Update an environment variable for future commands in this sandbox. */\n  setEnvironmentVariable?(name: string, value: string): void;\n  /** Tear down the underlying VM. Optional: providers without it are no-ops. */\n  stop?(): Promise<void>;\n}\n\n/** Options for building (or reattaching) one sandbox. */\nexport interface SandboxCreateOptions {\n  /** Reattach to this existing provider VM instead of provisioning a new one. */\n  providerSandboxId?: string;\n  /** Environment variables baked into the sandbox. */\n  env?: Record<string, string>;\n  /** Provider working directory for this sandbox. */\n  workingDirectory?: string;\n  /** Idle teardown window (minutes). The provider stops the VM after this idle period. */\n  idleTimeoutMinutes?: number;\n  /** Provider checkpoint used to seed and preserve this sandbox's filesystem. */\n  checkpointName?: string;\n}\n\n/**\n * A coarse-grained step of the sandbox-preparation flow, reported as it happens\n * so the UI can show the user what the server is doing instead of a static\n * \"Preparing…\" toast. `phase` is a stable machine token; `message` is\n * user-facing copy.\n */\nexport interface PrepareProgress {\n  phase: 'reattaching' | 'provisioning' | 'preparing-workspace' | 'cloning' | 'pulling' | 'finalizing' | 'done';\n  message: string;\n}\n\n/** Callback invoked with each preparation step. Best-effort; never throws. */\nexport type ProgressFn = (event: PrepareProgress) => void;\n\n/** Invoke a progress callback without letting it break the actual work. */\nexport function reportProgress(onProgress: ProgressFn | undefined, event: PrepareProgress): void {\n  if (!onProgress) return;\n  try {\n    onProgress(event);\n  } catch {\n    // Progress reporting must never break the actual work.\n  }\n}\n\n/**\n * Factory that builds a (not-yet-started) sandbox. When `providerSandboxId` is\n * provided the sandbox should reattach to that existing VM instead of\n * provisioning a new one.\n */\nexport type SandboxFactory = (opts: SandboxCreateOptions) => MaterializationSandbox;\n\n/** Raised when provisioning would exceed the per-replica sandbox budget. */\nexport class SandboxBudgetError extends Error {\n  readonly code = 'sandbox-budget-exceeded' as const;\n  constructor(readonly max: number) {\n    super(\n      `Sandbox budget exceeded: this server already has ${max} active sandbox(es), ` +\n        `the configured per-replica maximum. Close an existing repository's sandbox and try again.`,\n    );\n    this.name = 'SandboxBudgetError';\n  }\n}\n\n/** Optional knobs for provisioning/reattaching one sandbox. */\nexport interface EnsureSandboxOptions {\n  /** Provider working directory for this sandbox. */\n  workingDirectory?: string;\n}\n\n/**\n * Where a feature persists its sandbox binding. The fleet reads the stored\n * reattach id and writes updates through this seam so it stays agnostic of\n * the owning table (GitHub projects today, anything else tomorrow).\n */\nexport interface SandboxBindingStore {\n  /** Stored provider reattach id from a previous provisioning, if any. */\n  readonly sandboxId: string | null;\n  /** Provider checkpoint used to seed and preserve this sandbox's filesystem. */\n  readonly checkpointName?: string;\n  /** Persist a freshly provisioned provider id, or clear a stale one with `null`. */\n  setSandboxId(id: string | null): Promise<void>;\n  /** Clear all stored sandbox state (reattach id + materialization mark) on teardown. */\n  clear(): Promise<void>;\n}\n\n/**\n * Adapt a cloned `WorkspaceSandbox` to the minimal surface this module needs.\n * Lifecycle goes through the `_`-prefixed wrappers when present (they add\n * status tracking and concurrency safety on `MastraSandbox` subclasses),\n * falling back to the plain methods for interface-only implementations.\n */\nfunction toMaterializationSandbox(\n  sandbox: WorkspaceSandbox,\n  initialEnvironment: Record<string, string> = {},\n): MaterializationSandbox {\n  if (typeof sandbox.executeCommand !== 'function') {\n    throw new Error(\n      `Sandbox provider '${sandbox.provider}' does not implement executeCommand() — cannot materialize repos.`,\n    );\n  }\n  const lifecycle = sandbox as { _start?(): Promise<void>; _stop?(): Promise<void> };\n  const environment = { ...initialEnvironment };\n  return {\n    id: sandbox.id,\n    start: async () => {\n      await (lifecycle._start ?? sandbox.start)?.call(sandbox);\n    },\n    getInfo: async () => (await sandbox.getInfo?.()) ?? {},\n    executeCommand: (command, args, options) =>\n      sandbox.executeCommand!(command, args, {\n        ...options,\n        env: { ...environment, ...options?.env },\n      }),\n    setEnvironmentVariable: (name, value) => {\n      environment[name] = value;\n    },\n    stop: async () => {\n      await (lifecycle._stop ?? sandbox.stop)?.call(sandbox);\n    },\n  };\n}\n\n/**\n * The provider's reattach id for a started sandbox. For Railway this is the\n * underlying `railwaySandboxId` in `getInfo().metadata`. Providers without a\n * provider-native id (e.g. local) reattach by construction id, so fall back\n * to the sandbox's own logical id.\n */\nasync function readProviderSandboxId(sandbox: MaterializationSandbox): Promise<string | undefined> {\n  const info = await sandbox.getInfo();\n  const id = info.metadata?.railwaySandboxId ?? info.metadata?.sandboxId;\n  return typeof id === 'string' ? id : sandbox.id;\n}\n\n/** Keep each path piece a single safe segment (no separators or traversal). */\nfunction sanitizeSegment(segment: string): string {\n  const cleaned = segment.replace(/[^A-Za-z0-9._-]/g, '-').replace(/^\\.+/, '');\n  return cleaned || 'repo';\n}\n\n/** Resolve a workdir under `root`, refusing any path that escapes the configured root. */\nexport function resolveContainedLocalWorkdir(root: string, ...segments: string[]): string {\n  const resolvedRoot = path.resolve(root);\n  const resolved = path.resolve(resolvedRoot, ...segments);\n  if (resolved !== resolvedRoot && resolved.startsWith(`${resolvedRoot}${path.sep}`)) return resolved;\n  throw new Error(`Refusing to use local sandbox path outside configured root: ${resolved}`);\n}\n\n/**\n * Factory-resolved sandbox runtime the fleet is constructed with: the machine\n * projects clone their per-project sandboxes from, plus the knobs the factory\n * resolved around it.\n */\nexport interface SandboxFleetConfig {\n  /**\n   * Template machine (validated by the factory to implement `clone()`).\n   * Never started — acts purely as the credential/default holder that\n   * per-project sandboxes are cloned from.\n   */\n  machine: WorkspaceSandbox;\n  /** In-sandbox base directory repos check out under (no trailing slash). */\n  workdirBase: string;\n  /** Per-replica cap on concurrently provisioned sandboxes. 0 = unlimited. */\n  maxSandboxes?: number;\n}\n\n/**\n * The sandbox fleet for one deployment. Constructed once at boot — with a\n * config when a sandbox machine was configured, or without one when sandboxes\n * are disabled (every provisioning entry point then throws and\n * {@link enabled} reports `false` so features stay off).\n */\nexport class SandboxFleet {\n  readonly #config: SandboxFleetConfig | undefined;\n  #factory: SandboxFactory | undefined;\n  #liveCount = 0;\n\n  constructor(config?: SandboxFleetConfig) {\n    this.#config = config;\n  }\n\n  /**\n   * True when a sandbox machine was configured. The factory validates the\n   * machine implements `clone()` at boot, so a configured fleet is usable —\n   * sandbox-backed projects stay off only when the slot was omitted.\n   */\n  get enabled(): boolean {\n    return this.#config !== undefined;\n  }\n\n  /**\n   * Name of the active sandbox provider — the configured machine's `provider`\n   * discriminator (`'railway'`, `'local'`, …), or `'none'` when the fleet was\n   * constructed without a config. Diagnostic only; feature gating goes\n   * through {@link enabled}.\n   */\n  get provider(): string {\n    return this.#config?.machine.provider ?? 'none';\n  }\n\n  /**\n   * Idle teardown window for provisioned sandboxes, in minutes; defaults to 30.\n   * Read back from the machine's own config when it exposes one\n   * (Railway's `idleTimeoutMinutes`) — the knob lives on the sandbox, the\n   * fleet only needs it to schedule GC and stamp sandbox clones. Advisory:\n   * providers without idle GC ignore it, and a re-open detects a torn-down VM\n   * and re-provisions cleanly.\n   */\n  get idleMinutes(): number {\n    const machine = this.#config?.machine as { idleTimeoutMinutes?: unknown } | undefined;\n    const minutes = machine?.idleTimeoutMinutes;\n    return typeof minutes === 'number' && Number.isFinite(minutes) && minutes > 0 ? minutes : 30;\n  }\n\n  /**\n   * Per-replica cap on concurrently *provisioned* sandboxes. 0 means unlimited.\n   * This is a lightweight per-process budget to keep a single replica from\n   * exhausting provider quota — it is not a global, cross-replica scheduler\n   * (that is a deferred follow-up).\n   */\n  get maxSandboxes(): number {\n    return this.#config?.maxSandboxes ?? 0;\n  }\n\n  /**\n   * Count of sandboxes this fleet has freshly provisioned and not yet torn\n   * down. Reattaches to existing VMs do not count (they reuse an already-billed\n   * sandbox). Used to enforce {@link maxSandboxes}.\n   */\n  get liveCount(): number {\n    return this.#liveCount;\n  }\n\n  /** For tests: reset the live-sandbox counter to a known state. */\n  __resetLiveCount(value = 0): void {\n    this.#liveCount = value;\n  }\n\n  /** Override the sandbox factory (tests). */\n  setFactory(factory: SandboxFactory): void {\n    this.#factory = factory;\n  }\n\n  /** Reset to the default machine-cloning factory. */\n  resetFactory(): void {\n    this.#factory = undefined;\n  }\n\n  /**\n   * Compute the in-sandbox working directory for a repo: a nested\n   * `<base>/<owner>/<name>` layout under the factory-resolved checkout base.\n   * Nesting keeps same-name repos apart (`acme/api` vs `other/api`) — cloud\n   * sandboxes are one-per-project so it's merely tidy there, but local\n   * checkouts share one host root where it prevents collisions. Server-side\n   * only; never derived from client input.\n   */\n  computeWorkdir(repoFullName: string): string {\n    if (!this.#config) throw new Error('No sandbox configured');\n    const [owner, name] = repoFullName.split('/', 2);\n    return `${this.#config.workdirBase}/${sanitizeSegment(owner || 'unknown')}/${sanitizeSegment(name || 'repo')}`;\n  }\n\n  /**\n   * Compute the host working directory for a local GitHub session checkout.\n   * This is server-derived only: repo pieces are sanitized and the trusted\n   * session id is kept as a single path segment under the configured local root.\n   */\n  computeLocalSessionWorkdir(repoFullName: string, sessionId: string): string {\n    if (!this.#config) throw new Error('No sandbox configured');\n    if (this.#config.machine.provider !== 'local') {\n      throw new Error('Local session workdirs require the local sandbox provider');\n    }\n\n    const localRoot = (this.#config.machine as { workingDirectory?: unknown }).workingDirectory;\n    if (typeof localRoot !== 'string' || localRoot.length === 0) {\n      throw new Error('Local sandbox working directory is not configured');\n    }\n\n    const [owner, name] = repoFullName.split('/', 2);\n    return resolveContainedLocalWorkdir(\n      localRoot,\n      'github-sessions',\n      sanitizeSegment(owner || 'unknown'),\n      sanitizeSegment(name || 'repo'),\n      sanitizeSegment(sessionId),\n    );\n  }\n\n  /**\n   * Build a (not-yet-started) sandbox: the test-provided factory when set,\n   * otherwise a per-project clone of the configured machine. The stored id is\n   * passed both as the logical `id` (providers that reattach by construction\n   * id, e.g. local) and as the provider-native `sandboxId` hint (Railway) so\n   * reattach works across the provider matrix.\n   */\n  #build(opts: SandboxCreateOptions): MaterializationSandbox {\n    if (this.#factory) return this.#factory(opts);\n    if (!this.#config) throw new Error('No sandbox configured');\n    const clone = this.#config.machine.clone!({\n      ...(opts.providerSandboxId ? { id: opts.providerSandboxId, sandboxId: opts.providerSandboxId } : {}),\n      ...(opts.env ? { env: opts.env } : {}),\n      ...(opts.workingDirectory ? { workingDirectory: opts.workingDirectory } : {}),\n      ...(opts.idleTimeoutMinutes !== undefined ? { idleTimeoutMinutes: opts.idleTimeoutMinutes } : {}),\n      ...(opts.checkpointName ? { checkpointName: opts.checkpointName } : {}),\n    });\n    return toMaterializationSandbox(clone, opts.env);\n  }\n\n  /**\n   * Provision a new sandbox (persisting its provider id on first open) or\n   * reattach to the stored one. Returns a started, live sandbox.\n   */\n  async ensureSandbox(store: SandboxBindingStore, onProgress?: ProgressFn): Promise<MaterializationSandbox>;\n  async ensureSandbox(\n    store: SandboxBindingStore,\n    env?: Record<string, string>,\n    onProgress?: ProgressFn,\n    options?: EnsureSandboxOptions,\n  ): Promise<MaterializationSandbox>;\n  async ensureSandbox(\n    store: SandboxBindingStore,\n    envOrProgress?: Record<string, string> | ProgressFn,\n    progressOrOptions?: ProgressFn | EnsureSandboxOptions,\n    maybeOptions: EnsureSandboxOptions = {},\n  ): Promise<MaterializationSandbox> {\n    const env = typeof envOrProgress === 'function' ? undefined : envOrProgress;\n    const onProgress =\n      typeof envOrProgress === 'function' ? envOrProgress : (progressOrOptions as ProgressFn | undefined);\n    const options =\n      typeof envOrProgress === 'function'\n        ? ((progressOrOptions as EnsureSandboxOptions | undefined) ?? {})\n        : maybeOptions;\n    const idleTimeoutMinutes = this.idleMinutes;\n    const checkpointName = store.checkpointName;\n\n    // Reattach path: if we have a stored sandbox id, try to reattach. The VM may\n    // have been torn down by the provider's idle GC (or otherwise died), in which\n    // case `start()` fails. Recover by clearing the stale id and provisioning a\n    // fresh sandbox so the next open succeeds instead of being permanently wedged.\n    if (store.sandboxId) {\n      reportProgress(onProgress, { phase: 'reattaching', message: 'Reconnecting to your sandbox…' });\n      const reattached = this.#build({\n        providerSandboxId: store.sandboxId,\n        idleTimeoutMinutes,\n        ...(checkpointName ? { checkpointName } : {}),\n        ...(env ? { env } : {}),\n        ...(options.workingDirectory ? { workingDirectory: options.workingDirectory } : {}),\n      });\n      try {\n        await reattached.start();\n        return reattached;\n      } catch {\n        await store.setSandboxId(null);\n        // fall through to fresh provision below\n      }\n    }\n\n    // Fresh provision: enforce the per-replica budget before spending quota.\n    const max = this.maxSandboxes;\n    if (max > 0 && this.#liveCount >= max) {\n      throw new SandboxBudgetError(max);\n    }\n\n    reportProgress(onProgress, { phase: 'provisioning', message: 'Provisioning a new sandbox…' });\n    const sandbox = this.#build({\n      idleTimeoutMinutes,\n      ...(checkpointName ? { checkpointName } : {}),\n      ...(env ? { env } : {}),\n      ...(options.workingDirectory ? { workingDirectory: options.workingDirectory } : {}),\n    });\n    await sandbox.start();\n    this.#liveCount += 1;\n\n    const providerSandboxId = await readProviderSandboxId(sandbox);\n    if (providerSandboxId) {\n      await store.setSandboxId(providerSandboxId);\n    }\n\n    return sandbox;\n  }\n\n  /**\n   * Tear down a sandbox binding: stop the live VM (best-effort) and clear the\n   * persisted state through the binding store so the next open re-provisions\n   * cleanly. Decrements the per-replica live-sandbox counter.\n   *\n   * @param store   the binding to tear down\n   * @param sandbox an already-reattached live sandbox to stop, when available\n   */\n  async teardownSandbox(store: SandboxBindingStore, sandbox?: MaterializationSandbox): Promise<void> {\n    if (sandbox?.stop) {\n      try {\n        await sandbox.stop();\n      } catch {\n        // Best-effort: the VM may already be gone (idle GC). Still clear the binding.\n      }\n    }\n    if (store.sandboxId) {\n      if (this.#liveCount > 0) this.#liveCount -= 1;\n      await store.clear();\n    }\n  }\n\n  /**\n   * Reattach to an already-provisioned sandbox by its provider id and start it.\n   * Used by the workspace seam when opening a project that was already\n   * materialized (sandbox id + workdir carried on controller state), so no DB\n   * round-trip is needed.\n   */\n  async reattachSandbox(\n    providerSandboxId: string,\n    options: EnsureSandboxOptions = {},\n  ): Promise<MaterializationSandbox> {\n    const sandbox = this.#build({\n      providerSandboxId,\n      idleTimeoutMinutes: this.idleMinutes,\n      ...(options.workingDirectory ? { workingDirectory: options.workingDirectory } : {}),\n    });\n    await sandbox.start();\n    return sandbox;\n  }\n}\n"],"mappings":";AAmBA,SAAS,kBAAkB;;;ACA3B,OAAO,UAAU;AA2DV,SAAS,eAAe,YAAoC,OAA8B;AAC/F,MAAI,CAAC,WAAY;AACjB,MAAI;AACF,eAAW,KAAK;AAAA,EAClB,QAAQ;AAAA,EAER;AACF;;;AD1CA,SAAS,aAAa,KAA+B,SAA2D;AAC9G,SAAO;AAAA,IACL,WAAW,IAAI;AAAA,IACf,cAAc,QACZ,OAAO,OAAO,QAAQ,aAAa,EAAE,IAAI,IAAI,GAAG,CAAC,IAAI,QAAQ,aAAa,EAAE,IAAI,IAAI,IAAI,WAAW,GAAG,CAAC;AAAA,IACzG,OAAO,MAAM,QAAQ,aAAa,EAAE,IAAI,IAAI,GAAG,CAAC;AAAA,EAClD;AACF;AAMA,eAAsB,qBAAqB,SAMP;AAClC,QAAM,EAAE,OAAO,KAAK,SAAS,OAAO,WAAW,IAAI;AACnD,SAAO,MAAM,cAAc,aAAa,KAAK,OAAO,GAAG,EAAE,UAAU,MAAM,GAAG,UAAU;AACxF;AAUA,eAAsB,uBAAuB,SAK3B;AAChB,QAAM,EAAE,OAAO,KAAK,SAAS,QAAQ,IAAI;AACzC,SAAO,MAAM,gBAAgB,aAAa,KAAK,OAAO,GAAG,OAAO;AAClE;AASO,SAAS,WAAW,OAAuB;AAEhD,SAAO,MAAM,MAAM,MAAM,GAAG,EAAE,KAAK,OAAO,IAAI;AAChD;AAGA,eAAe,GAAG,SAAiC,QAA+C;AAChG,SAAO,QAAQ,eAAe,MAAM,CAAC,MAAM,MAAM,CAAC;AACpD;AAGO,IAAM,mBAAN,cAA+B,MAAM;AAAA,EAC1C,YACE,SACS,MAST;AACA,UAAM,OAAO;AAVJ;AAWT,SAAK,OAAO;AAAA,EACd;AAAA,EAZW;AAab;AAMA,SAAS,SAAS,cAAsB,OAAuB;AAC7D,SAAO,0BAA0B,KAAK,eAAe,YAAY;AACnE;AAEA,SAAS,SAAS,cAA8B;AAC9C,SAAO,sBAAsB,YAAY;AAC3C;AAcA,eAAsB,gBAAgB,SAWpB;AAChB,QAAM,EAAE,KAAK,YAAY,UAAU,SAAS,OAAO,SAAS,WAAW,IAAI;AAC3E,QAAM,UAAU,WAAW;AAC3B,QAAM,OAAO,SAAS;AAKtB,MAAI,CAAC,qBAAqB,KAAK,IAAI,GAAG;AACpC,UAAM,IAAI,iBAAiB,oDAAoD,IAAI,MAAM,cAAc;AAAA,EACzG;AACA,MAAI,CAAC,qBAAqB,KAAK,SAAS,aAAa,GAAG;AACtD,UAAM,IAAI;AAAA,MACR,oDAAoD,SAAS,aAAa;AAAA,MAC1E;AAAA,IACF;AAAA,EACF;AAGA,QAAM,aAAa,MAAM,GAAG,SAAS,eAAe;AACpD,MAAI,WAAW,aAAa,GAAG;AAC7B,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAU,SAAS,MAAM,KAAK;AAMpC,QAAM,sBAAsB,QAAQ,WAAW,cAAc,KAAM,MAAM,oBAAoB,SAAS,SAAS,IAAI;AAEnH,MAAI;AACF,QAAI,CAAC,qBAAqB;AAIxB,qBAAe,YAAY;AAAA,QACzB,OAAO;AAAA,QACP,SAAS,WAAW,IAAI;AAAA,MAC1B,CAAC;AACD,YAAM,QAAQ,MAAM;AAAA,QAClB;AAAA,QACA,gDAAgD,WAAW,SAAS,aAAa,CAAC,IAAI,WAAW,OAAO,CAAC,IAAI,WAAW,OAAO,CAAC;AAAA,MAClI;AACA,UAAI,MAAM,aAAa,GAAG;AACxB,cAAM,mBAAmB,OAAO,cAAc;AAAA,MAChD;AAAA,IACF,OAAO;AAEL,qBAAe,YAAY,EAAE,OAAO,WAAW,SAAS,YAAY,IAAI,+BAA0B,CAAC;AACnG,YAAM,SAAS,MAAM,GAAG,SAAS,UAAU,WAAW,OAAO,CAAC,0BAA0B,WAAW,OAAO,CAAC,EAAE;AAC7G,UAAI,OAAO,aAAa,GAAG;AACzB,cAAM,IAAI,iBAAiB,6BAA6B,OAAO,MAAM,IAAI,aAAa;AAAA,MACxF;AACA,YAAM,OAAO,MAAM,GAAG,SAAS,UAAU,WAAW,OAAO,CAAC,iBAAiB;AAC7E,UAAI,KAAK,aAAa,GAAG;AACvB,cAAM,mBAAmB,MAAM,aAAa;AAAA,MAC9C;AAAA,IACF;AAAA,EACF,UAAE;AAKA,UAAM,YAAY,SAAS,SAAS,MAAM,mBAAmB;AAAA,EAC/D;AAGA,iBAAe,YAAY,EAAE,OAAO,cAAc,SAAS,6BAAwB,CAAC;AACpF,QAAM,QAAQ,iBAAiB,EAAE,IAAI,WAAW,GAAG,CAAC;AACtD;AAGA,eAAsB,sBACpB,SACA,SACA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GACe;AACf,MAAI,CAAC,cAAc,MAAM,KAAK,CAAC,cAAc,UAAU,GAAG;AACxD,UAAM,IAAI,iBAAiB,6DAA6D,cAAc;AAAA,EACxG;AAEA,QAAM,UAAU,MAAM,GAAG,SAAS,UAAU,WAAW,OAAO,CAAC,wBAAwB;AACvF,MAAI,QAAQ,aAAa,KAAK,QAAQ,OAAO,KAAK,MAAM,OAAQ;AAEhE,QAAM,QAAQ,MAAM;AAAA,IAClB;AAAA,IACA,UAAU,WAAW,OAAO,CAAC,yCAAyC,WAAW,MAAM,CAAC;AAAA,EAC1F;AACA,MAAI,MAAM,aAAa,GAAG;AACxB,UAAM,WAAW,MAAM,GAAG,SAAS,UAAU,WAAW,OAAO,CAAC,aAAa,WAAW,MAAM,CAAC,EAAE;AACjG,QAAI,SAAS,aAAa,EAAG,OAAM,mBAAmB,UAAU,cAAc;AAC9E;AAAA,EACF;AAEA,QAAM,UAAU,SAAS,cAAc,KAAK;AAC5C,MAAI;AACF,UAAM,SAAS,MAAM,GAAG,SAAS,UAAU,WAAW,OAAO,CAAC,0BAA0B,WAAW,OAAO,CAAC,EAAE;AAC7G,QAAI,OAAO,aAAa,EAAG,OAAM,mBAAmB,QAAQ,aAAa;AACzE,UAAM,QAAQ,MAAM;AAAA,MAClB;AAAA,MACA,UAAU,WAAW,OAAO,CAAC,iBAAiB,WAAW,UAAU,CAAC,cAAc,WAAW,OAAO,CAAC,gBAAgB,WAAW,MAAM,CAAC;AAAA,IACzI;AACA,QAAI,MAAM,aAAa,EAAG,OAAM,mBAAmB,OAAO,cAAc;AAAA,EAC1E,UAAE;AACA,UAAM,GAAG,SAAS,UAAU,WAAW,OAAO,CAAC,0BAA0B,WAAW,SAAS,YAAY,CAAC,CAAC,EAAE;AAAA,EAC/G;AACF;AAOA,eAAe,oBACb,SACA,SACA,cACkB;AAClB,QAAM,SAAS,MAAM,GAAG,SAAS,UAAU,WAAW,OAAO,CAAC,wBAAwB;AACtF,MAAI,OAAO,aAAa,EAAG,QAAO;AAClC,QAAM,MAAM,OAAO,OAAO,KAAK,EAAE,YAAY;AAC7C,QAAM,SAAS,cAAc,aAAa,YAAY,CAAC;AACvD,SAAO,IAAI,SAAS,GAAG,MAAM,MAAM,KAAK,IAAI,SAAS,MAAM;AAC7D;AAQA,eAAe,YACb,SACA,SACA,cACA,cACe;AACf,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA,UAAU,WAAW,OAAO,CAAC,0BAA0B,WAAW,SAAS,YAAY,CAAC,CAAC;AAAA,EAC3F;AACA,MAAI,OAAO,aAAa,KAAK,cAAc;AACzC,UAAM,IAAI;AAAA,MACR,uDAAuD,OAAO,OAAO,KAAK,KAAK,OAAO,OAAO,KAAK,CAAC;AAAA,MACnG;AAAA,IACF;AAAA,EACF;AACF;AAMA,SAAS,mBACP,QACA,UACkB;AAClB,QAAM,SAAS,OAAO,UAAU;AAChC,MAAI,wFAAwF,KAAK,MAAM,GAAG;AACxG,WAAO,IAAI;AAAA,MACT;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,QAAM,OAAO,aAAa,iBAAiB,UAAU,aAAa,gBAAgB,SAAS;AAC3F,SAAO,IAAI,iBAAiB,OAAO,IAAI,YAAY,MAAM,IAAI,QAAQ;AACvE;AAgBO,SAAS,cAAc,OAAiC;AAC7D,SACE,OAAO,UAAU,YACjB,MAAM,SAAS,KACf,MAAM,UAAU;AAAA;AAAA,EAGhB,CAAC,MAAM,WAAW,GAAG,KACrB,qBAAqB,KAAK,KAAK;AAEnC;AAeO,SAAS,mBAAmB,UAAwD;AACzF,QAAM,SAAS,SAAS,SAAS,IAAI,KAAK;AAC1C,QAAM,QAAQ,SAAS,QAAQ,IAAI,KAAK,KAAK,SAAS;AACtD,QAAM,SACH,SAAS,SAAS,IAAI,KAAK,MAC3B,QAAQ,GAAG,KAAK,8BAA8B;AACjD,SAAO,EAAE,MAAM,MAAM;AACvB;AAMA,eAAsB,qBACpB,SACA,SACA,UACe;AACf,QAAM,EAAE,MAAM,MAAM,IAAI,mBAAmB,QAAQ;AACnD,QAAM,UAAU,MAAM,GAAG,SAAS,UAAU,WAAW,OAAO,CAAC,qBAAqB,WAAW,IAAI,CAAC,EAAE;AACtG,MAAI,QAAQ,aAAa,GAAG;AAC1B,UAAM,IAAI,iBAAiB,gCAAgC,QAAQ,OAAO,KAAK,CAAC,IAAI,eAAe;AAAA,EACrG;AACA,QAAM,WAAW,MAAM,GAAG,SAAS,UAAU,WAAW,OAAO,CAAC,sBAAsB,WAAW,KAAK,CAAC,EAAE;AACzG,MAAI,SAAS,aAAa,GAAG;AAC3B,UAAM,IAAI,iBAAiB,iCAAiC,SAAS,OAAO,KAAK,CAAC,IAAI,eAAe;AAAA,EACvG;AACF;AAYA,eAAsB,iBACpB,SACA,SACA,cACA,OACA,IACY;AACZ,MAAI,CAAC,qBAAqB,KAAK,YAAY,GAAG;AAC5C,UAAM,IAAI,iBAAiB,6CAA6C,YAAY,MAAM,aAAa;AAAA,EACzG;AAEA,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA,UAAU,WAAW,OAAO,CAAC,0BAA0B,WAAW,SAAS,cAAc,KAAK,CAAC,CAAC;AAAA,EAClG;AACA,MAAI,OAAO,aAAa,GAAG;AAEzB,UAAM,YAAY,SAAS,SAAS,cAAc,KAAK;AACvD,UAAM,IAAI,iBAAiB,6BAA6B,OAAO,OAAO,KAAK,CAAC,IAAI,aAAa;AAAA,EAC/F;AAEA,MAAI;AACF,WAAO,MAAM,GAAG;AAAA,EAClB,UAAE;AAIA,UAAM,YAAY,SAAS,SAAS,cAAc,IAAI;AAAA,EACxD;AACF;AAQA,eAAsB,WACpB,SACA,SACA,QACA,OACA,cACe;AACf,MAAI,CAAC,cAAc,MAAM,GAAG;AAC1B,UAAM,IAAI,iBAAiB,0CAA0C,MAAM,MAAM,aAAa;AAAA,EAChG;AAEA,QAAM,iBAAiB,SAAS,SAAS,cAAc,OAAO,YAAY;AACxE,UAAM,OAAO,MAAM,GAAG,SAAS,UAAU,WAAW,OAAO,CAAC,mBAAmB,WAAW,MAAM,CAAC,EAAE;AACnG,QAAI,KAAK,aAAa,GAAG;AACvB,YAAM,mBAAmB,MAAM,aAAa;AAAA,IAC9C;AAAA,EACF,CAAC;AACH;AAkBA,eAAsB,UACpB,SACA,SACA,SACA,UACuB;AACvB,QAAM,qBAAqB,SAAS,SAAS,QAAQ;AAErD,QAAM,MAAM,MAAM,GAAG,SAAS,UAAU,WAAW,OAAO,CAAC,SAAS;AACpE,MAAI,IAAI,aAAa,GAAG;AACtB,UAAM,IAAI,iBAAiB,mBAAmB,IAAI,OAAO,KAAK,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,eAAe;AAAA,EACzG;AAIA,QAAM,SAAS,MAAM,GAAG,SAAS,UAAU,WAAW,OAAO,CAAC,wBAAwB;AACtF,MAAI,OAAO,aAAa,GAAG;AACzB,WAAO,EAAE,WAAW,MAAM;AAAA,EAC5B;AAEA,QAAM,SAAS,MAAM,GAAG,SAAS,UAAU,WAAW,OAAO,CAAC,cAAc,WAAW,OAAO,CAAC,EAAE;AACjG,MAAI,OAAO,aAAa,GAAG;AACzB,UAAM,IAAI,iBAAiB,sBAAsB,OAAO,OAAO,KAAK,KAAK,OAAO,OAAO,KAAK,CAAC,IAAI,eAAe;AAAA,EAClH;AAEA,SAAO,EAAE,WAAW,KAAK;AAC3B;AAWO,IAAM,gBAAN,cAA4B,MAAM;AAAA,EACvC,YACE,SACS,MACT;AACA,UAAM,OAAO;AAFJ;AAGT,SAAK,OAAO;AAAA,EACd;AAAA,EAJW;AAKb;AAYO,SAAS,cAAc,QAAwB;AACpD,QAAM,YACJ,OACG,QAAQ,qBAAqB,GAAG,EAChC,QAAQ,QAAQ,GAAG,EACnB,QAAQ,kBAAkB,EAAE,EAC5B,MAAM,GAAG,GAAG,KAAK;AACtB,MAAI,cAAc,OAAQ,QAAO;AACjC,QAAM,OAAO,WAAW,QAAQ,EAAE,OAAO,MAAM,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,CAAC;AACzE,SAAO,GAAG,SAAS,IAAI,IAAI;AAC7B;AAOO,SAAS,oBAAoB,aAAqB,QAAwB;AAC/E,QAAM,SAAS,YAAY,QAAQ,QAAQ,EAAE,EAAE,MAAM,GAAG,EAAE,MAAM,GAAG,EAAE,EAAE,KAAK,GAAG,KAAK;AACpF,SAAO,GAAG,MAAM,cAAc,cAAc,MAAM,CAAC;AACrD;AAwBA,eAAsB,eACpB,SACA,aACA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAC+B;AAC/B,MAAI,CAAC,cAAc,MAAM,GAAG;AAC1B,UAAM,IAAI,cAAc,wBAAwB,MAAM,MAAM,gBAAgB;AAAA,EAC9E;AACA,MAAI,CAAC,cAAc,UAAU,GAAG;AAC9B,UAAM,IAAI,cAAc,6BAA6B,UAAU,MAAM,gBAAgB;AAAA,EACvF;AAEA,QAAM,eAAe,oBAAoB,aAAa,MAAM;AAI5D,QAAM,SAAS,MAAM,GAAG,SAAS,WAAW,WAAW,GAAG,YAAY,OAAO,CAAC,EAAE;AAChF,MAAI,OAAO,aAAa,GAAG;AACzB,WAAO,EAAE,cAAc,QAAQ,YAAY,QAAQ,KAAK;AAAA,EAC1D;AAOA,QAAM,UAAU,UAAU,UAAU;AACpC,QAAM,iBAAiB,SAAS,aAAa,cAAc,OAAO,YAAY;AAC5E,UAAM,QAAQ,MAAM;AAAA,MAClB;AAAA,MACA,UAAU,WAAW,WAAW,CAAC,iBAAiB,WAAW,eAAe,UAAU,iBAAiB,OAAO,EAAE,CAAC;AAAA,IACnH;AACA,QAAI,MAAM,aAAa,GAAG;AACxB,YAAM,mBAAmB,OAAO,aAAa;AAAA,IAC/C;AAAA,EACF,CAAC;AAQD,QAAM,MAAM,MAAM;AAAA,IAChB;AAAA,IACA,UAAU,WAAW,WAAW,CAAC,+BAA+B,WAAW,MAAM,CAAC,IAAI,WAAW,YAAY,CAAC,IAAI,WAAW,OAAO,CAAC;AAAA,EACvI;AACA,MAAI,IAAI,aAAa,GAAG;AACtB,UAAM,IAAI,cAAc,4BAA4B,IAAI,OAAO,KAAK,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,iBAAiB;AAAA,EACjH;AAEA,SAAO,EAAE,cAAc,QAAQ,YAAY,QAAQ,MAAM;AAC3D;AAsBA,eAAsB,iBACpB,SACA,cACA,SACe;AACf,QAAM,SAAS,MAAM,GAAG,SAAS,MAAM,WAAW,YAAY,CAAC,SAAS,OAAO;AAAA,EAAK;AACpF,MAAI,OAAO,aAAa,GAAG;AACzB,UAAM,UAAU,OAAO,OAAO,KAAK,KAAK,OAAO,OAAO,KAAK,GAAG,MAAM,IAAK;AACzE,UAAM,IAAI,cAAc,8BAA8B,OAAO,QAAQ,MAAM,MAAM,IAAI,cAAc;AAAA,EACrG;AACF;AAaA,eAAsB,eACpB,SACA,aACA,EAAE,QAAQ,aAAa,GACR;AACf,MAAI,CAAC,cAAc,MAAM,GAAG;AAC1B,UAAM,IAAI,cAAc,wBAAwB,MAAM,MAAM,gBAAgB;AAAA,EAC9E;AAEA,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA,UAAU,WAAW,WAAW,CAAC,4BAA4B,WAAW,YAAY,CAAC;AAAA,EACvF;AACA,MAAI,OAAO,aAAa,GAAG;AAIzB,UAAM,GAAG,SAAS,UAAU,WAAW,WAAW,CAAC,iBAAiB;AACpE,UAAM,SAAS,MAAM,GAAG,SAAS,WAAW,WAAW,YAAY,CAAC,EAAE;AACtE,QAAI,OAAO,aAAa,GAAG;AACzB,YAAM,IAAI;AAAA,QACR,+BAA+B,OAAO,OAAO,KAAK,KAAK,OAAO,OAAO,KAAK,CAAC;AAAA,QAC3E;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAIA,QAAM,GAAG,SAAS,UAAU,WAAW,WAAW,CAAC,cAAc,WAAW,MAAM,CAAC,EAAE;AACvF;AAmCA,eAAe,kBAAkB,SAAgD;AAC/E,QAAM,UAAU,MAAM,GAAG,SAAS,cAAc;AAChD,MAAI,QAAQ,aAAa,GAAG;AAC1B,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAGA,SAAS,oBAAoB,QAAoC;AAC/D,QAAM,QAAQ,OAAO,MAAM,0CAA0C;AACrE,SAAO,QAAQ,CAAC;AAClB;AAWA,eAAsB,kBACpB,SACA,SACA,EAAE,OAAO,MAAM,MAAM,OAAO,KAAK,GACC;AAClC,MAAI,CAAC,cAAc,IAAI,GAAG;AACxB,UAAM,IAAI,iBAAiB,6CAA6C,IAAI,MAAM,WAAW;AAAA,EAC/F;AACA,MAAI,CAAC,cAAc,IAAI,GAAG;AACxB,UAAM,IAAI,iBAAiB,6CAA6C,IAAI,MAAM,WAAW;AAAA,EAC/F;AAEA,QAAM,kBAAkB,OAAO;AAK/B,QAAM,YAAY;AAAA,IAChB,YAAY,WAAW,KAAK,CAAC;AAAA,IAC7B,UAAU,WAAW,IAAI,CAAC;AAAA,IAC1B,UAAU,WAAW,IAAI,CAAC;AAAA,IAC1B,WAAW,WAAW,KAAK,CAAC;AAAA,IAC5B,UAAU,WAAW,QAAQ,EAAE,CAAC;AAAA,EAClC,EAAE,KAAK,GAAG;AACV,QAAM,SAAS,MAAM,WAAW,OAAO,CAAC,OAAO,SAAS;AAExD,QAAM,SAAS,MAAM,GAAG,SAAS,MAAM;AACvC,MAAI,OAAO,aAAa,GAAG;AACzB,UAAM,aAAa,mBAAmB,QAAQ,aAAa;AAC3D,QAAI,WAAW,SAAS,kBAAkB;AACxC,YAAM;AAAA,IACR;AACA,UAAM,IAAI,iBAAiB,wBAAwB,OAAO,OAAO,KAAK,KAAK,OAAO,OAAO,KAAK,CAAC,IAAI,WAAW;AAAA,EAChH;AAEA,QAAM,MAAM,oBAAoB,OAAO,MAAM;AAC7C,MAAI,CAAC,KAAK;AACR,UAAM,IAAI;AAAA,MACR,iEAAiE,OAAO,OAAO,KAAK,CAAC;AAAA,MACrF;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,IAAI;AACf;","names":[]}
+{"version":3,"sources":["../../../src/integrations/github/sandbox.ts","../../../src/sandbox/fleet.ts"],"sourcesContent":["/**\n * Repo materialization for GitHub-backed repositories.\n *\n * A GitHub repo is never cloned onto the server host. Instead each project gets\n * its own isolated sandbox (provisioned by the fleet in `../sandbox/fleet`) and\n * the repo is cloned *inside* that sandbox. The agent's file tools and command\n * tools then operate entirely against the remote checkout.\n *\n * - `ensureProjectSandbox(row)` / `teardownProjectSandbox(row)` bind the fleet's\n *   provision/reattach/teardown lifecycle to the per-(project,user) sandbox row.\n * - `materializeRepo(row, token)` runs `git clone` (first open) or `git pull`\n *   (re-open) inside the sandbox, using a short-lived installation token that is\n *   scrubbed from the git remote afterwards so it never persists in the VM.\n *\n * This module owns everything git/GitHub: clone/pull, commit/push, worktrees,\n * and `gh pr create`. Sandbox provisioning, budgets, and workdir layout live in\n * the fleet module.\n */\n\nimport { createHash } from 'node:crypto';\nimport { reportProgress } from '../../sandbox/fleet.js';\nimport type {\n  MaterializationSandbox,\n  ProgressFn,\n  SandboxBindingStore,\n  SandboxCommandResult,\n  SandboxFleet,\n} from '../../sandbox/fleet.js';\nimport type {\n  ProjectRepositorySandbox,\n  SourceControlStorageHandle,\n} from '../../storage/domains/source-control/base.js';\n\ntype SourceControlSandboxStorage = SourceControlStorageHandle['sandboxes'];\ntype MaterializationStore = Pick<SourceControlSandboxStorage, 'markMaterialized'>;\n\ninterface RepoMaterializationBinding {\n  id: string;\n  sandboxWorkdir: string;\n  materializedAt: Date | null;\n}\n\n/** Adapt a per-(project,user) sandbox binding row to the fleet's persistence seam. */\nfunction bindingStore(row: ProjectRepositorySandbox, storage: SourceControlSandboxStorage): SandboxBindingStore {\n  return {\n    sandboxId: row.sandboxId,\n    setSandboxId: id =>\n      id === null ? storage.clearBinding({ id: row.id }) : storage.setSandboxId({ id: row.id, sandboxId: id }),\n    clear: () => storage.clearBinding({ id: row.id }),\n  };\n}\n\n/**\n * Provision a new sandbox (persisting its provider id on first open) or\n * reattach to the stored one. Returns a started, live sandbox.\n */\nexport async function ensureProjectSandbox(options: {\n  fleet: SandboxFleet;\n  row: ProjectRepositorySandbox;\n  storage: SourceControlSandboxStorage;\n  token: string;\n  onProgress?: ProgressFn;\n}): Promise<MaterializationSandbox> {\n  const { fleet, row, storage, token, onProgress } = options;\n  return fleet.ensureSandbox(bindingStore(row, storage), { GH_TOKEN: token }, onProgress);\n}\n\n/**\n * Tear down a user's sandbox for a project: stop the live VM (best-effort) and\n * clear the persisted `sandboxId`/`materializedAt` on the per-(project,user)\n * binding row so the next open re-provisions cleanly.\n *\n * @param row     the per-(project,user) sandbox binding to tear down\n * @param sandbox an already-reattached live sandbox to stop, when available\n */\nexport async function teardownProjectSandbox(options: {\n  fleet: SandboxFleet;\n  row: ProjectRepositorySandbox;\n  storage: SourceControlSandboxStorage;\n  sandbox?: MaterializationSandbox;\n}): Promise<void> {\n  const { fleet, row, storage, sandbox } = options;\n  return fleet.teardownSandbox(bindingStore(row, storage), sandbox);\n}\n\n/**\n * Single-quote a string for safe POSIX shell interpolation. Wraps the value in\n * single quotes and escapes any embedded single quote using the canonical\n * close-quote / escaped-quote / reopen-quote sequence (`'\\''`). This is the\n * standard POSIX-safe construction and prevents the quoted string from being\n * terminated early.\n */\nexport function shellQuote(value: string): string {\n  // Replace each ' with the four-character sequence: ' \\ ' '\n  return `'` + value.split(`'`).join(`'\\\\''`) + `'`;\n}\n\n/**\n * Default hang guard for sandbox shell commands. Generous by design — large\n * clones and dependency installs legitimately take minutes; the guard exists\n * so a wedged sandbox surfaces a failure instead of hanging the request that\n * triggered materialization forever.\n */\nconst DEFAULT_COMMAND_TIMEOUT_MS = 15 * 60_000;\n/** Branch checkout only fetches one ref — a much tighter budget applies. */\nexport const CHECKOUT_COMMAND_TIMEOUT_MS = 5 * 60_000;\n\ninterface ShOptions {\n  /** Override the hang-guard budget for this command. */\n  timeoutMs?: number;\n  /** Human-readable phase name included in the timeout error. */\n  phase?: string;\n}\n\n/** Run a shell script in the sandbox via `sh -c`, bounded by a hang guard. */\nasync function sh(\n  sandbox: MaterializationSandbox,\n  script: string,\n  options: ShOptions = {},\n): Promise<SandboxCommandResult> {\n  const timeoutMs = options.timeoutMs ?? DEFAULT_COMMAND_TIMEOUT_MS;\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  const hangGuard = new Promise<never>((_, reject) => {\n    timer = setTimeout(() => {\n      const phase = options.phase ? ` during ${options.phase}` : '';\n      reject(new Error(`Sandbox command timed out after ${Math.round(timeoutMs / 1000)}s${phase}.`));\n    }, timeoutMs);\n    timer.unref?.();\n  });\n  try {\n    // Forward the budget to the provider too so it can terminate the wedged\n    // process; the race stays as the outer guard for providers that ignore it.\n    return await Promise.race([sandbox.executeCommand('sh', ['-c', script], { timeout: timeoutMs }), hangGuard]);\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\n/** Error raised when the sandbox cannot materialize the repo (actionable). */\nexport class MaterializeError extends Error {\n  constructor(\n    message: string,\n    readonly code:\n      | 'git-missing'\n      | 'egress-blocked'\n      | 'clone-failed'\n      | 'pull-failed'\n      | 'push-failed'\n      | 'commit-failed'\n      | 'gh-missing'\n      | 'pr-failed',\n  ) {\n    super(message);\n    this.name = 'MaterializeError';\n  }\n}\n\n/**\n * Build the token-auth clone/pull URL for a repo. The token lives only inside\n * this URL and is scrubbed from the remote after the operation.\n */\nfunction tokenUrl(repoFullName: string, token: string): string {\n  return `https://x-access-token:${token}@github.com/${repoFullName}.git`;\n}\n\nfunction cleanUrl(repoFullName: string): string {\n  return `https://github.com/${repoFullName}.git`;\n}\n\n/** Repo metadata needed to materialize, read from the org-owned project row. */\nexport interface RepoMaterializeInfo {\n  repoFullName: string;\n  defaultBranch: string;\n}\n\n/**\n * Materialize the repo inside the user's sandbox. Clones on first open, pulls on\n * re-open. Always scrubs the install token from the remote afterwards and sets\n * `materialized_at` on the per-user sandbox binding row.\n *\n */\nexport async function materializeRepo(options: {\n  /** The per-(project,user) sandbox binding (provisioned via `ensureProjectSandbox`). */\n  row: RepoMaterializationBinding;\n  /** Repo metadata from the org-owned project row. */\n  repoInfo: RepoMaterializeInfo;\n  /** The live sandbox to run git inside. */\n  sandbox: MaterializationSandbox;\n  /** A freshly minted, short-lived installation access token. */\n  token: string;\n  storage: MaterializationStore;\n  onProgress?: ProgressFn;\n}): Promise<void> {\n  const { row: sandboxRow, repoInfo, sandbox, token, storage, onProgress } = options;\n  const workdir = sandboxRow.sandboxWorkdir;\n  const repo = repoInfo.repoFullName;\n\n  // 0. Defense in depth: never build a git command from values that aren't\n  // strictly shaped, even if a malformed row reached the DB. Inputs are also\n  // validated at the route boundary before storage.\n  if (!/^[\\w.-]+\\/[\\w.-]+$/.test(repo)) {\n    throw new MaterializeError(`Refusing to materialize: invalid repo full name '${repo}'.`, 'clone-failed');\n  }\n  if (!/^[A-Za-z0-9_./-]+$/.test(repoInfo.defaultBranch)) {\n    throw new MaterializeError(\n      `Refusing to materialize: invalid default branch '${repoInfo.defaultBranch}'.`,\n      'clone-failed',\n    );\n  }\n\n  // 1. Preflight: git must be installed in the sandbox template.\n  const gitVersion = await sh(sandbox, 'git --version');\n  if (gitVersion.exitCode !== 0) {\n    throw new MaterializeError(\n      'git is not installed in the sandbox. The sandbox template must include git.',\n      'git-missing',\n    );\n  }\n\n  const authUrl = tokenUrl(repo, token);\n\n  // The DB's `materializedAt` can drift from disk in both directions: a fresh\n  // binding row over an already-populated workdir (local dev DB resets,\n  // repaired rows, earlier flows) must pull instead of failing `git clone` on\n  // the non-empty directory, and a stale `materializedAt` over an empty\n  // sandbox (an expired/recreated VM whose disk was wiped) must re-clone\n  // instead of running `git -C <workdir>` against a directory that no longer\n  // exists. Disk is the source of truth: detect the checkout instead of\n  // trusting the row.\n  const alreadyMaterialized = await hasExistingCheckout(sandbox, workdir, repo);\n\n  let succeeded = false;\n  try {\n    if (!alreadyMaterialized) {\n      // 2a. First open: shallow-clone the default branch into the workdir. A\n      // shallow single-branch clone is dramatically faster for large repos; the\n      // later re-open uses `git pull --ff-only`, which works on shallow clones.\n      reportProgress(onProgress, {\n        phase: 'cloning',\n        message: `Cloning ${repo} (first open can take a minute)…`,\n      });\n      const clone = await sh(\n        sandbox,\n        `git clone --depth=1 --single-branch --branch ${shellQuote(repoInfo.defaultBranch)} ${shellQuote(authUrl)} ${shellQuote(workdir)}`,\n        { phase: 'repository clone' },\n      );\n      if (clone.exitCode !== 0) {\n        throw classifyGitFailure(clone, 'clone-failed');\n      }\n    } else {\n      // 2b. Re-open: refresh remote to the token URL and fast-forward pull.\n      reportProgress(onProgress, { phase: 'pulling', message: `Updating ${repo} to the latest changes…` });\n      const setUrl = await sh(sandbox, `git -C ${shellQuote(workdir)} remote set-url origin ${shellQuote(authUrl)}`);\n      if (setUrl.exitCode !== 0) {\n        throw new MaterializeError(`Failed to set git remote: ${setUrl.stderr}`, 'pull-failed');\n      }\n      const pull = await sh(sandbox, `git -C ${shellQuote(workdir)} pull --ff-only`, { phase: 'repository pull' });\n      if (pull.exitCode !== 0) {\n        throw classifyGitFailure(pull, 'pull-failed');\n      }\n    }\n    succeeded = true;\n  } finally {\n    // 3. Always scrub the token from the remote so it isn't left in the VM's\n    // git config, even when the clone/pull above failed partway through. This\n    // is best-effort on the failure path (the workdir may not even exist, and\n    // a scrub error must never mask the primary failure); on the success path\n    // the scrub must succeed or we surface it.\n    await scrubRemote(sandbox, workdir, repo, succeeded);\n  }\n\n  // 4. Mark materialized.\n  reportProgress(onProgress, { phase: 'finalizing', message: 'Finalizing workspace…' });\n  await storage.markMaterialized({ id: sandboxRow.id });\n}\n\n/** Check out a session's branch inside its isolated repository clone. */\nexport async function checkoutSessionBranch(\n  sandbox: MaterializationSandbox,\n  workdir: string,\n  {\n    branch,\n    baseBranch,\n    token,\n    repoFullName,\n  }: { branch: string; baseBranch: string; token: string; repoFullName: string },\n): Promise<void> {\n  if (!isValidGitRef(branch) || !isValidGitRef(baseBranch)) {\n    throw new MaterializeError('Refusing to create a session from an invalid branch name.', 'clone-failed');\n  }\n\n  const current = await sh(sandbox, `git -C ${shellQuote(workdir)} branch --show-current`);\n  if (current.exitCode === 0 && current.stdout.trim() === branch) return;\n\n  const local = await sh(\n    sandbox,\n    `git -C ${shellQuote(workdir)} show-ref --verify --quiet refs/heads/${shellQuote(branch)}`,\n  );\n  if (local.exitCode === 0) {\n    const checkout = await sh(sandbox, `git -C ${shellQuote(workdir)} checkout ${shellQuote(branch)}`);\n    if (checkout.exitCode !== 0) throw classifyGitFailure(checkout, 'clone-failed');\n    return;\n  }\n\n  const authUrl = tokenUrl(repoFullName, token);\n  try {\n    const setUrl = await sh(sandbox, `git -C ${shellQuote(workdir)} remote set-url origin ${shellQuote(authUrl)}`);\n    if (setUrl.exitCode !== 0) throw classifyGitFailure(setUrl, 'pull-failed');\n    const fetch = await sh(\n      sandbox,\n      `git -C ${shellQuote(workdir)} fetch origin ${shellQuote(baseBranch)} && git -C ${shellQuote(workdir)} checkout -b ${shellQuote(branch)} FETCH_HEAD`,\n      { timeoutMs: CHECKOUT_COMMAND_TIMEOUT_MS, phase: 'branch checkout' },\n    );\n    if (fetch.exitCode !== 0) throw classifyGitFailure(fetch, 'clone-failed');\n  } finally {\n    await sh(sandbox, `git -C ${shellQuote(workdir)} remote set-url origin ${shellQuote(cleanUrl(repoFullName))}`);\n  }\n}\n\n/**\n * True when the workdir already holds a git checkout whose `origin` points at\n * this exact repo. Matches both the clean and token-auth URL forms; any other\n * remote (or no git dir at all) falls back to the clone path.\n */\nasync function hasExistingCheckout(\n  sandbox: MaterializationSandbox,\n  workdir: string,\n  repoFullName: string,\n): Promise<boolean> {\n  const result = await sh(sandbox, `git -C ${shellQuote(workdir)} remote get-url origin`);\n  if (result.exitCode !== 0) return false;\n  const url = result.stdout.trim().toLowerCase();\n  const suffix = `github.com/${repoFullName.toLowerCase()}`;\n  return url.endsWith(`${suffix}.git`) || url.endsWith(suffix);\n}\n\n/**\n * Reset the git remote back to the tokenless URL. On a successful clone/pull the\n * workdir always has a `.git`, so a non-zero exit code here means the token may\n * still be persisted — surface it. On the failure path the workdir may not exist\n * (e.g. a failed clone), so a non-zero exit is tolerated — and never masks the\n * primary failure being thrown through the `finally`.\n */\nasync function scrubRemote(\n  sandbox: MaterializationSandbox,\n  workdir: string,\n  repoFullName: string,\n  expectGitDir: boolean,\n): Promise<void> {\n  const result = await sh(\n    sandbox,\n    `git -C ${shellQuote(workdir)} remote set-url origin ${shellQuote(cleanUrl(repoFullName))}`,\n  );\n  if (result.exitCode !== 0 && expectGitDir) {\n    throw new MaterializeError(\n      `Failed to scrub installation token from git remote: ${result.stderr.trim() || result.stdout.trim()}`,\n      'pull-failed',\n    );\n  }\n}\n\n/**\n * Turn a failed git command into an actionable error, detecting the common\n * \"cannot reach github.com\" egress failure.\n */\nfunction classifyGitFailure(\n  result: SandboxCommandResult,\n  fallback: 'clone-failed' | 'pull-failed' | 'push-failed',\n): MaterializeError {\n  const stderr = result.stderr || '';\n  if (/could not resolve host|failed to connect|network is unreachable|Connection timed out/i.test(stderr)) {\n    return new MaterializeError(\n      'The sandbox could not reach github.com. The sandbox network must allow outbound egress to github.com.',\n      'egress-blocked',\n    );\n  }\n  const verb = fallback === 'clone-failed' ? 'clone' : fallback === 'pull-failed' ? 'pull' : 'push';\n  return new MaterializeError(`git ${verb} failed: ${stderr}`, fallback);\n}\n\n// ---------------------------------------------------------------------------\n// Phase 1 — git identity + token-scoped push primitive\n//\n// These helpers let the sandbox author and push commits safely. The install\n// token is short-lived, minted per-operation server-side, injected only into\n// the temporary remote URL inside the sandbox, and always scrubbed in a\n// `finally` so it never persists in `.git/config`.\n// ---------------------------------------------------------------------------\n\n/**\n * Validate a git ref (branch) name. Server-side defense-in-depth: only allow a\n * conservative character set so a branch can never be built into a shell\n * command in a way that escapes quoting. Mirrors the route-layer check.\n */\nexport function isValidGitRef(value: unknown): value is string {\n  return (\n    typeof value === 'string' &&\n    value.length > 0 &&\n    value.length <= 255 &&\n    // Reject leading-dash refs (e.g. `--mirror`) so the value can never be\n    // parsed as a git option when interpolated into a command.\n    !value.startsWith('-') &&\n    /^[A-Za-z0-9_./-]+$/.test(value)\n  );\n}\n\n/** Identity used to author commits inside the sandbox. */\nexport interface GitIdentity {\n  name?: string | null;\n  email?: string | null;\n  /** GitHub login, used to derive a stable noreply identity when name/email are absent. */\n  login?: string | null;\n}\n\n/**\n * Resolve a concrete `{ name, email }` for git authorship from a possibly-sparse\n * identity. Falls back to a GitHub-style noreply identity so commits are never\n * authored with an empty or host-derived identity.\n */\nexport function resolveGitIdentity(identity: GitIdentity): { name: string; email: string } {\n  const login = (identity.login || '').trim();\n  const name = (identity.name || '').trim() || login || 'Mastra Code';\n  const email =\n    (identity.email || '').trim() ||\n    (login ? `${login}@users.noreply.github.com` : 'mastra-code@users.noreply.github.com');\n  return { name, email };\n}\n\n/**\n * Configure `user.name` / `user.email` for the given repo working tree inside\n * the sandbox so commits are authored correctly. Values are shell-quoted.\n */\nexport async function configureGitIdentity(\n  sandbox: MaterializationSandbox,\n  workdir: string,\n  identity: GitIdentity,\n): Promise<void> {\n  const { name, email } = resolveGitIdentity(identity);\n  const setName = await sh(sandbox, `git -C ${shellQuote(workdir)} config user.name ${shellQuote(name)}`);\n  if (setName.exitCode !== 0) {\n    throw new MaterializeError(`Failed to set git user.name: ${setName.stderr.trim()}`, 'commit-failed');\n  }\n  const setEmail = await sh(sandbox, `git -C ${shellQuote(workdir)} config user.email ${shellQuote(email)}`);\n  if (setEmail.exitCode !== 0) {\n    throw new MaterializeError(`Failed to set git user.email: ${setEmail.stderr.trim()}`, 'commit-failed');\n  }\n}\n\n/**\n * Temporarily rewrite `origin` to a tokenized URL, run `fn` (e.g. a push), and\n * **always** scrub the remote back to the tokenless URL in a `finally`. The\n * token therefore only ever lives in the remote URL for the duration of the\n * operation and is never left in the VM's git config.\n *\n * On the success path the scrub must succeed (a leaked token is a hard error);\n * if it fails we surface it. On the failure path the scrub is best-effort but\n * still attempted, and the original operation error is rethrown.\n */\nexport async function withInstallToken<T>(\n  sandbox: MaterializationSandbox,\n  workdir: string,\n  repoFullName: string,\n  token: string,\n  fn: () => Promise<T>,\n): Promise<T> {\n  if (!/^[\\w.-]+\\/[\\w.-]+$/.test(repoFullName)) {\n    throw new MaterializeError(`Refusing to push: invalid repo full name '${repoFullName}'.`, 'push-failed');\n  }\n\n  const setUrl = await sh(\n    sandbox,\n    `git -C ${shellQuote(workdir)} remote set-url origin ${shellQuote(tokenUrl(repoFullName, token))}`,\n  );\n  if (setUrl.exitCode !== 0) {\n    // Best-effort scrub even though set-url failed, then surface the failure.\n    await scrubRemote(sandbox, workdir, repoFullName, false);\n    throw new MaterializeError(`Failed to set git remote: ${setUrl.stderr.trim()}`, 'push-failed');\n  }\n\n  try {\n    return await fn();\n  } finally {\n    // Always restore the tokenless remote. The workdir has a `.git` (we just\n    // rewrote its remote) so a scrub failure means the token may still persist\n    // — surface it.\n    await scrubRemote(sandbox, workdir, repoFullName, true);\n  }\n}\n\n/**\n * Push a branch back to GitHub from inside the sandbox using a short-lived\n * installation token. The branch is ref-validated, the token is injected only\n * into the remote URL via `withInstallToken`, and egress failures are\n * classified into actionable errors.\n */\nexport async function pushBranch(\n  sandbox: MaterializationSandbox,\n  workdir: string,\n  branch: string,\n  token: string,\n  repoFullName: string,\n): Promise<void> {\n  if (!isValidGitRef(branch)) {\n    throw new MaterializeError(`Refusing to push: invalid branch name '${branch}'.`, 'push-failed');\n  }\n\n  await withInstallToken(sandbox, workdir, repoFullName, token, async () => {\n    const push = await sh(sandbox, `git -C ${shellQuote(workdir)} push -u origin ${shellQuote(branch)}`);\n    if (push.exitCode !== 0) {\n      throw classifyGitFailure(push, 'push-failed');\n    }\n  });\n}\n\nexport interface CommitResult {\n  /** True when a commit was created; false when there was nothing to commit. */\n  committed: boolean;\n}\n\n/**\n * Stage every change in the working tree and create a commit inside the\n * sandbox. The git identity is configured first so authorship is correct. When\n * there is nothing to commit this is a no-op (`committed: false`) rather than an\n * error, so callers can safely commit-then-push without first diffing.\n *\n * @param sandbox  the live sandbox containing the checkout\n * @param workdir  the worktree (or repo) path to commit in\n * @param message  the commit message (quoted; arbitrary text is safe)\n * @param identity authorship identity for the commit\n */\nexport async function commitAll(\n  sandbox: MaterializationSandbox,\n  workdir: string,\n  message: string,\n  identity: GitIdentity,\n): Promise<CommitResult> {\n  await configureGitIdentity(sandbox, workdir, identity);\n\n  const add = await sh(sandbox, `git -C ${shellQuote(workdir)} add -A`);\n  if (add.exitCode !== 0) {\n    throw new MaterializeError(`git add failed: ${add.stderr.trim() || add.stdout.trim()}`, 'commit-failed');\n  }\n\n  // Nothing staged → nothing to commit. `git diff --cached --quiet` exits 1 when\n  // there are staged changes, 0 when the index is clean.\n  const staged = await sh(sandbox, `git -C ${shellQuote(workdir)} diff --cached --quiet`);\n  if (staged.exitCode === 0) {\n    return { committed: false };\n  }\n\n  const commit = await sh(sandbox, `git -C ${shellQuote(workdir)} commit -m ${shellQuote(message)}`);\n  if (commit.exitCode !== 0) {\n    throw new MaterializeError(`git commit failed: ${commit.stderr.trim() || commit.stdout.trim()}`, 'commit-failed');\n  }\n\n  return { committed: true };\n}\n\n// ---------------------------------------------------------------------------\n// Phase 2 — worktree / branch lifecycle\n//\n// Each unit of work gets its own branch + working tree inside the same sandbox\n// as the base checkout. The worktree path is always computed server-side from a\n// sanitized branch name; client input never reaches a filesystem path.\n// ---------------------------------------------------------------------------\n\n/** Error raised when a worktree cannot be created/reused inside the sandbox. */\nexport class WorktreeError extends Error {\n  constructor(\n    message: string,\n    readonly code: 'invalid-branch' | 'worktree-failed' | 'setup-failed',\n  ) {\n    super(message);\n    this.name = 'WorktreeError';\n  }\n}\n\n/**\n * Reduce a (already ref-validated) branch name to a filesystem-safe directory\n * segment for the worktree path: slashes/dots/unsafe chars collapsed to `-`.\n * This only affects the *directory name*, never the git branch itself.\n *\n * Sanitization is lossy (e.g. `feat/a` and `feat-a` both reduce to `feat-a`),\n * so an 8-char hash of the original branch is appended whenever the sanitized\n * form differs from the input. That keeps clean names (`main`) readable while\n * guaranteeing distinct branches never share a worktree directory.\n */\nexport function safeBranchDir(branch: string): string {\n  const sanitized =\n    branch\n      .replace(/[^A-Za-z0-9._-]+/g, '-')\n      .replace(/\\/+/g, '-')\n      .replace(/^[-.]+|[-.]+$/g, '')\n      .slice(0, 100) || 'work';\n  if (sanitized === branch) return sanitized;\n  const hash = createHash('sha256').update(branch).digest('hex').slice(0, 8);\n  return `${sanitized}-${hash}`;\n}\n\n/**\n * Compute the absolute worktree path for a branch, server-side only. Worktrees\n * live alongside the repo checkout under a sibling `worktrees/` directory so the\n * repo's `.git` is shared. Never derived from client-supplied paths.\n */\nexport function computeWorktreePath(repoWorkdir: string, branch: string): string {\n  const parent = repoWorkdir.replace(/\\/+$/, '').split('/').slice(0, -1).join('/') || '';\n  return `${parent}/worktrees/${safeBranchDir(branch)}`;\n}\n\nexport interface EnsureWorktreeResult {\n  worktreePath: string;\n  branch: string;\n  baseBranch: string;\n  /** True when an existing worktree was reused rather than freshly created. */\n  reused: boolean;\n}\n\n/**\n * Create (or reuse) a git worktree + branch inside the sandbox for a unit of\n * work. Idempotent: if a worktree already exists at the computed path it is\n * reused. The branch is created from the freshly fetched `origin/<baseBranch>`\n * — never the sandbox's possibly stale local ref — so new worktrees always\n * start from the latest remote state.\n *\n * @param sandbox       live sandbox containing the base checkout\n * @param repoWorkdir   the base repo checkout path inside the sandbox\n * @param branch        the feature branch (ref-validated server-side)\n * @param baseBranch    the branch to fork from (ref-validated; defaults to the repo's default branch)\n * @param token         short-lived installation token used only for the base-branch fetch\n * @param repoFullName  `owner/repo` used to build the tokenized remote URL\n */\nexport async function ensureWorktree(\n  sandbox: MaterializationSandbox,\n  repoWorkdir: string,\n  {\n    branch,\n    baseBranch,\n    token,\n    repoFullName,\n  }: { branch: string; baseBranch: string; token: string; repoFullName: string },\n): Promise<EnsureWorktreeResult> {\n  if (!isValidGitRef(branch)) {\n    throw new WorktreeError(`Invalid branch name '${branch}'.`, 'invalid-branch');\n  }\n  if (!isValidGitRef(baseBranch)) {\n    throw new WorktreeError(`Invalid base branch name '${baseBranch}'.`, 'invalid-branch');\n  }\n\n  const worktreePath = computeWorktreePath(repoWorkdir, branch);\n\n  // Idempotent reuse: a worktree already checked out at this path has a `.git`\n  // file (worktrees use a gitfile, not a directory). Reuse it as-is.\n  const exists = await sh(sandbox, `test -e ${shellQuote(`${worktreePath}/.git`)}`);\n  if (exists.exitCode === 0) {\n    return { worktreePath, branch, baseBranch, reused: true };\n  }\n\n  // Fetch the latest base ref from origin before forking. The explicit refspec\n  // updates `refs/remotes/origin/<base>` even when the checkout was created as\n  // a single-branch clone. The fetch needs the install token (the resting\n  // remote is tokenless), and a failure is a hard error — silently forking a\n  // stale local ref is worse than failing the request.\n  const baseRef = `origin/${baseBranch}`;\n  await withInstallToken(sandbox, repoWorkdir, repoFullName, token, async () => {\n    const fetch = await sh(\n      sandbox,\n      `git -C ${shellQuote(repoWorkdir)} fetch origin ${shellQuote(`+refs/heads/${baseBranch}:refs/remotes/${baseRef}`)}`,\n    );\n    if (fetch.exitCode !== 0) {\n      throw classifyGitFailure(fetch, 'pull-failed');\n    }\n  });\n\n  // Create the worktree. If the branch already exists, check it out into the\n  // worktree; otherwise create it from the fetched base. `git worktree add -B`\n  // creates-or-resets the branch to the base, which keeps this idempotent for a\n  // fresh worktree while still working when the branch already exists remotely.\n  // `--no-track` keeps the feature branch from tracking origin/<base>; pushes\n  // set their own upstream via `push -u`.\n  const add = await sh(\n    sandbox,\n    `git -C ${shellQuote(repoWorkdir)} worktree add --no-track -B ${shellQuote(branch)} ${shellQuote(worktreePath)} ${shellQuote(baseRef)}`,\n  );\n  if (add.exitCode !== 0) {\n    throw new WorktreeError(`git worktree add failed: ${add.stderr.trim() || add.stdout.trim()}`, 'worktree-failed');\n  }\n\n  return { worktreePath, branch, baseBranch, reused: false };\n}\n\n/**\n * Run the project's setup command (e.g. `pnpm i && pnpm build`) inside a\n * freshly created worktree. Called before the worktree is handed to any agent\n * run so the checkout is ready to build/test. A non-zero exit is a hard error —\n * starting agent work in a half-set-up tree is worse than failing the request.\n *\n * Security model: the command is intentionally arbitrary shell — that is the\n * feature (install deps, build, seed fixtures). It is only configurable by\n * authenticated org members (the settings route is gated by\n * `resolveOrgTenant` + org-scoped project lookup, with length and\n * control-character validation), and it executes exclusively inside the\n * project's isolated sandbox — the same environment where org members already\n * run arbitrary shell via the agent's command tool. It never runs on the web\n * server host, so it grants no privilege beyond what sandbox access already\n * provides.\n *\n * @param sandbox       live sandbox containing the worktree\n * @param worktreePath  the server-computed worktree path the command runs in\n * @param command       the org-configured setup shell command\n */\nexport async function runWorktreeSetup(\n  sandbox: MaterializationSandbox,\n  worktreePath: string,\n  command: string,\n): Promise<void> {\n  const result = await sh(sandbox, `cd ${shellQuote(worktreePath)} && { ${command}\\n}`, { phase: 'worktree setup' });\n  if (result.exitCode !== 0) {\n    const detail = (result.stderr.trim() || result.stdout.trim()).slice(-2000);\n    throw new WorktreeError(`Setup command failed (exit ${result.exitCode}): ${detail}`, 'setup-failed');\n  }\n}\n\n/**\n * Remove a worktree (and its local feature branch) from the sandbox. The\n * checkout is removed with `--force` — the caller owns confirming that any\n * uncommitted work in it can be discarded. Idempotent: a worktree whose\n * directory is already gone only has its metadata pruned.\n *\n * @param sandbox       live sandbox containing the base checkout\n * @param repoWorkdir   the base repo checkout path inside the sandbox\n * @param branch        the worktree's feature branch (ref-validated)\n * @param worktreePath  the persisted, server-computed worktree path\n */\nexport async function removeWorktree(\n  sandbox: MaterializationSandbox,\n  repoWorkdir: string,\n  { branch, worktreePath }: { branch: string; worktreePath: string },\n): Promise<void> {\n  if (!isValidGitRef(branch)) {\n    throw new WorktreeError(`Invalid branch name '${branch}'.`, 'invalid-branch');\n  }\n\n  const remove = await sh(\n    sandbox,\n    `git -C ${shellQuote(repoWorkdir)} worktree remove --force ${shellQuote(worktreePath)}`,\n  );\n  if (remove.exitCode !== 0) {\n    // Tolerate a checkout that's already gone (e.g. a fresh sandbox after\n    // re-provisioning): prune stale metadata and only fail when the directory\n    // still exists, meaning git genuinely refused to remove it.\n    await sh(sandbox, `git -C ${shellQuote(repoWorkdir)} worktree prune`);\n    const exists = await sh(sandbox, `test -e ${shellQuote(worktreePath)}`);\n    if (exists.exitCode === 0) {\n      throw new WorktreeError(\n        `git worktree remove failed: ${remove.stderr.trim() || remove.stdout.trim()}`,\n        'worktree-failed',\n      );\n    }\n  }\n\n  // Best-effort local branch cleanup; the branch may not exist locally anymore\n  // or may still be pushed remotely — neither should fail the removal.\n  await sh(sandbox, `git -C ${shellQuote(repoWorkdir)} branch -D ${shellQuote(branch)}`);\n}\n\n// ---------------------------------------------------------------------------\n// Phase 3 — `gh` CLI pull-request creation primitive\n//\n// PRs are opened from inside the sandbox with the GitHub CLI. `gh` must be\n// present in the sandbox template (preflighted only on the PR path so clone /\n// open still work when it is absent). The token is passed to `gh` via a\n// per-invocation `GH_TOKEN` env that is scoped to the single `gh` process and\n// never written to git config, a shell rc, or the VM's environment.\n// ---------------------------------------------------------------------------\n\nexport interface CreatePullRequestArgs {\n  /** Short-lived installation token, injected only into the `gh` process env. */\n  token: string;\n  /** Base branch the PR merges into. Ref-validated. */\n  base: string;\n  /** Head branch the PR is opened from. Ref-validated. */\n  head: string;\n  /** PR title. */\n  title: string;\n  /** PR body (optional). */\n  body?: string;\n}\n\nexport interface CreatePullRequestResult {\n  /** The PR URL parsed from `gh pr create` stdout. */\n  url: string;\n}\n\n/**\n * Preflight that `gh` is installed in the sandbox. Only called on the PR path so\n * a missing `gh` never blocks clone/open. Surfaces an actionable error naming\n * the sandbox template requirement.\n */\nasync function assertGhAvailable(sandbox: MaterializationSandbox): Promise<void> {\n  const version = await sh(sandbox, 'gh --version');\n  if (version.exitCode !== 0) {\n    throw new MaterializeError(\n      'The GitHub CLI (gh) is not installed in the sandbox. The sandbox template must include gh to open pull requests.',\n      'gh-missing',\n    );\n  }\n}\n\n/** Match the first GitHub PR URL in `gh pr create` output. */\nfunction parsePullRequestUrl(stdout: string): string | undefined {\n  const match = stdout.match(/https:\\/\\/github\\.com\\/[^\\s]+\\/pull\\/\\d+/);\n  return match?.[0];\n}\n\n/**\n * Open a pull request from inside the sandbox via `gh pr create`. The token is\n * passed only through a per-invocation `GH_TOKEN` env scoped to the single `gh`\n * process (never persisted), all arguments are shell-quoted, and the resulting\n * PR URL is parsed from stdout.\n *\n * @param sandbox live sandbox containing the checkout\n * @param workdir the worktree (or repo) path the PR head branch is checked out in\n */\nexport async function createPullRequest(\n  sandbox: MaterializationSandbox,\n  workdir: string,\n  { token, base, head, title, body }: CreatePullRequestArgs,\n): Promise<CreatePullRequestResult> {\n  if (!isValidGitRef(base)) {\n    throw new MaterializeError(`Refusing to open PR: invalid base branch '${base}'.`, 'pr-failed');\n  }\n  if (!isValidGitRef(head)) {\n    throw new MaterializeError(`Refusing to open PR: invalid head branch '${head}'.`, 'pr-failed');\n  }\n\n  await assertGhAvailable(sandbox);\n\n  // GH_TOKEN is prefixed inline so it is exported only to the single `gh`\n  // process and never to the wider shell session, git config, or VM env. `gh`\n  // is run from inside the checkout so it targets the correct repo/head branch.\n  const ghCommand = [\n    `GH_TOKEN=${shellQuote(token)} gh pr create`,\n    `--base ${shellQuote(base)}`,\n    `--head ${shellQuote(head)}`,\n    `--title ${shellQuote(title)}`,\n    `--body ${shellQuote(body ?? '')}`,\n  ].join(' ');\n  const script = `cd ${shellQuote(workdir)} && ${ghCommand}`;\n\n  const result = await sh(sandbox, script);\n  if (result.exitCode !== 0) {\n    const classified = classifyGitFailure(result, 'push-failed');\n    if (classified.code === 'egress-blocked') {\n      throw classified;\n    }\n    throw new MaterializeError(`gh pr create failed: ${result.stderr.trim() || result.stdout.trim()}`, 'pr-failed');\n  }\n\n  const url = parsePullRequestUrl(result.stdout);\n  if (!url) {\n    throw new MaterializeError(\n      `gh pr create succeeded but no PR URL was found in its output: ${result.stdout.trim()}`,\n      'pr-failed',\n    );\n  }\n\n  return { url };\n}\n","/**\n * Project sandbox fleet: provisioning, reattach, teardown, and budgeting.\n *\n * Server-hosted projects never run on the web host itself. Each project gets\n * its own isolated sandbox (a `WorkspaceSandbox`, e.g. a Railway VM) `clone()`d\n * from the machine the factory was configured with. This module owns everything\n * about that fleet — which provider is active, where checkouts live inside a\n * sandbox, the idle window, the per-replica budget, and the\n * provision/reattach/teardown lifecycle — but knows nothing about what runs\n * inside a sandbox (git materialization lives with its feature, e.g. the\n * GitHub integration's `sandbox.ts`).\n *\n * The fleet is constructed once at boot with the machine config (or none, when\n * sandboxes are disabled) and handed to consumers — no global registry.\n * Persistence of the provider's reattach id is delegated to the caller via\n * {@link SandboxBindingStore}, so the fleet stays storage-agnostic. Tests can\n * swap the low-level construction via {@link SandboxFleet.setFactory}.\n */\n\nimport path from 'node:path';\n\nimport type { WorkspaceSandbox } from '@mastra/core/workspace';\n\n/** Minimal command result shape sandbox consumers depend on. */\nexport interface SandboxCommandResult {\n  exitCode: number;\n  stdout: string;\n  stderr: string;\n}\n\n/**\n * Minimal live-sandbox surface fleet consumers need: an id, a way to start it,\n * a way to learn the provider's reattach id, and command execution.\n */\nexport interface MaterializationSandbox {\n  readonly id: string;\n  start(): Promise<void>;\n  getInfo(): Promise<{ metadata?: Record<string, unknown> }>;\n  executeCommand(\n    command: string,\n    args?: string[],\n    options?: { timeout?: number; env?: Record<string, string | undefined> },\n  ): Promise<SandboxCommandResult>;\n  /** Update an environment variable for future commands in this sandbox. */\n  setEnvironmentVariable?(name: string, value: string): void;\n  /** Tear down the underlying VM. Optional: providers without it are no-ops. */\n  stop?(): Promise<void>;\n}\n\n/** Options for building (or reattaching) one sandbox. */\nexport interface SandboxCreateOptions {\n  /** Reattach to this existing provider VM instead of provisioning a new one. */\n  providerSandboxId?: string;\n  /** Environment variables baked into the sandbox. */\n  env?: Record<string, string>;\n  /** Provider working directory for this sandbox. */\n  workingDirectory?: string;\n  /** Idle teardown window (minutes). The provider stops the VM after this idle period. */\n  idleTimeoutMinutes?: number;\n  /** Provider checkpoint used to seed and preserve this sandbox's filesystem. */\n  checkpointName?: string;\n}\n\n/**\n * A coarse-grained step of the sandbox-preparation flow, reported as it happens\n * so the UI can show the user what the server is doing instead of a static\n * \"Preparing…\" toast. `phase` is a stable machine token; `message` is\n * user-facing copy.\n */\nexport interface PrepareProgress {\n  phase: 'reattaching' | 'provisioning' | 'preparing-workspace' | 'cloning' | 'pulling' | 'finalizing' | 'done';\n  message: string;\n}\n\n/** Callback invoked with each preparation step. Best-effort; never throws. */\nexport type ProgressFn = (event: PrepareProgress) => void;\n\n/** Invoke a progress callback without letting it break the actual work. */\nexport function reportProgress(onProgress: ProgressFn | undefined, event: PrepareProgress): void {\n  if (!onProgress) return;\n  try {\n    onProgress(event);\n  } catch {\n    // Progress reporting must never break the actual work.\n  }\n}\n\n/**\n * Factory that builds a (not-yet-started) sandbox. When `providerSandboxId` is\n * provided the sandbox should reattach to that existing VM instead of\n * provisioning a new one.\n */\nexport type SandboxFactory = (opts: SandboxCreateOptions) => MaterializationSandbox;\n\n/** Raised when provisioning would exceed the per-replica sandbox budget. */\nexport class SandboxBudgetError extends Error {\n  readonly code = 'sandbox-budget-exceeded' as const;\n  constructor(readonly max: number) {\n    super(\n      `Sandbox budget exceeded: this server already has ${max} active sandbox(es), ` +\n        `the configured per-replica maximum. Close an existing repository's sandbox and try again.`,\n    );\n    this.name = 'SandboxBudgetError';\n  }\n}\n\n/** Optional knobs for provisioning/reattaching one sandbox. */\nexport interface EnsureSandboxOptions {\n  /** Provider working directory for this sandbox. */\n  workingDirectory?: string;\n}\n\n/**\n * Where a feature persists its sandbox binding. The fleet reads the stored\n * reattach id and writes updates through this seam so it stays agnostic of\n * the owning table (GitHub projects today, anything else tomorrow).\n */\nexport interface SandboxBindingStore {\n  /** Stored provider reattach id from a previous provisioning, if any. */\n  readonly sandboxId: string | null;\n  /** Provider checkpoint used to seed and preserve this sandbox's filesystem. */\n  readonly checkpointName?: string;\n  /** Persist a freshly provisioned provider id, or clear a stale one with `null`. */\n  setSandboxId(id: string | null): Promise<void>;\n  /** Clear all stored sandbox state (reattach id + materialization mark) on teardown. */\n  clear(): Promise<void>;\n}\n\n/**\n * Adapt a cloned `WorkspaceSandbox` to the minimal surface this module needs.\n * Lifecycle goes through the `_`-prefixed wrappers when present (they add\n * status tracking and concurrency safety on `MastraSandbox` subclasses),\n * falling back to the plain methods for interface-only implementations.\n */\nfunction toMaterializationSandbox(\n  sandbox: WorkspaceSandbox,\n  initialEnvironment: Record<string, string> = {},\n): MaterializationSandbox {\n  if (typeof sandbox.executeCommand !== 'function') {\n    throw new Error(\n      `Sandbox provider '${sandbox.provider}' does not implement executeCommand() — cannot materialize repos.`,\n    );\n  }\n  const lifecycle = sandbox as { _start?(): Promise<void>; _stop?(): Promise<void> };\n  const environment = { ...initialEnvironment };\n  return {\n    id: sandbox.id,\n    start: async () => {\n      await (lifecycle._start ?? sandbox.start)?.call(sandbox);\n    },\n    getInfo: async () => (await sandbox.getInfo?.()) ?? {},\n    executeCommand: (command, args, options) =>\n      sandbox.executeCommand!(command, args, {\n        ...options,\n        env: { ...environment, ...options?.env },\n      }),\n    setEnvironmentVariable: (name, value) => {\n      environment[name] = value;\n    },\n    stop: async () => {\n      await (lifecycle._stop ?? sandbox.stop)?.call(sandbox);\n    },\n  };\n}\n\n/**\n * The provider's reattach id for a started sandbox. For Railway this is the\n * underlying `railwaySandboxId` in `getInfo().metadata`. Providers without a\n * provider-native id (e.g. local) reattach by construction id, so fall back\n * to the sandbox's own logical id.\n */\nasync function readProviderSandboxId(sandbox: MaterializationSandbox): Promise<string | undefined> {\n  const info = await sandbox.getInfo();\n  const id = info.metadata?.railwaySandboxId ?? info.metadata?.sandboxId;\n  return typeof id === 'string' ? id : sandbox.id;\n}\n\n/** Keep each path piece a single safe segment (no separators or traversal). */\nfunction sanitizeSegment(segment: string): string {\n  const cleaned = segment.replace(/[^A-Za-z0-9._-]/g, '-').replace(/^\\.+/, '');\n  return cleaned || 'repo';\n}\n\n/** Resolve a workdir under `root`, refusing any path that escapes the configured root. */\nexport function resolveContainedLocalWorkdir(root: string, ...segments: string[]): string {\n  const resolvedRoot = path.resolve(root);\n  const resolved = path.resolve(resolvedRoot, ...segments);\n  if (resolved !== resolvedRoot && resolved.startsWith(`${resolvedRoot}${path.sep}`)) return resolved;\n  throw new Error(`Refusing to use local sandbox path outside configured root: ${resolved}`);\n}\n\n/**\n * Factory-resolved sandbox runtime the fleet is constructed with: the machine\n * projects clone their per-project sandboxes from, plus the knobs the factory\n * resolved around it.\n */\nexport interface SandboxFleetConfig {\n  /**\n   * Template machine (validated by the factory to implement `clone()`).\n   * Never started — acts purely as the credential/default holder that\n   * per-project sandboxes are cloned from.\n   */\n  machine: WorkspaceSandbox;\n  /** In-sandbox base directory repos check out under (no trailing slash). */\n  workdirBase: string;\n  /** Per-replica cap on concurrently provisioned sandboxes. 0 = unlimited. */\n  maxSandboxes?: number;\n}\n\n/**\n * The sandbox fleet for one deployment. Constructed once at boot — with a\n * config when a sandbox machine was configured, or without one when sandboxes\n * are disabled (every provisioning entry point then throws and\n * {@link enabled} reports `false` so features stay off).\n */\nexport class SandboxFleet {\n  readonly #config: SandboxFleetConfig | undefined;\n  #factory: SandboxFactory | undefined;\n  #liveCount = 0;\n\n  constructor(config?: SandboxFleetConfig) {\n    this.#config = config;\n  }\n\n  /**\n   * True when a sandbox machine was configured. The factory validates the\n   * machine implements `clone()` at boot, so a configured fleet is usable —\n   * sandbox-backed projects stay off only when the slot was omitted.\n   */\n  get enabled(): boolean {\n    return this.#config !== undefined;\n  }\n\n  /**\n   * Name of the active sandbox provider — the configured machine's `provider`\n   * discriminator (`'railway'`, `'local'`, …), or `'none'` when the fleet was\n   * constructed without a config. Diagnostic only; feature gating goes\n   * through {@link enabled}.\n   */\n  get provider(): string {\n    return this.#config?.machine.provider ?? 'none';\n  }\n\n  /**\n   * Idle teardown window for provisioned sandboxes, in minutes; defaults to 30.\n   * Read back from the machine's own config when it exposes one\n   * (Railway's `idleTimeoutMinutes`) — the knob lives on the sandbox, the\n   * fleet only needs it to schedule GC and stamp sandbox clones. Advisory:\n   * providers without idle GC ignore it, and a re-open detects a torn-down VM\n   * and re-provisions cleanly.\n   */\n  get idleMinutes(): number {\n    const machine = this.#config?.machine as { idleTimeoutMinutes?: unknown } | undefined;\n    const minutes = machine?.idleTimeoutMinutes;\n    return typeof minutes === 'number' && Number.isFinite(minutes) && minutes > 0 ? minutes : 30;\n  }\n\n  /**\n   * Per-replica cap on concurrently *provisioned* sandboxes. 0 means unlimited.\n   * This is a lightweight per-process budget to keep a single replica from\n   * exhausting provider quota — it is not a global, cross-replica scheduler\n   * (that is a deferred follow-up).\n   */\n  get maxSandboxes(): number {\n    return this.#config?.maxSandboxes ?? 0;\n  }\n\n  /**\n   * Count of sandboxes this fleet has freshly provisioned and not yet torn\n   * down. Reattaches to existing VMs do not count (they reuse an already-billed\n   * sandbox). Used to enforce {@link maxSandboxes}.\n   */\n  get liveCount(): number {\n    return this.#liveCount;\n  }\n\n  /** For tests: reset the live-sandbox counter to a known state. */\n  __resetLiveCount(value = 0): void {\n    this.#liveCount = value;\n  }\n\n  /** Override the sandbox factory (tests). */\n  setFactory(factory: SandboxFactory): void {\n    this.#factory = factory;\n  }\n\n  /** Reset to the default machine-cloning factory. */\n  resetFactory(): void {\n    this.#factory = undefined;\n  }\n\n  /**\n   * Compute the in-sandbox working directory for a repo: a nested\n   * `<base>/<owner>/<name>` layout under the factory-resolved checkout base.\n   * Nesting keeps same-name repos apart (`acme/api` vs `other/api`) — cloud\n   * sandboxes are one-per-project so it's merely tidy there, but local\n   * checkouts share one host root where it prevents collisions. Server-side\n   * only; never derived from client input.\n   */\n  computeWorkdir(repoFullName: string): string {\n    if (!this.#config) throw new Error('No sandbox configured');\n    const [owner, name] = repoFullName.split('/', 2);\n    return `${this.#config.workdirBase}/${sanitizeSegment(owner || 'unknown')}/${sanitizeSegment(name || 'repo')}`;\n  }\n\n  /**\n   * Compute the host working directory for a local GitHub session checkout.\n   * This is server-derived only: repo pieces are sanitized and the trusted\n   * session id is kept as a single path segment under the configured local root.\n   */\n  computeLocalSessionWorkdir(repoFullName: string, sessionId: string): string {\n    if (!this.#config) throw new Error('No sandbox configured');\n    if (this.#config.machine.provider !== 'local') {\n      throw new Error('Local session workdirs require the local sandbox provider');\n    }\n\n    const localRoot = (this.#config.machine as { workingDirectory?: unknown }).workingDirectory;\n    if (typeof localRoot !== 'string' || localRoot.length === 0) {\n      throw new Error('Local sandbox working directory is not configured');\n    }\n\n    const [owner, name] = repoFullName.split('/', 2);\n    return resolveContainedLocalWorkdir(\n      localRoot,\n      'github-sessions',\n      sanitizeSegment(owner || 'unknown'),\n      sanitizeSegment(name || 'repo'),\n      sanitizeSegment(sessionId),\n    );\n  }\n\n  /**\n   * Build a (not-yet-started) sandbox: the test-provided factory when set,\n   * otherwise a per-project clone of the configured machine. The stored id is\n   * passed both as the logical `id` (providers that reattach by construction\n   * id, e.g. local) and as the provider-native `sandboxId` hint (Railway) so\n   * reattach works across the provider matrix.\n   */\n  #build(opts: SandboxCreateOptions): MaterializationSandbox {\n    if (this.#factory) return this.#factory(opts);\n    if (!this.#config) throw new Error('No sandbox configured');\n    const clone = this.#config.machine.clone!({\n      ...(opts.providerSandboxId ? { id: opts.providerSandboxId, sandboxId: opts.providerSandboxId } : {}),\n      ...(opts.env ? { env: opts.env } : {}),\n      ...(opts.workingDirectory ? { workingDirectory: opts.workingDirectory } : {}),\n      ...(opts.idleTimeoutMinutes !== undefined ? { idleTimeoutMinutes: opts.idleTimeoutMinutes } : {}),\n      ...(opts.checkpointName ? { checkpointName: opts.checkpointName } : {}),\n    });\n    return toMaterializationSandbox(clone, opts.env);\n  }\n\n  /**\n   * Provision a new sandbox (persisting its provider id on first open) or\n   * reattach to the stored one. Returns a started, live sandbox.\n   */\n  async ensureSandbox(store: SandboxBindingStore, onProgress?: ProgressFn): Promise<MaterializationSandbox>;\n  async ensureSandbox(\n    store: SandboxBindingStore,\n    env?: Record<string, string>,\n    onProgress?: ProgressFn,\n    options?: EnsureSandboxOptions,\n  ): Promise<MaterializationSandbox>;\n  async ensureSandbox(\n    store: SandboxBindingStore,\n    envOrProgress?: Record<string, string> | ProgressFn,\n    progressOrOptions?: ProgressFn | EnsureSandboxOptions,\n    maybeOptions: EnsureSandboxOptions = {},\n  ): Promise<MaterializationSandbox> {\n    const env = typeof envOrProgress === 'function' ? undefined : envOrProgress;\n    const onProgress =\n      typeof envOrProgress === 'function' ? envOrProgress : (progressOrOptions as ProgressFn | undefined);\n    const options =\n      typeof envOrProgress === 'function'\n        ? ((progressOrOptions as EnsureSandboxOptions | undefined) ?? {})\n        : maybeOptions;\n    const idleTimeoutMinutes = this.idleMinutes;\n    const checkpointName = store.checkpointName;\n\n    // Reattach path: if we have a stored sandbox id, try to reattach. The VM may\n    // have been torn down by the provider's idle GC (or otherwise died), in which\n    // case `start()` fails. Recover by clearing the stale id and provisioning a\n    // fresh sandbox so the next open succeeds instead of being permanently wedged.\n    if (store.sandboxId) {\n      reportProgress(onProgress, { phase: 'reattaching', message: 'Reconnecting to your sandbox…' });\n      const reattached = this.#build({\n        providerSandboxId: store.sandboxId,\n        idleTimeoutMinutes,\n        ...(checkpointName ? { checkpointName } : {}),\n        ...(env ? { env } : {}),\n        ...(options.workingDirectory ? { workingDirectory: options.workingDirectory } : {}),\n      });\n      try {\n        await reattached.start();\n        return reattached;\n      } catch {\n        await store.setSandboxId(null);\n        // fall through to fresh provision below\n      }\n    }\n\n    // Fresh provision: enforce the per-replica budget before spending quota.\n    const max = this.maxSandboxes;\n    if (max > 0 && this.#liveCount >= max) {\n      throw new SandboxBudgetError(max);\n    }\n\n    reportProgress(onProgress, { phase: 'provisioning', message: 'Provisioning a new sandbox…' });\n    const sandbox = this.#build({\n      idleTimeoutMinutes,\n      ...(checkpointName ? { checkpointName } : {}),\n      ...(env ? { env } : {}),\n      ...(options.workingDirectory ? { workingDirectory: options.workingDirectory } : {}),\n    });\n    await sandbox.start();\n    this.#liveCount += 1;\n\n    const providerSandboxId = await readProviderSandboxId(sandbox);\n    if (providerSandboxId) {\n      await store.setSandboxId(providerSandboxId);\n    }\n\n    return sandbox;\n  }\n\n  /**\n   * Tear down a sandbox binding: stop the live VM (best-effort) and clear the\n   * persisted state through the binding store so the next open re-provisions\n   * cleanly. Decrements the per-replica live-sandbox counter.\n   *\n   * @param store   the binding to tear down\n   * @param sandbox an already-reattached live sandbox to stop, when available\n   */\n  async teardownSandbox(store: SandboxBindingStore, sandbox?: MaterializationSandbox): Promise<void> {\n    if (sandbox?.stop) {\n      try {\n        await sandbox.stop();\n      } catch {\n        // Best-effort: the VM may already be gone (idle GC). Still clear the binding.\n      }\n    }\n    if (store.sandboxId) {\n      if (this.#liveCount > 0) this.#liveCount -= 1;\n      await store.clear();\n    }\n  }\n\n  /**\n   * Reattach to an already-provisioned sandbox by its provider id and start it.\n   * Used by the workspace seam when opening a project that was already\n   * materialized (sandbox id + workdir carried on controller state), so no DB\n   * round-trip is needed.\n   */\n  async reattachSandbox(\n    providerSandboxId: string,\n    options: EnsureSandboxOptions = {},\n  ): Promise<MaterializationSandbox> {\n    const sandbox = this.#build({\n      providerSandboxId,\n      idleTimeoutMinutes: this.idleMinutes,\n      ...(options.workingDirectory ? { workingDirectory: options.workingDirectory } : {}),\n    });\n    await sandbox.start();\n    return sandbox;\n  }\n}\n"],"mappings":";AAmBA,SAAS,kBAAkB;;;ACA3B,OAAO,UAAU;AA2DV,SAAS,eAAe,YAAoC,OAA8B;AAC/F,MAAI,CAAC,WAAY;AACjB,MAAI;AACF,eAAW,KAAK;AAAA,EAClB,QAAQ;AAAA,EAER;AACF;;;AD1CA,SAAS,aAAa,KAA+B,SAA2D;AAC9G,SAAO;AAAA,IACL,WAAW,IAAI;AAAA,IACf,cAAc,QACZ,OAAO,OAAO,QAAQ,aAAa,EAAE,IAAI,IAAI,GAAG,CAAC,IAAI,QAAQ,aAAa,EAAE,IAAI,IAAI,IAAI,WAAW,GAAG,CAAC;AAAA,IACzG,OAAO,MAAM,QAAQ,aAAa,EAAE,IAAI,IAAI,GAAG,CAAC;AAAA,EAClD;AACF;AAMA,eAAsB,qBAAqB,SAMP;AAClC,QAAM,EAAE,OAAO,KAAK,SAAS,OAAO,WAAW,IAAI;AACnD,SAAO,MAAM,cAAc,aAAa,KAAK,OAAO,GAAG,EAAE,UAAU,MAAM,GAAG,UAAU;AACxF;AAUA,eAAsB,uBAAuB,SAK3B;AAChB,QAAM,EAAE,OAAO,KAAK,SAAS,QAAQ,IAAI;AACzC,SAAO,MAAM,gBAAgB,aAAa,KAAK,OAAO,GAAG,OAAO;AAClE;AASO,SAAS,WAAW,OAAuB;AAEhD,SAAO,MAAM,MAAM,MAAM,GAAG,EAAE,KAAK,OAAO,IAAI;AAChD;AAQA,IAAM,6BAA6B,KAAK;AAEjC,IAAM,8BAA8B,IAAI;AAU/C,eAAe,GACb,SACA,QACA,UAAqB,CAAC,GACS;AAC/B,QAAM,YAAY,QAAQ,aAAa;AACvC,MAAI;AACJ,QAAM,YAAY,IAAI,QAAe,CAAC,GAAG,WAAW;AAClD,YAAQ,WAAW,MAAM;AACvB,YAAM,QAAQ,QAAQ,QAAQ,WAAW,QAAQ,KAAK,KAAK;AAC3D,aAAO,IAAI,MAAM,mCAAmC,KAAK,MAAM,YAAY,GAAI,CAAC,IAAI,KAAK,GAAG,CAAC;AAAA,IAC/F,GAAG,SAAS;AACZ,UAAM,QAAQ;AAAA,EAChB,CAAC;AACD,MAAI;AAGF,WAAO,MAAM,QAAQ,KAAK,CAAC,QAAQ,eAAe,MAAM,CAAC,MAAM,MAAM,GAAG,EAAE,SAAS,UAAU,CAAC,GAAG,SAAS,CAAC;AAAA,EAC7G,UAAE;AACA,iBAAa,KAAK;AAAA,EACpB;AACF;AAGO,IAAM,mBAAN,cAA+B,MAAM;AAAA,EAC1C,YACE,SACS,MAST;AACA,UAAM,OAAO;AAVJ;AAWT,SAAK,OAAO;AAAA,EACd;AAAA,EAZW;AAab;AAMA,SAAS,SAAS,cAAsB,OAAuB;AAC7D,SAAO,0BAA0B,KAAK,eAAe,YAAY;AACnE;AAEA,SAAS,SAAS,cAA8B;AAC9C,SAAO,sBAAsB,YAAY;AAC3C;AAcA,eAAsB,gBAAgB,SAWpB;AAChB,QAAM,EAAE,KAAK,YAAY,UAAU,SAAS,OAAO,SAAS,WAAW,IAAI;AAC3E,QAAM,UAAU,WAAW;AAC3B,QAAM,OAAO,SAAS;AAKtB,MAAI,CAAC,qBAAqB,KAAK,IAAI,GAAG;AACpC,UAAM,IAAI,iBAAiB,oDAAoD,IAAI,MAAM,cAAc;AAAA,EACzG;AACA,MAAI,CAAC,qBAAqB,KAAK,SAAS,aAAa,GAAG;AACtD,UAAM,IAAI;AAAA,MACR,oDAAoD,SAAS,aAAa;AAAA,MAC1E;AAAA,IACF;AAAA,EACF;AAGA,QAAM,aAAa,MAAM,GAAG,SAAS,eAAe;AACpD,MAAI,WAAW,aAAa,GAAG;AAC7B,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAU,SAAS,MAAM,KAAK;AAUpC,QAAM,sBAAsB,MAAM,oBAAoB,SAAS,SAAS,IAAI;AAE5E,MAAI,YAAY;AAChB,MAAI;AACF,QAAI,CAAC,qBAAqB;AAIxB,qBAAe,YAAY;AAAA,QACzB,OAAO;AAAA,QACP,SAAS,WAAW,IAAI;AAAA,MAC1B,CAAC;AACD,YAAM,QAAQ,MAAM;AAAA,QAClB;AAAA,QACA,gDAAgD,WAAW,SAAS,aAAa,CAAC,IAAI,WAAW,OAAO,CAAC,IAAI,WAAW,OAAO,CAAC;AAAA,QAChI,EAAE,OAAO,mBAAmB;AAAA,MAC9B;AACA,UAAI,MAAM,aAAa,GAAG;AACxB,cAAM,mBAAmB,OAAO,cAAc;AAAA,MAChD;AAAA,IACF,OAAO;AAEL,qBAAe,YAAY,EAAE,OAAO,WAAW,SAAS,YAAY,IAAI,+BAA0B,CAAC;AACnG,YAAM,SAAS,MAAM,GAAG,SAAS,UAAU,WAAW,OAAO,CAAC,0BAA0B,WAAW,OAAO,CAAC,EAAE;AAC7G,UAAI,OAAO,aAAa,GAAG;AACzB,cAAM,IAAI,iBAAiB,6BAA6B,OAAO,MAAM,IAAI,aAAa;AAAA,MACxF;AACA,YAAM,OAAO,MAAM,GAAG,SAAS,UAAU,WAAW,OAAO,CAAC,mBAAmB,EAAE,OAAO,kBAAkB,CAAC;AAC3G,UAAI,KAAK,aAAa,GAAG;AACvB,cAAM,mBAAmB,MAAM,aAAa;AAAA,MAC9C;AAAA,IACF;AACA,gBAAY;AAAA,EACd,UAAE;AAMA,UAAM,YAAY,SAAS,SAAS,MAAM,SAAS;AAAA,EACrD;AAGA,iBAAe,YAAY,EAAE,OAAO,cAAc,SAAS,6BAAwB,CAAC;AACpF,QAAM,QAAQ,iBAAiB,EAAE,IAAI,WAAW,GAAG,CAAC;AACtD;AAGA,eAAsB,sBACpB,SACA,SACA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GACe;AACf,MAAI,CAAC,cAAc,MAAM,KAAK,CAAC,cAAc,UAAU,GAAG;AACxD,UAAM,IAAI,iBAAiB,6DAA6D,cAAc;AAAA,EACxG;AAEA,QAAM,UAAU,MAAM,GAAG,SAAS,UAAU,WAAW,OAAO,CAAC,wBAAwB;AACvF,MAAI,QAAQ,aAAa,KAAK,QAAQ,OAAO,KAAK,MAAM,OAAQ;AAEhE,QAAM,QAAQ,MAAM;AAAA,IAClB;AAAA,IACA,UAAU,WAAW,OAAO,CAAC,yCAAyC,WAAW,MAAM,CAAC;AAAA,EAC1F;AACA,MAAI,MAAM,aAAa,GAAG;AACxB,UAAM,WAAW,MAAM,GAAG,SAAS,UAAU,WAAW,OAAO,CAAC,aAAa,WAAW,MAAM,CAAC,EAAE;AACjG,QAAI,SAAS,aAAa,EAAG,OAAM,mBAAmB,UAAU,cAAc;AAC9E;AAAA,EACF;AAEA,QAAM,UAAU,SAAS,cAAc,KAAK;AAC5C,MAAI;AACF,UAAM,SAAS,MAAM,GAAG,SAAS,UAAU,WAAW,OAAO,CAAC,0BAA0B,WAAW,OAAO,CAAC,EAAE;AAC7G,QAAI,OAAO,aAAa,EAAG,OAAM,mBAAmB,QAAQ,aAAa;AACzE,UAAM,QAAQ,MAAM;AAAA,MAClB;AAAA,MACA,UAAU,WAAW,OAAO,CAAC,iBAAiB,WAAW,UAAU,CAAC,cAAc,WAAW,OAAO,CAAC,gBAAgB,WAAW,MAAM,CAAC;AAAA,MACvI,EAAE,WAAW,6BAA6B,OAAO,kBAAkB;AAAA,IACrE;AACA,QAAI,MAAM,aAAa,EAAG,OAAM,mBAAmB,OAAO,cAAc;AAAA,EAC1E,UAAE;AACA,UAAM,GAAG,SAAS,UAAU,WAAW,OAAO,CAAC,0BAA0B,WAAW,SAAS,YAAY,CAAC,CAAC,EAAE;AAAA,EAC/G;AACF;AAOA,eAAe,oBACb,SACA,SACA,cACkB;AAClB,QAAM,SAAS,MAAM,GAAG,SAAS,UAAU,WAAW,OAAO,CAAC,wBAAwB;AACtF,MAAI,OAAO,aAAa,EAAG,QAAO;AAClC,QAAM,MAAM,OAAO,OAAO,KAAK,EAAE,YAAY;AAC7C,QAAM,SAAS,cAAc,aAAa,YAAY,CAAC;AACvD,SAAO,IAAI,SAAS,GAAG,MAAM,MAAM,KAAK,IAAI,SAAS,MAAM;AAC7D;AASA,eAAe,YACb,SACA,SACA,cACA,cACe;AACf,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA,UAAU,WAAW,OAAO,CAAC,0BAA0B,WAAW,SAAS,YAAY,CAAC,CAAC;AAAA,EAC3F;AACA,MAAI,OAAO,aAAa,KAAK,cAAc;AACzC,UAAM,IAAI;AAAA,MACR,uDAAuD,OAAO,OAAO,KAAK,KAAK,OAAO,OAAO,KAAK,CAAC;AAAA,MACnG;AAAA,IACF;AAAA,EACF;AACF;AAMA,SAAS,mBACP,QACA,UACkB;AAClB,QAAM,SAAS,OAAO,UAAU;AAChC,MAAI,wFAAwF,KAAK,MAAM,GAAG;AACxG,WAAO,IAAI;AAAA,MACT;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,QAAM,OAAO,aAAa,iBAAiB,UAAU,aAAa,gBAAgB,SAAS;AAC3F,SAAO,IAAI,iBAAiB,OAAO,IAAI,YAAY,MAAM,IAAI,QAAQ;AACvE;AAgBO,SAAS,cAAc,OAAiC;AAC7D,SACE,OAAO,UAAU,YACjB,MAAM,SAAS,KACf,MAAM,UAAU;AAAA;AAAA,EAGhB,CAAC,MAAM,WAAW,GAAG,KACrB,qBAAqB,KAAK,KAAK;AAEnC;AAeO,SAAS,mBAAmB,UAAwD;AACzF,QAAM,SAAS,SAAS,SAAS,IAAI,KAAK;AAC1C,QAAM,QAAQ,SAAS,QAAQ,IAAI,KAAK,KAAK,SAAS;AACtD,QAAM,SACH,SAAS,SAAS,IAAI,KAAK,MAC3B,QAAQ,GAAG,KAAK,8BAA8B;AACjD,SAAO,EAAE,MAAM,MAAM;AACvB;AAMA,eAAsB,qBACpB,SACA,SACA,UACe;AACf,QAAM,EAAE,MAAM,MAAM,IAAI,mBAAmB,QAAQ;AACnD,QAAM,UAAU,MAAM,GAAG,SAAS,UAAU,WAAW,OAAO,CAAC,qBAAqB,WAAW,IAAI,CAAC,EAAE;AACtG,MAAI,QAAQ,aAAa,GAAG;AAC1B,UAAM,IAAI,iBAAiB,gCAAgC,QAAQ,OAAO,KAAK,CAAC,IAAI,eAAe;AAAA,EACrG;AACA,QAAM,WAAW,MAAM,GAAG,SAAS,UAAU,WAAW,OAAO,CAAC,sBAAsB,WAAW,KAAK,CAAC,EAAE;AACzG,MAAI,SAAS,aAAa,GAAG;AAC3B,UAAM,IAAI,iBAAiB,iCAAiC,SAAS,OAAO,KAAK,CAAC,IAAI,eAAe;AAAA,EACvG;AACF;AAYA,eAAsB,iBACpB,SACA,SACA,cACA,OACA,IACY;AACZ,MAAI,CAAC,qBAAqB,KAAK,YAAY,GAAG;AAC5C,UAAM,IAAI,iBAAiB,6CAA6C,YAAY,MAAM,aAAa;AAAA,EACzG;AAEA,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA,UAAU,WAAW,OAAO,CAAC,0BAA0B,WAAW,SAAS,cAAc,KAAK,CAAC,CAAC;AAAA,EAClG;AACA,MAAI,OAAO,aAAa,GAAG;AAEzB,UAAM,YAAY,SAAS,SAAS,cAAc,KAAK;AACvD,UAAM,IAAI,iBAAiB,6BAA6B,OAAO,OAAO,KAAK,CAAC,IAAI,aAAa;AAAA,EAC/F;AAEA,MAAI;AACF,WAAO,MAAM,GAAG;AAAA,EAClB,UAAE;AAIA,UAAM,YAAY,SAAS,SAAS,cAAc,IAAI;AAAA,EACxD;AACF;AAQA,eAAsB,WACpB,SACA,SACA,QACA,OACA,cACe;AACf,MAAI,CAAC,cAAc,MAAM,GAAG;AAC1B,UAAM,IAAI,iBAAiB,0CAA0C,MAAM,MAAM,aAAa;AAAA,EAChG;AAEA,QAAM,iBAAiB,SAAS,SAAS,cAAc,OAAO,YAAY;AACxE,UAAM,OAAO,MAAM,GAAG,SAAS,UAAU,WAAW,OAAO,CAAC,mBAAmB,WAAW,MAAM,CAAC,EAAE;AACnG,QAAI,KAAK,aAAa,GAAG;AACvB,YAAM,mBAAmB,MAAM,aAAa;AAAA,IAC9C;AAAA,EACF,CAAC;AACH;AAkBA,eAAsB,UACpB,SACA,SACA,SACA,UACuB;AACvB,QAAM,qBAAqB,SAAS,SAAS,QAAQ;AAErD,QAAM,MAAM,MAAM,GAAG,SAAS,UAAU,WAAW,OAAO,CAAC,SAAS;AACpE,MAAI,IAAI,aAAa,GAAG;AACtB,UAAM,IAAI,iBAAiB,mBAAmB,IAAI,OAAO,KAAK,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,eAAe;AAAA,EACzG;AAIA,QAAM,SAAS,MAAM,GAAG,SAAS,UAAU,WAAW,OAAO,CAAC,wBAAwB;AACtF,MAAI,OAAO,aAAa,GAAG;AACzB,WAAO,EAAE,WAAW,MAAM;AAAA,EAC5B;AAEA,QAAM,SAAS,MAAM,GAAG,SAAS,UAAU,WAAW,OAAO,CAAC,cAAc,WAAW,OAAO,CAAC,EAAE;AACjG,MAAI,OAAO,aAAa,GAAG;AACzB,UAAM,IAAI,iBAAiB,sBAAsB,OAAO,OAAO,KAAK,KAAK,OAAO,OAAO,KAAK,CAAC,IAAI,eAAe;AAAA,EAClH;AAEA,SAAO,EAAE,WAAW,KAAK;AAC3B;AAWO,IAAM,gBAAN,cAA4B,MAAM;AAAA,EACvC,YACE,SACS,MACT;AACA,UAAM,OAAO;AAFJ;AAGT,SAAK,OAAO;AAAA,EACd;AAAA,EAJW;AAKb;AAYO,SAAS,cAAc,QAAwB;AACpD,QAAM,YACJ,OACG,QAAQ,qBAAqB,GAAG,EAChC,QAAQ,QAAQ,GAAG,EACnB,QAAQ,kBAAkB,EAAE,EAC5B,MAAM,GAAG,GAAG,KAAK;AACtB,MAAI,cAAc,OAAQ,QAAO;AACjC,QAAM,OAAO,WAAW,QAAQ,EAAE,OAAO,MAAM,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,CAAC;AACzE,SAAO,GAAG,SAAS,IAAI,IAAI;AAC7B;AAOO,SAAS,oBAAoB,aAAqB,QAAwB;AAC/E,QAAM,SAAS,YAAY,QAAQ,QAAQ,EAAE,EAAE,MAAM,GAAG,EAAE,MAAM,GAAG,EAAE,EAAE,KAAK,GAAG,KAAK;AACpF,SAAO,GAAG,MAAM,cAAc,cAAc,MAAM,CAAC;AACrD;AAwBA,eAAsB,eACpB,SACA,aACA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAC+B;AAC/B,MAAI,CAAC,cAAc,MAAM,GAAG;AAC1B,UAAM,IAAI,cAAc,wBAAwB,MAAM,MAAM,gBAAgB;AAAA,EAC9E;AACA,MAAI,CAAC,cAAc,UAAU,GAAG;AAC9B,UAAM,IAAI,cAAc,6BAA6B,UAAU,MAAM,gBAAgB;AAAA,EACvF;AAEA,QAAM,eAAe,oBAAoB,aAAa,MAAM;AAI5D,QAAM,SAAS,MAAM,GAAG,SAAS,WAAW,WAAW,GAAG,YAAY,OAAO,CAAC,EAAE;AAChF,MAAI,OAAO,aAAa,GAAG;AACzB,WAAO,EAAE,cAAc,QAAQ,YAAY,QAAQ,KAAK;AAAA,EAC1D;AAOA,QAAM,UAAU,UAAU,UAAU;AACpC,QAAM,iBAAiB,SAAS,aAAa,cAAc,OAAO,YAAY;AAC5E,UAAM,QAAQ,MAAM;AAAA,MAClB;AAAA,MACA,UAAU,WAAW,WAAW,CAAC,iBAAiB,WAAW,eAAe,UAAU,iBAAiB,OAAO,EAAE,CAAC;AAAA,IACnH;AACA,QAAI,MAAM,aAAa,GAAG;AACxB,YAAM,mBAAmB,OAAO,aAAa;AAAA,IAC/C;AAAA,EACF,CAAC;AAQD,QAAM,MAAM,MAAM;AAAA,IAChB;AAAA,IACA,UAAU,WAAW,WAAW,CAAC,+BAA+B,WAAW,MAAM,CAAC,IAAI,WAAW,YAAY,CAAC,IAAI,WAAW,OAAO,CAAC;AAAA,EACvI;AACA,MAAI,IAAI,aAAa,GAAG;AACtB,UAAM,IAAI,cAAc,4BAA4B,IAAI,OAAO,KAAK,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,iBAAiB;AAAA,EACjH;AAEA,SAAO,EAAE,cAAc,QAAQ,YAAY,QAAQ,MAAM;AAC3D;AAsBA,eAAsB,iBACpB,SACA,cACA,SACe;AACf,QAAM,SAAS,MAAM,GAAG,SAAS,MAAM,WAAW,YAAY,CAAC,SAAS,OAAO;AAAA,IAAO,EAAE,OAAO,iBAAiB,CAAC;AACjH,MAAI,OAAO,aAAa,GAAG;AACzB,UAAM,UAAU,OAAO,OAAO,KAAK,KAAK,OAAO,OAAO,KAAK,GAAG,MAAM,IAAK;AACzE,UAAM,IAAI,cAAc,8BAA8B,OAAO,QAAQ,MAAM,MAAM,IAAI,cAAc;AAAA,EACrG;AACF;AAaA,eAAsB,eACpB,SACA,aACA,EAAE,QAAQ,aAAa,GACR;AACf,MAAI,CAAC,cAAc,MAAM,GAAG;AAC1B,UAAM,IAAI,cAAc,wBAAwB,MAAM,MAAM,gBAAgB;AAAA,EAC9E;AAEA,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA,UAAU,WAAW,WAAW,CAAC,4BAA4B,WAAW,YAAY,CAAC;AAAA,EACvF;AACA,MAAI,OAAO,aAAa,GAAG;AAIzB,UAAM,GAAG,SAAS,UAAU,WAAW,WAAW,CAAC,iBAAiB;AACpE,UAAM,SAAS,MAAM,GAAG,SAAS,WAAW,WAAW,YAAY,CAAC,EAAE;AACtE,QAAI,OAAO,aAAa,GAAG;AACzB,YAAM,IAAI;AAAA,QACR,+BAA+B,OAAO,OAAO,KAAK,KAAK,OAAO,OAAO,KAAK,CAAC;AAAA,QAC3E;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAIA,QAAM,GAAG,SAAS,UAAU,WAAW,WAAW,CAAC,cAAc,WAAW,MAAM,CAAC,EAAE;AACvF;AAmCA,eAAe,kBAAkB,SAAgD;AAC/E,QAAM,UAAU,MAAM,GAAG,SAAS,cAAc;AAChD,MAAI,QAAQ,aAAa,GAAG;AAC1B,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAGA,SAAS,oBAAoB,QAAoC;AAC/D,QAAM,QAAQ,OAAO,MAAM,0CAA0C;AACrE,SAAO,QAAQ,CAAC;AAClB;AAWA,eAAsB,kBACpB,SACA,SACA,EAAE,OAAO,MAAM,MAAM,OAAO,KAAK,GACC;AAClC,MAAI,CAAC,cAAc,IAAI,GAAG;AACxB,UAAM,IAAI,iBAAiB,6CAA6C,IAAI,MAAM,WAAW;AAAA,EAC/F;AACA,MAAI,CAAC,cAAc,IAAI,GAAG;AACxB,UAAM,IAAI,iBAAiB,6CAA6C,IAAI,MAAM,WAAW;AAAA,EAC/F;AAEA,QAAM,kBAAkB,OAAO;AAK/B,QAAM,YAAY;AAAA,IAChB,YAAY,WAAW,KAAK,CAAC;AAAA,IAC7B,UAAU,WAAW,IAAI,CAAC;AAAA,IAC1B,UAAU,WAAW,IAAI,CAAC;AAAA,IAC1B,WAAW,WAAW,KAAK,CAAC;AAAA,IAC5B,UAAU,WAAW,QAAQ,EAAE,CAAC;AAAA,EAClC,EAAE,KAAK,GAAG;AACV,QAAM,SAAS,MAAM,WAAW,OAAO,CAAC,OAAO,SAAS;AAExD,QAAM,SAAS,MAAM,GAAG,SAAS,MAAM;AACvC,MAAI,OAAO,aAAa,GAAG;AACzB,UAAM,aAAa,mBAAmB,QAAQ,aAAa;AAC3D,QAAI,WAAW,SAAS,kBAAkB;AACxC,YAAM;AAAA,IACR;AACA,UAAM,IAAI,iBAAiB,wBAAwB,OAAO,OAAO,KAAK,KAAK,OAAO,OAAO,KAAK,CAAC,IAAI,WAAW;AAAA,EAChH;AAEA,QAAM,MAAM,oBAAoB,OAAO,MAAM;AAC7C,MAAI,CAAC,KAAK;AACR,UAAM,IAAI;AAAA,MACR,iEAAiE,OAAO,OAAO,KAAK,CAAC;AAAA,MACrF;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,IAAI;AACf;","names":[]}

package/dist/integrations/platform/github/integration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"integration.d.ts","sourceRoot":"","sources":["../../../../src/integrations/platform/github/integration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAKpD,OAAO,KAAK,EAEV,MAAM,EAIP,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAuBV,cAAc,EACf,MAAM,0CAA0C,CAAC;AAClD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+CAA+C,CAAC;AAC9F,OAAO,KAAK,EAEV,0BAA0B,EAC3B,MAAM,iDAAiD,CAAC;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC9F,OAAO,KAAK,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAQ9G,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAQ/E,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AA4F9D,qBAAa,yBAA0B,YAAW,kBAAkB;;IAClE,QAAQ,CAAC,EAAE,YAAY;IAQvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAsHrB;IAEF,QAAQ,CAAC,cAAc,EAAE,cAAc,CAuErC;;IAUF,IAAI,OAAO,IAAI,0BAA0B,CAGxC;IAED,IAAI,oBAAoB,IAAI,0BAA0B,CAErD;IAED,IAAI,kBAAkB,IAAI,yBAAyB,CAKlD;IAuBD,UAAU,CAAC,EAAE,OAAO,EAAE,EAAE;QAAE,OAAO,EAAE,wBAAwB,CAAA;KAAE,GAAG,IAAI;IASpE,MAAM,CAAC,GAAG,EAAE,kBAAkB,GAAG,QAAQ,EAAE;IA+K3C,OAAO,CAAC,GAAG,EAAE,kBAAkB,GAAG,yBAAyB,EAAE;IAiB7D,YAAY,CAAC,EAAE,cAAc,EAAE,EAAE;QAAE,cAAc,EAAE,cAAc,CAAA;KAAE,GAAG,gBAAgB;IAIhF,gBAAgB,CAAC,EACrB,WAAW,EACX,cAAc,GACf,EAAE,UAAU,CAAC,WAAW,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAWrF,WAAW,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAWhC,mCAAmC,CACvC,eAAe,EAAE,MAAM,EACvB,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC;IAoB5C,qBAAqB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAcrE,qBAAqB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAa9D,cAAc,CAClB,eAAe,EAAE,MAAM,EACvB,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EAAE,GACf,OAAO,CAAC,MAAM,EAAE,CAAC;IASpB,sBAAsB,CAAC,eAAe,EAAE,MAAM,GAAG,UAAU,CAAC,iBAAiB,CAAC,wBAAwB,CAAC,CAAC;CA6WzG"}
+{"version":3,"file":"integration.d.ts","sourceRoot":"","sources":["../../../../src/integrations/platform/github/integration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAKpD,OAAO,KAAK,EAEV,MAAM,EAIP,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAwBV,cAAc,EACf,MAAM,0CAA0C,CAAC;AAClD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+CAA+C,CAAC;AAC9F,OAAO,KAAK,EAEV,0BAA0B,EAC3B,MAAM,iDAAiD,CAAC;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC9F,OAAO,KAAK,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAQ9G,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAQ/E,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAyH9D,qBAAa,yBAA0B,YAAW,kBAAkB;;IAClE,QAAQ,CAAC,EAAE,YAAY;IAYvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAsHrB;IAEF,QAAQ,CAAC,cAAc,EAAE,cAAc,CAoFrC;;IAUF,IAAI,OAAO,IAAI,0BAA0B,CAGxC;IAED,IAAI,oBAAoB,IAAI,0BAA0B,CAErD;IAED,IAAI,kBAAkB,IAAI,yBAAyB,CAKlD;IAuBD,UAAU,CAAC,EAAE,OAAO,EAAE,EAAE;QAAE,OAAO,EAAE,wBAAwB,CAAA;KAAE,GAAG,IAAI;IASpE,MAAM,CAAC,GAAG,EAAE,kBAAkB,GAAG,QAAQ,EAAE;IA+K3C,OAAO,CAAC,GAAG,EAAE,kBAAkB,GAAG,yBAAyB,EAAE;IAiB7D,YAAY,CAAC,EAAE,cAAc,EAAE,EAAE;QAAE,cAAc,EAAE,cAAc,CAAA;KAAE,GAAG,gBAAgB;IAIhF,gBAAgB,CAAC,EACrB,WAAW,EACX,cAAc,GACf,EAAE,UAAU,CAAC,WAAW,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAWrF,WAAW,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAWhC,mCAAmC,CACvC,eAAe,EAAE,MAAM,EACvB,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC;IAoB5C,qBAAqB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IA0BrE,qBAAqB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAa9D,cAAc,CAClB,eAAe,EAAE,MAAM,EACvB,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EAAE,GACf,OAAO,CAAC,MAAM,EAAE,CAAC;IASpB,sBAAsB,CAAC,eAAe,EAAE,MAAM,GAAG,UAAU,CAAC,iBAAiB,CAAC,wBAAwB,CAAC,CAAC;CA6WzG"}